@serve.zone/dcrouter 17.2.4 → 17.3.0

package/dist_ts/config/classes.gateway-client-manager.js

@@ -1,10 +1,14 @@
 import * as plugins from '../plugins.js';
-import { GatewayClientDoc } from '../db/index.js';
+import { GatewayClientDoc, } from '../db/index.js';
 const defaultCapabilities = {
     readDomains: true,
     readDnsRecords: true,
+    readRoutes: true,
     syncRoutes: true,
     syncDnsRecords: false,
+    readMail: false,
+    manageMail: false,
+    readCertificates: false,
     requestCertificates: false,
 };
 export class GatewayClientManager {
@@ -31,56 +35,415 @@ export class GatewayClientManager {
         doc.type = options.type;
         doc.name = options.name.trim();
         doc.description = options.description?.trim() || undefined;
-        doc.hostnamePatterns = this.normalizeStringList(options.hostnamePatterns || []);
+        doc.hostnamePatterns = this.normalizeHostnamePatterns(options.hostnamePatterns || []);
         doc.allowedRouteTargets = this.normalizeAllowedRouteTargets(options.allowedRouteTargets || []);
-        doc.capabilities = { ...defaultCapabilities, ...(options.capabilities || {}) };
+        doc.capabilities = options.applyCapabilityDefaults === false
+            ? { ...(options.capabilities || {}) }
+            : { ...defaultCapabilities, ...(options.capabilities || {}) };
         doc.enabled = true;
+        doc.policyGeneration = 1;
+        doc.credentialSequence = 0;
+        doc.activeCredentialSequence = 0;
+        doc.mutationRevision = 1;
+        doc.pendingProvisioning = null;
         doc.createdAt = now;
         doc.updatedAt = now;
         doc.createdBy = options.createdBy;
         await doc.save();
         return this.toPublicClient(doc);
     }
-    async updateClient(id, patch) {
+    async updateClient(id, patch, options = {}) {
         const doc = await GatewayClientDoc.findById(id);
         if (!doc)
             return null;
-        if (patch.name !== undefined)
-            doc.name = patch.name.trim();
-        if (patch.description !== undefined)
-            doc.description = patch.description.trim() || undefined;
-        if (patch.hostnamePatterns !== undefined)
-            doc.hostnamePatterns = this.normalizeStringList(patch.hostnamePatterns);
-        if (patch.allowedRouteTargets !== undefined)
-            doc.allowedRouteTargets = this.normalizeAllowedRouteTargets(patch.allowedRouteTargets);
-        if (patch.capabilities !== undefined)
-            doc.capabilities = { ...defaultCapabilities, ...patch.capabilities };
-        if (patch.enabled !== undefined)
-            doc.enabled = patch.enabled;
-        doc.updatedAt = Date.now();
-        await doc.save();
-        return this.toPublicClient(doc);
+        const expectedRevision = this.normalizeMutationRevision(doc.mutationRevision);
+        const priorPolicy = JSON.stringify({
+            hostnamePatterns: doc.hostnamePatterns || [],
+            allowedRouteTargets: doc.allowedRouteTargets || [],
+            capabilities: doc.capabilities || {},
+            enabled: doc.enabled,
+        });
+        const nextName = patch.name !== undefined ? patch.name.trim() : doc.name;
+        const nextDescription = patch.description !== undefined
+            ? patch.description.trim() || undefined
+            : doc.description;
+        const nextHostnamePatterns = patch.hostnamePatterns !== undefined
+            ? this.normalizeHostnamePatterns(patch.hostnamePatterns)
+            : doc.hostnamePatterns || [];
+        const nextAllowedRouteTargets = patch.allowedRouteTargets !== undefined
+            ? this.normalizeAllowedRouteTargets(patch.allowedRouteTargets)
+            : doc.allowedRouteTargets || [];
+        const nextCapabilities = patch.capabilities !== undefined
+            ? options.applyCapabilityDefaults === false
+                ? { ...patch.capabilities }
+                : { ...defaultCapabilities, ...patch.capabilities }
+            : doc.capabilities || {};
+        const nextEnabled = patch.enabled !== undefined ? patch.enabled : doc.enabled;
+        const nextPolicy = JSON.stringify({
+            hostnamePatterns: nextHostnamePatterns,
+            allowedRouteTargets: nextAllowedRouteTargets,
+            capabilities: nextCapabilities,
+            enabled: nextEnabled,
+        });
