@atensec/pulumi-thoth 0.1.0

package/browser/policy.ts

@@ -0,0 +1,256 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+export class Policy extends pulumi.CustomResource {
+    /**
+     * Get an existing Policy resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: PolicyState, opts?: pulumi.CustomResourceOptions): Policy {
+        return new Policy(name, <any>state, { ...opts, id: id });
+    }
+
+    /** @internal */
+    public static readonly __pulumiType = 'thoth:browser/policy:Policy';
+
+    /**
+     * Returns true if the given object is an instance of Policy.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    public static isInstance(obj: any): obj is Policy {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === Policy.__pulumiType;
+    }
+
+    /**
+     * Whether the policy is active.
+     */
+    declare public readonly active: pulumi.Output<boolean | undefined>;
+    /**
+     * Compiled provider-native policy JSON from GovAPI.
+     */
+    declare public /*out*/ readonly compiledPolicyJson: pulumi.Output<string>;
+    /**
+     * Creation timestamp.
+     */
+    declare public /*out*/ readonly createdAt: pulumi.Output<string>;
+    /**
+     * Override createdBy audit value.
+     */
+    declare public readonly createdBy: pulumi.Output<string | undefined>;
+    /**
+     * Policy mode: monitor or enforce.
+     */
+    declare public readonly enforcementMode: pulumi.Output<string | undefined>;
+    /**
+     * Arbitrary metadata JSON object.
+     */
+    declare public readonly metadataJson: pulumi.Output<string | undefined>;
+    /**
+     * Policy display name.
+     */
+    declare public readonly name: pulumi.Output<string>;
+    /**
+     * Policy ID. If omitted on create, GovAPI generates one.
+     */
+    declare public readonly policyId: pulumi.Output<string>;
+    /**
+     * Policy JSON object.
+     */
+    declare public readonly policyJson: pulumi.Output<string>;
+    /**
+     * Browser provider slug.
+     */
+    declare public readonly providerName: pulumi.Output<string>;
+    /**
+     * Tenant ID from provider configuration.
+     */
+    declare public /*out*/ readonly tenantId: pulumi.Output<string>;
+    /**
+     * Update timestamp.
+     */
+    declare public /*out*/ readonly updatedAt: pulumi.Output<string>;
+    /**
+     * Override updatedBy audit value.
+     */
+    declare public readonly updatedBy: pulumi.Output<string | undefined>;
+    /**
+     * Optional explicit policy version.
+     */
+    declare public readonly version: pulumi.Output<number | undefined>;
+
+    /**
+     * Create a Policy resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: PolicyArgs, opts?: pulumi.CustomResourceOptions)
+    constructor(name: string, argsOrState?: PolicyArgs | PolicyState, opts?: pulumi.CustomResourceOptions) {
+        let resourceInputs: pulumi.Inputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState as PolicyState | undefined;
+            resourceInputs["active"] = state?.active;
+            resourceInputs["compiledPolicyJson"] = state?.compiledPolicyJson;
+            resourceInputs["createdAt"] = state?.createdAt;
+            resourceInputs["createdBy"] = state?.createdBy;
+            resourceInputs["enforcementMode"] = state?.enforcementMode;
+            resourceInputs["metadataJson"] = state?.metadataJson;
+            resourceInputs["name"] = state?.name;
+            resourceInputs["policyId"] = state?.policyId;
+            resourceInputs["policyJson"] = state?.policyJson;
+            resourceInputs["providerName"] = state?.providerName;
+            resourceInputs["tenantId"] = state?.tenantId;
+            resourceInputs["updatedAt"] = state?.updatedAt;
+            resourceInputs["updatedBy"] = state?.updatedBy;
+            resourceInputs["version"] = state?.version;
+        } else {
+            const args = argsOrState as PolicyArgs | undefined;
+            if (args?.name === undefined && !opts.urn) {
+                throw new Error("Missing required property 'name'");
+            }
