Add browser push notification backend

[momocentral]

Summary

Adds backend support for browser push notifications.

Implemented:

• Push subscription API endpoints:
  • fetch VAPID public key
  • register/update browser subscription
  • list current user's subscriptions
  • delete subscription
• PushSubscription model, schemas, CRUD, and Alembic migration
• Web Push delivery service using pywebpush
• Alert detection hook to send browser notifications when an alert is created
• VAPID-related settings in .env.example
• Endpoint tests for subscription registration, fetch, delete, and public key behavior

Required deployment steps

After merging:

1. Install updated dependencies.
2. Run Alembic migrations.
3. Configure:
   • VAPID_PUBLIC_KEY
   • VAPID_PRIVATE_KEY
   • VAPID_SUBJECT
   • PLATFORM_URL
   • optional PUSH_NOTIFICATIONS_TTL_SECONDS

Verification

I verified locally that:

• the API container starts healthy
• Alembic reaches the new migration head
• the push_subscriptions table exists
• pywebpush imports successfully
• the push notification client is enabled when VAPID settings are present

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	botocore@​1.42.14 ⏵ 1.42.97	+1
	certifi@​2025.11.12 ⏵ 2026.4.22
	coverage@​7.13.0 ⏵ 7.13.5	+1
	click@​8.3.1 ⏵ 8.3.3	+1
	anyio@​4.12.0 ⏵ 4.13.0	+1
	mako@​1.3.10 ⏵ 1.3.12		+18
	aiohttp@​3.13.5
	greenlet@​3.3.0 ⏵ 3.5.0	+1
	charset-normalizer@​3.4.4 ⏵ 3.4.7
	boto3@​1.42.14 ⏵ 1.42.97	+1
	filelock@​3.20.1 ⏵ 3.29.0		+2
	aiohappyeyeballs@​2.6.1
	identify@​2.6.15 ⏵ 2.6.19	+1
	http-ece@​1.2.1
	attrs@​26.1.0
	aiosignal@​1.4.0
	jmespath@​1.0.1 ⏵ 1.1.0	+1
	cryptography@​47.0.0
	frozenlist@​1.8.0
	multidict@​6.7.1
	idna@​3.11 ⏵ 3.13

View full report

[codecov]

Codecov Report

❌ Patch coverage is 95.36424% with 7 lines in your changes missing coverage. Please review.
✅ Project coverage is 90.22%. Comparing base (74395ab) to head (14625fe).

Files with missing lines	Patch %	Lines
src/app/api/api_v1/endpoints/detections.py	57.14%	3 Missing ⚠️
src/app/crud/crud_push_subscription.py	78.57%	3 Missing ⚠️
src/app/api/api_v1/endpoints/push_subscriptions.py	96.87%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #589      +/-   ##
==========================================
+ Coverage   89.92%   90.22%   +0.30%     
==========================================
  Files          55       59       +4     
  Lines        2451     2598     +147     
==========================================
+ Hits         2204     2344     +140     
- Misses        247      254       +7     

Flag	Coverage Δ
backend	90.21% <95.36%> (+0.31%)	⬆️
client	90.40% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.