import { sendSms } from '@linkdr/notify';

/**
 * SMS delivery for one-time codes.
 *
 * The transport itself now lives in @linkdr/notify, so the API package can
 * reach it too — a tRPC procedure cannot import from `apps/web`, and the sign-in
 * code and a "somebody wants to hire you" text have no business going out
 * through two different Twilio clients with two different failure policies.
 *
 * The copy stays here. This is the one message that is part of the auth flow
 * rather than part of the product, and it says things the others must not.
 */
export async function sendVerificationSms(to: string, code: string): Promise<void> {
  await sendSms(
    to,
    `${code} is your Linkdr code. It expires in 5 minutes. We will never ask you for it.`,
  );
}