gazesight 0.3.5 → 0.4.0

package/dist/firefox/popup.css

@@ -78,6 +78,11 @@ body[data-connected="true"] .connection-dot {
 main {
   padding: 13px 14px 0;
 }
+.pairing-connect { margin-bottom: 10px; padding: 14px; border: 1px solid #cfc7ff; border-radius: 10px; background: linear-gradient(135deg, #f2efff, #fff); }
+.pairing-connect strong { font-size: 15px; }
+.pairing-connect p { margin: 6px 0; color: var(--muted); font-size: 11px; line-height: 1.45; }
+.pairing-connect .pairing-code { color: #160653; font: 700 17px/1.3 ui-monospace, monospace; letter-spacing: .08em; }
+.pairing-connect .connect { margin-top: 10px; }
 .status {
   display: grid;
   grid-template-columns: 1fr 1fr;

package/dist/firefox/popup.html

@@ -18,6 +18,12 @@
       </header>
       <div class="paper">
         <main>
+          <section id="pairing-connect" class="pairing-connect" hidden>
+            <strong>Connect your browser</strong>
+            <p id="pairing-message">Run <code>gazesight pair</code>, then approve the matching code.</p>
+            <p id="pairing-code" class="pairing-code" hidden></p>
+            <button id="connect" class="primary connect">Connect to GazeSight</button>
+          </section>
           <dl class="status">
             <div class="status-card">
               <span class="icon-disc"
@@ -188,4 +194,3 @@
     <script type="module" src="popup.js"></script>
   </body>
 </html>
-

