@atensec/pulumi-thoth 0.1.10 → 0.1.12

package/governance/getIncidentForensics.ts

@@ -0,0 +1,52 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+export function getIncidentForensics(args: GetIncidentForensicsArgs, opts?: pulumi.InvokeOptions): Promise<GetIncidentForensicsResult> {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("thoth:governance/getIncidentForensics:getIncidentForensics", {
+        "incidentId": args.incidentId,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getIncidentForensics.
+ */
+export interface GetIncidentForensicsArgs {
+    incidentId: string;
+}
+
+/**
+ * A collection of values returned by getIncidentForensics.
+ */
+export interface GetIncidentForensicsResult {
+    readonly agentId: string;
+    readonly agentName: string;
+    readonly attackSurfaceJson: string;
+    readonly eventsJson: string;
+    /**
+     * The provider-assigned unique ID for this managed resource.
+     */
+    readonly id: string;
+    readonly incidentId: string;
+    readonly incidentSource: string;
+    readonly responseJson: string;
+    readonly riskScore: number;
+    readonly sessionId: string;
+    readonly telemetrySummaryJson: string;
+}
+export function getIncidentForensicsOutput(args: GetIncidentForensicsOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetIncidentForensicsResult> {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("thoth:governance/getIncidentForensics:getIncidentForensics", {
+        "incidentId": args.incidentId,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getIncidentForensics.
+ */
+export interface GetIncidentForensicsOutputArgs {
+    incidentId: pulumi.Input<string>;
+}

package/governance/getReportData.ts

@@ -0,0 +1,67 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+export function getReportData(args?: GetReportDataArgs, opts?: pulumi.InvokeOptions): Promise<GetReportDataResult> {
+    args = args || {};
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("thoth:governance/getReportData:getReportData", {
+        "agentId": args.agentId,
+        "cadence": args.cadence,
+        "reportId": args.reportId,
+        "reportType": args.reportType,
+        "status": args.status,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getReportData.
+ */
+export interface GetReportDataArgs {
+    agentId?: string;
+    cadence?: string;
+    reportId?: string;
+    reportType?: string;
+    status?: string;
+}
+
+/**
+ * A collection of values returned by getReportData.
+ */
+export interface GetReportDataResult {
+    readonly agentId?: string;
+    readonly cadence?: string;
+    /**
+     * The provider-assigned unique ID for this managed resource.
+     */
+    readonly id: string;
+    readonly metadataJson: string;
+    readonly reportId: string;
+    readonly reportType?: string;
+    readonly responseJson: string;
+    readonly status?: string;
+}
+export function getReportDataOutput(args?: GetReportDataOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetReportDataResult> {
+    args = args || {};
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("thoth:governance/getReportData:getReportData", {
+        "agentId": args.agentId,
+        "cadence": args.cadence,
+        "reportId": args.reportId,
+        "reportType": args.reportType,
+        "status": args.status,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getReportData.
+ */
+export interface GetReportDataOutputArgs {
+    agentId?: pulumi.Input<string | undefined>;
+    cadence?: pulumi.Input<string | undefined>;
+    reportId?: pulumi.Input<string | undefined>;
+    reportType?: pulumi.Input<string | undefined>;
+    status?: pulumi.Input<string | undefined>;
+}

package/governance/getSessionForensics.ts

@@ -0,0 +1,50 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+export function getSessionForensics(args: GetSessionForensicsArgs, opts?: pulumi.InvokeOptions): Promise<GetSessionForensicsResult> {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("thoth:governance/getSessionForensics:getSessionForensics", {
+        "sessionId": args.sessionId,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getSessionForensics.
+ */
+export interface GetSessionForensicsArgs {
+    sessionId: string;
+}
+
+/**
+ * A collection of values returned by getSessionForensics.
+ */
+export interface GetSessionForensicsResult {
+    readonly agentId: string;
+    readonly agentName: string;
+    readonly attackSurfaceJson: string;
+    readonly eventsJson: string;
+    /**
+     * The provider-assigned unique ID for this managed resource.
+     */
+    readonly id: string;
+    readonly responseJson: string;
+    readonly riskScore: number;
+    readonly sessionId: string;
+    readonly telemetrySummaryJson: string;
+}
+export function getSessionForensicsOutput(args: GetSessionForensicsOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetSessionForensicsResult> {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("thoth:governance/getSessionForensics:getSessionForensics", {
+        "sessionId": args.sessionId,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getSessionForensics.
+ */
+export interface GetSessionForensicsOutputArgs {
+    sessionId: pulumi.Input<string>;
+}