+        const policyGeneration = this.normalizePolicyGeneration(doc.policyGeneration)
+            + (priorPolicy === nextPolicy ? 0 : 1);
+        const updatedAt = Date.now();
+        const updated = await GatewayClientDoc.compareAndSet(id, expectedRevision, {
+            name: nextName,
+            hostnamePatterns: structuredClone(nextHostnamePatterns),
+            allowedRouteTargets: structuredClone(nextAllowedRouteTargets),
+            capabilities: structuredClone(nextCapabilities),
+            enabled: nextEnabled,
+            policyGeneration,
+            pendingProvisioning: null,
+            updatedAt,
+            ...(nextDescription ? { description: nextDescription } : {}),
+        }, nextDescription ? [] : ['description']);
+        if (!updated) {
+            if (await GatewayClientDoc.findById(id))
+                throw new Error('Gateway client changed concurrently; retry the update');
+            return null;
+        }
+        return this.toPublicClient(updated);
     }
     async deleteClient(id) {
         const doc = await GatewayClientDoc.findById(id);
         if (!doc)
             return false;
-        await doc.delete();
-        return true;
+        const deleted = await GatewayClientDoc.deleteIfRevision(id, this.normalizeMutationRevision(doc.mutationRevision));
+        if (!deleted && await GatewayClientDoc.findById(id)) {
+            throw new Error('Gateway client changed concurrently; retry the deletion');
+        }
+        return deleted;
+    }
+    async upsertClient(spec, createdBy) {
+        const id = this.normalizeId(spec.id);
+        if (!id)
+            throw new Error('gateway client id is required');
+        const normalized = {
+            type: spec.type,
+            name: spec.name.trim(),
+            description: spec.description?.trim() || undefined,
+            hostnamePatterns: this.normalizeHostnamePatterns(spec.hostnamePatterns || []),
+            allowedRouteTargets: this.normalizeAllowedRouteTargets(spec.allowedRouteTargets || []),
+            capabilities: { ...(spec.capabilities || {}) },
+            enabled: spec.enabled ?? true,
+        };
+        if (!normalized.name)
+            throw new Error('gateway client name is required');
+        const existing = await GatewayClientDoc.findById(id);
+        if (!existing) {
+            const gatewayClient = await this.createClient({
+                id,
+                type: normalized.type,
+                name: normalized.name,
+                description: normalized.description,
+                hostnamePatterns: normalized.hostnamePatterns,
+                allowedRouteTargets: normalized.allowedRouteTargets,
+                capabilities: normalized.capabilities,
+                createdBy,
+                applyCapabilityDefaults: false,
+            });
+            if (!normalized.enabled) {
+                return {
+                    action: 'created',
+                    gatewayClient: (await this.updateClient(id, { enabled: false })),
+                };
+            }
+            return { action: 'created', gatewayClient };
+        }
+        if (existing.type !== normalized.type) {
+            throw new Error('gateway client type cannot be changed');
+        }
+        const current = {
+            type: existing.type,
+            name: existing.name,
+            description: existing.description?.trim() || undefined,
+            hostnamePatterns: this.normalizeHostnamePatterns(existing.hostnamePatterns || []),
+            allowedRouteTargets: this.normalizeAllowedRouteTargets(existing.allowedRouteTargets || []),
+            capabilities: { ...(existing.capabilities || {}) },
+            enabled: existing.enabled,
+        };
+        if (JSON.stringify(current) === JSON.stringify(normalized)) {
+            return { action: 'unchanged', gatewayClient: this.toPublicClient(existing) };
+        }
+        const gatewayClient = await this.updateClient(id, normalized, { applyCapabilityDefaults: false });
+        if (!gatewayClient)
+            throw new Error('gateway client disappeared during provisioning');
+        return { action: 'updated', gatewayClient };
+    }
+    /**
+     * Stage an idempotent provisioning policy without changing the live policy.
+     * Sequence gaps after a later credential write failure are intentional.
