Document the retired WAKEUP_PING refresh path as inactive and drop unused refresh auth helpers.

Guides and the debug panel still described /notifications/refresh and api_* scheduling as current after Phase 5; keep Phase 4 cleanup and FCM send-wakeup diagnostics.

.node-version

@@ -1 +1 @@
-18.19.0
+20.18.1

.nvmrc

@@ -1 +1 @@
-18.19.0
+20.18.1

AGENTS.md

@@ -0,0 +1,20 @@
+# Agent Instructions for crowd-funder-for-time-pwa
+
+## Android Build — Google Play Services / FOSS Compatibility
+
+**Firebase is opt-in. Do NOT enable it accidentally.**
+
+`android/google-services.json` is gitignored and may be present on disk for push notification development, but Firebase is only activated when you explicitly pass `-PfirebaseEnabled` to Gradle:
+
+- **FOSS / APK / Aurora / Zapstore / F-Droid builds**: just `./gradlew assembleRelease` — Firebase stays off even if `google-services.json` is on disk.
+- **Firebase / FCM / Play Store builds**: `./gradlew bundleRelease -PfirebaseEnabled` — explicitly opt in.
+
+This guard is in `android/app/build.gradle`. Do NOT change this conditional to activate Firebase unconditionally based on file presence alone — that was the bug that broke FOSS distribution in June 2026.
+
+`google-services.json` is intentionally excluded from git (`android/.gitignore`). Never commit it.
+
+Full details, incident history, and F-Droid notes: `doc/development/android-firebase-gms.md`
+
+## Android Build — MLKit Barcode Scanner
+
+`@capacitor-mlkit/barcode-scanning` depends on `com.google.android.gms:play-services-code-scanner`, which merges `com.google.android.gms.version` into the APK manifest. This is a known long-term issue for strict FOSS/F-Droid builds. For now, the dependency is accepted; barcode scanning simply will not work on GMS-less devices (it fails gracefully at scan time, not at startup). Do not add additional GMS/Firebase dependencies without explicitly acknowledging this trade-off.

BUILDING.md

@@ -334,11 +334,11 @@ The `serve` functionality provides a local HTTP server for testing production bu
 - If there are DB changes: before updating the test server, open browser(s) with
 current version to test DB migrations.
 
-- Update the ClickUp tasks & CHANGELOG.md & the version in package.json, run
+- Update the ClickUp tasks & CHANGELOG.md & the version in package.json, run:
 `npm install`.
 
-- Run a build to make sure package-lock version is updated, linting works, etc:
-`npm install && npm run build:web`
+- Run a build to make sure linting works, etc:
+`npm run build:web`
 
 - Commit everything (since the commit hash is used the app).
 
@@ -347,7 +347,7 @@ current version to test DB migrations.
 
 - Tag with the new version, 
 [online](https://gitea.anomalistdesign.com/trent_larson/crowd-funder-for-time-pwa/releases) or 
-`git tag 1.0.2 && git push origin 1.0.2`.
+`git tag 1.3.13 && git push origin 1.3.13`.
 
 - For test, build the app:
 
@@ -1141,7 +1141,7 @@ export GEM_PATH=$shortened_path
 ##### 1. Bump the version in package.json & CHANGELOG.md for `MARKETING_VERSION`, then `grep CURRENT_PROJECT_VERSION ios/App/App.xcodeproj/project.pbxproj` and add 1 for the numbered version here:
 
 ```bash
-cd ios/App && xcrun agvtool new-version 65 && perl -p -i -e "s/MARKETING_VERSION = .*;/MARKETING_VERSION = 1.3.8;/g" App.xcodeproj/project.pbxproj && cd -
+cd ios/App && xcrun agvtool new-version 70 && perl -p -i -e "s/MARKETING_VERSION = .*;/MARKETING_VERSION = 1.4.4;/g" App.xcodeproj/project.pbxproj && cd -
 # Unfortunately this edits Info.plist directly.
 #xcrun agvtool new-marketing-version 0.4.5
 ```
@@ -1363,7 +1363,7 @@ npm run assets:validate
 **Source Assets (Required):**
 - `resources/icon.png` - App icon source
 - `resources/splash.png` - Splash screen source  
-- `resources/splash_dark.png` - Dark mode splash source
+- `resources/splash-dark.png` - Dark mode splash source
 
 **Android Resources (Generated):**
 - `android/app/src/main/res/drawable/splash.png` - Splash screen drawable
@@ -1422,8 +1422,8 @@ The recommended way to build for Android is using the automated build script:
 ##### 1. Bump the version in package.json, then update these versions & run:
 
 ```bash
-perl -p -i -e 's/versionCode .*/versionCode 66/g' android/app/build.gradle
-perl -p -i -e 's/versionName .*/versionName "1.4.1"/g' android/app/build.gradle
+perl -p -i -e 's/versionCode .*/versionCode 70/g' android/app/build.gradle
+perl -p -i -e 's/versionName .*/versionName "1.4.4"/g' android/app/build.gradle
 ```
 
 ##### 2. Build
@@ -1461,17 +1461,18 @@ cd -
 
 - Setup by adding the app/gradle.properties.secrets file (see properties at top
   of app/build.gradle) and the app/time-safari-upload-key-pkcs12.jks file
-- In app/build.gradle, bump the versionCode and maybe the versionName
 - Then `bundleRelease`:
 
 ```bash
 cd android
-./gradlew bundleRelease -Dlint.baselines.continue=true
+./gradlew bundleRelease -Dlint.baselines.continue=true -PfirebaseEnabled
 cd -
 ```
 
 ... and find your `aab` file at app/build/outputs/bundle/release
 
+* Note that F-Droid builds should omit `-PfirebaseEnabled`.
+
 At play.google.com/console:
 
 - Go to Production or the Closed Testing and either Create Track or Manage Track.
@@ -1606,6 +1607,11 @@ Use the commands above to check and fix code quality issues.
 4. **Native Build**: Platform-specific compilation
 5. **Package Creation**: APK/IPA generation
 
+`resources/` is the canonical source for app icons and splash screens.
+Do not keep a legacy top-level `assets/` directory unless it is intentionally
+used: `@capacitor/assets` prioritizes `assets/` over `resources/`, which can
+prevent the canonical assets from being discovered.
+
 ## Architecture Environment Configuration
 
 ### Environment Files

CHANGELOG.md

@@ -20,9 +20,36 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   addresses, which the `.env` files had been overwriting
 
 
-## [1.3.8] - 2026
+## [1.4.4] - 2026.06.21
+### Changed
+- More checks for Firebase so that it won't break, eg in Aurora store.
+
+
+## [1.4.3] - 2026.06.19
+### Removed
+- Automatic "Check your starred projects" daily notification
+### Changed
+- Positioning for 'Thank' button and entity-type toggle link
+
+
+## [1.4.2] - 2026.05.24
+### Changed
+- Support 16 KB page sizes
+
+
+## [1.3.13] - 2026.04.05
+### Added
+- Ability to select project that the current one fulfills
+- Separate Terms & Conditions page (required for SMS campaigns)
+### Fixed
+- Edits to a 'give' would delete the image
+
+
+## [1.3.12] - 2026.03.21
 ### Added
 - Device wake-up for notifications
+### Changed
+- Rename to "Gifties"
 
 
 ## [1.3.7]

CLAUDE.md

@@ -0,0 +1 @@
+@AGENTS.md

README.md

@@ -121,7 +121,7 @@ See [Logging Configuration Guide](doc/logging-configuration.md) for complete det
 
 ## Notification Debug Panel (dev builds)
 
-In non-production bundles (for example `vite dev` or a Vite build whose mode is not `production`), the **Notification Debug Panel** at `/dev/notifications` helps you test notification registration, backend refresh, WAKEUP_PING handling, and local schedule inspection on native builds.
+In non-production bundles (for example `vite dev` or a Vite build whose mode is not `production`), the **Notification Debug Panel** at `/dev/notifications` helps you test FCM token registration, AlertSearch authorization upload, FCM wakeup delivery (`/debug/send-wakeup`), and local schedule inspection on native builds. The app no longer consumes `WAKEUP_PING` to call `/notifications/refresh` or schedule `api_*` notifications.
 
 **Access:** **Account** → enable **Show All General Advanced Functions** → **Notification Debug Panel**.
 
@@ -229,7 +229,7 @@ icon and splash screen generation across all platforms.
 ### Asset Sources
 
 - **Single source of truth**: `resources/` directory (Capacitor default)
-- **Source files**: `icon.png`, `splash.png`, `splash_dark.png`
+- **Source files**: `icon.png`, `splash.png`, `splash-dark.png`
 - **Format**: PNG or SVG files for optimal quality
 
 ### Asset Generation

android/app/build.gradle

@@ -29,16 +29,16 @@ android {
     compileSdk rootProject.ext.compileSdkVersion
 
     compileOptions {
-        sourceCompatibility JavaVersion.VERSION_17
-        targetCompatibility JavaVersion.VERSION_17
+        sourceCompatibility JavaVersion.VERSION_21
+        targetCompatibility JavaVersion.VERSION_21
     }
 
     defaultConfig {
         applicationId "app.timesafari.app"
         minSdkVersion rootProject.ext.minSdkVersion
         targetSdkVersion rootProject.ext.targetSdkVersion
-        versionCode 66
-        versionName "1.4.1"
+        versionCode 70
+        versionName "1.4.4"
         testInstrumentationRunner "androidx.test.runner.AndroidJUnitRunner"
         aaptOptions {
              // Files and dirs to omit from the packaged assets dir, modified to accommodate modern web apps.
@@ -72,13 +72,14 @@ android {
     }
     packagingOptions {
         jniLibs {
+            // Required for 16 KB page-size support: keep native libs uncompressed and
+            // page-aligned inside the APK (default on AGP 8.x with minSdk 23+, set
+            // explicitly so it does not regress).
+            useLegacyPackaging = false
             pickFirsts += ['**/lib/x86_64/libbarhopper_v3.so', '**/lib/x86_64/libimage_processing_util_jni.so', '**/lib/x86_64/libsqlcipher.so']
         }
     }
 
-    // Configure for 16 KB page size compatibility
-
-
     // Enable bundle builds (without which it doesn't work right for bundleDebug vs bundleRelease)
     bundle {
         language {
@@ -129,11 +130,20 @@ dependencies {
 
 apply from: 'capacitor.build.gradle'
 
+// Firebase / Google Play Services are opt-in. Pass -PfirebaseEnabled to any Gradle command
+// to activate Firebase (FCM push notifications). Without this flag the build works on
+// F-Droid, Aurora, Zapstore, and plain APK sideloading even when google-services.json
+// is present on disk (it is gitignored; see AGENTS.md for the full story).
 try {
     def servicesJSON = file('google-services.json')
-    if (servicesJSON.text) {
+    if (servicesJSON.exists() && servicesJSON.text && project.hasProperty('firebaseEnabled')) {
         apply plugin: 'com.google.gms.google-services'
+        logger.info("Firebase enabled: google-services plugin applied")
+    } else if (servicesJSON.exists() && !project.hasProperty('firebaseEnabled')) {
+        logger.info("google-services.json present but firebaseEnabled not set — skipping Firebase plugin (pass -PfirebaseEnabled to enable)")
+    } else {
+        logger.info("google-services.json not found — Firebase plugin not applied")
     }
 } catch(Exception e) {
-    logger.info("google-services.json not found, google-services plugin not applied. Push Notifications won't work")
+    logger.info("google-services plugin not applied: ${e.message}")
 }

android/app/capacitor.build.gradle

@@ -2,8 +2,8 @@
 
 android {
   compileOptions {
-      sourceCompatibility JavaVersion.VERSION_17
-      targetCompatibility JavaVersion.VERSION_17
+      sourceCompatibility JavaVersion.VERSION_21
+      targetCompatibility JavaVersion.VERSION_21
   }
 }
 

android/app/src/main/assets/capacitor.config.json

@@ -1,6 +1,6 @@
 {
 	"appId": "app.timesafari",
-	"appName": "TimeSafari",
+	"appName": "Giftopia",
 	"webDir": "dist",
 	"server": {
 		"cleartext": true
@@ -41,12 +41,12 @@
 			"iosIsEncryption": false,
 			"iosBiometric": {
 				"biometricAuth": false,
-				"biometricTitle": "Biometric login for TimeSafari"
+				"biometricTitle": "Biometric login for Giftopia"
 			},
 			"androidIsEncryption": false,
 			"androidBiometric": {
 				"biometricAuth": false,
-				"biometricTitle": "Biometric login for TimeSafari"
+				"biometricTitle": "Biometric login for Giftopia"
 			},
 			"electronIsEncryption": false
 		},
@@ -107,7 +107,7 @@
 		},
 		"buildOptions": {
 			"appId": "app.timesafari",
-			"productName": "TimeSafari",
+			"productName": "Giftopia",
 			"directories": {
 				"output": "dist-electron-packages"
 			},

android/app/src/main/java/app/timesafari/MainActivity.java

@@ -30,6 +30,7 @@ public class MainActivity extends BridgeActivity {
     private static final String KEY_BASE64 = "shared_image_base64";
     private static final String KEY_FILE_NAME = "shared_image_file_name";
     private static final String KEY_READY = "shared_image_ready";
+    private static final Uri SHARED_PHOTO_DEEP_LINK = Uri.parse("timesafari://shared-photo");
     
     @Override
     public void onCreate(Bundle savedInstanceState) {
@@ -121,7 +122,9 @@ public class MainActivity extends BridgeActivity {
             }
             if (imageUri != null) {
                 String fileName = intent.getStringExtra(Intent.EXTRA_TEXT);
-                processSharedImage(imageUri, fileName);
+                if (processSharedImage(imageUri, fileName)) {
+                    notifySharedPhotoDeepLink();
+                }
                 handled = true;
             }
         }
@@ -138,7 +141,9 @@ public class MainActivity extends BridgeActivity {
                 imageUris = uris;
             }
             if (imageUris != null && !imageUris.isEmpty()) {
-                processSharedImage(imageUris.get(0), null);
+                if (processSharedImage(imageUris.get(0), null)) {
+                    notifySharedPhotoDeepLink();
+                }
                 handled = true;
             }
         }
@@ -157,10 +162,12 @@ public class MainActivity extends BridgeActivity {
     }
     
     /**
-     * Process a shared image: read it, convert to base64, and write to temp file
+     * Process a shared image: read it, convert to base64, and write it to SharedPreferences
      * Uses try-with-resources to ensure proper stream cleanup and prevent network issues
+     *
+     * @return true when the image is available to the SharedImage plugin
      */
-    private void processSharedImage(Uri imageUri, String fileName) {
+    private boolean processSharedImage(Uri imageUri, String fileName) {
         // Extract filename from URI or use default (do this before opening streams)
         String actualFileName = fileName;
         if (actualFileName == null || actualFileName.isEmpty()) {
@@ -183,7 +190,7 @@ public class MainActivity extends BridgeActivity {
             
             if (inputStream == null) {
                 Log.e(TAG, "Failed to open input stream for shared image");
-                return;
+                return false;
             }
             
             // Read image bytes
@@ -199,21 +206,36 @@ public class MainActivity extends BridgeActivity {
             String base64String = Base64.encodeToString(imageBytes, Base64.NO_WRAP);
             
             // Store in SharedPreferences for plugin to read
-            storeSharedImageInPreferences(base64String, actualFileName);
+            if (!storeSharedImageInPreferences(base64String, actualFileName)) {
+                return false;
+            }
             
             Log.d(TAG, "Successfully processed shared image: " + actualFileName);
+            return true;
         } catch (IOException e) {
             Log.e(TAG, "Error processing shared image", e);
+            return false;
         } catch (Exception e) {
             Log.e(TAG, "Unexpected error processing shared image", e);
+            return false;
         }
     }
+
+    /**
+     * Deliver an App-plugin URL event after the shared image is ready. The App plugin retains
+     * URL-open events until JavaScript registers its listener, covering both cold and warm starts.
+     */
+    private void notifySharedPhotoDeepLink() {
+        Intent deepLinkIntent = new Intent(Intent.ACTION_VIEW, SHARED_PHOTO_DEEP_LINK);
+        getBridge().onNewIntent(deepLinkIntent);
+        Log.d(TAG, "Delivered shared-photo deep link to Capacitor");
+    }
     
     /**
      * Store shared image data in SharedPreferences for plugin to read
      * Plugin will read and clear the data when called
      */
-    private void storeSharedImageInPreferences(String base64, String fileName) {
+    private boolean storeSharedImageInPreferences(String base64, String fileName) {
         try {
             SharedPreferences prefs = getSharedPreferences(SHARED_PREFS_NAME, MODE_PRIVATE);
             SharedPreferences.Editor editor = prefs.edit();
@@ -223,9 +245,11 @@ public class MainActivity extends BridgeActivity {
             editor.apply();
             
             Log.d(TAG, "Stored shared image data in SharedPreferences");
+            return true;
         } catch (Exception e) {
             Log.e(TAG, "Error storing shared image in SharedPreferences", e);
+            return false;
         }
     }
 
-} 
+}

android/app/src/main/res/values/strings.xml

@@ -1,7 +1,7 @@
 <?xml version='1.0' encoding='utf-8'?>
 <resources>
-    <string name="app_name">TimeSafari</string>
-    <string name="title_activity_main">TimeSafari</string>
+    <string name="app_name">Giftopia</string>
+    <string name="title_activity_main">Giftopia</string>
     <string name="package_name">timesafari.app</string>
     <string name="custom_url_scheme">timesafari.app</string>
 </resources>

android/capacitor-cordova-android-plugins/build.gradle

@@ -1,5 +1,5 @@
 ext {
-    androidxAppCompatVersion = project.hasProperty('androidxAppCompatVersion') ? rootProject.ext.androidxAppCompatVersion : '1.6.1'
+    androidxAppCompatVersion = project.hasProperty('androidxAppCompatVersion') ? rootProject.ext.androidxAppCompatVersion : '1.7.0'
     cordovaAndroidVersion = project.hasProperty('cordovaAndroidVersion') ? rootProject.ext.cordovaAndroidVersion : '10.1.1'
 }
 
@@ -9,7 +9,7 @@ buildscript {
         mavenCentral()
     }
     dependencies {
-        classpath 'com.android.tools.build:gradle:8.2.1'
+        classpath 'com.android.tools.build:gradle:8.7.2'
     }
 }
 
@@ -17,10 +17,10 @@ apply plugin: 'com.android.library'
 
 android {
     namespace "capacitor.cordova.android.plugins"
-    compileSdk project.hasProperty('compileSdkVersion') ? rootProject.ext.compileSdkVersion : 34
+    compileSdk project.hasProperty('compileSdkVersion') ? rootProject.ext.compileSdkVersion : 35
     defaultConfig {
-        minSdkVersion project.hasProperty('minSdkVersion') ? rootProject.ext.minSdkVersion : 22
-        targetSdkVersion project.hasProperty('targetSdkVersion') ? rootProject.ext.targetSdkVersion : 34
+        minSdkVersion project.hasProperty('minSdkVersion') ? rootProject.ext.minSdkVersion : 23
+        targetSdkVersion project.hasProperty('targetSdkVersion') ? rootProject.ext.targetSdkVersion : 35
         versionCode 1
         versionName "1.0"
     }
@@ -28,8 +28,8 @@ android {
         abortOnError false
     }
     compileOptions {
-        sourceCompatibility JavaVersion.VERSION_17
-        targetCompatibility JavaVersion.VERSION_17
+        sourceCompatibility JavaVersion.VERSION_21
+        targetCompatibility JavaVersion.VERSION_21
     }
 }
 

android/capacitor-cordova-android-plugins/cordova.variables.gradle

@@ -1,6 +1,6 @@
 // DO NOT EDIT THIS FILE! IT IS GENERATED EACH TIME "capacitor update" IS RUN
 ext {
-  cdvMinSdkVersion = project.hasProperty('minSdkVersion') ? rootProject.ext.minSdkVersion : 22
+  cdvMinSdkVersion = project.hasProperty('minSdkVersion') ? rootProject.ext.minSdkVersion : 23
   // Plugin gradle extensions can append to this to have code run at the end.
   cdvPluginPostBuildExtras = []
   cordovaConfig = [:]

android/variables.gradle

@@ -13,4 +13,11 @@ ext {
     androidxJunitVersion = '1.1.5'
     androidxEspressoCoreVersion = '3.5.1'
     cordovaAndroidVersion = '10.1.1'
+
+    // Pin CameraX to 1.4.2: first stable line shipping a 16 KB page-size-aligned
+    // libimage_processing_util_jni.so. The barcode-scanning plugin still defaults to 1.1.0.
+    androidxCameraCamera2Version = '1.4.2'
+    androidxCameraCoreVersion = '1.4.2'
+    androidxCameraLifecycleVersion = '1.4.2'
+    androidxCameraViewVersion = '1.4.2'
 }

capacitor-assets.config.json

@@ -2,9 +2,9 @@
   "icon": {
     "android": {
       "adaptive": {
-        "background": "#121212",
-        "foreground": "resources/icon.png",
-        "monochrome": "resources/icon.png"
+        "background": "resources/android/icon/icon-background.png",
+        "foreground": "resources/android/icon/icon-foreground.png",
+        "monochrome": "resources/android/icon/icon-monochrome.png"
       },
       "target": "android/app/src/main/res"
     },
@@ -22,7 +22,7 @@
       "scale": "cover",
       "target": "android/app/src/main/res"
     },
-    "darkSource": "resources/splash_dark.png",
+    "darkSource": "resources/splash-dark.png",
     "ios": {
       "target": "ios/App/App/Assets.xcassets",
       "useStoryBoard": true

capacitor.config.json

@@ -1,6 +1,6 @@
 {
 	"appId": "app.timesafari",
-	"appName": "TimeSafari",
+	"appName": "Giftopia",
 	"webDir": "dist",
 	"server": {
 		"cleartext": true
@@ -34,12 +34,12 @@
 			"iosIsEncryption": false,
 			"iosBiometric": {
 				"biometricAuth": false,
-				"biometricTitle": "Biometric login for TimeSafari"
+				"biometricTitle": "Biometric login for Giftopia"
 			},
 			"androidIsEncryption": false,
 			"androidBiometric": {
 				"biometricAuth": false,
-				"biometricTitle": "Biometric login for TimeSafari"
+				"biometricTitle": "Biometric login for Giftopia"
 			},
 			"electronIsEncryption": false
 		}
@@ -73,7 +73,7 @@
 		},
 		"buildOptions": {
 			"appId": "app.timesafari",
-			"productName": "TimeSafari",
+			"productName": "Giftopia",
 			"directories": {
 				"output": "dist-electron-packages"
 			},

capacitor.config.ts

@@ -2,7 +2,7 @@ import { CapacitorConfig } from '@capacitor/cli';
 
 const config: CapacitorConfig = {
   appId: 'app.timesafari',
-  appName: 'TimeSafari',
+  appName: 'Giftopia',
   webDir: 'dist',
   server: {
     cleartext: true
@@ -39,12 +39,12 @@ const config: CapacitorConfig = {
       iosIsEncryption: false,
       iosBiometric: {
         biometricAuth: false,
-        biometricTitle: 'Biometric login for TimeSafari'
+        biometricTitle: 'Biometric login for Giftopia'
       },
       androidIsEncryption: false,
       androidBiometric: {
         biometricAuth: false,
-        biometricTitle: 'Biometric login for TimeSafari'
+        biometricTitle: 'Biometric login for Giftopia'
       },
       electronIsEncryption: false
     },
@@ -103,7 +103,7 @@ const config: CapacitorConfig = {
     },
     buildOptions: {
       appId: 'app.timesafari',
-      productName: 'TimeSafari',
+      productName: 'Giftopia',
       directories: {
         output: 'dist-electron-packages'
       },

config/assets/capacitor-assets.config.json

@@ -22,7 +22,7 @@
       "scale": "cover",
       "target": "android/app/src/main/res"
     },
-    "darkSource": "resources/splash_dark.png",
+    "darkSource": "resources/splash-dark.png",
     "ios": {
       "target": "ios/App/App/Assets.xcassets",
       "useStoryBoard": true

doc/DEEP_LINKS.md

@@ -125,6 +125,35 @@ view: "details"
 
 All deep links follow the format: `timesafari://<route>/<param>?<query>`
 
+### App Routes
+
+These take no parameters.
+
+- `timesafari://` — no route at all opens the app at the home feed.
+- `timesafari://account`
+- `timesafari://discover`
+  - Query params, all optional:
+    - `searchText`: prefills the search box
+    - `searchPeople`: any value switches to the people tab
+    - `hideOnboarding`: "true" suppresses the onboarding prompt
+- `timesafari://invite-one`
+- `timesafari://new-activity`
+- `timesafari://onboard-meeting-list`
+- `timesafari://projects`
+- `timesafari://recent-offers-to-user`
+- `timesafari://recent-offers-to-user-projects`
+- `timesafari://search-area`
+- `timesafari://share-my-contact-info`
+- `timesafari://statistics`
+
+### Help Routes
+
+- `timesafari://help`
+- `timesafari://help-notifications`
+- `timesafari://help-notification-types`
+- `timesafari://help-onboarding`
+- `timesafari://help-terms`
+
 ### Claim Routes
 
 - `timesafari://claim/:id`
@@ -143,6 +172,17 @@ All deep links follow the format: `timesafari://<route>/<param>?<query>`
 - `timesafari://contact-import/:jwt`
   - Query params:
     - `contacts`: JSON array of contacts
+- `timesafari://contact-qr` and `timesafari://contact-qr-scan-full`
+
+  Both open the page that displays your contact QR code, scans someone else's,
+  and prompts you to set your name if your identity does not carry one. The
+  destination view is chosen by platform, not by which of the two paths was
+  used: a full-screen camera view where a native scanner is available, an
+  ordinary page where the in-page web reader is used.
+
+  Prefer `contact-qr` when publishing a link. The same path is appended to the
+  web address by `/deep-link/<path>`, and `/contact-qr` is the web route that
+  serves this page in a browser.
 