package/dist/firefox/popup.js

@@ -1 +1 @@
-function n(e,t){document.getElementById(e).textContent=t}var a=!1,s;function d(e,t=!1){clearTimeout(s),n("feedback",e),t&&(s=setTimeout(()=>n("feedback",""),3500))}async function o(e){let t=await browser.runtime.sendMessage({type:"gazesight-ui",action:e});if(!t?.ok)throw new Error(t?.error??"GazeSight unavailable. Open settings to check pairing.");return t.value}async function i(){let e=await o("status");document.body.dataset.connected=String(e.connected),n("connection",e.connected?"Connected":"Disconnected"),document.body.dataset.background=e.backgroundCapture.enabled?"enabled":"disabled",n("background-state",e.backgroundCapture.enabled?"On":"Off"),n("background-toggle",e.backgroundCapture.enabled?"Disable":"Enable"),document.getElementById("background-toggle").setAttribute("aria-pressed",String(e.backgroundCapture.enabled)),n("background-description",e.backgroundCapture.enabled?"GazeSight can capture this target while you work elsewhere.":e.backgroundCapture.permissionGranted?"Background mode is off. Firefox still reports the optional permission; remove it in Add-ons Manager if needed.":e.backgroundMode==="permission_denied"?"Permission was not granted. Standard foreground capture remains available.":"Allow GazeSight to keep capturing the selected development tab while you work in another tab or application."),document.body.dataset.continuous=e.continuousAuthorization.enabled?"enabled":"disabled",n("continuous-state",e.continuousAuthorization.enabled?"On":"Off"),n("continuous-toggle",e.continuousAuthorization.enabled?"Disable":"Enable"),document.getElementById("continuous-toggle").setAttribute("aria-pressed",String(e.continuousAuthorization.enabled)),n("continuous-description",e.continuousAuthorization.enabled?e.continuousAuthorization.authorizedOrigin?`Staying connected to ${e.continuousAuthorization.authorizedOrigin} across reloads, navigation and previews.`:"Keeps GazeSight connected across reloads, navigation and previews once you select a tab.":"Keep GazeSight connected to this development tab across reloads, navigation and responsive previews, so you don't have to reauthorize it every time."),n("pairing",e.paired?"Paired":"Not paired"),n("target",e.targetState==="authorized"?"Authorized":e.targetState==="none"?"None":"Reauthorize"),n("url",e.url??"No target selected"),n("viewport",e.viewport?`${e.viewport.width} \xD7 ${e.viewport.height} CSS \xB7 DPR ${e.viewport.devicePixelRatio}`:"Viewport unavailable"),n("select-label",e.targetState==="reauthorization_required"?"Reauthorize this tab":"Use this tab"),n("last-capture",e.lastCapture?`${e.lastCapture.mode} \xB7 ${e.lastCapture.width} \xD7 ${e.lastCapture.height} \xB7 ${new Date(e.lastCapture.time).toLocaleTimeString()}`:"None yet"),n("last-error",e.lastError?`${e.lastError.code}: ${e.lastError.message}`:"None");for(let t of["fast","stable"])document.getElementById(t).disabled=a||!e.connected||e.targetState!=="authorized";document.getElementById("disconnect").disabled=a||e.targetState==="none"}for(let e of["select","disconnect","fast","stable","diagnostics"])document.getElementById(e).addEventListener("click",async()=>{if(!a){a=!0,document.querySelectorAll("button").forEach(t=>t.disabled=!0),n("feedback",e==="fast"||e==="stable"?"Capturing\u2026":"Working\u2026");try{if(e==="fast"&&!await browser.permissions.contains({permissions:["downloads"]})){await browser.windows.create({url:browser.runtime.getURL("permission.html?action=download"),type:"popup",focused:!0,width:600,height:700}),window.close();return}let t=await o(e);e==="diagnostics"&&(document.getElementById("diagnostics-panel").hidden=!1,n("diagnostics-output",JSON.stringify(t,null,2))),d(e==="disconnect"?"Target disconnected.":e==="select"?"Target selected.":e==="diagnostics"?"Diagnostics updated.":e==="fast"?`\u2713 Saved to Downloads/${t.filename}`:"Capture completed.",e==="fast")}catch(t){d(t instanceof Error?t.message:"Operation failed.")}finally{a=!1,document.querySelectorAll("button").forEach(t=>t.disabled=!1),await i().catch(t=>n("feedback",String(t)))}}});document.getElementById("copy-url").addEventListener("click",async()=>{let e=document.getElementById("url").textContent;if(!(!e||e==="No target selected"))try{await navigator.clipboard.writeText(e),n("feedback","URL copied.")}catch{n("feedback","Unable to copy URL. Select and copy it manually.")