@serve.zone/interfaces 20.1.0 → 21.0.0

package/dist_ts/requests/coremail.d.ts

@@ -0,0 +1,250 @@
+import type * as plugins from '../plugins.js';
+import type { ICoreMailEnvelope, ICoreMailDownloadGrant, ICoreMailGatewayMessageDescriptor, ICoreMailGatewayOutboundStatus, ICoreMailInboundDelivery, ICoreMailOutboundMessageDescriptor, ICoreMailRecipientResolution, ICoreMailReconciliationStatus, ICoreMailReplicaIdentity, ICoreMailSubmission, ICoreMailUploadGrant, TCoreMailInboundAckOutcome, TCoreMailSha256 } from '../data/coremail.js';
+import type { IMailConnectionInfo } from '../data/mail.js';
+export interface IReq_CoreMailAuthenticateWorkload extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailAuthenticateWorkload> {
+    method: 'coreMailAuthenticateWorkload';
+    request: {
+        bindingId: string;
+        credentialId: string;
+        credentialVersion: number;
+        credentialSecret: string;
+    };
+    response: {
+        authenticated: true;
+        credentialVersion: number;
+        capabilities: Array<'outbound' | 'inbound'>;
+    };
+}
+export interface IReq_CoreMailPrepareOutboundSubmission extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailPrepareOutboundSubmission> {
+    method: 'coreMailPrepareOutboundSubmission';
+    request: {
+        /** Required replay key. Authority is added by the authenticated server session. */
+        idempotencyKey: string;
+        message: ICoreMailOutboundMessageDescriptor;
+    };
+    response: {
+        submission: ICoreMailSubmission;
+        replayed: boolean;
+    };
+}
+export interface IReq_CoreMailPrepareOutboundPartUpload extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailPrepareOutboundPartUpload> {
+    method: 'coreMailPrepareOutboundPartUpload';
+    request: {
+        submissionId: string;
+        partId: string;
+    };
+    response: {
+        grant: ICoreMailUploadGrant;
+    };
+}
+export interface IReq_CoreMailCompleteOutboundPartUpload extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailCompleteOutboundPartUpload> {
+    method: 'coreMailCompleteOutboundPartUpload';
+    request: {
+        submissionId: string;
+        partId: string;
+        grantId: string;
+        sha256: TCoreMailSha256;
+        lengthBytes: number;
+    };
+    response: {
+        submission: ICoreMailSubmission;
+    };
+}
+export interface IReq_CoreMailFinalizeOutboundSubmission extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailFinalizeOutboundSubmission> {
+    method: 'coreMailFinalizeOutboundSubmission';
+    request: {
+        submissionId: string;
+    };
+    response: {
+        submission: ICoreMailSubmission;
+    };
+}
+export interface IReq_CoreMailGetOutboundSubmission extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailGetOutboundSubmission> {
+    method: 'coreMailGetOutboundSubmission';
+    request: {
+        submissionId: string;
+    };
+    response: {
+        submission: ICoreMailSubmission;
+    };
+}
+export interface IReq_CoreMailListInboundDeliveries extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailListInboundDeliveries> {
+    method: 'coreMailListInboundDeliveries';
+    request: {
+        afterDeliveryId?: string;
+        limit: number;
+    };
+    response: {
+        deliveries: ICoreMailInboundDelivery[];
+    };
+}
+export interface IReq_CoreMailPrepareInboundFetch extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailPrepareInboundFetch> {
+    method: 'coreMailPrepareInboundFetch';
+    request: {
+        deliveryId: string;
+    };
+    response: {
+        grant: ICoreMailDownloadGrant;
+    };
+}
+export interface IReq_CoreMailCompleteInboundFetch extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailCompleteInboundFetch> {
+    method: 'coreMailCompleteInboundFetch';
+    request: {
+        deliveryId: string;
+        grantId: string;
+        sha256: TCoreMailSha256;
+        lengthBytes: number;
+    };
+    response: {
+        delivery: ICoreMailInboundDelivery;
+    };
+}
+export interface IReq_CoreMailAcknowledgeInboundDelivery extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailAcknowledgeInboundDelivery> {
+    method: 'coreMailAcknowledgeInboundDelivery';
+    request: {
+        deliveryId: string;
+        outcome: TCoreMailInboundAckOutcome;
+    };
+    response: {
+        delivery: ICoreMailInboundDelivery;
+        replayed: boolean;
+    };
+}
+export interface IReq_CoreMailAuthenticateControl extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailAuthenticateControl> {
+    method: 'coreMailAuthenticateControl';
+    request: {
+        credentialId: string;
+        credentialVersion: number;
+        credentialSecret: string;
+    };
+    response: {
