@remcp/remcp 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Anton Baider
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,83 @@
+# ReMCP
+
+ReMCP is an open-source remote MCP bridge for computers you control. A local agent connects outbound to a ReMCP server and exposes filesystem, search, terminal and process tools through one authenticated remote MCP endpoint.
+
+**Hosted service:** https://remcp.delio24.com
+**MCP endpoint:** `https://remcp.delio24.com/mcp`
+
+## How it works
+
+```text
+ChatGPT / MCP client ── OAuth + HTTPS ──> ReMCP server
+                                           │
+                                           ├── WSS ──> laptop agent ──> local MCP
+                                           └── WSS ──> server agent ──> local MCP
+```
+
+The central service stores account/device metadata, hashed reusable credentials and OAuth state. Actual filesystem and process access stays on the paired computer.
+
+## Install
+
+Requires Node.js 22.5 or newer.
+
+```bash
+npx @remcp/remcp connect --server https://remcp.delio24.com --code YOUR_PAIRING_CODE --install
+```
+
+Generate the one-time pairing code after signing in at https://remcp.delio24.com.
+## CLI
+
+```text
+remcp connect   Pair this computer with a ReMCP server
+remcp start     Run the device agent in the foreground
+remcp status    Check the saved configuration and server
+remcp install   Install the user service where supported
+remcp uninstall Remove the installed user service
+```
+
+## Self-host the server
+
+```bash
+git clone https://github.com/antonbaider/remcp.git
+cd remcp
+cp .env.example .env
+# Fill in your public URL and Firebase Web App configuration.
+docker compose up -d --build
+```
+
+Put a TLS reverse proxy in front of ReMCP and proxy WebSocket upgrades for `/agent`. The example Compose file binds the application to localhost by default. Do not publish the internal application port directly unless you have deliberately secured it.
+
+ReMCP does **not** require a Firebase Admin service-account private key. Firebase ID tokens are verified using Google's public signing keys.
+
+## ChatGPT / remote MCP
+
+ReMCP exposes Streamable HTTP MCP at `/mcp`. Authentication uses authorization code + PKCE, Dynamic Client Registration, short-lived access tokens and rotating refresh tokens.
+
+The repository includes `chatgpt-app-submission.json` plus a reusable ReMCP operator skill for submission/testing workflows.
+## Security model
+
+- one independent credential per paired device;
+- device and refresh credentials are stored as one-way hashes server-side;
+- pairing codes are short-lived and single-use;
+- MCP sessions are bound to the authenticated account;
+- the device agent connects outbound over WSS;
+- write/process tools expose explicit MCP risk annotations;
+- the public review sandbox is isolated per authenticated user and intentionally limits terminal commands;
+- central Docker deployment runs read-only with dropped Linux capabilities in the supplied Compose configuration.
+
+See https://remcp.delio24.com/security for the hosted-service security overview.
+
+## Development
+
+```bash
+npm ci
+npm run check
+npm test
+npm audit --omit=dev
+```
+
+## License
+
+ReMCP is MIT licensed. `@wonderwhy-er/desktop-commander` is a separate MIT-licensed dependency; its notices are preserved in `THIRD_PARTY_NOTICES.md`.
+
+ReMCP does not require or depend on the proprietary Remote Desktop Commander hosted relay service.

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,7 @@
+# Third-party notices
+
+ReMCP uses `@wonderwhy-er/desktop-commander` as its local device MCP backend. Desktop Commander is MIT licensed.
+
+Copyright (c) 2024-2025 Eduard Ruzga and Desktop Commander Contributors.
+
+The upstream project is available at https://github.com/wonderwhy-er/DesktopCommanderMCP. ReMCP does not use or depend on the proprietary Remote Desktop Commander cloud relay.

package/bin/remcp.mjs

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import { main } from '../src/cli.mjs';
+main().catch(error => { console.error(`ReMCP: ${error.message}`); process.exit(1); });

package/chatgpt-app-submission.json

@@ -0,0 +1,356 @@
+{
+  "$schema": "https://developers.openai.com/apps-sdk/schemas/chatgpt-app-submission.v1.json",
+  "schema_version": 1,
+  "app_info": {
+    "display_name": "ReMCP",
+    "subtitle": "Control your own computers",
+    "description": "ReMCP lets authenticated users connect to computers they have paired and work with local files, directories, searches, terminal sessions, and processes through MCP. Each device uses a revocable credential and an outbound agent connection.",
+    "category": "DEVELOPER_TOOLS"
+  },
+  "tools": {
+    "list_devices": {
+      "annotations": {
+        "readOnlyHint": true,
+        "openWorldHint": false,
+        "destructiveHint": false
+      },
+      "justifications": {
+        "read_only_justification": "Only retrieves local device data or results and does not change persistent user state.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Does not delete, overwrite, revoke, terminate, or perform another irreversible action by itself."
