Web Push for HITL Approvals
Get instant notifications when an agent pauses for approval — even when the app is closed.
How It Works
- Subscribe in the WardenAuth dashboard (one click)
- Agent pauses for HITL approval
- Push notification arrives on your device with a deep link
- Tap to open the approval screen directly
Push works on desktop browsers and via the PWA on iOS/Android.
Prerequisites
VAPID keys must be configured by your WardenAuth administrator:
# Set VAPID keys via SST secrets
npx sst secret set VapidPublicKey "<your-public-key>" --stage production
npx sst secret set VapidPrivateKey "<your-private-key>" --stage production
To generate VAPID keys:
npx web-push generate-vapid-keys
Subscribing
In the WardenAuth dashboard, navigate to Settings → Push Notifications and click Enable. Your browser will prompt for notification permission.
Notification Content
Each push notification includes:
- Title: "Approve your agent's action" or "Agent action awaiting an administrator"
- Body: Tool name + context (e.g., "GitHub: merge_pr on my-org/api #42")
- Deep link: Opens
https://app.wardenauthz.com/connections?approval={id}
PWA Installation
Install the WardenAuth dashboard as a PWA on your phone for the best approval experience. On iOS, use "Add to Home Screen" in Safari. On Android, Chrome will prompt "Install app."
Managing Subscriptions
- View: Settings → Push Notifications shows your registered devices
- Remove: Delete individual subscriptions you no longer use
- Cap: Maximum 20 device subscriptions per user
Troubleshooting
| Issue | Solution |
|---|---|
| No notification received | Check browser notification permissions and that VAPID keys are configured |
| Deep link doesn't open | Ensure the PWA is installed or the dashboard is open in a browser |
| "Push not configured" | Administrators: set VapidPublicKey and VapidPrivateKey SST secrets |