@eudiplo/cli 7.1.1 → 7.2.0-main.20c3901

package/templates/schemas/KeyChainConfigFile.schema.json

@@ -0,0 +1,101 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "./KeyChainConfigFile.schema.json",
+  "title": "KeyChainConfigFile",
+  "description": "A key-chain configuration file in legacy payload or versioned-envelope form.",
+  "oneOf": [
+    {
+      "$ref": "./KeyChainImportDto.schema.json"
+    },
+    {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "string",
+          "const": "eudiplo.io/key-chain/v2"
+        },
+        "kind": {
+          "type": "string",
+          "const": "KeyChain"
+        },
+        "metadata": {
+          "$ref": "./ConfigDocumentMetadata.schema.json"
+        },
+        "spec": {
+          "$ref": "#/$defs/portableSpec"
+        }
+      },
+      "required": ["apiVersion", "kind", "metadata", "spec"],
+      "additionalProperties": false
+    }
+  ],
+  "$defs": {
+    "ecPrivateJwk": {
+      "type": "object",
+      "properties": {
+        "kty": { "type": "string" },
+        "x": { "type": "string" },
+        "y": { "type": "string" },
+        "crv": { "type": "string" },
+        "d": { "type": "string" },
+        "alg": { "type": "string" },
+        "kid": { "type": "string" }
+      },
+      "required": ["kty", "x", "y", "crv", "d"],
+      "additionalProperties": false
+    },
+    "portableSpec": {
+      "type": "object",
+      "properties": {
+        "id": {
+          "type": "string",
+          "description": "Optional key-chain id duplicated from envelope metadata."
+        },
+        "description": { "type": "string" },
+        "usageType": {
+          "type": "string",
+          "enum": ["access", "attestation", "trustList", "statusList", "encrypt"]
+        },
+        "keySource": {
+          "type": "object",
+          "properties": {
+            "type": {
+              "type": "string",
+              "const": "private-jwk"
+            },
+            "jwk": {
+              "$ref": "#/$defs/ecPrivateJwk"
+            }
+          },
+          "required": ["type", "jwk"],
+          "additionalProperties": false
+        },
+        "crt": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "kmsProvider": { "type": "string" },
+        "rotationPolicy": {
+          "type": "object",
+          "properties": {
+            "enabled": { "type": "boolean" },
+            "intervalDays": {
+              "type": "number",
+              "minimum": 1,
+              "maximum": 3650
+            },
+            "certValidityDays": {
+              "type": "number",
+              "minimum": 1,
+              "maximum": 3650
+            }
+          },
+          "required": ["enabled"],
+          "additionalProperties": false
+        }
+      },
+      "required": ["usageType", "keySource"],
+      "additionalProperties": false
+    }
+  }
+}

package/templates/schemas/KeyChainCreateDto.schema.json

@@ -0,0 +1,66 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "usageType": {
+      "type": "string",
+      "enum": [
+        "access",
+        "attestation",
+        "trustList",
+        "statusList",
+        "encrypt"
+      ],
+      "description": "Key usage category for the key chain."
+    },
+    "type": {
+      "type": "string",
+      "enum": [
+        "standalone",
+        "internalChain"
+      ],
+      "description": "Key chain mode."
+    },
+    "description": {
+      "description": "Optional key chain description.",
+      "type": "string"
+    },
+    "kmsProvider": {
+      "description": "Optional KMS provider id for key storage operations.",
+      "type": "string"
+    },
+    "rotationPolicy": {
+      "description": "Optional rotation policy.",
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "description": "Enable or disable automatic key rotation."
+        },
+        "intervalDays": {
+          "description": "Rotation interval in days.",
+          "type": "number",
+          "minimum": 1,
+          "maximum": 3650
+        },
+        "certValidityDays": {
+          "description": "Certificate validity period in days for generated leaf certificates.",
+          "type": "number",
+          "minimum": 1,
+          "maximum": 3650
+        }
+      },
+      "required": [
+        "enabled"
+      ],
+      "additionalProperties": false
+    }
+  },
+  "required": [
+    "usageType",
+    "type"
+  ],
+  "additionalProperties": false,
+  "$id": "./KeyChainCreateDto.schema.json",
+  "title": "KeyChainCreateDto"
+}