+     */
+    async stageClientProvisioning(spec, stagedBy) {
+        const id = this.normalizeId(spec.id);
+        if (!id)
+            throw new Error('gateway client id is required');
+        const normalized = this.normalizeProvisioningSpec(spec);
+        const existing = await GatewayClientDoc.findById(id);
+        const now = Date.now();
+        if (!existing) {
+            const doc = new GatewayClientDoc();
+            doc.id = id;
+            doc.type = normalized.type;
+            doc.name = normalized.name;
+            doc.description = normalized.description || undefined;
+            doc.hostnamePatterns = normalized.hostnamePatterns;
+            doc.allowedRouteTargets = normalized.allowedRouteTargets;
+            doc.capabilities = normalized.capabilities;
+            doc.enabled = normalized.enabled;
+            doc.policyGeneration = 1;
+            doc.credentialSequence = 1;
+            doc.activeCredentialSequence = 0;
+            doc.mutationRevision = 1;
+            doc.createdAt = now;
+            doc.updatedAt = now;
+            doc.createdBy = stagedBy;
+            const policyDigest = this.digestPolicy(id, normalized, 1);
+            doc.pendingProvisioning = {
+                ...structuredClone(normalized),
+                policyGeneration: 1,
+                policyDigest,
+                credentialSequence: 1,
+                stagedAt: now,
+                stagedBy,
+            };
+            await doc.save();
+            return {
+                action: 'created',
+                gatewayClient: this.toPublicPendingClient(doc, doc.pendingProvisioning),
+                credentialSequence: 1,
+                policyDigest,
+            };
+        }
+        if (existing.type !== normalized.type) {
+            throw new Error('gateway client type cannot be changed');
+        }
+        const active = this.activePolicyFromDoc(existing);
+        const activeGeneration = this.normalizePolicyGeneration(existing.policyGeneration);
+        const credentialSequence = this.normalizeCredentialSequence(existing.credentialSequence) + 1;
+        const policyUnchanged = this.digestPolicy(id, active, activeGeneration)
+            === this.digestPolicy(id, normalized, activeGeneration);
+        const metadataChanged = active.name !== normalized.name
+            || active.description !== normalized.description;
+        const policyGeneration = policyUnchanged ? activeGeneration : activeGeneration + 1;
+        const policyDigest = this.digestPolicy(id, normalized, policyGeneration);
+        const pendingProvisioning = {
+            ...structuredClone(normalized),
+            policyGeneration,
+            policyDigest,
+            credentialSequence,
+            stagedAt: now,
+            stagedBy,
+        };
+        const set = {
+            credentialSequence,
+            pendingProvisioning,
+            updatedAt: now,
+        };
+        const unset = [];
+        if (policyUnchanged) {
+            set.name = normalized.name;
+            if (normalized.description) {
+                set.description = normalized.description;
+            }
+            else {
+                unset.push('description');
+            }
+        }
+        const updated = await GatewayClientDoc.compareAndSet(id, this.normalizeMutationRevision(existing.mutationRevision), set, unset);
+        if (!updated)
+            throw new Error('Gateway client changed concurrently; retry provisioning');
+        return {
+            action: policyUnchanged && !metadataChanged ? 'unchanged' : 'updated',
+            gatewayClient: this.toPublicPendingClient(updated, updated.pendingProvisioning),
+            credentialSequence,
+            policyDigest,
+        };
+    }
+    /** Resolve the exact durable policy a provisioned credential was issued for. */
+    async getClientForProvisionedCredential(idArg, typeArg, lifecycleArg) {
+        const doc = await GatewayClientDoc.findById(idArg);
+        if (!doc || doc.type !== typeArg)
