Reverse glasses pairing: enter code on phone

app.py

@@ -29,6 +29,7 @@ SESSION_TTL_SECONDS = int(os.getenv("SESSION_TTL_SECONDS", "14400"))
 MAX_BACKGROUND_CHARS = int(os.getenv("MAX_BACKGROUND_CHARS", "20000"))
 PREPARE_TIMEOUT_SECONDS = int(os.getenv("PREPARE_TIMEOUT_SECONDS", "600"))
 PREPARE_RETRY_SECONDS = int(os.getenv("PREPARE_RETRY_SECONDS", "15"))
+PAIRING_TTL_SECONDS = int(os.getenv("PAIRING_TTL_SECONDS", "600"))
 
 logger = logging.getLogger("asq_gateway")
 
@@ -51,6 +52,8 @@ class SuggestRequest(BaseModel):
 
 sessions: dict[str, dict[str, Any]] = {}
 interview_codes: dict[str, str] = {}
+pairing_codes: dict[str, str] = {}
+pairings_by_token: dict[str, dict[str, Any]] = {}
 preparation_tasks: set[asyncio.Task[Any]] = set()
 
 
@@ -75,6 +78,13 @@ def _cleanup_expired() -> None:
         session = sessions.pop(sid, None)
         if session and session.get("interview_code"):
             interview_codes.pop(session["interview_code"], None)
+    expired_pair_tokens = [
+        token for token, pairing in pairings_by_token.items() if pairing["expires_at"] <= now
+    ]
+    for pair_token in expired_pair_tokens:
+        pairing = pairings_by_token.pop(pair_token, None)
+        if pairing:
+            pairing_codes.pop(pairing["code"], None)
 
 
 def _new_interview_code() -> str:
@@ -86,6 +96,15 @@ def _new_interview_code() -> str:
     raise RuntimeError("Could not allocate an interview code")
 
 
+def _new_pairing_code() -> str:
+    _cleanup_expired()
+    for _ in range(100):
+        code = f"{secrets.randbelow(1_000_000):06d}"
+        if code != ACCESS_CODE and code not in pairing_codes and code not in interview_codes:
+            return code
+    raise RuntimeError("Could not allocate a pairing code")
+
+
 def create_token(session_id: str, role: Literal["owner", "glasses"], expires_at: int) -> str:
     payload = _b64encode(
         json.dumps(
@@ -243,7 +262,7 @@ def session_view(session: dict[str, Any], role: str) -> dict[str, Any]:
     return response
 
 
-api = FastAPI(title="ASQ Rokid Gateway", version="0.2.0")
+api = FastAPI(title="ASQ Rokid Gateway", version="0.3.0")
 api.add_middleware(
     CORSMiddleware,
     allow_origins=["*"],
@@ -263,7 +282,7 @@ def health() -> dict[str, Any]:
         "ok": True,
         "configured": bool(ACCESS_CODE and SESSION_SECRET and HF_TOKEN),
         "target": TARGET_SPACE_ID,
-        "version": "0.2.0",
+        "version": "0.3.0",
     }
 
 
@@ -321,6 +340,62 @@ async def prepare(
     return session_view(session, "owner")
 