package/templates/schemas/KeyChainUpdateDto.schema.json

@@ -0,0 +1,40 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "description": {
+      "description": "Optional replacement description.",
+      "type": "string"
+    },
+    "rotationPolicy": {
+      "description": "Optional rotation policy updates.",
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "description": "Optional replacement for rotation enabled flag.",
+          "type": "boolean"
+        },
+        "intervalDays": {
+          "description": "Optional replacement for rotation interval in days.",
+          "type": "number",
+          "minimum": 1,
+          "maximum": 3650
+        },
+        "certValidityDays": {
+          "description": "Optional replacement for certificate validity period in days.",
+          "type": "number",
+          "minimum": 1,
+          "maximum": 3650
+        }
+      },
+      "additionalProperties": false
+    },
+    "activeCertificate": {
+      "description": "Optional active certificate override.",
+      "type": "string"
+    }
+  },
+  "additionalProperties": false,
+  "$id": "./KeyChainUpdateDto.schema.json",
+  "title": "KeyChainUpdateDto"
+}

package/templates/schemas/KmsConfigFile.schema.json

@@ -0,0 +1,37 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "./KmsConfigFile.schema.json",
+  "title": "KmsConfigFile",
+  "description": "A tenant KMS configuration file in legacy payload or versioned-envelope form.",
+  "oneOf": [
+    {
+      "$ref": "./KmsConfigDto.schema.json"
+    },
+    {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "string",
+          "const": "eudiplo.io/kms-config/v1"
+        },
+        "kind": {
+          "type": "string",
+          "const": "KmsConfig"
+        },
+        "metadata": {
+          "$ref": "./ConfigDocumentMetadata.schema.json"
+        },
+        "spec": {
+          "$ref": "./KmsConfigDto.schema.json"
+        }
+      },
+      "required": [
+        "apiVersion",
+        "kind",
+        "metadata",
+        "spec"
+      ],
+      "additionalProperties": false
+    }
+  ]
+}

package/templates/schemas/PresentationConfigFile.schema.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "./PresentationConfigFile.schema.json",
+  "title": "PresentationConfigFile",
+  "description": "A presentation configuration file in legacy payload or versioned-envelope form.",
+  "oneOf": [
+    {
+      "$ref": "./PresentationConfigCreateDto.schema.json"
+    },
+    {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "string",
+          "const": "eudiplo.io/presentation-config/v2"
+        },
+        "kind": {
+          "type": "string",
+          "const": "PresentationConfig"
+        },
+        "metadata": {
+          "$ref": "./ConfigDocumentMetadata.schema.json"
+        },
+        "spec": {
+          "$ref": "./PresentationConfigCreateDto.schema.json"
+        }
+      },
+      "required": ["apiVersion", "kind", "metadata", "spec"],
+      "additionalProperties": false
+    }
+  ]
+}

package/templates/schemas/RegistrarConfigFile.schema.json

@@ -0,0 +1,37 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "./RegistrarConfigFile.schema.json",
+  "title": "RegistrarConfigFile",
+  "description": "A registrar configuration file in legacy payload or versioned-envelope form.",
+  "oneOf": [
+    {
+      "$ref": "./CreateRegistrarConfigDto.schema.json"
+    },
+    {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "string",
+          "const": "eudiplo.io/registrar-config/v1"
+        },
+        "kind": {
+          "type": "string",
+          "const": "RegistrarConfig"
+        },
+        "metadata": {
+          "$ref": "./ConfigDocumentMetadata.schema.json"
+        },
+        "spec": {
+          "$ref": "./CreateRegistrarConfigDto.schema.json"
+        }
+      },
+      "required": [
+        "apiVersion",
+        "kind",
+        "metadata",
+        "spec"
+      ],
+      "additionalProperties": false
+    }
+  ]
+}

