Push notifications for unattended alarms - #332

Merged

nedtwigg merged 29 commits into

mainfrom

push-notifications

Jul 29, 2026

Commits on Jul 29, 2026

Pocket: installable web app with a service worker

nedtwigg
and
claude
committed
Server: Web Push subscriptions and host-triggered delivery

nedtwigg
and
claude
committed
Alerts: push an unattended alarm to paired phones

nedtwigg
and
claude
committed
Pocket: document the installed app's separate storage partition

nedtwigg
and
claude
committed
Pocket: detect install state and name every reason push is unavailable

nedtwigg
and
claude
committed
Push: cleanup pass — dedupe, drop a round trip, fix a binary test file

nedtwigg
and
claude
committed
fix(pocket): track push registration per host
nedtwigg
committed
fix(pocket): reuse matching push subscription
nedtwigg
committed
fix(pocket): sanitize push text in service worker
nedtwigg
committed
fix(server): reject mismatched VAPID keypairs
nedtwigg
committed
Push: enforce the sw.js/boundedPushText mirror, and fix the HostsView stories

nedtwigg
and
claude
committed
fix(pocket): report needs-install before probing push capabilities

nedtwigg
and
claude
committed
fix(pocket): treat a failed push-config fetch as unknown, not disabled

nedtwigg
and
claude
committed
fix(pocket): hide the install notice when the server cannot push

nedtwigg
and
claude
committed
fix(push): strip U+061C and cap text on code points

nedtwigg
and
claude
committed
fix(pocket): never let a push payload skip the notification

nedtwigg
and
claude
committed
fix(host): discard push-device refreshes that outlive their Host

nedtwigg
and
claude
committed
fix(server): surface failed push deliveries

nedtwigg
and
claude
committed
docs(specs): sync push specs with the branch

nedtwigg
and
claude
committed
fix(pocket): preserve push permission gesture
nedtwigg
committed
fix(host): order push-device refreshes
nedtwigg
committed
fix(server): validate VAPID subject at startup
nedtwigg
committed
feat(push): read back which Hosts this device already registered

nedtwigg
and
claude
committed
feat(remote): account-centric UX over the device-centric security model

nedtwigg
and
claude
committed
fix(pocket): repair stale push registrations
nedtwigg
committed
fix(pocket): merge concurrent push registrations
nedtwigg
committed
fix(pocket): clear stale push readback
nedtwigg
committed
fix(pocket): correct passkey recovery guidance
nedtwigg
committed
fix(server): restrict push endpoint egress
nedtwigg
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Push notifications for unattended alarms - #332

Push notifications for unattended alarms#332
nedtwigg merged 29 commits into
mainfrom
push-notifications

Commits on Jul 29, 2026

Pocket: installable web app with a service worker

Server: Web Push subscriptions and host-triggered delivery

Alerts: push an unattended alarm to paired phones

Pocket: document the installed app's separate storage partition

Pocket: detect install state and name every reason push is unavailable

Push: cleanup pass — dedupe, drop a round trip, fix a binary test file

fix(pocket): track push registration per host

fix(pocket): reuse matching push subscription

fix(pocket): sanitize push text in service worker

fix(server): reject mismatched VAPID keypairs

Push: enforce the sw.js/boundedPushText mirror, and fix the HostsView stories

fix(pocket): report needs-install before probing push capabilities

fix(pocket): treat a failed push-config fetch as unknown, not disabled

fix(pocket): hide the install notice when the server cannot push

fix(push): strip U+061C and cap text on code points

fix(pocket): never let a push payload skip the notification

fix(host): discard push-device refreshes that outlive their Host

fix(server): surface failed push deliveries

docs(specs): sync push specs with the branch

fix(pocket): preserve push permission gesture

fix(host): order push-device refreshes

fix(server): validate VAPID subject at startup

feat(push): read back which Hosts this device already registered

feat(remote): account-centric UX over the device-centric security model

fix(pocket): repair stale push registrations

fix(pocket): merge concurrent push registrations

fix(pocket): clear stale push readback

fix(pocket): correct passkey recovery guidance

fix(server): restrict push endpoint egress