package/governance/governanceSettings.ts

@@ -43,27 +43,27 @@ export class GovernanceSettings extends pulumi.CustomResource {
     /**
      * Allowed model names allowlist.
      */
-    declare public readonly modelRouterAllowedModels: pulumi.Output<string[] | undefined>;
+    declare public readonly modelRouterAllowedModels: pulumi.Output<string[]>;
     /**
      * Allowed model providers allowlist.
      */
-    declare public readonly modelRouterAllowedProviders: pulumi.Output<string[] | undefined>;
+    declare public readonly modelRouterAllowedProviders: pulumi.Output<string[]>;
     /**
      * Default model name.
      */
-    declare public readonly modelRouterDefaultModel: pulumi.Output<string | undefined>;
+    declare public readonly modelRouterDefaultModel: pulumi.Output<string>;
     /**
      * Default model provider.
      */
-    declare public readonly modelRouterDefaultProvider: pulumi.Output<string | undefined>;
+    declare public readonly modelRouterDefaultProvider: pulumi.Output<string>;
     /**
      * Enable model routing policy controls.
      */
-    declare public readonly modelRouterEnabled: pulumi.Output<boolean | undefined>;
+    declare public readonly modelRouterEnabled: pulumi.Output<boolean>;
     /**
      * Failover provider order.
      */
-    declare public readonly modelRouterFailoverProviders: pulumi.Output<string[] | undefined>;
+    declare public readonly modelRouterFailoverProviders: pulumi.Output<string[]>;
     /**
      * Explicit regulatory regimes for onboarding baseline auto-pack loading (for example: soc2, hipaa, gdpr, fedramp, sec_cftc). Defaults to SOC2 when unset.
      */
@@ -87,7 +87,7 @@ export class GovernanceSettings extends pulumi.CustomResource {
     /**
      * Secret broker provider slug.
      */
-    declare public readonly secretBrokerProvider: pulumi.Output<string | undefined>;
+    declare public readonly secretBrokerProvider: pulumi.Output<string>;
     /**
      * Require endpoint registration for secret resolution.
      */

package/governance/index.ts

@@ -20,6 +20,11 @@ export type EvidenceBackfill = import("./evidenceBackfill").EvidenceBackfill;
 export const EvidenceBackfill: typeof import("./evidenceBackfill").EvidenceBackfill = null as any;
 utilities.lazyLoad(exports, ["EvidenceBackfill"], () => require("./evidenceBackfill"));
 
+export { GetAgentLatestForensicsArgs, GetAgentLatestForensicsResult, GetAgentLatestForensicsOutputArgs } from "./getAgentLatestForensics";
+export const getAgentLatestForensics: typeof import("./getAgentLatestForensics").getAgentLatestForensics = null as any;
+export const getAgentLatestForensicsOutput: typeof import("./getAgentLatestForensics").getAgentLatestForensicsOutput = null as any;
+utilities.lazyLoad(exports, ["getAgentLatestForensics","getAgentLatestForensicsOutput"], () => require("./getAgentLatestForensics"));
+
 export { GetApprovalsArgs, GetApprovalsResult, GetApprovalsOutputArgs } from "./getApprovals";
 export const getApprovals: typeof import("./getApprovals").getApprovals = null as any;
 export const getApprovalsOutput: typeof import("./getApprovals").getApprovalsOutput = null as any;
@@ -65,6 +70,11 @@ export const getFeed: typeof import("./getFeed").getFeed = null as any;
 export const getFeedOutput: typeof import("./getFeed").getFeedOutput = null as any;
 utilities.lazyLoad(exports, ["getFeed","getFeedOutput"], () => require("./getFeed"));
 