+      }
+    },
+    "get_config": {
+      "annotations": {
+        "readOnlyHint": true,
+        "openWorldHint": false,
+        "destructiveHint": false
+      },
+      "justifications": {
+        "read_only_justification": "Only retrieves local device data or results and does not change persistent user state.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Does not delete, overwrite, revoke, terminate, or perform another irreversible action by itself."
+      }
+    },
+    "set_config_value": {
+      "annotations": {
+        "readOnlyHint": false,
+        "openWorldHint": false,
+        "destructiveHint": true
+      },
+      "justifications": {
+        "read_only_justification": "Creates, changes, stops, or controls local device state or a local execution session.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Can change security and access configuration on the selected computer."
+      }
+    },
+    "read_file": {
+      "annotations": {
+        "readOnlyHint": true,
+        "openWorldHint": false,
+        "destructiveHint": false
+      },
+      "justifications": {
+        "read_only_justification": "Only retrieves local device data or results and does not change persistent user state.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Does not delete, overwrite, revoke, terminate, or perform another irreversible action by itself."
+      }
+    },
+    "read_multiple_files": {
+      "annotations": {
+        "readOnlyHint": true,
+        "openWorldHint": false,
+        "destructiveHint": false
+      },
+      "justifications": {
+        "read_only_justification": "Only retrieves local device data or results and does not change persistent user state.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Does not delete, overwrite, revoke, terminate, or perform another irreversible action by itself."
+      }
+    },
+    "write_file": {
+      "annotations": {
+        "readOnlyHint": false,
+        "openWorldHint": false,
+        "destructiveHint": true
+      },
+      "justifications": {
+        "read_only_justification": "Creates, changes, stops, or controls local device state or a local execution session.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Can overwrite or append file content on the selected computer."
+      }
+    },
+    "write_pdf": {
+      "annotations": {
+        "readOnlyHint": false,
+        "openWorldHint": false,
+        "destructiveHint": true
+      },
+      "justifications": {
+        "read_only_justification": "Creates, changes, stops, or controls local device state or a local execution session.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Can replace PDF content or remove pages when editing a PDF."
+      }
+    },
+    "create_directory": {
+      "annotations": {
+        "readOnlyHint": false,
+        "openWorldHint": false,
+        "destructiveHint": false
+      },
+      "justifications": {
+        "read_only_justification": "Creates, changes, stops, or controls local device state or a local execution session.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Does not delete, overwrite, revoke, terminate, or perform another irreversible action by itself."
+      }
+    },
+    "list_directory": {
+      "annotations": {
+        "readOnlyHint": true,
+        "openWorldHint": false,
+        "destructiveHint": false
+      },
+      "justifications": {
+        "read_only_justification": "Only retrieves local device data or results and does not change persistent user state.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Does not delete, overwrite, revoke, terminate, or perform another irreversible action by itself."
+      }
+    },
+    "move_file": {
+      "annotations": {
+        "readOnlyHint": false,
+        "openWorldHint": false,
+        "destructiveHint": true
+      },
+      "justifications": {
+        "read_only_justification": "Creates, changes, stops, or controls local device state or a local execution session.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Moves or renames filesystem objects and may replace an intended path."
+      }
+    },
+    "start_search": {
+      "annotations": {
+        "readOnlyHint": false,
+        "openWorldHint": false,
+        "destructiveHint": false
+      },
+      "justifications": {
+        "read_only_justification": "Creates, changes, stops, or controls local device state or a local execution session.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Does not delete, overwrite, revoke, terminate, or perform another irreversible action by itself."
+      }
+    },
+    "get_more_search_results": {
+      "annotations": {
+        "readOnlyHint": true,
+        "openWorldHint": false,
+        "destructiveHint": false
+      },
+      "justifications": {
+        "read_only_justification": "Only retrieves local device data or results and does not change persistent user state.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Does not delete, overwrite, revoke, terminate, or perform another irreversible action by itself."
+      }
+    },
+    "stop_search": {
+      "annotations": {
+        "readOnlyHint": false,
+        "openWorldHint": false,
+        "destructiveHint": false
+      },
+      "justifications": {
+        "read_only_justification": "Creates, changes, stops, or controls local device state or a local execution session.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Does not delete, overwrite, revoke, terminate, or perform another irreversible action by itself."
