startDeviceSignIn (account/deviceSignIn.ts)

* Signing in from a PC's own page (docs/account.md, "Signing in"): the account service cannot send a sign-in back to an address it does not know, so the page uses the provider's device flow (RFC 8628). It shows the provider's code, the person types it at the provider's device pag

// Source: https://github.com/devswha/ovis | License: MIT | Copyright 2026 devswha
// Provided via justclaw.it.com; keep this notice with the code.
/**
 * Signing in from a PC's own page (docs/account.md, "Signing in"): the account service cannot send
 * a sign-in back to an address it does not know, so the page uses the provider's device flow (RFC
 * 8628). It shows the provider's code, the person types it at the provider's device page
 * (github.com/login/device, google.com/device), and the page polls the service until it says yes. The sign-in is bound to a verifier that never leaves this page's
 * memory, so the device code alone redeems nothing, and a service that does not say it bound the
 * sign-in is not used.
 */
import { toBase64Url } from "../../../shared/relay-pair-sas.ts";
impo

... (truncated -- full source via MCP)