claude-code/packages/remote-control-server/src/routes/web/auth.ts

import { Hono } from 'hono'
import { storeBindSession } from '../../store'
import {
  resolveExistingWebSessionId,
  toWebSessionId,
} from '../../services/session'

const app = new Hono()

/** POST /web/bind — Bind a session to a UUID (no-login auth) */
app.post('/bind', async c => {
  const body = await c.req.json()
  const sessionId = body.sessionId
  // UUID can come from query param (api.js sends it in URL) or body
  const uuid = c.req.query('uuid') || body.uuid

  if (!sessionId || !uuid) {
    return c.json({ error: 'sessionId and uuid are required' }, 400)
  }

  const resolvedSessionId = resolveExistingWebSessionId(sessionId)
  if (!resolvedSessionId) {
    return c.json({ error: 'Session not found' }, 404)
  }

  storeBindSession(resolvedSessionId, uuid)
  return c.json({ ok: true, sessionId: toWebSessionId(resolvedSessionId) })
})

export default app