Remove em dashes across code and docs (house style)

Replace every em/en dash with context-appropriate punctuation (colon,
period, comma, or parentheses) across READMEs, CLI help, error and console
output, code comments, and test fixtures. No logic changed; test suites green.
Also replace the README demo-GIF placeholder with the real check output.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: Sero

.env.example

@@ -35,5 +35,5 @@ RATE_LIMIT_WINDOW_MS="60000"
 # Which origins may iframe the /embed widget. Comma/space-separated list of
 # origins, e.g. "https://acme.com https://www.acme.com".
 # Leave empty for the safe default ('self' only). Set "*" to allow any origin
-# (wide open — opt-in only).
+# (wide open, opt-in only).
 EMBED_ALLOWED_ORIGINS=""

CONTRIBUTING.md

@@ -1,6 +1,6 @@
 # Contributing to launchpad
 
-Thanks for your interest in improving `launchpad` — an open-source tool by [Martello Systems](https://martellosystems.com).
+Thanks for your interest in improving `launchpad`, an open-source tool by [Martello Systems](https://martellosystems.com).
 
 ## Ways to contribute
 - 🐛 Report bugs via Issues

README.md

@@ -2,7 +2,7 @@
 
 [![License: Apache 2.0](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](LICENSE) [![Built by Martello Systems](https://img.shields.io/badge/built%20by-Martello%20Systems-0b0b14)](https://martellosystems.com)
 
-**A self-hosted viral waitlist in a box.** Signup, referral codes with attribution, position tracking + leaderboard, an admin dashboard, an embeddable widget, and email automation — all in one deployable Next.js app. This is the thing you deploy, not a template you assemble.
+**A self-hosted viral waitlist in a box.** Signup, referral codes with attribution, position tracking + leaderboard, an admin dashboard, an embeddable widget, and email automation, all in one deployable Next.js app. This is the thing you deploy, not a template you assemble.
 
 - **Referral loops built in.** Every signup gets a unique referral link. Each successful (verified) referral moves them up the line.
 - **Double opt-in.** Signups confirm their email via a verification link; only verified referrals count (anti-gaming). Toggle off if you don't want it.
@@ -90,8 +90,8 @@ The public `POST /api/signup` endpoint is rate-limited per client IP using an in
 | Method | Route | Auth | Description |
 |---|---|---|---|
 | `POST` | `/api/signup` | rate-limited | Body `{ email, referredByCode? }` → `{ referralCode, position, referralLink, pendingVerification }`. `409` on duplicate email, `429` over the rate limit. |
-| `GET`/`POST` | `/api/verify?token=…` | — | Confirms a signup. Redirects to `/?verified=1` (or `?verified=error`); returns JSON when `Accept: application/json`. |
-| `GET` | `/api/leaderboard?limit=10` | — | Top referrers by **verified** referrals (emails masked). |
+| `GET`/`POST` | `/api/verify?token=…` | none | Confirms a signup. Redirects to `/?verified=1` (or `?verified=error`); returns JSON when `Accept: application/json`. |
+| `GET` | `/api/leaderboard?limit=10` | none | Top referrers by **verified** referrals (emails masked). |
 | `GET` | `/api/admin/signups?take=&skip=` | Bearer `ADMIN_TOKEN` | Full signup list with referral counts + verified status. |
 
 Example:
@@ -109,23 +109,23 @@ curl localhost:3000/api/admin/signups \
 
 ## Pages
 
-- `/` — public waitlist page: signup form (auto-captures `?ref=CODE`), shows your position + referral link, and a top-referrers list.
-- `/admin` — token-prompted admin dashboard listing every signup.
-- `/embed` — chrome-free signup form for iframe embedding.
+- `/`: public waitlist page: signup form (auto-captures `?ref=CODE`), shows your position + referral link, and a top-referrers list.
+- `/admin`: token-prompted admin dashboard listing every signup.
+- `/embed`: chrome-free signup form for iframe embedding.
 
