@ibgib/core-gib 0.1.63 → 0.1.64

package/src/keystone/keystone-types.mts

@@ -256,6 +256,47 @@ export interface KeystoneChallengePool {
     metadata?: any;
 }
 
+// #region KeystoneClaimType enum
+export const KEYSTONE_CLAIM_TYPE_ADD_POOL = 'add-pool';
+export const KEYSTONE_CLAIM_TYPE_REPLACE_POOL = 'replace-pool';
+export const KEYSTONE_CLAIM_TYPE_CHANGE_PASSWORD = 'change-password';
+
+export type KeystoneClaimType =
+    | typeof KEYSTONE_CLAIM_TYPE_ADD_POOL
+    | typeof KEYSTONE_CLAIM_TYPE_REPLACE_POOL
+    | typeof KEYSTONE_CLAIM_TYPE_CHANGE_PASSWORD
+    ;
+
+export const KeystoneClaimType = {
+    add_pool: KEYSTONE_CLAIM_TYPE_ADD_POOL,
+    replace_pool: KEYSTONE_CLAIM_TYPE_REPLACE_POOL,
+    change_password: KEYSTONE_CLAIM_TYPE_CHANGE_PASSWORD,
+} satisfies { readonly [key: string]: KeystoneClaimType };
+
+export const KEYSTONE_CLAIM_TYPE_VALID_VALUES: KeystoneClaimType[] = Object.values(KeystoneClaimType);
+
+export function isKeystoneClaimType(value: any): value is KeystoneClaimType {
+    return typeof value === 'string' && KEYSTONE_CLAIM_TYPE_VALID_VALUES.includes(value as any);
+}
+// #endregion KeystoneClaimType enum
+
+export interface ClaimDetails {
+    type: KeystoneClaimType;
+    info: any;
+}
+
+export interface ClaimDetails_AddPool {
+    add: string[];
+}
+
+export interface ClaimDetails_ReplacePool {
+    replace: string;
+}
+
+export interface ClaimDetails_ChangePassword {
+    change: string[];
+}
+
 /**
  * Describes the specific privilege that the evolution of the keystone
  * authorizes.
@@ -277,9 +318,9 @@ export interface KeystoneClaim {
      */
     target: IbGibAddr;
     /**
-     * What limitations are narrowed down to beyond just target + verb?
+     * Detailed information describing the nature of the keystone evolution/transition.
      */
-    scope?: string;
+    details?: ClaimDetails;
 }
 
 /**

package/src/keystone/policy/profiles/profile-domain.json

@@ -50,21 +50,6 @@
         "targetBindingCount": 0
       }
     },
-    "connect": {
-      "id": "connect",
-      "allowedVerbs": [
-        "connect"
-      ],
-      "algo": "SHA-512",
-      "rounds": 4,
-      "behavior": {
-        "size": 2000,
-        "replenish": "top-up",
-        "selectSequentially": 10,
-        "selectRandomly": 10,
-        "targetBindingCount": 16
-      }
-    },
     "sign": {
       "id": "default",
       "allowedVerbs": [
@@ -81,4 +66,4 @@
       }
     }
   }
-}
+}

package/src/keystone/policy/schemas/keystone.high.schema.json

@@ -19,7 +19,7 @@
         "connect": { "$ref": "./connect-pool.high.schema.json" },
         "sign": { "$ref": "./sign-pool.high.schema.json" }
       },
-      "required": ["sync", "manage", "revoke", "connect", "sign"]
+      "required": ["manage", "revoke", "sign"]
     }
   },
   "required": ["pools"]

package/src/keystone/policy/schemas/keystone.medium.schema.json

@@ -19,7 +19,7 @@
         "connect": { "$ref": "./connect-pool.medium.schema.json" },
         "sign": { "$ref": "./sign-pool.medium.schema.json" }
       },
-      "required": ["sync", "manage", "revoke", "connect", "sign"]
+      "required": ["manage", "revoke", "sign"]
     }
   },
   "required": ["pools"]