Notifications - Add cloud agent push notifications

[eshurakov]

Summary

Terminal cloud-agent session events (completed / failed / interrupted) now produce push notifications on the user's registered mobile devices.

Verification

• local testing

[kilo-code-bot]

Code Review Summary

Status: 3 Issues Found | Recommendation: Address before merge

Overview

Severity	Count
CRITICAL	0
WARNING	3
SUGGESTION	0

Fix these issues in Kilo Cloud

Issue Details (click to expand)

WARNING

File	Line	Issue
services/notifications/src/routes/webhooks.ts	19	Webhook request bodies are fully buffered before signature verification or any size cap, reopening unauthenticated oversized-body memory/CPU DoS risk.
services/notifications/src/queue-consumer.ts	19	Malformed receipt queue messages can throw in the catch logging path before msg.retry() or msg.ack() runs, causing poison-message batch failures.
services/cloud-agent-next/vitest.workers.config.ts	28	Miniflare queue consumer override uses the producer binding name instead of queue name, so the faster test batch timeout does not apply.

Resolved Since Previous Review

File	Line	Issue
N/A	N/A	No previously active findings were changed by this incremental diff.

Other Observations (not in diff)

Issues found in unchanged code that cannot receive inline comments:

File	Line	Issue
services/notifications/src/dos/NotificationChannelDO.ts	109	alarm() no longer schedules a future cleanup after marking messages as notified, so notified msg:* and dedup:* records can remain in DO storage indefinitely if no later webhook resets the alarm.

Files Reviewed (4 files)

• services/kiloclaw/src/durable-objects/kiloclaw-instance.test.ts - 0 new issues
• services/kiloclaw/src/durable-objects/kiloclaw-instance/lifecycle-push.ts - 0 new issues
• services/kiloclaw/src/test-utils.ts - 0 new issues
• services/kiloclaw/src/types.ts - 0 new issues

---

_{Reviewed by gpt-5.5-20260423 · 1,369,062 tokens}