}});document.getElementById("background-toggle").addEventListener("click",async()=>{if((await o("status")).backgroundCapture.enabled){await o("background-disable"),await i();return}await browser.windows.create({url:browser.runtime.getURL("permission.html?action=background"),type:"popup",focused:!0,width:600,height:700}),window.close()});document.getElementById("continuous-toggle").addEventListener("click",async()=>{let e=await o("status");if(e.continuousAuthorization.enabled){await o("continuous-disable"),await i();return}if(e.continuousAuthorization.permissionGranted){await o("continuous-enable"),await i();return}await browser.windows.create({url:browser.runtime.getURL("permission.html?action=continuous"),type:"popup",focused:!0,width:600,height:700}),window.close()});browser.commands.getAll().then(e=>{let t=e.find(r=>r.name==="gazesight-select-target")?.shortcut;t&&n("shortcut",t)}).catch(()=>{});document.getElementById("settings").addEventListener("click",()=>void browser.runtime.openOptionsPage());i().catch(e=>n("feedback",String(e)));var u=setInterval(()=>{a||i().catch(e=>n("feedback",String(e)))},2e3);window.addEventListener("pagehide",()=>clearInterval(u),{once:!0});
+var r="pendingPairing";function k(){return[...crypto.getRandomValues(new Uint8Array(32))].map(t=>t.toString(16).padStart(2,"0")).join("")}function E(){return location.protocol==="moz-extension:"?"firefox":"chrome"}async function m(e,t,o,i,a=2500){return fetch(`http://127.0.0.1:${e}/gazesight/pairing/${t}`,{method:"POST",headers:{"Content-Type":"application/json",...i?{Authorization:`Bearer ${i}`}:{}},body:JSON.stringify(o),signal:AbortSignal.timeout(a)})}async function w(e,t){let{requestId:o,proof:i,code:a,expiresAt:l,port:b}=t;for(;;){if(Date.now()>=l)return await browser.storage.local.remove(r),e("expired",a),!1;e("waiting_approval",a);let g;try{g=await m(b,"status",{requestId:o,secret:i})}catch{await new Promise(p=>setTimeout(p,800));continue}let d=await g.json();if(d.state==="approved"&&d.credential&&d.pairingId)return await browser.storage.local.set({token:d.credential,pairingId:d.pairingId,port:b,pairingState:"connected"}),await browser.storage.local.remove(r),e("connected"),!0;if(d.state==="rejected")return await browser.storage.local.remove(r),e("reconnect_required",a),!1;if(d.state==="expired"||g.status===410)return await browser.storage.local.remove(r),e("expired",a),!1;await new Promise(p=>setTimeout(p,800))}}async function f(e,t=32147){e("searching");let o=k(),i;try{i=await m(t,"request",{browser:E(),extensionId:browser.runtime.id,secret:o},void 0,6e4)}catch{return e("unavailable"),!1}if(!i.ok)return e("unavailable"),!1;let a=await i.json(),l={requestId:a.requestId,proof:o,code:a.code,expiresAt:a.expiresAt,port:t};return await browser.storage.local.set({[r]:l}),e("pending",a.code),w(e,l)}async function h(e){let o=(await browser.storage.local.get(r))[r];if(o){if(Date.now()>=o.expiresAt){await browser.storage.local.remove(r);return}return w(e,o)}}function n(e,t){document.getElementById(e).textContent=t}var u=!1,y;function v(e,t=!1){clearTimeout(y),n("feedback",e),t&&(y=setTimeout(()=>n("feedback",""),3500))}async function c(e){let t=await browser.runtime.sendMessage({type:"gazesight-ui",action:e});if(!t?.ok)throw new Error(t?.error??"GazeSight unavailable. Open settings to check pairing.");return t.value}async function s(){let e=await c("status");document.body.dataset.connected=String(e.connected),n("connection",e.connected?"Connected":"Disconnected");let t=await browser.storage.local.get(["token","port"]);document.getElementById("pairing-connect").hidden=typeof t.token=="string",document.body.dataset.background=e.backgroundCapture.enabled?"enabled":"disabled",n("background-state",e.backgroundCapture.enabled?"On":"Off"),n("background-toggle",e.backgroundCapture.enabled?"Disable":"Enable"),document.getElementById("background-toggle").setAttribute("aria-pressed",String(e.backgroundCapture.enabled)),n("background-description",e.backgroundCapture.enabled?"GazeSight can capture this target while you work elsewhere.":e.backgroundCapture.permissionGranted?"Background mode is off. Firefox still reports the optional permission; remove it in Add-ons Manager if needed.":e.backgroundMode==="permission_denied"?"Permission was not granted. Standard foreground capture remains available.":"Allow GazeSight to keep capturing the selected development tab while you work in another tab or application."),document.body.dataset.continuous=e.continuousAuthorization.enabled?"enabled":"disabled",n("continuous-state",e.continuousAuthorization.enabled?"On":"Off"),n("continuous-toggle",e.continuousAuthorization.enabled?"Disable":"Enable"),document.getElementById("continuous-toggle").setAttribute("aria-pressed",String(e.continuousAuthorization.enabled)),n("continuous-description",e.continuousAuthorization.enabled?e.continuousAuthorization.authorizedOrigin?