+        authenticated: true;
+        replica: ICoreMailReplicaIdentity;
+    };
+}
+export interface IReq_CoreMailPrepareDesiredStateUpload extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailPrepareDesiredStateUpload> {
+    method: 'coreMailPrepareDesiredStateUpload';
+    request: {
+        expectedAppliedConfigEpoch: number;
+        configEpoch: number;
+        desiredStateDigest: TCoreMailSha256;
+        lengthBytes: number;
+    };
+    response: {
+        reconciliationId: string;
+        grant: ICoreMailUploadGrant;
+        replayed: boolean;
+    };
+}
+export interface IReq_CoreMailApplyDesiredState extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailApplyDesiredState> {
+    method: 'coreMailApplyDesiredState';
+    request: {
+        reconciliationId: string;
+        grantId: string;
+        desiredStateDigest: TCoreMailSha256;
+        lengthBytes: number;
+    };
+    response: {
+        status: ICoreMailReconciliationStatus;
+    };
+}
+export interface IReq_CoreMailGetReconciliationStatus extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailGetReconciliationStatus> {
+    method: 'coreMailGetReconciliationStatus';
+    request: {
+        configEpoch: number;
+        desiredStateDigest: TCoreMailSha256;
+    };
+    response: {
+        status: ICoreMailReconciliationStatus;
+    };
+}
+export interface IReq_CoreMailGatewayAuthenticate extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailGatewayAuthenticate> {
+    method: 'coreMailGatewayAuthenticate';
+    request: {
+        credentialId: string;
+        credentialVersion: number;
+        credentialSecret: string;
+    };
+    response: {
+        authenticated: true;
+        credentialVersion: number;
+        /** dcrouter's authoritative, control-plane-bound origin for CoreMail transfer paths. */
+        coreMailTransferOrigin: string;
+    };
+}
+export interface IReq_CoreMailGatewayResolveRecipients extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailGatewayResolveRecipients> {
+    method: 'coreMailGatewayResolveRecipients';
+    request: {
+        envelope: ICoreMailEnvelope;
+        recipients: string[];
+        source: IMailConnectionInfo;
+    };
+    response: {
+        resolutions: ICoreMailRecipientResolution[];
+    };
+}
+export interface IReq_CoreMailGatewayPrepareInboundHandoff extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailGatewayPrepareInboundHandoff> {
+    method: 'coreMailGatewayPrepareInboundHandoff';
+    request: {
+        transportDeliveryId: string;
+        routingHandles: string[];
+        message: ICoreMailGatewayMessageDescriptor;
+        source: IMailConnectionInfo;
+    };
+    response: {
+        handoffId: string;
+        grant?: ICoreMailUploadGrant;
+        replayed: boolean;
+    };
+}
+export interface IReq_CoreMailGatewayCompleteInboundHandoff extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailGatewayCompleteInboundHandoff> {
+    method: 'coreMailGatewayCompleteInboundHandoff';
+    request: {
+        handoffId: string;
+        grantId: string;
+        sha256: TCoreMailSha256;
+        lengthBytes: number;
+    };
+    response: {
+        accepted: true;
+        deliveryIds: string[];
+        replayed: boolean;
+    };
+}
+export interface IReq_CoreMailGatewayPrepareOutboundHandoff extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailGatewayPrepareOutboundHandoff> {
+    method: 'coreMailGatewayPrepareOutboundHandoff';
+    request: {
+        transportSubmissionId: string;
+        submissionDigest: TCoreMailSha256;
+        message: ICoreMailGatewayMessageDescriptor;
+        /** CoreMail-issued GET grant. dcrouter resolves the path against the authenticated peer. */
+        grant: ICoreMailDownloadGrant;
+    };
+    response: {
+        transportMessageId: string;
+        status: ICoreMailGatewayOutboundStatus;
+        replayed: boolean;
+    };
+}
+export interface IReq_CoreMailGatewayCompleteOutboundHandoff extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailGatewayCompleteOutboundHandoff> {
+    method: 'coreMailGatewayCompleteOutboundHandoff';
+    request: {
+        transportMessageId: string;
+        grantId: string;
+        sha256: TCoreMailSha256;
+        lengthBytes: number;
+    };
+    response: {
+        status: ICoreMailGatewayOutboundStatus;
+        replayed: boolean;
+    };
+}
+export interface IReq_CoreMailGatewayGetOutboundStatus extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CoreMailGatewayGetOutboundStatus> {
+    method: 'coreMailGatewayGetOutboundStatus';
+    request: {
+        transportMessageId: string;
+    };
+    response: {
+        status: ICoreMailGatewayOutboundStatus;
+    };
+}