 ### Project Routes
 

doc/android-asset-validation.md

@@ -47,7 +47,7 @@ npm run build:android:studio
 #### Source Assets (Required)
 - `resources/icon.png` - App icon source
 - `resources/splash.png` - Splash screen source  
-- `resources/splash_dark.png` - Dark mode splash source
+- `resources/splash-dark.png` - Dark mode splash source
 
 #### Android Resources (Generated)
 - `android/app/src/main/res/drawable/splash.png` - Splash screen drawable
@@ -201,13 +201,13 @@ mkdir -p android/app/src/main/res/mipmap-{mdpi,hdpi,xhdpi,xxhdpi,xxxhdpi}
 # Copy source assets to assets directory
 cp resources/icon.png assets/
 cp resources/splash.png assets/
-cp resources/splash_dark.png assets/
+cp resources/splash-dark.png assets/
 
 # Generate assets manually
 npx @capacitor/assets generate
 
 # Clean up
-rm assets/icon.png assets/splash.png assets/splash_dark.png
+rm assets/icon.png assets/splash.png assets/splash-dark.png
 ```
 
 ## Future Enhancements

doc/android-firebase-gms.md

@@ -0,0 +1,66 @@
+# Android — Firebase, Google Play Services, and FOSS Distribution
+
+## Overview
+
+The app is designed to work on Android devices with and without Google Play Services (GMS). Firebase/FCM push notifications are an opt-in feature at build time; all other functionality works on GMS-less devices (F-Droid, LineageOS without OpenGApps, etc.).
+
+## How the opt-in guard works
+
+`android/app/build.gradle` applies the `com.google.gms.google-services` Gradle plugin only when **both** conditions are true:
+
+1. `android/google-services.json` is present on disk
+2. The Gradle property `firebaseEnabled` is explicitly passed
+
+```groovy
+if (servicesJSON.exists() && servicesJSON.text && project.hasProperty('firebaseEnabled')) {
+    apply plugin: 'com.google.gms.google-services'
+}
+```
+
+This means the file can live on disk for development purposes without accidentally activating Firebase.
+
+## Build commands
+
+| Target | Command | Firebase |
+|---|---|---|
+| APK / sideload / Zapstore | `./gradlew assembleRelease` | off |
+| Aurora / Play Store without FCM | `./gradlew bundleRelease` | off |
+| Play Store with FCM push notifications | `./gradlew bundleRelease -PfirebaseEnabled` | on |
+| F-Droid | `./gradlew assembleRelease` | off (required) |
+
+## Behavior on non-GMS devices
+
+When built with `-PfirebaseEnabled`, Firebase SDKs check for GMS availability at startup and degrade gracefully if it is absent:
+
+- Firebase initializes but detects no GMS
+- FCM skips token registration silently (no token, no notifications)
+- The app continues to work normally
+
+This means a single Play Store AAB (`bundleRelease -PfirebaseEnabled`) covers both GMS and non-GMS users. GMS users get push notifications; non-GMS users get a fully functional app without them.
+
+**Aurora Store** pulls the exact APK from Play Store servers, so Aurora users get whichever variant was uploaded. The Play Store AAB built with `-PfirebaseEnabled` is correct for Aurora.
+
+**F-Droid** is stricter: their build policy rejects any APK with GMS dependencies at the binary level, even with graceful degradation. F-Droid submission would require a separate `assembleRelease` build (no flag) and a dedicated F-Droid listing.
+
+## The `google-services.json` file
+
+- Gitignored (`android/.gitignore` line 80) — never commit it
+- Contains Firebase project credentials (project number, app ID, API key)
+- Safe to leave on disk; has no effect unless `-PfirebaseEnabled` is passed
+- Obtain from the Firebase console: Project Settings → Your apps → Android app → Download `google-services.json`
+
+## Known GMS dependency: MLKit barcode scanner
+
+`@capacitor-mlkit/barcode-scanning` unconditionally depends on `com.google.android.gms:play-services-code-scanner` (present since the plugin was first added at v6.0.0). This merges `com.google.android.gms.version` and `GoogleApiActivity` into the APK manifest regardless of the `-PfirebaseEnabled` flag.
+
+Practical impact:
+- **GMS devices**: barcode scanning works normally
+- **Non-GMS devices**: barcode scanning fails at scan time (not at startup); the app launches and runs normally otherwise
+
+This is an accepted trade-off. Removing it would require either forking the plugin or introducing a `foss` product flavor that excludes the MLKit plugin entirely — work to undertake if/when F-Droid submission is planned.
+
+## Incident: June 2026
+
+Jose Olarte III's `notify-api` branch placed a production `google-services.json` in `android/` to test Firebase Cloud Messaging. The branch was never merged to `master`, but because the file is gitignored it persisted on disk after switching branches. At the time, the Gradle conditional activated Firebase based on file presence alone (no opt-in flag), so all subsequent local builds embedded Firebase and required Google Play Services. This silently broke APK/Aurora/Zapstore distribution.
+
+**Fix applied:** deleted `google-services.json` from disk, changed the Gradle conditional to require `-PfirebaseEnabled`, and documented the rule in `AGENTS.md`.

doc/asset-migration-plan.md

@@ -89,7 +89,7 @@ system to a standardized, single-source asset configuration approach using
 resources/                     # Image sources ONLY
   icon.png
   splash.png
-  splash_dark.png
+  splash-dark.png
 
 config/assets/                 # Versioned config & schema
   capacitor-assets.config.json

doc/deep-link-debugging-guide.md

@@ -0,0 +1,308 @@
+# Deep Link Debugging Guide for TimeSafari
+
+This guide helps you debug and fix deep link issues in the TimeSafari Capacitor application.
+
+## Quick Start
+
+1. **Check logs**: Use browser dev tools or device console to see detailed logging
+2. **Test manually**: Use the testing script or browser console commands
+3. **Verify configuration**: Ensure all platform configurations are correct
+
+## Common Issues and Solutions
+
+### Issue 1: App opens but doesn't navigate to the correct page
+
+**Symptoms:**
+- Deep link opens the app
+- App stays on home screen or current page
+- No error messages visible
+
+**Debugging Steps:**
+
+1. **Check console logs** in browser dev tools or device console:
+   ```bash
+   # Android
+   adb logcat | grep -E "(TimeSafari|DeepLink|appUrlOpen)"
+   
+   # iOS Simulator
+   xcrun simctl spawn booted log stream --predicate 'process == "TimeSafari"'
+   ```
+
+2. **Verify listener registration**:
+   Look for these log messages:
+   ```
+   [DeepLink] Registering appUrlOpen listener...
+   [DeepLink] Listener registered successfully
+   ```
+
+3. **Check for event reception**:
+   Look for:
+   ```
+   [DeepLink] ========== DEEP LINK EVENT RECEIVED ==========
+   [DeepLink] URL: timesafari://your/url/here
+   ```
+
+4. **Verify URL parsing**:
+   Check if URL components are parsed correctly:
+   ```
+   [DeepLinkHandler.parseDeepLink] Parse result: {"path":"claim","params":{"id":"123"},"query":{}}
+   ```
+
+### Issue 2: Listener not receiving events
+
+**Symptoms:**
+- No deep link logs appear
+- App opens but no event processing
+
+**Solutions:**
+
+1. **Rebuild and reinstall** the app completely:
+   ```bash
+   npm run build:capacitor
+   npx cap sync
+   npx cap run android  # or ios
+   ```
+
+2. **Check capacitor.config.json**:
+   ```json
+   {
+     "plugins": {
+       "App": {
+         "appUrlOpen": {
+           "handlers": [
+             {
+               "url": "timesafari://*",
+               "autoVerify": true
+             }
+           ]
+         }
+       }
+     }
+   }
+   ```
+
+3. **Verify native configuration**:
+   - **Android**: Check `android/app/src/main/AndroidManifest.xml`
+   - **iOS**: Check `ios/App/App/Info.plist`
+
+### Issue 3: URL scheme not recognized by OS
+
+**Symptoms:**
+- "No app found to handle this link" error
+- OS doesn't open your app
+
+**Solutions:**
+
+1. **Android**: Verify intent filter in AndroidManifest.xml:
+   ```xml
+   <intent-filter>
+       <action android:name="android.intent.action.VIEW" />
+       <category android:name="android.intent.category.DEFAULT" />
+       <category android:name="android.intent.category.BROWSABLE" />
+       <data android:scheme="timesafari" />
+   </intent-filter>
+   ```
+
+2. **iOS**: Verify URL types in Info.plist:
+   ```xml
+   <key>CFBundleURLTypes</key>
+   <array>
+       <dict>
+           <key>CFBundleURLName</key>
+           <string>app.timesafari</string>
+           <key>CFBundleURLSchemes</key>
+           <array>
+               <string>timesafari</string>
+           </array>
+       </dict>
+   </array>
+   ```
+
+## Testing Tools
+
+### 1. Automated Testing Script
+
+Use the provided testing script:
+
+```bash
+# Test all URLs on Android
+./scripts/test-deep-links.sh android
+
+# Test specific URL on iOS
+./scripts/test-deep-links.sh ios "timesafari://claim/test123"
+
+# Monitor logs
+./scripts/test-deep-links.sh android-logs
+```
+
+### 2. Manual Testing Commands
+
+**Android Emulator:**
+```bash
+adb shell am start -W -a android.intent.action.VIEW -d "timesafari://claim/test123" app.timesafari
+```
+
+**iOS Simulator:**
+```bash
+xcrun simctl openurl booted "timesafari://claim/test123"
+```
+
+### 3. Browser Console Testing
+
+For web/PWA testing, use the browser console:
+
+```javascript
+// Test deep link processing directly
+window.testSingleDeepLink("timesafari://claim/test123");
+
+// Run all test URLs
+window.testDeepLinks();
+```
+
+## Debugging Steps Checklist
+
+### Pre-Testing Setup
+
+- [ ] App is installed on device/emulator
+- [ ] App has been launched at least once
+- [ ] Device/emulator is properly connected
+- [ ] Debugging tools are accessible
+
+### During Testing
+
+- [ ] Check console for initialization logs
+- [ ] Verify listener registration
+- [ ] Test with simple URL first (e.g., `timesafari://claim/test`)
+- [ ] Monitor URL parsing logs
+- [ ] Check router navigation logs
+
+### Post-Testing Analysis
+
+- [ ] Review complete log sequence
+- [ ] Identify where process fails
+- [ ] Check error messages for clues
+- [ ] Test with different URL formats
+
+## Common Log Patterns
+
+### Successful Deep Link Flow
+
+```
+[DeepLink] Registering appUrlOpen listener...
+[DeepLink] Listener registered successfully
+[DeepLink] ========== DEEP LINK EVENT RECEIVED ==========
+[DeepLink] URL: timesafari://claim/test123
+[DeepLinkHandler] Starting handleDeepLink with URL: timesafari://claim/test123
+[DeepLinkHandler.parseDeepLink] Parse result: {"path":"claim","params":{"id":"test123"},"query":{}}
+[DeepLinkHandler.validateAndRoute] Route validation passed. Route name: claim
+[DeepLinkHandler.validateAndRoute] Router navigation completed successfully
+[DeepLink] Deep link handled successfully
+```
+
+### Failed URL Parsing
+
+```
+[DeepLinkHandler.parseDeepLink] Route not found: invalid-route
+[DeepLinkHandler.parseDeepLink] Available routes: ["claim","project","contact-import",...]
+[DeepLinkHandler.validateAndRoute] Redirecting to deep-link-error page
+```
+
+### Router Navigation Issues
+
+```
+[DeepLinkHandler.validateAndRoute] Error routing to route name claim
+[DeepLinkHandler.validateAndRoute] Navigation params: {"name":"claim","params":{"id":"test123"}}
+```
+
+## Platform-Specific Issues
+
+### Android
+
+**Issue**: Deep links work in development but not in production build
+- **Solution**: Ensure `android:exported="true"` in MainActivity
+
+**Issue**: App doesn't respond to links when running in background
+- **Solution**: Check `android:launchMode="singleTask"` in AndroidManifest.xml
+
+### iOS
+
+**Issue**: Deep links don't work in iOS simulator
+- **Solution**: Use `xcrun simctl openurl` instead of opening URLs in Safari
+
+**Issue**: App launches but doesn't process URL
+- **Solution**: Check for Associated Domains if using universal links
+
+## Advanced Debugging
+
+### Enable Capacitor Native Logging
+
+Add to `capacitor.config.json`:
+
+```json
+{
+  "ios": {
+    "loggingBehavior": "debug"
+  },
+  "android": {
+    "loggingBehavior": "debug"
+  }
+}
+```
+
+### Add Custom Debug Points
+
+Insert additional logging in your deep link handler:
+
+```typescript
+// Add at strategic points in DeepLinkHandler
+console.log('[DEBUG] Custom checkpoint:', { data: yourData });
+```
+
+### Network Debugging
+
+If deep links involve network requests:
+
+```bash
+# Monitor network traffic (Android)
+adb shell dumpsys connectivity
+
+# Monitor network traffic (iOS)
+# Use Xcode Network Debugger
+```
+
+## Recovery Strategies
+
+### If deep links stop working completely:
+
+1. **Clean rebuild**:
+   ```bash
+   rm -rf node_modules
+   npm install
+   npm run build:capacitor
+   npx cap sync
+   ```
+
+2. **Reset device/emulator**:
+   - Clear app data
+   - Uninstall and reinstall
+   - Restart emulator
+
+3. **Verify basic functionality**:
+   - Test simple navigation within app
+   - Test URL schemes with minimal URLs
+   - Gradually increase complexity
+
+## Support Resources
+
+- [Capacitor Deep Links Documentation](https://capacitorjs.com/docs/guides/deep-links)
+- [Android Intent Filter Guide](https://developer.android.com/guide/components/intents-filters)
+- [iOS URL Scheme Guide](https://developer.apple.com/documentation/xcode/defining-a-custom-url-scheme-for-your-app)
+
+## Contact and Feedback
+
+If you encounter issues not covered in this guide:
+
+1. Check the project's issue tracker
+2. Review recent commits for deep link changes
+3. Test with minimal reproduction case
+4. Document exact steps and environment details 

doc/local-android-testing-analysis.md

@@ -2,9 +2,9 @@
 
 **Created:** 2026-06-02  
 **Source document:** [local-ios-testing-ngrok.md](./local-ios-testing-ngrok.md)  
-**Purpose:** Plan a future **Android** counterpart guide by mapping what can be reused from the iOS ngrok workflow and what must be written for Android-specific push, permissions, and OS behavior.
+**Status:** Planning snapshot from 2026-06-02. Several iOS-guide assumptions (app **Refresh Notifications**, Simulate WAKEUP, `applyNotificationRefreshPayload`, WAKEUP_PING → `/notifications/refresh` → `api_*`) are **retired**. For current Android procedure see [local-android-testing-ngrok.md](./local-android-testing-ngrok.md). Do not treat the reuse tables below as the live app path.
 
-**Status:** Planning only — does not replace or modify the iOS guide.
+**Purpose:** Plan a future **Android** counterpart guide by mapping what can be reused from the iOS ngrok workflow and what must be written for Android-specific push, permissions, and OS behavior.
 
 ---
 

doc/local-android-testing-ngrok.md

@@ -1,8 +1,10 @@
 # Local Android Testing with ngrok (notification-wakeup-service)
 
-**Last updated:** 2026-06-02 (verification checklist, end-to-end test)  
+**Last updated:** 2026-09-24 (retired WAKEUP_PING → refresh → `api_*` consumption)  
 **Audience:** Developers on **crowd-funder-for-time-pwa**, **daily-notification-plugin**, and **notification-wakeup-service**  
-**Goal:** Exercise FCM wakeup (`WAKEUP_PING`), FCM token registration, and notification refresh against a Mac-hosted backend reachable from a physical Android device.
+**Goal:** Exercise FCM token registration and FCM wakeup **delivery** (`WAKEUP_PING` via `/debug/send-wakeup`) against a Mac-hosted backend reachable from a physical Android device.
+
+> **Retired (do not expect this in the app):** `WAKEUP_PING` → `POST /notifications/refresh` → `applyNotificationRefreshPayload()` → `api_*` local schedules. The app logs ignored push types and does not refresh or schedule from wakeup. `/debug/send-wakeup` remains an FCM diagnostic. Mac `curl` of `/notifications/refresh` only tests the backend. Local schedules come from Static Daily Reminder, New Activity / dual, and the native fetcher.
 
 **See also:** [local-ios-testing-ngrok.md](./local-ios-testing-ngrok.md) for the iOS workflow (APNs, Xcode). [android-physical-device-guide.md](./android-physical-device-guide.md) for USB debugging and build/run commands.
 
@@ -10,7 +12,7 @@
 
 ## Architecture overview
 
-End-to-end flow when testing New Activity / silent wake on a physical Android phone:
+End-to-end flow when testing FCM registration and wakeup **delivery** on a physical Android phone:
 
 ```text
 ┌─────────────────────┐     HTTPS      ┌──────────────────────┐
@@ -19,7 +21,7 @@ End-to-end flow when testing New Activity / silent wake on a physical Android ph
 │  wakeup-service     │                └──────────┬───────────┘
 └──────────┬──────────┘                           │
            │                                      │ fetch
-           │ POST /notifications/refresh          │ POST /notifications/register
+           │                                      │ POST /notifications/register
            │                                      ▼
            │                             ┌──────────────────────┐
            │                             │  crowd-funder-for-   │
@@ -28,7 +30,7 @@ End-to-end flow when testing New Activity / silent wake on a physical Android ph
            │                             └──────────┬───────────┘
            │                                        │
            │  FCM data message (WAKEUP_PING)        │ daily-notification-plugin
-           ▼                                        ▼ (local schedule replace)
+           ▼                                        ▼ (Daily Reminder / dual / fetcher)
 ┌─────────────────────┐                ┌──────────────────────┐
 │  Firebase Cloud     │ ──FCM────────► │  Android device      │
 │  Messaging          │  direct        │  app.timesafari.app  │
@@ -41,18 +43,16 @@ Unlike iOS, Android does **not** use APNs. FCM delivers directly to the app via
 
 | Repo | Role |
 |------|------|
-| **notification-wakeup-service** | HTTP API: device registration, refresh payload (`nextNotifications`), health, debug wakeup send |
-| **crowd-funder-for-time-pwa** | Capacitor app: FCM token, `POST /notifications/register` & `/refresh`, handles `WAKEUP_PING` push |
-| **daily-notification-plugin** | Native Android: clear + reschedule local notifications from refresh timestamps |
+| **notification-wakeup-service** | HTTP API: device registration, health, debug wakeup send; may still expose `/notifications/refresh` for the backend |
+| **crowd-funder-for-time-pwa** | Capacitor app: FCM token, `POST /notifications/register`; logs `WAKEUP_PING` without refresh/`api_*` scheduling |
+| **daily-notification-plugin** | Native Android: Daily Reminder, New Activity / dual, native fetcher; Phase 4 `clearApiNotifications()` |
 
-### Android wakeup flow (production path)
+### Android wakeup flow (current)
 
-1. **notification-wakeup-service** (or `/debug/send-wakeup`) sends an FCM **data** message with `data.type = "WAKEUP_PING"`.
+1. **notification-wakeup-service** `/debug/send-wakeup` sends an FCM **data** message with `data.type = "WAKEUP_PING"`.
 2. FCM delivers to the device (best-effort; see [Android Platform Notes](#8-android-platform-notes) and [Battery Optimization Caveats](#9-battery-optimization-caveats)).
 3. Capacitor `pushNotificationReceived` fires → `handleCapacitorPushNotificationReceived()` in `NativeNotificationService.ts`.
-4. Handler calls `refreshNotificationsWithDiagnostics({ source: "WAKEUP_PING" })`, which `POST`s `{backend}/notifications/refresh` with `testMode` from the debug config.
-5. Backend returns `nextNotifications: [{ timestamp }, ...]`.
-6. App calls `applyNotificationRefreshPayload()` → **daily-notification-plugin** clears existing local alarms and schedules new ones.
+4. Handler logs `[Notifications] push handler ignored type=WAKEUP_PING`. It does **not** POST `/notifications/refresh` or schedule `api_*` notifications.
 
 Console and debug panel lines are prefixed with **`[Notifications]`** (see `NotificationDebugEvents.ts`).
 
@@ -290,12 +290,11 @@ For a full panel reference (configuration, URL resolution order, authentication,
 | Control | Purpose |
 |---------|---------|
 | **Notification Backend URL** | Paste ngrok HTTPS URL → **Save Backend URL** (changes target server only) |
-| **Test Mode** | Sends `testMode: true/false` in register/refresh JSON bodies (default on when unset in storage) |
+| **Test Mode** | Sends `testMode: true/false` in register / send-wakeup JSON bodies (default on when unset in storage) |
 | **Skip JWT Authentication (Local Development Only)** | When on, omits `Authorization` headers for local servers that accept unauthenticated requests (default **off**) |
 | **Register Token Now** | `POST /notifications/register` with current FCM token and `platform: "android"` |
-| **Refresh Notifications** | `POST /notifications/refresh` (same as post-wakeup flow) |
-| **Simulate WAKEUP_PING (Local)** | Calls refresh API directly (no FCM) — quick backend + ngrok test |
-| **Send Real WAKEUP_PING** | `POST /debug/send-wakeup` on the backend override URL; server sends a real FCM `WAKEUP_PING` to the panel’s current FCM token (see below) |
+| **Upload AlertSearch Authorization** | Uploads AlertSearch delegated JWTs (`/notifications/alert-authorization`) |
+| **Send Real WAKEUP_PING** | `POST /debug/send-wakeup`; FCM delivery diagnostic only (no app-side refresh/`api_*` scheduling) |
 | **Event Log** | Shared `[Notifications]` panel log (100 entries) |
 
 Persistence: `localStorage` keys `notificationDebug.backendBaseUrl`, `notificationDebug.testMode`, and `notificationDebug.bypassAuth` (`NotificationDebugConfig.ts`).
@@ -314,19 +313,13 @@ For **local ngrok / localhost**: set the backend URL to your tunnel or `http://1
 
 ### testMode
 
-When **Test Mode** is on (default if never saved), register and refresh requests include `"testMode": true`. The backend can route dev traffic separately from production. Turn it off in the panel only if you intentionally want production-mode API behavior against your tunnel.
+When **Test Mode** is on (default if never saved), register and send-wakeup requests include `"testMode": true`. The backend can route dev traffic separately from production. Turn it off in the panel only if you intentionally want production-mode API behavior against your tunnel.
 
 ### WAKEUP_PING debug controls
 
-Three panel actions exercise different segments of the wakeup pipeline. Use them to bisect failures (see [Troubleshooting §14](#fcm-message-not-received)).
+**Send Real WAKEUP_PING** is the remaining panel control for wakeup. Mock refresh, Simulate WAKEUP_PING, Wakeup Ping Simulator, and Flood Test were removed with the retired refresh pipeline.
 
-| Button | Behavior |
-|--------|----------|
-| **Backend Testing → Simulate WAKEUP_PING (Local)** | Skips FCM; calls refresh API only (ngrok path test) |
-| **Backend Testing → Send Real WAKEUP_PING** | Full pipeline: backend `/debug/send-wakeup` → FCM → Capacitor listener → refresh (see below) |
-| **Wakeup Ping Simulator** (lower on panel) | Runs production handler with synthetic `WAKEUP_PING` payload (no FCM, no backend wakeup call) |
-
-Use **Simulate WAKEUP_PING (Local)** to verify ngrok + refresh; use **Wakeup Ping Simulator** to verify handler + refresh chaining without FCM; use **Send Real WAKEUP_PING** for end-to-end FCM delivery on device.
+Use **Send Real WAKEUP_PING** to confirm backend → FCM → Capacitor listener delivery. Do not expect `/notifications/refresh` or `api_*` rescheduling.
 
 ### Send Real WAKEUP_PING
 
@@ -337,9 +330,9 @@ Use **Simulate WAKEUP_PING (Local)** to verify ngrok + refresh; use **Wakeup Pin
 1. Reads the **Current FCM Token** shown in the panel (same token used by **Register Token Now**). If no token is available, the action fails with a panel status message.
 2. `POST`s to `{backend override}/debug/send-wakeup` with `deviceId`, `fcmToken`, `platform: "android"`, and `testMode` from the panel config (`NotificationDebugService.sendRealWakeupPing()`).
 3. On HTTP success, the **notification-wakeup-service** enqueues a real FCM **data** message with `data.type = "WAKEUP_PING"` to that device.
-4. When FCM delivers the message to the app, Capacitor fires `pushNotificationReceived` → `handleCapacitorPushNotificationReceived()` → `refreshNotificationsWithDiagnostics({ source: "WAKEUP_PING" })` → `POST /notifications/refresh` → `applyNotificationRefreshPayload()` (clear + reschedule via **daily-notification-plugin**).
+4. When FCM delivers the message to the app, Capacitor fires `pushNotificationReceived` → `handleCapacitorPushNotificationReceived()`, which logs `push handler ignored type=WAKEUP_PING`. There is no `refreshNotificationsWithDiagnostics` and no `applyNotificationRefreshPayload`.
 
-That exercises the full **backend → FCM → Capacitor push listener → refresh request → notification rescheduling** path on Android without manual `curl` on the Mac.
+That exercises **backend → FCM → Capacitor push listener** on Android without manual `curl` on the Mac. It does **not** reschedule local notifications.
 
 **Prerequisites:** ngrok backend override saved, **Test Mode** as needed, notification permission granted, **Register Token Now** succeeded, app **backgrounded** (Home — not force-stop) before expecting FCM delivery ([§8](#8-android-platform-notes)).
 
@@ -348,27 +341,24 @@ That exercises the full **backend → FCM → Capacitor push listener → refres
 Filter logcat (prefix is always `[Notifications]`):
 
 ```bash
-adb logcat | grep -E '\[Notifications\].*(Real WAKEUP_PING|pushNotificationReceived|WAKEUP_PING|Refresh started|Refresh completed)'
+adb logcat | grep -E '\[Notifications\].*(Real WAKEUP_PING|push handler ignored)'
 ```
 
-On a **successful end-to-end** run (HTTP success from the panel, then FCM delivery within ~30–120s), expect these key lines in order:
+On a **successful FCM delivery** run (HTTP success from the panel, then FCM delivery within ~30–120s), expect these key lines in order:
 
 ```
 [Notifications] Real WAKEUP_PING requested
 [Notifications] Real WAKEUP_PING success
-[Notifications] pushNotificationReceived type=WAKEUP_PING
-[Notifications] WAKEUP_PING handler — invoking refresh
-[Notifications] Refresh started (WAKEUP_PING)
-[Notifications] Refresh completed (WAKEUP_PING) in …ms (scheduled N)
+[Notifications] push handler ignored type=WAKEUP_PING
 ```
 
-Intermediate lines (e.g. `WAKEUP_PING received — will trigger refresh`, `Schedule replacement: …`, `Using authenticated notification request` or auth bypass messages when **Skip JWT Authentication** is on) are normal. ngrok should also show a new `POST /notifications/refresh` after the push is handled.
+Auth bypass messages when **Skip JWT Authentication** is on are normal. ngrok should **not** show a new `POST /notifications/refresh` from the app after the push.
 
-#### Send Real WAKEUP_PING vs end-to-end success
+#### Send Real WAKEUP_PING vs delivery success
 
-The panel status **“Real WAKEUP_PING sent via backend.”** and the Event Log line **`Real WAKEUP_PING success`** only confirm that the backend **accepted the request and attempted FCM delivery**. They do **not** prove the device received the push or ran refresh.
+The panel status **“Real WAKEUP_PING sent via backend.”** and the Event Log line **`Real WAKEUP_PING success`** only confirm that the backend **accepted the request and attempted FCM delivery**. They do **not** prove the device received the push.
 
-**Successful end-to-end delivery** is confirmed only when the subsequent **`pushNotificationReceived`**, **`WAKEUP_PING handler`**, and **`Refresh started (WAKEUP_PING)`** / **`Refresh completed (WAKEUP_PING)`** lines appear in logcat (or Event Log) within the delivery window. If you see `Real WAKEUP_PING success` but not those lines, treat it as an FCM delivery problem ([FCM message not received](#fcm-message-not-received)), not a backend enqueue failure.
+**Successful delivery** is confirmed when **`push handler ignored type=WAKEUP_PING`** appears in logcat (or Event Log) within the delivery window. If you see `Real WAKEUP_PING success` but not that line, treat it as an FCM delivery problem ([FCM message not received](#fcm-message-not-received)), not a backend enqueue failure.
 
 ### Programmatic override (optional)
 
@@ -455,15 +445,11 @@ On **API 33+**, `POST_NOTIFICATIONS` is a runtime permission ([section 7](#7-and
 
 ### Network connectivity
 
-FCM and your ngrok-backed refresh both need network:
-
-- Device must reach **Google’s FCM endpoints** (mobile data or Wi‑Fi).
-- After wake, the app must reach the **ngrok HTTPS URL** for `POST /notifications/refresh`.
-- Airplane mode, captive portals, VPNs, or flaky Wi‑Fi cause “server sent wakeup but app never refreshed” symptoms even when FCM eventually arrives.
+FCM needs network to Google’s endpoints. Registration needs the ngrok HTTPS URL for `POST /notifications/register`. Airplane mode, captive portals, VPNs, or flaky Wi‑Fi cause “server sent wakeup but app never logged ignored type” symptoms even when FCM eventually arrives.
 
 ### Physical device vs emulator
 
-Doze, App Standby, and OEM battery menus are weak or absent on many emulators. Use a **physical device** for wakeup SLA testing; emulators are fine for panel-only register/refresh smoke tests.
+Doze, App Standby, and OEM battery menus are weak or absent on many emulators. Use a **physical device** for wakeup SLA testing; emulators are fine for panel-only register smoke tests.
 
