@eudiplo/cli 7.2.0-main.343725f → 7.2.0-main.b7bac52

package/templates/schemas/EmbeddedDisclosurePolicy.schema.json

@@ -0,0 +1,106 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "oneOf": [
+    {
+      "type": "object",
+      "properties": {
+        "policy": {
+          "type": "string",
+          "const": "attestationBased",
+          "description": "Attestation-based policy discriminator."
+        },
+        "values": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "claims": {
+                "description": "Claims constraints considered by policy evaluation.",
+                "type": "array",
+                "items": {}
+              },
+              "credentials": {
+                "type": "array",
+                "items": {},
+                "description": "Credential constraints considered by policy evaluation."
+              },
+              "credential_sets": {
+                "description": "Optional credential set constraints.",
+                "type": "array",
+                "items": {}
+              }
+            },
+            "required": [
+              "credentials"
+            ],
+            "additionalProperties": false
+          },
+          "description": "Attestation requirements used for policy enforcement."
+        }
+      },
+      "required": [
+        "policy",
+        "values"
+      ],
+      "additionalProperties": false
+    },
+    {
+      "type": "object",
+      "properties": {
+        "policy": {
+          "type": "string",
+          "const": "none",
+          "description": "No disclosure policy enforcement."
+        }
+      },
+      "required": [
+        "policy"
+      ],
+      "additionalProperties": false
+    },
+    {
+      "type": "object",
+      "properties": {
+        "policy": {
+          "type": "string",
+          "const": "allowList",
+          "description": "Allow-list based policy discriminator."
+        },
+        "values": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Allowed values for policy checks."
+        }
+      },
+      "required": [
+        "policy",
+        "values"
+      ],
+      "additionalProperties": false
+    },
+    {
+      "type": "object",
+      "properties": {
+        "policy": {
+          "type": "string",
+          "const": "rootOfTrust",
+          "description": "Root-of-trust policy discriminator."
+        },
+        "values": {
+          "type": "string",
+          "description": "Root-of-trust identifier or reference."
+        }
+      },
+      "required": [
+        "policy",
+        "values"
+      ],
+      "additionalProperties": false
+    }
+  ],
+  "description": "Embedded disclosure policy configuration.",
+  "$id": "./EmbeddedDisclosurePolicy.schema.json",
+  "title": "EmbeddedDisclosurePolicy"
+}

package/templates/schemas/ImportTenantDto.schema.json

@@ -12,6 +12,75 @@
       "description": "Optional tenant description.",
       "type": "string",
       "minLength": 1
+    },
+    "sessionConfig": {
+      "description": "Optional tenant-specific session storage configuration.",
+      "type": "object",
+      "properties": {
+        "ttlSeconds": {
+          "description": "Session time-to-live in seconds.",
+          "type": "integer",
+          "minimum": 60,
+          "maximum": 9007199254740991
+        },
+        "cleanupMode": {
+          "description": "Whether to fully delete or anonymize expired sessions.",
+          "type": "string",
+          "enum": [
+            "full",
+            "anonymize"
+          ]
+        }
+      },
+      "additionalProperties": false
+    },
+    "statusListConfig": {
+      "description": "Optional tenant-specific status list defaults.",
+      "type": "object",
+      "properties": {
+        "capacity": {
+          "description": "Default status list capacity.",
+          "type": "integer",
+          "minimum": 100,
+          "maximum": 9007199254740991
+        },
+        "bits": {
+          "description": "Bits-per-status setting (1, 2, 4, or 8).",
+          "anyOf": [
+            {
+              "type": "number",
+              "const": 1
+            },
+            {
+              "type": "number",
+              "const": 2
+            },
+            {
+              "type": "number",
+              "const": 4
+            },
+            {
+              "type": "number",
+              "const": 8
+            }
+          ]
+        },
+        "ttl": {
+          "description": "JWT TTL for status list tokens in seconds.",
+          "type": "integer",
+          "minimum": 60,
+          "maximum": 9007199254740991
+        },
+        "immediateUpdate": {
+          "description": "Regenerate status list JWTs immediately after status updates.",
+          "type": "boolean"
+        },
+        "enableAggregation": {
+          "description": "Include aggregation_uri in generated status list JWTs.",
+          "type": "boolean"
+        }
+      },
+      "additionalProperties": false
     }
   },
   "required": [

