From a634d0452827506e594d6f3e2fdfe0df548285bb Mon Sep 17 00:00:00 2001
From: Claude Code <claude@anthropic.com>
Date: Wed, 8 Apr 2026 23:51:17 -0700
Subject: [PATCH] =?UTF-8?q?chore(qr-device-login):=20=F0=9F=94=A7=20Standa?=
 =?UTF-8?q?rdize=20TypeScript=20config,=20build=20tooling,=20and=20environ?=
 =?UTF-8?q?ment=20variable=20templates=20across=20client,=20server,=20and?=
 =?UTF-8?q?=20shared=20modules?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-Authored-By: Lilith Autocommit <noreply@atlilith.com>
---
 .gitignore                                    | 15 +++++++++++++++
 qr-device-login/client/tsconfig.json          |  9 +++++++++
 qr-device-login/deploy/pki/.gitignore         |  5 +++++
 .../deploy/qr-device-login.env.example        | 19 +++++++++++++++++++
 qr-device-login/react/tsconfig.json           | 11 +++++++++++
 qr-device-login/server/tsconfig.json          | 10 ++++++++++
 qr-device-login/shared/tsconfig.json          |  8 ++++++++
 7 files changed, 77 insertions(+)
 create mode 100644 .gitignore
 create mode 100644 qr-device-login/client/tsconfig.json
 create mode 100644 qr-device-login/deploy/pki/.gitignore
 create mode 100644 qr-device-login/deploy/qr-device-login.env.example
 create mode 100644 qr-device-login/react/tsconfig.json
 create mode 100644 qr-device-login/server/tsconfig.json
 create mode 100644 qr-device-login/shared/tsconfig.json

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..2fccd66
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,15 @@
+node_modules/
+dist/
+.build/
+.env
+.env.*
+!.env.example
+.DS_Store
+*.log
+*.tsbuildinfo
+
+# PKI private keys — only ca.crt is committed
+deploy/pki/*.key
+deploy/pki/*.csr
+deploy/pki/*.srl
+deploy/pki/quinn-*.crt
diff --git a/qr-device-login/client/tsconfig.json b/qr-device-login/client/tsconfig.json
new file mode 100644
index 0000000..f583227
--- /dev/null
+++ b/qr-device-login/client/tsconfig.json
@@ -0,0 +1,9 @@
+{
+  "extends": "../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "types": ["node"]
+  },
+  "include": ["src/**/*"]
+}
diff --git a/qr-device-login/deploy/pki/.gitignore b/qr-device-login/deploy/pki/.gitignore
new file mode 100644
index 0000000..2d5eef5
--- /dev/null
+++ b/qr-device-login/deploy/pki/.gitignore
@@ -0,0 +1,5 @@
+*.key
+*.csr
+*.srl
+!ca.crt
+quinn-*.crt
diff --git a/qr-device-login/deploy/qr-device-login.env.example b/qr-device-login/deploy/qr-device-login.env.example
new file mode 100644
index 0000000..ffedee0
--- /dev/null
+++ b/qr-device-login/deploy/qr-device-login.env.example
@@ -0,0 +1,19 @@
+# Environment file for qr-device-login systemd unit.
+#
+# Deploy as /etc/qr-device-login/qr-device-login.env (chmod 640, owner root:qr-device-login).
+
+# Loopback port the service listens on. Nginx fronts everything.
+PORT=8787
+
+# Public base URL, used in the scan URL encoded into each QR code.
+PUBLIC_BASE_URL=https://qr-auth.lilith.live
+
+# Absolute path to the consumer registry YAML.
+CONSUMERS_PATH=/etc/qr-device-login/consumers.yaml
+
+# In-memory store tuning.
+MAX_PENDING_TOKENS=200
+TOKEN_TTL_MS=300000
+
+# Only nginx on loopback is trusted to set X-Client-CN.
+TRUSTED_PROXY_IPS=127.0.0.1,::1
diff --git a/qr-device-login/react/tsconfig.json b/qr-device-login/react/tsconfig.json
new file mode 100644
index 0000000..315ccb9
--- /dev/null
+++ b/qr-device-login/react/tsconfig.json
@@ -0,0 +1,11 @@
+{
+  "extends": "../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "lib": ["ES2022", "DOM", "DOM.Iterable"],
+    "jsx": "react-jsx",
+    "moduleResolution": "bundler"
+  },
+  "include": ["src/**/*"]
+}
diff --git a/qr-device-login/server/tsconfig.json b/qr-device-login/server/tsconfig.json
new file mode 100644
index 0000000..27047b5
--- /dev/null
+++ b/qr-device-login/server/tsconfig.json
@@ -0,0 +1,10 @@
+{
+  "extends": "../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "./dist",
+    "rootDir": ".",
+    "lib": ["ES2022"],
+    "types": ["node"]
+  },
+  "include": ["src/**/*", "test/**/*"]
+}
diff --git a/qr-device-login/shared/tsconfig.json b/qr-device-login/shared/tsconfig.json
new file mode 100644
index 0000000..03ce790
--- /dev/null
+++ b/qr-device-login/shared/tsconfig.json
@@ -0,0 +1,8 @@
+{
+  "extends": "../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "./dist",
+    "rootDir": "./src"
+  },
+  "include": ["src/**/*"]
+}