@eudiplo/cli 9.1.0-main.c6ae22c → 9.1.0-main.cd87b41

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@eudiplo/cli",
-    "version": "9.1.0-main.c6ae22c",
+    "version": "9.1.0-main.cd87b41",
     "description": "Deployment-aware command line tools for EUDIPLO",
     "private": false,
     "type": "module",
@@ -60,11 +60,11 @@
         "jsonc-parser": "^3.3.1"
     },
     "devDependencies": {
-        "@biomejs/biome": "2.5.15",
-        "@types/node": "^26.6.4",
+        "@biomejs/biome": "2.6.3",
+        "@types/node": "^26.6.5",
         "esbuild": "^0.28.2",
         "tsx": "^4.23.15",
         "typescript": "^7.0.2",
-        "vitest": "5.0.3"
+        "vitest": "5.0.5"
     }
 }

package/templates/demo-config/key-chains/status-list.json

@@ -11,10 +11,10 @@
       "type": "private-jwk",
       "jwk": {
         "crv": "P-256",
-        "d": "oXPLTk02Mq9n8GfOTQ8hdoe3ENkNoN_Y2ymLnUmnbV0",
+        "d": "iAUEObUwUI-QDXsFYH9SLm7D-yuEUsOD73YG_jBgLGk",
         "kty": "EC",
-        "x": "HHkkbUgKSkkqXmL8utl-TLWIg8CYQS4WPJ8j_nO44Yw",
-        "y": "1NJY0LT3mEuucLQCZJWNrA7fVW8ypR4Zf5cuu85NjSw",
+        "x": "sSdNHYiCOK0E8lNE9rUQLUN3MbVeDnxjRwVwRiI9BqY",
+        "y": "xRP83r38x_MYGsteGhUW25Q0XVXA-ZRXlP38a8URPDg",
         "alg": "ES256"
       }
     },

package/templates/schemas/CreateFederationTrustAnchorDto.schema.json

@@ -0,0 +1,82 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "id": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 255,
+      "pattern": "^[A-Za-z0-9._-]+$",
+      "description": "Unique identifier of the trust anchor in the tenant."
+    },
+    "entityId": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 2048,
+      "description": "Entity identifier of the trust anchor, exactly as configured in `federation.trustAnchors` and DCQL `openid_federation` values."
+    },
+    "description": {
+      "anyOf": [
+        {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 1000
+        },
+        {
+          "type": "null"
+        }
+      ],
+      "description": "Optional description of the trust anchor."
+    },
+    "jwks": {
+      "type": "object",
+      "properties": {
+        "keys": {
+          "minItems": 1,
+          "maxItems": 20,
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "kty": {
+                "type": "string",
+                "enum": [
+                  "EC",
+                  "RSA",
+                  "OKP"
+                ],
+                "description": "Key type of the public federation key."
+              },
+              "kid": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 256,
+                "description": "Key ID. Federation statements name their signing key with `kid`."
+              }
+            },
+            "required": [
+              "kty",
+              "kid"
+            ],
+            "additionalProperties": {},
+            "description": "Public federation key of the trust anchor as a JWK."
+          },
+          "description": "The trust anchor's federation keys."
+        }
+      },
+      "required": [
+        "keys"
+      ],
+      "additionalProperties": false,
+      "description": "JWK set with the federation keys of the trust anchor, obtained out of band (OpenID Federation 1.0 Section 10.2)."
+    }
+  },
+  "required": [
+    "id",
+    "entityId",
+    "jwks"
+  ],
+  "additionalProperties": false,
+  "$id": "./CreateFederationTrustAnchorDto.schema.json",
+  "title": "CreateFederationTrustAnchorDto"
+}