package/dist_ts/requests/coremail.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY29yZW1haWwuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi90cy9yZXF1ZXN0cy9jb3JlbWFpbC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiIn0=

package/dist_ts/requests/index.d.ts

@@ -6,6 +6,7 @@ import * as backupRequests from './backup.js';
 import * as certificateRequests from './certificate.js';
 import * as clusterRequests from './cluster.js';
 import * as configRequests from './config.js';
+import * as coreMailRequests from './coremail.js';
 import * as corestoreRequests from './corestore.js';
 import * as deploymentRequests from './deployment.js';
 import * as dnsRequests from './dns.js';
@@ -33,7 +34,7 @@ import * as statusRequests from './status.js';
 import * as taskRequests from './task.js';
 import * as versionRequests from './version.js';
 import * as webPushRequests from './webpush.js';
-export { adminRequests as admin, appStoreRequests as appstore, baremetalRequests as baremetal, baseOsRequests as baseos, backupRequests as backup, certificateRequests as certificate, clusterRequests as cluster, configRequests as config, corestoreRequests as corestore, deploymentRequests as deployment, dnsRequests as dns, domainRequests as domain, externalRegistryRequests as externalRegistry, gatewayRequests as gateway, hostedAppRequests as hostedapp, identityRequests as identity, imageRequests as image, informRequests as inform, logRequests as log, mailRequests as mail, migrationRequests as migration, networkRequests as network, nodeRequests as node, platformRequests as platform, routingRequests as routing, secretRequests as secret, secretBundleRequests as secretbundle, secretGroupRequests as secretgroup, serverRequests as server, serviceRequests as service, settingsRequests as settings, statusRequests as status, taskRequests as task, versionRequests as version, webPushRequests as webpush, };
+export { adminRequests as admin, appStoreRequests as appstore, baremetalRequests as baremetal, baseOsRequests as baseos, backupRequests as backup, certificateRequests as certificate, clusterRequests as cluster, configRequests as config, coreMailRequests as coremail, corestoreRequests as corestore, deploymentRequests as deployment, dnsRequests as dns, domainRequests as domain, externalRegistryRequests as externalRegistry, gatewayRequests as gateway, hostedAppRequests as hostedapp, identityRequests as identity, imageRequests as image, informRequests as inform, logRequests as log, mailRequests as mail, migrationRequests as migration, networkRequests as network, nodeRequests as node, platformRequests as platform, routingRequests as routing, secretRequests as secret, secretBundleRequests as secretbundle, secretGroupRequests as secretgroup, serverRequests as server, serviceRequests as service, settingsRequests as settings, statusRequests as status, taskRequests as task, versionRequests as version, webPushRequests as webpush, };
 export * from './inform.js';
 export * from './hostedapp.js';
 export * from './mail.js';

