@serve.zone/interfaces 19.0.0 → 19.1.0

package/changelog.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 2026-07-24 - 19.1.0
+
+### Features
+
+- add explicit ingress trust policy to gateway routes (gateway)
+  - Adds optional directHub and smartVpn ingress flags to gateway route contracts.
+  - Updates gateway contract coverage to assert explicit ingress settings for managed routes.
+
 ## 2026-07-24 - 19.0.0
 
 ### Breaking Changes

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@serve.zone/interfaces',
-    version: '19.0.0',
+    version: '19.1.0',
     description: 'Shared TypeScript interfaces and TypedRequest contracts for the serve.zone ecosystem.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSx3QkFBd0I7SUFDOUIsT0FBTyxFQUFFLFFBQVE7SUFDakIsV0FBVyxFQUFFLHVGQUF1RjtDQUNyRyxDQUFBIn0=

package/dist_ts/data/gateway.d.ts

@@ -364,6 +364,21 @@ export interface IGatewayRouteConfig {
     priority?: number;
     /** Declares a canonical gateway-managed route purpose. */
     managedRouteKind?: TManagedRouteKind;
+    /**
+     * Trusted ingress paths that may reach this route without public edge ingress.
+     *
+     * Omission is accepted only for compatibility with clients predating this
+     * contract. New and updated managed routes should set both values explicitly.
+     */
+    ingress?: {
+        /**
+         * Accept connections made directly to a listener on the gateway hub.
+         * This must not be enabled by default for newly-created routes.
+         */
+        directHub: boolean;
+        /** Accept authenticated SmartVPN connections carrying trusted VPN metadata. */
+        smartVpn: boolean;
+    };
     remoteIngress?: {
         enabled: boolean;
         edgeFilter?: string[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@serve.zone/interfaces",
-  "version": "19.0.0",
+  "version": "19.1.0",
   "private": false,
   "description": "Shared TypeScript interfaces and TypedRequest contracts for the serve.zone ecosystem.",
   "exports": {

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/interfaces',
-  version: '19.0.0',
+  version: '19.1.0',
   description: 'Shared TypeScript interfaces and TypedRequest contracts for the serve.zone ecosystem.'
 }

package/ts/data/gateway.ts

@@ -411,6 +411,21 @@ export interface IGatewayRouteConfig {
   priority?: number;
   /** Declares a canonical gateway-managed route purpose. */
   managedRouteKind?: TManagedRouteKind;
+  /**
+   * Trusted ingress paths that may reach this route without public edge ingress.
+   *
+   * Omission is accepted only for compatibility with clients predating this
+   * contract. New and updated managed routes should set both values explicitly.
+   */
+  ingress?: {
+    /**
+     * Accept connections made directly to a listener on the gateway hub.
+     * This must not be enabled by default for newly-created routes.
+     */
+    directHub: boolean;
+    /** Accept authenticated SmartVPN connections carrying trusted VPN metadata. */
+    smartVpn: boolean;
+  };
   remoteIngress?: {
     enabled: boolean;
     edgeFilter?: string[];