oficina / meet Public

Server-side push so a knock reaches a member whose app is closed — the fifth and last of the 2026-09-17 requests.

POST /native/devices takes the device token; the hub calls back when someone begins waiting; the server pushes to every member who was not admitted in that room at that moment, since the ones who were can already see the queue.

Needs an Apple push key to do anything. Unset, the server sends nothing and knocks reach everyone in the room exactly as before. Partly set, startup refuses.

Not verified against Apple: that needs the push entitlement, a signed build and a real device token, none of which exist yet. What is verified is everything up to the wire — nine tests against a fake Apple including verifying the provider JWT against its own public key, seven on registration and the who-is-told decision.

Gates: GOTOOLCHAIN=go1.26.5 make ci, make race, make native-test, make native-browser, make browser, swift test (24), both app builds.