Push Notifications

curl -H "Authorization: Bearer <token>" \
  http://127.0.0.1:3006/api/push/vapid-public-key

{
  "publicKey": "BKxN8ZQ..."
}

{"ok": true}

curl -X POST -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{
    "endpoint": "https://fcm.googleapis.com/fcm/send/...",
    "keys": {
      "p256dh": "BDd3_hVL...",
      "auth": "BTkDgZq..."
    }
  }' \
  http://127.0.0.1:3006/api/push/subscribe

{"ok": true}

curl -X DELETE -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{
    "endpoint": "https://fcm.googleapis.com/fcm/send/..."
  }' \
  http://127.0.0.1:3006/api/push/subscribe

const response = await fetch('/api/push/vapid-public-key', {
  headers: {
    'Authorization': 'Bearer ' + jwtToken
  }
})
const { publicKey } = await response.json()

const permission = await Notification.requestPermission()
if (permission !== 'granted') {
  throw new Error('Notification permission denied')
}

const registration = await navigator.serviceWorker.ready
const subscription = await registration.pushManager.subscribe({
  userVisibleOnly: true,
  applicationServerKey: urlBase64ToUint8Array(publicKey)
})

const json = subscription.toJSON()
await fetch('/api/push/subscribe', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer ' + jwtToken,
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    endpoint: json.endpoint,
    keys: {
      p256dh: json.keys.p256dh,
      auth: json.keys.auth
    }
  })
})

function urlBase64ToUint8Array(base64String) {
  const padding = '='.repeat((4 - base64String.length % 4) % 4)
  const base64 = (base64String + padding)
    .replace(/-/g, '+')
    .replace(/_/g, '/')
  
  const rawData = window.atob(base64)
  const outputArray = new Uint8Array(rawData.length)
  
  for (let i = 0; i < rawData.length; ++i) {
    outputArray[i] = rawData.charCodeAt(i)
  }
  return outputArray
}

{
  "title": "Permission Request",
  "body": "Claude wants to edit src/main.ts",
  "data": {
    "sessionId": "abc123",
    "requestId": "req_456",
    "url": "/sessions/abc123"
  }
}

{
  "title": "Session Ready",
  "body": "My Project session is ready",
  "data": {
    "sessionId": "abc123",
    "url": "/sessions/abc123"
  }
}

VAPID_SUBJECT=mailto:[email protected]
# or
VAPID_SUBJECT=https://your-domain.example

~/.hapi/vapid-keys.json

// service-worker.js
self.addEventListener('push', (event) => {
  const data = event.data.json()
  
  event.waitUntil(
    self.registration.showNotification(data.title, {
      body: data.body,
      icon: '/icon.png',
      badge: '/badge.png',
      data: data.data
    })
  )
})

self.addEventListener('notificationclick', (event) => {
  event.notification.close()
  
  event.waitUntil(
    clients.openWindow(event.notification.data.url)
  )
})

if ('serviceWorker' in navigator && 'PushManager' in window) {
  // Push notifications supported
} else {
  // Fall back to SSE or polling
}