package/templates/schemas/RotationPolicyCreateDto.schema.json

@@ -0,0 +1,28 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "enabled": {
+      "type": "boolean",
+      "description": "Enable or disable automatic key rotation."
+    },
+    "intervalDays": {
+      "description": "Rotation interval in days.",
+      "type": "number",
+      "minimum": 1,
+      "maximum": 3650
+    },
+    "certValidityDays": {
+      "description": "Certificate validity period in days for generated leaf certificates.",
+      "type": "number",
+      "minimum": 1,
+      "maximum": 3650
+    }
+  },
+  "required": [
+    "enabled"
+  ],
+  "additionalProperties": false,
+  "$id": "./RotationPolicyCreateDto.schema.json",
+  "title": "RotationPolicyCreateDto"
+}

package/templates/schemas/RotationPolicyUpdateDto.schema.json

@@ -0,0 +1,25 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "enabled": {
+      "description": "Optional replacement for rotation enabled flag.",
+      "type": "boolean"
+    },
+    "intervalDays": {
+      "description": "Optional replacement for rotation interval in days.",
+      "type": "number",
+      "minimum": 1,
+      "maximum": 3650
+    },
+    "certValidityDays": {
+      "description": "Optional replacement for certificate validity period in days.",
+      "type": "number",
+      "minimum": 1,
+      "maximum": 3650
+    }
+  },
+  "additionalProperties": false,
+  "$id": "./RotationPolicyUpdateDto.schema.json",
+  "title": "RotationPolicyUpdateDto"
+}

package/templates/schemas/SessionStorageConfig.schema.json

@@ -0,0 +1,24 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "ttlSeconds": {
+      "description": "Session time-to-live in seconds.",
+      "type": "integer",
+      "minimum": 60,
+      "maximum": 9007199254740991
+    },
+    "cleanupMode": {
+      "description": "Whether to fully delete or anonymize expired sessions.",
+      "type": "string",
+      "enum": [
+        "full",
+        "anonymize"
+      ]
+    }
+  },
+  "additionalProperties": false,
+  "description": "Tenant session storage configuration.",
+  "$id": "./SessionStorageConfig.schema.json",
+  "title": "SessionStorageConfig"
+}

package/templates/schemas/StatusListConfig.schema.json

@@ -0,0 +1,51 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "capacity": {
+      "description": "Default status list capacity.",
+      "type": "integer",
+      "minimum": 100,
+      "maximum": 9007199254740991
+    },
+    "bits": {
+      "description": "Bits-per-status setting (1, 2, 4, or 8).",
+      "anyOf": [
+        {
+          "type": "number",
+          "const": 1
+        },
+        {
+          "type": "number",
+          "const": 2
+        },
+        {
+          "type": "number",
+          "const": 4
+        },
+        {
+          "type": "number",
+          "const": 8
+        }
+      ]
+    },
+    "ttl": {
+      "description": "JWT TTL for status list tokens in seconds.",
+      "type": "integer",
+      "minimum": 60,
+      "maximum": 9007199254740991
+    },
+    "immediateUpdate": {
+      "description": "Regenerate status list JWTs immediately after status updates.",
+      "type": "boolean"
+    },
+    "enableAggregation": {
+      "description": "Include aggregation_uri in generated status list JWTs.",
+      "type": "boolean"
+    }
+  },
+  "additionalProperties": false,
+  "description": "Tenant defaults for status list generation and publishing behavior.",
+  "$id": "./StatusListConfig.schema.json",
+  "title": "StatusListConfig"
+}