`Staying connected to ${e.continuousAuthorization.authorizedOrigin} across reloads, navigation and previews.`:"Keeps GazeSight connected across reloads, navigation and previews once you select a tab.":"Keep GazeSight connected to this development tab across reloads, navigation and responsive previews, so you don't have to reauthorize it every time."),n("pairing",e.paired?"Paired":"Not paired"),n("target",e.targetState==="authorized"?"Authorized":e.targetState==="none"?"None":"Reauthorize"),n("url",e.url??"No target selected"),n("viewport",e.viewport?`${e.viewport.width} \xD7 ${e.viewport.height} CSS \xB7 DPR ${e.viewport.devicePixelRatio}`:"Viewport unavailable"),n("select-label",e.targetState==="reauthorization_required"?"Reauthorize this tab":"Use this tab"),n("last-capture",e.lastCapture?`${e.lastCapture.mode} \xB7 ${e.lastCapture.width} \xD7 ${e.lastCapture.height} \xB7 ${new Date(e.lastCapture.time).toLocaleTimeString()}`:"None yet"),n("last-error",e.lastError?`${e.lastError.code}: ${e.lastError.message}`:"None");for(let o of["fast","stable"])document.getElementById(o).disabled=u||!e.connected||e.targetState!=="authorized";document.getElementById("disconnect").disabled=u||e.targetState==="none"}var I={not_connected:"Not connected.",searching:"Searching for local GazeSight\u2026",pending:"Pairing request pending.",waiting_approval:"Waiting for approval in your terminal\u2026",connected:"Connected.",unavailable:"Connection unavailable. Run gazesight pair and try again.",expired:"Pairing expired. Try again.",reconnect_required:"Reconnect required."};function S(e,t){let o=document.getElementById("pairing-code");n("pairing-message",I[e]),o.hidden=!t,o.textContent=t?`Verification code: ${t}`:""}document.getElementById("connect").addEventListener("click",async()=>{let e=document.getElementById("connect");e.disabled=!0;let t=await browser.storage.local.get(["port"]);await f(S,Number(t.port??32147)),e.disabled=!1,await s()});(async()=>typeof(await browser.storage.local.get(["token"])).token!="string"&&await h(S)&&await s())();for(let e of["select","disconnect","fast","stable","diagnostics"])document.getElementById(e).addEventListener("click",async()=>{if(!u){u=!0,document.querySelectorAll("button").forEach(t=>t.disabled=!0),n("feedback",e==="fast"||e==="stable"?"Capturing\u2026":"Working\u2026");try{if(e==="fast"&&!await browser.permissions.contains({permissions:["downloads"]})){await browser.windows.create({url:browser.runtime.getURL("permission.html?action=download"),type:"popup",focused:!0,width:600,height:700}),window.close();return}let t=await c(e);e==="diagnostics"&&(document.getElementById("diagnostics-panel").hidden=!1,n("diagnostics-output",JSON.stringify(t,null,2))),v(e==="disconnect"?"Target disconnected.":e==="select"?"Target selected.":e==="diagnostics"?"Diagnostics updated.":e==="fast"?`\u2713 Saved to Downloads/${t.filename}`:"Capture completed.",e==="fast")}catch(t){v(t instanceof Error?t.message:"Operation failed.")}finally{u=!1,document.querySelectorAll("button").forEach(t=>t.disabled=!1),await s().catch(t=>n("feedback",String(t)))}}});document.getElementById("copy-url").addEventListener("click",async()=>{let e=document.getElementById("url").textContent;if(!(!e||e==="No target selected"))try{await navigator.clipboard.writeText(e),n("feedback","URL copied.")}catch{n("feedback","Unable to copy URL. Select and copy it manually.")}});document.getElementById("background-toggle").addEventListener("click",async()=>{if((await c("status")).backgroundCapture.enabled){await c("background-disable"),await s();return}await browser.windows.create({url:browser.runtime.getURL("permission.html?action=background"),type:"popup",focused:!0,width:600,height:700}),window.close()});document.getElementById("continuous-toggle").addEventListener("click",async()=>{let e=await c("status");if(e.continuousAuthorization.enabled){await c("continuous-disable"),await s();return}if(e.continuousAuthorization.permissionGranted){await c("continuous-enable"),await s();return}await browser.windows.create({url:browser.runtime.getURL("permission.html?action=continuous"),type:"popup",focused:!0,width:600,height:700}),window.close()});browser.commands.getAll().then(e=>{let t=e.find(o=>o.name==="gazesight-select-target")?.shortcut;t&&n("shortcut",t)}).catch(()=>{});document.getElementById("settings").addEventListener("click",()=>void browser.runtime.openOptionsPage());s().catch(e=>n("feedback",String(e)));var P=setInterval(()=>{u||s().catch(e=>n("feedback",String(e)))},2e3);window.addEventListener("pagehide",()=>clearInterval(P),{once:!0});

