@eudiplo/cli 7.2.0-main.5fdd9ce → 7.2.0-main.b7bac52

package/templates/schemas/ClientConfigFile.schema.json

@@ -0,0 +1,37 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "./ClientConfigFile.schema.json",
+  "title": "ClientConfigFile",
+  "description": "A client configuration file in legacy payload or versioned-envelope form.",
+  "oneOf": [
+    {
+      "$ref": "./CreateClientDto.schema.json"
+    },
+    {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "string",
+          "const": "eudiplo.io/client/v1"
+        },
+        "kind": {
+          "type": "string",
+          "const": "Client"
+        },
+        "metadata": {
+          "$ref": "./ConfigDocumentMetadata.schema.json"
+        },
+        "spec": {
+          "$ref": "./CreateClientDto.schema.json"
+        }
+      },
+      "required": [
+        "apiVersion",
+        "kind",
+        "metadata",
+        "spec"
+      ],
+      "additionalProperties": false
+    }
+  ]
+}

package/templates/schemas/ConfigDocumentMetadata.schema.json

@@ -0,0 +1,25 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "./ConfigDocumentMetadata.schema.json",
+  "title": "ConfigDocumentMetadata",
+  "type": "object",
+  "properties": {
+    "id": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Stable resource identifier."
+    },
+    "generation": {
+      "type": "integer",
+      "minimum": 1,
+      "description": "Monotonically increasing configuration generation."
+    },
+    "ownership": {
+      "type": "string",
+      "enum": ["unmanaged", "file-managed"],
+      "description": "Requested ownership recorded when the document is applied."
+    }
+  },
+  "required": ["id"],
+  "additionalProperties": false
+}

package/templates/schemas/CreateStatusListDto.schema.json

@@ -0,0 +1,46 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "credentialConfigurationId": {
+      "description": "Optional credential configuration binding.",
+      "type": "string",
+      "minLength": 1
+    },
+    "keyChainId": {
+      "description": "Optional key chain to sign the list with.",
+      "type": "string",
+      "minLength": 1
+    },
+    "bits": {
+      "description": "Optional bits-per-status value.",
+      "anyOf": [
+        {
+          "type": "number",
+          "const": 1
+        },
+        {
+          "type": "number",
+          "const": 2
+        },
+        {
+          "type": "number",
+          "const": 4
+        },
+        {
+          "type": "number",
+          "const": 8
+        }
+      ]
+    },
+    "capacity": {
+      "description": "Optional status list capacity.",
+      "type": "integer",
+      "minimum": 1000,
+      "maximum": 9007199254740991
+    }
+  },
+  "additionalProperties": false,
+  "$id": "./CreateStatusListDto.schema.json",
+  "title": "CreateStatusListDto"
+}

package/templates/schemas/CreateTenantDto.schema.json

@@ -0,0 +1,116 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "id": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Unique tenant identifier."
+    },
+    "name": {
+      "default": "EUDIPLO",
+      "description": "Display name of the tenant.",
+      "type": "string",
+      "minLength": 1
+    },
+    "description": {
+      "description": "Optional tenant description.",
+      "type": "string",
+      "minLength": 1
+    },
+    "roles": {
+      "description": "Optional default role assignments for the tenant.",
+      "type": "array",
+      "items": {
+        "type": "string",
+        "enum": [
+          "tenants:manage",
+          "issuance:offer",
+          "issuance:manage",
+          "presentation:request",
+          "presentation:manage",
+          "clients:manage",
+          "users:manage",
+          "registrar:manage"
+        ]
+      }
+    },
+    "sessionConfig": {
+      "description": "Optional tenant-specific session storage configuration.",
+      "type": "object",
+      "properties": {
+        "ttlSeconds": {
+          "description": "Session time-to-live in seconds.",
+          "type": "integer",
+          "minimum": 60,
+          "maximum": 9007199254740991
+        },
+        "cleanupMode": {
+          "description": "Whether to fully delete or anonymize expired sessions.",
+          "type": "string",
+          "enum": [
+            "full",
+            "anonymize"
+          ]
+        }
+      },
+      "additionalProperties": false
+    },
+    "statusListConfig": {
+      "description": "Optional tenant-specific status list defaults.",
+      "type": "object",
+      "properties": {
+        "capacity": {
+          "description": "Default status list capacity.",
+          "type": "integer",
+          "minimum": 100,
+          "maximum": 9007199254740991
+        },
+        "bits": {
+          "description": "Bits-per-status setting (1, 2, 4, or 8).",
+          "anyOf": [
+            {
+              "type": "number",
+              "const": 1
+            },
+            {
+              "type": "number",
+              "const": 2
+            },
+            {
+              "type": "number",
+              "const": 4
+            },
+            {
+              "type": "number",
+              "const": 8
+            }
+          ]
+        },
+        "ttl": {
+          "description": "JWT TTL for status list tokens in seconds.",
+          "type": "integer",
+          "minimum": 60,
+          "maximum": 9007199254740991
+        },
+        "immediateUpdate": {
+          "description": "Regenerate status list JWTs immediately after status updates.",
+          "type": "boolean"
+        },
+        "enableAggregation": {
+          "description": "Include aggregation_uri in generated status list JWTs.",
+          "type": "boolean"
+        }
+      },
+      "additionalProperties": false
+    }
+  },
+  "required": [
+    "id",
+    "name"
+  ],
+  "additionalProperties": false,
+  "description": "Payload for creating a tenant.",
+  "$id": "./CreateTenantDto.schema.json",
+  "title": "CreateTenantDto"
+}

