Wire deliver_by :action_push_native via Rails-native action_push_native

Install action_push_native 0.3.x and generate ApplicationPushNotification,
ApplicationPushDevice, ApplicationPushNotificationJob, and config/push.yml.
Add deliver_by :action_push_native to ItemTagCalledNotifier so push
notifications route through Rails 8.1's Action Push Native (single
abstraction over APNs + FCM) instead of the Noticed gem's per-platform
:ios / :fcm deliverers.

APNs/FCM credentials remain placeholders in config/push.yml — provision
via bin/rails credentials:edit before enabling delivery. Bridging the
existing Device registration API to ApplicationPushDevice (so registered
tokens actually flow into Action Push Native delivery) is a follow-up.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: dadachi

CHANGELOG.md

@@ -7,7 +7,9 @@
 - Add push notifications scaffolding via `noticed` v2 (#58)
 - New `Device` model + migration (UUID primary key, unique on `[platform, token]`, `last_active_at` for staleness scope)
 - New `Api::V1::Shopkeeper::DevicesController` — POST `/devices` is idempotent upsert (rebinds token to current shopkeeper); DELETE `/devices/:id` unregisters
-- Add `ApplicationNotifier` base class + example `ItemTagCalledNotifier` (no provider config yet — APNs / FCM delivery + ItemTag AASM wiring land in PR #2 once credentials are provisioned)
+- Add `ApplicationNotifier` base class + example `ItemTagCalledNotifier` with `deliver_by :action_push_native` wiring (Apple + Google push via Rails-native `action_push_native` 0.3.x)
+- Generate `ApplicationPushNotification` / `ApplicationPushDevice` / `ApplicationPushNotificationJob` and `config/push.yml` (APNs/FCM credentials still placeholders — provision via `bin/rails credentials:edit` before enabling delivery; ItemTag AASM trigger lands in a follow-up)
+- Note: the existing `Device` registration API (`POST /api/v1/shopkeeper/devices`) writes to the custom `Device` model, not `ApplicationPushDevice` — bridging the two (so registered tokens flow into Action Push Native delivery) is a follow-up
 - `Shopkeeper has_many :devices, :notifications`; new locale entries under `notifiers.item_tag_called`
 - 21 new test runs (Device model + DevicesController + notifier); full suite still 0 failures
 

Gemfile

@@ -102,3 +102,5 @@ group :test do
   gem "selenium-webdriver", ">= 4.20.1"
   gem "webmock"
 end
+
+gem "action_push_native", "~> 0.3.1"

Gemfile.lock

@@ -3,6 +3,13 @@ GEM
   specs:
     aasm (5.5.2)
       concurrent-ruby (~> 1.0)
+    action_push_native (0.3.1)
+      activejob (>= 8.0)
+      activerecord (>= 8.0)
+      googleauth (~> 1.14)
+      httpx (~> 1.6)
+      jwt (>= 2)
+      railties (>= 8.0)
     action_text-trix (2.1.18)
       railties
     actioncable (8.1.3)
@@ -153,6 +160,12 @@ GEM
     erubi (1.13.1)
     et-orbi (1.4.0)
       tzinfo
+    faraday (2.14.1)
+      faraday-net_http (>= 2.0, < 3.5)
+      json
+      logger
+    faraday-net_http (3.4.2)
+      net-http (~> 0.5)
     ffi (1.17.4-aarch64-linux-gnu)
     ffi (1.17.4-arm-linux-gnu)
     ffi (1.17.4-arm64-darwin)
@@ -164,11 +177,26 @@ GEM
       raabro (~> 1.4)
     globalid (1.3.0)
       activesupport (>= 6.1)
+    google-cloud-env (2.3.1)
+      base64 (~> 0.2)
+      faraday (>= 1.0, < 3.a)
+    google-logging-utils (0.2.0)
+    googleauth (1.16.2)
+      faraday (>= 1.0, < 3.a)
+      google-cloud-env (~> 2.2)
+      google-logging-utils (~> 0.1)
+      jwt (>= 1.4, < 4.0)
+      multi_json (~> 1.11)
+      os (>= 0.9, < 2.0)
+      signet (>= 0.16, < 2.a)
     hashdiff (1.2.1)
+    http-2 (1.1.3)
     httparty (0.24.2)
       csv
       mini_mime (>= 1.0.0)
       multi_xml (>= 0.5.2)
+    httpx (1.7.6)
+      http-2 (>= 1.1.3)
     i18n (1.14.8)
       concurrent-ruby (~> 1.0)
     image_processing (1.14.0)
@@ -188,6 +216,8 @@ GEM
     json (2.19.4)
     jsonapi-serializer (2.2.0)
       activesupport (>= 4.2)
+    jwt (3.1.2)
+      base64
     language_server-protocol (3.17.0.5)
     lint_roller (1.1.0)
     logger (1.7.0)
@@ -232,8 +262,11 @@ GEM
       stimulus-rails
       turbo-rails
     msgpack (1.8.0)
+    multi_json (1.21.1)
     multi_xml (0.8.1)
       bigdecimal (>= 3.1, < 5)
+    net-http (0.9.1)
+      uri (>= 0.11.1)
     net-imap (0.6.4)
       date
       net-protocol
@@ -260,6 +293,7 @@ GEM
     noticed (2.9.3)
       rails (>= 6.1.0)
     orm_adapter (0.5.0)
+    os (1.1.4)
     ostruct (0.6.3)
     overcommit (0.69.0)
       childprocess (>= 0.6.3, < 6)
@@ -395,6 +429,11 @@ GEM
       rexml (~> 3.2, >= 3.2.5)
       rubyzip (>= 1.2.2, < 4.0)
       websocket (~> 1.0)
+    signet (0.21.0)
+      addressable (~> 2.8)
+      faraday (>= 0.17.5, < 3.a)
+      jwt (>= 1.5, < 4.0)
+      multi_json (~> 1.10)
     smart_properties (1.17.0)
     solid_cable (3.0.12)
       actioncable (>= 7.2)
@@ -471,6 +510,7 @@ PLATFORMS
 