package/templates/schemas/IssuanceConfigFile.schema.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "./IssuanceConfigFile.schema.json",
+  "title": "IssuanceConfigFile",
+  "description": "An issuance configuration file in legacy payload or versioned-envelope form.",
+  "oneOf": [
+    {
+      "$ref": "./IssuanceConfig.schema.json"
+    },
+    {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "string",
+          "const": "eudiplo.io/issuance-config/v2"
+        },
+        "kind": {
+          "type": "string",
+          "const": "IssuanceConfig"
+        },
+        "metadata": {
+          "$ref": "./ConfigDocumentMetadata.schema.json"
+        },
+        "spec": {
+          "$ref": "./IssuanceConfig.schema.json"
+        }
+      },
+      "required": ["apiVersion", "kind", "metadata", "spec"],
+      "additionalProperties": false
+    }
+  ]
+}

package/templates/schemas/KeyChainConfigFile.schema.json

@@ -0,0 +1,101 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "./KeyChainConfigFile.schema.json",
+  "title": "KeyChainConfigFile",
+  "description": "A key-chain configuration file in legacy payload or versioned-envelope form.",
+  "oneOf": [
+    {
+      "$ref": "./KeyChainImportDto.schema.json"
+    },
+    {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "string",
+          "const": "eudiplo.io/key-chain/v2"
+        },
+        "kind": {
+          "type": "string",
+          "const": "KeyChain"
+        },
+        "metadata": {
+          "$ref": "./ConfigDocumentMetadata.schema.json"
+        },
+        "spec": {
+          "$ref": "#/$defs/portableSpec"
+        }
+      },
+      "required": ["apiVersion", "kind", "metadata", "spec"],
+      "additionalProperties": false
+    }
+  ],
+  "$defs": {
+    "ecPrivateJwk": {
+      "type": "object",
+      "properties": {
+        "kty": { "type": "string" },
+        "x": { "type": "string" },
+        "y": { "type": "string" },
+        "crv": { "type": "string" },
+        "d": { "type": "string" },
+        "alg": { "type": "string" },
+        "kid": { "type": "string" }
+      },
+      "required": ["kty", "x", "y", "crv", "d"],
+      "additionalProperties": false
+    },
+    "portableSpec": {
+      "type": "object",
+      "properties": {
+        "id": {
+          "type": "string",
+          "description": "Optional key-chain id duplicated from envelope metadata."
+        },
+        "description": { "type": "string" },
+        "usageType": {
+          "type": "string",
+          "enum": ["access", "attestation", "trustList", "statusList", "encrypt"]
+        },
+        "keySource": {
+          "type": "object",
+          "properties": {
+            "type": {
+              "type": "string",
+              "const": "private-jwk"
+            },
+            "jwk": {
+              "$ref": "#/$defs/ecPrivateJwk"
+            }
+          },
+          "required": ["type", "jwk"],
+          "additionalProperties": false
+        },
+        "crt": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "kmsProvider": { "type": "string" },
+        "rotationPolicy": {
+          "type": "object",
+          "properties": {
+            "enabled": { "type": "boolean" },
+            "intervalDays": {
+              "type": "number",
+              "minimum": 1,
+              "maximum": 3650
+            },
+            "certValidityDays": {
+              "type": "number",
+              "minimum": 1,
+              "maximum": 3650
+            }
+          },
+          "required": ["enabled"],
+          "additionalProperties": false
+        }
+      },
+      "required": ["usageType", "keySource"],
+      "additionalProperties": false
+    }
+  }
+}

