abkslmandClaude Fable 5
add50fe074
Answering "can push be local when on LAN": a backgrounded iOS app can only be woken through Apple's push service, so a LAN-only wake path doesn't exist — but the *sender* can be this Mac. DirectAPNSSender holds the APNS .p8 (path + Key ID + Team ID, runtime-configured like the relay: env vars first, then the Settings-written defaults keys) and posts the same content-free approval.pending tickle straight to api.push.apple.com (ES256 provider JWT via CryptoKit, 40-min cache, per-device throttle) — no Cloudflare dependency for push. ApprovalPushing unifies the two senders; SyncHost wakes non-connected paired devices through whichever is configured (direct wins). The Settings ▸ Remote push section gains a sender picker with the direct fields (.p8 chooser, Key ID, Team ID). PUSH_SETUP.md §4 rewritten as Option A (this Mac) / Option B (relay). JWT signing verified against the public key in tests; payload asserted byte-compatible with the worker's apns.ts tickle. Co-Authored-By: Claude Fable 5 <[email protected]>