@serve.zone/interfaces 17.5.0 → 18.0.0

package/changelog.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 2026-07-23 - 18.0.0
+
+### Breaking Changes
+
+- require durable controller mutation fences for Web Push binding synchronization and exact-owner deletion
+- replace ID-only Web Push deletion requests with owner-scoped, fenced deletion requests
+
 ## 2026-07-23 - 17.5.0
 
 ### Features

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@serve.zone/interfaces',
-    version: '17.5.0',
+    version: '18.0.0',
     description: 'Shared TypeScript interfaces and TypedRequest contracts for the serve.zone ecosystem.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSx3QkFBd0I7SUFDOUIsT0FBTyxFQUFFLFFBQVE7SUFDakIsV0FBVyxFQUFFLHVGQUF1RjtDQUNyRyxDQUFBIn0=

package/dist_ts/data/webpush.d.ts

@@ -17,6 +17,21 @@ export interface IWebPushResourceOwner {
     gatewayClientId: string;
     appInstanceId: string;
 }
+export type TWebPushControllerIntent = 'enabled' | 'disabled' | 'deleted';
+/**
+ * Durable controller fence for owner-scoped Web Push mutations.
+ *
+ * `id` and `epoch` are immutable for one owner. `generation` is a positive,
+ * strictly monotonic controller sequence. Reusing a generation is permitted
+ * only for the exact same operation, intent, and canonical request payload.
+ */
+export interface IWebPushControllerMutation {
+    id: string;
+    epoch: string;
+    generation: number;
+    operationId: string;
+    intent: TWebPushControllerIntent;
+}
 /** JSON form returned by the browser Push API. */
 export interface IWebPushSubscription {
     endpoint: string;

package/dist_ts/requests/webpush.d.ts

@@ -1,6 +1,6 @@
 import * as plugins from '../plugins.js';
 import type { IIdentity } from '../data/user.js';
-import type { IWebPushBinding, IWebPushCredentialOneTimeSecret, IWebPushDeliveryStatus, IWebPushNotificationPayload, IWebPushResourceOwner, IWebPushServiceStatus, IWebPushSubscription, TWebPushCancellationTarget, TWebPushUrgency } from '../data/webpush.js';
+import type { IWebPushBinding, IWebPushControllerMutation, IWebPushCredentialOneTimeSecret, IWebPushDeliveryStatus, IWebPushNotificationPayload, IWebPushResourceOwner, IWebPushServiceStatus, IWebPushSubscription, TWebPushCancellationTarget, TWebPushUrgency } from '../data/webpush.js';
 /** Control-plane authentication. Never accepted by application delivery RPCs. */
 export interface IWebPushControlRequestAuth {
     identity?: IIdentity;
@@ -30,6 +30,7 @@ export interface IReq_SyncWebPushBinding extends plugins.typedrequestInterfaces.
     method: 'syncWebPushBinding';
     request: {
         auth: IWebPushControlRequestAuth;
+        controller: IWebPushControllerMutation;
         binding: TWebPushBindingSync;
     };
     response: {
@@ -43,7 +44,9 @@ export interface IReq_DeleteWebPushBinding extends plugins.typedrequestInterface
     method: 'deleteWebPushBinding';
     request: {
         auth: IWebPushControlRequestAuth;
-        id: string;
+        owner: IWebPushResourceOwner;
+        id?: string;
+        controller: IWebPushControllerMutation;
     };
     response: {
         success: boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@serve.zone/interfaces",
-  "version": "17.5.0",
+  "version": "18.0.0",
   "private": false,
   "description": "Shared TypeScript interfaces and TypedRequest contracts for the serve.zone ecosystem.",
   "exports": {

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/interfaces',
-  version: '17.5.0',
+  version: '18.0.0',
   description: 'Shared TypeScript interfaces and TypedRequest contracts for the serve.zone ecosystem.'
 }

package/ts/data/webpush.ts

@@ -33,6 +33,23 @@ export interface IWebPushResourceOwner {
   appInstanceId: string;
 }
 
+export type TWebPushControllerIntent = 'enabled' | 'disabled' | 'deleted';
+
+/**
+ * Durable controller fence for owner-scoped Web Push mutations.
+ *
+ * `id` and `epoch` are immutable for one owner. `generation` is a positive,
+ * strictly monotonic controller sequence. Reusing a generation is permitted
+ * only for the exact same operation, intent, and canonical request payload.
+ */
+export interface IWebPushControllerMutation {
+  id: string;
+  epoch: string;
+  generation: number;
+  operationId: string;
+  intent: TWebPushControllerIntent;
+}
+
 /** JSON form returned by the browser Push API. */
 export interface IWebPushSubscription {
   endpoint: string;

package/ts/requests/webpush.ts

@@ -2,6 +2,7 @@ import * as plugins from '../plugins.js';
 import type { IIdentity } from '../data/user.js';
 import type {
   IWebPushBinding,
+  IWebPushControllerMutation,
   IWebPushCredentialOneTimeSecret,
   IWebPushDeliveryStatus,
   IWebPushNotificationPayload,
@@ -54,6 +55,7 @@ export interface IReq_SyncWebPushBinding extends plugins.typedrequestInterfaces.
   method: 'syncWebPushBinding';
   request: {
     auth: IWebPushControlRequestAuth;
+    controller: IWebPushControllerMutation;
     binding: TWebPushBindingSync;
   };
   response: {
@@ -71,7 +73,9 @@ export interface IReq_DeleteWebPushBinding extends plugins.typedrequestInterface
   method: 'deleteWebPushBinding';
   request: {
     auth: IWebPushControlRequestAuth;
-    id: string;
+    owner: IWebPushResourceOwner;
+    id?: string;
+    controller: IWebPushControllerMutation;
   };
   response: {
     success: boolean;