package/templates/schemas/KeyChainCreateDto.schema.json

@@ -0,0 +1,66 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "usageType": {
+      "type": "string",
+      "enum": [
+        "access",
+        "attestation",
+        "trustList",
+        "statusList",
+        "encrypt"
+      ],
+      "description": "Key usage category for the key chain."
+    },
+    "type": {
+      "type": "string",
+      "enum": [
+        "standalone",
+        "internalChain"
+      ],
+      "description": "Key chain mode."
+    },
+    "description": {
+      "description": "Optional key chain description.",
+      "type": "string"
+    },
+    "kmsProvider": {
+      "description": "Optional KMS provider id for key storage operations.",
+      "type": "string"
+    },
+    "rotationPolicy": {
+      "description": "Optional rotation policy.",
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "description": "Enable or disable automatic key rotation."
+        },
+        "intervalDays": {
+          "description": "Rotation interval in days.",
+          "type": "number",
+          "minimum": 1,
+          "maximum": 3650
+        },
+        "certValidityDays": {
+          "description": "Certificate validity period in days for generated leaf certificates.",
+          "type": "number",
+          "minimum": 1,
+          "maximum": 3650
+        }
+      },
+      "required": [
+        "enabled"
+      ],
+      "additionalProperties": false
+    }
+  },
+  "required": [
+    "usageType",
+    "type"
+  ],
+  "additionalProperties": false,
+  "$id": "./KeyChainCreateDto.schema.json",
+  "title": "KeyChainCreateDto"
+}

package/templates/schemas/KeyChainUpdateDto.schema.json

@@ -0,0 +1,40 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "description": {
+      "description": "Optional replacement description.",
+      "type": "string"
+    },
+    "rotationPolicy": {
+      "description": "Optional rotation policy updates.",
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "description": "Optional replacement for rotation enabled flag.",
+          "type": "boolean"
+        },
+        "intervalDays": {
+          "description": "Optional replacement for rotation interval in days.",
+          "type": "number",
+          "minimum": 1,
+          "maximum": 3650
+        },
+        "certValidityDays": {
+          "description": "Optional replacement for certificate validity period in days.",
+          "type": "number",
+          "minimum": 1,
+          "maximum": 3650
+        }
+      },
+      "additionalProperties": false
+    },
+    "activeCertificate": {
+      "description": "Optional active certificate override.",
+      "type": "string"
+    }
+  },
+  "additionalProperties": false,
+  "$id": "./KeyChainUpdateDto.schema.json",
+  "title": "KeyChainUpdateDto"
+}

package/templates/schemas/KmsConfigFile.schema.json

@@ -0,0 +1,37 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "./KmsConfigFile.schema.json",
+  "title": "KmsConfigFile",
+  "description": "A tenant KMS configuration file in legacy payload or versioned-envelope form.",
+  "oneOf": [
+    {
+      "$ref": "./KmsConfigDto.schema.json"
+    },
+    {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "string",
+          "const": "eudiplo.io/kms-config/v1"
+        },
+        "kind": {
+          "type": "string",
+          "const": "KmsConfig"
+        },
+        "metadata": {
+          "$ref": "./ConfigDocumentMetadata.schema.json"
+        },
+        "spec": {
+          "$ref": "./KmsConfigDto.schema.json"
+        }
+      },
+      "required": [
+        "apiVersion",
+        "kind",
+        "metadata",
+        "spec"
+      ],
+      "additionalProperties": false
+    }
+  ]
+}

package/templates/schemas/PresentationConfigFile.schema.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "./PresentationConfigFile.schema.json",
+  "title": "PresentationConfigFile",
+  "description": "A presentation configuration file in legacy payload or versioned-envelope form.",
+  "oneOf": [
+    {
+      "$ref": "./PresentationConfigCreateDto.schema.json"
+    },
+    {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "string",
+          "const": "eudiplo.io/presentation-config/v2"
+        },
+        "kind": {
+          "type": "string",
+          "const": "PresentationConfig"
+        },
+        "metadata": {
+          "$ref": "./ConfigDocumentMetadata.schema.json"
+        },
+        "spec": {
+          "$ref": "./PresentationConfigCreateDto.schema.json"
+        }
+      },
+      "required": ["apiVersion", "kind", "metadata", "spec"],
+      "additionalProperties": false
+    }
+  ]
+}