+export { GetIncidentForensicsArgs, GetIncidentForensicsResult, GetIncidentForensicsOutputArgs } from "./getIncidentForensics";
+export const getIncidentForensics: typeof import("./getIncidentForensics").getIncidentForensics = null as any;
+export const getIncidentForensicsOutput: typeof import("./getIncidentForensics").getIncidentForensicsOutput = null as any;
+utilities.lazyLoad(exports, ["getIncidentForensics","getIncidentForensicsOutput"], () => require("./getIncidentForensics"));
+
 export { GetPackRuleVersionsArgs, GetPackRuleVersionsResult, GetPackRuleVersionsOutputArgs } from "./getPackRuleVersions";
 export const getPackRuleVersions: typeof import("./getPackRuleVersions").getPackRuleVersions = null as any;
 export const getPackRuleVersionsOutput: typeof import("./getPackRuleVersions").getPackRuleVersionsOutput = null as any;
@@ -85,6 +95,11 @@ export const getPolicyBundles: typeof import("./getPolicyBundles").getPolicyBund
 export const getPolicyBundlesOutput: typeof import("./getPolicyBundles").getPolicyBundlesOutput = null as any;
 utilities.lazyLoad(exports, ["getPolicyBundles","getPolicyBundlesOutput"], () => require("./getPolicyBundles"));
 
+export { GetReportDataArgs, GetReportDataResult, GetReportDataOutputArgs } from "./getReportData";
+export const getReportData: typeof import("./getReportData").getReportData = null as any;
+export const getReportDataOutput: typeof import("./getReportData").getReportDataOutput = null as any;
+utilities.lazyLoad(exports, ["getReportData","getReportDataOutput"], () => require("./getReportData"));
+
 export { GetReportsOverviewArgs, GetReportsOverviewResult, GetReportsOverviewOutputArgs } from "./getReportsOverview";
 export const getReportsOverview: typeof import("./getReportsOverview").getReportsOverview = null as any;
 export const getReportsOverviewOutput: typeof import("./getReportsOverview").getReportsOverviewOutput = null as any;
@@ -95,6 +110,11 @@ export const getRuntimeStatus: typeof import("./getRuntimeStatus").getRuntimeSta
 export const getRuntimeStatusOutput: typeof import("./getRuntimeStatus").getRuntimeStatusOutput = null as any;
 utilities.lazyLoad(exports, ["getRuntimeStatus","getRuntimeStatusOutput"], () => require("./getRuntimeStatus"));
 
+export { GetSessionForensicsArgs, GetSessionForensicsResult, GetSessionForensicsOutputArgs } from "./getSessionForensics";
+export const getSessionForensics: typeof import("./getSessionForensics").getSessionForensics = null as any;
+export const getSessionForensicsOutput: typeof import("./getSessionForensics").getSessionForensicsOutput = null as any;
+utilities.lazyLoad(exports, ["getSessionForensics","getSessionForensicsOutput"], () => require("./getSessionForensics"));
+
 export { GetTenantSettingsResult } from "./getTenantSettings";
 export const getTenantSettings: typeof import("./getTenantSettings").getTenantSettings = null as any;
 export const getTenantSettingsOutput: typeof import("./getTenantSettings").getTenantSettingsOutput = null as any;

package/governance/packAssignmentBulk.ts

@@ -81,7 +81,7 @@ export class PackAssignmentBulk extends pulumi.CustomResource {
      */
     declare public readonly mismatchBoost: pulumi.Output<number | undefined>;
     /**
-     * JSON map keyed by<span pulumi-lang-nodejs=" packId " pulumi-lang-dotnet=" PackId " pulumi-lang-go=" packId " pulumi-lang-python=" pack_id " pulumi-lang-yaml=" packId " pulumi-lang-java=" packId "> packId </span>with per-pack overrides.
+     * JSON map keyed by packId with per-pack overrides.
      */
     declare public readonly overridesByPackJson: pulumi.Output<string | undefined>;
     /**
@@ -230,7 +230,7 @@ export interface PackAssignmentBulkState {
      */
     mismatchBoost?: pulumi.Input<number | undefined>;
     /**
-     * JSON map keyed by<span pulumi-lang-nodejs=" packId " pulumi-lang-dotnet=" PackId " pulumi-lang-go=" packId " pulumi-lang-python=" pack_id " pulumi-lang-yaml=" packId " pulumi-lang-java=" packId "> packId </span>with per-pack overrides.
+     * JSON map keyed by packId with per-pack overrides.
      */
     overridesByPackJson?: pulumi.Input<string | undefined>;
     /**
@@ -304,7 +304,7 @@ export interface PackAssignmentBulkArgs {
      */
     mismatchBoost?: pulumi.Input<number | undefined>;
     /**
-     * JSON map keyed by<span pulumi-lang-nodejs=" packId " pulumi-lang-dotnet=" PackId " pulumi-lang-go=" packId " pulumi-lang-python=" pack_id " pulumi-lang-yaml=" packId " pulumi-lang-java=" packId "> packId </span>with per-pack overrides.
+     * JSON map keyed by packId with per-pack overrides.
      */
     overridesByPackJson?: pulumi.Input<string | undefined>;
     /**