+            return null;
+        const activeGeneration = this.normalizePolicyGeneration(doc.policyGeneration);
+        if (lifecycleArg.state === 'active'
+            && lifecycleArg.sequence === this.normalizeCredentialSequence(doc.activeCredentialSequence)
+            && lifecycleArg.policyGeneration === activeGeneration
+            && lifecycleArg.policyDigest === this.digestPolicy(doc.id, this.activePolicyFromDoc(doc), activeGeneration)) {
+            return this.toPublicClient(doc);
+        }
+        const pending = doc.pendingProvisioning;
+        if (lifecycleArg.state === 'candidate'
+            && pending
+            && this.normalizeCredentialSequence(doc.credentialSequence) === lifecycleArg.sequence
+            && pending.credentialSequence === lifecycleArg.sequence
+            && pending.policyGeneration === lifecycleArg.policyGeneration
+            && pending.policyDigest === lifecycleArg.policyDigest) {
+            return this.toPublicPendingClient(doc, pending);
+        }
+        return null;
+    }
+    /** Promote only the pending policy owned by this exact credential sequence. */
+    async promoteProvisionedPolicy(idArg, typeArg, lifecycleArg) {
+        const doc = await GatewayClientDoc.findById(idArg);
+        if (!doc || doc.type !== typeArg) {
+            throw new Error('Gateway client is missing or has the wrong type');
+        }
+        const expectedRevision = this.normalizeMutationRevision(doc.mutationRevision);
+        const activeGeneration = this.normalizePolicyGeneration(doc.policyGeneration);
+        const activeDigest = this.digestPolicy(doc.id, this.activePolicyFromDoc(doc), activeGeneration);
+        if (lifecycleArg.state === 'active'
+            && lifecycleArg.sequence === this.normalizeCredentialSequence(doc.activeCredentialSequence)
+            && lifecycleArg.policyGeneration === activeGeneration
+            && lifecycleArg.policyDigest === activeDigest) {
+            return this.toPublicClient(doc);
+        }
+        const pending = doc.pendingProvisioning;
+        if ((lifecycleArg.state !== 'candidate' && lifecycleArg.state !== 'active')
+            || !pending
+            || this.normalizeCredentialSequence(doc.credentialSequence) !== lifecycleArg.sequence
+            || pending.credentialSequence !== lifecycleArg.sequence
+            || pending.policyGeneration !== lifecycleArg.policyGeneration
+            || pending.policyDigest !== lifecycleArg.policyDigest) {
+            throw new Error('Gateway credential policy was superseded before finalization');
+        }
+        const updated = await GatewayClientDoc.compareAndSet(idArg, expectedRevision, {
+            name: pending.name,
+            hostnamePatterns: structuredClone(pending.hostnamePatterns),
+            allowedRouteTargets: structuredClone(pending.allowedRouteTargets),
+            capabilities: structuredClone(pending.capabilities),
+            enabled: pending.enabled,
+            policyGeneration: pending.policyGeneration,
+            activeCredentialSequence: pending.credentialSequence,
+            pendingProvisioning: null,
+            updatedAt: Date.now(),
+            ...(pending.description ? { description: pending.description } : {}),
+        }, pending.description ? [] : ['description']);
+        if (!updated) {
+            throw new Error('Gateway client changed concurrently; retry credential finalization');
+        }
+        return this.toPublicClient(updated);
+    }
+    digestPublicClientPolicy(clientArg) {
+        return this.digestPolicy(clientArg.id, {
+            type: clientArg.type,
+            name: clientArg.name,
+            description: clientArg.description || null,
+            hostnamePatterns: structuredClone(clientArg.hostnamePatterns),
+            allowedRouteTargets: structuredClone(clientArg.allowedRouteTargets),
+            capabilities: structuredClone(clientArg.capabilities),
+            enabled: clientArg.enabled,
+        }, clientArg.policyGeneration);
