@eudiplo/cli 9.1.0-main.2c15dc1 → 9.1.0-main.2d54936

package/dist/index.js

@@ -15088,7 +15088,7 @@ var CONFIG_FORMATS = {
   RegistrarConfig: {
     slug: "registrar-config",
     file: "RegistrarConfigFile",
-    version: 1
+    version: 2
   },
   IssuanceConfig: {
     slug: "issuance-config",
@@ -15145,6 +15145,8 @@ function resourceId(input) {
 function bareFileVersion(kind, spec) {
   if (kind === "KeyChain")
     return "type" in spec ? 2 : 1;
+  if (kind === "RegistrarConfig")
+    return "relyingPartyContact" in spec ? 2 : 1;
   if (kind === "KmsConfig") {
     const providers = Array.isArray(spec.providers) ? spec.providers : [];
     return providers.some((provider) => typeof provider === "object" && provider !== null && ("algorithms" in provider || "defaultAlgorithm" in provider)) ? 2 : 1;
@@ -15223,6 +15225,16 @@ var CONFIG_MIGRATIONS = [
     // their default algorithms.
     migrate: (spec) => ({ spec })
   },
+  {
+    id: "registrar-config-v2-relying-party-contact",
+    kind: "RegistrarConfig",
+    from: 1,
+    to: 2,
+    // v2 only adds the optional relyingPartyContact: a v1 spec is a
+    // valid v2 spec, whose relying party is registered without contact
+    // as before.
+    migrate: (spec) => ({ spec })
+  },
   {
     id: "key-chain-v2-type",
     kind: "KeyChain",
@@ -24225,6 +24237,135 @@ var CONFIG_SCHEMAS = [
       }
     }
   },
+  {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$id": "https://eudiplo.dev/schemas/v2/RegistrarConfigFile.schema.json",
+    "title": "RegistrarConfigFile",
+    "type": "object",
+    "properties": {
+      "$schema": {
+        "type": "string",
+        "const": "https://eudiplo.dev/schemas/v2/RegistrarConfigFile.schema.json"
+      },
+      "metadata": {
+        "type": "object",
+        "properties": {
+          "generation": {
+            "type": "integer",
+            "minimum": 1,
+            "description": "Monotonically increasing configuration generation."
+          },
+          "ownership": {
+            "type": "string",
+            "enum": [
+              "unmanaged",
+              "file-managed"
+            ],
+            "description": "Requested ownership recorded when the document is applied."
+          }
+        },
+        "additionalProperties": false
+      },
+      "spec": {
+        "$ref": "#/$defs/CreateRegistrarConfigDto"
+      }
+    },
+    "required": [
+      "$schema",
+      "spec"
+    ],
+    "additionalProperties": false,
+    "$defs": {
+      "CreateRegistrarConfigDto": {
+        "type": "object",
+        "properties": {
+          "registrarUrl": {
+            "type": "string",
+            "format": "uri",
+            "description": "Base URL of the registrar service."
+          },
+          "oidcUrl": {
+            "type": "string",
+            "format": "uri",
+            "description": "OIDC discovery or issuer URL used for authentication."
+          },
+          "clientId": {
+            "type": "string",
+            "minLength": 1,
+            "description": "OAuth client ID used against the registrar."
+          },
+          "clientSecret": {
+            "description": "Optional OAuth client secret for registrar authentication.",
+            "type": "string",
+            "minLength": 1
+          },
+          "username": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Username used for registrar authentication."
+          },
+          "password": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Password used for registrar authentication."
+          },
+          "registrationCertificateDefaults": {
+            "description": "Optional default registration certificate values.",
+            "anyOf": [
+              {
+                "type": "object",
+                "propertyNames": {
+                  "type": "string"
+                },
+                "additionalProperties": {}
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "relyingPartyContact": {
+            "description": "Contact of the relying party, sent when EUDIPLO registers the relying party at the registrar. The registrar needs at least one contact value to issue access certificates. A relying party that is already registered keeps its contact.",
+            "anyOf": [
+              {
+                "type": "object",
+                "properties": {
+                  "supportUri": {
+                    "description": "https URL where the relying party can be contacted.",
+                    "type": "string",
+                    "format": "uri"
+                  },
+                  "email": {
+                    "description": "Email address of the relying party.",
+                    "type": "string",
+                    "pattern": "^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}$"
+                  },
+                  "phone": {
+                    "description": "Phone number of the relying party.",
+                    "type": "string",
+                    "pattern": "^[+0-9()\\-\\s]{5,40}$"
+                  }
+                },
+                "additionalProperties": false
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "registrarUrl",
+          "oidcUrl",
+          "clientId",
+          "username",
+          "password"
+        ],
+        "additionalProperties": false,
+        "title": "CreateRegistrarConfigDto"
+      }
+    }
+  },
   {
     "$schema": "https://json-schema.org/draft/2020-12/schema",
     "$id": "https://eudiplo.dev/schemas/v3/IssuanceConfigFile.schema.json",
@@ -29183,7 +29324,7 @@ function createDeploymentCommands(context, setExitCode) {
 // package.json
 var package_default = {
   name: "@eudiplo/cli",
-  version: "9.1.0-main.2c15dc1",
+  version: "9.1.0-main.2d54936",
   description: "Deployment-aware command line tools for EUDIPLO",
   private: false,
   type: "module",
@@ -29198,11 +29339,12 @@ var package_default = {
   scripts: {
     "assets:sync": "node scripts/sync-cli-assets.cjs",
     "assets:check": "node scripts/check-cli-assets.cjs",
+    "build:deps": 'pnpm --silent --filter "@eudiplo/cli^..." build',
     build: "pnpm assets:sync && pnpm assets:check && tsc -p tsconfig.json",
     "build:publish": "pnpm build && esbuild src/index.ts --bundle --platform=node --format=esm --target=node22.12 --alias:jsonc-parser=jsonc-parser/lib/esm/main.js --outfile=dist/index.js",
     "build:sea:bundle": "pnpm assets:sync && pnpm assets:check && esbuild src/index.ts --bundle --platform=node --format=esm --target=node22.12 --alias:jsonc-parser=jsonc-parser/lib/esm/main.js --outfile=dist-sea/index.js",
     "build:sea": "node scripts/build-cli-sea.mjs",
-    dev: "tsx src/index.ts",
+    dev: "pnpm -s build:deps && tsx src/index.ts",
     test: "vitest run --root ../.. --project cli",
     lint: "biome lint .",
     format: "biome format --write .",

