commandmate 0.27.1 → 0.28.0

package/.env.example

@@ -98,6 +98,34 @@ CM_BIND=127.0.0.1
 # Example: CLAUDE_PATH=/opt/homebrew/bin/claude
 # CLAUDE_PATH=
 
+# ===================================
+# Web Push / Phone Notifications (Issues #1125, #2123, #2124)
+# ===================================
+
+# CommandMate can push a notification to your phone when an agent needs you.
+# It sends nothing until this key pair exists, and it says so at startup and in
+# `commandmate status` when it is missing.
+#
+# Generate the pair with:
+#   commandmate init          # writes all three variables below into .env
+#
+# Full setup (HTTPS requirement, iOS "Add to Home Screen", how to verify):
+#   docs/user-guide/webapp-guide.md
+#
+# CM_VAPID_PRIVATE_KEY is a SECRET. Never commit it and never share it; .env is
+# git-ignored, a copy of it is not. Replacing the pair silently orphans every
+# device that has already subscribed, so keep the one `init` generated.
+# CM_VAPID_PUBLIC_KEY=<base64url, 65 bytes>
+# CM_VAPID_PRIVATE_KEY=<base64url, 32 bytes>
+
+# The VAPID `sub` claim: who to contact about pushes from this server.
+# RFC 8292 allows a "mailto:" address or an "https://" URL, and **Apple (APNs)
+# validates it** — a host that cannot resolve (localhost, a bare hostname, a
+# reserved TLD like .local) is answered with 403 and iPhone/iPad receive nothing
+# while Android keeps working, because FCM does not check it.
+# Default when unset: https://github.com/Kewton/CommandMate
+# CM_VAPID_SUBJECT=https://github.com/Kewton/CommandMate
+
 # ===================================
 # Logging
 # ===================================

package/.next/BUILD_ID

@@ -1 +1 @@
-9IXgWfBUtnEnRqnbmErTp
+0GHE2JGlFzqvSBZAcBFSt