@eudiplo/cli 9.1.0-main.53e4625 → 9.1.0-main.54bacd2

package/templates/schemas/TenantConfigFile.schema.json

@@ -9,7 +9,7 @@
       "properties": {
         "$schema": {
           "type": "string",
-          "const": "https://eudiplo.dev/schemas/v3/TenantConfigFile.schema.json"
+          "const": "https://eudiplo.dev/schemas/v4/TenantConfigFile.schema.json"
         },
         "metadata": {
           "type": "object",
@@ -111,18 +111,6 @@
                 }
               },
               "additionalProperties": false
-            },
-            "defaultKeyChains": {
-              "type": "object",
-              "properties": {
-                "access": {
-                  "description": "ID of the access key chain used where no configuration names one: presentation requests of configurations without accessKeyChainId and the signed issuer metadata. Without it, EUDIPLO picks one of the tenant's access key chains by rule.",
-                  "type": "string",
-                  "minLength": 1
-                }
-              },
-              "additionalProperties": false,
-              "description": "The tenant's key chain per usage type, used where no configuration names one. A usage type without an entry uses a key chain picked by rule."
             }
           },
           "required": [
@@ -396,6 +384,144 @@
       ],
       "additionalProperties": false
     },
+    {
+      "$schema": "https://json-schema.org/draft/2020-12/schema",
+      "$id": "https://eudiplo.dev/schemas/v3/TenantConfigFile.schema.json",
+      "title": "TenantConfigFile",
+      "type": "object",
+      "properties": {
+        "$schema": {
+          "type": "string",
+          "const": "https://eudiplo.dev/schemas/v3/TenantConfigFile.schema.json"
+        },
+        "metadata": {
+          "type": "object",
+          "properties": {
+            "generation": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 9007199254740991
+            },
+            "ownership": {
+              "type": "string",
+              "enum": [
+                "unmanaged",
+                "file-managed"
+              ]
+            }
+          },
+          "additionalProperties": false
+        },
+        "spec": {
+          "type": "object",
+          "properties": {
+            "name": {
+              "default": "EUDIPLO",
+              "description": "Display name of the tenant.",
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "description": "Optional tenant description.",
+              "type": "string",
+              "minLength": 1
+            },
+            "sessionConfig": {
+              "description": "Optional tenant-specific session storage configuration.",
+              "type": "object",
+              "properties": {
+                "ttlSeconds": {
+                  "description": "Session time-to-live in seconds.",
+                  "type": "integer",
+                  "minimum": 60,
+                  "maximum": 9007199254740991
+                },
+                "cleanupMode": {
+                  "description": "Whether to fully delete or anonymize expired sessions.",
+                  "type": "string",
+                  "enum": [
+                    "full",
+                    "anonymize"
+                  ]
+                }
+              },
+              "additionalProperties": false
+            },
+            "statusListConfig": {
+              "description": "Optional tenant-specific status list defaults.",
+              "type": "object",
+              "properties": {
+                "capacity": {
+                  "description": "Default status list capacity.",
+                  "type": "integer",
+                  "minimum": 100,
+                  "maximum": 9007199254740991
+                },
+                "bits": {
+                  "description": "Bits-per-status setting (1, 2, 4, or 8).",
+                  "anyOf": [
+                    {
+                      "type": "number",
+                      "const": 1
+                    },
+                    {
+                      "type": "number",
+                      "const": 2
+                    },
+                    {
+                      "type": "number",
+                      "const": 4
+                    },
+                    {
+                      "type": "number",
+                      "const": 8
+                    }
+                  ]
+                },
+                "ttl": {
+                  "description": "JWT TTL for status list tokens in seconds.",
+                  "type": "integer",
+                  "minimum": 60,
+                  "maximum": 9007199254740991
+                },
+                "immediateUpdate": {
+                  "description": "Regenerate status list JWTs immediately after status updates.",
+                  "type": "boolean"
+                },
+                "enableAggregation": {
+                  "description": "Include aggregation_uri in generated status list JWTs.",
+                  "type": "boolean"
+                }
+              },
+              "additionalProperties": false
+            },
+            "defaultKeyChains": {
+              "type": "object",
+              "properties": {
+                "access": {
+                  "description": "ID of the access key chain used where no configuration names one: presentation requests of configurations without accessKeyChainId and the signed issuer metadata. Without it, EUDIPLO picks one of the tenant's access key chains by rule.",
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "additionalProperties": false,
+              "description": "The tenant's key chain per usage type, used where no configuration names one. A usage type without an entry uses a key chain picked by rule."
+            }
+          },
+          "required": [
+            "name"
+          ],
+          "additionalProperties": false,
+          "description": "Payload used when importing tenant metadata from config files."
+        }
+      },
+      "required": [
+        "$schema",
+        "metadata",
+        "spec"
+      ],
+      "additionalProperties": false
+    },
     {
       "type": "object",
       "properties": {
@@ -478,18 +604,6 @@
             }
           },
           "additionalProperties": false
-        },
-        "defaultKeyChains": {
-          "type": "object",
-          "properties": {
-            "access": {
-              "description": "ID of the access key chain used where no configuration names one: presentation requests of configurations without accessKeyChainId and the signed issuer metadata. Without it, EUDIPLO picks one of the tenant's access key chains by rule.",
-              "type": "string",
-              "minLength": 1
-            }
-          },
-          "additionalProperties": false,
-          "description": "The tenant's key chain per usage type, used where no configuration names one. A usage type without an entry uses a key chain picked by rule."
         }
       },
       "required": [

package/templates/schemas/UpdateTenantDto.schema.json

@@ -87,26 +87,6 @@
         }
       },
       "additionalProperties": false
-    },
-    "defaultKeyChains": {
-      "description": "The tenant's key chain per usage type, used where no configuration names one. Replaces the stored entries; omit to keep them, or set to null to remove them.",
-      "anyOf": [
-        {
-          "type": "object",
-          "properties": {
-            "access": {
-              "description": "ID of the access key chain used where no configuration names one: presentation requests of configurations without accessKeyChainId and the signed issuer metadata. Without it, EUDIPLO picks one of the tenant's access key chains by rule.",
-              "type": "string",
-              "minLength": 1
-            }
-          },
-          "additionalProperties": false,
-          "description": "The tenant's key chain per usage type, used where no configuration names one. A usage type without an entry uses a key chain picked by rule."
-        },
-        {
-          "type": "null"
-        }
-      ]
     }
   },
   "additionalProperties": false,

package/templates/schemas.manifest.json

@@ -21,6 +21,7 @@
   "IssuanceConfigFile.schema.json",
   "KeyChainConfigFile.schema.json",
   "KeyChainCreateDto.schema.json",
+  "KeyChainDefaultsConfigFile.schema.json",
   "KeyChainImportDto.schema.json",
   "KeyChainUpdateDto.schema.json",
   "KmsConfigDto.schema.json",