 ### Logcat
 
@@ -471,7 +457,7 @@ Doze, App Standby, and OEM battery menus are weak or absent on many emulators. U
 adb logcat | grep -E '\[Notifications\]|\[FirebaseMessaging\]|\[NativeNotificationService\]'
 ```
 
-Expect `pushNotificationReceived type=WAKEUP_PING` and `WAKEUP_PING handler — invoking refresh` after a successful wake. For a panel-driven test, use **Send Real WAKEUP_PING** ([§6](#send-real-wakeup_ping)) instead of manual `curl`.
+Expect `push handler ignored type=WAKEUP_PING` after a successful wake. For a panel-driven test, use **Send Real WAKEUP_PING** ([§6](#send-real-wakeup_ping)) instead of manual `curl`.
 
 ---
 
@@ -499,7 +485,7 @@ Apps used infrequently move to **standby** buckets with reduced background netwo
 
 ### Manufacturer-specific restrictions
 
-OEMs add layers on top of AOSP. Aggressive battery management can delay **WAKEUP_PING** delivery or prevent the refresh `fetch` from running promptly.
+OEMs add layers on top of AOSP. Aggressive battery management can delay **WAKEUP_PING** delivery.
 
 | Vendor | Where to look (names vary by OS version) |
 |--------|------------------------------------------|
@@ -515,8 +501,8 @@ If wakeup works on a **Pixel** but fails on an OEM phone, assume battery policy
 
 1. Server accepts `/debug/send-wakeup` → FCM enqueue succeeds.
 2. Device may **hold** the message until Doze maintenance or OEM policy allows delivery.
-3. `pushNotificationReceived` runs → `refreshNotificationsWithDiagnostics()` → ngrok `POST /notifications/refresh`.
-4. Any step can lag under battery savers; use **Simulate WAKEUP_PING (Local)** in the debug panel to separate FCM delay from refresh/API issues; use **Send Real WAKEUP_PING** for the full FCM path ([§6](#send-real-wakeup_ping)).
+3. `pushNotificationReceived` runs → `push handler ignored type=WAKEUP_PING`.
+4. Any step can lag under battery savers; use **Send Real WAKEUP_PING** for the FCM path ([§6](#send-real-wakeup_ping)).
 
 ---
 
@@ -528,12 +514,10 @@ If wakeup works on a **Pixel** but fails on an OEM phone, assume battery policy
 4. Grant notification permission when prompted (or enable in Settings).
 5. Open **Notification Debug Panel** → paste ngrok URL → **Save Backend URL**; confirm **Test Mode** is on; enable **Skip JWT Authentication** only if your local backend accepts unauthenticated requests.
 6. Tap **Register Token Now** → confirm ngrok `POST /notifications/register` and `[Notifications] Token registration success` in Event Log / logcat.
-7. Tap **Refresh Notifications** → confirm `POST /notifications/refresh` and `Refresh completed in Nms (scheduled X)` in Event Log.
-8. Optional: tap **Simulate WAKEUP_PING (Local)** to verify ngrok + refresh without FCM.
-9. Background the app (Home), then tap **Send Real WAKEUP_PING** (or from the Mac, call **`/debug/send-wakeup`** — see [curl examples](#13-sample-curl-commands)) with the registered `deviceId` / token as required by **notification-wakeup-service**.
-10. Watch logcat for `WAKEUP_PING` and `Refresh completed (WAKEUP_PING)` lines ([expected output](#expected-logcat-output)).
-11. Open **ngrok inspect UI** (`http://127.0.0.1:4040`) to correlate HTTP traffic.
-12. Use **Pending Notification Inspector** on the panel to confirm locally scheduled fires after refresh.
+7. Background the app (Home), then tap **Send Real WAKEUP_PING** (or from the Mac, call **`/debug/send-wakeup`** — see [curl examples](#13-sample-curl-commands)) with the registered `deviceId` / token as required by **notification-wakeup-service**.
+8. Watch logcat for `push handler ignored type=WAKEUP_PING` ([expected output](#expected-logcat-output)).
+9. Open **ngrok inspect UI** (`http://127.0.0.1:4040`) to correlate HTTP traffic (register and send-wakeup; not app-initiated refresh).
+10. Use **Pending Notification Inspector** for Daily Reminder / New Activity / dual schedules — not for retired `api_*` refresh.
 
 For a formal pass/fail sequence, use the [Verification Checklist](#11-verification-checklist) below.
 
@@ -549,12 +533,12 @@ Use this checklist during development or QA sign-off. Each step lists **actions*
 | 2 | Device → backend override | §2 |
 | 3 | FCM token registered | §3 |
 | 4 | Device record in wakeup service | §4 |
-| 5 | Refresh returns schedule data | §5 |
-| 6 | Locals scheduled | §6 |
+| 5 | Optional backend `/notifications/refresh` curl | §5 (backend only; app does not call this) |
+| 6 | Locals scheduled | §6 (Daily Reminder / dual / fetcher — not refresh) |
 | 7 | Manual wakeup sends FCM | §7 |
-| 8 | WAKEUP_PING → refresh | §8 |
-| 9 | Replace after refresh | §9 |
-| 10 | Test mode frequent refreshes | §10 |
+| 8 | WAKEUP_PING delivered | §8 |
+| 9 | _(retired)_ Replace after refresh | skipped |
+| 10 | _(retired)_ Test mode frequent refreshes | skipped |
 
 ### 1. Backend reachable through ngrok
 
@@ -578,7 +562,7 @@ curl -sS -w "\nHTTP %{http_code}\n" "$BASE/health"
 3. Confirm **Backend Status → URL** matches the saved ngrok host.
 4. Enable **Test Mode** if using dev backend behavior.
 
-**Expected outcome:** **Active** URL in the panel equals your ngrok `https://…` host. Subsequent app requests use that base (not the default `DEFAULT_NOTIFY_API_SERVER`) for `/notifications/register` and `/notifications/refresh`.
+**Expected outcome:** **Active** URL in the panel equals your ngrok `https://…` host. Subsequent app requests use that base (not the default `DEFAULT_NOTIFY_API_SERVER`) for `/notifications/register` and `/debug/send-wakeup`.
 
 ---
 
@@ -611,12 +595,11 @@ curl -sS -w "\nHTTP %{http_code}\n" "$BASE/health"
 
 ---
 
-### 5. Refresh endpoint returns schedule data
+### 5. Refresh endpoint (backend only; app does not call this)
 
 **Actions:**
 
-1. Tap **Refresh Notifications** in the panel (or curl below).
-2. Inspect ngrok response body.
+Mac-side curl against **notification-wakeup-service** if you need to confirm the backend still answers. The app has no **Refresh Notifications** button and does not schedule from this payload.
 
 ```bash
 curl -sS -X POST "$BASE/notifications/refresh" \
@@ -624,18 +607,18 @@ curl -sS -X POST "$BASE/notifications/refresh" \
   -d '{"platform":"android","testMode":true}'
 ```
 
-**Expected outcome:** HTTP **200**; JSON includes `nextNotifications` array with at least one `{ "timestamp": <number> }` in the **future** (epoch ms). Event Log: `Refresh completed in …ms (scheduled N)` with **N ≥ 1**. If `scheduled 0` or empty array, fix backend auth, DID/native fetcher, or `testMode` handling before scheduling tests.
+**Expected outcome:** HTTP **200** from the **service** if that route is still deployed. Do **not** expect Event Log `Refresh completed` or `api_*` schedules in the app.
 
 ---
 
-### 6. Local notifications are scheduled
+### 6. Local notifications are scheduled (not from refresh)
 
 **Actions:**
 
-1. After a successful refresh (step 5), open **Pending Notification Inspector** → **Refresh** (list button).
-2. Optionally cross-check logcat for `Schedule replacement applied (N timestamp(s))`.
+1. Configure Static Daily Reminder and/or New Activity (dual) in the app, or rely on the native fetcher.
+2. Open **Pending Notification Inspector** → **Refresh** (list button).
 
-**Expected outcome:** Inspector lists **N** pending item(s) matching refresh count; each row has a **future** `nextTriggerDate` / wall-clock time. No `Schedule replacement aborted` or `skipped (no valid timestamps)` in Event Log.
+**Expected outcome:** Inspector lists pending Daily Reminder / dual / fetcher items. Do not expect `api_*` identifiers after Phase 4 startup cleanup. There is no `Schedule replacement applied` from WAKEUP_PING.
 
 ---
 
@@ -656,11 +639,11 @@ curl -sS -X POST "$BASE/debug/send-wakeup" \
 
 3. Check **notification-wakeup-service** logs for FCM send success (no Admin SDK / token errors).
 
-**Expected outcome:** HTTP **200** (or documented success code) from `/debug/send-wakeup`; Event Log / logcat: `Real WAKEUP_PING success` when using the panel button; server logs indicate FCM message enqueued/sent with `data.type = "WAKEUP_PING"`. This step alone does not prove device delivery (see step 8 and [Send Real WAKEUP_PING vs end-to-end success](#send-real-wakeup_ping-vs-end-to-end-success)).
+**Expected outcome:** HTTP **200** (or documented success code) from `/debug/send-wakeup`; Event Log / logcat: `Real WAKEUP_PING success` when using the panel button; server logs indicate FCM message enqueued/sent with `data.type = "WAKEUP_PING"`. This step alone does not prove device delivery (see step 8 and [Send Real WAKEUP_PING vs delivery success](#send-real-wakeup_ping-vs-delivery-success)).
 
 ---
 
-### 8. WAKEUP_PING triggers refreshNotifications()
+### 8. WAKEUP_PING is delivered (no refresh)
 
 **Actions:**
 
@@ -669,42 +652,28 @@ curl -sS -X POST "$BASE/debug/send-wakeup" \
 3. Filter logcat:
 
 ```bash
-adb logcat | grep -E 'WAKEUP_PING|pushNotificationReceived|Refresh completed'
+adb logcat | grep -E 'WAKEUP_PING|push handler ignored'
 ```
 
 **Expected outcome (within ~30–120s, longer under Doze/OEM):**
 
-1. `pushNotificationReceived type=WAKEUP_PING` / `WAKEUP_PING received`
-2. `WAKEUP_PING handler — invoking refresh`
-3. `Refresh started (WAKEUP_PING)`
-4. ngrok: new `POST /notifications/refresh`
-5. `Refresh completed (WAKEUP_PING) in …ms (scheduled N)`
+1. `Real WAKEUP_PING success` (panel path)
+2. `push handler ignored type=WAKEUP_PING`
+3. ngrok: **no** app-initiated `POST /notifications/refresh`
 
-**Isolation:** **Wakeup Ping Simulator** on the panel should produce lines 2–5 without FCM. **Simulate WAKEUP_PING (Local)** proves refresh only (no handler, source `WAKEUP_PING simulation`). Full expected logcat for **Send Real WAKEUP_PING**: [§6](#expected-logcat-output).
+Full expected logcat for **Send Real WAKEUP_PING**: [§6](#expected-logcat-output).
 
 ---
 
 ### 9. Existing notifications are replaced after refresh
 
-**Actions:**
-
-1. Note pending count and identifiers in **Pending Notification Inspector**.
-2. Tap **Refresh Notifications** again (or trigger step 8).
-3. Refresh inspector; compare IDs/times to step 1.
-
-**Expected outcome:** Event Log shows `clearAllNotifications` or `cancelAllNotifications` then `Schedule replacement applied`; pending list reflects **new** timestamps (old alarms not accumulated). Total pending count should match latest refresh `N`, not double from duplicate refreshes unless backend returned more slots.
+**Retired.** The app no longer replaces local schedules from `/notifications/refresh`. Pending list changes come from Daily Reminder / dual / native fetcher, or from Phase 4 `clearApiNotifications()`.
 
 ---
 
 ### 10. Test mode produces frequent notification refreshes
 
-**Actions:**
-
-1. Confirm **Test Mode** checked; **Backend Status → testMode: true**.
-2. Call refresh twice (panel or curl) with `testMode: true`.
-3. Compare `nextNotifications` timestamps in ngrok responses.
-
-**Expected outcome:** With **testMode: true**, **notification-wakeup-service** returns **dev-friendly** schedule data—typically **sooner** fire times than production mode (shorter horizons). Pending Inspector updates to nearer triggers after each refresh. With Test Mode **off**, timestamps should be farther out (production-like); use that contrast to confirm the flag is wired end-to-end.
+**Retired.** `testMode` still goes on register and send-wakeup bodies. It does not drive app-side `api_*` refresh cadences.
 
 ---
 
@@ -739,31 +708,23 @@ npm run dev
 
 8. Paste `BASE` → **Save Backend URL**; enable **Test Mode**.
 
-### Phase C — Register and schedule
+### Phase C — Register
 
 9. **Register Token Now** → Event Log success; ngrok `POST /notifications/register` **200**; copy `deviceId` from ngrok request body.
 
 10. Confirm device in **notification-wakeup-service** (logs/DB per that repo).
 
-11. **Refresh Notifications** → Event Log `scheduled N`, N ≥ 1; ngrok refresh **200** with `nextNotifications`.
+### Phase D — FCM wakeup delivery
 
-12. **Pending Notification Inspector** → **Refresh** → future alarm(s) listed.
+11. Background app (Home).
 
-### Phase D — FCM wakeup path
+12. Tap **Send Real WAKEUP_PING** in the panel (or Mac: `curl -X POST "$BASE/debug/send-wakeup" -H "Content-Type: application/json" -d '{"deviceId":"…","testMode":true}'`) → panel `Real WAKEUP_PING success` and server FCM enqueue success.
 
-13. Background app (Home).
+13. Within 30–120s (longer if unplugged/Doze): logcat shows `push handler ignored type=WAKEUP_PING`; ngrok does **not** show an app `POST /notifications/refresh`.
 
-14. Tap **Send Real WAKEUP_PING** in the panel (or Mac: `curl -X POST "$BASE/debug/send-wakeup" -H "Content-Type: application/json" -d '{"deviceId":"…","testMode":true}'`) → panel `Real WAKEUP_PING success` and server FCM enqueue success.
+### Phase E — Optional local notification proof
 
-15. Within 30–120s (longer if unplugged/Doze): logcat shows `pushNotificationReceived` → `Refresh completed (WAKEUP_PING)`; ngrok shows second `POST /notifications/refresh`.
-
-16. Pending Inspector **Refresh** → timestamps updated (replacement, not duplicate stack).
-
-### Phase E — Optional delivery proof
-
-17. If `testMode` returned a trigger within a few minutes, wait for wall-clock fire with app backgrounded; confirm notification appears (permission + channel + exact alarm rules).
-
-18. If FCM step 15 failed but step 11 passed: run **Simulate WAKEUP_PING (Local)** then **Wakeup Ping Simulator** to bisect FCM vs handler; see [Troubleshooting](#14-troubleshooting) and [Send Real WAKEUP_PING vs end-to-end success](#send-real-wakeup_ping-vs-end-to-end-success).
+14. Enable Daily Reminder or New Activity; wait for wall-clock fire with app backgrounded; confirm the OS notification is **not** the retired generic `api_*` “Reminder” copy.
 
 ### End-to-end pass criteria
 
@@ -771,9 +732,9 @@ npm run dev
 |-------|------|
 | A | Health OK local + ngrok |
 | B | Override URL + testMode active |
-| C | Register + refresh + pending list populated |
-| D | Wakeup curl OK → logcat refresh chain → pending updated |
-| E | Optional visible notification at scheduled time |
+| C | Register succeeded |
+| D | Wakeup curl/panel OK → logcat ignored-type line |
+| E | Optional visible Daily Reminder / New Activity notification |
 
 ---
 
@@ -804,7 +765,7 @@ curl -sS -X POST "$BASE/notifications/register" \
   }'
 ```
 
-### Refresh (mirror app payload)
+### Refresh (backend only; app does not consume)
 
 ```bash
 curl -sS -X POST "$BASE/notifications/refresh" \
@@ -815,19 +776,7 @@ curl -sS -X POST "$BASE/notifications/refresh" \
   }'
 ```
 
-Example success body shape (actual fields may vary by service version):
-
-```json
-{
-  "shouldNotify": true,
-  "nextNotifications": [
-    { "timestamp": 1710000000000 },
-    { "timestamp": 1710003600000 }
-  ]
-}
-```
-
-The app schedules those timestamps via **daily-notification-plugin** (`applyNotificationRefreshPayload` in `NativeNotificationService.ts`).
+This exercises **notification-wakeup-service** only. The app does **not** call `applyNotificationRefreshPayload` or schedule `api_*` from the response.
 
 ### Send wakeup push (debug)
 
@@ -842,7 +791,7 @@ curl -sS -X POST "$BASE/debug/send-wakeup" \
   }'
 ```
 
-Confirm parameters (token vs `deviceId`, auth headers) in that repo’s README or OpenAPI spec. The server must send FCM data including `type: "WAKEUP_PING"` to match `handleCapacitorPushNotificationReceived`.
+Confirm parameters (token vs `deviceId`, auth headers) in that repo’s README or OpenAPI spec. The server may still send FCM data including `type: "WAKEUP_PING"`; the app logs it as ignored and does not refresh.
 
 ---
 
@@ -899,35 +848,28 @@ Compare with panel **Backend Status** and Event Log error text.
 
 ### Refresh endpoint failures
 
-**Symptoms:** **Refresh Notifications** fails; Event Log HTTP error; no `scheduled X` line; ngrok missing `POST /notifications/refresh`.
+**Symptoms:** Mac `curl` of `/notifications/refresh` fails; ngrok missing that path. This is a **backend** issue. The app does not POST refresh.
 
-**Likely causes:** Stale ngrok URL; backend down; 404/wrong path; JWT/native fetcher not configured; refresh auth failure.
+**Verification:** `curl` health and refresh from the Mac; confirm the service still ships that route.
 
-**Verification:**
-
-1. **Simulate WAKEUP_PING (Local)** — if this fails, problem is ngrok/refresh API, not FCM.
-2. ngrok inspect for refresh status code and response body.
-3. Logcat: `refreshNotifications failed` or JWT errors from `configureNativeFetcherIfReady()`.
-
-**Fixes:** Fix backend URL and health; ensure active DID and endorser settings ([notification-from-api-call.md](./notification-from-api-call.md)); confirm `testMode` if backend requires it.
+**Fixes:** Fix backend URL and health. App scheduling uses Daily Reminder / dual / native fetcher, not this payload.
 
 ---
 
 ### FCM message not received
 
-**Symptoms:** `/debug/send-wakeup` or panel **Send Real WAKEUP_PING** shows success (`Real WAKEUP_PING success` in Event Log); no `pushNotificationReceived` / `WAKEUP_PING` in logcat within 2 minutes; refresh never triggered.
+**Symptoms:** `/debug/send-wakeup` or panel **Send Real WAKEUP_PING** shows success (`Real WAKEUP_PING success` in Event Log); no `push handler ignored type=WAKEUP_PING` in logcat within 2 minutes.
 
 **Likely causes:** Force-stopped app; wrong FCM token on server; Doze/OEM delay; no Google Play services; payload missing `data.type = "WAKEUP_PING"`; device offline.
 
-**Note:** `Real WAKEUP_PING success` only means the backend accepted and sent the FCM request. Missing downstream refresh logs indicates a **delivery** failure, not a failed wakeup API call ([§6](#send-real-wakeup_ping-vs-end-to-end-success)).
+**Note:** `Real WAKEUP_PING success` only means the backend accepted and sent the FCM request. Missing the ignored-type log indicates a **delivery** failure, not a failed wakeup API call ([§6](#send-real-wakeup_ping-vs-delivery-success)).
 
 **Verification:**
 
 1. App **backgrounded** (Home), not force-stopped.
 2. Panel FCM token matches token used by server/register.
-3. **Simulate WAKEUP_PING (Local)** works → isolates FCM path from refresh/API.
-4. Wait 30–120s (longer on Doze/OEM).
-5. Battery **Unrestricted** and OEM autostart enabled for test device.
+3. Wait 30–120s (longer on Doze/OEM).
+4. Battery **Unrestricted** and OEM autostart enabled for test device.
 
 **Fixes:** Re-register token; relaunch app; relax battery settings ([section 9](#9-battery-optimization-caveats)); confirm **notification-wakeup-service** message format; test on Pixel vs suspect OEM policy.
 
@@ -947,30 +889,28 @@ Compare with panel **Backend Status** and Event Log error text.
 
 ### Notifications not appearing
 
-**Symptoms:** Refresh succeeds (`scheduled X` in log) but no visible notification at fire time; Pending Inspector empty or stale.
+**Symptoms:** Daily Reminder or New Activity configured but no visible notification at fire time; Pending Inspector empty or stale.
 
 **Likely causes:** Permission denied (display blocked); exact alarm permission on Android 12+; timestamps in past; plugin schedule error; DND/channel settings.
 
 **Verification:**
 
 1. Permission granted ([section 7](#7-android-notification-permissions)).
-2. Pending Notification Inspector after refresh.
-3. Logcat: `Schedule replacement applied` vs aborted messages.
-4. Confirm `nextNotifications` timestamps are in the future (curl refresh response).
+2. Pending Notification Inspector for Daily Reminder / dual identifiers (not `api_*` after Phase 4 cleanup).
 
-**Fixes:** Grant `POST_NOTIFICATIONS`; check `SCHEDULE_EXACT_ALARM` / alarm permission per plugin docs; fix refresh payload; test with nearer timestamps via backend `testMode`.
+**Fixes:** Grant `POST_NOTIFICATIONS`; check `SCHEDULE_EXACT_ALARM` / alarm permission per plugin docs. Do not expect wakeup refresh payloads to populate the inspector.
 
 ---
 
 ### Duplicate notifications
 
-**Symptoms:** Multiple identical local notifications; Event Log shows repeated refresh lines.
+**Symptoms:** Multiple identical local notifications.
 
-**Likely causes:** Multiple `WAKEUP_PING` deliveries; repeated manual **Refresh**; flood test; separate Daily Reminder vs New Activity schedules.
+**Likely causes:** Separate Daily Reminder vs New Activity schedules; duplicate dual config; leftover `api_*` before Phase 4 cleanup.
 
-**Verification:** Event Log count of refresh completions; ngrok inspect for duplicate `POST /notifications/refresh`.
+**Verification:** Pending Inspector identifiers; see [notification-new-activity-lay-of-the-land.md](./notification-new-activity-lay-of-the-land.md) for product-level double-schedule issues.
 
-**Fixes:** Each refresh should **replace** schedule (clear + schedule)—if duplicates persist, check plugin logs; see [notification-new-activity-lay-of-the-land.md](./notification-new-activity-lay-of-the-land.md) for product-level double-schedule issues.
+**Fixes:** Confirm Daily Reminder vs dual settings. WAKEUP_PING no longer stacks `api_*` refreshes.
 
 ---
 
@@ -1006,7 +946,7 @@ Compare with panel **Backend Status** and Event Log error text.
 | `src/services/notifications/NotificationDebugEvents.ts` | Panel event log + `logNotification()` |
 | `src/services/notifications/notificationLog.ts` | Structured log helpers |
 | `src/services/notifications/NotificationService.ts` | `POST /notifications/register` |
-| `src/services/notifications/NativeNotificationService.ts` | `refreshNotifications`, `WAKEUP_PING`, `applyNotificationRefreshPayload` |
+| `src/services/notifications/NativeNotificationService.ts` | Push delivery hook (logs ignored types; no refresh) |
 | `src/services/notifications/firebaseMessagingClient.ts` | Capacitor push listeners, permission, token registration |
 | `src/components/dev/NotificationDebugPanel.vue` | Dev UI |
 | `src/main.capacitor.ts` | Native push init at startup |

doc/local-ios-testing-ngrok.md

@@ -1,14 +1,16 @@
 # Local iOS Testing with ngrok (notification-wakeup-service)
 
-**Last updated:** 2026-05-18  
+**Last updated:** 2026-09-24 (retired WAKEUP_PING → refresh → `api_*` consumption)  
 **Audience:** Developers on **crowd-funder-for-time-pwa**, **daily-notification-plugin**, and **notification-wakeup-service**  
-**Goal:** Exercise silent push wake (`WAKEUP_PING`), FCM token registration, and notification refresh against a Mac-hosted backend reachable from a physical iPhone.
+**Goal:** Exercise FCM token registration and silent-push **delivery** (`WAKEUP_PING` via `/debug/send-wakeup`) against a Mac-hosted backend reachable from a physical iPhone.
+
+> **Retired (do not expect this in the app):** `WAKEUP_PING` → `POST /notifications/refresh` → `applyNotificationRefreshPayload()` → `api_*` local schedules. The app logs ignored push types and does not refresh or schedule from wakeup. `/debug/send-wakeup` remains an FCM/APNs diagnostic. Mac `curl` of `/notifications/refresh` only tests the backend.
 
 ---
 
 ## Architecture overview
 
-End-to-end flow when testing New Activity / silent wake on a physical iPhone:
+End-to-end flow when testing FCM registration and wakeup **delivery** on a physical iPhone:
 
 ```text
 ┌─────────────────────┐     HTTPS      ┌──────────────────────┐
@@ -17,7 +19,7 @@ End-to-end flow when testing New Activity / silent wake on a physical iPhone:
 │  wakeup-service     │                └──────────┬───────────┘
 └──────────┬──────────┘                           │
            │                                        │ fetch
-           │ POST /notifications/refresh            │ POST /notifications/register
+           │                                        │ POST /notifications/register
            │                                        ▼
            │                             ┌──────────────────────┐
            │                             │  crowd-funder-for-     │
@@ -26,7 +28,7 @@ End-to-end flow when testing New Activity / silent wake on a physical iPhone:
            │                             └──────────┬───────────┘
            │                                        │
            │  FCM data message (WAKEUP_PING)        │ daily-notification-plugin
-           ▼                                        ▼ (local schedule replace)
+           ▼                                        ▼ (Daily Reminder / dual / fetcher)
 ┌─────────────────────┐                ┌──────────────────────┐
 │  Firebase Cloud      │ ──APNs──────► │  iPhone (physical)   │
 │  Messaging           │  silent push  │  app.timesafari      │
@@ -37,18 +39,16 @@ End-to-end flow when testing New Activity / silent wake on a physical iPhone:
 
 | Repo | Role |
 |------|------|
-| **notification-wakeup-service** | HTTP API: device registration, refresh payload (`nextNotifications`), health, debug wakeup send |
-| **crowd-funder-for-time-pwa** | Capacitor app: FCM token, `POST /notifications/register` & `/refresh`, handles `WAKEUP_PING` push |
-| **daily-notification-plugin** | Native iOS/Android: clear + reschedule local notifications from refresh timestamps |
+| **notification-wakeup-service** | HTTP API: device registration, health, debug wakeup send; may still expose `/notifications/refresh` |
+| **crowd-funder-for-time-pwa** | Capacitor app: FCM token, `POST /notifications/register`; logs `WAKEUP_PING` without refresh/`api_*` scheduling |
+| **daily-notification-plugin** | Native iOS/Android: Daily Reminder, New Activity / dual, native fetcher; Phase 4 `clearApiNotifications()` |
 
-### Silent wake sequence (production path)
+### Silent wake sequence (current)
 
-1. Backend (or `/debug/send-wakeup`) sends an FCM **data** message with `data.type = "WAKEUP_PING"`.
+1. Backend `/debug/send-wakeup` sends an FCM **data** message with `data.type = "WAKEUP_PING"`.
 2. APNs delivers to the device (best-effort; see iOS caveats below).
 3. Capacitor `pushNotificationReceived` fires → `handleCapacitorPushNotificationReceived()`.
-4. App calls `POST {backend}/notifications/refresh` with `testMode` (from debug config).
-5. Backend returns `nextNotifications: [{ timestamp }, ...]`.
-6. App calls `applyNotificationRefreshPayload()` → plugin clears and schedules new local alarms.
+4. Handler logs `[Notifications] push handler ignored type=WAKEUP_PING`. It does **not** POST `/notifications/refresh` or schedule `api_*` notifications.
 
 Console and debug panel lines are prefixed with **`[Notifications]`** (see `NotificationDebugEvents.ts`).
 