+            if (args?.policyJson === undefined && !opts.urn) {
+                throw new Error("Missing required property 'policyJson'");
+            }
+            if (args?.providerName === undefined && !opts.urn) {
+                throw new Error("Missing required property 'providerName'");
+            }
+            resourceInputs["active"] = args?.active;
+            resourceInputs["createdBy"] = args?.createdBy;
+            resourceInputs["enforcementMode"] = args?.enforcementMode;
+            resourceInputs["metadataJson"] = args?.metadataJson;
+            resourceInputs["name"] = args?.name;
+            resourceInputs["policyId"] = args?.policyId;
+            resourceInputs["policyJson"] = args?.policyJson;
+            resourceInputs["providerName"] = args?.providerName;
+            resourceInputs["updatedBy"] = args?.updatedBy;
+            resourceInputs["version"] = args?.version;
+            resourceInputs["compiledPolicyJson"] = undefined /*out*/;
+            resourceInputs["createdAt"] = undefined /*out*/;
+            resourceInputs["tenantId"] = undefined /*out*/;
+            resourceInputs["updatedAt"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(Policy.__pulumiType, name, resourceInputs, opts);
+    }
+}
+
+/**
+ * Input properties used for looking up and filtering Policy resources.
+ */
+export interface PolicyState {
+    /**
+     * Whether the policy is active.
+     */
+    active?: pulumi.Input<boolean | undefined>;
+    /**
+     * Compiled provider-native policy JSON from GovAPI.
+     */
+    compiledPolicyJson?: pulumi.Input<string | undefined>;
+    /**
+     * Creation timestamp.
+     */
+    createdAt?: pulumi.Input<string | undefined>;
+    /**
+     * Override createdBy audit value.
+     */
+    createdBy?: pulumi.Input<string | undefined>;
+    /**
+     * Policy mode: monitor or enforce.
+     */
+    enforcementMode?: pulumi.Input<string | undefined>;
+    /**
+     * Arbitrary metadata JSON object.
+     */
+    metadataJson?: pulumi.Input<string | undefined>;
+    /**
+     * Policy display name.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * Policy ID. If omitted on create, GovAPI generates one.
+     */
+    policyId?: pulumi.Input<string | undefined>;
+    /**
+     * Policy JSON object.
+     */
+    policyJson?: pulumi.Input<string | undefined>;
+    /**
+     * Browser provider slug.
+     */
+    providerName?: pulumi.Input<string | undefined>;
+    /**
+     * Tenant ID from provider configuration.
+     */
+    tenantId?: pulumi.Input<string | undefined>;
+    /**
+     * Update timestamp.
+     */
+    updatedAt?: pulumi.Input<string | undefined>;
+    /**
+     * Override updatedBy audit value.
+     */
+    updatedBy?: pulumi.Input<string | undefined>;
+    /**
+     * Optional explicit policy version.
+     */
+    version?: pulumi.Input<number | undefined>;
+}
+
+/**
+ * The set of arguments for constructing a Policy resource.
+ */
+export interface PolicyArgs {
+    /**
+     * Whether the policy is active.
+     */
+    active?: pulumi.Input<boolean | undefined>;
+    /**
+     * Override createdBy audit value.
+     */
+    createdBy?: pulumi.Input<string | undefined>;
+    /**
+     * Policy mode: monitor or enforce.
+     */
+    enforcementMode?: pulumi.Input<string | undefined>;
+    /**
+     * Arbitrary metadata JSON object.
+     */
+    metadataJson?: pulumi.Input<string | undefined>;
+    /**
+     * Policy display name.
+     */
+    name: pulumi.Input<string>;
+    /**
+     * Policy ID. If omitted on create, GovAPI generates one.
+     */
+    policyId?: pulumi.Input<string | undefined>;
+    /**
+     * Policy JSON object.
+     */
+    policyJson: pulumi.Input<string>;
+    /**
+     * Browser provider slug.
+     */
+    providerName: pulumi.Input<string>;
+    /**
+     * Override updatedBy audit value.
+     */
+    updatedBy?: pulumi.Input<string | undefined>;
+    /**
+     * Optional explicit policy version.
+     */
+    version?: pulumi.Input<number | undefined>;
+}

