Notification subscriptions

docs/rfcs/0020-push-notification-subscriptions.md

@@ -0,0 +1,135 @@
+---
+title: "Push Notification Subscriptions"
+type: rfc
+status: draft
+owner: "@pgherveou"
+pr:
+---
+
+# RFC 0020 — Push Notification Subscriptions
+
+## Summary
+
+Adds four TrUAPI methods — `push_add_rules`, `push_remove_rules`, `push_list_rules`, `push_set_rules` — that mirror the rule-management endpoints of the [v2 push backend spec](https://hackmd.io/@1JCaGppGSUqHtJilikYaKw/r16YTVg5Ze). From the product's point of view a rule is just a `topic`: the product does not specify the signer, the host injects it when forwarding the rule to its push backend. The backend then delivers a push to the user's device(s) whenever a signed statement matching the resulting `(signer, topic)` pair appears on the Statement Store. The product never sees push tokens.
+
+The method names use `add` / `remove` rather than `subscribe` / `unsubscribe` because the `_subscribe` suffix is reserved for streaming TrUAPI methods (e.g. `statementStore.subscribe`).
+
+## References
+
+- Push notifications, original (v1, peer-to-peer): https://hackmd.io/@1JCaGppGSUqHtJilikYaKw/SyPN2yV6lx
+- Push notifications backend design (v2, backend-mediated): https://hackmd.io/@1JCaGppGSUqHtJilikYaKw/r16YTVg5Ze
+
+This RFC exposes a TrUAPI-shaped surface over the rule-management API defined in the v2 spec.
+
+## Motivation
+
+The push-notifications v2 design assigns delivery to a host-side notification system that tails the Statement Store, verifies signatures, and delivers pushes only for `(signer, topic)` pairs the user has whitelisted. TrUAPI needs a primitive that lets a product manipulate that whitelist. When `signer` is omitted the host defaults to the calling product's own identity; when provided explicitly the product can subscribe to statements from a different product.
+
+### Worked example: festival announcements
+
+A conference product publishes festival-wide announcements as signed statements on a well-known topic. An attendee's app subscribes by calling `push_add_rules({ topics: [announcements_topic], signer: organizer_id })`, passing the organizer product's `ProductAccountId` explicitly. From that point on the user is woken up for new announcements even with the app closed:
+
+```
+Publisher app                                          Subscriber app
+(organizer side)                                       (attendee side)
+        |                                                       ^   |
+        |                                                       |   |
+        |                                              (6) push |   |  (1) pushAddRules({ topics: [T], signer: organizer_id })
+        |                                               back to |   |
+        |                                                caller |   |
+        |                                                       |   v
+        |                  +------------------------------------+---+------+
+        |                  |  Host                                         |
+        |                  |  stores rule (organizer_id, T)                |
+        |                  |    -> deliver to this subscriber              |
+        |                  +-----------------------+-----------------------+
+        |                                          ^
+        |                                          |  (4) tail / match rule
+        |                                          |
+        |                  +-----------------------+-----------------------+
+        |                  | Statement Store                               |
+        |                  +-----------------------+-----------------------+
+        |                                          ^
+        |   (2) compose signed statement           |
+        |--- (3) statementStore.submit(statement) -+
+```
+
+## Detailed Design
+
+### API
+
+Each TrUAPI method mirrors one backend endpoint:
+
+| TrUAPI method       | Backend endpoint                 | Purpose                          |
+| ------------------- | -------------------------------- | -------------------------------- |
+| `push_add_rules`    | `POST   /v1/subscriptions/rules` | add one or more rules            |
+| `push_remove_rules` | `DELETE /v1/subscriptions/rules` | remove one or more rules         |
+| `push_list_rules`   | `GET    /v1/subscriptions`       | snapshot of currently active set |
+| `push_set_rules`    | `PUT    /v1/subscriptions/rules` | atomic replace of the full set   |
+
+```rust
+#[wire(request_id = 164)]
+async fn push_add_rules(
+    &self, cx: &CallContext, request: HostPushAddRulesRequest,
+) -> Result<HostPushAddRulesResponse, CallError<HostPushAddRulesError>>;
+
+#[wire(request_id = 166)]
+async fn push_remove_rules(
+    &self, cx: &CallContext, request: HostPushRemoveRulesRequest,
+) -> Result<HostPushRemoveRulesResponse, CallError<HostPushRemoveRulesError>>;
+
+#[wire(request_id = 168)]
+async fn push_list_rules(
+    &self, cx: &CallContext, request: HostPushListRulesRequest,
+) -> Result<HostPushListRulesResponse, CallError<HostPushListRulesError>>;
+
+#[wire(request_id = 170)]
+async fn push_set_rules(
+    &self, cx: &CallContext, request: HostPushSetRulesRequest,
+) -> Result<HostPushSetRulesResponse, CallError<HostPushSetRulesError>>;
+```
+
+### Types
+
+`Topic` is reused from `v01::statement_store`.
+
+A rule is a `(signer, topic)` pair. When `signer` is `None` the host injects the calling product's own identity; set it explicitly to subscribe to statements published by a different product.
+
+```rust
+pub struct HostPushAddRulesRequest    { pub topics: Vec<Topic>, pub signer: Option<ProductAccountId> }
+pub struct HostPushRemoveRulesRequest { pub topics: Vec<Topic>, pub signer: Option<ProductAccountId> }
+pub struct HostPushListRulesRequest;
+pub struct HostPushSetRulesRequest    { pub topics: Vec<Topic>, pub signer: Option<ProductAccountId> }
+
+pub struct HostPushListRulesResponse {
+    pub topics: Vec<Topic>,
+}
+
+pub enum HostPushAddRulesError {
+    /// The user has not granted `DevicePermission::Notifications`. The host
+    /// SHOULD prompt for the permission lazily on the first such call from
+    /// a product; if the user dismisses or declines, this variant is
+    /// returned and no rules are stored.
+    PermissionDenied,
+    /// The notification system is currently unavailable; no rules were stored.
+    NotificationSystemUnavailable(String),
+    /// Catch-all. `reason`
+    Unknown { reason: String },
+}
+
+pub enum HostPushRemoveRulsError {
+    NotificationSystemUnavailable(String),
+    Unknown { reason: String },
+}
+
+pub enum HostPushListRulesError {
+    NotificationSystemUnavailable(String),
+    Unknown { reason: String },
+}
+
+pub enum HostPushSetRulesError {
+    PermissionDenied,
+    NotificationSystemUnavailable(String),
+    Unknown { reason: String },
+}
+```

