Operator access on this computer only (loopback). The token is kept in memory and never put in a URL or saved to disk by this page.
On the Aria host run aria devices pair --name "My phone" and enter the pairing id and code it prints (single use, expires in minutes).
aria devices pair --name "My phone"
The long-lived device credential is kept by the browser in an HttpOnly cookie that page scripts cannot read; the operator can revoke this device at any time.