@@ -297,12 +297,11 @@ For a full panel reference (configuration, URL resolution order, authentication,
 | Control | Purpose |
 |---------|---------|
 | **Notification Backend URL** | Paste ngrok HTTPS URL → **Save Backend URL** (changes target server only) |
-| **Test Mode** | Sends `testMode: true/false` in register/refresh JSON bodies (default on when unset in storage) |
+| **Test Mode** | Sends `testMode: true/false` in register / send-wakeup JSON bodies (default on when unset in storage) |
 | **Skip JWT Authentication (Local Development Only)** | When on, omits `Authorization` headers for local servers that accept unauthenticated requests (default **off**) |
 | **Register Token Now** | `POST /notifications/register` with current FCM token |
-| **Refresh Notifications** | `POST /notifications/refresh` (same as post-wakeup flow) |
-| **Simulate WAKEUP_PING (Local)** | Calls refresh API directly (no FCM) — quick backend test |
-| **Send Real WAKEUP_PING** | `POST /debug/send-wakeup`; server sends real FCM `WAKEUP_PING` (Android doc has full flow) |
+| **Upload AlertSearch Authorization** | Uploads AlertSearch delegated JWTs |
+| **Send Real WAKEUP_PING** | `POST /debug/send-wakeup`; FCM/APNs delivery diagnostic only |
 | **Event Log** | Shared `[Notifications]` panel log (100 entries) |
 
 Persistence: `localStorage` keys `notificationDebug.backendBaseUrl`, `notificationDebug.testMode`, and `notificationDebug.bypassAuth` (`NotificationDebugConfig.ts`).
@@ -352,7 +351,7 @@ This section is a quick verification checklist for the detailed Firebase/APNs se
 | **GoogleService-Info.plist** | Present in the iOS target if using Firebase iOS SDK paths in your build |
 | **FCM token** | Confirm **Register Token Now** succeeds in the debug panel and ngrok shows `POST /notifications/register` |
 
-Silent/data pushes used for wake typically use a **content-available** style payload; confirm **notification-wakeup-service** and Firebase message format match what `handleCapacitorPushNotificationReceived` expects (`data.type === "WAKEUP_PING"`).
+Silent/data pushes used for wake typically use a **content-available** style payload; confirm **notification-wakeup-service** and Firebase message format. The app logs `WAKEUP_PING` as ignored and does not refresh.
 
 ---
 
@@ -378,14 +377,9 @@ Silent/data pushes used for wake typically use a **content-available** style pay
 - **Low Power Mode** can reduce background execution.
 - **Focus / Do Not Disturb** may affect notification presentation (separate from silent data wake, but confusing during tests).
 
-### Two “Simulate WAKEUP_PING” buttons
+### Send Real WAKEUP_PING (FCM/APNs diagnostic)
 
-| Button | Behavior |
-|--------|----------|
-| **Backend Testing → Simulate WAKEUP_PING** | Skips FCM; calls refresh API only (ngrok path test) |
-| **Wakeup Ping Simulator** (lower on panel) | Runs production handler with synthetic `WAKEUP_PING` payload |
-
-Use the backend button to verify ngrok + refresh; use the simulator to verify handler + refresh chaining.
+**Send Real WAKEUP_PING** posts `/debug/send-wakeup`. Delivery is confirmed by `push handler ignored type=WAKEUP_PING`. Mock refresh, Simulate WAKEUP_PING, and Wakeup Ping Simulator were removed.
 
 ---
 
@@ -395,11 +389,10 @@ Use the backend button to verify ngrok + refresh; use the simulator to verify ha
 2. Start **ngrok** and copy the HTTPS URL.
 3. Set URL + **Test Mode** in the Notification Debug Panel; confirm **Backend Status**.
 4. Tap **Register Token Now** → confirm ngrok request and `[Notifications] Token registration success`.
-5. Tap **Refresh Notifications** → confirm `Refresh completed in Nms (scheduled X)` in Event Log and ngrok `POST /notifications/refresh`.
-6. From the backend, call **`/debug/send-wakeup`** (see curl below) with the registered `deviceId` / FCM token as required by that service.
-7. Watch **Xcode console** for `[Notifications] pushNotificationReceived type=WAKEUP_PING` and refresh timing lines.
-8. Open **ngrok inspect UI** (`http://127.0.0.1:4040`) to correlate requests.
-9. Use **Pending Notification Inspector** on the panel to see locally scheduled fires after refresh.
+5. From the backend, call **`/debug/send-wakeup`** (see curl below) with the registered `deviceId` / FCM token as required by that service, or tap **Send Real WAKEUP_PING**.
+6. Watch **Xcode console** for `[Notifications] push handler ignored type=WAKEUP_PING`.
+7. Open **ngrok inspect UI** (`http://127.0.0.1:4040`) to correlate requests (register and send-wakeup; not app-initiated refresh).
+8. Use **Pending Notification Inspector** for Daily Reminder / dual / fetcher schedules.
 
 ---
 
@@ -430,7 +423,7 @@ curl -sS -X POST "$BASE/notifications/register" \
   }'
 ```
 
-### Refresh (mirror app payload)
+### Refresh (backend only; app does not consume)
 