 
+@api.post("/pair")
+def create_pairing() -> dict[str, Any]:
+    _cleanup_expired()
+    code = _new_pairing_code()
+    pair_token = secrets.token_urlsafe(24)
+    expires_at = int(time.time()) + PAIRING_TTL_SECONDS
+    pairings_by_token[pair_token] = {
+        "code": code,
+        "session_id": None,
+        "expires_at": expires_at,
+    }
+    pairing_codes[code] = pair_token
+    return {
+        "pairingCode": code,
+        "pairingToken": pair_token,
+        "expiresIn": PAIRING_TTL_SECONDS,
+    }
+
+
+@api.get("/pair/status")
+def pairing_status(
+    x_pairing_token: str | None = Header(default=None, alias="X-Pairing-Token"),
+) -> dict[str, Any]:
+    _cleanup_expired()
+    pairing = pairings_by_token.get(x_pairing_token or "")
+    if not pairing:
+        raise HTTPException(status_code=401, detail="Invalid or expired pairing")
+    session_id = pairing.get("session_id")
+    if not session_id:
+        return {"paired": False, "expiresAt": pairing["expires_at"]}
+    session = sessions.get(session_id)
+    if not session:
+        raise HTTPException(status_code=410, detail="Interview session expired")
+    return {
+        "paired": True,
+        "token": create_token(session_id, "glasses", session["expires_at"]),
+        **session_view(session, "glasses"),
+    }
+
+
+@api.post("/pair/claim")
+def claim_pairing(
+    request: JoinRequest,
+    authorization: str | None = Header(default=None),
+) -> dict[str, bool]:
+    session, _ = _bearer(authorization, {"owner"})
+    _cleanup_expired()
+    pair_token = pairing_codes.get(request.code)
+    pairing = pairings_by_token.get(pair_token or "")
+    if not pairing or not hmac.compare_digest(request.code, pairing.get("code") or ""):
+        raise HTTPException(status_code=401, detail="Incorrect or expired glasses pairing code")
+    session_id = next(sid for sid, value in sessions.items() if value is session)
+    pairing["session_id"] = session_id
+    return {"paired": True}
+
+
 @api.post("/join")
 def join(request: JoinRequest) -> dict[str, Any]:
     _cleanup_expired()
@@ -376,20 +451,20 @@ body{margin:0;padding:24px 16px}.card{max-width:760px;margin:auto;background:#ff
 h1{margin:0 0 6px;font-size:1.55rem}.muted{color:#65716d;margin:0 0 24px}.step{border-top:1px solid #e4ebe7;padding-top:20px;margin-top:20px}
 label{display:block;font-weight:650;margin-bottom:8px}input,textarea,button{font:inherit;width:100%;border-radius:12px}input,textarea{border:1px solid #b9c9c1;padding:13px}textarea{min-height:220px;resize:vertical}
 button{border:0;background:#087a54;color:#fff;padding:14px;font-weight:700;margin-top:12px}button:disabled{background:#9cada5}.hidden{display:none}.status{padding:14px;border-radius:12px;background:#edf7f2;margin-top:14px;white-space:pre-wrap}
-.code{font-size:2.2rem;letter-spacing:.28em;font-weight:800;text-align:center;color:#087a54;margin:16px 0}.hypo{white-space:pre-wrap;line-height:1.5;background:#f7faf8;padding:14px;border-radius:12px;max-height:320px;overflow:auto}
+.hypo{white-space:pre-wrap;line-height:1.5;background:#f7faf8;padding:14px;border-radius:12px;max-height:320px;overflow:auto}
 </style></head><body><main class="card">
-<h1>ASQ Interview Setup</h1><p class="muted">Prepare the case on this phone, then join from the Rokid glasses.</p>
+<h1>ASQ Interview Setup</h1><p class="muted">Open ASQ on the Rokid glasses first. The glasses will display a six-digit pairing code; enter that code on this phone.</p>
 <section id="login"><label for="access">Researcher access code</label><input id="access" inputmode="numeric" maxlength="6" placeholder="Six digits"><button id="loginBtn">Continue</button></section>
-<section id="prepare" class="step hidden"><label for="background">Case and interview background</label><textarea id="background" placeholder="Enter the case facts, context, existing evidence, interview goals, and any constraints..."></textarea><button id="prepareBtn">Generate hypotheses and start interview</button></section>
-<section id="progress" class="step hidden"><div id="status" class="status">Starting the model…</div><div id="codeWrap" class="hidden"><p class="muted">Enter this interview code on the glasses:</p><div id="code" class="code"></div></div><div id="hypoWrap" class="hidden"><h2>Initial hypotheses</h2><div id="hypotheses" class="hypo"></div></div></section>