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@eudiplo/cli",
-    "version": "9.1.0-main.2c15dc1",
+    "version": "9.1.0-main.2d54936",
     "description": "Deployment-aware command line tools for EUDIPLO",
     "private": false,
     "type": "module",
@@ -15,11 +15,12 @@
     "scripts": {
         "assets:sync": "node scripts/sync-cli-assets.cjs",
         "assets:check": "node scripts/check-cli-assets.cjs",
+        "build:deps": "pnpm --silent --filter \"@eudiplo/cli^...\" build",
         "build": "pnpm assets:sync && pnpm assets:check && tsc -p tsconfig.json",
         "build:publish": "pnpm build && esbuild src/index.ts --bundle --platform=node --format=esm --target=node22.12 --alias:jsonc-parser=jsonc-parser/lib/esm/main.js --outfile=dist/index.js",
         "build:sea:bundle": "pnpm assets:sync && pnpm assets:check && esbuild src/index.ts --bundle --platform=node --format=esm --target=node22.12 --alias:jsonc-parser=jsonc-parser/lib/esm/main.js --outfile=dist-sea/index.js",
         "build:sea": "node scripts/build-cli-sea.mjs",
-        "dev": "tsx src/index.ts",
+        "dev": "pnpm -s build:deps && tsx src/index.ts",
         "test": "vitest run --root ../.. --project cli",
         "lint": "biome lint .",
         "format": "biome format --write .",

package/templates/schemas/CreateRegistrarConfigDto.schema.json

@@ -46,6 +46,35 @@
           "type": "null"
         }
       ]
+    },
+    "relyingPartyContact": {
+      "description": "Contact of the relying party, sent when EUDIPLO registers the relying party at the registrar. The registrar needs at least one contact value to issue access certificates. A relying party that is already registered keeps its contact.",
+      "anyOf": [
+        {
+          "type": "object",
+          "properties": {
+            "supportUri": {
+              "description": "https URL where the relying party can be contacted.",
+              "type": "string",
+              "format": "uri"
+            },
+            "email": {
+              "description": "Email address of the relying party.",
+              "type": "string",
+              "pattern": "^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}$"
+            },
+            "phone": {
+              "description": "Phone number of the relying party.",
+              "type": "string",
+              "pattern": "^[+0-9()\\-\\s]{5,40}$"
+            }
+          },
+          "additionalProperties": false
+        },
+        {
+          "type": "null"
+        }
+      ]
     }
   },
   "required": [

package/templates/schemas/RegistrarConfigFile.schema.json

@@ -9,7 +9,7 @@
       "properties": {
         "$schema": {
           "type": "string",
-          "const": "https://eudiplo.dev/schemas/v1/RegistrarConfigFile.schema.json"
+          "const": "https://eudiplo.dev/schemas/v2/RegistrarConfigFile.schema.json"
         },
         "metadata": {
           "type": "object",
@@ -39,6 +39,106 @@
         "spec"
       ],
       "additionalProperties": false
+    },
+    {
+      "$schema": "https://json-schema.org/draft/2020-12/schema",
+      "$id": "https://eudiplo.dev/schemas/v1/RegistrarConfigFile.schema.json",
+      "title": "RegistrarConfigFile",
+      "type": "object",
+      "properties": {
+        "$schema": {
+          "type": "string",
+          "const": "https://eudiplo.dev/schemas/v1/RegistrarConfigFile.schema.json"
+        },
+        "metadata": {
+          "type": "object",
+          "properties": {
+            "generation": {
+              "type": "integer",
+              "minimum": 1,
+              "description": "Monotonically increasing configuration generation."
+            },
+            "ownership": {
+              "type": "string",
+              "enum": [
+                "unmanaged",
+                "file-managed"
+              ],
+              "description": "Requested ownership recorded when the document is applied."
+            }
+          },
+          "additionalProperties": false
+        },
+        "spec": {
+          "$ref": "#/$defs/CreateRegistrarConfigDto"
+        }
+      },
+      "required": [
+        "$schema",
+        "spec"
+      ],
+      "additionalProperties": false,
+      "$defs": {
+        "CreateRegistrarConfigDto": {
+          "type": "object",
+          "properties": {
+            "registrarUrl": {
+              "type": "string",
+              "format": "uri",
+              "description": "Base URL of the registrar service."
+            },
+            "oidcUrl": {
+              "type": "string",
+              "format": "uri",
+              "description": "OIDC discovery or issuer URL used for authentication."
+            },
+            "clientId": {
+              "type": "string",
+              "minLength": 1,
+              "description": "OAuth client ID used against the registrar."
+            },
+            "clientSecret": {
+              "description": "Optional OAuth client secret for registrar authentication.",
+              "type": "string",
+              "minLength": 1
+            },
+            "username": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Username used for registrar authentication."
+            },
+            "password": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Password used for registrar authentication."
+            },
+            "registrationCertificateDefaults": {
+              "description": "Optional default registration certificate values.",
+              "anyOf": [
+                {
+                  "type": "object",
+                  "propertyNames": {
+                    "type": "string"
+                  },
+                  "additionalProperties": {}
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            }
+          },
+          "required": [
+            "registrarUrl",
+            "oidcUrl",
+            "clientId",
+            "username",
+            "password"
+          ],
+          "additionalProperties": false,
+          "title": "CreateRegistrarConfigDto"
+        }
+      }
     }
   ]
 }