     }
     normalizeId(id) {
         return id.trim().toLowerCase().replace(/[^a-z0-9._-]/g, '-').replace(/-+/g, '-').replace(/^-|-$/g, '');
     }
-    normalizeStringList(values) {
-        return values.map((value) => value.trim().toLowerCase()).filter(Boolean);
+    normalizeHostnamePatterns(values) {
+        return Array.from(new Set(values.map((value) => this.normalizeHostnamePattern(value))));
+    }
+    normalizeHostnamePattern(valueArg) {
+        const value = valueArg.trim().toLowerCase().replace(/\.+$/, '');
+        if (value === '*')
+            return value;
+        const wildcard = value.startsWith('*.');
+        const hostname = wildcard ? value.slice(2) : value;
+        const ascii = plugins.url.domainToASCII(hostname);
+        if (!ascii || ascii.includes('*'))
+            throw new Error(`invalid hostname pattern: ${valueArg}`);
+        return wildcard ? `*.${ascii}` : ascii;
     }
     normalizeAllowedRouteTargets(targets) {
         return targets
             .map((target) => ({
-            host: target.host.trim().toLowerCase(),
-            ports: target.ports.filter((port) => Number.isInteger(port) && port > 0 && port <= 65535),
+            host: this.normalizeTargetHost(target.host),
+            ports: Array.from(new Set(target.ports.filter((port) => Number.isInteger(port) && port > 0 && port <= 65535))).sort((a, b) => a - b),
+            ...(target.allowAnyPort ? { allowAnyPort: true } : {}),
         }))
-            .filter((target) => target.host && target.ports.length > 0);
+            .filter((target) => target.host && (target.allowAnyPort || target.ports.length > 0));
+    }
+    normalizeTargetHost(valueArg) {
+        const value = valueArg.trim().toLowerCase().replace(/\.+$/, '');
+        if (plugins.net.isIP(value))
+            return value;
+        const ascii = plugins.url.domainToASCII(value);
+        if (!ascii)
+            throw new Error(`invalid route target host: ${valueArg}`);
+        return ascii;
+    }
+    normalizeProvisioningSpec(specArg) {
+        const normalized = {
+            type: specArg.type,
+            name: specArg.name.trim(),
+            description: specArg.description?.trim() || null,
+            hostnamePatterns: this.normalizeHostnamePatterns(specArg.hostnamePatterns || []),
+            allowedRouteTargets: this.normalizeAllowedRouteTargets(specArg.allowedRouteTargets || []),
+            capabilities: { ...(specArg.capabilities || {}) },
+            enabled: specArg.enabled ?? true,
+        };
+        if (!normalized.name)
+            throw new Error('gateway client name is required');
+        return normalized;
+    }
+    activePolicyFromDoc(docArg) {
+        return {
+            type: docArg.type,
+            name: docArg.name,
+            description: docArg.description?.trim() || null,
+            hostnamePatterns: this.normalizeHostnamePatterns(docArg.hostnamePatterns || []),
+            allowedRouteTargets: this.normalizeAllowedRouteTargets(docArg.allowedRouteTargets || []),
+            capabilities: { ...(docArg.capabilities || {}) },
+            enabled: docArg.enabled,
+        };
+    }
+    digestPolicy(idArg, policyArg, generationArg) {
+        const canonicalize = (valueArg) => {
+            if (Array.isArray(valueArg))
+                return valueArg.map((entryArg) => canonicalize(entryArg));
+            if (valueArg && typeof valueArg === 'object') {
+                return Object.fromEntries(Object.keys(valueArg)
+                    .sort((left, right) => left.localeCompare(right))
+                    .map((keyArg) => [keyArg, canonicalize(valueArg[keyArg])]));
+            }
+            return valueArg;
+        };
+        return plugins.crypto.createHash('sha256').update(JSON.stringify(canonicalize({
+            id: idArg,
+            generation: generationArg,
+            policy: {
+                type: policyArg.type,
+                hostnamePatterns: policyArg.hostnamePatterns,
+                allowedRouteTargets: policyArg.allowedRouteTargets,