package/templates/schemas/CredentialConfigFile.schema.json

@@ -0,0 +1,37 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "./CredentialConfigFile.schema.json",
+  "title": "CredentialConfigFile",
+  "description": "A credential configuration file in legacy payload or versioned-envelope form.",
+  "oneOf": [
+    {
+      "$ref": "./CredentialConfigCreate.schema.json"
+    },
+    {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "string",
+          "const": "eudiplo.io/credential-config/v1"
+        },
+        "kind": {
+          "type": "string",
+          "const": "CredentialConfig"
+        },
+        "metadata": {
+          "$ref": "./ConfigDocumentMetadata.schema.json"
+        },
+        "spec": {
+          "$ref": "./CredentialConfigCreate.schema.json"
+        }
+      },
+      "required": [
+        "apiVersion",
+        "kind",
+        "metadata",
+        "spec"
+      ],
+      "additionalProperties": false
+    }
+  ]
+}

package/templates/schemas/DCQL.schema.json

@@ -0,0 +1,401 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "credentials": {
+      "minItems": 1,
+      "type": "array",
+      "items": {
+        "oneOf": [
+          {
+            "type": "object",
+            "properties": {
+              "id": {
+                "type": "string",
+                "minLength": 1,
+                "pattern": "^[A-Za-z0-9_-]+$",
+                "description": "Credential query identifier."
+              },
+              "multiple": {
+                "description": "Allow multiple matching credentials.",
+                "type": "boolean"
+              },
+              "claim_sets": {
+                "description": "Optional claim set constraints.",
+                "type": "array",
+                "items": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
+                }
+              },
+              "trusted_authorities": {
+                "description": "Optional trusted authority constraints.",
+                "type": "array",
+                "items": {
+                  "oneOf": [
+                    {
+                      "type": "object",
+                      "properties": {
+                        "type": {
+                          "type": "string",
+                          "const": "etsi_tl",
+                          "description": "Trusted authority type discriminator for ETSI trust lists."
+                        },
+                        "values": {
+                          "type": "array",
+                          "items": {
+                            "type": "object",
+                            "properties": {
+                              "trustListId": {
+                                "description": "Optional trust list id reference.",
+                                "type": "string"
+                              },
+                              "url": {
+                                "description": "Optional trust list URL reference.",
+                                "anyOf": [
+                                  {
+                                    "type": "string",
+                                    "format": "uri"
+                                  },
+                                  {
+                                    "type": "string",
+                                    "pattern": "^<TENANT_URL>(?:\\/.*)?$"
+                                  }
+                                ]
+                              },
+                              "verifierKey": {
+                                "description": "Optional verifier key material.",
+                                "type": "object",
+                                "propertyNames": {
+                                  "type": "string"
+                                },
+                                "additionalProperties": {}
+                              },
+                              "verifierX509Der": {
+                                "description": "Optional verifier certificate in DER/base64 form.",
+                                "type": "string"
+                              }
+                            },
+                            "additionalProperties": false
+                          },
+                          "description": "Trust list references for ETSI TL verification."
+                        }
+                      },
+                      "required": [
+                        "type",
+                        "values"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "type": {
+                          "type": "string",
+                          "const": "openid_federation",
+                          "description": "Trusted authority type discriminator for OpenID Federation."
+                        },
+                        "values": {
+                          "type": "array",
+                          "items": {
+                            "type": "string"
+                          },
+                          "description": "OpenID Federation authority identifiers."
+                        }
+                      },
+                      "required": [
+                        "type",
+                        "values"
+                      ],
+                      "additionalProperties": false
+                    }
+                  ]
+                }
+              },
+              "format": {
+                "type": "string",
+                "const": "dc+sd-jwt",
+                "description": "Credential format discriminator."
+              },
+              "meta": {
+                "type": "object",
+                "properties": {
+                  "vct_values": {
+                    "minItems": 1,
+                    "type": "array",
+                    "items": {
+                      "type": "string"
+                    },
+                    "description": "Accepted VCT values."
+                  }
+                },
+                "required": [
+                  "vct_values"
+                ],
+                "additionalProperties": false
+              },
+              "claims": {
+                "description": "Optional claim-level constraints.",
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "properties": {
+                    "id": {
+                      "description": "Optional claim query id.",
+                      "type": "string"
+                    },
+                    "path": {
+                      "type": "array",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "number"
+                          }
+                        ]
+                      },
+                      "description": "Path to the claim value in presented credentials."
+                    },
+                    "values": {
+                      "description": "Optional allowed values for the claim.",
+                      "type": "array",
+                      "items": {
+                        "type": "string"
+                      }
+                    }
+                  },
+                  "required": [
+                    "path"
+                  ],
+                  "additionalProperties": false
+                }
+              }
+            },
+            "required": [
+              "id",
