Packages

@paramira/device-link

Links a browser or computer to your phone as a full device (like WhatsApp Web): a one-time code or QR, the phone's sync package sealed with a key that never touches the network, and session links for signed-in browsers.

License: AGPL-3.0-or-later

Source: packages/device-link

What it does

Links a browser or computer to your phone as a full device, the way WhatsApp Web does: the same trust as a second phone, unlike signing in to a third-party app (that's @paramira/auth-sdk).

  1. The new browser registers a link request with the directory and shows a QR code, or a short code to type. 2. The phone opens it, sees what's asking, and posts its sync package encrypted with a key that's inside the code. The key never goes over the network. 3. The new browser decrypts the package locally and imports it; the request is then deleted.

It also builds the session links that browsers signed in with the phone use. No new cryptography: it reuses @paramira/identity's AES-256-GCM.

AGPL-3.0-or-later.

Used by

Apps: abantu, companion, isoko-web, iwacu-nuxt

Packages: web-session

Uses