+                capabilities: policyArg.capabilities,
+                enabled: policyArg.enabled,
+            },
+        }))).digest('hex');
+    }
+    normalizeCredentialSequence(valueArg) {
+        return Number.isSafeInteger(valueArg) && Number(valueArg) >= 0 ? Number(valueArg) : 0;
+    }
+    normalizePolicyGeneration(valueArg) {
+        return Number.isSafeInteger(valueArg) && Number(valueArg) >= 1 ? Number(valueArg) : 1;
+    }
+    normalizeMutationRevision(valueArg) {
+        return Number.isSafeInteger(valueArg) && Number(valueArg) >= 0 ? Number(valueArg) : 0;
+    }
+    toPublicPendingClient(docArg, pendingArg) {
+        return {
+            id: docArg.id,
+            type: pendingArg.type,
+            name: pendingArg.name,
+            description: pendingArg.description || undefined,
+            hostnamePatterns: structuredClone(pendingArg.hostnamePatterns),
+            allowedRouteTargets: structuredClone(pendingArg.allowedRouteTargets),
+            capabilities: structuredClone(pendingArg.capabilities),
+            enabled: pendingArg.enabled,
+            policyGeneration: pendingArg.policyGeneration,
+            createdAt: docArg.createdAt,
+            updatedAt: pendingArg.stagedAt,
+            createdBy: docArg.createdBy,
+        };
     }
     toPublicClient(doc) {
         return {
@@ -92,10 +455,11 @@ export class GatewayClientManager {
             allowedRouteTargets: doc.allowedRouteTargets || [],
             capabilities: doc.capabilities || {},
             enabled: doc.enabled,
+            policyGeneration: this.normalizePolicyGeneration(doc.policyGeneration),
             createdAt: doc.createdAt,
             updatedAt: doc.updatedAt,
             createdBy: doc.createdBy,
         };
     }
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/db/documents/classes.api-token.doc.d.ts

@@ -1,11 +1,12 @@
 import * as plugins from '../../plugins.js';
-import type { IApiTokenPolicy, TApiTokenScope } from '../../../dist_ts_interfaces/data/route-management.js';
+import type { IApiTokenPolicy, IGatewayCredentialLifecycle, TApiTokenScope } from '../../../dist_ts_interfaces/data/route-management.js';
 export declare class ApiTokenDoc extends plugins.smartdata.SmartDataDbDoc<ApiTokenDoc, ApiTokenDoc> {
     id: string;
     name: string;
     tokenHash: string;
     scopes: TApiTokenScope[];
     policy?: IApiTokenPolicy;
+    gatewayCredentialLifecycle: IGatewayCredentialLifecycle | null;
     createdAt: number;
     expiresAt: number | null;
     lastUsedAt: number | null;

package/dist_ts/db/documents/classes.api-token.doc.js

@@ -56,6 +56,9 @@ let ApiTokenDoc = (() => {
     let _policy_decorators;
     let _policy_initializers = [];
     let _policy_extraInitializers = [];
+    let _gatewayCredentialLifecycle_decorators;
+    let _gatewayCredentialLifecycle_initializers = [];
+    let _gatewayCredentialLifecycle_extraInitializers = [];
     let _createdAt_decorators;
     let _createdAt_initializers = [];
     let _createdAt_extraInitializers = [];
@@ -80,6 +83,7 @@ let ApiTokenDoc = (() => {
             _tokenHash_decorators = [plugins.smartdata.svDb()];
             _scopes_decorators = [plugins.smartdata.svDb()];
             _policy_decorators = [plugins.smartdata.svDb()];
+            _gatewayCredentialLifecycle_decorators = [plugins.smartdata.svDb()];
             _createdAt_decorators = [plugins.smartdata.svDb()];
             _expiresAt_decorators = [plugins.smartdata.svDb()];
             _lastUsedAt_decorators = [plugins.smartdata.svDb()];
@@ -90,6 +94,7 @@ let ApiTokenDoc = (() => {
             __esDecorate(null, null, _tokenHash_decorators, { kind: "field", name: "tokenHash", static: false, private: false, access: { has: obj => "tokenHash" in obj, get: obj => obj.tokenHash, set: (obj, value) => { obj.tokenHash = value; } }, metadata: _metadata }, _tokenHash_initializers, _tokenHash_extraInitializers);