docs/rfcs/_index.md

@@ -20,3 +20,4 @@ created: 2026-03-13
 | 0011   | [Simple Group Chat](0011-simple-group-chat.md)                           | draft              | @filvecchiato | [#131](https://github.com/paritytech/triangle-js-sdks/pull/131) |
 | 0015   | [Get User Primary DotNS Name](0015-get-user-id.md)                       | draft              | @valentunn    | [#144](https://github.com/paritytech/triangle-js-sdks/pull/144) |
 | 0019   | [Scheduled Push Notifications](0019-scheduled-notifications.md)          | draft              | @johnthecat   |                                                                 |
+| 0020   | [Push Notification Subscriptions](0020-push-notification-subscriptions.md) | draft            | @pgherveou    |                                                                 |

rust/crates/truapi/src/api/notifications.rs

@@ -1,14 +1,28 @@
 //! Unified [`Notifications`] trait.
 
 use crate::versioned::notifications::{
+    HostPushAddRulesError, HostPushAddRulesRequest, HostPushAddRulesResponse,
+    HostPushListRulesError, HostPushListRulesRequest, HostPushListRulesResponse,
     HostPushNotificationCancelError, HostPushNotificationCancelRequest,
     HostPushNotificationCancelResponse, HostPushNotificationError, HostPushNotificationRequest,
-    HostPushNotificationResponse,
+    HostPushNotificationResponse, HostPushRemoveRulesError, HostPushRemoveRulesRequest,
+    HostPushRemoveRulesResponse, HostPushSetRulesError, HostPushSetRulesRequest,
+    HostPushSetRulesResponse,
 };
 use crate::wire;
 use crate::{CallContext, CallError};
 