package/dist/mcp/index.js

@@ -7,7 +7,8 @@ import { StdioServerTransport } from "@modelcontextprotocol/server/stdio";
 import { z as z2 } from "zod";
 
 // apps/cli/src/config.ts
-import { readFileSync, writeFileSync, mkdirSync } from "node:fs";
+import { readFileSync, writeFileSync, mkdirSync, renameSync } from "node:fs";
+import { dirname, join } from "node:path";
 
 // apps/cli/src/config-browser.ts
 import { z } from "zod";
@@ -18,6 +19,17 @@ var agentGuidanceSchema = z.strictObject({
 var localConfigSchema = z.strictObject({
   token: z.string().regex(/^[a-f0-9]{64}$/),
   port: z.number().int().min(1024).max(65535),
+  pairings: z.array(
+    z.strictObject({
+      id: z.string().uuid(),
+      browser: z.enum(["firefox", "chrome"]),
+      extensionId: z.string().min(1).max(256),
+      origin: z.string().min(1).max(300),
+      credentialHash: z.string().regex(/^[a-f0-9]{64}$/),
+      createdAt: z.string().datetime(),
+      revokedAt: z.string().datetime().optional()
+    })
+  ).max(32).default([]),
   allowedOrigins: z.array(z.url()).default([]),
   agentGuidance: agentGuidanceSchema.default({
     enabled: true,
@@ -35,6 +47,14 @@ function readLocalConfig(path) {
     );
   }
 }
+function writeLocalConfig(path, value) {
+  const config = localConfigSchema.parse(value);
+  mkdirSync(dirname(path), { recursive: true });
+  const temporary = `${path}.${process.pid}.tmp`;
+  writeFileSync(temporary, JSON.stringify(config, null, 2), { mode: 384 });
+  renameSync(temporary, path);
+  return config;
+}
 
 // apps/mcp-server/src/config.ts
 function loadConfig(env = process.env) {
@@ -48,7 +68,17 @@ function loadConfig(env = process.env) {
     timeoutMs: z2.coerce.number().int().min(100).max(6e4),
     allowedOrigins: z2.array(z2.url()),
     debugDir: z2.string().optional(),
-    agentGuidance: agentGuidanceSchema
+    agentGuidance: agentGuidanceSchema,
+    pairings: z2.array(z2.object({
+      id: z2.string(),
+      browser: z2.enum(["firefox", "chrome"]),
+      extensionId: z2.string(),
+      origin: z2.string(),
+      credentialHash: z2.string(),
+      createdAt: z2.string(),
+      revokedAt: z2.string().optional()
+    })).default([]),
+    configPath: z2.string().optional()
   }).parse({
     port: env.GAZESIGHT_PORT ?? local?.port ?? 32147,
     token: env.GAZESIGHT_PAIR_TOKEN ?? local?.token,
@@ -58,12 +88,14 @@ function loadConfig(env = process.env) {
     agentGuidance: local?.agentGuidance ?? {
       enabled: true,
       visualFidelity: true
-    }
+    },
+    pairings: local?.pairings ?? [],
+    configPath: env.GAZESIGHT_CONFIG_FILE
   });
 }
 
 // packages/protocol/src/release.ts
-var VERSION = "0.3.5";
+var VERSION = "0.4.0";
 
 // apps/mcp-server/src/bridge/websocket-server.ts
 import { WebSocketServer, WebSocket } from "ws";
@@ -795,6 +827,204 @@ var ActiveTargetRouter = class {
 