 ```bash
 curl -sS -X POST "$BASE/notifications/refresh" \
@@ -441,19 +434,7 @@ curl -sS -X POST "$BASE/notifications/refresh" \
   }'
 ```
 
-Example success body shape (actual fields may vary by service version):
-
-```json
-{
-  "shouldNotify": true,
-  "nextNotifications": [
-    { "timestamp": 1710000000000 },
-    { "timestamp": 1710003600000 }
-  ]
-}
-```
-
-The app schedules those timestamps via **daily-notification-plugin** (`applyNotificationRefreshPayload` in `NativeNotificationService.ts`).
+This exercises **notification-wakeup-service** only. The app does **not** call `applyNotificationRefreshPayload` or schedule `api_*` from the response.
 
 ### Send wakeup push (debug)
 
@@ -478,8 +459,8 @@ Confirm parameters (token vs deviceId, auth headers) in that repo’s README or
 
 | Symptom | Checks |
 |---------|--------|
-| Network error in Event Log | ngrok running? URL saved without typo/trailing slash? |
-| HTTP 404 | Tunnel port matches backend `PORT`; path is `/notifications/refresh` |
+| Mac `curl` of `/notifications/refresh` fails | ngrok running? URL saved without typo/trailing slash? |
+| HTTP 404 | Tunnel port matches backend `PORT`; path is `/notifications/refresh` (backend route; the app does not call it) |
 | CORS (web only) | Native Capacitor fetch usually avoids browser CORS; if testing in Safari PWA, configure CORS on the service |
 | ngrok browser warning | Free tier may show an interstitial for browser clients; native `fetch` from the app is usually unaffected |
 
@@ -495,15 +476,15 @@ Confirm parameters (token vs deviceId, auth headers) in that repo’s README or
 - App **backgrounded**, not force-quit
 - Physical device, correct provisioning profile
 - APNs key uploaded to Firebase; bundle ID matches
-- FCM message includes `data.type = "WAKEUP_PING"` (see `NativeNotificationService.ts`)
+- FCM message includes `data.type = "WAKEUP_PING"` (logged as ignored in `NativeNotificationService.ts`)
 - Server actually sent to the **same** FCM token shown in the debug panel
 - Wait 30–120s — delivery is not instant
-- Try **Simulate WAKEUP_PING** (refresh API) to isolate app/plugin from FCM/APNs
+- Confirm Xcode shows `push handler ignored type=WAKEUP_PING` (there is no Simulate WAKEUP_PING / refresh API in the app)
 
 ### Notifications duplicating
 
-- Multiple refresh calls (flood test, repeated wakeups) each **replace** schedule via clear + schedule — check Event Log for repeated refreshes
-- Separate issue: Daily Reminder vs New Activity both scheduling — see `doc/notification-new-activity-lay-of-the-land.md`
+- Daily Reminder vs New Activity both scheduling — see `doc/notification-new-activity-lay-of-the-land.md`
+- Leftover `api_*` before Phase 4 cleanup (startup `clearApiNotifications()`)
 
 ### Stale ngrok URL
 
@@ -525,7 +506,7 @@ Confirm parameters (token vs deviceId, auth headers) in that repo’s README or
 | `src/services/notifications/NotificationDebugEvents.ts` | Panel event log + `logNotification()` |
 | `src/services/notifications/notificationLog.ts` | Structured log helpers |
 | `src/services/notifications/NotificationService.ts` | `POST /notifications/register` |
-| `src/services/notifications/NativeNotificationService.ts` | Refresh, `WAKEUP_PING`, schedule replace |
+| `src/services/notifications/NativeNotificationService.ts` | Push delivery hook (logs ignored types; no refresh) |
 | `src/services/notifications/firebaseMessagingClient.ts` | Capacitor push listeners |
 | `src/components/dev/NotificationDebugPanel.vue` | Dev UI |
 | `src/main.capacitor.ts` | Native push init at startup |

doc/notification-debug-panel.md

@@ -1,16 +1,16 @@
 # Notification Debug Panel
 
 **Created:** 2026-07-07  
-**Updated:** 2026-07-22  
-**Audience:** Developers testing notification registration, refresh, and WAKEUP_PING flows on native (iOS/Android) dev builds.
+**Updated:** 2026-09-24  
+**Audience:** Developers testing notification registration, AlertSearch authorization upload, and FCM delivery diagnostics on native (iOS/Android) dev builds.
 
-The **Notification Debug Panel** is a dev-only UI for exercising the same notification orchestration paths the production app uses: FCM token registration, backend refresh, wakeup handling, and local schedule inspection. It does not duplicate scheduling logic.
+The **Notification Debug Panel** is a dev-only UI for FCM token registration, AlertSearch authorization upload, FCM wakeup delivery diagnostics (`/debug/send-wakeup`), and local schedule inspection. It does not schedule notifications from `WAKEUP_PING`. The production `WAKEUP_PING` → `/notifications/refresh` → `api_*` path was retired; leftover `api_*` schedules are cleared once at startup (Phase 4).
 
 ---
 
 ## Notification API base URL
 
-Notification HTTP calls (`/notifications/register`, `/notifications/refresh`, `/debug/send-wakeup`, etc.) do **not** use `APP_SERVER`. They use a dedicated Notification API host, resolved at runtime by `getNotificationApiBaseUrl()` in `NotificationDebugConfig.ts`.
+Notification HTTP calls (`/notifications/register`, `/notifications/alert-authorization`, `/debug/send-wakeup`, etc.) do **not** use `APP_SERVER`. They use a dedicated Notification API host, resolved at runtime by `getNotificationApiBaseUrl()` in `NotificationDebugConfig.ts`. The app does not call `/notifications/refresh`.
 
 ### Configuration constants
 
@@ -65,7 +65,7 @@ Settings persist in `localStorage` via `NotificationDebugConfig.ts`:
 | `notificationDebug.testMode` | `true` | Sent in JSON request bodies (`testMode: true/false`) |
 | `notificationDebug.bypassAuth` | `false` | When `true`, omit JWT `Authorization` headers on notification API calls |
 
-All notification API requests (`/notifications/register`, `/notifications/refresh`, `/debug/send-wakeup`, etc.) obtain headers through `getNotificationApiHeaders()` in `notificationApiAuth.ts`.
+All notification API requests (`/notifications/register`, `/notifications/alert-authorization`, `/debug/send-wakeup`, etc.) obtain headers through `getNotificationApiHeaders()` in `notificationApiAuth.ts`.
 
 ### Notification Backend URL
 
@@ -75,7 +75,7 @@ Leave empty to use the configured build default (`DEFAULT_NOTIFY_API_SERVER`, fr
 
 ### Test Mode
 
-When enabled (default if never saved), register and refresh requests include `"testMode": true` in the JSON body. The backend can use this to return dev-friendly schedules or route test traffic separately from production.
+When enabled (default if never saved), register and send-wakeup requests include `"testMode": true` in the JSON body. The backend can use this to route test traffic separately from production.
 
 Test Mode is **independent of authentication**. It does not control whether `Authorization` headers are sent.
 
@@ -124,9 +124,8 @@ Example: `https://abc123.ngrok-free.app` or `http://127.0.0.1:3000`
 | Action | What it does |
 |--------|----------------|
 | **Register Token Now** | `POST {backend}/notifications/register` with current FCM token, `deviceId`, `platform`, and `testMode`. Forces re-registration (bypasses duplicate-token skip). |
-| **Refresh Notifications** | `POST {backend}/notifications/refresh` — same path used after a real WAKEUP_PING. Applies returned schedule to the native plugin. |
-| **Simulate WAKEUP_PING (Local)** | Calls the refresh API directly (no FCM). Quick test of backend URL + auth + refresh parsing without push delivery. |
-| **Send Real WAKEUP_PING** | `POST {backend}/debug/send-wakeup`; server sends a real FCM data message with `data.type = "WAKEUP_PING"`. Exercises backend → FCM → Capacitor listener → refresh → reschedule. Background the app before expecting delivery. |
+| **Upload AlertSearch Authorization** | Mints and uploads delegated AlertSearch JWTs (`POST /notifications/alert-authorization`). Requires an active `did:ethr` identity; Test Mode is not used. |
+| **Send Real WAKEUP_PING** | `POST {backend}/debug/send-wakeup`; server sends a real FCM data message with `data.type = "WAKEUP_PING"`. FCM delivery diagnostic only — the app logs `push handler ignored type=…` and does **not** call `/notifications/refresh` or schedule `api_*` notifications. Background the app before expecting delivery. |
 
 **Current FCM Token** displays the last token from Capacitor/Firebase registration. **Event Log** shows the last 100 `[Notifications]` messages (also visible in logcat / Xcode console on native).
 
@@ -136,12 +135,8 @@ Example: `https://abc123.ngrok-free.app` or `http://127.0.0.1:3000`
 
 | Section | Purpose |
 |---------|---------|
-| **Mock Timing Presets** | Interval for mock refresh timestamps (30 sec – 10 min). |
-| **Trigger Mock Refresh** | Applies synthetic future timestamps locally — no backend call. |
-| **Wakeup Ping Simulator** | Runs the production push handler with a synthetic `WAKEUP_PING` payload (no FCM, no backend). |
-| **Flood Test** | Runs 20 sequential mock refreshes (stress test). |
-| **Pending Notification Inspector** | Lists locally scheduled notifications (iOS; Android may show unavailable). |
-| **Clear Notifications** | Clears/cancels all plugin-scheduled notifications on native. |
+| **Pending Notification Inspector** | Lists locally scheduled notifications (Daily Reminder, New Activity / dual, and any leftover `api_*` until Phase 4 cleanup). |
+| **Clear Notifications** | Clears/cancels plugin-scheduled notifications on native. Does not replace the one-time `api_*` startup cleanup. |
 
 ---
 
@@ -198,11 +193,11 @@ The app deferred registration because JWT could not be built (no active DID or e
 
 Same as above. Confirm the **Active** URL in the panel matches your running tunnel or local server port.
 
-### Register succeeds but Send Real WAKEUP_PING does not trigger refresh
+### Register succeeds but Send Real WAKEUP_PING does not show delivery
 
-**Real WAKEUP_PING success** only means the backend accepted the wakeup request and attempted FCM delivery. Missing `pushNotificationReceived` / `Refresh completed (WAKEUP_PING)` indicates an FCM delivery or background execution issue — not necessarily a bad wakeup API call.
+**Real WAKEUP_PING success** only means the backend accepted the wakeup request and attempted FCM delivery. It does **not** schedule local `api_*` notifications. Delivery is confirmed when logcat / Event Log shows `push handler ignored type=WAKEUP_PING` (the retired refresh chain is gone).
 
-**Checks:** App backgrounded (not force-stopped); FCM token matches registration; **Simulate WAKEUP_PING (Local)** works (isolates FCM from refresh API).
+**Checks:** App backgrounded (not force-stopped); FCM token matches registration; Firebase / Play services available.
 
 See platform-specific guides for extended ngrok and FCM workflows:
 
@@ -222,7 +217,7 @@ See platform-specific guides for extended ngrok and FCM workflows:
 | `src/services/notifications/notificationApiDebugMode.ts` | Auth bypass gate |
 | `src/services/notifications/NotificationDebugService.ts` | Panel action handlers |
 | `src/services/notifications/NotificationService.ts` | `POST /notifications/register` |
-| `src/services/notifications/NativeNotificationService.ts` | `POST /notifications/refresh`, WAKEUP_PING handler |
+| `src/services/notifications/NativeNotificationService.ts` | Push delivery hook (logs ignored types; no refresh) |
 
 ---
 

electron/capacitor.config.json

@@ -1,6 +1,6 @@
 {
 	"appId": "app.timesafari",
-	"appName": "TimeSafari",
+	"appName": "Giftopia",
 	"webDir": "dist",
 	"server": {
 		"cleartext": true
@@ -34,12 +34,12 @@
 			"iosIsEncryption": false,
 			"iosBiometric": {
 				"biometricAuth": false,
-				"biometricTitle": "Biometric login for TimeSafari"
+				"biometricTitle": "Biometric login for Giftopia"
 			},
 			"androidIsEncryption": false,
 			"androidBiometric": {
 				"biometricAuth": false,
-				"biometricTitle": "Biometric login for TimeSafari"
+				"biometricTitle": "Biometric login for Giftopia"
 			},
 			"electronIsEncryption": false
 		}
@@ -72,7 +72,7 @@
 		},
 		"buildOptions": {
 			"appId": "app.timesafari",
-			"productName": "TimeSafari",
+			"productName": "Giftopia",
 			"directories": {
 				"output": "dist-electron-packages"
 			},

ios/.gitignore

@@ -17,6 +17,7 @@ App/App/config.xml
 App/App.xcodeproj/xcuserdata/*.xcuserdatad/
 App/App.xcodeproj/*.xcuserstate
 
-# Generated Icons from capacitor-assets (also Contents.json which is confusing; see BUILDING.md)
+# Generated by capacitor-assets at build time (not in repo). Fresh clones lack these
+# folders; scripts/common.sh ensure_ios_capacitor_asset_directories creates them before generate.
 App/App/Assets.xcassets/AppIcon.appiconset
 App/App/Assets.xcassets/Splash.imageset

ios/App/App.xcodeproj/project.pbxproj

@@ -177,7 +177,7 @@
 				012076E8FFE4BF260A79B034 /* Fix Privacy Manifest */,
 				96A7EF592DF3366D00084D51 /* Fix Privacy Manifest */,
 				C86585E02ED456DE00824752 /* Embed Foundation Extensions */,
-				3FE25897CF40A571D4AC2ACE /* [CP] Copy Pods Resources */,
+				2B3F98670AF3508A35AC3248 /* [CP] Embed Pods Frameworks */,
 			);
 			buildRules = (
 			);
@@ -294,19 +294,19 @@
 			shellScript = "\"${PROJECT_DIR}/app_privacy_manifest_fixer/fixer.sh\" \n";
 			showEnvVarsInLog = 0;
 		};
-		3FE25897CF40A571D4AC2ACE /* [CP] Copy Pods Resources */ = {
+		2B3F98670AF3508A35AC3248 /* [CP] Embed Pods Frameworks */ = {
 			isa = PBXShellScriptBuildPhase;
 			buildActionMask = 2147483647;
 			files = (
 			);
 			inputPaths = (
 			);
-			name = "[CP] Copy Pods Resources";
+			name = "[CP] Embed Pods Frameworks";
 			outputPaths = (
 			);
 			runOnlyForDeploymentPostprocessing = 0;
 			shellPath = /bin/sh;
-			shellScript = "\"${PODS_ROOT}/Target Support Files/Pods-App/Pods-App-resources.sh\"\n";
+			shellScript = "\"${PODS_ROOT}/Target Support Files/Pods-App/Pods-App-frameworks.sh\"\n";
 			showEnvVarsInLog = 0;
 		};
 		92977BEA1068CC097A57FC77 /* [CP] Check Pods Manifest.lock */ = {
@@ -455,7 +455,7 @@
 				GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE;
 				GCC_WARN_UNUSED_FUNCTION = YES;
 				GCC_WARN_UNUSED_VARIABLE = YES;
-				IPHONEOS_DEPLOYMENT_TARGET = 13.0;
+				IPHONEOS_DEPLOYMENT_TARGET = 15.5;
 				MTL_ENABLE_DEBUG_INFO = YES;
 				ONLY_ACTIVE_ARCH = YES;
 				SDKROOT = iphoneos;
@@ -512,7 +512,7 @@
 				GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE;
 				GCC_WARN_UNUSED_FUNCTION = YES;
 				GCC_WARN_UNUSED_VARIABLE = YES;
-				IPHONEOS_DEPLOYMENT_TARGET = 13.0;
+				IPHONEOS_DEPLOYMENT_TARGET = 15.5;
 				MTL_ENABLE_DEBUG_INFO = NO;
 				SDKROOT = iphoneos;
 				STRING_CATALOG_GENERATE_SYMBOLS = YES;
@@ -530,17 +530,18 @@
 				CLANG_ENABLE_MODULES = YES;
 				CODE_SIGN_ENTITLEMENTS = App/AppDebug.entitlements;
 				CODE_SIGN_STYLE = Automatic;
-				CURRENT_PROJECT_VERSION = 65;
+				CURRENT_PROJECT_VERSION = 70;
 				DEVELOPMENT_TEAM = GM3FS5JQPH;
 				ENABLE_APP_SANDBOX = NO;
 				ENABLE_USER_SCRIPT_SANDBOXING = NO;
 				INFOPLIST_FILE = App/Info.plist;
-				IPHONEOS_DEPLOYMENT_TARGET = 13.0;
+				INFOPLIST_KEY_CFBundleDisplayName = Giftopia;
+				IPHONEOS_DEPLOYMENT_TARGET = 15.5;
 				LD_RUNPATH_SEARCH_PATHS = (
 					"$(inherited)",
 					"@executable_path/Frameworks",
 				);
-				MARKETING_VERSION = 1.3.8;
+				MARKETING_VERSION = 1.4.4;
 				OTHER_SWIFT_FLAGS = "$(inherited) \"-D\" \"COCOAPODS\" \"-DDEBUG\"";
 				PRODUCT_BUNDLE_IDENTIFIER = app.timesafari;
 				PRODUCT_NAME = "$(TARGET_NAME)";
@@ -559,17 +560,18 @@
 				CLANG_ENABLE_MODULES = YES;
 				CODE_SIGN_ENTITLEMENTS = App/App.entitlements;
 				CODE_SIGN_STYLE = Automatic;
-				CURRENT_PROJECT_VERSION = 65;
+				CURRENT_PROJECT_VERSION = 70;
 				DEVELOPMENT_TEAM = GM3FS5JQPH;
 				ENABLE_APP_SANDBOX = NO;
 				ENABLE_USER_SCRIPT_SANDBOXING = NO;
 				INFOPLIST_FILE = App/Info.plist;
-				IPHONEOS_DEPLOYMENT_TARGET = 13.0;
+				INFOPLIST_KEY_CFBundleDisplayName = Giftopia;
+				IPHONEOS_DEPLOYMENT_TARGET = 15.5;
 				LD_RUNPATH_SEARCH_PATHS = (
 					"$(inherited)",
 					"@executable_path/Frameworks",
 				);
-				MARKETING_VERSION = 1.3.8;
+				MARKETING_VERSION = 1.4.4;
 				PRODUCT_BUNDLE_IDENTIFIER = app.timesafari;
 				PRODUCT_NAME = "$(TARGET_NAME)";
 				SWIFT_ACTIVE_COMPILATION_CONDITIONS = "";
@@ -587,21 +589,21 @@
 				CLANG_ENABLE_OBJC_WEAK = YES;
 				CODE_SIGN_ENTITLEMENTS = TimeSafariShareExtension/TimeSafariShareExtension.entitlements;
 				CODE_SIGN_STYLE = Automatic;
-				CURRENT_PROJECT_VERSION = 65;
+				CURRENT_PROJECT_VERSION = 70;
 				DEVELOPMENT_TEAM = GM3FS5JQPH;
 				GCC_C_LANGUAGE_STANDARD = gnu17;
 				GENERATE_INFOPLIST_FILE = YES;
 				INFOPLIST_FILE = TimeSafariShareExtension/Info.plist;
-				INFOPLIST_KEY_CFBundleDisplayName = TimeSafari;
+				INFOPLIST_KEY_CFBundleDisplayName = Giftopia;
 				INFOPLIST_KEY_NSHumanReadableCopyright = "";
-				IPHONEOS_DEPLOYMENT_TARGET = 14.0;
+				IPHONEOS_DEPLOYMENT_TARGET = 15.5;
 				LD_RUNPATH_SEARCH_PATHS = (
 					"$(inherited)",
 					"@executable_path/Frameworks",
 					"@executable_path/../../Frameworks",
 				);
 				LOCALIZATION_PREFERS_STRING_CATALOGS = YES;
-				MARKETING_VERSION = 1.3.8;
+				MARKETING_VERSION = 1.4.4;
 				MTL_ENABLE_DEBUG_INFO = INCLUDE_SOURCE;
 				MTL_FAST_MATH = YES;
 				PRODUCT_BUNDLE_IDENTIFIER = app.timesafari.TimeSafariShareExtension;
@@ -625,21 +627,21 @@
 				CLANG_ENABLE_OBJC_WEAK = YES;
 				CODE_SIGN_ENTITLEMENTS = TimeSafariShareExtension/TimeSafariShareExtension.entitlements;
 				CODE_SIGN_STYLE = Automatic;
-				CURRENT_PROJECT_VERSION = 65;
+				CURRENT_PROJECT_VERSION = 70;
 				DEVELOPMENT_TEAM = GM3FS5JQPH;
 				GCC_C_LANGUAGE_STANDARD = gnu17;
 				GENERATE_INFOPLIST_FILE = YES;
 				INFOPLIST_FILE = TimeSafariShareExtension/Info.plist;
-				INFOPLIST_KEY_CFBundleDisplayName = TimeSafari;
+				INFOPLIST_KEY_CFBundleDisplayName = Giftopia;
 				INFOPLIST_KEY_NSHumanReadableCopyright = "";
-				IPHONEOS_DEPLOYMENT_TARGET = 14.0;
+				IPHONEOS_DEPLOYMENT_TARGET = 15.5;
 				LD_RUNPATH_SEARCH_PATHS = (
 					"$(inherited)",
 					"@executable_path/Frameworks",
 					"@executable_path/../../Frameworks",
 				);
 				LOCALIZATION_PREFERS_STRING_CATALOGS = YES;
-				MARKETING_VERSION = 1.3.8;
+				MARKETING_VERSION = 1.4.4;
 				MTL_FAST_MATH = YES;
 				PRODUCT_BUNDLE_IDENTIFIER = app.timesafari.TimeSafariShareExtension;
 				PRODUCT_NAME = "$(TARGET_NAME)";

ios/App/App/AppDelegate.swift

@@ -159,7 +159,7 @@ class AppDelegate: UIResponder, UIApplicationDelegate, UNUserNotificationCenterD
     func application(_ app: UIApplication, open url: URL, options: [UIApplication.OpenURLOptionsKey: Any] = [:]) -> Bool {
         // Called when the app was launched with a url. Feel free to add additional processing here,
         // but if you want the App API to support tracking app url opens, make sure to keep this call
-        // Note: Share Extension opens app with timesafari:// (empty path), which is handled by JavaScript
+        // Note: Share Extension opens app with timesafari://shared-photo, which is handled by JavaScript
         // via the appUrlOpen listener in main.capacitor.ts
         return ApplicationDelegateProxy.shared.application(app, open: url, options: options)
     }

ios/App/App/Assets.xcassets/SplashDark.imageset/Contents.json

@@ -1,23 +0,0 @@
-{
-  "images" : [
-    {
-      "filename" : "splash@1x.png",
-      "idiom" : "universal",
-      "scale" : "1x"
-    },
-    {
-      "filename" : "splash@2x.png",
-      "idiom" : "universal",
-      "scale" : "2x"
-    },
-    {
-      "filename" : "splash@3x.png",
-      "idiom" : "universal",
-      "scale" : "3x"
-    }
-  ],
-  "info" : {
-    "author" : "xcode",
-    "version" : 1
-  }
-}

ios/App/App/Info.plist

@@ -12,7 +12,7 @@
 	<key>CFBundleDevelopmentRegion</key>
 	<string>en</string>
 	<key>CFBundleDisplayName</key>
-	<string>TimeSafari</string>
+	<string>Giftopia</string>
 	<key>CFBundleExecutable</key>
 	<string>$(EXECUTABLE_NAME)</string>
 	<key>CFBundleIdentifier</key>

ios/App/Podfile

@@ -1,8 +1,7 @@
 require_relative '../../node_modules/@capacitor/ios/scripts/pods_helpers'
 
-platform :ios, '13.0'
-# Static linkage helps isolate SQLCipher from Apple's system SQLite module/headers.
-use_frameworks! :linkage => :static
+platform :ios, '15.5'
+use_frameworks!
 
 # workaround to avoid Xcode caching of Pods that requires
 # Product -> Clean Build Folder after new Cordova plugins installed
@@ -83,7 +82,10 @@ post_install do |installer|
   assertDeploymentTarget(installer)
   installer.pods_project.targets.each do |target|
     target.build_configurations.each do |config|
-      config.build_settings['EXCLUDED_ARCHS[sdk=iphonesimulator*]'] = 'arm64'
+      deployment_target = config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'].to_f
+      if deployment_target > 0.0 && deployment_target < 15.5
+        config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '15.5'
+      end
       config.build_settings['CLANG_ALLOW_NON_MODULAR_INCLUDES_IN_FRAMEWORK_MODULES'] = 'YES'
       merge_sqlite_omit_load_extension_definition(config)
       strip_system_sqlite_from_pod_config(config)

ios/App/Podfile.lock

@@ -1,89 +1,79 @@
 PODS:
-  - Capacitor (6.2.1):
+  - Capacitor (7.6.4):
     - CapacitorCordova
-  - CapacitorApp (6.0.2):
+  - CapacitorApp (7.1.2):
     - Capacitor
-  - CapacitorCamera (6.1.2):
+  - CapacitorCamera (7.0.5):
     - Capacitor
-  - CapacitorClipboard (6.0.2):
+  - CapacitorClipboard (7.0.4):
     - Capacitor
-  - CapacitorCommunitySqlite (6.0.2):
+  - CapacitorCommunitySqlite (7.0.3):
     - Capacitor
     - SQLCipher
     - ZIPFoundation
-  - CapacitorCordova (6.2.1)
-  - CapacitorFilesystem (6.0.3):
+  - CapacitorCordova (7.6.4)
+  - CapacitorFilesystem (7.1.8):
     - Capacitor
-  - CapacitorMlkitBarcodeScanning (6.2.0):
+    - IONFilesystemLib (~> 1.1.1)
+  - CapacitorMlkitBarcodeScanning (7.5.0):
     - Capacitor
-    - GoogleMLKit/BarcodeScanning (= 5.0.0)
-  - CapacitorPreferences (6.0.4):
+    - GoogleMLKit/BarcodeScanning (= 7.0.0)
+  - CapacitorPreferences (7.0.4):
     - Capacitor
-  - CapacitorPushNotifications (6.0.5):
+  - CapacitorPushNotifications (7.0.7):
     - Capacitor
-  - CapacitorShare (6.0.3):
+  - CapacitorShare (7.0.4):
     - Capacitor
-  - CapacitorStatusBar (6.0.2):
+  - CapacitorStatusBar (7.0.6):
     - Capacitor
-  - CapawesomeCapacitorFilePicker (6.2.0):
+  - CapawesomeCapacitorFilePicker (7.2.0):
     - Capacitor
-  - GoogleDataTransport (9.4.1):
-    - GoogleUtilities/Environment (~> 7.7)
-    - nanopb (< 2.30911.0, >= 2.30908.0)
-    - PromisesObjC (< 3.0, >= 1.2)
-  - GoogleMLKit/BarcodeScanning (5.0.0):
+  - GoogleDataTransport (10.1.0):
+    - nanopb (~> 3.30910.0)
+    - PromisesObjC (~> 2.4)
+  - GoogleMLKit/BarcodeScanning (7.0.0):
     - GoogleMLKit/MLKitCore
-    - MLKitBarcodeScanning (~> 4.0.0)
-  - GoogleMLKit/MLKitCore (5.0.0):
-    - MLKitCommon (~> 10.0.0)
-  - GoogleToolboxForMac/DebugUtils (2.3.2):
-    - GoogleToolboxForMac/Defines (= 2.3.2)
-  - GoogleToolboxForMac/Defines (2.3.2)
-  - GoogleToolboxForMac/Logger (2.3.2):
-    - GoogleToolboxForMac/Defines (= 2.3.2)
-  - "GoogleToolboxForMac/NSData+zlib (2.3.2)":
-    - GoogleToolboxForMac/Defines (= 2.3.2)
-  - "GoogleToolboxForMac/NSDictionary+URLArguments (2.3.2)":
-    - GoogleToolboxForMac/DebugUtils (= 2.3.2)
-    - GoogleToolboxForMac/Defines (= 2.3.2)
-    - "GoogleToolboxForMac/NSString+URLArguments (= 2.3.2)"
-  - "GoogleToolboxForMac/NSString+URLArguments (2.3.2)"
-  - GoogleUtilities/Environment (7.13.3):
+    - MLKitBarcodeScanning (~> 6.0.0)
+  - GoogleMLKit/MLKitCore (7.0.0):
+    - MLKitCommon (~> 12.0.0)
+  - GoogleToolboxForMac/Defines (4.2.1)
+  - GoogleToolboxForMac/Logger (4.2.1):
+    - GoogleToolboxForMac/Defines (= 4.2.1)
+  - "GoogleToolboxForMac/NSData+zlib (4.2.1)":
+    - GoogleToolboxForMac/Defines (= 4.2.1)
+  - GoogleUtilities/Environment (8.1.0):
     - GoogleUtilities/Privacy
-    - PromisesObjC (< 3.0, >= 1.2)
-  - GoogleUtilities/Logger (7.13.3):
+  - GoogleUtilities/Logger (8.1.0):
     - GoogleUtilities/Environment
     - GoogleUtilities/Privacy
-  - GoogleUtilities/Privacy (7.13.3)
-  - GoogleUtilities/UserDefaults (7.13.3):
+  - GoogleUtilities/Privacy (8.1.0)
+  - GoogleUtilities/UserDefaults (8.1.0):
     - GoogleUtilities/Logger
     - GoogleUtilities/Privacy
-  - GoogleUtilitiesComponents (1.1.0):
-    - GoogleUtilities/Logger
   - GTMSessionFetcher/Core (3.5.0)
-  - MLImage (1.0.0-beta5)
-  - MLKitBarcodeScanning (4.0.0):
-    - MLKitCommon (~> 10.0)
-    - MLKitVision (~> 6.0)
-  - MLKitCommon (10.0.0):
-    - GoogleDataTransport (~> 9.0)
-    - GoogleToolboxForMac/Logger (~> 2.1)
-    - "GoogleToolboxForMac/NSData+zlib (~> 2.1)"
-    - "GoogleToolboxForMac/NSDictionary+URLArguments (~> 2.1)"
-    - GoogleUtilities/UserDefaults (~> 7.0)
-    - GoogleUtilitiesComponents (~> 1.0)
-    - GTMSessionFetcher/Core (< 4.0, >= 1.1)
-  - MLKitVision (6.0.0):
-    - GoogleToolboxForMac/Logger (~> 2.1)
-    - "GoogleToolboxForMac/NSData+zlib (~> 2.1)"
-    - GTMSessionFetcher/Core (< 4.0, >= 1.1)
-    - MLImage (= 1.0.0-beta5)
-    - MLKitCommon (~> 10.0)
-  - nanopb (2.30910.0):
-    - nanopb/decode (= 2.30910.0)
-    - nanopb/encode (= 2.30910.0)
-  - nanopb/decode (2.30910.0)
-  - nanopb/encode (2.30910.0)
+  - IONFilesystemLib (1.1.2)
+  - MLImage (1.0.0-beta6)
+  - MLKitBarcodeScanning (6.0.0):
+    - MLKitCommon (~> 12.0)
+    - MLKitVision (~> 8.0)
+  - MLKitCommon (12.0.0):
+    - GoogleDataTransport (~> 10.0)
+    - GoogleToolboxForMac/Logger (< 5.0, >= 4.2.1)
+    - "GoogleToolboxForMac/NSData+zlib (< 5.0, >= 4.2.1)"
+    - GoogleUtilities/Logger (~> 8.0)
+    - GoogleUtilities/UserDefaults (~> 8.0)
+    - GTMSessionFetcher/Core (< 4.0, >= 3.3.2)
+  - MLKitVision (8.0.0):
+    - GoogleToolboxForMac/Logger (< 5.0, >= 4.2.1)
+    - "GoogleToolboxForMac/NSData+zlib (< 5.0, >= 4.2.1)"
+    - GTMSessionFetcher/Core (< 4.0, >= 3.3.2)
+    - MLImage (= 1.0.0-beta6)
+    - MLKitCommon (~> 12.0)
+  - nanopb (3.30910.0):
+    - nanopb/decode (= 3.30910.0)
+    - nanopb/encode (= 3.30910.0)
+  - nanopb/decode (3.30910.0)
+  - nanopb/encode (3.30910.0)
   - PromisesObjC (2.4.0)
   - SQLCipher (4.10.0):
     - SQLCipher/standard (= 4.10.0)
@@ -116,8 +106,8 @@ SPEC REPOS:
     - GoogleMLKit
     - GoogleToolboxForMac
     - GoogleUtilities
-    - GoogleUtilitiesComponents
     - GTMSessionFetcher
+    - IONFilesystemLib
     - MLImage
     - MLKitBarcodeScanning
     - MLKitCommon
@@ -158,35 +148,35 @@ EXTERNAL SOURCES:
     :path: "../../node_modules/@timesafari/daily-notification-plugin"
 
 SPEC CHECKSUMS:
-  Capacitor: c95400d761e376be9da6be5a05f226c0e865cebf
-  CapacitorApp: e1e6b7d05e444d593ca16fd6d76f2b7c48b5aea7
-  CapacitorCamera: 9bc7b005d0e6f1d5f525b8137045b60cffffce79
-  CapacitorClipboard: 4443c3cdb7c77b1533dfe3ff0f9f7756aa8579df
-  CapacitorCommunitySqlite: 0299d20f4b00c2e6aa485a1d8932656753937b9b
-  CapacitorCordova: 8d93e14982f440181be7304aa9559ca631d77fff
-  CapacitorFilesystem: 59270a63c60836248812671aa3b15df673fbaf74
-  CapacitorMlkitBarcodeScanning: 7652be9c7922f39203a361de735d340ae37e134e
-  CapacitorPreferences: 5848e0691b36b4bb4acc98e481ab56d451578d30
-  CapacitorPushNotifications: 35abece14371c57172e8321c9ccc8b6fa35fabfe
-  CapacitorShare: d2a742baec21c8f3b92b361a2fbd2401cdd8288e
-  CapacitorStatusBar: b16799a26320ffa52f6c8b01737d5a95bbb8f3eb
-  CapawesomeCapacitorFilePicker: c40822f0a39f86855321943c7829d52bca7f01bd
-  GoogleDataTransport: 6c09b596d841063d76d4288cc2d2f42cc36e1e2a
-  GoogleMLKit: 90ba06e028795a50261f29500d238d6061538711
-  GoogleToolboxForMac: 8bef7c7c5cf7291c687cf5354f39f9db6399ad34
-  GoogleUtilities: ea963c370a38a8069cc5f7ba4ca849a60b6d7d15
-  GoogleUtilitiesComponents: 679b2c881db3b615a2777504623df6122dd20afe
+  Capacitor: 69dc07ebc6bd064747c5e76922f97e4862d9cc23
+  CapacitorApp: f01a913211780e0718dae9750442c3e23f96e106
+  CapacitorCamera: 9e952270be355797f769aa835bb7643a96c871fe
+  CapacitorClipboard: d1f123674cf413125db816a45e8f70e8770972fc
+  CapacitorCommunitySqlite: 4813d82ad33001e612a39d313cb5d28066cbafda
+  CapacitorCordova: e343e95a672ff73e21a77a80257b52fb609b47d5
+  CapacitorFilesystem: c63fc54df41e5a6761785a7f3c49dc696c22e296
+  CapacitorMlkitBarcodeScanning: afd6fc431b550026a2c052e11ab2b71c7ae30011
+  CapacitorPreferences: 69d9991307507aeab8ef8019c10b9babfda0e9ca
+  CapacitorPushNotifications: 0527809a9619ed775439d5ab2c2d996122b48319
+  CapacitorShare: 25f7fc5dd0e4edbde5d6801c6de5d14a8b450a41
+  CapacitorStatusBar: 416e9e53fd6397e668d4a181cd2131617d949bd6
+  CapawesomeCapacitorFilePicker: 0f4a913a00e39dd77213449f0d917e92f35a5ca9
+  GoogleDataTransport: aae35b7ea0c09004c3797d53c8c41f66f219d6a7
+  GoogleMLKit: eff9e23ec1d90ea4157a1ee2e32a4f610c5b3318
+  GoogleToolboxForMac: d1a2cbf009c453f4d6ded37c105e2f67a32206d8
+  GoogleUtilities: 00c88b9a86066ef77f0da2fab05f65d7768ed8e1
   GTMSessionFetcher: 5aea5ba6bd522a239e236100971f10cb71b96ab6
-  MLImage: 1824212150da33ef225fbd3dc49f184cf611046c
-  MLKitBarcodeScanning: 9cb0ec5ec65bbb5db31de4eba0a3289626beab4e
-  MLKitCommon: afcd11b6c0735066a0dde8b4bf2331f6197cbca2
-  MLKitVision: 90922bca854014a856f8b649d1f1f04f63fd9c79
-  nanopb: 438bc412db1928dac798aa6fd75726007be04262
+  IONFilesystemLib: 21a63377696b2d8fab5632ecfb7d2ac67bddb68a
+  MLImage: 0ad1c5f50edd027672d8b26b0fee78a8b4a0fc56
+  MLKitBarcodeScanning: 0a3064da0a7f49ac24ceb3cb46a5bc67496facd2
+  MLKitCommon: 07c2c33ae5640e5380beaaa6e4b9c249a205542d
+  MLKitVision: 45e79d68845a2de77e2dd4d7f07947f0ed157b0e
+  nanopb: fad817b59e0457d11a5dfbde799381cd727c1275
   PromisesObjC: f5707f49cb48b9636751c5b2e7d227e43fba9f47
   SQLCipher: eb79c64049cb002b4e9fcb30edb7979bf4706dfc
   TimesafariDailyNotificationPlugin: 69277c884380a9a620f671b68e0327eaa4b3d27d
   ZIPFoundation: dfd3d681c4053ff7e2f7350bc4e53b5dba3f5351
 
-PODFILE CHECKSUM: 3a6079307b3952d27d8dbfc0ce9abb523ecce7f0
+PODFILE CHECKSUM: 5736811d271d5309d3e2de8f3eefdbb6632086a3
 
 COCOAPODS: 1.16.2

ios/App/TimeSafariShareExtension/ShareViewController.swift

@@ -46,7 +46,7 @@ class ShareViewController: UIViewController {
             if success {
                 // Set flag that shared photo is ready
                 self.setSharedPhotoReadyFlag()
-                // Open the main app (using minimal URL - app will detect shared data on activation)
+                // Open the main app at its shared-photo deep link.
                 self.openMainApp()
             }
             
@@ -186,8 +186,7 @@ class ShareViewController: UIViewController {
     }
     
     private func openMainApp() {
-        // Open the main app with minimal URL - app will detect shared data on activation
-        guard let url = URL(string: "timesafari://") else {
+        guard let url = URL(string: "timesafari://shared-photo") else {
             return
         }
         

jest.config.js

@@ -1,6 +1,9 @@
 module.exports = {
   preset: 'ts-jest',
   testEnvironment: 'node',
