@ibgib/core-gib 0.1.63 → 0.1.65

package/src/keystone/keystone-types.mts

@@ -256,6 +256,54 @@ export interface KeystoneChallengePool {
     metadata?: any;
 }
 
+// #region KeystoneClaimType enum
+export const KEYSTONE_CLAIM_TYPE_ADD_POOL = 'add-pool';
+export const KEYSTONE_CLAIM_TYPE_REMOVE_POOL = 'remove-pool';
+export const KEYSTONE_CLAIM_TYPE_REPLACE_POOL = 'replace-pool';
+export const KEYSTONE_CLAIM_TYPE_CHANGE_PASSWORD = 'change-password';
+
+export type KeystoneClaimType =
+    | typeof KEYSTONE_CLAIM_TYPE_ADD_POOL
+    | typeof KEYSTONE_CLAIM_TYPE_REMOVE_POOL
+    | typeof KEYSTONE_CLAIM_TYPE_REPLACE_POOL
+    | typeof KEYSTONE_CLAIM_TYPE_CHANGE_PASSWORD
+    ;
+
+export const KeystoneClaimType = {
+    add_pool: KEYSTONE_CLAIM_TYPE_ADD_POOL,
+    remove_pool: KEYSTONE_CLAIM_TYPE_REMOVE_POOL,
+    replace_pool: KEYSTONE_CLAIM_TYPE_REPLACE_POOL,
+    change_password: KEYSTONE_CLAIM_TYPE_CHANGE_PASSWORD,
+} satisfies { readonly [key: string]: KeystoneClaimType };
+
+export const KEYSTONE_CLAIM_TYPE_VALID_VALUES: KeystoneClaimType[] = Object.values(KeystoneClaimType);
+
+export function isKeystoneClaimType(value: any): value is KeystoneClaimType {
+    return typeof value === 'string' && KEYSTONE_CLAIM_TYPE_VALID_VALUES.includes(value as any);
+}
+// #endregion KeystoneClaimType enum
+
+export interface ClaimDetails {
+    type: KeystoneClaimType;
+    info: any;
+}
+
+export interface ClaimDetails_AddPool {
+    add: string[];
+}
+
+export interface ClaimDetails_RemovePool {
+    remove: string[];
+}
+
+export interface ClaimDetails_ReplacePool {
+    replace: string;
+}
+
+export interface ClaimDetails_ChangePassword {
+    change: string[];
+}
+
 /**
  * Describes the specific privilege that the evolution of the keystone
  * authorizes.
@@ -277,9 +325,9 @@ export interface KeystoneClaim {
      */
     target: IbGibAddr;
     /**
-     * What limitations are narrowed down to beyond just target + verb?
+     * Detailed information describing the nature of the keystone evolution/transition.
      */
-    scope?: string;
+    details?: ClaimDetails;
 }
 
 /**

package/src/keystone/policy/profiles/profile-domain.json

@@ -5,25 +5,11 @@
     "securityLevel": "high"
   },
   "pools": {
-    "sync": {
-      "id": "sync",
-      "allowedVerbs": [
-        "sync"
-      ],
-      "algo": "SHA-512",
-      "rounds": 4,
-      "behavior": {
-        "size": 2000,
-        "replenish": "top-up",
-        "selectSequentially": 10,
-        "selectRandomly": 10,
-        "targetBindingCount": 16
-      }
-    },
     "manage": {
       "id": "manage",
       "allowedVerbs": [
-        "manage"
+        "manage",
+        "revoke"
       ],
       "algo": "SHA-512",
       "rounds": 6,
@@ -34,51 +20,6 @@
         "selectRandomly": 12,
         "targetBindingCount": 16
       }
-    },
-    "revoke": {
-      "id": "revoke",
-      "allowedVerbs": [
-        "revoke"
-      ],
-      "algo": "SHA-512",
-      "rounds": 20,
-      "behavior": {
-        "size": 2000,
-        "replenish": "delete-all",
-        "selectSequentially": 50,
-        "selectRandomly": 50,
-        "targetBindingCount": 0
-      }
-    },
-    "connect": {
-      "id": "connect",
-      "allowedVerbs": [
-        "connect"
-      ],
-      "algo": "SHA-512",
-      "rounds": 4,
-      "behavior": {
-        "size": 2000,
-        "replenish": "top-up",
-        "selectSequentially": 10,
-        "selectRandomly": 10,
-        "targetBindingCount": 16
-      }
-    },
-    "sign": {
-      "id": "default",
-      "allowedVerbs": [
-        "sign"
-      ],
-      "algo": "SHA-512",
-      "rounds": 4,
-      "behavior": {
-        "size": 2000,
-        "replenish": "top-up",
-        "selectSequentially": 10,
-        "selectRandomly": 10,
-        "targetBindingCount": 16
-      }
     }
   }
-}
+}

package/src/keystone/policy/profiles/profile-sync.json

@@ -23,7 +23,8 @@
     "manage": {
       "id": "manage",
       "allowedVerbs": [
-        "manage"
+        "manage",
+        "revoke"
       ],
       "algo": "SHA-256",
       "rounds": 2,
@@ -35,21 +36,6 @@
         "targetBindingCount": 8
       }
     },
-    "revoke": {
-      "id": "revoke",
-      "allowedVerbs": [
-        "revoke"
-      ],
-      "algo": "SHA-256",
-      "rounds": 5,
-      "behavior": {
-        "size": 100,
-        "replenish": "delete-all",
-        "selectSequentially": 3,
-        "selectRandomly": 3,
-        "targetBindingCount": 0
-      }
-    },
     "connect": {
       "id": "connect",
       "allowedVerbs": [

package/src/keystone/policy/schemas/keystone.high.schema.json

@@ -19,7 +19,7 @@
         "connect": { "$ref": "./connect-pool.high.schema.json" },
         "sign": { "$ref": "./sign-pool.high.schema.json" }
       },
-      "required": ["sync", "manage", "revoke", "connect", "sign"]
+      "required": ["manage", "revoke", "sign"]
     }
   },
   "required": ["pools"]

package/src/keystone/policy/schemas/keystone.medium.schema.json

@@ -19,7 +19,7 @@
         "connect": { "$ref": "./connect-pool.medium.schema.json" },
         "sign": { "$ref": "./sign-pool.medium.schema.json" }
       },
-      "required": ["sync", "manage", "revoke", "connect", "sign"]
+      "required": ["manage", "revoke", "sign"]
     }
   },
   "required": ["pools"]