package/templates/schemas/StatusListConfigFile.schema.json

@@ -0,0 +1,37 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "./StatusListConfigFile.schema.json",
+  "title": "StatusListConfigFile",
+  "description": "A status-list configuration file in legacy payload or versioned-envelope form.",
+  "oneOf": [
+    {
+      "$ref": "./StatusListImportDto.schema.json"
+    },
+    {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "string",
+          "const": "eudiplo.io/status-list/v1"
+        },
+        "kind": {
+          "type": "string",
+          "const": "StatusList"
+        },
+        "metadata": {
+          "$ref": "./ConfigDocumentMetadata.schema.json"
+        },
+        "spec": {
+          "$ref": "./StatusListImportDto.schema.json"
+        }
+      },
+      "required": [
+        "apiVersion",
+        "kind",
+        "metadata",
+        "spec"
+      ],
+      "additionalProperties": false
+    }
+  ]
+}

package/templates/schemas/TransactionData.schema.json

@@ -0,0 +1,24 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "type": {
+      "type": "string",
+      "description": "Transaction data type identifier."
+    },
+    "credential_ids": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      },
+      "description": "Credential query ids this transaction data applies to."
+    }
+  },
+  "required": [
+    "type",
+    "credential_ids"
+  ],
+  "additionalProperties": {},
+  "$id": "./TransactionData.schema.json",
+  "title": "TransactionData"
+}

package/templates/schemas/TrustListConfigFile.schema.json

@@ -0,0 +1,37 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "./TrustListConfigFile.schema.json",
+  "title": "TrustListConfigFile",
+  "description": "A trust-list configuration file in legacy payload or versioned-envelope form.",
+  "oneOf": [
+    {
+      "$ref": "./TrustListCreateDto.schema.json"
+    },
+    {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "string",
+          "const": "eudiplo.io/trust-list/v1"
+        },
+        "kind": {
+          "type": "string",
+          "const": "TrustList"
+        },
+        "metadata": {
+          "$ref": "./ConfigDocumentMetadata.schema.json"
+        },
+        "spec": {
+          "$ref": "./TrustListCreateDto.schema.json"
+        }
+      },
+      "required": [
+        "apiVersion",
+        "kind",
+        "metadata",
+        "spec"
+      ],
+      "additionalProperties": false
+    }
+  ]
+}

package/templates/schemas/UpdateAttributeProviderDto.schema.json

@@ -0,0 +1,93 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "id": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Unique attribute provider identifier."
+    },
+    "name": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Display name of the attribute provider."
+    },
+    "description": {
+      "anyOf": [
+        {
+          "type": "string",
+          "minLength": 1
+        },
+        {
+          "type": "null"
+        }
+      ],
+      "description": "Optional attribute provider description."
+    },
+    "url": {
+      "type": "string",
+      "format": "uri",
+      "description": "Base URL of the attribute provider endpoint."
+    },
+    "auth": {
+      "oneOf": [
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "type": "string",
+              "const": "none",
+              "description": "Disable authentication for attribute provider calls."
+            }
+          },
+          "required": [
+            "type"
+          ],
+          "additionalProperties": false,
+          "description": "No authentication variant."
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "type": "string",
+              "const": "apiKey",
+              "description": "Use API key authentication."
+            },
+            "config": {
+              "type": "object",
+              "properties": {
+                "headerName": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "HTTP header name carrying the API key."
+                },
+                "value": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "API key value."
+                }
+              },
+              "required": [
+                "headerName",
+                "value"
+              ],
+              "additionalProperties": false,
+              "description": "API key authentication settings."
+            }
+          },
+          "required": [
+            "type",
+            "config"
+          ],
+          "additionalProperties": false,
+          "description": "API key authentication variant."
+        }
+      ],
+      "description": "Authentication configuration for outbound provider requests."
+    }
+  },
+  "additionalProperties": false,
+  "$id": "./UpdateAttributeProviderDto.schema.json",
+  "title": "UpdateAttributeProviderDto"
+}