+  // Unit tests live under src/. test-playwright/ holds Playwright specs,
+  // which use a different runner and fail if Jest collects them.
+  roots: ['<rootDir>/src'],
   moduleFileExtensions: ['ts', 'js', 'json', 'vue'],
   transform: {
     '^.+\\.ts$': 'ts-jest'

package.json

@@ -1,20 +1,21 @@
 {
-  "name": "timesafari",
-  "version": "1.4.1-beta",
-  "description": "Gift Economies Application",
+  "name": "giftopia",
+  "version": "1.4.4",
+  "description": "Giftopia App",
   "author": {
     "name": "Gift Economies Team"
   },
   "scripts": {
     "lint": "eslint --ext .js,.ts,.vue --ignore-path .gitignore src",
     "lint-fix": "eslint --ext .js,.ts,.vue --ignore-path .gitignore --fix src",
-    "type-safety-check": "./scripts/type-safety-check.sh",
     "type-check": "tsc --noEmit",
     "type-check:vue": "vue-tsc --noEmit",
     "prebuild": "eslint --ext .js,.ts,.vue --ignore-path .gitignore src && node sw_combine.js && node scripts/copy-wasm.js",
     "test:prerequisites": "node scripts/check-prerequisites.js",
+    "test:unit": "jest",
     "check:dependencies": "./scripts/check-dependencies.sh",
-    "test:all": "npm run lint && tsc && npm run test:web && npm run test:mobile && ./scripts/test-safety-check.sh && echo '\n\n\nGotta add the performance tests'",
+    "deps:update-daily-notification-plugin": "npm install @timesafari/daily-notification-plugin@git+https://gitea.anomalistdesign.com/trent_larson/daily-notification-plugin.git#master",
+    "test:all": "npm run lint && npm run type-check && npm run type-check:vue && npm run test:unit && npm run test:web && npm run test:mobile && echo '\n\n\nGotta add the performance tests'",
     "test:web": "npx playwright test -c playwright.config-local.ts --trace on",
     "test:mobile": "./scripts/test-mobile.sh",
     "test:android": "node scripts/test-android.js",
@@ -29,7 +30,7 @@
     "auto-run:electron": "./scripts/auto-run.sh --platform=electron",
     "build:capacitor": "VITE_GIT_HASH=`git log -1 --pretty=format:%h` vite build --mode capacitor --config vite.config.capacitor.mts",
     "build:capacitor:sync": "npm run build:capacitor && npx cap sync && node scripts/restore-local-plugins.js",
-    "build:native": "vite build && npx cap sync && node scripts/restore-local-plugins.js && npx capacitor-assets generate",
+    "build:native": "vite build && npx cap sync && node scripts/restore-local-plugins.js && bash -c 'source scripts/common.sh && ensure_ios_capacitor_asset_directories' && npx capacitor-assets generate",
     "assets:config": "npx tsx scripts/assets-config.ts",
     "assets:validate": "npx tsx scripts/assets-validator.ts",
     "assets:validate:android": "./scripts/build-android.sh --assets-only",
@@ -139,21 +140,21 @@
   },
   "dependencies": {
     "@capacitor-community/electron": "^5.0.1",
-    "@capacitor-community/sqlite": "^6.0.2",
-    "@capacitor-mlkit/barcode-scanning": "^6.0.0",
-    "@capacitor/android": "^6.2.0",
-    "@capacitor/app": "^6.0.0",
-    "@capacitor/camera": "^6.0.0",
-    "@capacitor/cli": "^6.2.0",
-    "@capacitor/clipboard": "^6.0.2",
-    "@capacitor/core": "^6.2.0",
-    "@capacitor/filesystem": "^6.0.0",
-    "@capacitor/ios": "^6.2.0",
-    "@capacitor/preferences": "^6.0.4",
-    "@capacitor/push-notifications": "^6.0.5",
-    "@capacitor/share": "^6.0.3",
-    "@capacitor/status-bar": "^6.0.2",
-    "@capawesome/capacitor-file-picker": "^6.2.0",
+    "@capacitor-community/sqlite": "^7.0.3",
+    "@capacitor-mlkit/barcode-scanning": "^7.5.0",
+    "@capacitor/android": "^7.6.4",
+    "@capacitor/app": "^7.1.0",
+    "@capacitor/camera": "^7.0.5",
+    "@capacitor/cli": "^7.6.4",
+    "@capacitor/clipboard": "^7.0.4",
+    "@capacitor/core": "^7.6.4",
+    "@capacitor/filesystem": "^7.1.8",
+    "@capacitor/ios": "^7.6.4",
+    "@capacitor/preferences": "^7.0.4",
+    "@capacitor/push-notifications": "^7.0.7",
+    "@capacitor/share": "^7.0.4",
+    "@capacitor/status-bar": "^7.0.6",
+    "@capawesome/capacitor-file-picker": "^7.2.0",
     "@dicebear/collection": "^5.4.1",
     "@dicebear/core": "^5.4.1",
     "@ethersproject/hdnode": "^5.7.0",

resources/README.md

@@ -56,7 +56,10 @@ npx capacitor-assets generate --web
 
 ## Configuration
 
-Asset generation is configured in `capacitor-assets.config.json` at the project root.
+`resources/` is this project's canonical asset source. `@capacitor/assets`
+prioritizes a top-level `assets/` directory over `resources/`, so a legacy
+`assets/` directory can prevent these assets from being discovered. Remove that
+directory when it is empty or obsolete.
 
 ## Version Control
 

scripts/assets-config.ts

@@ -92,7 +92,7 @@ function generateAssetConfig(): AssetConfig {
     },
     splash: {
       source: "resources/splash.png",
-      darkSource: "resources/splash_dark.png",
+      darkSource: "resources/splash-dark.png",
       android: {
         scale: "cover",
         target: "android/app/src/main/res"
@@ -138,7 +138,7 @@ function validateSourceFiles(): void {
   const requiredFiles = [
     'resources/icon.png',
     'resources/splash.png',
-    'resources/splash_dark.png'
+    'resources/splash-dark.png'
   ];
 
   const missingFiles = requiredFiles.filter(file => {

scripts/build-android.sh

@@ -230,8 +230,8 @@ validate_android_assets() {
         missing_assets+=("resources/splash.png")
     fi
     
-    if [ ! -f "resources/splash_dark.png" ]; then
-        missing_assets+=("resources/splash_dark.png")
+    if [ ! -f "resources/splash-dark.png" ]; then
+        missing_assets+=("resources/splash-dark.png")
     fi
     
     if [ ${#missing_assets[@]} -gt 0 ]; then
@@ -278,14 +278,14 @@ validate_android_assets() {
         # Copy source assets to assets directory for capacitor-assets
         cp resources/icon.png assets/ 2>/dev/null || log_warn "Could not copy icon.png"
         cp resources/splash.png assets/ 2>/dev/null || log_warn "Could not copy splash.png"
-        cp resources/splash_dark.png assets/ 2>/dev/null || log_warn "Could not copy splash_dark.png"
+        cp resources/splash-dark.png assets/ 2>/dev/null || log_warn "Could not copy splash-dark.png"
         
         # Generate assets
         if npx @capacitor/assets generate >/dev/null 2>&1; then
             log_success "Android assets regenerated successfully"
             
             # Clean up temporary assets
-            rm -f assets/icon.png assets/splash.png assets/splash_dark.png
+            rm -f assets/icon.png assets/splash.png assets/splash-dark.png
             
             # Verify the resources were created
             local verification_failed=false

scripts/build-ios.sh

@@ -172,12 +172,12 @@ check_ios_resources() {
     log_info "Checking iOS resources..."
     
     # Check for required assets
-    if [ ! -f "assets/icon.png" ]; then
-        log_warn "App icon not found at assets/icon.png"
+    if [ ! -f "resources/icon.png" ]; then
+        log_warn "App icon not found at resources/icon.png"
     fi
     
-    if [ ! -f "assets/splash.png" ]; then
-        log_warn "Splash screen not found at assets/splash.png"
+    if [ ! -f "resources/splash.png" ]; then
+        log_warn "Splash screen not found at resources/splash.png"
     fi
     
     # Check for iOS-specific files
@@ -192,6 +192,118 @@ check_ios_resources() {
     log_success "iOS resource check completed"
 }
 
+# iOS app icon appearance variants (Dark, Tinted, …).
+# Luminosity appearance values match Apple's asset catalog format (iOS 18+).
+readonly _IOS_APP_ICON_APPEARANCE_LUMINOSITY="luminosity"
+readonly _IOS_APP_ICON_APPEARANCE_DARK="dark"
+readonly _IOS_APP_ICON_APPEARANCE_TINTED="tinted"
+
+# Each row: source_file|luminosity_value|dest_filename
+# To add a variant: append one row and place the source PNG under resources/ios/.
+readonly _IOS_APP_ICON_APPEARANCE_VARIANTS=(
+    "resources/ios/icon/icon-dark.png|${_IOS_APP_ICON_APPEARANCE_DARK}|AppIcon-Dark.png"
+    "resources/ios/icon/icon-tinted.png|${_IOS_APP_ICON_APPEARANCE_TINTED}|AppIcon-Tinted.png"
+)
+
+# Update AppIcon.appiconset/Contents.json with one 1024×1024 appearance entry.
+# Preserves all other images (including capacitor-assets output); replaces any
+# existing entry for the same luminosity appearance.
+_update_appicon_contents_for_appearance() {
+    local contents_json="$1"
+    local dest_filename="$2"
+    local luminosity_value="$3"
+
+    local tmp_file
+    tmp_file="$(mktemp)"
+
+    if ! jq --arg filename "$dest_filename" \
+            --arg appearance "$_IOS_APP_ICON_APPEARANCE_LUMINOSITY" \
+            --arg value "$luminosity_value" \
+            '
+            .images |= map(select((.appearances[0].value // "") != $value))
+            | .images += [{
+                "appearances": [{
+                  "appearance": $appearance,
+                  "value": $value
+                }],
+                "filename": $filename,
+                "idiom": "universal",
+                "platform": "ios",
+                "size": "1024x1024"
+              }]
+            ' "$contents_json" > "$tmp_file"; then
+        rm -f "$tmp_file"
+        log_error "Failed to update AppIcon Contents.json for appearance: $luminosity_value"
+        return 1
+    fi
+
+    mv "$tmp_file" "$contents_json"
+}
+
+# Install one appearance variant when its source PNG exists.
+_apply_ios_app_icon_appearance_variant() {
+    local appiconset_dir="$1"
+    local contents_json="$2"
+    local source_file="$3"
+    local luminosity_value="$4"
+    local dest_filename="$5"
+
+    if [ ! -f "$source_file" ]; then
+        log_info "iOS app icon appearance variant not found ($source_file) — skipping"
+        return 0
+    fi
+
+    if [ ! -d "$appiconset_dir" ]; then
+        log_warn "AppIcon.appiconset not found — skipping appearance variant ($luminosity_value)"
+        return 0
+    fi
+
+    if ! cp "$source_file" "$appiconset_dir/$dest_filename"; then
+        log_error "Failed to copy $source_file to $appiconset_dir/$dest_filename"
+        return 1
+    fi
+
+    log_info "Installed iOS app icon appearance variant: $luminosity_value ($dest_filename)"
+    _update_appicon_contents_for_appearance "$contents_json" "$dest_filename" "$luminosity_value"
+}
+
+# Post-process capacitor-assets iOS icons: copy optional Dark/Tinted sources and
+# register them in AppIcon.appiconset/Contents.json.
+apply_ios_app_icon_appearances() {
+    local appiconset_dir="ios/App/App/Assets.xcassets/AppIcon.appiconset"
+    local contents_json="$appiconset_dir/Contents.json"
+
+    if [ ! -f "$contents_json" ]; then
+        log_info "AppIcon Contents.json not found — skipping appearance variants"
+        return 0
+    fi
+
+    if ! command -v jq &> /dev/null; then
+        log_error "jq is required to install iOS app icon appearance variants (install with: brew install jq)"
+        return 1
+    fi
+
+    local variant source_file luminosity_value dest_filename
+    for variant in "${_IOS_APP_ICON_APPEARANCE_VARIANTS[@]}"; do
+        IFS='|' read -r source_file luminosity_value dest_filename <<< "$variant"
+        _apply_ios_app_icon_appearance_variant \
+            "$appiconset_dir" "$contents_json" \
+            "$source_file" "$luminosity_value" "$dest_filename"
+    done
+}
+
+# Generate iOS assets (capacitor-assets), then apply optional appearance variants.
+generate_ios_assets() {
+    ensure_ios_capacitor_asset_directories
+    if [ -d "assets" ]; then
+        log_warn "@capacitor/assets prioritizes the top-level assets/ directory over resources/."
+        log_warn "This project intentionally uses resources/ as the canonical asset source."
+        log_warn "Remove the legacy assets/ directory if it is empty or obsolete."
+    fi
+    npx capacitor-assets generate --ios
+    apply_ios_app_icon_appearances
+}
+
 # Function to clean iOS build
 clean_ios_build() {
     log_info "Cleaning iOS build artifacts..."
@@ -222,8 +334,9 @@ build_ios_app() {
     
     if [ "$BUILD_TYPE" = "debug" ]; then
         build_config="Debug"
-        # Any Simulator — avoids hardcoding a device name (e.g. iPhone 15 Pro) that may not exist in newer Xcode runtimes
-        destination="generic/platform=iOS Simulator"
+        # Use device SDK — prebuilt MLKit frameworks (MLImage, MLKitBarcodeScanning) ship
+        # iOS device slices only and cannot link against the iOS Simulator SDK.
+        destination="generic/platform=iOS"
     else
         build_config="Release"
         destination="platform=iOS,id=auto"
@@ -233,10 +346,17 @@ build_ios_app() {
     
     cd ios/App
     
+    # Prevent pkgx-managed libs (e.g. zlib) from leaking into the iOS SDK linker.
+    unset LIBRARY_PATH
+    unset DYLD_LIBRARY_PATH
+    unset DYLD_FALLBACK_LIBRARY_PATH
+
+
     # Build the app:
     # -quiet: skip the huge export VAR dump (compiler warnings still show unless suppressed below).
     # SWIFT_SUPPRESS_WARNINGS / GCC_WARN_INHIBIT_ALL_WARNINGS: quiet CLI output from Pods + plugins;
     #   build in Xcode for full diagnostics. Real errors still fail the build.
+    local build_exit=0
     xcodebuild -quiet \
                -workspace App.xcworkspace \
                -scheme "$scheme" \
@@ -247,10 +367,14 @@ build_ios_app() {
                CODE_SIGNING_REQUIRED=NO \
                CODE_SIGNING_ALLOWED=NO \
                SWIFT_SUPPRESS_WARNINGS=YES \
-               GCC_WARN_INHIBIT_ALL_WARNINGS=YES
-    
+               GCC_WARN_INHIBIT_ALL_WARNINGS=YES || build_exit=$?
+
     cd ../..
-    
+
+    if [ $build_exit -ne 0 ]; then
+        return $build_exit
+    fi
+
     log_success "iOS app built successfully"
 }
 
@@ -413,7 +537,7 @@ fi
 # Handle assets-only mode
 if [ "$ASSETS_ONLY" = true ]; then
     log_info "Assets-only mode: generating assets"
-    safe_execute "Generating assets" "npx capacitor-assets generate --ios" || exit 7
+    safe_execute "Generating assets" "generate_ios_assets" || exit 7
     log_success "Assets generation completed successfully!"
     exit 0
 fi
@@ -562,7 +686,7 @@ safe_execute "Installing CocoaPods dependencies" "run_pod_install_with_workaroun
 safe_execute "Syncing with Capacitor" "run_cap_sync_with_workaround" || exit 6
 
 # Step 7: Generate assets
-safe_execute "Generating assets" "npx capacitor-assets generate --ios" || exit 7
+safe_execute "Generating assets" "generate_ios_assets" || exit 7
 
 # Step 8: Build iOS app
 safe_execute "Building iOS app" "build_ios_app" || exit 5

scripts/common.sh

@@ -347,6 +347,27 @@ parse_args() {
     fi
 }
 
+# iOS: capacitor-assets writes into AppIcon.appiconset and Splash.imageset under
+# Assets.xcassets. Those paths are gitignored (generated). On a fresh clone the
+# folders and Contents.json are missing; the tool opens Contents.json before writing
+# PNGs, so we create minimal asset-catalog stubs when absent.
+ensure_ios_capacitor_asset_directories() {
+    local base="ios/App/App/Assets.xcassets"
+    if [ ! -d "$base" ]; then
+        log_warn "Missing $base — cannot prepare iOS asset directories"
+        return 0
+    fi
+    mkdir -p "$base/AppIcon.appiconset" "$base/Splash.imageset"
+    local minimal_contents='{"images":[],"info":{"author":"xcode","version":1}}'
+    if [ ! -f "$base/AppIcon.appiconset/Contents.json" ]; then
+        printf '%s\n' "$minimal_contents" > "$base/AppIcon.appiconset/Contents.json"
+    fi
+    if [ ! -f "$base/Splash.imageset/Contents.json" ]; then
+        printf '%s\n' "$minimal_contents" > "$base/Splash.imageset/Contents.json"
+    fi
+    log_debug "Ensured iOS capacitor-assets output directories exist"
+}
+
 # Export functions for use in child scripts
 export -f log_info log_success log_warn log_error log_debug log_step
 export -f measure_time print_header print_footer
@@ -354,4 +375,5 @@ export -f check_command check_directory check_file
 export -f safe_execute check_venv get_git_hash
 export -f clean_build_artifacts validate_env_vars
 export -f setup_build_env setup_app_directories load_env_file print_env_vars
-export -f print_usage parse_args 
+export -f print_usage parse_args
+export -f ensure_ios_capacitor_asset_directories

scripts/type-safety-check.sh

@@ -1,103 +0,0 @@
-#!/bin/bash
-
-# Type Safety Pre-commit Check Script
-# This script ensures type safety before commits by running linting and type checking
-
-set -e
-
-echo "🔍 Running Type Safety Pre-commit Checks..."
-
-# Colors for output
-RED='\033[0;31m'
-GREEN='\033[0;32m'
-YELLOW='\033[1;33m'
-NC='\033[0m' # No Color
-
-# Function to print colored output
-print_status() {
-    echo -e "${GREEN}✅ $1${NC}"
-}
-
-print_warning() {
-    echo -e "${YELLOW}⚠️  $1${NC}"
-}
-
-print_error() {
-    echo -e "${RED}❌ $1${NC}"
-}
-
-# Check if we're in the right directory
-if [ ! -f "package.json" ]; then
-    print_error "Must run from project root directory"
-    exit 1
-fi
-
-# Step 1: Run ESLint with TypeScript rules
-print_status "Running ESLint TypeScript checks..."
-if npm run lint > /dev/null 2>&1; then
-    print_status "ESLint passed - no type safety issues found"
-else
-    print_error "ESLint failed - type safety issues detected"
-    echo ""
-    echo "Running lint with details..."
-    npm run lint
-    echo ""
-    print_error "Please fix the above type safety issues before committing"
-    exit 1
-fi
-
-# Step 2: Run TypeScript type checking
-print_status "Running TypeScript type checking..."
-if npm run type-check > /dev/null 2>&1; then
-    print_status "TypeScript compilation passed"
-else
-    print_error "TypeScript compilation failed"
-    echo ""
-    echo "Running type check with details..."
-    npm run type-check
-    echo ""
-    print_error "Please fix the above TypeScript errors before committing"
-    exit 1
-fi
-
-# Step 3: Check for any remaining 'any' types
-print_status "Scanning for any remaining 'any' types..."
-ANY_COUNT=$(grep -r "any" src/ --include="*.ts" --include="*.vue" | grep -v "// eslint-disable" | grep -v "eslint-disable-next-line" | wc -l)
-
-if [ "$ANY_COUNT" -eq 0 ]; then
-    print_status "No 'any' types found in source code"
-else
-    print_warning "Found $ANY_COUNT instances of 'any' type usage"
-    echo ""
-    echo "Instances found:"
-    grep -r "any" src/ --include="*.ts" --include="*.vue" | grep -v "// eslint-disable" | grep -v "eslint-disable-next-line" || true
-    echo ""
-    print_error "Please replace 'any' types with proper TypeScript types before committing"
-    exit 1
-fi
-
-# Step 4: Verify database migration status
-print_status "Checking database migration status..."
-if grep -r "databaseUtil" src/ --include="*.ts" --include="*.vue" > /dev/null 2>&1; then
-    print_warning "Found databaseUtil imports - ensure migration is complete"
-    echo ""
-    echo "Files with databaseUtil imports:"
-    grep -r "databaseUtil" src/ --include="*.ts" --include="*.vue" | head -5 || true
-    echo ""
-    print_warning "Consider completing database migration to PlatformServiceMixin"
-else
-    print_status "No databaseUtil imports found - migration appears complete"
-fi
-
-# All checks passed
-echo ""
-print_status "All type safety checks passed! 🎉"
-print_status "Your code is ready for commit"
-echo ""
-echo "📚 Remember to follow the Type Safety Guidelines:"
-echo "   - doc/typescript-type-safety-guidelines.md"
-echo "   - Use proper error handling patterns"
-echo "   - Leverage existing type definitions"
-echo "   - Run 'npm run lint-fix' for automatic fixes"
-
-exit 0

src/components/BulkMembersDialog.vue

@@ -130,6 +130,7 @@
 
 <script lang="ts">
 import { Vue, Component, Prop } from "vue-facing-decorator";
+import { NotificationIface } from "@/constants/app";
 
 import { PlatformServiceMixin } from "@/utils/PlatformServiceMixin";
 import { SOMEONE_UNNAMED } from "@/constants/entities";
@@ -149,10 +150,7 @@ export default class BulkMembersDialog extends Vue {
   @Prop({ required: true }) isOrganizer!: boolean;
 
   // Vue notification system
-  $notify!: (
-    notification: { group: string; type: string; title: string; text: string },
-    timeout?: number,
-  ) => void;
+  $notify!: (notification: NotificationIface, timeout?: number) => void;
 
   // Notification system
   notify!: ReturnType<typeof createNotifyHelpers>;
@@ -381,9 +379,6 @@ export default class BulkMembersDialog extends Vue {
         contact,
       );
       if (result.success) {
-        if (result.embeddedRecordError) {
-          throw new Error(result.embeddedRecordError);
-        }
         await this.$updateContact(member.did, { registered: true });
       } else {
         throw result;

src/components/DataExportSection.vue

@@ -106,6 +106,7 @@ import { Router } from "vue-router";
 import * as R from "ramda";
 
 import { NotificationIface } from "../constants/app";
+import { Contact } from "../db/tables/contacts";
 
 import { logger } from "../utils/logger";
 import { createNotifyHelpers, TIMEOUTS } from "@/utils/notify";

src/components/EntitySelectionStep.vue

@@ -8,14 +8,14 @@ notifications for conflicted entities * - Template streamlined with computed CSS
 properties * * @author Matthew Raymer */
 <template>
   <div id="sectionGiftedGiver">
-    <label class="block font-bold mb-1">
+    <label class="block font-semibold text-lg capitalize text-center">
       {{ stepLabel }}
     </label>
     <!-- Toggle link for entity type selection -->
-    <div class="text-right mb-4">
+    <div class="text-center mb-4">
       <button
         type="button"
-        class="text-sm text-blue-600 hover:text-blue-800 underline font-medium"
+        class="text-xs text-blue-600 hover:underline uppercase"
         @click="handleToggleEntityType"
       >
         {{ toggleLinkText }}

src/components/EntitySummaryButton.vue

@@ -135,7 +135,7 @@ export default class EntitySummaryButton extends Vue {
     }
 
     // If the entity does not have a set name, but is not the special "Unnamed", use their DID
-    return this.entity?.did;
+    return this.entity?.did ?? "";
   }
 
   /**

src/components/GiftedDialog.vue

@@ -450,7 +450,26 @@ export default class GiftedDialog extends Vue {
           TIMEOUTS.MODAL,
         );
       } else {
-        this.safeNotify.success("That gift was recorded.", TIMEOUTS.VERY_LONG);
+        if (result.embeddedRecordError) {
+          // The claim was stored but the server could not record part of it,
+          // eg. the link to the project this gift came from. Reporting a plain
+          // success here is how such a gift comes to sit on a project page
+          // that never shows it.
+          logger.warn(
+            "Give recorded but part of it was not:",
+            result.embeddedRecordError,
+          );
+          this.safeNotify.warning(
+            "That gift was recorded, but some of it was not: " +
+              result.embeddedRecordError,
+            TIMEOUTS.MODAL,
+          );
+        } else {
+          this.safeNotify.success(
+            "That gift was recorded.",
+            TIMEOUTS.VERY_LONG,
+          );
+        }
 
         // Show seed phrase backup reminder if needed
         try {

src/components/InfiniteScroll.vue

@@ -43,9 +43,6 @@ export default class InfiniteScroll extends Vue {
   /** Intersection Observer instance for detecting scroll position */
   private observer!: IntersectionObserver;
 
-  /** Flag to track initial render state */
-  private isInitialRender = true;
-
   /** Flag to prevent multiple simultaneous loading states */
   private isLoading = false;
 

src/components/MeetingExclusionGroups.vue

@@ -129,7 +129,7 @@
       @click="disabled ? notifyLocked() : addGroup()"
     >
       <font-awesome icon="plus" class="text-sm" />
-      New Group
+      New Do-Not-Pair Group
     </button>
   </div>
 </template>

src/components/PhotoDialog.vue

@@ -251,7 +251,7 @@ export default class PhotoDialog extends Vue {
    * Provides cached access to platform capabilities
    */
   get platformCapabilities() {
-    return this.$platformService.getCapabilities();
+    return this.platformService.getCapabilities();
   }
 
   // =================================================

src/components/ProjectSelectionDialog.vue

@@ -39,7 +39,7 @@ import { PlanData } from "../interfaces/records";
 import { NotificationIface } from "../constants/app";
 
 /**
- * MeetingProjectDialog - Dialog for selecting a project link for a meeting
+ * ProjectSelectionDialog - Dialog for selecting a project
  *
  * Features:
  * - EntityGrid integration for project selection
@@ -52,7 +52,7 @@ import { NotificationIface } from "../constants/app";
     EntityGrid,
   },
 })
-export default class MeetingProjectDialog extends Vue {
+export default class ProjectSelectionDialog extends Vue {
   /** Whether the dialog is visible */
   visible = false;
 

src/components/World/World.d.ts

@@ -0,0 +1,19 @@
+import type { Camera, Scene } from "three";
+
+/**
+ * Type declarations for World.js, which is plain JavaScript.
+ *
+ * Only the members used outside the module are declared; its internals stay
+ * untyped.
+ */
+export declare class World {
+  camera: Camera;
+  scene: Scene;
+
+  constructor(container: Element | null, vue: unknown);
+  update(time: number): void;
+  render(): void;
+  start(): void;
+  stop(): void;
+  setExposedWorldProperties(key: string, value: unknown): void;
+}

src/components/dev/NotificationDebugPanel.vue

@@ -88,25 +88,6 @@
           Manually mints and uploads 100 delegated day JWTs. Requires an active
           did:ethr identity and JWT authentication; Test Mode is not used.
         </p>
-        <button
-          class="w-full text-md bg-gradient-to-b from-blue-400 to-blue-700 shadow-[inset_0_-1px_0_0_rgba(0,0,0,0.5)] text-white px-4 py-2 rounded-md"
-          :disabled="busy"
-          :class="{ 'opacity-50 cursor-not-allowed': busy }"
-          @click="onBackendRefresh"
-        >
-          Refresh Notifications
-        </button>
-        <button
-          class="w-full text-md bg-gradient-to-b from-violet-400 to-violet-700 shadow-[inset_0_-1px_0_0_rgba(0,0,0,0.5)] text-white px-4 py-2 rounded-md"
-          :disabled="busy"
-          :class="{ 'opacity-50 cursor-not-allowed': busy }"
-          @click="onSimulateWakeupRefresh"
-        >
-          Simulate WAKEUP_PING (Local)
-        </button>
-        <p class="text-xs text-slate-500">
-          Local simulation only — calls the refresh API directly (no FCM push).
-        </p>
         <button
           class="w-full text-md bg-gradient-to-b from-amber-400 to-amber-700 shadow-[inset_0_-1px_0_0_rgba(0,0,0,0.5)] text-white px-4 py-2 rounded-md"
           :disabled="busy"
@@ -128,8 +109,8 @@
           {{ realWakeupStatus.message }}
         </p>
         <p v-else class="text-xs text-slate-500">
-          Full pipeline — backend `/debug/send-wakeup` → FCM → WAKEUP_PING
-          handler.
+          FCM delivery diagnostic only — backend `/debug/send-wakeup`. The app
+          no longer schedules api_* notifications from WAKEUP_PING.
         </p>
       </div>
 
@@ -177,70 +158,6 @@
       </div>
     </div>
 
-    <!-- SECTION F: Mock Timing Presets -->
-    <div class="mb-6">
-      <h2 class="mb-2 font-bold">Mock Timing Presets</h2>
-      <div class="flex flex-wrap gap-2">
-        <button
-          v-for="preset in presets"
-          :key="preset.ms"
-          class="px-3 py-2 rounded border border-slate-300 bg-white text-sm"
-          :class="{
-            'border-blue-500 ring-1 ring-blue-300': intervalMs === preset.ms,
-          }"
-          @click="intervalMs = preset.ms"
-        >
-          {{ preset.label }}
-        </button>
-      </div>
-      <div class="text-xs text-slate-500 mt-2">
-        Selected interval: <b>{{ intervalLabel }}</b>
-      </div>
-    </div>
-
-    <!-- SECTION A: Mock Refresh Controls -->
-    <div class="mb-6">
-      <h2 class="mb-2 font-bold">Mock Refresh Controls</h2>
-      <button
-        class="w-full text-md bg-gradient-to-b from-blue-400 to-blue-700 shadow-[inset_0_-1px_0_0_rgba(0,0,0,0.5)] text-white px-4 py-2 rounded-md"
-        :disabled="busy"
-        :class="{ 'opacity-50 cursor-not-allowed': busy }"
-        @click="onMockRefresh"
-      >
-        Trigger Mock Refresh
-      </button>
-    </div>
-
-    <!-- SECTION B: Wakeup Ping Simulator -->
-    <div class="mb-6">
-      <h2 class="mb-2 font-bold">Wakeup Ping Simulator</h2>
-      <p class="text-xs text-slate-500 mb-2">
-        Exercises the production push handler (not the refresh API shortcut
-        above).
-      </p>
-      <button
-        class="w-full text-md bg-gradient-to-b from-slate-400 to-slate-700 shadow-[inset_0_-1px_0_0_rgba(0,0,0,0.5)] text-white px-4 py-2 rounded-md"
-        :disabled="busy"
-        :class="{ 'opacity-50 cursor-not-allowed': busy }"
-        @click="onWakeupPing"
-      >
-        Simulate WAKEUP_PING
-      </button>
-    </div>
-
-    <!-- SECTION C: Flood Test -->
-    <div class="mb-6">
-      <h2 class="mb-2 font-bold">Flood Test</h2>
-      <button
-        class="w-full text-md bg-gradient-to-b from-rose-400 to-rose-700 shadow-[inset_0_-1px_0_0_rgba(0,0,0,0.5)] text-white px-4 py-2 rounded-md"
-        :disabled="busy"
-        :class="{ 'opacity-50 cursor-not-allowed': busy }"
-        @click="onFloodTest"
-      >
-        Run 20 Refreshes
-      </button>
-    </div>
-
     <!-- SECTION D: Pending Notification Inspector -->
     <div class="mb-6">
       <div class="flex items-center gap-3 mb-2">
@@ -358,14 +275,6 @@ type PendingInfo = {
   wallClockSource?: string | null;
 };
 
-const presets = [
-  { label: "30 sec", ms: 30_000 },
-  { label: "1 min", ms: 60_000 },
-  { label: "5 min", ms: 5 * 60_000 },
-  { label: "10 min", ms: 10 * 60_000 },
-];
-
-const intervalMs = ref<number>(60_000);
 const busy = ref(false);
 const pending = ref<PendingInfo[]>([]);
 const pendingInspectorMessage = ref<string | null>(null);
@@ -395,11 +304,6 @@ const truncatedFcmToken = computed(() => {
 const eventLog = ref<string[]>([]);
 let unsubscribeEventLog: (() => void) | undefined;
 
-const intervalLabel = computed(() => {
-  const preset = presets.find((p) => p.ms === intervalMs.value);
-  return preset?.label ?? `${intervalMs.value}ms`;
-});
-
 function formatIsoMs(ms: number | null | undefined): string {
   if (ms == null || !Number.isFinite(ms)) {
     return "";
@@ -423,27 +327,6 @@ async function refreshPending(): Promise<void> {
   pendingInspectorMessage.value = result.inspectorUnavailableMessage ?? null;
 }
 
-async function onMockRefresh(): Promise<void> {
-  await withBusy(async () => {
-    await NotificationDebugService.triggerMockRefresh(intervalMs.value);
-    await refreshPending();
-  });
-}
-
-async function onWakeupPing(): Promise<void> {
-  await withBusy(async () => {
-    await NotificationDebugService.simulateWakeupPing();
-    await refreshPending();
-  });
-}
-
