Push and sign‑in infrastructure

// One login, four products, one user id.
const user_id = "usr_8f21c4";

// 1. A passkey, if this device has one.
const pk = await signops.passkeys.verify(token);
if (pk.verified) return signIn(user_id);

// 2. Ask the trusted phone.
const ok = await signops.approve.createAndWait({
  user_id,
  context: "Chrome on Windows",
});

// 3. No answer: an email code.
if (ok.status !== "approved") {
  await signops.otp.send({ email, app_name: "Kirana" });
  return askForCode();
}

// 4. Tell the other devices.
await signops.push.send({
  user_id,
  title: "New login on Chrome in Pune",
});
return signIn(user_id);