+      }
+    },
+    "list_searches": {
+      "annotations": {
+        "readOnlyHint": true,
+        "openWorldHint": false,
+        "destructiveHint": false
+      },
+      "justifications": {
+        "read_only_justification": "Only retrieves local device data or results and does not change persistent user state.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Does not delete, overwrite, revoke, terminate, or perform another irreversible action by itself."
+      }
+    },
+    "get_file_info": {
+      "annotations": {
+        "readOnlyHint": true,
+        "openWorldHint": false,
+        "destructiveHint": false
+      },
+      "justifications": {
+        "read_only_justification": "Only retrieves local device data or results and does not change persistent user state.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Does not delete, overwrite, revoke, terminate, or perform another irreversible action by itself."
+      }
+    },
+    "edit_block": {
+      "annotations": {
+        "readOnlyHint": false,
+        "openWorldHint": false,
+        "destructiveHint": true
+      },
+      "justifications": {
+        "read_only_justification": "Creates, changes, stops, or controls local device state or a local execution session.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Changes existing file or document content on the selected computer."
+      }
+    },
+    "start_process": {
+      "annotations": {
+        "readOnlyHint": false,
+        "openWorldHint": true,
+        "destructiveHint": true
+      },
+      "justifications": {
+        "read_only_justification": "Creates, changes, stops, or controls local device state or a local execution session.",
+        "open_world_justification": "User-supplied process commands or input can contact external services or change external state.",
+        "destructive_justification": "Can execute commands that modify files, processes, configuration, or external systems."
+      }
+    },
+    "read_process_output": {
+      "annotations": {
+        "readOnlyHint": true,
+        "openWorldHint": false,
+        "destructiveHint": false
+      },
+      "justifications": {
+        "read_only_justification": "Only retrieves local device data or results and does not change persistent user state.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Does not delete, overwrite, revoke, terminate, or perform another irreversible action by itself."
+      }
+    },
+    "interact_with_process": {
+      "annotations": {
+        "readOnlyHint": false,
+        "openWorldHint": true,
+        "destructiveHint": true
+      },
+      "justifications": {
+        "read_only_justification": "Creates, changes, stops, or controls local device state or a local execution session.",
+        "open_world_justification": "User-supplied process commands or input can contact external services or change external state.",
+        "destructive_justification": "Can send commands or input to a process that performs irreversible actions."
+      }
+    },
+    "force_terminate": {
+      "annotations": {
+        "readOnlyHint": false,
+        "openWorldHint": false,
+        "destructiveHint": true
+      },
+      "justifications": {
+        "read_only_justification": "Creates, changes, stops, or controls local device state or a local execution session.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Force-stops a running terminal session."
+      }
+    },
+    "list_sessions": {
+      "annotations": {
+        "readOnlyHint": true,
+        "openWorldHint": false,
+        "destructiveHint": false
+      },
+      "justifications": {
+        "read_only_justification": "Only retrieves local device data or results and does not change persistent user state.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Does not delete, overwrite, revoke, terminate, or perform another irreversible action by itself."
+      }
+    },
+    "list_processes": {
+      "annotations": {
+        "readOnlyHint": true,
+        "openWorldHint": false,
+        "destructiveHint": false
+      },
+      "justifications": {
+        "read_only_justification": "Only retrieves local device data or results and does not change persistent user state.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Does not delete, overwrite, revoke, terminate, or perform another irreversible action by itself."
+      }
+    },
+    "kill_process": {
+      "annotations": {
+        "readOnlyHint": false,
+        "openWorldHint": false,
+        "destructiveHint": true
+      },
+      "justifications": {
+        "read_only_justification": "Creates, changes, stops, or controls local device state or a local execution session.",
+        "open_world_justification": "Operates on the paired computer or ReMCP session and does not itself publish or modify third-party internet state.",
+        "destructive_justification": "Terminates the selected operating-system process."