 // apps/mcp-server/src/bridge/websocket-server.ts
 import { createServer } from "node:http";
+
+// apps/mcp-server/src/bridge/pairing-service.ts
+import { createHash, randomBytes, randomInt, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
+var hash = (value) => createHash("sha256").update(value).digest("hex");
+var equalHash = (value, expected) => {
+  const actual = Buffer.from(hash(value));
+  const wanted = Buffer.from(expected);
+  return actual.length === wanted.length && timingSafeEqual2(actual, wanted);
+};
+var json = (response, status, value) => {
+  response.writeHead(status, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+  response.end(JSON.stringify(value));
+};
+async function body(request) {
+  const chunks = [];
+  let length = 0;
+  for await (const chunk of request) {
+    length += chunk.length;
+    if (length > 4096) throw new Error("body too large");
+    chunks.push(chunk);
+  }
+  return JSON.parse(Buffer.concat(chunks).toString("utf8"));
+}
+function browserForOrigin(origin) {
+  if (/^moz-extension:\/\/[a-f0-9-]+\/?$/i.test(origin)) return "firefox";
+  if (/^chrome-extension:\/\/[a-p]{32}\/?$/.test(origin)) return "chrome";
+}
+var PairingService = class {
+  constructor(token, configPath, initial) {
+    this.token = token;
+    this.configPath = configPath;
+    this.pairings = initial;
+  }
+  pending = /* @__PURE__ */ new Map();
+  recent = /* @__PURE__ */ new Map();
+  pairings;
+  authenticate(credential, origin, browser) {
+    if (!origin) return false;
+    return this.pairings.some((pairing) => !pairing.revokedAt && pairing.browser === browser && pairing.origin === origin && equalHash(credential, pairing.credentialHash));
+  }
+  listPending() {
+    this.expire();
+    return [...this.pending.values()].filter((item) => item.state === "pending").map(({ id, browser, extensionId, code, createdAt, expiresAt }) => ({ id, browser, extensionId, code, createdAt, expiresAt }));
+  }
+  listPairings() {
+    return this.pairings.map(({ id, browser, extensionId, origin, createdAt, revokedAt }) => ({ id, browser, extensionId, origin, createdAt, ...revokedAt ? { revokedAt } : {} }));
+  }
+  deliveryState(id) {
+    const item = this.pending.get(id);
+    return item ? { state: item.state, redeemed: item.redeemed === true, expiresAt: item.expiresAt } : void 0;
+  }
+  approve(id, code) {
+    this.expire();
+    const item = this.pending.get(id);
+    if (!item || item.state !== "pending" || item.code !== code) return false;
+    const credential = randomBytes(32).toString("hex");
+    const pairing = { id: crypto.randomUUID(), browser: item.browser, extensionId: item.extensionId, origin: item.origin, credentialHash: hash(credential), createdAt: (/* @__PURE__ */ new Date()).toISOString() };
+    this.pairings.push(pairing);
+    item.credential = credential;
+    item.state = "approved";
+    this.persist();
+    return true;
+  }
+  reject(id) {
+    const item = this.pending.get(id);
+    if (!item || item.state !== "pending") return false;
+    item.state = "rejected";
+    return true;
+  }
+  revoke(id) {
+    const item = this.pairings.find((pairing) => pairing.id === id && !pairing.revokedAt);
+    if (!item) return false;
+    item.revokedAt = (/* @__PURE__ */ new Date()).toISOString();
+    this.persist();
+    return true;
+  }
+  persist() {
+    if (!this.configPath) return;
+    const config = readLocalConfig(this.configPath);
+    writeLocalConfig(this.configPath, { ...config, pairings: this.pairings });
+  }
+  expire() {
+    const now = Date.now();
+    for (const item of this.pending.values()) if (item.expiresAt <= now && item.state === "pending") item.state = "rejected";
+  }
+  admin(request) {
+    return request.headers.origin === void 0 && tokensMatch(request.headers.authorization?.replace(/^Bearer /, "") ?? "", this.token);
+  }
+  async handle(request, response) {
+    const url = request.url;
+    if (!url?.startsWith("/gazesight/pairing/")) return false;
+    const origin = request.headers.origin;
+    if (origin && originAllowed(origin)) response.setHeader("Access-Control-Allow-Origin", origin);
+    response.setHeader("Vary", "Origin");
+    if (request.method === "OPTIONS" && origin && originAllowed(origin)) {