 DEPENDENCIES
   aasm
+  action_push_native (~> 0.3.1)
   acts_as_tenant
   after_commit_everywhere (~> 1.6)
   bootsnap (>= 1.4.2)

app/jobs/application_push_notification_job.rb

@@ -0,0 +1,7 @@
+class ApplicationPushNotificationJob < ActionPushNative::NotificationJob
+  # Enable logging job arguments (default: false)
+  # self.log_arguments = true
+
+  # Report job retries via the `Rails.error` reporter (default: false)
+  # self.report_job_retries = true
+end

app/models/application_push_device.rb

@@ -0,0 +1,4 @@
+class ApplicationPushDevice < ActionPushNative::Device
+  # Customize TokenError handling (default: destroy!)
+  # rescue_from (ActionPushNative::TokenError) { Rails.logger.error("Device #{id} token is invalid") }
+end

app/models/application_push_notification.rb

@@ -0,0 +1,12 @@
+class ApplicationPushNotification < ActionPushNative::Notification
+  # Set a custom job queue_name
+  # queue_as :realtime
+
+  # Controls whether push notifications are enabled (default: !Rails.env.test?)
+  # self.enabled = Rails.env.production?
+
+  # Define a custom callback to modify or abort the notification before it is sent
+  # before_delivery do |notification|
+  #   throw :abort if Notification.find(notification.context[:notification_id]).expired?
+  # end
+end

app/notifiers/item_tag_called_notifier.rb

@@ -1,4 +1,15 @@
 class ItemTagCalledNotifier < ApplicationNotifier
+  deliver_by :action_push_native do |config|
+    config.devices = -> { ApplicationPushDevice.where(owner: recipient) }
+    config.format = -> {
+      {
+        title: title,
+        body: body,
+        data: {url: url}
+      }
+    }
+  end
+
   notification_methods do
     def title
       I18n.t("notifiers.item_tag_called.title", number: record.name)

config/push.yml

@@ -0,0 +1,40 @@
+shared:
+  # Use bin/rails credentials:edit to set the apns secrets (as action_push_native:apns:key_id|encryption_key)
+  apple:
+    # Token auth params
+    # See https://developer.apple.com/documentation/usernotifications/establishing-a-token-based-connection-to-apns
+    key_id: <%= Rails.application.credentials.dig(:action_push_native, :apns, :key_id) %>
+    encryption_key: <%= Rails.application.credentials.dig(:action_push_native, :apns, :encryption_key)&.dump %>
+
+    team_id: your_apple_team_id
+    # Your identifier found on https://developer.apple.com/account/resources/identifiers/list
+    topic: your.bundle.identifier
+
+    # Set this to the number of threads used to process notifications (default: 5).
+    # When the pool size is too small a ConnectionPoolTimeoutError will be raised.
+    # connection_pool_size: 5
+
+    # Change the request timeout (default: 30).
+    # request_timeout: 60
+
+    # Decide when to connect to APNs development server.
+    # Please note that anything built directly from Xcode and loaded on your phone will have
+    # the app generate DEVELOPMENT tokens, while everything else (TestFlight, Apple Store, ...)
+    # will be considered as PRODUCTION environment.
+    # connect_to_development_server: <%= Rails.env.development? %>
+
+  # Use bin/rails credentials:edit to set the fcm secrets (as action_push_native:fcm:encryption_key)
+  google:
+    # Your Firebase project service account credentials
+    # See https://firebase.google.com/docs/cloud-messaging/auth-server
+    encryption_key: <%= Rails.application.credentials.dig(:action_push_native, :fcm, :encryption_key)&.dump %>
+
+    # Firebase project_id
+    project_id: your_project_id
+
+    # Set this to the number of threads used to process notifications (default: 5).
+    # When the pool size is too small a ConnectionPoolTimeoutError will be raised.
+    # connection_pool_size: 5
+
+    # Change the request timeout (default: 15).
+    # request_timeout: 30

db/migrate/20260510015009_create_action_push_native_device.action_push_native.rb

@@ -0,0 +1,13 @@
+# This migration comes from action_push_native (originally 20250610075650)
+class CreateActionPushNativeDevice < ActiveRecord::Migration[8.0]
+  def change
+    create_table :action_push_native_devices do |t|
+      t.string :name
+      t.string :platform, null: false
+      t.string :token, null: false
+      t.belongs_to :owner, polymorphic: true
+
+      t.timestamps
+    end
+  end
+end