package/governance/pamSettings.ts

@@ -39,11 +39,11 @@ export class PamSettings extends pulumi.CustomResource {
     /**
      * Enable PAM step-up callback integration.
      */
-    declare public readonly pamEnabled: pulumi.Output<boolean | undefined>;
+    declare public readonly pamEnabled: pulumi.Output<boolean>;
     /**
      * PAM provider slug.
      */
-    declare public readonly pamProvider: pulumi.Output<string | undefined>;
+    declare public readonly pamProvider: pulumi.Output<string>;
     /**
      * Outbound PAM auth token.
      */
@@ -55,11 +55,11 @@ export class PamSettings extends pulumi.CustomResource {
     /**
      * Outbound PAM request timeout in seconds.
      */
-    declare public readonly pamRequestTimeoutSeconds: pulumi.Output<number | undefined>;
+    declare public readonly pamRequestTimeoutSeconds: pulumi.Output<number>;
     /**
      * Outbound PAM request URL.
      */
-    declare public readonly pamRequestUrl: pulumi.Output<string | undefined>;
+    declare public readonly pamRequestUrl: pulumi.Output<string>;
     /**
      * Tenant ID resolved from provider configuration.
      */

package/index.ts

@@ -16,6 +16,7 @@ import * as browser from "./browser";
 import * as config from "./config";
 import * as fleet from "./fleet";
 import * as governance from "./governance";
+import * as mcp from "./mcp";
 import * as mdm from "./mdm";
 
 export {
@@ -25,6 +26,7 @@ export {
     config,
     fleet,
     governance,
+    mcp,
     mdm,
 };
 pulumi.runtime.registerResourcePackage("thoth", {