+      response.writeHead(204, { "Access-Control-Allow-Methods": "POST", "Access-Control-Allow-Headers": "content-type, authorization" }).end();
+      return true;
+    }
+    try {
+      if (url === "/gazesight/pairing/request" && request.method === "POST") {
+        const browser = origin ? browserForOrigin(origin) : void 0;
+        if (!origin || !browser) {
+          json(response, 403, { error: "ineligible_origin" });
+          return true;
+        }
+        const now = Date.now();
+        const attempts = (this.recent.get(origin) ?? []).filter((time) => now - time < 6e4);
+        if (attempts.length >= 5) {
+          json(response, 429, { error: "rate_limited" });
+          return true;
+        }
+        attempts.push(now);
+        this.recent.set(origin, attempts);
+        const value = await body(request);
+        if (value.browser !== browser || typeof value.extensionId !== "string" || value.extensionId.length > 256 || typeof value.secret !== "string" || !/^[a-f0-9]{64}$/.test(value.secret)) {
+          json(response, 400, { error: "invalid_request" });
+          return true;
+        }
+        const item = { id: crypto.randomUUID(), browser, extensionId: value.extensionId, origin, secretHash: hash(value.secret), code: String(randomInt(0, 1e6)).padStart(6, "0"), createdAt: now, expiresAt: now + 12e4, attempts: 0, state: "pending" };
+        this.pending.set(item.id, item);
+        json(response, 201, { requestId: item.id, code: item.code, expiresAt: item.expiresAt });
+        return true;
+      }
+      if (url === "/gazesight/pairing/status" && request.method === "POST") {
+        const value = await body(request);
+        const item = typeof value.requestId === "string" ? this.pending.get(value.requestId) : void 0;
+        if (!item || item.origin !== origin || typeof value.secret !== "string") {
+          json(response, 404, { state: "unavailable" });
+          return true;
+        }
+        item.attempts += 1;
+        if (item.attempts > 180 || !equalHash(value.secret, item.secretHash)) {
+          json(response, 403, { state: "rejected" });
+          return true;
+        }
+        if (Date.now() >= item.expiresAt) {
+          json(response, 410, { state: "expired" });
+          return true;
+        }
+        if (item.state === "approved" && item.credential && !item.redeemed) {
+          const pairing = this.pairings.find((value2) => value2.origin === item.origin && value2.extensionId === item.extensionId && value2.credentialHash === hash(item.credential));
+          item.redeemed = true;
+          json(response, 200, { state: "approved", credential: item.credential, pairingId: pairing?.id });
+          item.credential = void 0;
+          return true;
+        }
+        json(response, 200, { state: item.state });
+        return true;
+      }
+      if (url === "/gazesight/pairing/revoke-self" && request.method === "POST" && origin) {
+        const value = await body(request);
+        const id = typeof value.id === "string" ? value.id : "";
+        const credential = request.headers.authorization?.replace(/^Bearer /, "") ?? "";
+        const pairing = this.pairings.find((item) => item.id === id && item.origin === origin && !item.revokedAt && equalHash(credential, item.credentialHash));
+        if (!pairing) {
+          json(response, 403, { ok: false });
+          return true;
+        }
+        pairing.revokedAt = (/* @__PURE__ */ new Date()).toISOString();
+        this.persist();
+        json(response, 200, { ok: true });
+        return true;
+      }
+      if (!this.admin(request)) {
+        json(response, 404, { error: "not_found" });
+        return true;
+      }
+      if (url === "/gazesight/pairing/delivery" && request.method === "POST") {
+        const value = await body(request);
+        const delivery = typeof value.id === "string" ? this.deliveryState(value.id) : void 0;
+        json(response, delivery ? 200 : 404, delivery ?? { error: "not_found" });
+        return true;
+      }
+      if (url === "/gazesight/pairing/pending" && request.method === "GET") {
+        json(response, 200, { requests: this.listPending() });
+        return true;
+      }
+      if (url === "/gazesight/pairing/list" && request.method === "GET") {
+        json(response, 200, { pairings: this.listPairings() });