 ---
 
 ## Embed on any site
 
-**Option A — script tag (recommended).** Drop this anywhere; it injects a responsive iframe:
+**Option A: script tag (recommended).** Drop this anywhere; it injects a responsive iframe:
 
 ```html
 <script src="https://your-launchpad.example.com/embed.js"
         data-launchpad
         data-height="120"></script>
 ```
 
-**Option B — raw iframe.**
+**Option B: raw iframe.**
 
 ```html
 <iframe src="https://your-launchpad.example.com/embed"
@@ -137,7 +137,7 @@ curl localhost:3000/api/admin/signups \
 
 - **unset / empty** → `frame-ancestors 'self'` (safe default: only your own deployment may iframe it).
 - **`EMBED_ALLOWED_ORIGINS="https://acme.com https://www.acme.com"`** → `frame-ancestors 'self' https://acme.com https://www.acme.com`.
-- **`EMBED_ALLOWED_ORIGINS="*"`** → `frame-ancestors *` (any site — opt-in only).
+- **`EMBED_ALLOWED_ORIGINS="*"`** → `frame-ancestors *` (any site, opt-in only).
 
 Because it's read at request time, you can change the allowlist without rebuilding.
 
@@ -164,7 +164,7 @@ Coverage (54 tests) includes: signup + sequential positions, email normalization
 - **Rate limiting is in-memory and per-instance.** It's correct for a single self-hosted instance (the common case). Behind a load balancer / on serverless, each instance keeps its own window, so the effective global limit is roughly `limit × instances`. For multi-instance setups, back the same `RateLimiter` interface with a shared store (Redis/Upstash). v1 deliberately avoids that infra.
 - **Verification tokens don't expire.** A token is single-use (cleared on verify) but has no TTL in v1. Add an expiry check if you need one.
 - **Email masking on the public leaderboard** is best-effort obfuscation, not anonymization.
-- **Single-table model** — no multi-project/multi-tenant support (roadmap).
+- **Single-table model:** no multi-project/multi-tenant support (roadmap).
 
 ---
 
@@ -185,13 +185,13 @@ MIT © 2026 Martello Systems. See [LICENSE](./LICENSE).
 
 ---
 
-<sub>Built by **Martello Systems** — we design and ship AI-driven software.
+<sub>Built by **Martello Systems**. We design and ship AI-driven software.
 Part of the Martello open-source dev-tools family.</sub>
 
 ---
 
 ## Built by Martello Systems
 
-`launchpad` is part of the open-source toolkit from **[Martello Systems](https://martellosystems.com)** — we ship AI-built software, spec to delivery in days. If this saved you time, come [see what we do](https://martellosystems.com).
+`launchpad` is part of the open-source toolkit from **[Martello Systems](https://martellosystems.com)**. We ship AI-built software, spec to delivery in days. If this saved you time, come [see what we do](https://martellosystems.com).
 
 Licensed under the [Apache License 2.0](LICENSE).

agents/_main-session/reports/hook-log-2026-06-25.jsonl

@@ -0,0 +1 @@
+{"ts": "2026-06-25T00:35:24", "agent": "_main-session", "tool": "Bash", "decision": "allow", "reason": "main-session audit-only", "mode": "warn-only", "main_session": true, "tool_input": {"command": "cd ~/Dev/OpenSourceMartelloSystems\nMSG=\"Remove em dashes across code and docs (house style)\n\nReplace every em/en dash with context-appropriate punctuation (colon,\nperiod, comma, or parentheses) across READMEs, CLI help, error and console\noutput, code comments, and test fixtures. No logic changed; test suites green.\nAlso replace the README demo-GIF placeholder with the real check output.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\"\n\nfor r in envz launchpad agent-firewall spec-verify snapdb; do\n  cd ~/Dev/OpenSourceMartelloSystems/$r\n  git add -A\n  git commit -q -m \"$MSG\" && echo \"$r: committed\" || echo \"$r: nothing to commit\"\ndone\necho \"=== push ===\"\nfor r in envz launchpad agent-firewall spec-verify snapdb; do\n  cd ~/Dev/OpenSourceMartelloSystems/$r\n  git push -q origin \"$(git branch --show-current)\" && echo \"$r: pushed ✓\" || echo \"$r: PUSH FAILED\"\ndone", "description": "Commit and push em-dash purge across all 5 repos"}}

app/layout.tsx

@@ -2,7 +2,7 @@ import type { Metadata } from "next";
 import "./globals.css";
 
 export const metadata: Metadata = {
-  title: "Launchpad — Join the Waitlist",
+  title: "Launchpad: Join the Waitlist",
   description: "A self-hosted viral waitlist. Sign up and refer friends to move up.",
 };
 

app/page.tsx

@@ -23,14 +23,14 @@ export default async function Home({
   try {
     [total, board] = await Promise.all([totalSignups(prisma), leaderboard(prisma, 5)]);
   } catch {
-    /* DB not configured yet — page still renders the signup form */
+    /* DB not configured yet: page still renders the signup form */