+              "format",
+              "meta"
+            ],
+            "additionalProperties": false
+          },
+          {
+            "type": "object",
+            "properties": {
+              "id": {
+                "type": "string",
+                "minLength": 1,
+                "pattern": "^[A-Za-z0-9_-]+$",
+                "description": "Credential query identifier."
+              },
+              "multiple": {
+                "description": "Allow multiple matching credentials.",
+                "type": "boolean"
+              },
+              "claim_sets": {
+                "description": "Optional claim set constraints.",
+                "type": "array",
+                "items": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
+                }
+              },
+              "trusted_authorities": {
+                "description": "Optional trusted authority constraints.",
+                "type": "array",
+                "items": {
+                  "oneOf": [
+                    {
+                      "type": "object",
+                      "properties": {
+                        "type": {
+                          "type": "string",
+                          "const": "etsi_tl",
+                          "description": "Trusted authority type discriminator for ETSI trust lists."
+                        },
+                        "values": {
+                          "type": "array",
+                          "items": {
+                            "type": "object",
+                            "properties": {
+                              "trustListId": {
+                                "description": "Optional trust list id reference.",
+                                "type": "string"
+                              },
+                              "url": {
+                                "description": "Optional trust list URL reference.",
+                                "anyOf": [
+                                  {
+                                    "type": "string",
+                                    "format": "uri"
+                                  },
+                                  {
+                                    "type": "string",
+                                    "pattern": "^<TENANT_URL>(?:\\/.*)?$"
+                                  }
+                                ]
+                              },
+                              "verifierKey": {
+                                "description": "Optional verifier key material.",
+                                "type": "object",
+                                "propertyNames": {
+                                  "type": "string"
+                                },
+                                "additionalProperties": {}
+                              },
+                              "verifierX509Der": {
+                                "description": "Optional verifier certificate in DER/base64 form.",
+                                "type": "string"
+                              }
+                            },
+                            "additionalProperties": false
+                          },
+                          "description": "Trust list references for ETSI TL verification."
+                        }
+                      },
+                      "required": [
+                        "type",
+                        "values"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "type": {
+                          "type": "string",
+                          "const": "openid_federation",
+                          "description": "Trusted authority type discriminator for OpenID Federation."
+                        },
+                        "values": {
+                          "type": "array",
+                          "items": {
+                            "type": "string"
+                          },
+                          "description": "OpenID Federation authority identifiers."
+                        }
+                      },
+                      "required": [
+                        "type",
+                        "values"
+                      ],
+                      "additionalProperties": false
+                    }
+                  ]
+                }
+              },
+              "format": {
+                "type": "string",
+                "const": "mso_mdoc",
+                "description": "Credential format discriminator."
+              },
+              "meta": {
+                "type": "object",
+                "properties": {
+                  "doctype_value": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Expected mDoc doctype value."
+                  }
+                },
+                "required": [
+                  "doctype_value"
+                ],
+                "additionalProperties": false
+              },
+              "claims": {
+                "description": "Optional mDoc claim-level constraints.",
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "properties": {
+                    "id": {
+                      "description": "Optional claim query id.",
+                      "type": "string"
+                    },
+                    "path": {
+                      "type": "array",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "number"
+                          }
+                        ]
+                      },
+                      "description": "Path to the claim value in presented credentials."
+                    },
+                    "values": {
+                      "description": "Optional allowed values for the claim.",
+                      "type": "array",
+                      "items": {
+                        "type": "string"
+                      }
+                    },
+                    "intent_to_retain": {
+                      "description": "Whether relying party intends to retain the claim.",
+                      "type": "boolean"
+                    }
+                  },
+                  "required": [
+                    "path"
+                  ],
+                  "additionalProperties": false
+                }
+              }
+            },
+            "required": [
+              "id",
+              "format",
+              "meta"
+            ],
+            "additionalProperties": false
+          }
+        ]
+      },
+      "description": "Credential queries requested by the verifier."
+    },
+    "credential_sets": {
+      "description": "Optional higher-level credential set requirements.",
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "options": {
+            "minItems": 1,
+            "type": "array",
+            "items": {
+              "minItems": 1,
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "description": "Alternative credential query id combinations."
+          },
+          "required": {
+            "description": "Whether this credential set is mandatory.",
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "options"
+        ],
+        "additionalProperties": false
+      }
+    }
+  },
+  "required": [
+    "credentials"
+  ],
+  "additionalProperties": false,
+  "$id": "./DCQL.schema.json",
+  "title": "DCQL"
+}