package/browser/provider.ts

@@ -0,0 +1,186 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+export class Provider extends pulumi.CustomResource {
+    /**
+     * Get an existing Provider resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ProviderState, opts?: pulumi.CustomResourceOptions): Provider {
+        return new Provider(name, <any>state, { ...opts, id: id });
+    }
+
+    /** @internal */
+    public static readonly __pulumiType = 'thoth:browser/provider:Provider';
+
+    /**
+     * Returns true if the given object is an instance of Provider.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    public static isInstance(obj: any): obj is Provider {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === Provider.__pulumiType;
+    }
+
+    /**
+     * Provider-specific config JSON object.
+     */
+    declare public readonly configJson: pulumi.Output<string | undefined>;
+    /**
+     * Creation timestamp.
+     */
+    declare public /*out*/ readonly createdAt: pulumi.Output<string>;
+    /**
+     * Enable provider integration.
+     */
+    declare public readonly enabled: pulumi.Output<boolean | undefined>;
+    /**
+     * Last integration error string.
+     */
+    declare public readonly lastError: pulumi.Output<string | undefined>;
+    /**
+     * Display name for this provider integration.
+     */
+    declare public readonly name: pulumi.Output<string | undefined>;
+    /**
+     * Browser provider slug: chrome, firefox, safari, island.
+     */
+    declare public readonly providerName: pulumi.Output<string>;
+    /**
+     * Provider status hint (connected, degraded, disconnected).
+     */
+    declare public readonly status: pulumi.Output<string | undefined>;
+    /**
+     * Tenant ID from provider config.
+     */
+    declare public /*out*/ readonly tenantId: pulumi.Output<string>;
+    /**
+     * Last update timestamp.
+     */
+    declare public /*out*/ readonly updatedAt: pulumi.Output<string>;
+
+    /**
+     * Create a Provider resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ProviderArgs, opts?: pulumi.CustomResourceOptions)
+    constructor(name: string, argsOrState?: ProviderArgs | ProviderState, opts?: pulumi.CustomResourceOptions) {
+        let resourceInputs: pulumi.Inputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState as ProviderState | undefined;
+            resourceInputs["configJson"] = state?.configJson;
+            resourceInputs["createdAt"] = state?.createdAt;
+            resourceInputs["enabled"] = state?.enabled;
+            resourceInputs["lastError"] = state?.lastError;
+            resourceInputs["name"] = state?.name;
+            resourceInputs["providerName"] = state?.providerName;
+            resourceInputs["status"] = state?.status;
+            resourceInputs["tenantId"] = state?.tenantId;
+            resourceInputs["updatedAt"] = state?.updatedAt;
+        } else {
+            const args = argsOrState as ProviderArgs | undefined;
+            if (args?.providerName === undefined && !opts.urn) {
+                throw new Error("Missing required property 'providerName'");
+            }
+            resourceInputs["configJson"] = args?.configJson ? pulumi.secret(args.configJson) : undefined;
+            resourceInputs["enabled"] = args?.enabled;
+            resourceInputs["lastError"] = args?.lastError;
+            resourceInputs["name"] = args?.name;
+            resourceInputs["providerName"] = args?.providerName;
+            resourceInputs["status"] = args?.status;
+            resourceInputs["createdAt"] = undefined /*out*/;
+            resourceInputs["tenantId"] = undefined /*out*/;
+            resourceInputs["updatedAt"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const secretOpts = { additionalSecretOutputs: ["configJson"] };
+        opts = pulumi.mergeOptions(opts, secretOpts);
+        super(Provider.__pulumiType, name, resourceInputs, opts);
+    }
+}
+
+/**
+ * Input properties used for looking up and filtering Provider resources.
+ */
+export interface ProviderState {
+    /**
+     * Provider-specific config JSON object.
+     */
+    configJson?: pulumi.Input<string | undefined>;
+    /**
+     * Creation timestamp.
+     */
+    createdAt?: pulumi.Input<string | undefined>;
+    /**
+     * Enable provider integration.
+     */
+    enabled?: pulumi.Input<boolean | undefined>;
+    /**
+     * Last integration error string.
+     */
+    lastError?: pulumi.Input<string | undefined>;
+    /**
+     * Display name for this provider integration.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * Browser provider slug: chrome, firefox, safari, island.
+     */
+    providerName?: pulumi.Input<string | undefined>;
+    /**
+     * Provider status hint (connected, degraded, disconnected).
+     */
+    status?: pulumi.Input<string | undefined>;
+    /**
+     * Tenant ID from provider config.
+     */
+    tenantId?: pulumi.Input<string | undefined>;
+    /**
+     * Last update timestamp.
+     */
+    updatedAt?: pulumi.Input<string | undefined>;
+}
+
+/**
+ * The set of arguments for constructing a Provider resource.
+ */
+export interface ProviderArgs {
+    /**
+     * Provider-specific config JSON object.
+     */
+    configJson?: pulumi.Input<string | undefined>;
+    /**
+     * Enable provider integration.
+     */
+    enabled?: pulumi.Input<boolean | undefined>;
+    /**
+     * Last integration error string.
+     */
+    lastError?: pulumi.Input<string | undefined>;
+    /**
+     * Display name for this provider integration.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * Browser provider slug: chrome, firefox, safari, island.
+     */
+    providerName: pulumi.Input<string>;
+    /**
+     * Provider status hint (connected, degraded, disconnected).
+     */
+    status?: pulumi.Input<string | undefined>;
+}