             __esDecorate(null, null, _scopes_decorators, { kind: "field", name: "scopes", static: false, private: false, access: { has: obj => "scopes" in obj, get: obj => obj.scopes, set: (obj, value) => { obj.scopes = value; } }, metadata: _metadata }, _scopes_initializers, _scopes_extraInitializers);
             __esDecorate(null, null, _policy_decorators, { kind: "field", name: "policy", static: false, private: false, access: { has: obj => "policy" in obj, get: obj => obj.policy, set: (obj, value) => { obj.policy = value; } }, metadata: _metadata }, _policy_initializers, _policy_extraInitializers);
+            __esDecorate(null, null, _gatewayCredentialLifecycle_decorators, { kind: "field", name: "gatewayCredentialLifecycle", static: false, private: false, access: { has: obj => "gatewayCredentialLifecycle" in obj, get: obj => obj.gatewayCredentialLifecycle, set: (obj, value) => { obj.gatewayCredentialLifecycle = value; } }, metadata: _metadata }, _gatewayCredentialLifecycle_initializers, _gatewayCredentialLifecycle_extraInitializers);
             __esDecorate(null, null, _createdAt_decorators, { kind: "field", name: "createdAt", static: false, private: false, access: { has: obj => "createdAt" in obj, get: obj => obj.createdAt, set: (obj, value) => { obj.createdAt = value; } }, metadata: _metadata }, _createdAt_initializers, _createdAt_extraInitializers);
             __esDecorate(null, null, _expiresAt_decorators, { kind: "field", name: "expiresAt", static: false, private: false, access: { has: obj => "expiresAt" in obj, get: obj => obj.expiresAt, set: (obj, value) => { obj.expiresAt = value; } }, metadata: _metadata }, _expiresAt_initializers, _expiresAt_extraInitializers);
             __esDecorate(null, null, _lastUsedAt_decorators, { kind: "field", name: "lastUsedAt", static: false, private: false, access: { has: obj => "lastUsedAt" in obj, get: obj => obj.lastUsedAt, set: (obj, value) => { obj.lastUsedAt = value; } }, metadata: _metadata }, _lastUsedAt_initializers, _lastUsedAt_extraInitializers);
@@ -105,7 +110,8 @@ let ApiTokenDoc = (() => {
         tokenHash = (__runInitializers(this, _name_extraInitializers), __runInitializers(this, _tokenHash_initializers, void 0));
         scopes = (__runInitializers(this, _tokenHash_extraInitializers), __runInitializers(this, _scopes_initializers, void 0));
         policy = (__runInitializers(this, _scopes_extraInitializers), __runInitializers(this, _policy_initializers, void 0));
-        createdAt = (__runInitializers(this, _policy_extraInitializers), __runInitializers(this, _createdAt_initializers, void 0));
+        gatewayCredentialLifecycle = (__runInitializers(this, _policy_extraInitializers), __runInitializers(this, _gatewayCredentialLifecycle_initializers, null));
+        createdAt = (__runInitializers(this, _gatewayCredentialLifecycle_extraInitializers), __runInitializers(this, _createdAt_initializers, void 0));
         expiresAt = (__runInitializers(this, _createdAt_extraInitializers), __runInitializers(this, _expiresAt_initializers, void 0));
         lastUsedAt = (__runInitializers(this, _expiresAt_extraInitializers), __runInitializers(this, _lastUsedAt_initializers, void 0));
         createdBy = (__runInitializers(this, _lastUsedAt_extraInitializers), __runInitializers(this, _createdBy_initializers, void 0));
@@ -130,4 +136,4 @@ let ApiTokenDoc = (() => {
     return ApiTokenDoc = _classThis;
 })();
 export { ApiTokenDoc };
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY2xhc3Nlcy5hcGktdG9rZW4uZG9jLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vdHMvZGIvZG9jdW1lbnRzL2NsYXNzZXMuYXBpLXRva2VuLmRvYy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7O0FBQUEsT0FBTyxLQUFLLE9BQU8sTUFBTSxrQkFBa0IsQ0FBQztBQUM1QyxPQUFPLEVBQUUsVUFBVSxFQUFFLE1BQU0sMkJBQTJCLENBQUM7QUFHdkQsTUFBTSxLQUFLLEdBQUcsR0FBRyxFQUFFLENBQUMsVUFBVSxDQUFDLFdBQVcsRUFBRSxDQUFDLEtBQUssRUFBRSxDQUFDO0lBR3hDLFdBQVc7NEJBRHZCLE9BQU8sQ0FBQyxTQUFTLENBQUMsVUFBVSxDQUFDLEdBQUcsRUFBRSxDQUFDLEtBQUssRUFBRSxDQUFDOzs7O3NCQUNYLE9BQU8sQ0FBQyxTQUFTLENBQUMsY0FBYzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7OzsyQkFBeEMsU0FBUSxXQUEwRDs7Ozs4QkFDeEYsT0FBTyxDQUFDLFNBQVMsQ0FBQyxHQUFHLEVBQUUsRUFDdkIsT0FBTyxDQUFDLFNBQVMsQ0FBQyxJQUFJLEVBQUU7Z0NBR3hCLE9BQU8sQ0FBQyxTQUFTLENBQUMsSUFBSSxFQUFFO3FDQUd4QixPQUFPLENBQUMsU0FBUyxDQUFDLElBQUksRUFBRTtrQ0FHeEIsT0FBTyxDQUFDLFNBQVMsQ0FBQyxJQUFJLEVBQUU7a0NBR3hCLE9BQU8sQ0FBQyxTQUFTLENBQUMsSUFBSSxFQUFFO3FDQUd4QixPQUFPLENBQUMsU0FBUyxDQUFDLElBQUksRUFBRTtxQ0FHeEIsT0FBTyxDQUFDLFNBQVMsQ0FBQyxJQUFJLEVBQUU7c0NBR3hCLE9BQU8sQ0FBQyxTQUFTLENBQUMsSUFBSSxFQUFFO3FDQUd4QixPQUFPLENBQUMsU0FBUyxDQUFDLElBQUksRUFBRTttQ0FHeEIsT0FBTyxDQUFDLFNBQVMsQ0FBQyxJQUFJLEVBQUU7WUExQnpCLHdKQUFPLEVBQUUsNkJBQUYsRUFBRSwrRUFBVTtZQUduQiw4SkFBTyxJQUFJLDZCQUFKLElBQUksbUZBQWM7WUFHekIsNktBQU8sU0FBUyw2QkFBVCxTQUFTLDZGQUFVO1lBRzFCLG9LQUFPLE1BQU0sNkJBQU4sTUFBTSx1RkFBb0I7WUFHakMsb0tBQU8sTUFBTSw2QkFBTixNQUFNLHVGQUFtQjtZQUdoQyw2S0FBTyxTQUFTLDZCQUFULFNBQVMsNkZBQVU7WUFHMUIsNktBQU8sU0FBUyw2QkFBVCxTQUFTLDZGQUFpQjtZQUdqQyxnTEFBTyxVQUFVLDZCQUFWLFVBQVUsK0ZBQWlCO1lBR2xDLDZLQUFPLFNBQVMsNkJBQVQsU0FBUyw2RkFBVTtZQUcxQix1S0FBTyxPQUFPLDZCQUFQLE9BQU8seUZBQVc7WUE5QjNCLDZLQW1EQzs7O1lBbkRZLHVEQUFXOztRQUdmLEVBQUUscURBQVU7UUFHWixJQUFJLGdHQUFXLEVBQUUsR0FBQztRQUdsQixTQUFTLGdIQUFVO1FBR25CLE1BQU0sa0hBQW9CO1FBRzFCLE1BQU0sK0dBQW1CO1FBR3pCLFNBQVMsa0hBQVU7UUFHbkIsU0FBUyxxSEFBaUI7UUFHMUIsVUFBVSxzSEFBaUI7UUFHM0IsU0FBUyxzSEFBVTtRQUduQixPQUFPLG1IQUFXO1FBRXpCO1lBQ0UsS0FBSyxFQUFFLENBQUM7O1NBQ1Q7UUFFTSxNQUFNLENBQUMsS0FBSyxDQUFDLFFBQVEsQ0FBQyxFQUFVO1lBQ3JDLE9BQU8sTUFBTSxXQUFXLENBQUMsV0FBVyxDQUFDLEVBQUUsRUFBRSxFQUFFLENBQUMsQ0FBQztRQUMvQyxDQUFDO1FBRU0sTUFBTSxDQUFDLEtBQUssQ0FBQyxlQUFlLENBQUMsU0FBaUI7WUFDbkQsT0FBTyxNQUFNLFdBQVcsQ0FBQyxXQUFXLENBQUMsRUFBRSxTQUFTLEVBQUUsQ0FBQyxDQUFDO1FBQ3RELENBQUM7UUFFTSxNQUFNLENBQUMsS0FBSyxDQUFDLE9BQU87WUFDekIsT0FBTyxNQUFNLFdBQVcsQ0FBQyxZQUFZLENBQUMsRUFBRSxDQUFDLENBQUM7UUFDNUMsQ0FBQztRQUVNLE1BQU0sQ0FBQyxLQUFLLENBQUMsV0FBVztZQUM3QixPQUFPLE1BQU0sV0FBVyxDQUFDLFlBQVksQ0FBQyxFQUFFLE9BQU8sRUFBRSxJQUFJLEVBQUUsQ0FBQyxDQUFDO1FBQzNELENBQUM7Ozs7U0FsRFUsV0FBVyJ9
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/db/documents/classes.gateway-client.doc.d.ts

@@ -1,5 +1,19 @@
 import * as plugins from '../../plugins.js';
 import type { IApiTokenPolicy, TGatewayClientType } from '../../../dist_ts_interfaces/data/route-management.js';
+export interface IGatewayClientPendingProvisioning {
+    type: TGatewayClientType;
+    name: string;
+    description: string | null;
+    hostnamePatterns: string[];
+    allowedRouteTargets: NonNullable<IApiTokenPolicy['allowedRouteTargets']>;
+    capabilities: NonNullable<IApiTokenPolicy['capabilities']>;
+    enabled: boolean;
+    policyGeneration: number;
+    policyDigest: string;
+    credentialSequence: number;
+    stagedAt: number;
+    stagedBy: string;
+}
 export declare class GatewayClientDoc extends plugins.smartdata.SmartDataDbDoc<GatewayClientDoc, GatewayClientDoc> {
     id: string;
     type: TGatewayClientType;
@@ -9,10 +23,21 @@ export declare class GatewayClientDoc extends plugins.smartdata.SmartDataDbDoc<G
     allowedRouteTargets: NonNullable<IApiTokenPolicy['allowedRouteTargets']>;
     capabilities: NonNullable<IApiTokenPolicy['capabilities']>;
     enabled: boolean;
+    policyGeneration: number;
+    credentialSequence: number;
+    /** Exact provisioned credential sequence authorized for the active policy. */
+    activeCredentialSequence: number;
+    /** Monotonic compare-and-set authority for every mutable client field. */
+    mutationRevision: number;
+    pendingProvisioning: IGatewayClientPendingProvisioning | null;
     createdAt: number;
     updatedAt: number;
     createdBy: string;
     constructor();
     static findById(id: string): Promise<GatewayClientDoc | null>;
+    private static getNativeCollection;
+    private static buildRevisionSelector;
+    static compareAndSet(idArg: string, expectedRevisionArg: number, setArg: Record<string, unknown>, unsetArg?: string[]): Promise<GatewayClientDoc | null>;
+    static deleteIfRevision(idArg: string, expectedRevisionArg: number): Promise<boolean>;
     static findAll(): Promise<GatewayClientDoc[]>;
 }