+<section id="prepare" class="step hidden"><label for="pairingCode">Code shown on the glasses</label><input id="pairingCode" inputmode="numeric" maxlength="6" placeholder="Six digits"><label for="background" style="margin-top:16px">Case and interview background</label><textarea id="background" placeholder="Enter the case facts, context, existing evidence, interview goals, and any constraints..."></textarea><button id="prepareBtn">Connect glasses and prepare interview</button></section>
+<section id="progress" class="step hidden"><div id="status" class="status">Connecting the glasses…</div><div id="hypoWrap" class="hidden"><h2>Initial hypotheses</h2><div id="hypotheses" class="hypo"></div></div></section>
 </main><script>
 let token="", timer=null; const $=id=>document.getElementById(id);
 async function api(path, options={}){const headers={"Content-Type":"application/json",...(options.headers||{})};if(token)headers.Authorization=`Bearer ${token}`;const r=await fetch(path,{...options,headers});let data={};try{data=await r.json()}catch{}if(!r.ok)throw new Error(data.detail||`Request failed (${r.status})`);return data}
 function errorMessage(e){$("status").textContent=e.message;$("progress").classList.remove("hidden")}
 $("loginBtn").onclick=async()=>{try{const data=await api("/auth",{method:"POST",body:JSON.stringify({code:$("access").value.trim()})});token=data.token;$("login").classList.add("hidden");$("prepare").classList.remove("hidden")}catch(e){errorMessage(e)}};
-$("prepareBtn").onclick=async()=>{const background=$("background").value.trim();if(background.length<20){errorMessage("Please provide at least 20 characters of background.");return}$("prepareBtn").disabled=true;$("progress").classList.remove("hidden");$("status").textContent="Starting the model and generating initial hypotheses… This cold start may take several minutes.";try{const data=await api("/prepare",{method:"POST",body:JSON.stringify({background})});show(data);timer=setInterval(poll,3000)}catch(e){errorMessage(e);$("prepareBtn").disabled=false}};
+$("prepareBtn").onclick=async()=>{const pairingCode=$("pairingCode").value.trim();const background=$("background").value.trim();if(!/^\d{6}$/.test(pairingCode)){errorMessage("Enter the six-digit code shown on the glasses.");return}if(background.length<20){errorMessage("Please provide at least 20 characters of background.");return}$("prepareBtn").disabled=true;$("progress").classList.remove("hidden");$("status").textContent="Connecting the glasses and generating initial hypotheses…";try{await api("/pair/claim",{method:"POST",body:JSON.stringify({code:pairingCode})});const data=await api("/prepare",{method:"POST",body:JSON.stringify({background})});show(data);timer=setInterval(poll,3000)}catch(e){errorMessage(e);$("prepareBtn").disabled=false}};
 async function poll(){try{show(await api("/session"))}catch(e){clearInterval(timer);errorMessage(e)}}
-function show(data){if(data.interviewCode){$("code").textContent=data.interviewCode;$("codeWrap").classList.remove("hidden")}if(data.status==="ready"){clearInterval(timer);$("status").textContent="Ready. The glasses can now begin the interview.";$("hypotheses").textContent=data.hypotheses||"No hypotheses returned.";$("hypoWrap").classList.remove("hidden")}else if(data.status==="error"){clearInterval(timer);$("status").textContent=data.error||"Model startup failed.";$("prepareBtn").disabled=false}else{$("status").textContent="Starting the model and generating initial hypotheses… This cold start may take several minutes."}}
+function show(data){if(data.status==="ready"){clearInterval(timer);$("status").textContent="Ready. The glasses are connected and can begin the interview.";$("hypotheses").textContent=data.hypotheses||"No hypotheses returned.";$("hypoWrap").classList.remove("hidden")}else if(data.status==="error"){clearInterval(timer);$("status").textContent=data.error||"Model startup failed.";$("prepareBtn").disabled=false}else{$("status").textContent="Glasses connected. Starting the model and generating initial hypotheses…"}}
 </script></body></html>"""