package/dist_ts/requests/index.js

@@ -7,6 +7,7 @@ import * as backupRequests from './backup.js';
 import * as certificateRequests from './certificate.js';
 import * as clusterRequests from './cluster.js';
 import * as configRequests from './config.js';
+import * as coreMailRequests from './coremail.js';
 import * as corestoreRequests from './corestore.js';
 import * as deploymentRequests from './deployment.js';
 import * as dnsRequests from './dns.js';
@@ -34,9 +35,9 @@ import * as statusRequests from './status.js';
 import * as taskRequests from './task.js';
 import * as versionRequests from './version.js';
 import * as webPushRequests from './webpush.js';
-export { adminRequests as admin, appStoreRequests as appstore, baremetalRequests as baremetal, baseOsRequests as baseos, backupRequests as backup, certificateRequests as certificate, clusterRequests as cluster, configRequests as config, corestoreRequests as corestore, deploymentRequests as deployment, dnsRequests as dns, domainRequests as domain, externalRegistryRequests as externalRegistry, gatewayRequests as gateway, hostedAppRequests as hostedapp, identityRequests as identity, imageRequests as image, informRequests as inform, logRequests as log, mailRequests as mail, migrationRequests as migration, networkRequests as network, nodeRequests as node, platformRequests as platform, routingRequests as routing, secretRequests as secret, secretBundleRequests as secretbundle, secretGroupRequests as secretgroup, serverRequests as server, serviceRequests as service, settingsRequests as settings, statusRequests as status, taskRequests as task, versionRequests as version, webPushRequests as webpush, };
+export { adminRequests as admin, appStoreRequests as appstore, baremetalRequests as baremetal, baseOsRequests as baseos, backupRequests as backup, certificateRequests as certificate, clusterRequests as cluster, configRequests as config, coreMailRequests as coremail, corestoreRequests as corestore, deploymentRequests as deployment, dnsRequests as dns, domainRequests as domain, externalRegistryRequests as externalRegistry, gatewayRequests as gateway, hostedAppRequests as