-/// Notification methods for locally-rendered push notifications.
+/// Notification methods: locally-rendered notifications and Statement Store
+/// subscription rules for backend-delivered pushes.
+///
+/// The rule-management methods (`push_add_rules`, `push_remove_rules`,
+/// `push_list_rules`, `push_set_rules`) mirror the rule-management endpoints
+/// of the push-notifications v2 backend design:
+///
+/// - <https://hackmd.io/@1JCaGppGSUqHtJilikYaKw/r16YTVg5Ze> — v2,
+///   backend-mediated
+/// - <https://hackmd.io/@1JCaGppGSUqHtJilikYaKw/SyPN2yV6lx> — v1,
+///   peer-to-peer (historical context)
 pub trait Notifications: Send + Sync {
     /// Send a push notification to the user.
     ///
@@ -58,4 +72,85 @@ pub trait Notifications: Send + Sync {
         cx: &CallContext,
         request: HostPushNotificationCancelRequest,
     ) -> Result<HostPushNotificationCancelResponse, CallError<HostPushNotificationCancelError>>;
+
+    /// Register one or more topics so the user is woken up by a push when a
+    /// signed statement matching any registered topic appears on the
+    /// Statement Store. Mirrors `POST /v1/subscriptions/rules` from the v2
+    /// push backend spec. The signer is injected by the host (based on the
+    /// calling product's identity) when relaying the rule to the backend.
+    ///
+    /// ```ts
+    /// const result = await truapi.notifications.pushAddRules({
+    ///   topics: ["0x00"],
+    /// });
+    /// result.match(
+    ///   () => console.log("ok"),
+    ///   (error) => console.error(error),
+    /// );
+    /// ```
+    #[wire(request_id = 164)]
+    async fn push_add_rules(
+        &self,
+        cx: &CallContext,
+        request: HostPushAddRulesRequest,
+    ) -> Result<HostPushAddRulesResponse, CallError<HostPushAddRulesError>>;
+
+    /// Remove one or more previously registered topics. Mirrors
+    /// `DELETE /v1/subscriptions/rules` from the v2 push backend spec.
+    ///
+    /// ```ts
+    /// const result = await truapi.notifications.pushRemoveRules({
+    ///   topics: ["0x00"],
+    /// });
+    /// result.match(
+    ///   () => console.log("ok"),
+    ///   (error) => console.error(error),
+    /// );
+    /// ```
+    #[wire(request_id = 166)]
+    async fn push_remove_rules(
+        &self,
+        cx: &CallContext,
+        request: HostPushRemoveRulesRequest,
+    ) -> Result<HostPushRemoveRulesResponse, CallError<HostPushRemoveRulesError>>;
+
+    /// List the calling product's currently registered topics. Useful for
+    /// reconciling local UI state with what the host believes is active
+    /// (e.g. after logout/login). Mirrors `GET /v1/subscriptions` from the
+    /// v2 push backend spec.
+    ///
+    /// ```ts
+    /// const result = await truapi.notifications.pushListRules({});
+    /// result.match(
+    ///   (value) => console.log(value.topics),
+    ///   (error) => console.error(error),
+    /// );
+    /// ```
+    #[wire(request_id = 168)]
+    async fn push_list_rules(
+        &self,
+        cx: &CallContext,
+        request: HostPushListRulesRequest,
+    ) -> Result<HostPushListRulesResponse, CallError<HostPushListRulesError>>;
+
+    /// Atomically replace the calling product's entire topic set with the
+    /// supplied vector. After a successful call, the product's active
+    /// topics are exactly `topics`. Mirrors `PUT /v1/subscriptions/rules`
+    /// from the v2 push backend spec.
+    ///
+    /// ```ts
+    /// const result = await truapi.notifications.pushSetRules({
+    ///   topics: ["0x00"],
+    /// });
+    /// result.match(
+    ///   () => console.log("ok"),
+    ///   (error) => console.error(error),
+    /// );
+    /// ```
+    #[wire(request_id = 170)]
+    async fn push_set_rules(
+        &self,
+        cx: &CallContext,
+        request: HostPushSetRulesRequest,
+    ) -> Result<HostPushSetRulesResponse, CallError<HostPushSetRulesError>>;
 }

rust/crates/truapi/src/v01/notifications.rs

@@ -1,5 +1,7 @@
 use parity_scale_codec::{Decode, Encode};
 
+use super::{ProductAccountId, Topic};
+
 /// Opaque identifier for a push notification, unique per product.
 pub type NotificationId = u32;
 