+        return true;
+      }
+      if (request.method === "POST" && ["approve", "reject", "revoke"].some((action) => url === `/gazesight/pairing/${action}`)) {
+        const value = await body(request);
+        const id = typeof value.id === "string" ? value.id : "";
+        const ok = url.endsWith("approve") ? this.approve(id, typeof value.code === "string" ? value.code : "") : url.endsWith("reject") ? this.reject(id) : this.revoke(id);
+        json(response, ok ? 200 : 404, { ok });
+        return true;
+      }
+      json(response, 404, { error: "not_found" });
+      return true;
+    } catch {
+      json(response, 400, { error: "invalid_request" });
+      return true;
+    }
+  }
+};
+
+// apps/mcp-server/src/bridge/websocket-server.ts
 var EMPTY_STATE = { selectedTab: null, url: null };
 function browserFromOrigin(origin) {
   if (origin === void 0) return void 0;
@@ -805,10 +1035,12 @@ function browserFromOrigin(origin) {
 var Bridge = class {
   constructor(config) {
     this.config = config;
+    this.pairing = new PairingService(config.token, config.configPath, config.pairings ?? []);
     const verifyClient = (info) => originAllowed(info.origin || void 0);
-    this.http = createServer((request, response) => {
+    this.http = createServer(async (request, response) => {
       response.setHeader("Cache-Control", "no-store");
       response.setHeader("X-GazeSight-Version", VERSION);
+      if (await this.pairing.handle(request, response)) return;
       if (request.method !== "GET" || request.url !== "/gazesight/status" || request.headers.origin !== void 0) {
         response.writeHead(404).end();
         return;
@@ -855,14 +1087,14 @@ var Bridge = class {
           const message = JSON.parse(bytes.toString());
           if (!paired) {
             const hello = helloSchema.parse(message);
-            if (!tokensMatch(hello.token, config.token))
-              throw new Error("Pairing rejected");
             const claimedBrowser = hello.state.browser?.name;
             if (originBrowser !== void 0 && claimedBrowser !== void 0 && originBrowser !== claimedBrowser)
               throw new Error("Origin/browser mismatch");
             const browser = claimedBrowser ?? originBrowser;
             if (browser === void 0)
               throw new Error("Unidentifiable browser");
+            if (!tokensMatch(hello.token, config.token) && !this.pairing.authenticate(hello.token, request.headers.origin, browser))
+              throw new Error("Pairing rejected");
             if (this.registry.isDuplicate(browser))
               throw new Error("Duplicate connection");
             connection = this.registry.register(browser, hello.state);
@@ -905,6 +1137,7 @@ var Bridge = class {
   wiring = /* @__PURE__ */ new Map();
   server;
   http;
+  pairing;
   // Resolves the connection currently backing the global active target, or
   // undefined if no browser is active (nothing selected yet, or the
   // previously active browser disconnected — no automatic fallback).
@@ -968,6 +1201,7 @@ var Bridge = class {
     return {
       connected: this.connected,
       paired: this.connected,
+      authorizedPairings: this.pairing.listPairings().filter((item) => !item.revokedAt).length,
       targetState: this.state.targetState ?? "none",
       tabId: this.state.selectedTab,
       bridge: { port: this.port },
@@ -995,7 +1229,7 @@ var Bridge = class {
 // apps/mcp-server/src/server.ts
 import { McpServer } from "@modelcontextprotocol/server";
 import { writeFile, mkdir } from "node:fs/promises";
-import { join } from "node:path";
+import { join as join2 } from "node:path";
 
 // apps/mcp-server/src/tools/capture.ts
 function toImage(value) {
@@ -1226,7 +1460,7 @@ function createServer2(bridge, config) {
             if (config.debugDir) {
               await mkdir(config.debugDir, { recursive: true });
               await writeFile(
-                join(config.debugDir, `last-capture.${metadata.format}`),
+                join2(config.debugDir, `last-capture.${metadata.format}`),
                 Buffer.from(image.data, "base64")
               );
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gazesight",
-  "version": "0.3.5",
+  "version": "0.4.0",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {