@eudiplo/cli 7.2.0 → 7.3.0-main.b8ff00a

package/templates/schemas/KeyChainConfigFile.schema.json

@@ -0,0 +1,476 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "anyOf": [
+    {
+      "type": "object",
+      "properties": {
+        "id": {
+          "description": "Optional key chain id. If omitted, one is generated.",
+          "type": "string"
+        },
+        "key": {
+          "type": "object",
+          "properties": {
+            "kty": {
+              "type": "string",
+              "description": "Key type (for example EC)."
+            },
+            "x": {
+              "type": "string",
+              "description": "Elliptic curve public x coordinate."
+            },
+            "y": {
+              "type": "string",
+              "description": "Elliptic curve public y coordinate."
+            },
+            "crv": {
+              "type": "string",
+              "description": "Elliptic curve name."
+            },
+            "d": {
+              "type": "string",
+              "description": "Private key value."
+            },
+            "alg": {
+              "description": "Optional algorithm hint.",
+              "type": "string"
+            },
+            "kid": {
+              "description": "Optional key identifier.",
+              "type": "string"
+            }
+          },
+          "required": [
+            "kty",
+            "x",
+            "y",
+            "crv",
+            "d"
+          ],
+          "additionalProperties": false,
+          "description": "Private key material in JWK format."
+        },
+        "description": {
+          "description": "Optional key chain description.",
+          "type": "string"
+        },
+        "usageType": {
+          "type": "string",
+          "enum": [
+            "access",
+            "attestation",
+            "trustList",
+            "statusList",
+            "encrypt"
+          ],
+          "description": "Key usage category for the imported key chain."
+        },
+        "crt": {
+          "description": "Optional certificate chain values in PEM or base64 DER.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "kmsProvider": {
+          "description": "Optional KMS provider id.",
+          "type": "string"
+        },
+        "rotationPolicy": {
+          "description": "Optional rotation policy for imported key chains.",
+          "type": "object",
+          "properties": {
+            "enabled": {
+              "type": "boolean",
+              "description": "Enable automatic rotation for imported key chains."
+            },
+            "intervalDays": {
+              "description": "Rotation interval in days.",
+              "type": "number",
+              "minimum": 1,
+              "maximum": 3650
+            },
+            "certValidityDays": {
+              "description": "Certificate validity period in days.",
+              "type": "number",
+              "minimum": 1,
+              "maximum": 3650
+            }
+          },
+          "required": [
+            "enabled"
+          ],
+          "additionalProperties": false
+        }
+      },
+      "required": [
+        "key",
+        "usageType"
+      ],
+      "additionalProperties": false
+    },
+    {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "string",
+          "const": "eudiplo.io/key-chain/v2"
+        },
+        "kind": {
+          "type": "string",
+          "const": "KeyChain"
+        },
+        "metadata": {
+          "type": "object",
+          "properties": {
+            "id": {
+              "type": "string"
+            },
+            "generation": {
+              "type": "number"
+            },
+            "ownership": {
+              "type": "string",
+              "enum": [
+                "unmanaged",
+                "file-managed"
+              ]
+            }
+          },
+          "required": [
+            "id"
+          ],
+          "additionalProperties": false
+        },
+        "spec": {
+          "type": "object",
+          "properties": {
+            "id": {
+              "type": "string"
+            },
+            "description": {
+              "type": "string"
+            },
+            "usageType": {
+              "type": "string",
+              "enum": [
+                "access",
+                "attestation",
+                "trustList",
+                "statusList",
+                "encrypt"
+              ]
+            },
+            "keySource": {
+              "oneOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "type": {
+                      "type": "string",
+                      "const": "private-jwk"
+                    },
+                    "jwk": {
+                      "type": "object",
+                      "properties": {
+                        "kty": {
+                          "type": "string",
+                          "description": "Key type (for example EC)."
+                        },
+                        "x": {
+                          "type": "string",
+                          "description": "Elliptic curve public x coordinate."
+                        },
+                        "y": {
+                          "type": "string",
+                          "description": "Elliptic curve public y coordinate."
+                        },
+                        "crv": {
+                          "type": "string",
+                          "description": "Elliptic curve name."
+                        },
+                        "d": {
+                          "type": "string",
+                          "description": "Private key value."
+                        },
+                        "alg": {
+                          "description": "Optional algorithm hint.",
+                          "type": "string"
+                        },
+                        "kid": {
+                          "description": "Optional key identifier.",
+                          "type": "string"
+                        }
+                      },
+                      "required": [
+                        "kty",
+                        "x",
+                        "y",
+                        "crv",
+                        "d"
+                      ],
+                      "additionalProperties": false
+                    },
+                    "activeJwk": {
+                      "type": "object",
+                      "properties": {
+                        "kty": {
+                          "type": "string",
+                          "description": "Key type (for example EC)."
+                        },
+                        "x": {
+                          "type": "string",
+                          "description": "Elliptic curve public x coordinate."
+                        },
+                        "y": {
+                          "type": "string",
+                          "description": "Elliptic curve public y coordinate."
+                        },
+                        "crv": {
+                          "type": "string",
+                          "description": "Elliptic curve name."
+                        },
+                        "d": {
+                          "type": "string",
+                          "description": "Private key value."
+                        },
+                        "alg": {
+                          "description": "Optional algorithm hint.",
+                          "type": "string"
+                        },
+                        "kid": {
+                          "description": "Optional key identifier.",
+                          "type": "string"
+                        }
+                      },
+                      "required": [
+                        "kty",
+                        "x",
+                        "y",
+                        "crv",
+                        "d"
+                      ],
+                      "additionalProperties": false
+                    }
+                  },
+                  "required": [
+                    "type",
+                    "jwk"
+                  ],
+                  "additionalProperties": false
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "type": {
+                      "type": "string",
+                      "const": "external-reference"
+                    },
+                    "provider": {
+                      "type": "string"
+                    },
+                    "externalKeyId": {
+                      "type": "string"
+                    },
+                    "publicJwk": {
+                      "type": "object",
+                      "properties": {
+                        "kty": {
+                          "type": "string"
+                        },
+                        "x": {
+                          "type": "string"
+                        },
+                        "y": {
+                          "type": "string"
+                        },
+                        "crv": {
+                          "type": "string"
+                        },
+                        "alg": {
+                          "type": "string"
+                        },
+                        "kid": {
+                          "type": "string"
+                        }
+                      },
+                      "required": [
+                        "kty",
+                        "x",
+                        "y",
+                        "crv"
+                      ],
+                      "additionalProperties": false
+                    },
+                    "activeExternalKeyId": {
+                      "type": "string"
+                    },
+                    "activePublicJwk": {
+                      "type": "object",
+                      "properties": {
+                        "kty": {
+                          "type": "string"
+                        },
+                        "x": {
+                          "type": "string"
+                        },
+                        "y": {
+                          "type": "string"
+                        },
+                        "crv": {
+                          "type": "string"
+                        },
+                        "alg": {
+                          "type": "string"
+                        },
+                        "kid": {
+                          "type": "string"
+                        }
+                      },
+                      "required": [
+                        "kty",
+                        "x",
+                        "y",
+                        "crv"
+                      ],
+                      "additionalProperties": false
+                    }
+                  },
+                  "required": [
+                    "type",
+                    "provider",
+                    "externalKeyId",
+                    "publicJwk"
+                  ],
+                  "additionalProperties": false
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "type": {
+                      "type": "string",
+                      "const": "required"
+                    },
+                    "publicJwk": {
+                      "type": "object",
+                      "properties": {
+                        "kty": {
+                          "type": "string"
+                        },
+                        "x": {
+                          "type": "string"
+                        },
+                        "y": {
+                          "type": "string"
+                        },
+                        "crv": {
+                          "type": "string"
+                        },
+                        "alg": {
+                          "type": "string"
+                        },
+                        "kid": {
+                          "type": "string"
+                        }
+                      },
+                      "required": [
+                        "kty",
+                        "x",
+                        "y",
+                        "crv"
+                      ],
+                      "additionalProperties": false
+                    }
+                  },
+                  "required": [
+                    "type"
+                  ],
+                  "additionalProperties": false
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "type": {
+                      "type": "string",
+                      "const": "regenerate"
+                    },
+                    "keyChainType": {
+                      "type": "string",
+                      "enum": [
+                        "standalone",
+                        "internalChain"
+                      ]
+                    }
+                  },
+                  "required": [
+                    "type"
+                  ],
+                  "additionalProperties": false
+                }
+              ]
+            },
+            "crt": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "kmsProvider": {
+              "type": "string"
+            },
+            "rotationPolicy": {
+              "type": "object",
+              "properties": {
+                "enabled": {
+                  "type": "boolean"
+                },
+                "intervalDays": {
+                  "anyOf": [
+                    {
+                      "type": "number",
+                      "minimum": 1,
+                      "maximum": 3650
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                },
+                "certValidityDays": {
+                  "anyOf": [
+                    {
+                      "type": "number",
+                      "minimum": 1,
+                      "maximum": 3650
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                }
+              },
+              "required": [
+                "enabled"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "required": [
+            "usageType",
+            "keySource"
+          ],
+          "additionalProperties": false
+        }
+      },
+      "required": [
+        "apiVersion",
+        "kind",
+        "metadata",
+        "spec"
+      ],
+      "additionalProperties": false
+    }
+  ],
+  "$id": "./KeyChainConfigFile.schema.json",
+  "title": "KeyChainConfigFile"
+}

package/templates/schemas/KeyChainCreateDto.schema.json

@@ -0,0 +1,66 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "usageType": {
+      "type": "string",
+      "enum": [
+        "access",
+        "attestation",
+        "trustList",
+        "statusList",
+        "encrypt"
+      ],
+      "description": "Key usage category for the key chain."
+    },
+    "type": {
+      "type": "string",
+      "enum": [
+        "standalone",
+        "internalChain"
+      ],
+      "description": "Key chain mode."
+    },
+    "description": {
+      "description": "Optional key chain description.",
+      "type": "string"
+    },
+    "kmsProvider": {
+      "description": "Optional KMS provider id for key storage operations.",
+      "type": "string"
+    },
+    "rotationPolicy": {
+      "description": "Optional rotation policy.",
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "description": "Enable or disable automatic key rotation."
+        },
+        "intervalDays": {
+          "description": "Rotation interval in days.",
+          "type": "number",
+          "minimum": 1,
+          "maximum": 3650
+        },
+        "certValidityDays": {
+          "description": "Certificate validity period in days for generated leaf certificates.",
+          "type": "number",
+          "minimum": 1,
+          "maximum": 3650
+        }
+      },
+      "required": [
+        "enabled"
+      ],
+      "additionalProperties": false
+    }
+  },
+  "required": [
+    "usageType",
+    "type"
+  ],
+  "additionalProperties": false,
+  "$id": "./KeyChainCreateDto.schema.json",
+  "title": "KeyChainCreateDto"
+}

package/templates/schemas/KeyChainUpdateDto.schema.json

@@ -0,0 +1,40 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "description": {
+      "description": "Optional replacement description.",
+      "type": "string"
+    },
+    "rotationPolicy": {
+      "description": "Optional rotation policy updates.",
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "description": "Optional replacement for rotation enabled flag.",
+          "type": "boolean"
+        },
+        "intervalDays": {
+          "description": "Optional replacement for rotation interval in days.",
+          "type": "number",
+          "minimum": 1,
+          "maximum": 3650
+        },
+        "certValidityDays": {
+          "description": "Optional replacement for certificate validity period in days.",
+          "type": "number",
+          "minimum": 1,
+          "maximum": 3650
+        }
+      },
+      "additionalProperties": false
+    },
+    "activeCertificate": {
+      "description": "Optional active certificate override.",
+      "type": "string"
+    }
+  },
+  "additionalProperties": false,
+  "$id": "./KeyChainUpdateDto.schema.json",
+  "title": "KeyChainUpdateDto"
+}

package/templates/schemas/KmsConfigFile.schema.json

@@ -0,0 +1,37 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "./KmsConfigFile.schema.json",
+  "title": "KmsConfigFile",
+  "description": "A tenant KMS configuration file in legacy payload or versioned-envelope form.",
+  "oneOf": [
+    {
+      "$ref": "./KmsConfigDto.schema.json"
+    },
+    {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "string",
+          "const": "eudiplo.io/kms-config/v1"
+        },
+        "kind": {
+          "type": "string",
+          "const": "KmsConfig"
+        },
+        "metadata": {
+          "$ref": "./ConfigDocumentMetadata.schema.json"
+        },
+        "spec": {
+          "$ref": "./KmsConfigDto.schema.json"
+        }
+      },
+      "required": [
+        "apiVersion",
+        "kind",
+        "metadata",
+        "spec"
+      ],
+      "additionalProperties": false
+    }
+  ]
+}

package/templates/schemas/PresentationConfigFile.schema.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "./PresentationConfigFile.schema.json",
+  "title": "PresentationConfigFile",
+  "description": "A presentation configuration file in legacy payload or versioned-envelope form.",
+  "oneOf": [
+    {
+      "$ref": "./PresentationConfigCreateDto.schema.json"
+    },
+    {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "string",
+          "const": "eudiplo.io/presentation-config/v2"
+        },
+        "kind": {
+          "type": "string",
+          "const": "PresentationConfig"
+        },
+        "metadata": {
+          "$ref": "./ConfigDocumentMetadata.schema.json"
+        },
+        "spec": {
+          "$ref": "./PresentationConfigCreateDto.schema.json"
+        }
+      },
+      "required": ["apiVersion", "kind", "metadata", "spec"],
+      "additionalProperties": false
+    }
+  ]
+}

package/templates/schemas/RegistrarConfigFile.schema.json

@@ -0,0 +1,37 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "./RegistrarConfigFile.schema.json",
+  "title": "RegistrarConfigFile",
+  "description": "A registrar configuration file in legacy payload or versioned-envelope form.",
+  "oneOf": [
+    {
+      "$ref": "./CreateRegistrarConfigDto.schema.json"
+    },
+    {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "string",
+          "const": "eudiplo.io/registrar-config/v1"
+        },
+        "kind": {
+          "type": "string",
+          "const": "RegistrarConfig"
+        },
+        "metadata": {
+          "$ref": "./ConfigDocumentMetadata.schema.json"
+        },
+        "spec": {
+          "$ref": "./CreateRegistrarConfigDto.schema.json"
+        }
+      },
+      "required": [
+        "apiVersion",
+        "kind",
+        "metadata",
+        "spec"
+      ],
+      "additionalProperties": false
+    }
+  ]
+}