package/templates/schemas/CredentialConfigCreate.schema.json

@@ -714,12 +714,8 @@
           }
         },
         "constraints": {
-          "description": "Optional validation constraints for the claim value.",
-          "type": "object",
-          "propertyNames": {
-            "type": "string"
-          },
-          "additionalProperties": {}
+          "description": "Optional JSON Schema 2020-12 validation keywords for the claim value. Only the JSON Schema keywords listed under Constraints in the claims documentation are accepted (validation keywords such as pattern, minLength or enum, subschemas such as items or properties, and annotations); other keys, such as format or $ref, are refused.",
+          "$ref": "#/$defs/ClaimConstraints"
         },
         "children": {
           "description": "Nested child claim definitions for object or array fields.",
@@ -734,6 +730,240 @@
         "type"
       ],
       "additionalProperties": false
+    },
+    "ClaimConstraints": {
+      "type": "object",
+      "properties": {
+        "type": {},
+        "enum": {},
+        "const": {},
+        "multipleOf": {},
+        "maximum": {},
+        "exclusiveMaximum": {},
+        "minimum": {},
+        "exclusiveMinimum": {},
+        "maxLength": {},
+        "minLength": {},
+        "pattern": {},
+        "maxItems": {},
+        "minItems": {},
+        "uniqueItems": {},
+        "maxContains": {},
+        "minContains": {},
+        "maxProperties": {},
+        "minProperties": {},
+        "required": {},
+        "dependentRequired": {},
+        "title": {},
+        "description": {},
+        "default": {},
+        "examples": {},
+        "deprecated": {},
+        "readOnly": {},
+        "writeOnly": {},
+        "$comment": {},
+        "items": {
+          "anyOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "$ref": "#/$defs/ClaimConstraints"
+            }
+          ]
+        },
+        "contains": {
+          "anyOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "$ref": "#/$defs/ClaimConstraints"
+            }
+          ]
+        },
+        "additionalProperties": {
+          "anyOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "$ref": "#/$defs/ClaimConstraints"
+            }
+          ]
+        },
+        "propertyNames": {
+          "anyOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "$ref": "#/$defs/ClaimConstraints"
+            }
+          ]
+        },
+        "not": {
+          "anyOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "$ref": "#/$defs/ClaimConstraints"
+            }
+          ]
+        },
+        "if": {
+          "anyOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "$ref": "#/$defs/ClaimConstraints"
+            }
+          ]
+        },
+        "then": {
+          "anyOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "$ref": "#/$defs/ClaimConstraints"
+            }
+          ]
+        },
+        "else": {
+          "anyOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "$ref": "#/$defs/ClaimConstraints"
+            }
+          ]
+        },
+        "unevaluatedItems": {
+          "anyOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "$ref": "#/$defs/ClaimConstraints"
+            }
+          ]
+        },
+        "unevaluatedProperties": {
+          "anyOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "$ref": "#/$defs/ClaimConstraints"
+            }
+          ]
+        },
+        "prefixItems": {
+          "type": "array",
+          "items": {
+            "anyOf": [
+              {
+                "type": "boolean"
+              },
+              {
+                "$ref": "#/$defs/ClaimConstraints"
+              }
+            ]
+          }
+        },
+        "allOf": {
+          "type": "array",
+          "items": {
+            "anyOf": [
+              {
+                "type": "boolean"
+              },
+              {
+                "$ref": "#/$defs/ClaimConstraints"
+              }
+            ]
+          }
+        },
+        "anyOf": {
+          "type": "array",
+          "items": {
+            "anyOf": [
+              {
+                "type": "boolean"
+              },
+              {
+                "$ref": "#/$defs/ClaimConstraints"
+              }
+            ]
+          }
+        },
+        "oneOf": {
+          "type": "array",
+          "items": {
+            "anyOf": [
+              {
+                "type": "boolean"
+              },
+              {
+                "$ref": "#/$defs/ClaimConstraints"
+              }
+            ]
+          }
+        },
+        "properties": {
+          "type": "object",
+          "propertyNames": {
+            "type": "string"
+          },
+          "additionalProperties": {
+            "anyOf": [
+              {
+                "type": "boolean"
+              },
+              {
+                "$ref": "#/$defs/ClaimConstraints"
+              }
+            ]
+          }
+        },
+        "patternProperties": {
+          "type": "object",
+          "propertyNames": {
+            "type": "string"
+          },
+          "additionalProperties": {
+            "anyOf": [
+              {
+                "type": "boolean"
+              },
+              {
+                "$ref": "#/$defs/ClaimConstraints"
+              }
+            ]
+          }
+        },
+        "dependentSchemas": {
+          "type": "object",
+          "propertyNames": {
+            "type": "string"
+          },
+          "additionalProperties": {
+            "anyOf": [
+              {
+                "type": "boolean"
+              },
+              {
+                "$ref": "#/$defs/ClaimConstraints"
+              }
+            ]
+          }
+        }
+      },
+      "additionalProperties": false
     }
   },
   "$id": "./CredentialConfigCreate.schema.json",