From a846211262f37238c001e5210938749294f8db6a Mon Sep 17 00:00:00 2001 From: Adam Soltys Date: Sat, 12 Sep 2026 10:05:10 -0700 Subject: UnifiedPush: reach a phone that has no Google in it. MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Web push on Android is Firebase's, so a phone without Google Play Services — GrapheneOS, CalyxOS, any de-Googled Android — cannot be woken by a web app at all. UnifiedPush is the way that doesn't involve Google: the user runs a distributor (ntfy and friends), apps ask it for an endpoint, and whoever wants to reach the device POSTs to that endpoint. THE WRAPPER speaks the protocol directly — four broadcasts each way, so it pulls in no library; an APK this small has no business growing a Kotlin runtime for eight intents. It asks the distributor on every launch (the call is idempotent, and it's how a distributor installed later gets noticed), raises a notification when a message arrives, and acknowledges it so the distributor stops resending. THE ENDPOINT reaches the web app on the launch URL as ?up=, the same road payment intents already travel — because the distributor talks to the app and only the web app knows which pubkeys are worth watching. It's registered with the notifier in place of a browser subscription, for notifications and for NWC alike, and needs neither permission nor push service. THE NOTIFIER sends to either kind: one deliver() that POSTs the payload to a UnifiedPush endpoint, or hands it to web-push as before. Same payloads, same 404/410 pruning. The endpoint is the only secret there, so it's never logged in full. Verified: a POST to a live ntfy endpoint delivers the payload byte for byte, so the app parses exactly what the notifier sent; the APK builds, carries the receiver, and is signed with the certificate assetlinks already pins (v1.6). tools/unifiedpush-test.js drives a browser with no push service and checks the endpoint is taken off the URL, kept, and registered. Honest about the limit: a UnifiedPush message wakes the ANDROID app, not Chrome's service worker, and the wallet's keys live in the browser's storage where nothing here can reach them. So a zap request arrives as a notification you tap, and the wallet answers when it opens — one tap instead of none. Automatic answering while closed still needs a browser with a push service. Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_019mrt228Upn9nNCwGixzSLx --- src/features/nwc.js | 40 ++++++++++++++++++++++++++++++++-------- 1 file changed, 32 insertions(+), 8 deletions(-) (limited to 'src/features/nwc.js') diff --git a/src/features/nwc.js b/src/features/nwc.js index 077b53e..dd0141d 100644 --- a/src/features/nwc.js +++ b/src/features/nwc.js @@ -595,7 +595,28 @@ export function nwcFeature(ctx) { return /push service|Registration failed|AbortError|NotSupportedError|permission denied/i.test(m); }; + // The Android wrapper's UnifiedPush endpoint, if it handed us one (see + // messages.js, which reads it off the launch URL). It needs no permission + // and no push service, and on a phone without Google Play Services it is + // the only way to be reached at all. + const upEndpoint = () => { try { return localStorage.getItem('coinos-unifiedpush') || null; } catch { return null; } }; + async function enableBackground() { + const up = upEndpoint(); + if (up) { + const pksUp = conns().map((c) => c.servicePk); + if (load().offer) pksUp.push(load().offer.pk); + if (pksUp.length) { + const r = await fetch(`${NOTIFIER}/register`, { + method: 'POST', headers: { 'content-type': 'application/json' }, + body: JSON.stringify({ subscription: { endpoint: up, unifiedpush: true }, servicePubkeys: pksUp }), + }); + if (!r.ok) throw new Error(`notifier refused: ${r.status}`); + } + const stUp = load(); stUp.background = true; delete stUp.pushUnavailable; save(stUp); + writeBg(); + return true; + } if (!('serviceWorker' in navigator) || !('PushManager' in window)) { throw new Error(t('nwcNoPushHere')); } @@ -643,11 +664,13 @@ export function nwcFeature(ctx) { async function ensureBackground(interactive) { const st = load(); if (st.background || st.backgroundOff) return; - if (typeof navigator === 'undefined' || !('serviceWorker' in navigator) - || typeof window === 'undefined' || !('PushManager' in window) - || typeof Notification === 'undefined') return; if (!conns().length) return; - if (!interactive && Notification.permission !== 'granted') return; + if (!upEndpoint()) { + if (typeof navigator === 'undefined' || !('serviceWorker' in navigator) + || typeof window === 'undefined' || !('PushManager' in window) + || typeof Notification === 'undefined') return; + if (!interactive && Notification.permission !== 'granted') return; + } try { await enableBackground(); await reconcileBg(); @@ -691,15 +714,16 @@ export function nwcFeature(ctx) { clearTimeout(regTimer); regTimer = setTimeout(async () => { try { - const reg = await navigator.serviceWorker.ready; - const sub = await reg.pushManager.getSubscription(); - if (!sub) return; const pks = conns().map((c) => c.servicePk); if (load().offer) pks.push(load().offer.pk); if (!pks.length) return; + const up2 = upEndpoint(); + const sub = up2 ? { endpoint: up2, unifiedpush: true } + : await (await navigator.serviceWorker.ready).pushManager.getSubscription().then((x) => x && x.toJSON()); + if (!sub) return; await fetch(`${NOTIFIER}/register`, { method: 'POST', headers: { 'content-type': 'application/json' }, - body: JSON.stringify({ subscription: sub.toJSON(), servicePubkeys: pks }), + body: JSON.stringify({ subscription: sub, servicePubkeys: pks }), }); } catch (e) { console.warn('nwc: notifier re-register failed', e.message); } }, 1500); -- cgit v1.2.3