Notification bridge fixes for mobile and HTTP-origin Muximux installs (follow-up to #320 test results).
Fixed
- Notifications from embedded apps now work on Android Chrome, Samsung Browser, and mobile Firefox. The bridge renders through
ServiceWorkerRegistration.showNotification()instead of theNotificationconstructor, which mobile browsers don't implement. - Notification clicks on mobile route back to the right app. The service worker posts the target app name to the active window client and the bridge calls
selectAppon receipt. - The proxy-injected
Notificationshim no longer lies about permission. It starts at"default", queries the parent viapostMessage, and forwardsrequestPermission()to the top-level window so the real browser prompt appears at Muximux's origin. Apps that readNotification.permissionbefore sending see the actual state instead of a hardcoded"granted".
Changed
- Apps wiki documents the HTTPS requirement and the iOS Safari PWA-install caveat for notifications.
golangci-lint runon the repo now reports zero issues -- eleven pre-existing false positives (test fixtures, ASCII-range byte conversions, trusted-content writes) got narrow//nolintcomments with actual reasons so new contributions start from a clean baseline.