Desktop App Pairing Demo
Download desktop → pair workspace → analyze local repo.
End-to-end pairing flow + the first local capability surface.
data flow
scenario architecture
web /admin/api-keys ──mint vxlk_live_*──▶ paste in desktop
│
keyring (OS keychain)
│
Authorization: Bearer
│
v1 API surfaceDownload desktop app
macOS, Windows, Linux builds available.
approvals queue · live · polling every 5s
| run | decide |
|---|---|
| ai_coding · ck98zxm9q… | ✓ approve✗ reject |
| deploy_pipeline · ck98zw3py… | ✓ approve✗ reject |
| infra_update · ck98ztr5h… | ✓ approve✗ reject |
Desktop is just an API key
Pairing the desktop = pasting a vxlk_live_* key with the scopes you want it to have. The webview never sees plaintext credentials; the key lives in OS keychain via the keyring crate and is read on every Authorization header build.
expected result
Installer downloaded.
engineering principle
Pairing = pasting an API key. There's no separate auth flow, no special pairing protocol. The desktop is a thin Tauri shell around the same v1 surface you'd hit from a CI runner, with the OS keychain caching credentials.