-async function onFloodTest(): Promise<void> {
-  await withBusy(async () => {
-    await NotificationDebugService.runFloodTest(intervalMs.value);
-    await refreshPending();
-  });
-}
-
 async function onClearNotifications(): Promise<void> {
   await withBusy(async () => {
     await NotificationDebugService.clearNotifications();
@@ -514,20 +397,6 @@ async function onUploadAlertAuthorization(): Promise<void> {
   });
 }
 
-async function onBackendRefresh(): Promise<void> {
-  await withBusy(async () => {
-    await NotificationDebugService.triggerBackendRefresh();
-    await refreshPending();
-  });
-}
-
-async function onSimulateWakeupRefresh(): Promise<void> {
-  await withBusy(async () => {
-    await NotificationDebugService.simulateWakeupViaRefresh();
-    await refreshPending();
-  });
-}
-
 function formatRealWakeupStatusMessage(
   result: Awaited<
     ReturnType<typeof NotificationDebugService.sendRealWakeupPing>

src/composables/useNotifications.ts

@@ -1,134 +0,0 @@
-/* eslint-disable @typescript-eslint/no-unused-vars */
-import { inject, onBeforeUnmount, onMounted } from "vue";
-import { NotificationIface } from "../constants/app";
-import { registerToken } from "@/services/notifications/NotificationService";
-import { refreshNotifications } from "@/services/notifications/NativeNotificationService";
-
-/**
- * Vue 3 composable for notifications
- * Provides a concise API for common notification patterns
- */
-
-export const NOTIFICATION_TIMEOUTS = {
-  BRIEF: 1000, // Very brief toasts ("Sent..." messages)
-  SHORT: 2000, // Short notifications (clipboard copies, quick confirmations)
-  STANDARD: 3000, // Standard notifications (success messages, general info)
-  LONG: 5000, // Longer notifications (errors, warnings, important info)
-  VERY_LONG: 7000, // Very long notifications (complex operations)
-  MODAL: -1, // Modal confirmations (no auto-dismiss)
-} as const;
-
-export function useNotifications() {
-  // Inject the notify function from the app
-  const notify =
-    inject<(notification: NotificationIface, timeout?: number) => void>(
-      "notify",
-    );
-
-  if (!notify) {
-    throw new Error(
-      "useNotifications must be used within a component that has $notify available",
-    );
-  }
-
-  let refreshTimer: number | undefined = undefined;
-  let refreshInFlight: Promise<void> | null = null;
-
-  async function refreshNotificationsDebounced(): Promise<void> {
-    if (refreshTimer != null) {
-      window.clearTimeout(refreshTimer);
-    }
-    refreshTimer = window.setTimeout(() => {
-      if (!refreshInFlight) {
-        refreshInFlight = refreshNotifications().finally(() => {
-          refreshInFlight = null;
-        });
-      }
-    }, 300);
-  }
-
-  const onResume = () => {
-    void refreshNotificationsDebounced();
-  };
-
-  onMounted(() => {
-    void refreshNotificationsDebounced();
-    document.addEventListener("resume", onResume);
-  });
-
-  onBeforeUnmount(() => {
-    document.removeEventListener("resume", onResume);
-    if (refreshTimer != null) {
-      window.clearTimeout(refreshTimer);
-    }
-  });
-
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  function success(_notification: NotificationIface, _timeout?: number) {}
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  function error(_notification: NotificationIface, _timeout?: number) {}
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  function warning(_notification: NotificationIface, _timeout?: number) {}
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  function info(_notification: NotificationIface, _timeout?: number) {}
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  function toast(_title: string, _text?: string, _timeout?: number) {}
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  function copied(_item: string, _timeout?: number) {}
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  function sent(_timeout?: number) {}
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  function confirm(
-    _text: string,
-    _onYes: () => Promise<void>,
-    _timeout?: number,
-  ) {}
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  function confirmationSubmitted(_timeout?: number) {}
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  function genericError(_timeout?: number) {}
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  function genericSuccess(_timeout?: number) {}
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  function alreadyConfirmed(_timeout?: number) {}
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  function cannotConfirmIssuer(_timeout?: number) {}
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  function cannotConfirmHidden(_timeout?: number) {}
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  function notRegistered(_timeout?: number) {}
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  function notAGive(_timeout?: number) {}
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  function notificationOff(
-    _title: string,
-    _callback: (success: boolean) => Promise<void>,
-    _timeout?: number,
-  ) {}
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  function downloadStarted(_format: string = "Dexie", _timeout?: number) {}
-
-  return {
-    success,
-    error,
-    warning,
-    info,
-    toast,
-    copied,
-    sent,
-    confirm,
-    confirmationSubmitted,
-    genericError,
-    genericSuccess,
-    alreadyConfirmed,
-    cannotConfirmIssuer,
-    cannotConfirmHidden,
-    notRegistered,
-    notAGive,
-    notificationOff,
-    downloadStarted,
-    /** POST FCM token to `/notifications/register` (same as startup native hook). */
-    registerFcmToken: registerToken,
-    refreshNotifications: refreshNotificationsDebounced,
-  };
-}

src/constants/app.ts

@@ -6,8 +6,8 @@
 export enum AppString {
   // This is used in titles and verbiage inside the app.
   // There is also an app name without spaces, for packaging in the package.json file used in the manifest.
-  APP_NAME = "Gift Economies",
-  APP_NAME_NO_SPACES = "GiftEconomies",
+  APP_NAME = "Giftopia",
+  APP_NAME_NO_SPACES = APP_NAME,
 
   PROD_ENDORSER_API_SERVER = "https://api.endorser.ch",
   TEST_ENDORSER_API_SERVER = "https://test-api.endorser.ch",

src/constants/notifications.ts

@@ -1175,11 +1175,6 @@ export const NOTIFY_GIFTED_DETAILS_DELETE_IMAGE_CONFIRM = {
   message: "",
 };
 
-export const NOTIFY_GIFTED_DETAILS_DELETE_IMAGE_ERROR = {
-  title: "Error",
-  message: "There was a problem deleting the image.",
-};
-
 export const NOTIFY_GIFTED_DETAILS_NO_IDENTIFIER = {
   title: "Missing Identifier",
   message: "You must select an identifier before you can record a give.",

src/interfaces/claims.ts

@@ -80,6 +80,7 @@ export interface PlanActionClaim extends ClaimObject {
   agent?: { identifier: string };
   description?: string;
   endTime?: string;
+  fulfills?: { "@type": string; identifier?: string; lastClaimId?: string };
   identifier?: string;
   image?: string;
   lastClaimId?: string;

src/interfaces/common.ts

@@ -15,6 +15,23 @@ export interface GenericCredWrapper<T extends GenericVerifiableCredential> {
   publicUrls?: Record<string, string>;
 }
 
+/**
+ * The fields the certificate canvases read off a claim.
+ *
+ * GenericVerifiableCredential carries an index signature of `unknown`, which is
+ * correct for a claim of any type but leaves each field unusable without a
+ * cast. This names the handful the drawing code actually touches. An `agent` is
+ * either a bare DID string or an object carrying one, depending on claim type.
+ */
+export interface CertifiableClaim extends GenericVerifiableCredential {
+  agent?: string | { identifier?: string };
+  description?: string;
+  includesObject?: { amountOfThisGood?: number; unitCode?: string };
+  itemOffered?: { description?: string };
+  name?: string;
+  object?: { amountOfThisGood?: number; unitCode?: string };
+}
+
 export interface ErrorResponse {
   error?: {
     message?: string;

src/interfaces/deepLinks.ts

@@ -29,6 +29,9 @@ import { z } from "zod";
 
 // Parameter validation schemas for each route type
 export const deepLinkPathSchemas = {
+  // A bare "timesafari://" with no path: open the app at the default view.
+  "": z.object({}),
+  account: z.object({}),
   claim: z.object({
     id: z.string(),
   }),
@@ -48,6 +51,11 @@ export const deepLinkPathSchemas = {
   "contact-import": z.object({
     jwt: z.string(),
   }),
+  // Both paths reach the same destination: the page that shows your QR code,
+  // scans someone else's, and prompts for your name if you have not set one.
+  // See ROUTE_NAME_RESOLVERS in src/services/deepLinks.ts for which view that is.
+  "contact-qr": z.object({}),
+  "contact-qr-scan-full": z.object({}),
   contacts: z.object({
     contactJwt: z.string().optional(),
     inviteJwt: z.string().optional(),
@@ -55,22 +63,46 @@ export const deepLinkPathSchemas = {
   did: z.object({
     did: z.string().optional(),
   }),
+  discover: z.object({}),
+  help: z.object({}),
+  "help-notification-types": z.object({}),
+  "help-notifications": z.object({}),
+  "help-onboarding": z.object({}),
+  "help-terms": z.object({}),
+  "invite-one": z.object({}),
   "invite-one-accept": z.object({
     // optional because A) it could be a query param, and B) the page displays an input if things go wrong
     jwt: z.string().optional(),
   }),
+  "new-activity": z.object({}),
+  "onboard-meeting-list": z.object({}),
   "onboard-meeting-members": z.object({
     groupId: z.string(),
   }),
   project: z.object({
     id: z.string(),
   }),
+  projects: z.object({}),
+  "recent-offers-to-user": z.object({}),
+  "recent-offers-to-user-projects": z.object({}),
+  "search-area": z.object({}),
+  "share-my-contact-info": z.object({}),
+  // Internal handoff used by the native image-share targets.
+  "shared-photo": z.object({}),
+  statistics: z.object({}),
   "user-profile": z.object({
     id: z.string(),
   }),
 };
 
 export const deepLinkQuerySchemas = {
+  // All optional: the view defaults searchText to "" and the two flags to
+  // false, so a bare "timesafari://discover" is valid.
+  discover: z.object({
+    searchText: z.string().optional(),
+    searchPeople: z.string().optional(),
+    hideOnboarding: z.string().optional(),
+  }),
   "onboard-meeting-members": z.object({
     password: z.string(),
   }),

src/interfaces/notifyApi.ts

@@ -78,7 +78,10 @@ export interface NotificationRegisterRequest extends NotifyApiTestModeFlag {
 }
 
 /**
- * Body of `POST /notifications/refresh`. The service finds the caller's device
+ * Body of `POST /notifications/refresh`. The Capacitor app no longer calls this
+ * route (WAKEUP_PING → refresh → `api_*` scheduling was retired). These types
+ * remain because notification-wakeup-service still exposes the endpoint.
+ * The service finds the caller's device
  * by `deviceId`, or by `fcmToken` when no `deviceId` is sent, and answers 400
  * when neither is present and non-empty. When both are sent they must name the
  * same device, or the answer is 404.

src/libs/endorserHandleIds.ts

@@ -0,0 +1,60 @@
+/**
+ * @fileoverview Handle ID string handling for the Endorser server
+ *
+ * A handle ID is the permanent ID of a claim's entity on Endorser, eg.
+ * "https://endorser.ch/entity/01D25AVGQG1N8E9JNGK7C7DZRD". Deep links carry it
+ * with the prefix stripped off, so the two forms both circulate in the app and
+ * have to be converted deliberately at the boundary between them.
+ *
+ * This module holds no dependencies on purpose. Everything here is string
+ * handling that claims and report queries depend on, so it stays loadable
+ * without a database, a network client, or a build-time environment.
+ *
+ * @module endorserHandleIds
+ */
+
+/**
+ * The prefix for handle IDs, the permanent ID for claims on Endorser
+ * @constant {string}
+ */
+export const ENDORSER_CH_HANDLE_PREFIX = "https://endorser.ch/entity/";
+
+/**
+ * from https://tools.ietf.org/html/rfc3986#section-3
+ *
+ * An ID carrying a scheme belongs to whoever issued it; one without a scheme
+ * names an entity on the Endorser server. (libs/util.ts exports the same
+ * predicate as isGlobalUri for view code.)
+ */
+const hasUriScheme = (id: string) => /^[A-Za-z][A-Za-z0-9+.-]+:/.test(id);
+
+/**
+ * Shorten a full handle ID to the part a deep link carries.
+ */
+export function stripEndorserPrefix(claimId: string) {
+  if (claimId && claimId.startsWith(ENDORSER_CH_HANDLE_PREFIX)) {
+    return claimId.substring(ENDORSER_CH_HANDLE_PREFIX.length);
+  } else {
+    return claimId;
+  }
+}
+
+/**
+ * The inverse of stripEndorserPrefix: expand an ID that names an entity on the
+ * Endorser server into the full handle ID.
+ *
+ * An ID taken from a route parameter goes through here before it reaches a
+ * claim or a report query. A claim is a credential that outlives this app and
+ * travels beyond this server, where "01D25AVGQG1N8E9JNGK7C7DZRD" identifies
+ * nothing; the report endpoints match on the full handle.
+ *
+ * An ID that already carries a URI scheme -- a full handle, or a handle from
+ * another system -- is returned unchanged.
+ */
+export function addEndorserPrefix(claimId: string) {
+  if (claimId && !hasUriScheme(claimId)) {
+    return ENDORSER_CH_HANDLE_PREFIX + claimId;
+  } else {
+    return claimId;
+  }
+}

src/libs/endorserServer.ts

@@ -23,7 +23,7 @@ import { LRUCache } from "lru-cache";
 import * as R from "ramda";
 
 import { DEFAULT_IMAGE_API_SERVER, NotificationIface } from "../constants/app";
-import { NOTIFICATION_TIMEOUTS } from "../composables/useNotifications";
+import { NOTIFICATION_TIMEOUTS } from "../utils/notificationUtils";
 import { createNotifyHelpers } from "../utils/notify";
 import { NOTIFY_PERSONAL_DATA_ERROR } from "../constants/notifications";
 import { Contact } from "../db/tables/contacts";
@@ -104,11 +104,14 @@ export const CONTACT_URL_PATH_ENDORSER_CH_OLD = "/contact?jwt=";
  */
 export const CONTACT_CONFIRM_URL_PATH_TIME_SAFARI = "/contact/confirm/";
 
-/**
- * The prefix for handle IDs, the permanent ID for claims on Endorser
- * @constant {string}
- */
-export const ENDORSER_CH_HANDLE_PREFIX = "https://endorser.ch/entity/";
+// Handle ID string handling lives in its own module so that it can be loaded
+// and tested without everything this one needs. Re-exported here because that
+// is where callers have always found it.
+export {
+  ENDORSER_CH_HANDLE_PREFIX,
+  addEndorserPrefix,
+  stripEndorserPrefix,
+} from "./endorserHandleIds";
 
 export const BLANK_GENERIC_SERVER_RECORD: GenericCredWrapper<GenericVerifiableCredential> =
   {
@@ -222,14 +225,6 @@ export const containsNonHiddenDid = (obj: any) => {
   return testRecursivelyOnStrings(obj, (s: any) => isDid(s) && !isHiddenDid(s));
 };
 
-export function stripEndorserPrefix(claimId: string) {
-  if (claimId && claimId.startsWith(ENDORSER_CH_HANDLE_PREFIX)) {
-    return claimId.substring(ENDORSER_CH_HANDLE_PREFIX.length);
-  } else {
-    return claimId;
-  }
-}
-
 // similar logic is found in endorser-mobile
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 export function removeSchemaContext(obj: any) {
@@ -381,6 +376,19 @@ export function didInfoOrNobody(
 /**
  * return text description without any references to "you" as user
  */
+/**
+ * A claim's agent is either a bare DID string or an object carrying one,
+ * depending on the claim type.
+ *
+ * @param agent - the `agent` field of a claim, in either shape
+ * @returns the DID, or undefined when the agent carries none
+ */
+export function didOfAgent(
+  agent: string | { identifier?: string } | undefined,
+): string | undefined {
+  return typeof agent === "string" ? agent : agent?.identifier;
+}
+
 export function didInfoForCertificate(
   did: string | undefined,
   contacts: Contact[],
@@ -676,15 +684,18 @@ export async function setPlanInCache(
 
 /**
  * Extracts user-friendly message from server error
- * @param {AxiosErrorResponse} error - Error thrown from Endorser server call
+ *
+ * Takes `unknown` because callers pass it straight from a `catch`, and every
+ * access below is optional-chained, so a value of any shape is safe.
+ *
+ * @param error - Error thrown from an Endorser server call
  * @returns {string|undefined} User-friendly message or undefined if none found
  */
-export function serverMessageForUser(
-  error: AxiosErrorResponse,
-): string | undefined {
+export function serverMessageForUser(error: unknown): string | undefined {
+  const err = error as AxiosErrorResponse;
   return (
-    error?.response?.data?.error?.userMessage ||
-    error?.response?.data?.error?.message
+    err?.response?.data?.error?.userMessage ||
+    err?.response?.data?.error?.message
   );
 }
 
@@ -1210,19 +1221,25 @@ export async function createAndSubmitClaim(
       },
     });
 
+    // The server wraps its result: { success: { claimId, handleId, ... } }.
+    // Reading the top level instead leaves every field undefined, which hides
+    // embeddedRecordError -- the server's way of saying it stored the claim but
+    // could not record part of it, eg. a link to a project.
+    const result = response.data?.success;
+
     logger.debug("[Claim Submission] ✅ Claim submitted successfully:", {
       requestId,
       status: response.status,
-      handleId: response.data?.handleId,
+      handleId: result?.handleId,
       responseSize: JSON.stringify(response.data).length,
       timestamp: new Date().toISOString(),
     });
 
     return {
       success: true,
-      claimId: response.data?.claimId,
-      handleId: response.data?.handleId,
-      embeddedRecordError: response.data?.embeddedRecordError,
+      claimId: result?.claimId,
+      handleId: result?.handleId,
+      embeddedRecordError: result?.embeddedRecordError,
     };
   } catch (error: unknown) {
     // Enhanced error logging with comprehensive context

src/main.capacitor.ts

@@ -39,6 +39,7 @@ import { logger, safeStringify } from "./utils/logger";
 import { PlatformServiceFactory } from "./services/PlatformServiceFactory";
 import { SHARED_PHOTO_BASE64_KEY } from "./libs/util";
 import { SharedImage } from "./plugins/SharedImagePlugin";
+import { createSharedImageHandoff } from "./services/sharedImageHandoff";
 import "./utils/safeAreaInset";
 
 // Load Daily Notification plugin at startup so native performRecovery() runs at launch (rollover recovery)
@@ -47,6 +48,7 @@ import {
   configureNativeFetcherIfReady,
   initializeNativePushAndFirebaseMessaging,
   onNotificationAuthMayBeReady,
+  runLegacyApiNotificationsCleanupOnce,
 } from "@/services/notifications";
 
 logger.log("[Capacitor] 🚀 Starting initialization");
@@ -89,9 +91,6 @@ window.addEventListener("unhandledrejection", (event) => {
 
 const deepLinkHandler = new DeepLinkHandler(router);
 
-// Lock to prevent duplicate processing of shared images
-let isProcessingSharedImage = false;
-
 /**
  * Stores shared image data in temp database
  * Handles clearing old data, converting base64 to data URL, and storing
@@ -138,87 +137,80 @@ async function storeSharedImageInTempDB(
   logger.info(`[Main] Stored shared image: ${fileName || "unknown"}`);
 }
 
-/**
- * Handles deep link routing for the application
- * Processes URLs in the format timesafari://<route>/<param>
- * Maps incoming deep links to corresponding router paths with parameters
- *
- * @param {Object} data - Deep link data object
- * @param {string} data.url - The full deep link URL to process
- * @returns {Promise<void>}
- *
- * @example
- * // Handles URLs like:
- * // timesafari://claim/01JMAAFZRNSRTQ0EBSD70A8E1H
- * // timesafari://project/abc123
- *
- * @throws {Error} If URL format is invalid
- */
-/**
- * Check for native shared image using SharedImage plugin
- * Reads from native layer (App Group UserDefaults on iOS, SharedPreferences on Android)
- * and stores in temp database before routing to shared-photo view
- */
-async function checkAndStoreNativeSharedImage(): Promise<{
-  success: boolean;
-  fileName?: string;
-}> {
-  // Prevent duplicate processing
-  if (isProcessingSharedImage) {
-    logger.debug(
-      "[Main] ⏸️ Shared image processing already in progress, skipping",
-    );
-    return { success: false };
+async function navigateToSharedPhoto(fileName: string): Promise<void> {
+  await router.isReady();
+
+  if (router.currentRoute.value.path === "/shared-photo") {
+    await router.replace({
+      path: "/shared-photo",
+      query: { fileName, _refresh: Date.now().toString() },
+    });
+  } else {
+    await router.push({
+      path: "/shared-photo",
+      query: { fileName },
+    });
   }
 
-  isProcessingSharedImage = true;
+  logger.info(`[Main] ✅ Navigated to /shared-photo?fileName=${fileName}`);
+}
 
-  try {
-    if (
-      !Capacitor.isNativePlatform() ||
-      (Capacitor.getPlatform() !== "ios" &&
-        Capacitor.getPlatform() !== "android")
-    ) {
-      isProcessingSharedImage = false;
-      return { success: false };
-    }
-
-    // Use SharedImage plugin to get shared image data directly from native layer
-    // No file I/O or polling needed - direct native-to-JS communication
-    let result;
+const sharedImageHandoff = createSharedImageHandoff({
+  getSharedImage: async () => {
     try {
-      result = await SharedImage.getSharedImage();
+      return await SharedImage.getSharedImage();
     } catch (error) {
       logger.error("[Main] Error calling SharedImage.getSharedImage():", {
         error: error instanceof Error ? error.message : String(error),
         stack: error instanceof Error ? error.stack : undefined,
       });
-      isProcessingSharedImage = false;
-      return { success: false };
+      return null;
     }
+  },
+  storeSharedImage: async (base64, fileName) => {
+    logger.info("[Main] Native shared image found, storing in temp DB");
+    await storeSharedImageInTempDB(base64, fileName);
+  },
+  navigateToSharedPhoto,
+});
 
-    // Check if we have valid image data (base64 must be non-null and non-empty)
-    if (result && result.base64 && result.base64.trim().length > 0) {
-      const fileName = result.fileName || "shared-image.jpg";
+/**
+ * Consume a pending native shared image and route to the share screen. The
+ * in-flight handoff is shared by URL, launch, and activation callbacks because
+ * the native plugin removes an image after it is read.
+ */
+async function checkForSharedImageAndNavigate(): Promise<boolean> {
+  if (
+    !Capacitor.isNativePlatform() ||
+    (Capacitor.getPlatform() !== "ios" && Capacitor.getPlatform() !== "android")
+  ) {
+    return false;
+  }
 
-      // Store in temp database using extracted method
-      logger.info(
-        "[Main] Native shared image found (via plugin), storing in temp DB",
-      );
-      await storeSharedImageInTempDB(result.base64, fileName);
-
-      isProcessingSharedImage = false;
-      return { success: true, fileName };
+  try {
+    const navigated = await sharedImageHandoff.process();
+    if (!navigated) {
+      logger.debug("[Main] ℹ️ No native shared image found");
     }
-
-    // No shared image found
-    logger.debug("[Main] No shared image found via plugin");
-    isProcessingSharedImage = false;
-    return { success: false };
+    return navigated;
   } catch (error) {
-    logger.error("[Main] Error checking for native shared image:", error);
-    isProcessingSharedImage = false;
-    return { success: false };
+    logger.error("[Main] ❌ Error processing native shared image:", error);
+    return false;
+  }
+}
+
+function isSharedPhotoDeepLink(url: string): boolean {
+  try {
+    const parsed = new URL(url);
+    return (
+      parsed.protocol === "timesafari:" &&
+      parsed.hostname === "shared-photo" &&
+      (parsed.pathname === "" || parsed.pathname === "/") &&
+      !parsed.search &&
+      !parsed.hash
+    );
+  } catch {
+    return false;
   }
 }
 
@@ -227,67 +219,10 @@ const handleDeepLink = async (data: { url: string }) => {
   logger.debug(`[Main] 🌐 Deeplink received from Capacitor: ${url}`);
 
   try {
-    // Handle empty path URLs from share extension (timesafari://)
-    // These are used to open the app, and we should check for shared images
-    const isEmptyPathUrl = url === "timesafari://" || url === "timesafari:///";
-
-    if (
-      isEmptyPathUrl &&
-      Capacitor.isNativePlatform() &&
-      Capacitor.getPlatform() === "ios"
-    ) {
-      logger.debug(
-        "[Main] 📸 Empty path URL from share extension, checking for native shared image",
-      );
-
-      // Try to get shared image from App Group and store in temp database
-      // AppDelegate writes the file when the deep link is received, so we may need to retry
-      // The checkAndStoreNativeSharedImage function now uses polling internally, so we just call it once
-      try {
-        const imageResult = await checkAndStoreNativeSharedImage();
-
-        if (imageResult.success) {
-          logger.info(
-            "[Main] ✅ Native shared image found, navigating to shared-photo",
-          );
-
-          // Wait for router to be ready
-          await router.isReady();
-
-          // Navigate directly to shared-photo route
-          // Use replace if already on shared-photo to force refresh, otherwise push
-          const fileName = imageResult.fileName || "shared-image.jpg";
-          const isAlreadyOnSharedPhoto =
-            router.currentRoute.value.path === "/shared-photo";
-
-          if (isAlreadyOnSharedPhoto) {
-            // Force refresh by replacing the route
-            await router.replace({
-              path: "/shared-photo",
-              query: { fileName, _refresh: Date.now().toString() }, // Add timestamp to force update
-            });
-          } else {
-            await router.push({
-              path: "/shared-photo",
-              query: { fileName },
-            });
-          }
-
-          logger.info(
-            `[Main] ✅ Navigated to /shared-photo?fileName=${fileName}`,
-          );
-          return; // Exit early, don't process as deep link
-        } else {
-          logger.debug(
-            "[Main] ℹ️ No native shared image found, ignoring empty path URL",
-          );
-          return; // Exit early, don't process empty path as deep link
-        }
-      } catch (error) {
-        logger.error("[Main] Error processing native shared image:", error);
-        // If check fails, don't process as deep link (empty path would fail validation anyway)
-        return;
-      }
+    if (isSharedPhotoDeepLink(url) && Capacitor.isNativePlatform()) {
+      logger.debug("[Main] 📸 Shared-photo handoff received");
+      await checkForSharedImageAndNavigate();
+      return;
     }
 
     // Wait for router to be ready
@@ -377,58 +312,6 @@ const registerDeepLinkListener = async () => {
   }
 };
 
-/**
- * Check for shared image and navigate to shared-photo route if found
- * This is called when app becomes active (from share extension or app launch)
- */
-async function checkForSharedImageAndNavigate() {
-  if (
-    !Capacitor.isNativePlatform() ||
-    (Capacitor.getPlatform() !== "ios" && Capacitor.getPlatform() !== "android")
-  ) {
-    return;
-  }
-
-  try {
-    logger.debug("[Main] 🔍 Checking for shared image on app activation");
-    const imageResult = await checkAndStoreNativeSharedImage();
-
-    if (imageResult.success) {
-      logger.info(
-        "[Main] ✅ Shared image found, navigating to shared-photo route",
-      );
-
-      // Wait for router to be ready
-      await router.isReady();
-
-      // Navigate to shared-photo route with fileName if available
-      // Use replace if already on shared-photo to force refresh, otherwise push
-      const fileName = imageResult.fileName || "shared-image.jpg";
-      const isAlreadyOnSharedPhoto =
-        router.currentRoute.value.path === "/shared-photo";
-
-      if (isAlreadyOnSharedPhoto) {
-        // Force refresh by replacing the route
-        await router.replace({
-          path: "/shared-photo",
-          query: { fileName, _refresh: Date.now().toString() }, // Add timestamp to force update
-        });
-      } else {
-        const route = imageResult.fileName
-          ? `/shared-photo?fileName=${encodeURIComponent(imageResult.fileName)}`
-          : "/shared-photo";
-        await router.push(route);
-      }
-
-      logger.info(`[Main] ✅ Navigated to /shared-photo?fileName=${fileName}`);
-    } else {
-      logger.debug("[Main] ℹ️ No shared image found");
-    }
-  } catch (error) {
-    logger.error("[Main] ❌ Error checking for shared image:", error);
-  }
-}
-
 logger.log("[Capacitor] 🚀 Mounting app");
 app.mount("#app");
 logger.info(`[Main] ✅ App mounted successfully`);
@@ -479,6 +362,8 @@ setTimeout(async () => {
     );
     await registerDeepLinkListener();
     logger.info(`[Main] 🎉 Deep link system fully initialized!`);
+    // One-time: remove persisted legacy api_* schedules from pre-retirement installs
+    await runLegacyApiNotificationsCleanupOnce();
     // Firebase Messaging (JS) + Capacitor PushNotifications (FCM/APNs token, delivery listeners)
     await initializeNativePushAndFirebaseMessaging();
     // Configure native fetcher for API-driven daily notifications (activeDid + JWT)

src/router/index.ts

@@ -33,11 +33,6 @@ const routes: Array<RouteRecordRaw> = [
     name: "claim-cert",
     component: () => import("../views/ClaimCertificateView.vue"),
   },
-  {
-    path: "/confirm-contact",
-    name: "confirm-contact",
-    component: () => import("../views/ConfirmContactView.vue"),
-  },
   {
     path: "/confirm-gift/:id?",
     name: "confirm-gift",
@@ -137,6 +132,11 @@ const routes: Array<RouteRecordRaw> = [
     name: "help-onboarding",
     component: () => import("../views/HelpOnboardingView.vue"),
   },
+  {
+    path: "/help-terms",
+    name: "help-terms",
+    component: () => import("../views/HelpTermsView.vue"),
+  },
   {
     path: "/",
     name: "home",

src/services/QRNavigationService.ts

@@ -54,31 +54,6 @@ export class QRNavigationService {
     }
   }
 
-  /**
-   * Get the appropriate QR display route based on platform
-   *
-   * @returns Object with route name and parameters for QR display
-   */
-  public getQRDisplayRoute(): {
-    name: string;
-    params?: Record<string, string | number>;
-  } {
-    const isCapacitor = this.platformService.isCapacitor();
-
-    logger.debug("QR Navigation - Display route detection:", {
-      isCapacitor,
-      platform: this.platformService.getCapabilities(),
-    });
-
-    if (isCapacitor) {
-      // Use dedicated display view on mobile
-      return { name: "contact-qr-scan-show" };
-    } else {
-      // Use combined view on web
-      return { name: "contact-qr" };
-    }
-  }
-
   /**
    * Check if native QR scanning is available on current platform
    *

