DeviceStartResponse

  • The CLI's half of the request. High-entropy, stored hashed server-side, and never shown to a person — keep it on the machine and send it only to /v1/device/poll.

  • Seconds until the request can no longer be approved.

  • Seconds to wait between polls. Polling faster returns 429 slow_down.

  • The half a person retypes in the browser. Eight characters from an alphabet with no lookalike pairs; display it grouped (ABCD-EFGH) for readability — the server accepts either form, in any case.

  • Where to send the person to approve. Append ?code={userCode} to prefill it.