+      }
+    }
+  },
+  "test_cases": [
+    {
+      "description": "List the computers available to the signed-in ReMCP account.",
+      "user_prompt": "List my ReMCP devices and tell me which ones are online. Include the ReMCP Review Sandbox if it is available.",
+      "file_attachment_urls": null,
+      "tools_triggered": "list_devices",
+      "expected_output": "Returns devices available to the authenticated account and includes the isolated ReMCP Review Sandbox with device id review-sandbox.",
+      "expected_output_url": null
+    },
+    {
+      "description": "Browse a directory on a paired review computer.",
+      "user_prompt": "Using ReMCP device id review-sandbox, list the files in /workspace.",
+      "file_attachment_urls": null,
+      "tools_triggered": "list_directory",
+      "expected_output": "Returns the isolated sandbox directory entries without changing them.",
+      "expected_output_url": null
+    },
+    {
+      "description": "Read a text file from a paired review computer.",
+      "user_prompt": "Using ReMCP device id review-sandbox, read /workspace/README.txt and summarize it.",
+      "file_attachment_urls": null,
+      "tools_triggered": "read_file",
+      "expected_output": "Returns the seeded review-sandbox README content so it can be summarized.",
+      "expected_output_url": null
+    },
+    {
+      "description": "Create a new file on a paired review computer.",
+      "user_prompt": "Using ReMCP device id review-sandbox, create /workspace/review-note.txt containing exactly: ReMCP submission test.",
+      "file_attachment_urls": null,
+      "tools_triggered": "write_file",
+      "expected_output": "Creates the requested file only inside the authenticated reviewer sandbox and reports the write result.",
+      "expected_output_url": null
+    },
+    {
+      "description": "Run a harmless terminal command on a paired review computer.",
+      "user_prompt": "Using ReMCP device id review-sandbox, run pwd and show me the result.",
+      "file_attachment_urls": null,
+      "tools_triggered": "start_process",
+      "expected_output": "Runs the sandbox-safe command and returns /workspace; arbitrary terminal commands remain blocked in the review sandbox.",
+      "expected_output_url": null
+    }
+  ],
+  "negative_test_cases": [
+    {
+      "description": "Do not invoke ReMCP for general weather information.",
+      "user_prompt": "What will the weather be in Warsaw tomorrow?",
+      "file_attachment_urls": null,
+      "tools_triggered": null,
+      "expected_output": "ReMCP should not be invoked because the request does not involve a paired computer.",
+      "expected_output_url": null
+    },
+    {
+      "description": "Do not invoke ReMCP for standalone writing help.",
+      "user_prompt": "Draft a polite email asking my landlord to repair a leaking faucet.",
+      "file_attachment_urls": null,
+      "tools_triggered": null,
+      "expected_output": "ReMCP should not be invoked because no local computer action or data is needed.",
+      "expected_output_url": null
+    },
+    {
+      "description": "Do not invoke ReMCP for a conceptual technical explanation.",
+      "user_prompt": "Explain OAuth PKCE in simple terms.",
+      "file_attachment_urls": null,
+      "tools_triggered": null,
+      "expected_output": "ReMCP should not be invoked because the user only requested an explanation.",
+      "expected_output_url": null
+    }
+  ]
+}

package/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "@remcp/remcp",
+  "version": "0.1.0",
+  "description": "Self-hosted remote MCP bridge for securely controlling your own computers from MCP clients.",
+  "type": "module",
+  "license": "MIT",
+  "homepage": "https://remcp.delio24.com",
+  "bin": {
+    "remcp": "bin/remcp.mjs"
+  },
+  "engines": {
+    "node": ">=22.5.0"
+  },
+  "files": [
+    "bin",
+    "src",
+    "public",
+    "skills/remcp-operator",
+    "chatgpt-app-submission.json",
+    "LICENSE",
+    "THIRD_PARTY_NOTICES.md",
+    "README.md"
+  ],
+  "scripts": {
+    "server": "node src/server.mjs",
+    "agent": "node src/agent.mjs",
+    "check": "node --check src/server.mjs && node --check src/agent.mjs && node --check src/cli.mjs",
+    "test": "node --test test/*.test.mjs",
+    "submission": "node scripts/generate-submission.mjs"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.30.0",
+    "@wonderwhy-er/desktop-commander": "^0.2.50",
+    "express": "^5.2.1",
+    "express-rate-limit": "^8.7.0",
+    "helmet": "^8.3.0",
+    "jose": "^6.2.12",
+    "ws": "^8.21.3"
+  },
+  "overrides": {
+    "sharp": "0.35.4",
+    "uuid": "11.1.1"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/antonbaider/remcp.git"
+  },
+  "bugs": {
+    "url": "https://github.com/antonbaider/remcp/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "mcp",