src/services/QRScanner/CapacitorQRScanner.ts

@@ -123,10 +123,10 @@ export class CapacitorQRScanner implements QRScannerService {
 
       // Add listener for barcode scans
       const handle = await BarcodeScanner.addListener(
-        "barcodeScanned",
+        "barcodesScanned",
         (result) => {
-          if (this.scanListener && result.barcode?.rawValue) {
-            this.scanListener.onScan(result.barcode.rawValue);
+          if (this.scanListener && result.barcodes?.[0]?.rawValue) {
+            this.scanListener.onScan(result.barcodes[0].rawValue);
           }
         },
       );

src/services/deepLinks.ts

@@ -19,6 +19,7 @@ import {
   deepLinkQuerySchemas,
 } from "../interfaces/deepLinks";
 import type { DeepLinkError } from "../interfaces/deepLinks";
+import { QRNavigationService } from "./QRNavigationService";
 import { logger } from "../utils/logger";
 
 // Helper function to extract the first key from a Zod object schema
@@ -53,6 +54,28 @@ export const ROUTE_MAP: Record<string, { name: string; paramKey?: string }> =
     {} as Record<string, { name: string; paramKey?: string }>,
   );
 
+/**
+ * Deep link paths whose destination is not simply the route of the same name.
+ *
+ * A resolver runs at navigation time rather than module load, so it may consult
+ * the platform. Anything absent from this map routes to the route whose name
+ * matches the path.
+ */
+const ROUTE_NAME_RESOLVERS: Record<string, () => string> = {
+  // An empty path is the app's front door.
+  "": () => "home",
+  // The native handoff stores its image before the route is opened. The normal
+  // handler keeps this route valid for the web and desktop implementations.
+  "shared-photo": () => "shared-photo",
+  // Both QR paths mean "show my QR code and scan theirs". Which view provides
+  // that differs by platform: a full-screen camera view where a native scanner
+  // is available, an ordinary page where the in-page web reader is used.
+  "contact-qr": () =>
+    QRNavigationService.getInstance().getQRScannerRoute().name,
+  "contact-qr-scan-full": () =>
+    QRNavigationService.getInstance().getQRScannerRoute().name,
+};
+
 /**
  * Handles processing and routing of deep links in the application.
  * Provides validation, error handling, and routing for deep link URLs.
@@ -208,7 +231,9 @@ export class DeepLinkHandler {
         throw new Error(`Route configuration missing for: ${validRoute}`);
       }
 
-      routeName = routeConfig.name;
+      routeName = ROUTE_NAME_RESOLVERS[validRoute]
+        ? ROUTE_NAME_RESOLVERS[validRoute]()
+        : routeConfig.name;
       logger.debug(`[DeepLink] 🎯 Route name resolved: ${routeName}`);
     } catch (error) {
       logger.error(`[DeepLink] ❌ Route validation failed:`, {

src/services/notifications/NativeNotificationService.ts

@@ -13,30 +13,8 @@
 
 import { Capacitor } from "@capacitor/core";
 import type { PushNotificationSchema } from "@capacitor/push-notifications";
-import type {
-  NotificationRefreshRequest,
-  NotificationRefreshResponse,
-} from "@/interfaces/notifyApi";
 import { DailyNotification } from "@/plugins/DailyNotificationPlugin";
-import { getOrCreateDeviceId } from "./deviceId";
 import { REMINDER_ID_DAILY_REMINDER } from "./reminderIds";
-import { configureNativeFetcherIfReady } from "./nativeFetcherConfig";
-import {
-  getNotificationApiBaseUrl,
-  getTestMode,
-} from "./NotificationDebugConfig";
-import {
-  logRefreshFailure,
-  logRefreshStarted,
-  logRefreshSuccess,
-  logScheduleReplacement,
-} from "./notificationLog";
-import {
-  getNotificationApiHeaders,
-  logSkippingRefreshDueToMissingAuth,
-  notificationApiFailureMessage,
-  readNotificationApiBody,
-} from "./notificationApiAuth";
 import { logNotification } from "./NotificationDebugEvents";
 
 /**
@@ -87,10 +65,6 @@ export class NativeNotificationService implements NotificationServiceInterface {
     return true;
   }
 
-  /**
-   * Request notification permissions from the OS
-   * Shows native permission dialog on first call
-   */
   /**
    * Request notification permissions from the OS
    * Shows native permission dialog on first call
@@ -567,200 +541,14 @@ export class NativeNotificationService implements NotificationServiceInterface {
   }
 }
 
-export type RefreshNotificationsResult = {
-  ok: boolean;
-  scheduledCount: number;
-  status?: number;
-  errorMessage?: string;
-};
-
 /**
- * Re-applies native API fetcher credentials (JWT pool, active DID) so background
- * notification workers can run. No UI; safe from push handlers while backgrounded.
- */
-export async function refreshNotificationsWithDiagnostics(options?: {
-  source?: string;
-}): Promise<RefreshNotificationsResult> {
-  const startedAt = performance.now();
-  const source = options?.source;
-  logRefreshStarted(source);
-
-  if (!Capacitor.isNativePlatform()) {
-    const errorMessage = "not a native platform";
-    logRefreshFailure(startedAt, errorMessage, undefined, source);
-    return {
-      ok: false,
-      scheduledCount: 0,
-      errorMessage,
-    };
-  }
-
-  try {
-    const auth = await getNotificationApiHeaders("refresh");
-    if (!auth.ok) {
-      logSkippingRefreshDueToMissingAuth();
-      logRefreshFailure(startedAt, auth.message, undefined, source);
-      return {
-        ok: false,
-        scheduledCount: 0,
-        errorMessage: auth.message,
-      };
-    }
-
-    let deviceId: string | undefined;
-    try {
-      deviceId = await getOrCreateDeviceId();
-    } catch (err) {
-      logger.warn(
-        "[NativeNotificationService] Could not obtain deviceId; skipping refresh",
-        err,
-      );
-    }
-    if (!deviceId) {
-      // The service finds the device by deviceId or fcmToken and answers 400
-      // without either, so there is no request worth sending.
-      const errorMessage = "no deviceId (cannot identify this device)";
-      logRefreshFailure(startedAt, errorMessage, undefined, source);
-      return { ok: false, scheduledCount: 0, errorMessage };
-    }
-
-    const body: NotificationRefreshRequest = {
-      deviceId,
-      platform: Capacitor.getPlatform(),
-      testMode: getTestMode(),
-    };
-    const baseUrl = getNotificationApiBaseUrl();
-    const res = await fetch(`${baseUrl}/notifications/refresh`, {
-      method: "POST",
-      headers: auth.headers,
-      body: JSON.stringify(body),
-    });
-
-    if (!res.ok) {
-      const errorMessage = notificationApiFailureMessage(
-        res.status,
-        await readNotificationApiBody(res),
-      );
-      logger.warn("[NativeNotificationService] refreshNotifications failed", {
-        status: res.status,
-        statusText: res.statusText,
-        errorMessage,
-      });
-      logRefreshFailure(startedAt, errorMessage, res.status, source);
-      return {
-        ok: false,
-        scheduledCount: 0,
-        status: res.status,
-        errorMessage,
-      };
-    }
-
-    const payload = (await res.json()) as NotificationRefreshResponse;
-    const scheduledCount = Array.isArray(payload?.nextNotifications)
-      ? payload.nextNotifications.length
-      : 0;
-    await applyNotificationRefreshPayload(payload);
-    logRefreshSuccess(startedAt, scheduledCount, source);
-    return { ok: true, scheduledCount };
-  } catch (err) {
-    logger.error("[NativeNotificationService] Refresh failed", err);
-    const message = err instanceof Error ? err.message : String(err);
-    logRefreshFailure(startedAt, message, undefined, source);
-    return { ok: false, scheduledCount: 0, errorMessage: message };
-  }
-}
-
-export async function refreshNotifications(): Promise<void> {
-  await refreshNotificationsWithDiagnostics();
-}
-
-export type NotificationRefreshPayload = {
-  shouldNotify?: boolean;
-  nextNotifications?: Array<{ timestamp?: number }>;
-};
-
-// `handleCapacitorPushNotificationReceived` and `applyNotificationRefreshPayload` are used by
-// DEV notification simulation tooling; they must stay production-safe because that tooling
-// exercises real flows. (`applyNotificationRefreshPayload` is also used by production refresh.)
-
-/**
- * Apply a "refresh notifications" payload by clearing and scheduling timestamps via the native plugin.
- *
- * This is the shared implementation used by:
- * - production refresh flow (`refreshNotifications` fetching from backend)
- * - dev-only debug flows (mock refresh with local payloads)
- *
- * Important: This function intentionally mirrors production behavior and does not introduce
- * any scheduling logic in UI layers.
- */
-export async function applyNotificationRefreshPayload(
-  payload: unknown,
-): Promise<void> {
-  if (!Capacitor.isNativePlatform()) {
-    return;
-  }
-
-  const data = payload as NotificationRefreshPayload;
-  const nextNotifications = data?.nextNotifications;
-  if (!Array.isArray(nextNotifications)) {
-    return;
-  }
-
-  const timestamps = nextNotifications
-    .map((n) => (n as { timestamp?: unknown })?.timestamp)
-    .filter((t): t is number => typeof t === "number" && Number.isFinite(t));
-
-  if (timestamps.length === 0) {
-    logNotification("Schedule replacement skipped (no valid timestamps)");
-    return;
-  }
-
-  // Keep existing behavior: ensure background worker credentials are current.
-  await configureNativeFetcherIfReady();
-
-  logScheduleReplacement(timestamps.length);
-
-  if (typeof DailyNotification.clearApiNotifications !== "function") {
-    logger.warn(
-      "[NativeNotificationService] API notification clear unavailable (plugin clearApiNotifications missing); cannot replace schedule",
-    );
-    logNotification(
-      "Schedule replacement aborted (API notification clear unavailable on plugin)",
-    );
-    return;
-  }
-
-  logNotification("Clearing API notifications before refresh");
-  await DailyNotification.clearApiNotifications();
-  logNotification("Cleared API notifications");
-
-  if (typeof DailyNotification.scheduleApiNotifications !== "function") {
-    logger.warn(
-      "[NativeNotificationService] scheduleApiNotifications not available on plugin; cannot apply timestamps",
-    );
-    logNotification(
-      "Schedule replacement aborted (scheduleApiNotifications unavailable)",
-    );
-    return;
-  }
-
-  await DailyNotification.scheduleApiNotifications({ timestamps });
-  logNotification(
-    `Schedule replacement applied (${timestamps.length} timestamp(s))`,
-  );
-}
-
-/**
- * Silent FCM/APNs data push: refresh native notification pipeline when requested by backend.
+ * Capacitor push delivery hook. Legacy WAKEUP_PING → /notifications/refresh
+ * consumption was retired; AlertSearch uses visible FCM notifications and is
+ * not handled here. Keep logging for diagnostics without scheduling api_* work.
  */
 export async function handleCapacitorPushNotificationReceived(
   notification: PushNotificationSchema,
 ): Promise<void> {
-  if (notification.data?.type === "WAKEUP_PING") {
-    logNotification("WAKEUP_PING handler — invoking refresh");
-    await refreshNotificationsWithDiagnostics({ source: "WAKEUP_PING" });
-    return;
-  }
   const type =
     typeof notification.data?.type === "string"
       ? notification.data.type

src/services/notifications/NotificationDebugService.ts

@@ -1,14 +1,12 @@
 /**
  * DEV-only notification testing utilities.
  *
- * IMPORTANT:
- * This service intentionally routes through the same production notification
- * orchestration paths used by refresh flows, wakeup pushes, and replacement.
- * Avoid adding duplicate scheduling logic here.
+ * Legacy WAKEUP_PING → /notifications/refresh → api_* tooling was removed in
+ * the Phase 2 retirement. Remaining helpers cover FCM registration, AlertSearch
+ * authorization upload, backend URL overrides, and pending-notification inspection.
  */
 
 import { Capacitor } from "@capacitor/core";
-import type { PushNotificationSchema } from "@capacitor/push-notifications";
 import type {
   DebugSendWakeupRequest,
   DebugSendWakeupResponse,
@@ -38,12 +36,6 @@ import {
   notificationApiFailureMessage,
   readNotificationApiBody,
 } from "./notificationApiAuth";
-import {
-  applyNotificationRefreshPayload,
-  handleCapacitorPushNotificationReceived,
-  refreshNotificationsWithDiagnostics,
-  type NotificationRefreshPayload,
-} from "./NativeNotificationService";
 import { truncateFcmTokenForLog } from "./notificationLog";
 import { DailyNotification } from "@/plugins/DailyNotificationPlugin";
 import { NotificationInspector } from "@/plugins/NotificationInspectorPlugin";
@@ -179,19 +171,10 @@ export const NotificationDebugService = {
     return result;
   },
 
-  async triggerBackendRefresh(): Promise<void> {
-    await refreshNotificationsWithDiagnostics({ source: "debug panel" });
-  },
-
-  /** Local simulation: same API call as a WAKEUP_PING handler (no push payload). */
-  async simulateWakeupViaRefresh(): Promise<void> {
-    logNotification("WAKEUP_PING simulation (local refresh API only)");
-    await refreshNotificationsWithDiagnostics({
-      source: "WAKEUP_PING simulation",
-    });
-  },
-
-  /** Full pipeline: backend `/debug/send-wakeup` → FCM → native WAKEUP_PING handler. */
+  /**
+   * Backend `/debug/send-wakeup` → FCM only. App no longer consumes WAKEUP_PING
+   * for api_* scheduling; kept for FCM delivery diagnostics until backend Phase 3.
+   */
   async sendRealWakeupPing(): Promise<SendRealWakeupPingResult> {
     logNotification("Real WAKEUP_PING requested");
 
@@ -264,62 +247,6 @@ export const NotificationDebugService = {
     }
   },
 
-  generateMockNotifications(
-    intervalMs: number = 60_000,
-  ): NotificationRefreshPayload {
-    const now = Date.now();
-    const future1 = now + intervalMs;
-    const future2 = now + intervalMs * 2;
-
-    return {
-      shouldNotify: true,
-      nextNotifications: [{ timestamp: future1 }, { timestamp: future2 }],
-    };
-  },
-
-  async triggerMockRefresh(intervalMs?: number): Promise<void> {
-    logNotification("Mock refresh requested");
-
-    const payload = this.generateMockNotifications(intervalMs);
-    const timestamps = payload.nextNotifications?.map((n) => n.timestamp) ?? [];
-    logNotification(`Mock payload generated (${timestamps.length} timestamps)`);
-
-    if (!Capacitor.isNativePlatform()) {
-      logNotification("Mock refresh skipped: not running on native platform");
-      return;
-    }
-
-    await applyNotificationRefreshPayload(payload);
-    logNotification("Mock refresh applied");
-  },
-
-  async simulateWakeupPing(): Promise<void> {
-    logNotification("Simulating WAKEUP_PING (production push handler)");
-
-    if (!Capacitor.isNativePlatform()) {
-      logNotification("WAKEUP_PING simulation skipped: not native platform");
-      return;
-    }
-
-    const notification = {
-      title: "WAKEUP_PING",
-      body: "",
-      id: "dev_wakeup_ping",
-      data: { type: "WAKEUP_PING" },
-    } as unknown as PushNotificationSchema;
-
-    await handleCapacitorPushNotificationReceived(notification);
-  },
-
-  async runFloodTest(intervalMs?: number): Promise<void> {
-    logNotification("Flood test started (20 sequential refreshes)");
-    for (let i = 0; i < 20; i++) {
-      logNotification(`Flood iteration ${i + 1}/20`);
-      await this.triggerMockRefresh(intervalMs);
-    }
-    logNotification("Flood test completed");
-  },
-
   async clearNotifications(): Promise<void> {
     logNotification("Clear notifications (debug panel)");
 

src/services/notifications/index.ts

@@ -42,6 +42,7 @@ export { uploadAlertSearchAuthorization } from "./alertAuthorization";
 export type { AlertAuthorizationUploadResult } from "./alertAuthorization";
 
 export { configureNativeFetcherIfReady } from "./nativeFetcherConfig";
+export { runLegacyApiNotificationsCleanupOnce } from "./legacyApiNotificationsCleanup";
 export {
   deferFcmRegistration,
   flushDeferredFcmRegistration,

src/services/notifications/legacyApiNotificationsCleanup.test.ts

@@ -0,0 +1,101 @@
+import { Capacitor } from "@capacitor/core";
+import { Preferences } from "@capacitor/preferences";
+import { DailyNotification } from "@/plugins/DailyNotificationPlugin";
+import {
+  LEGACY_API_NOTIFICATIONS_CLEANUP_KEY,
+  runLegacyApiNotificationsCleanupOnce,
+} from "./legacyApiNotificationsCleanup";
+
+jest.mock("@capacitor/core", () => ({
+  Capacitor: {
+    isNativePlatform: jest.fn(),
+  },
+}));
+
+jest.mock("@capacitor/preferences", () => ({
+  Preferences: {
+    get: jest.fn(),
+    set: jest.fn(),
+  },
+}));
+
+jest.mock("@/plugins/DailyNotificationPlugin", () => ({
+  DailyNotification: {
+    clearApiNotifications: jest.fn(),
+  },
+}));
+
+jest.mock("@/utils/logger", () => ({
+  logger: {
+    info: jest.fn(),
+    warn: jest.fn(),
+    error: jest.fn(),
+    debug: jest.fn(),
+    log: jest.fn(),
+  },
+}));
+
+const isNativePlatform = Capacitor.isNativePlatform as jest.Mock;
+const preferencesGet = Preferences.get as jest.Mock;
+const preferencesSet = Preferences.set as jest.Mock;
+const clearApiNotifications =
+  DailyNotification.clearApiNotifications as jest.Mock;
+
+describe("runLegacyApiNotificationsCleanupOnce", () => {
+  beforeEach(() => {
+    jest.clearAllMocks();
+    isNativePlatform.mockReturnValue(true);
+    preferencesGet.mockResolvedValue({ value: null });
+    preferencesSet.mockResolvedValue(undefined);
+    clearApiNotifications.mockResolvedValue(undefined);
+  });
+
+  it("no-ops on non-native platforms", async () => {
+    isNativePlatform.mockReturnValue(false);
+
+    await runLegacyApiNotificationsCleanupOnce();
+
+    expect(preferencesGet).not.toHaveBeenCalled();
+    expect(clearApiNotifications).not.toHaveBeenCalled();
+    expect(preferencesSet).not.toHaveBeenCalled();
+  });
+
+  it("skips cleanup when the migration marker is already set", async () => {
+    preferencesGet.mockResolvedValue({ value: "1" });
+
+    await runLegacyApiNotificationsCleanupOnce();
+
+    expect(clearApiNotifications).not.toHaveBeenCalled();
+    expect(preferencesSet).not.toHaveBeenCalled();
+  });
+
+  it("clears api_* state and writes the marker only after success", async () => {
+    await runLegacyApiNotificationsCleanupOnce();
+
+    expect(clearApiNotifications).toHaveBeenCalledTimes(1);
+    expect(preferencesSet).toHaveBeenCalledWith({
+      key: LEGACY_API_NOTIFICATIONS_CLEANUP_KEY,
+      value: "1",
+    });
+  });
+
+  it("does not write the marker when clearApiNotifications fails", async () => {
+    clearApiNotifications.mockRejectedValue(new Error("native failure"));
+
+    await runLegacyApiNotificationsCleanupOnce();
+
+    expect(clearApiNotifications).toHaveBeenCalledTimes(1);
+    expect(preferencesSet).not.toHaveBeenCalled();
+  });
+
+  it("does not write the marker when clearApiNotifications is missing", async () => {
+    const original = DailyNotification.clearApiNotifications;
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    delete (DailyNotification as any).clearApiNotifications;
+
+    await runLegacyApiNotificationsCleanupOnce();
+
+    expect(preferencesSet).not.toHaveBeenCalled();
+    DailyNotification.clearApiNotifications = original;
+  });
+});

src/services/notifications/legacyApiNotificationsCleanup.ts

@@ -0,0 +1,85 @@
+/**
+ * One-time upgrade cleanup for legacy API-managed notification schedules
+ * (`api_*`) left behind by the retired WAKEUP_PING → /notifications/refresh path.
+ *
+ * Uses DailyNotification.clearApiNotifications(), which cancels only `api_*`
+ * pending/delivered state (and Android persisted api_* schedule rows). It does
+ * not touch daily reminders, dual/New Activity schedules, AlertSearch, or FCM.
+ */
+
+import { Capacitor } from "@capacitor/core";
+import { Preferences } from "@capacitor/preferences";
+import { DailyNotification } from "@/plugins/DailyNotificationPlugin";
+import { logger } from "@/utils/logger";
+
+/** Preferences key; written only after a successful native cleanup. */
+export const LEGACY_API_NOTIFICATIONS_CLEANUP_KEY =
+  "legacy_api_notifications_cleanup_v1";
+
+const DONE_VALUE = "1";
+
+let inFlight: Promise<void> | null = null;
+
+/**
+ * Idempotent startup hook. Safe when zero `api_*` schedules exist.
+ * On failure, leaves the marker unset so a later launch can retry.
+ */
+export async function runLegacyApiNotificationsCleanupOnce(): Promise<void> {
+  if (inFlight) {
+    return inFlight;
+  }
+  inFlight = runCleanup().finally(() => {
+    inFlight = null;
+  });
+  return inFlight;
+}
+
+async function runCleanup(): Promise<void> {
+  if (!Capacitor.isNativePlatform()) {
+    return;
+  }
+
+  try {
+    const existing = await Preferences.get({
+      key: LEGACY_API_NOTIFICATIONS_CLEANUP_KEY,
+    });
+    if (existing.value === DONE_VALUE) {
+      return;
+    }
+  } catch (error) {
+    logger.warn(
+      "[legacyApiNotificationsCleanup] Could not read migration marker; skipping this launch",
+      error,
+    );
+    return;
+  }
+
+  const clearApiNotifications = (
+    DailyNotification as {
+      clearApiNotifications?: () => Promise<void>;
+    }
+  ).clearApiNotifications;
+
+  if (typeof clearApiNotifications !== "function") {
+    logger.warn(
+      "[legacyApiNotificationsCleanup] clearApiNotifications unavailable; will retry on a later launch",
+    );
+    return;
+  }
+
+  try {
+    await clearApiNotifications.call(DailyNotification);
+    await Preferences.set({
+      key: LEGACY_API_NOTIFICATIONS_CLEANUP_KEY,
+      value: DONE_VALUE,
+    });
+    logger.info(
+      "[legacyApiNotificationsCleanup] Cleared legacy api_* notification state",
+    );
+  } catch (error) {
+    logger.warn(
+      "[legacyApiNotificationsCleanup] Cleanup failed; will retry on next startup",
+      error,
+    );
+  }
+}

src/services/notifications/notificationApiAuth.ts

@@ -11,7 +11,7 @@ import { getNotificationDebugOverrideHeaders } from "./NotificationDebugConfig";
 import { shouldBypassNotificationAuth } from "./notificationApiDebugMode";
 import { logNotification } from "./NotificationDebugEvents";
 
-export type NotificationRequestKind = "register" | "refresh";
+export type NotificationRequestKind = "register";
 
 export type NotificationApiHeadersResult =
   | {
@@ -133,32 +133,17 @@ export async function getNotificationApiHeaders(
   };
 }
 
-export function logNotificationRequestAuthenticated(
-  kind: NotificationRequestKind,
-): void {
-  logNotification(
-    kind === "register"
-      ? "Register request authenticated"
-      : "Refresh request authenticated",
-  );
-}
-
 export function logNotificationAuthFailure(
-  kind: NotificationRequestKind,
+  _kind: NotificationRequestKind,
   message: string,
 ): void {
-  const verb = kind === "register" ? "Register" : "Refresh";
-  logNotification(`${verb} auth unavailable: ${message}`);
+  logNotification(`Register auth unavailable: ${message}`);
 }
 
 export function logWaitingForAuthBeforeRegistration(): void {
   logNotification("Waiting for auth before registration");
 }
 
-export function logSkippingRefreshDueToMissingAuth(): void {
-  logNotification("Skipping refresh due to missing auth");
-}
-
 export function httpAuthErrorMessage(status: number): string {
   if (status === 401) {
     return "unauthorized (expired or invalid auth)";

src/services/notifications/notificationAuthLifecycle.ts

@@ -1,5 +1,5 @@
 /**
- * Defers notification register/refresh until app auth (active DID + Bearer) is available.
+ * Defers FCM token registration until app auth (active DID + Bearer) is available.
  * Bounded retries avoid racing startup and prevent infinite loops.
  */
 

src/services/notifications/notificationLog.ts

@@ -24,9 +24,6 @@ export function logPushNotificationReceived(notification: {
     title: notification.title,
     dataType: type,
   });
-  if (type === "WAKEUP_PING") {
-    logNotification("WAKEUP_PING received — will trigger refresh");
-  }
 }
 
 export function logPushNotificationActionPerformed(action: {
@@ -74,44 +71,6 @@ export function logTokenRegistrationFailure(
   });
 }
 
-export function logRefreshStarted(source?: string): void {
-  logNotification(source ? `Refresh started (${source})` : "Refresh started");
-}
-
-function elapsedMsSince(startedAt: number): number {
-  return performance.now() - startedAt;
-}
-
-export function logRefreshSuccess(
-  startedAt: number,
-  scheduledCount: number,
-  source?: string,
-): void {
-  const elapsedMs = Math.round(elapsedMsSince(startedAt));
-  const message = source
-    ? `Refresh completed (${source}) in ${elapsedMs}ms (scheduled ${scheduledCount})`
-    : `Refresh completed in ${elapsedMs}ms (scheduled ${scheduledCount})`;
-  logNotification(message);
-}
-
-export function logRefreshFailure(
-  startedAt: number,
-  errorMessage: string,
-  status?: number,
-  source?: string,
-): void {
-  const statusPart = status != null ? ` HTTP ${status}` : "";
-  const elapsedMs = Math.round(elapsedMsSince(startedAt));
-  const message = source
-    ? `Refresh failed (${source}) in ${elapsedMs}ms: ${errorMessage}${statusPart}`
-    : `Refresh failed in ${elapsedMs}ms: ${errorMessage}${statusPart}`;
-  logNotification(message);
-}
-
 export function logNotificationClearing(method: string): void {
   logNotification(`Clearing notifications via ${method}`);
 }
-
-export function logScheduleReplacement(count: number): void {
-  logNotification(`Schedule replacement: ${count} notification(s)`);
-}

src/services/sharedImageHandoff.ts

@@ -0,0 +1,58 @@
+/**
+ * Coordinates consuming a native shared image and opening the shared-photo view.
+ *
+ * Native image storage is consumed when read. Several lifecycle events can arrive
+ * for one share, so callers must share one in-flight operation.
+ */
+export interface NativeSharedImage {
+  base64: string | null | undefined;
+  fileName: string | null | undefined;
+}
+
+export interface SharedImageHandoffDependencies {
+  getSharedImage: () => Promise<NativeSharedImage | null>;
+  storeSharedImage: (base64: string, fileName: string) => Promise<void>;
+  navigateToSharedPhoto: (fileName: string) => Promise<void>;
+}
+
+export interface SharedImageHandoff {
+  process: () => Promise<boolean>;
+}
+
+export function createSharedImageHandoff({
+  getSharedImage,
+  storeSharedImage,
+  navigateToSharedPhoto,
+}: SharedImageHandoffDependencies): SharedImageHandoff {
+  let inFlight: Promise<boolean> | undefined;
+
+  const processOnce = async (): Promise<boolean> => {
+    const image = await getSharedImage();
+    if (!image?.base64?.trim()) {
+      return false;
+    }
+
+    const fileName = image.fileName || "shared-image.jpg";
+    await storeSharedImage(image.base64, fileName);
+    await navigateToSharedPhoto(fileName);
+    return true;
+  };
+
+  return {
+    async process(): Promise<boolean> {
+      if (inFlight) {
+        return inFlight;
+      }
+
+      const operation = processOnce();
+      inFlight = operation;
+      try {
+        return await operation;
+      } finally {
+        if (inFlight === operation) {
+          inFlight = undefined;
+        }
+      }
+    },
+  };
+}

src/test/deepLinkRoutes.test.ts

@@ -0,0 +1,57 @@
+import { readFileSync } from "fs";
+import { join } from "path";
+
+import { deepLinkPathSchemas } from "@/interfaces/deepLinks";
+
+/**
+ * Every deep link path must name a route the router actually serves.
+ *
+ * The two lists are maintained by hand in separate files, so nothing but this
+ * test stops them drifting apart. A path that names a missing route reaches the
+ * user as a link that validates, navigates, and lands nowhere.
+ *
+ * The router is read as text rather than imported: it builds a real Router at
+ * module scope and pulls in every view, which Jest's node environment cannot
+ * load.
+ */
+
+const ROUTER_SOURCE = join(__dirname, "..", "router", "index.ts");
+
+/** Deep link paths that intentionally resolve to a differently named route. */
+const ALIASES: Record<string, string> = {
+  // Must match ROUTE_NAME_RESOLVERS in src/services/deepLinks.ts
+  "": "home",
+};
+
+function routerRouteNames(): Set<string> {
+  const source = readFileSync(ROUTER_SOURCE, "utf8");
+  const names = [...source.matchAll(/^\s+name: "([^"]+)",$/gm)].map(
+    (match) => match[1],
+  );
+  return new Set(names);
+}
+
+describe("deep link paths", () => {
+  const routeNames = routerRouteNames();
+
+  it("parses the router source", () => {
+    // Guards against a silent pass if the router's formatting changes and the
+    // pattern above stops matching.
+    expect(routeNames.size).toBeGreaterThan(40);
+    expect(routeNames.has("home")).toBe(true);
+  });
+
+  it.each(Object.keys(deepLinkPathSchemas))(
+    'path "%s" resolves to a real route',
+    (path) => {
+      expect(routeNames).toContain(ALIASES[path] ?? path);
+    },
+  );
+
+  it("aliases only paths that need one", () => {
+    for (const path of Object.keys(ALIASES)) {
+      expect(Object.keys(deepLinkPathSchemas)).toContain(path);
+      expect(routeNames.has(path)).toBe(false);
+    }
+  });
+});

src/test/endorserHandleIds.test.ts

@@ -0,0 +1,48 @@
+import {
+  addEndorserPrefix,
+  stripEndorserPrefix,
+  ENDORSER_CH_HANDLE_PREFIX,
+} from "@/libs/endorserHandleIds";
+
+/**
+ * A project reached through a deep link arrives with its handle shortened, and
+ * whatever the app holds at that moment is what it signs into a claim and sends
+ * to the report endpoints. A short ID in either place is a link to nothing.
+ */
+
+const SHORT_ID = "01D25AVGQG1N8E9JNGK7C7DZRD";
+const FULL_ID = ENDORSER_CH_HANDLE_PREFIX + SHORT_ID;
+
+describe("addEndorserPrefix", () => {
+  it("expands an ID that names an entity on this server", () => {
+    expect(addEndorserPrefix(SHORT_ID)).toEqual(FULL_ID);
+  });
+
+  it("leaves a full handle alone", () => {
+    expect(addEndorserPrefix(FULL_ID)).toEqual(FULL_ID);
+  });
+
+  it("leaves a handle from another system alone", () => {
+    // Anything carrying a URI scheme belongs to whoever issued it
+    expect(addEndorserPrefix("external:some-project")).toEqual(
+      "external:some-project",
+    );
+    expect(addEndorserPrefix("https://other.example/entity/abc")).toEqual(
+      "https://other.example/entity/abc",
+    );
+    expect(addEndorserPrefix("did:ethr:0x0000")).toEqual("did:ethr:0x0000");
+  });
+
+  it("passes an empty ID through rather than making a prefix out of it", () => {
+    expect(addEndorserPrefix("")).toEqual("");
+  });
+
+  it("is the inverse of stripEndorserPrefix", () => {
+    expect(addEndorserPrefix(stripEndorserPrefix(FULL_ID))).toEqual(FULL_ID);
+    expect(stripEndorserPrefix(addEndorserPrefix(SHORT_ID))).toEqual(SHORT_ID);
+  });
+
+  it("is idempotent, so an ID may pass through more than one caller", () => {
+    expect(addEndorserPrefix(addEndorserPrefix(SHORT_ID))).toEqual(FULL_ID);
+  });
+});