@serve.zone/interfaces 10.1.0 → 11.0.0

package/changelog.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 2026-07-13 - 11.0.0
+
+### Breaking Changes
+
+- require JWT-only credentials for public isolated restore requests (backup)
+  - Replace caller-visible identity claims with `IIdentityCredential` on create, list, get, and cleanup requests.
+  - Require Cloudly handlers to verify the JWT and derive actor, role, and tenant authority server-side.
+
 ## 2026-07-13 - 10.1.0
 
 ### Features

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@serve.zone/interfaces',
-    version: '10.1.0',
+    version: '11.0.0',
     description: 'Shared TypeScript interfaces and TypedRequest contracts for the serve.zone ecosystem.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSx3QkFBd0I7SUFDOUIsT0FBTyxFQUFFLFFBQVE7SUFDakIsV0FBVyxFQUFFLHVGQUF1RjtDQUNyRyxDQUFBIn0=

package/dist_ts/requests/backup.d.ts

@@ -1,7 +1,7 @@
 import * as plugins from '../plugins.js';
 import type { IArchivePruneResult, IArchiveRetentionPolicy, IBackupArchiveManifest, IBackupArchiveObject, IBackupRecord, IBackupReplicationResult, IIsolatedRestoreNodeState, IIsolatedRestoreRecord, TBackupSnapshot, TIsolatedRestoreResourceMapping } from '../data/backup.js';
 import type { IService } from '../data/service.js';
-import type { IIdentity } from '../data/user.js';
+import type { IIdentity, IIdentityCredential } from '../data/user.js';
 export interface IReq_Any_Cloudly_CreateServiceBackup extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_Any_Cloudly_CreateServiceBackup> {
     method: 'createServiceBackup';
     request: {
@@ -154,7 +154,8 @@ export interface IReq_Cloudly_Coreflow_PruneNodeArchive extends plugins.typedreq
 export interface IReq_Any_Cloudly_CreateIsolatedRestore extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_Any_Cloudly_CreateIsolatedRestore> {
     method: 'createIsolatedRestore';
     request: {
-        identity: IIdentity;
+        /** Cloudly verifies this credential and derives all actor claims server-side. */
+        identity: IIdentityCredential;
         sourceBackupId: string;
         targetNodeName: string;
         purpose: string;
@@ -186,7 +187,8 @@ export interface IReq_Any_Cloudly_CreateIsolatedRestore extends plugins.typedreq
 export interface IReq_Any_Cloudly_GetIsolatedRestores extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_Any_Cloudly_GetIsolatedRestores> {
     method: 'getIsolatedRestores';
     request: {
-        identity: IIdentity;
+        /** Cloudly verifies this credential and derives all actor claims server-side. */
+        identity: IIdentityCredential;
         sourceBackupId?: string;
         sourceServiceId?: string;
         clusterId?: string;
@@ -208,7 +210,8 @@ export interface IReq_Any_Cloudly_GetIsolatedRestores extends plugins.typedreque
 export interface IReq_Any_Cloudly_GetIsolatedRestoreById extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_Any_Cloudly_GetIsolatedRestoreById> {
     method: 'getIsolatedRestoreById';
     request: {
-        identity: IIdentity;
+        /** Cloudly verifies this credential and derives all actor claims server-side. */
+        identity: IIdentityCredential;
         restoreId: string;
     };
     response: {
@@ -285,7 +288,8 @@ export interface IReq_Cloudly_Coreflow_CleanupIsolatedRestore extends plugins.ty
 export interface IReq_Any_Cloudly_CleanupIsolatedRestore extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_Any_Cloudly_CleanupIsolatedRestore> {
     method: 'cleanupIsolatedRestore';
     request: {
-        identity: IIdentity;
+        /** Cloudly verifies this credential and derives all actor claims server-side. */
+        identity: IIdentityCredential;
         restoreId: string;
         reason: string;
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@serve.zone/interfaces",
-  "version": "10.1.0",
+  "version": "11.0.0",
   "private": false,
   "description": "Shared TypeScript interfaces and TypedRequest contracts for the serve.zone ecosystem.",
   "exports": {

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/interfaces',
-  version: '10.1.0',
+  version: '11.0.0',
   description: 'Shared TypeScript interfaces and TypedRequest contracts for the serve.zone ecosystem.'
 }

package/ts/requests/backup.ts

@@ -12,7 +12,7 @@ import type {
   TIsolatedRestoreResourceMapping,
 } from '../data/backup.js';
 import type { IService } from '../data/service.js';
-import type { IIdentity } from '../data/user.js';
+import type { IIdentity, IIdentityCredential } from '../data/user.js';
 
 export interface IReq_Any_Cloudly_CreateServiceBackup
 extends plugins.typedrequestInterfaces.implementsTR<
@@ -230,7 +230,8 @@ extends plugins.typedrequestInterfaces.implementsTR<
 > {
   method: 'createIsolatedRestore';
   request: {
-    identity: IIdentity;
+    /** Cloudly verifies this credential and derives all actor claims server-side. */
+    identity: IIdentityCredential;
     sourceBackupId: string;
     targetNodeName: string;
     purpose: string;
@@ -267,7 +268,8 @@ extends plugins.typedrequestInterfaces.implementsTR<
 > {
   method: 'getIsolatedRestores';
   request: {
-    identity: IIdentity;
+    /** Cloudly verifies this credential and derives all actor claims server-side. */
+    identity: IIdentityCredential;
     sourceBackupId?: string;
     sourceServiceId?: string;
     clusterId?: string;
@@ -294,7 +296,8 @@ extends plugins.typedrequestInterfaces.implementsTR<
 > {
   method: 'getIsolatedRestoreById';
   request: {
-    identity: IIdentity;
+    /** Cloudly verifies this credential and derives all actor claims server-side. */
+    identity: IIdentityCredential;
     restoreId: string;
   };
   response: {
@@ -396,7 +399,8 @@ extends plugins.typedrequestInterfaces.implementsTR<
 > {
   method: 'cleanupIsolatedRestore';
   request: {
-    identity: IIdentity;
+    /** Cloudly verifies this credential and derives all actor claims server-side. */
+    identity: IIdentityCredential;
     restoreId: string;
     reason: string;
   };