feat: add live device sessions and signed usage receipts

[EcstaceeLOR]

Summary

• add durable two-minute customer-to-device QR handoffs with atomic one-time claims and device-only claim tokens
• integrate polished customer session and independent device terminal routes into the Vercel frontend
• require exact machine, payer, order, expiry, active-state, RPC, and controller-wallet invariants before enabling a machine
• persist controller-signed start/end receipts bound to measured duration and verify them locally in the session and My Rentals screens
• fail closed on replay, mismatched QR bindings, deactivation, expiry, RPC failure, and invalid stored signatures

Validation

• all workspace type-checks passed
• production builds passed for device, web, worker, and contracts
• web unit tests: 48 passed
• relay tests: 23 passed, 1 PostgreSQL integration test skipped locally
• device tests: 6 passed
• browser suite: all 7 flows passed across the combined full run and focused network-retry rerun
• two-browser E2E covers wrong machine, wrong payer, QR claim, start, refresh recovery, stop, local receipt verification, My Rentals recovery, and replay rejection
• staged secret audit passed; no .env, BUIDL ID, or submission artifact is included

Closes #31

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
proofkey	Ready	Preview	Sep 13, 2026 3:11pm UTC