+    "remote",
+    "computer",
+    "filesystem",
+    "terminal",
+    "chatgpt",
+    "self-hosted"
+  ]
+}

package/public/app.js

@@ -0,0 +1,95 @@
+import { initializeApp } from 'https://www.gstatic.com/firebasejs/10.14.1/firebase-app.js';
+import { getAuth, GoogleAuthProvider, onAuthStateChanged, signInWithPopup, signInWithEmailAndPassword, createUserWithEmailAndPassword, signOut } from 'https://www.gstatic.com/firebasejs/10.14.1/firebase-auth.js';
+
+const cfg = await fetch(`/api/config?fresh=${Date.now()}`, { cache: 'no-store' }).then(r => r.json());
+const auth = getAuth(initializeApp(cfg.firebase));
+const $ = selector => document.querySelector(selector);
+const showError = error => { $('#auth-error').textContent = error?.message || String(error); };
+const googleProvider = new GoogleAuthProvider();
+
+$('#mcp-url').textContent = cfg.mcpUrl;
+$('#google').onclick = async () => {
+  const button = $('#google');
+  const label = button.querySelector('span');
+  button.disabled = true;
+  $('#auth-error').textContent = '';
+  label.textContent = 'Opening Google…';
+  try { await signInWithPopup(auth, googleProvider); }
+  catch (error) { showError(error); }
+  finally { button.disabled = false; label.textContent = 'Continue with Google'; }
+};
+$('#email-login').onclick = () => signInWithEmailAndPassword(auth, $('#email').value, $('#password').value).catch(showError);
+$('#email-register').onclick = () => createUserWithEmailAndPassword(auth, $('#email').value, $('#password').value).catch(showError);
+$('#logout').onclick = () => signOut(auth);
+
+document.addEventListener('click', async event => {
+  const button = event.target.closest('[data-copy]');
+  if (!button) return;
+  const target = document.querySelector(button.dataset.copy);
+  if (!target) return;
+  await navigator.clipboard.writeText(target.textContent.trim());
+  const original = button.textContent;
+  button.textContent = 'Copied';
+  setTimeout(() => { button.textContent = original; }, 1200);
+});
+async function api(path, options = {}) {
+  const token = await auth.currentUser.getIdToken();
+  const response = await fetch(path, { ...options, headers: { ...(options.headers || {}), authorization: `Bearer ${token}`, 'content-type': 'application/json' } });
+  if (!response.ok) throw new Error(await response.text());
+  return response.status === 204 ? null : response.json();
+}
+
+function deviceRow(device) {
+  const row = document.createElement('div');
+  row.className = 'device';
+  const details = document.createElement('div');
+  const name = document.createElement('strong');
+  name.textContent = device.name || 'Unnamed device';
+  const meta = document.createElement('div');
+  meta.className = 'muted';
+  meta.textContent = `${device.platform || 'unknown'} · ${device.hostname || device.id}`;
+  const status = document.createElement('div');
+  status.className = device.online ? 'online' : 'offline';
+  status.textContent = device.online ? 'Online' : 'Offline';
+  details.append(name, meta, status);
+  const revoke = document.createElement('button');
+  revoke.className = 'danger';
+  revoke.type = 'button';
+  revoke.textContent = 'Revoke';
+  revoke.setAttribute('aria-label', `Revoke ${device.name || 'device'}`);
+  revoke.onclick = async () => {
+    if (!confirm(`Revoke ${device.name || 'this device'}? It will need to be paired again before reconnecting.`)) return;
+    await api(`/api/devices/${encodeURIComponent(device.id)}`, { method: 'DELETE' });
+    await refreshDevices();
+  };
+  row.append(details, revoke);
+  return row;
+}
+
+async function refreshDevices() {
+  const data = await api('/api/me');
+  const root = $('#devices');
+  root.replaceChildren();
+  if (!data.devices.length) { root.textContent = 'No devices yet.'; return; }
+  for (const device of data.devices) root.append(deviceRow(device));
+}
+$('#pair').onclick = async () => {
+  try {
+    const pairing = await api('/api/pair/create', { method: 'POST', body: '{}' });
+    $('#pairing').classList.remove('hidden');
+    $('#pair-command').textContent = pairing.command;
+    const expiry = new Intl.DateTimeFormat(undefined, { hour: 'numeric', minute: '2-digit' }).format(new Date(pairing.expiresAt));
+    $('#pair-expiry').textContent = `Expires ${expiry}`;
+  } catch (error) { showError(error); }
+};
+
+onAuthStateChanged(auth, async user => {
+  const signedIn = Boolean(user);
+  $('#signed-out').classList.toggle('hidden', signedIn);
+  $('#signed-in').classList.toggle('hidden', !signedIn);
+  $('#dashboard').classList.toggle('hidden', !signedIn);
+  $('#auth-error').textContent = '';
+  if (!signedIn) return;
+  $('#user-label').textContent = user.email || user.uid;
+  try { await refreshDevices(); } catch (error) { showError(error); }
+});