package/templates/schemas/RegistrarConfigFile.schema.json

@@ -0,0 +1,37 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "./RegistrarConfigFile.schema.json",
+  "title": "RegistrarConfigFile",
+  "description": "A registrar configuration file in legacy payload or versioned-envelope form.",
+  "oneOf": [
+    {
+      "$ref": "./CreateRegistrarConfigDto.schema.json"
+    },
+    {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "string",
+          "const": "eudiplo.io/registrar-config/v1"
+        },
+        "kind": {
+          "type": "string",
+          "const": "RegistrarConfig"
+        },
+        "metadata": {
+          "$ref": "./ConfigDocumentMetadata.schema.json"
+        },
+        "spec": {
+          "$ref": "./CreateRegistrarConfigDto.schema.json"
+        }
+      },
+      "required": [
+        "apiVersion",
+        "kind",
+        "metadata",
+        "spec"
+      ],
+      "additionalProperties": false
+    }
+  ]
+}

package/templates/schemas/RotationPolicyCreateDto.schema.json

@@ -0,0 +1,28 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "enabled": {
+      "type": "boolean",
+      "description": "Enable or disable automatic key rotation."
+    },
+    "intervalDays": {
+      "description": "Rotation interval in days.",
+      "type": "number",
+      "minimum": 1,
+      "maximum": 3650
+    },
+    "certValidityDays": {
+      "description": "Certificate validity period in days for generated leaf certificates.",
+      "type": "number",
+      "minimum": 1,
+      "maximum": 3650
+    }
+  },
+  "required": [
+    "enabled"
+  ],
+  "additionalProperties": false,
+  "$id": "./RotationPolicyCreateDto.schema.json",
+  "title": "RotationPolicyCreateDto"
+}

package/templates/schemas/RotationPolicyUpdateDto.schema.json

@@ -0,0 +1,25 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "enabled": {
+      "description": "Optional replacement for rotation enabled flag.",
+      "type": "boolean"
+    },
+    "intervalDays": {
+      "description": "Optional replacement for rotation interval in days.",
+      "type": "number",
+      "minimum": 1,
+      "maximum": 3650
+    },
+    "certValidityDays": {
+      "description": "Optional replacement for certificate validity period in days.",
+      "type": "number",
+      "minimum": 1,
+      "maximum": 3650
+    }
+  },
+  "additionalProperties": false,
+  "$id": "./RotationPolicyUpdateDto.schema.json",
+  "title": "RotationPolicyUpdateDto"
+}

package/templates/schemas/SessionStorageConfig.schema.json

@@ -0,0 +1,24 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "ttlSeconds": {
+      "description": "Session time-to-live in seconds.",
+      "type": "integer",
+      "minimum": 60,
+      "maximum": 9007199254740991
+    },
+    "cleanupMode": {
+      "description": "Whether to fully delete or anonymize expired sessions.",
+      "type": "string",
+      "enum": [
+        "full",
+        "anonymize"
+      ]
+    }
+  },
+  "additionalProperties": false,
+  "description": "Tenant session storage configuration.",
+  "$id": "./SessionStorageConfig.schema.json",
+  "title": "SessionStorageConfig"
+}

package/templates/schemas/StatusListConfig.schema.json

@@ -0,0 +1,51 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "capacity": {
+      "description": "Default status list capacity.",
+      "type": "integer",
+      "minimum": 100,
+      "maximum": 9007199254740991
+    },
+    "bits": {
+      "description": "Bits-per-status setting (1, 2, 4, or 8).",
+      "anyOf": [
+        {
+          "type": "number",
+          "const": 1
+        },
+        {
+          "type": "number",
+          "const": 2
+        },
+        {
+          "type": "number",
+          "const": 4
+        },
+        {
+          "type": "number",
+          "const": 8
+        }
+      ]
+    },
+    "ttl": {
+      "description": "JWT TTL for status list tokens in seconds.",
+      "type": "integer",
+      "minimum": 60,
+      "maximum": 9007199254740991
+    },
+    "immediateUpdate": {
+      "description": "Regenerate status list JWTs immediately after status updates.",
+      "type": "boolean"
+    },
+    "enableAggregation": {
+      "description": "Include aggregation_uri in generated status list JWTs.",
+      "type": "boolean"
+    }
+  },
+  "additionalProperties": false,
+  "description": "Tenant defaults for status list generation and publishing behavior.",
+  "$id": "./StatusListConfig.schema.json",
+  "title": "StatusListConfig"
+}