Your status, in plain language.

Publishing resets the inactivity clock. Nothing else needs doing.

No successful publish inside the window. POST /v1/sites/reactivate restores it with the same key.

The key was revoked. Rotating the key or operator intervention re-enables it.

The website was registered too many times. Permanent, and only an operator can reverse it.

Accepted, waiting for the delivery pass to pick it up.

A delivery pass is currently talking to the push services.

Every subscription was attempted and none failed.

Sent, but at least one subscription failed or was invalidated.

Nothing could be handed to a push service. Check the delivery attempts.

Included in the next publish for this site.

The push service answered 404 or 410. Excluded from future sends; the browser must re-subscribe.

The visitor turned notifications off, or your page called unsubscribe().

Malformed JSON, missing field or failed validation. error.details.field says which.

No bearer token, or a key that is unknown or was rotated.

The public identifier is unknown, or the Origin does not match the registration.

The inactivity window elapsed. Reactivate to keep the same key.

The key was revoked and the account must be re-enabled.

Repeated registrations for this website. Operator-only reversal.

Malformed endpoint, p256dh or auth. Re-subscribe from the browser.

The endpoint host is not an accepted push service for this deployment.

The body or the encrypted payload is over the ceiling. Shorten body, image or data.

Window budget spent. Honour retry-after.

No push service could be reached at all for this publish.

Unexpected failure. Details are logged, never returned — quote x-request-id.

Unknown route or documentation page.

Known path, wrong verb — the allow header lists the valid ones.

Unknown id, or one that belongs to a different registration.

This website already has an account. details.attempts counts attempts so far.

The subscription cap for this registration is full. Prune dead endpoints.

New registrations are switched off on this deployment; an operator must enable them.

The instance is missing secrets or a valid VAPID configuration.

No public key was passed to the SDK.

The browser has no Push API, or the page is not a secure context.

The visitor blocked notifications for the site.

The prompt failed — usually because it was not triggered by a click.

The Service Worker could not register or is out of scope.

The subscription upload did not reach the API.

The browser replaced the subscription; re-register it.

Anything the SDK could not classify. The original error is attached.