package/config/index.ts

@@ -0,0 +1,5 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+// Export members:
+export * from "./vars";

package/config/vars.ts

@@ -0,0 +1,119 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+declare var exports: any;
+const __config = new pulumi.Config("thoth");
+
+/**
+ * Admin bearer token used for authenticated GovAPI requests.
+ */
+export declare const adminBearerToken: string | undefined;
+Object.defineProperty(exports, "adminBearerToken", {
+    get() {
+        return __config.get("adminBearerToken");
+    },
+    enumerable: true,
+});
+
+/**
+ * Path to a file containing the admin bearer token.
+ */
+export declare const adminBearerTokenFile: string | undefined;
+Object.defineProperty(exports, "adminBearerTokenFile", {
+    get() {
+        return __config.get("adminBearerTokenFile");
+    },
+    enumerable: true,
+});
+
+/**
+ * Apex domain used to derive GovAPI host when apiBaseUrl is omitted. Defaults to atensecurity.com.
+ */
+export declare const apexDomain: string | undefined;
+Object.defineProperty(exports, "apexDomain", {
+    get() {
+        return __config.get("apexDomain");
+    },
+    enumerable: true,
+});
+
+/**
+ * GovAPI base URL override. When omitted, provider derives https://grid.<tenant_id>.<apex_domain>.
+ */
+export declare const apiBaseUrl: string | undefined;
+Object.defineProperty(exports, "apiBaseUrl", {
+    get() {
+        return __config.get("apiBaseUrl");
+    },
+    enumerable: true,
+});
+
+/**
+ * Skip TLS certificate verification (development/testing only).
+ */
+export declare const insecureSkipTlsVerify: boolean | undefined;
+Object.defineProperty(exports, "insecureSkipTlsVerify", {
+    get() {
+        return __config.getObject<boolean>("insecureSkipTlsVerify");
+    },
+    enumerable: true,
+});
+
+/**
+ * Per-request timeout in seconds.
+ */
+export declare const requestTimeoutSeconds: number | undefined;
+Object.defineProperty(exports, "requestTimeoutSeconds", {
+    get() {
+        return __config.getObject<number>("requestTimeoutSeconds");
+    },
+    enumerable: true,
+});
+
+/**
+ * Base delay in milliseconds for exponential retry backoff.
+ */
+export declare const retryBaseDelayMs: number | undefined;
+Object.defineProperty(exports, "retryBaseDelayMs", {
+    get() {
+        return __config.getObject<number>("retryBaseDelayMs");
+    },
+    enumerable: true,
+});
+
+/**
+ * Maximum retry attempts for transient API/network failures.
+ */
+export declare const retryMaxAttempts: number | undefined;
+Object.defineProperty(exports, "retryMaxAttempts", {
+    get() {
+        return __config.getObject<number>("retryMaxAttempts");
+    },
+    enumerable: true,
+});
+
+/**
+ * Maximum delay in milliseconds for retry backoff.
+ */
+export declare const retryMaxDelayMs: number | undefined;
+Object.defineProperty(exports, "retryMaxDelayMs", {
+    get() {
+        return __config.getObject<number>("retryMaxDelayMs");
+    },
+    enumerable: true,
+});
+
+/**
+ * Tenant slug used in GovAPI route scoping.
+ */
+export declare const tenantId: string | undefined;
+Object.defineProperty(exports, "tenantId", {
+    get() {
+        return __config.get("tenantId");
+    },
+    enumerable: true,
+});
+