@@ -46,3 +48,99 @@ pub struct HostPushNotificationCancelRequest {
     /// The notification identifier returned by [`HostPushNotificationResponse`].
     pub id: NotificationId,
 }
+
+/// Request to register one or more topics the user wants to be woken up for.
+/// Each topic is added independently; existing rules are not touched.
+///
+/// When `signer` is `None` the host injects the calling product's own
+/// identity as the signer. Set `signer` explicitly to subscribe to
+/// statements published by a *different* product (e.g. a conference
+/// organizer's announcements).
+#[derive(Debug, Clone, PartialEq, Eq, Encode, Decode)]
+pub struct HostPushAddRulesRequest {
+    /// Topics to register.
+    pub topics: Vec<Topic>,
+    /// Signer whose statements should trigger a push. Defaults to the
+    /// calling product's own identity when `None`.
+    pub signer: Option<ProductAccountId>,
+}
+
+/// Failure modes for [`HostPushAddRulesRequest`].
+#[derive(Debug, Clone, PartialEq, Eq, Encode, Decode)]
+pub enum HostPushAddRulesError {
+    /// The user has not granted `DevicePermission::Notifications`.
+    PermissionDenied,
+    /// The notification system is currently unavailable; the rule was not
+    /// registered. The product MAY retry later.
+    NotificationSystemUnavailable(String),
+    /// Catch-all.
+    Unknown { reason: String },
+}
+
+/// Request to remove one or more previously registered topics.
+/// Topics not currently active are ignored.
+#[derive(Debug, Clone, PartialEq, Eq, Encode, Decode)]
+pub struct HostPushRemoveRulesRequest {
+    /// Topics to remove.
+    pub topics: Vec<Topic>,
+    /// Signer scope. When `None`, removes rules for the calling product's
+    /// own identity.
+    pub signer: Option<ProductAccountId>,
+}
+
+/// Failure modes for [`HostPushRemoveRulesRequest`].
+#[derive(Debug, Clone, PartialEq, Eq, Encode, Decode)]
+pub enum HostPushRemoveRulesError {
+    /// The notification system is currently unavailable; the rule may still
+    /// be active. The product MAY retry later.
+    NotificationSystemUnavailable(String),
+    /// Catch-all.
+    Unknown { reason: String },
+}
+
+/// Request to list the calling product's currently registered subscription
+/// rules. Has no fields; the host scopes results by the calling product
+/// identity.
+#[derive(Debug, Clone, PartialEq, Eq, Encode, Decode)]
+pub struct HostPushListRulesRequest {}
+
+/// Snapshot of the calling product's currently registered topics.
+#[derive(Debug, Clone, PartialEq, Eq, Encode, Decode)]
+pub struct HostPushListRulesResponse {
+    /// Currently registered topics for this product, in unspecified order.
+    pub topics: Vec<Topic>,
+}
+
+/// Failure modes for [`HostPushListRulesRequest`].
+#[derive(Debug, Clone, PartialEq, Eq, Encode, Decode)]
+pub enum HostPushListRulesError {
+    /// The notification system is currently unavailable. The product MAY
+    /// retry later.
+    NotificationSystemUnavailable(String),
+    /// Catch-all.
+    Unknown { reason: String },
+}
+
+/// Atomic replace of the full topic set for the given signer with the
+/// supplied vector. After a successful call, the active topics are exactly
+/// `topics`.
+#[derive(Debug, Clone, PartialEq, Eq, Encode, Decode)]
+pub struct HostPushSetRulesRequest {
+    /// Topics that should be active after the call.
+    pub topics: Vec<Topic>,
+    /// Signer scope. When `None`, replaces rules for the calling product's
+    /// own identity.
+    pub signer: Option<ProductAccountId>,
+}
+
+/// Failure modes for [`HostPushSetRulesRequest`].
+#[derive(Debug, Clone, PartialEq, Eq, Encode, Decode)]
+pub enum HostPushSetRulesError {
+    /// The user has not granted `DevicePermission::Notifications`.
+    PermissionDenied,
+    /// The notification system is currently unavailable; no change was
+    /// applied. The product MAY retry later.
+    NotificationSystemUnavailable(String),
+    /// Catch-all.
+    Unknown { reason: String },
+}

rust/crates/truapi/src/versioned/notifications.rs

@@ -9,4 +9,16 @@ versioned_type! {
     pub enum HostPushNotificationCancelRequest { V1 => v01::HostPushNotificationCancelRequest }
     pub enum HostPushNotificationCancelResponse { V1 }
     pub enum HostPushNotificationCancelError { V1 => v01::GenericError }
+    pub enum HostPushAddRulesRequest { V1 => v01::HostPushAddRulesRequest }
+    pub enum HostPushAddRulesResponse { V1 }
+    pub enum HostPushAddRulesError { V1 => v01::HostPushAddRulesError }
+    pub enum HostPushRemoveRulesRequest { V1 => v01::HostPushRemoveRulesRequest }
+    pub enum HostPushRemoveRulesResponse { V1 }
+    pub enum HostPushRemoveRulesError { V1 => v01::HostPushRemoveRulesError }
+    pub enum HostPushListRulesRequest { V1 => v01::HostPushListRulesRequest }
+    pub enum HostPushListRulesResponse { V1 => v01::HostPushListRulesResponse }
+    pub enum HostPushListRulesError { V1 => v01::HostPushListRulesError }
+    pub enum HostPushSetRulesRequest { V1 => v01::HostPushSetRulesRequest }
+    pub enum HostPushSetRulesResponse { V1 }
+    pub enum HostPushSetRulesError { V1 => v01::HostPushSetRulesError }
 }