hostedapp, identityRequests as identity, imageRequests as image, informRequests as inform, logRequests as log, mailRequests as mail, migrationRequests as migration, networkRequests as network, nodeRequests as node, platformRequests as platform, routingRequests as routing, secretRequests as secret, secretBundleRequests as secretbundle, secretGroupRequests as secretgroup, serverRequests as server, serviceRequests as service, settingsRequests as settings, statusRequests as status, taskRequests as task, versionRequests as version, webPushRequests as webpush, };
 export * from './inform.js';
 export * from './hostedapp.js';
 export * from './mail.js';
 export * from './webpush.js';
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi90cy9yZXF1ZXN0cy9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLEtBQUssT0FBTyxNQUFNLGVBQWUsQ0FBQztBQUV6QyxPQUFPLEtBQUssYUFBYSxNQUFNLFlBQVksQ0FBQztBQUM1QyxPQUFPLEtBQUssZ0JBQWdCLE1BQU0sZUFBZSxDQUFDO0FBQ2xELE9BQU8sS0FBSyxpQkFBaUIsTUFBTSxnQkFBZ0IsQ0FBQztBQUNwRCxPQUFPLEtBQUssY0FBYyxNQUFNLGFBQWEsQ0FBQztBQUM5QyxPQUFPLEtBQUssY0FBYyxNQUFNLGFBQWEsQ0FBQztBQUM5QyxPQUFPLEtBQUssbUJBQW1CLE1BQU0sa0JBQWtCLENBQUM7QUFDeEQsT0FBTyxLQUFLLGVBQWUsTUFBTSxjQUFjLENBQUM7QUFDaEQsT0FBTyxLQUFLLGNBQWMsTUFBTSxhQUFhLENBQUM7QUFDOUMsT0FBTyxLQUFLLGlCQUFpQixNQUFNLGdCQUFnQixDQUFDO0FBQ3BELE9BQU8sS0FBSyxrQkFBa0IsTUFBTSxpQkFBaUIsQ0FBQztBQUN0RCxPQUFPLEtBQUssV0FBVyxNQUFNLFVBQVUsQ0FBQztBQUN4QyxPQUFPLEtBQUssY0FBYyxNQUFNLGFBQWEsQ0FBQztBQUM5QyxPQUFPLEtBQUssd0JBQXdCLE1BQU0sdUJBQXVCLENBQUM7QUFDbEUsT0FBTyxLQUFLLGVBQWUsTUFBTSxjQUFjLENBQUM7QUFDaEQsT0FBTyxLQUFLLGlCQUFpQixNQUFNLGdCQUFnQixDQUFDO0FBQ3BELE9BQU8sS0FBSyxnQkFBZ0IsTUFBTSxlQUFlLENBQUM7QUFDbEQsT0FBTyxLQUFLLGFBQWEsTUFBTSxZQUFZLENBQUM7QUFDNUMsT0FBTyxLQUFLLGNBQWMsTUFBTSxhQUFhLENBQUM7QUFDOUMsT0FBTyxLQUFLLFdBQVcsTUFBTSxVQUFVLENBQUM7QUFDeEMsT0FBTyxLQUFLLFlBQVksTUFBTSxXQUFXLENBQUM7QUFDMUMsT0FBTyxLQUFLLGlCQUFpQixNQUFNLGdCQUFnQixDQUFDO0FBQ3BELE9BQU8sS0FBSyxlQUFlLE1BQU0sY0FBYyxDQUFDO0FBQ2hELE9BQU8sS0FBSyxZQUFZLE1BQU0sV0FBVyxDQUFDO0FBQzFDLE9BQU8sS0FBSyxnQkFBZ0IsTUFBTSxlQUFlLENBQUM7QUFDbEQsT0FBTyxLQUFLLGVBQWUsTUFBTSxjQUFjLENBQUM7QUFDaEQsT0FBTyxLQUFLLGNBQWMsTUFBTSxhQUFhLENBQUM7QUFDOUMsT0FBTyxLQUFLLG9CQUFvQixNQUFNLG1CQUFtQixDQUFDO0FBQzFELE9BQU8sS0FBSyxtQkFBbUIsTUFBTSxrQkFBa0IsQ0FBQztBQUN4RCxPQUFPLEtBQUssY0FBYyxNQUFNLGFBQWEsQ0FBQztBQUM5QyxPQUFPLEtBQUssZUFBZSxNQUFNLGNBQWMsQ0FBQztBQUNoRCxPQUFPLEtBQUssZ0JBQWdCLE1BQU0sZUFBZSxDQUFDO0FBQ2xELE9BQU8sS0FBSyxjQUFjLE1BQU0sYUFBYSxDQUFDO0FBQzlDLE9BQU8sS0FBSyxZQUFZLE1BQU0sV0FBVyxDQUFDO0FBQzFDLE9BQU8sS0FBSyxlQUFlLE1BQU0sY0FBYyxDQUFDO0FBQ2hELE9BQU8sS0FBSyxlQUFlLE1BQU0sY0FBYyxDQUFDO0FBRWhELE9BQU8sRUFDTCxhQUFhLElBQUksS0FBSyxFQUN0QixnQkFBZ0IsSUFBSSxRQUFRLEVBQzVCLGlCQUFpQixJQUFJLFNBQVMsRUFDOUIsY0FBYyxJQUFJLE1BQU0sRUFDeEIsY0FBYyxJQUFJLE1BQU0sRUFDeEIsbUJBQW1CLElBQUksV0FBVyxFQUNsQyxlQUFlLElBQUksT0FBTyxFQUMxQixjQUFjLElBQUksTUFBTSxFQUN4QixpQkFBaUIsSUFBSSxTQUFTLEVBQzlCLGtCQUFrQixJQUFJLFVBQVUsRUFDaEMsV0FBVyxJQUFJLEdBQUcsRUFDbEIsY0FBYyxJQUFJLE1BQU0sRUFDeEIsd0JBQXdCLElBQUksZ0JBQWdCLEVBQzVDLGVBQWUsSUFBSSxPQUFPLEVBQzFCLGlCQUFpQixJQUFJLFNBQVMsRUFDOUIsZ0JBQWdCLElBQUksUUFBUSxFQUM1QixhQUFhLElBQUksS0FBSyxFQUN0QixjQUFjLElBQUksTUFBTSxFQUN4QixXQUFXLElBQUksR0FBRyxFQUNsQixZQUFZLElBQUksSUFBSSxFQUNwQixpQkFBaUIsSUFBSSxTQUFTLEVBQzlCLGVBQWUsSUFBSSxPQUFPLEVBQzFCLFlBQVksSUFBSSxJQUFJLEVBQ3BCLGdCQUFnQixJQUFJLFFBQVEsRUFDNUIsZUFBZSxJQUFJLE9BQU8sRUFDMUIsY0FBYyxJQUFJLE1BQU0sRUFDeEIsb0JBQW9CLElBQUksWUFBWSxFQUNwQyxtQkFBbUIsSUFBSSxXQUFXLEVBQ2xDLGNBQWMsSUFBSSxNQUFNLEVBQ3hCLGVBQWUsSUFBSSxPQUFPLEVBQzFCLGdCQUFnQixJQUFJLFFBQVEsRUFDNUIsY0FBYyxJQUFJLE1BQU0sRUFDeEIsWUFBWSxJQUFJLElBQUksRUFDcEIsZUFBZSxJQUFJLE9BQU8sRUFDMUIsZUFBZSxJQUFJLE9BQU8sR0FDM0IsQ0FBQztBQUVGLGNBQWMsYUFBYSxDQUFDO0FBQzVCLGNBQWMsZ0JBQWdCLENBQUM7QUFDL0IsY0FBYyxXQUFXLENBQUM7QUFDMUIsY0FBYyxjQUFjLENBQUMifQ==
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@serve.zone/interfaces",
-  "version": "20.1.0",
+  "version": "21.0.0",
   "private": false,
   "description": "Shared TypeScript interfaces and TypedRequest contracts for the serve.zone ecosystem.",
   "exports": {
@@ -17,7 +17,7 @@
   "author": "Task Venture Capital GmbH",
   "license": "MIT",
   "dependencies": {
-    "@api.global/typedrequest-interfaces": "^3.0.19",
+    "@api.global/typedrequest-interfaces": "^4.0.0",
     "@push.rocks/smartlog-interfaces": "^3.0.2",
     "@tsclass/tsclass": "^9.5.1"
   },

