fix and update

apps/frontend/lib/api.ts

@@ -236,6 +236,8 @@ export interface QrLoginSession {
   status: 'PENDING' | 'APPROVED' | 'EXPIRED';
   expiresAt: string;
   qrPayload?: string;
+  claimed?: boolean;
+  claimedDeviceName?: string;
   auth?: AuthTokens & { user?: PublicUser };
 }
 
@@ -255,6 +257,23 @@ export async function pollQrLoginSession(sessionId: string) {
   return apiFetch<QrLoginSession>(`/auth/advanced/qr/session/${sessionId}`);
 }
 
+export async function createDeviceLinkQrSession(userId: string, token: string) {
+  return apiFetch<QrLoginSession>(`/security/users/${userId}/device-link/session`, { method: 'POST' }, token);
+}
+
+export async function claimQrLoginSession(sessionId: string) {
+  const { buildAuthDevicePayload } = await import('@/lib/device-client');
+  const device = buildAuthDevicePayload();
+  return apiFetch<QrLoginSession>(`/auth/advanced/qr/session/${sessionId}/claim`, {
+    method: 'POST',
+    body: JSON.stringify(device)
+  });
+}
+
+export async function approveQrLoginSession(sessionId: string, token: string) {
+  return apiFetch<QrLoginSession>(`/auth/advanced/qr/session/${sessionId}/approve`, { method: 'POST' }, token);
+}
+
 export interface TotpSetupResponse {
   secret: string;
   otpauthUrl: string;