@serve.zone/interfaces 17.0.0 → 17.1.0

package/changelog.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 2026-07-21 - 17.1.0
+
+### Features
+
+- expose the server-authoritative candidate, active, or manual lifecycle state in gateway-client auth contexts
+
 ## 2026-07-21 - 17.0.0
 
 ### Breaking Changes

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@serve.zone/interfaces',
-    version: '17.0.0',
+    version: '17.1.0',
     description: 'Shared TypeScript interfaces and TypedRequest contracts for the serve.zone ecosystem.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSx3QkFBd0I7SUFDOUIsT0FBTyxFQUFFLFFBQVE7SUFDakIsV0FBVyxFQUFFLHVGQUF1RjtDQUNyRyxDQUFBIn0=

package/dist_ts/data/gateway.d.ts

@@ -187,6 +187,8 @@ interface IGatewayClientContextBase {
     allowedRouteTargets: IGatewayRouteTargetAllowance[];
     capabilities: IGatewayTokenCapabilities;
 }
+/** Server-authoritative lifecycle of an authenticated gateway-client credential. */
+export type TGatewayCredentialState = 'candidate' | 'active' | 'manual';
 /**
  * Resolved authorization context. A gateway-client role always proves the
  * concrete credential, bound client, and current live policy generation.
@@ -195,6 +197,8 @@ interface IGatewayClientContextBase {
 export type IGatewayClientContext = IGatewayClientContextBase & ({
     role: 'gatewayClient';
     credentialId: string;
+    /** Present on lifecycle-aware gateways. Candidates are validation/finalization-only. */
+    credentialState?: TGatewayCredentialState;
     gatewayClient: {
         type: TGatewayClientType;
         id: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@serve.zone/interfaces",
-  "version": "17.0.0",
+  "version": "17.1.0",
   "private": false,
   "description": "Shared TypeScript interfaces and TypedRequest contracts for the serve.zone ecosystem.",
   "exports": {

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/interfaces',
-  version: '17.0.0',
+  version: '17.1.0',
   description: 'Shared TypeScript interfaces and TypedRequest contracts for the serve.zone ecosystem.'
 }

package/ts/data/gateway.ts

@@ -220,6 +220,9 @@ interface IGatewayClientContextBase {
   capabilities: IGatewayTokenCapabilities;
 }
 
+/** Server-authoritative lifecycle of an authenticated gateway-client credential. */
+export type TGatewayCredentialState = 'candidate' | 'active' | 'manual';
+
 /**
  * Resolved authorization context. A gateway-client role always proves the
  * concrete credential, bound client, and current live policy generation.
@@ -229,6 +232,8 @@ export type IGatewayClientContext = IGatewayClientContextBase & (
   | {
       role: 'gatewayClient';
       credentialId: string;
+      /** Present on lifecycle-aware gateways. Candidates are validation/finalization-only. */
+      credentialState?: TGatewayCredentialState;
       gatewayClient: {
         type: TGatewayClientType;
         id: string;