package/readme.md

@@ -480,6 +480,69 @@ const provisioning: requests.gateway.IReq_ProvisionGatewayClientCredential['requ
 
 `getGatewayClientContext` returns effective live policy. A `gatewayClient` role necessarily includes the credential ID, bound client ID/type, and `policyGeneration`; consumers should reject admin/operator or mismatched contexts rather than falling back to a caller-supplied owner ID. `getGatewayClientMailOverview` provides an owner-scoped domain and recent-message summary. `getGatewayClientMailDomainCount` derives ownership exclusively from the authenticating gateway credential and returns `{ count: number }` for its distinct configured mail domains. Cloudly therefore uses only `dcrouterGatewayApiToken`; the former `dcrouterOpsApiToken` setting is not part of `data.ICloudlySettings`.
 
+### CoreMail contracts
+
+`requests.coremail` is the shared contract boundary for authenticated workload
+sessions, Coreflow reconciliation, and the CoreMail-to-dcrouter gateway
+session. Only the three authentication handshakes carry reusable peer
+credentials. Subsequent transfer operations may carry a scoped, short-lived,
+one-time bearer capability, while every subsequent workload request derives
+tenant, service, binding, capabilities, allowed senders, and credential version
+from the server-owned TypedSocket peer.
+
+Large content never travels inside TypedRequest JSON. Outbound body parts and
+attachments use prepare/upload/complete operations with short-lived one-time
+HTTP transfer grants. Inbound delivery uses bounded delivery listing followed
+by prepare/fetch/complete and an explicit acknowledgement after the workload
+has processed the exact byte count and SHA-256 digest. `data.coreMailLimits`
+defines the 64 KiB control-frame boundary, bounded structured content, the
+30 MiB serialized MIME ceiling, transfer deadlines, and five-minute grant
+lifetime.
+
+Coreflow applies `data.ICoreMailDesiredState` with a config-epoch
+compare-and-set fence. It stages the digest-fenced JSON snapshot through a
+bounded one-time HTTP upload, then applies it by reconciliation ID, so a large
+binding set never bypasses the 64 KiB control-frame boundary. Desired bindings
+contain password verifiers and secret references only, never plaintext
+workload or dcrouter credentials.
+Use `data.normalizeCoreMailDesiredState`,
+`data.canonicalizeCoreMailDesiredState`, and
+`data.createCoreMailDesiredStateDigest` at every producer and consumer
+boundary. Use `data.verifyCoreMailDesiredStateDigest` before applying a staged
+snapshot, `data.normalizeCoreMailCredentialVerifier` before accepting verifier
+metadata, `data.normalizeCoreMailControlBootstrap` for startup authority, and
+`data.normalizeCoreMailGatewayPeerDesiredState` for dcrouter peer state. The
+normalizers reject unknown fields, noncanonical mailboxes,
+ambiguous active recipient ownership, malformed SHA-256 values, and
+credential-lifecycle inconsistencies. CoreMail credential verifiers use the
+versioned `argon2id-v1` format and the exact policy exported as
+`data.coreMailCredentialVerifierPolicy`.
+
+`data.ICoreMailControlBootstrap` is installed before ordinary reconciliation.
+It contains the CoreMail service identity and verifier metadata only. The
+matching plaintext control credential is delivered exclusively to Coreflow
+through resolved runtime secrets. `data.coreMailRuntimeKeys` publishes the
+canonical environment keys for the verifier-only bootstrap payload and the
+separate control and gateway secret values; no consumer may derive or embed
+plaintext material in desired state.
+
+`data.ICoreMailGatewayPeerDesiredState` gives dcrouter the authoritative HTTPS
+CoreMail transfer origin associated with an authenticated CoreMail service.
+The origin is control-plane state and must never be inferred from a socket,
+Host header, TypedSocket tag, or unrestricted peer input. The gateway
+authentication response repeats dcrouter's bound origin so CoreMail can reject
+configuration drift before handing over a path-only transfer grant.
+
+Control and gateway credential rotation is ordered: provision the candidate
+plaintext through resolved runtime secrets, publish and activate the matching
+`argon2id-v1` verifier, roll or reconnect every affected replica, observe
+per-task authentication and readiness, then mark the previous verifier
+`retiring` with `acceptUntil`. Remove the previous verifier and secret only
+after its acceptance window has elapsed and no session uses that version.
+Reconciliation status carries the exact CoreMail task, rollout generation, and
+image digest so Coreflow can correlate every response with its authoritative
+current task roster.
+
 Request groups are exported by product area:
 
 - `requests.admin`
@@ -490,6 +553,7 @@ Request groups are exported by product area:
 - `requests.certificate`
 - `requests.cluster`
 - `requests.config`
+- `requests.coremail`
 - `requests.corestore`
 - `requests.deployment`
 - `requests.dns`

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/interfaces',
-  version: '20.1.0',
+  version: '21.0.0',
   description: 'Shared TypeScript interfaces and TypedRequest contracts for the serve.zone ecosystem.'
 }