   }
 
   return (
     <main className="mx-auto flex min-h-screen max-w-xl flex-col justify-center gap-10 px-6 py-16">
       {verified === "1" && (
         <div className="rounded-lg bg-green-50 p-4 text-center text-sm text-green-800">
-          Email confirmed — you&apos;re officially on the waitlist. 🎉
+          Email confirmed. You&apos;re officially on the waitlist. 🎉
         </div>
       )}
       {verified === "error" && (

components/SignupForm.tsx

@@ -77,7 +77,7 @@ export default function SignupForm({ compact = false }: { compact?: boolean }) {
         </div>
         <div className="space-y-2">
           <p className="text-sm text-neutral-600">
-            Share your link — every signup moves you up the list:
+            Share your link: every signup moves you up the list:
           </p>
           <div className="flex gap-2">
             <input

lib/mailer.ts

@@ -15,7 +15,7 @@ export interface Mailer {
 }
 
 /**
- * Console mailer — used when no RESEND_API_KEY is present (local dev/test).
+ * Console mailer, used when no RESEND_API_KEY is present (local dev/test).
  * Logs the message instead of sending. Never throws.
  */
 export class ConsoleMailer implements Mailer {
@@ -126,7 +126,7 @@ export function buildMilestoneEmail(params: {
   position: number;
 }): MailMessage {
   const subject = `You've referred ${params.referralCount} people!`;
-  const text = `Nice work — ${params.referralCount} referrals so far. You're now #${params.position} on the waitlist. Keep sharing!`;
+  const text = `Nice work. ${params.referralCount} referrals so far. You're now #${params.position} on the waitlist. Keep sharing!`;
   const html = `<div style="font-family:sans-serif;max-width:480px">
   <h2>Milestone reached!</h2>
   <p>You've referred <strong>${params.referralCount}</strong> people.</p>

lib/rate-limit.ts

@@ -7,7 +7,7 @@
 //   balancer, each instance keeps its own window, so the effective global limit
 //   is roughly (limit × instanceCount). For multi-instance setups, put a shared
 //   store (Redis/Upstash) behind this same interface. We deliberately avoid
-//   adding that infra to v1 — see README "Limitations".
+//   adding that infra to v1, see README "Limitations".
 //
 // Algorithm: fixed window per key. Each key tracks a count and the window's
 // reset timestamp. When the window elapses, the count resets. This is simpler

lib/waitlist.ts

@@ -95,7 +95,7 @@ export async function signup(
       where: { referralCode: input.referredByCode.trim() },
     });
     // A bad/unknown code is silently ignored (no attribution) rather than
-    // failing the signup — the person still wants to join.
+    // failing the signup: the person still wants to join.
   }
 
   // Pre-existing email check for a clean error (the unique constraint is the
@@ -170,7 +170,7 @@ export async function signup(
         }
       }
     } catch {
-      /* swallow — email is not critical to the signup transaction */
+      /* swallow: email is not critical to the signup transaction */
     }
   }
 
@@ -190,7 +190,7 @@ export async function signup(
 /**
  * Confirm a signup via its verification token. Marks the entry verified,
  * clears the single-use token, then (best-effort) sends the welcome
- * confirmation email and credits the referrer's milestone — because referral
+ * confirmation email and credits the referrer's milestone, because referral
  * credit only counts verified signups.
  *
  * Throws WaitlistError("INVALID_TOKEN") for an unknown/used token. Verifying an
@@ -213,7 +213,7 @@ export async function verifyEmail(
   }
 
   if (entry.verified) {
-    // Token still present but already verified — treat as idempotent success.
+    // Token still present but already verified: treat as idempotent success.
     return { id: entry.id, email: entry.email, alreadyVerified: true };
   }
 
@@ -236,7 +236,7 @@ export async function verifyEmail(
         await maybeSendMilestone(prisma, updated.referredById, opts.mailer);
       }
     } catch {
-      /* swallow — email is not critical to verification */
+      /* swallow: email is not critical to verification */
     }
   }
 
@@ -342,8 +342,8 @@ export async function leaderboard(
 
 /**
  * Send the milestone email if the referrer's referral count is exactly at a
- * multiple of the configured threshold (so it fires at 3, 6, 9, ... by default
- * — not on every referral after the first milestone).
+ * multiple of the configured threshold (so it fires at 3, 6, 9, ... by default,
+ * not on every referral after the first milestone).
  */
 async function maybeSendMilestone(
   prisma: PrismaClient,