package/mcp/catalogVerify.ts

@@ -0,0 +1,225 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+export class CatalogVerify extends pulumi.CustomResource {
+    /**
+     * Get an existing CatalogVerify resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: CatalogVerifyState, opts?: pulumi.CustomResourceOptions): CatalogVerify {
+        return new CatalogVerify(name, <any>state, { ...opts, id: id });
+    }
+
+    /** @internal */
+    public static readonly __pulumiType = 'thoth:mcp/catalogVerify:CatalogVerify';
+
+    /**
+     * Returns true if the given object is an instance of CatalogVerify.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    public static isInstance(obj: any): obj is CatalogVerify {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === CatalogVerify.__pulumiType;
+    }
+
+    /**
+     * Number of allowed tools in the result catalog.
+     */
+    declare public /*out*/ readonly allowedToolsCount: pulumi.Output<number>;
+    /**
+     * Optional auth context JSON object merged into the verification request.
+     */
+    declare public readonly authContextJson: pulumi.Output<string | undefined>;
+    /**
+     * Number of blocked tools in the result catalog.
+     */
+    declare public /*out*/ readonly blockedToolsCount: pulumi.Output<number>;
+    /**
+     * Optional environment filter (dev/prod).
+     */
+    declare public readonly environment: pulumi.Output<string | undefined>;
+    /**
+     * Optional human groups for catalog verification context.
+     */
+    declare public readonly humanGroups: pulumi.Output<string[] | undefined>;
+    /**
+     * Optional human principal seed for catalog verification.
+     */
+    declare public readonly humanPrincipal: pulumi.Output<string | undefined>;
+    /**
+     * Optional human role seed for catalog verification.
+     */
+    declare public readonly humanRole: pulumi.Output<string | undefined>;
+    /**
+     * Matched policy count returned by the verifier.
+     */
+    declare public /*out*/ readonly policyCount: pulumi.Output<number>;
+    /**
+     * Principal used for catalog verification.
+     */
+    declare public readonly principal: pulumi.Output<string | undefined>;
+    /**
+     * Catalog verification response payload as JSON.
+     */
+    declare public /*out*/ readonly responseJson: pulumi.Output<string>;
+    /**
+     * Tenant ID from provider configuration.
+     */
+    declare public /*out*/ readonly tenantId: pulumi.Output<string>;
+    /**
+     * Change this field to force another verification run.
+     */
+    declare public readonly trigger: pulumi.Output<string | undefined>;
+    /**
+     * RFC3339 timestamp when verification ran.
+     */
+    declare public /*out*/ readonly verifiedAt: pulumi.Output<string>;
+
+    /**
+     * Create a CatalogVerify resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args?: CatalogVerifyArgs, opts?: pulumi.CustomResourceOptions)
+    constructor(name: string, argsOrState?: CatalogVerifyArgs | CatalogVerifyState, opts?: pulumi.CustomResourceOptions) {
+        let resourceInputs: pulumi.Inputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState as CatalogVerifyState | undefined;
+            resourceInputs["allowedToolsCount"] = state?.allowedToolsCount;
+            resourceInputs["authContextJson"] = state?.authContextJson;
+            resourceInputs["blockedToolsCount"] = state?.blockedToolsCount;
+            resourceInputs["environment"] = state?.environment;
+            resourceInputs["humanGroups"] = state?.humanGroups;
+            resourceInputs["humanPrincipal"] = state?.humanPrincipal;
+            resourceInputs["humanRole"] = state?.humanRole;
+            resourceInputs["policyCount"] = state?.policyCount;
+            resourceInputs["principal"] = state?.principal;
+            resourceInputs["responseJson"] = state?.responseJson;
+            resourceInputs["tenantId"] = state?.tenantId;
+            resourceInputs["trigger"] = state?.trigger;
+            resourceInputs["verifiedAt"] = state?.verifiedAt;
+        } else {
+            const args = argsOrState as CatalogVerifyArgs | undefined;
+            resourceInputs["authContextJson"] = args?.authContextJson;
+            resourceInputs["environment"] = args?.environment;
+            resourceInputs["humanGroups"] = args?.humanGroups;
+            resourceInputs["humanPrincipal"] = args?.humanPrincipal;
+            resourceInputs["humanRole"] = args?.humanRole;
+            resourceInputs["principal"] = args?.principal;
+            resourceInputs["trigger"] = args?.trigger;
+            resourceInputs["allowedToolsCount"] = undefined /*out*/;
+            resourceInputs["blockedToolsCount"] = undefined /*out*/;
+            resourceInputs["policyCount"] = undefined /*out*/;
+            resourceInputs["responseJson"] = undefined /*out*/;
+            resourceInputs["tenantId"] = undefined /*out*/;
+            resourceInputs["verifiedAt"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(CatalogVerify.__pulumiType, name, resourceInputs, opts);
+    }
+}
+
+/**
+ * Input properties used for looking up and filtering CatalogVerify resources.
+ */
+export interface CatalogVerifyState {
+    /**
+     * Number of allowed tools in the result catalog.
+     */
+    allowedToolsCount?: pulumi.Input<number | undefined>;
+    /**
+     * Optional auth context JSON object merged into the verification request.
+     */
+    authContextJson?: pulumi.Input<string | undefined>;
+    /**
+     * Number of blocked tools in the result catalog.
+     */
+    blockedToolsCount?: pulumi.Input<number | undefined>;
+    /**
+     * Optional environment filter (dev/prod).
+     */
+    environment?: pulumi.Input<string | undefined>;
+    /**
+     * Optional human groups for catalog verification context.
+     */
+    humanGroups?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Optional human principal seed for catalog verification.
+     */
+    humanPrincipal?: pulumi.Input<string | undefined>;
+    /**
+     * Optional human role seed for catalog verification.
+     */
+    humanRole?: pulumi.Input<string | undefined>;
+    /**
+     * Matched policy count returned by the verifier.
+     */
+    policyCount?: pulumi.Input<number | undefined>;
+    /**
+     * Principal used for catalog verification.
+     */
+    principal?: pulumi.Input<string | undefined>;
+    /**
+     * Catalog verification response payload as JSON.
+     */
+    responseJson?: pulumi.Input<string | undefined>;
+    /**
+     * Tenant ID from provider configuration.
+     */
+    tenantId?: pulumi.Input<string | undefined>;
+    /**
+     * Change this field to force another verification run.
+     */
+    trigger?: pulumi.Input<string | undefined>;
+    /**
+     * RFC3339 timestamp when verification ran.
+     */
+    verifiedAt?: pulumi.Input<string | undefined>;
+}
+
+/**
+ * The set of arguments for constructing a CatalogVerify resource.
+ */
+export interface CatalogVerifyArgs {
+    /**
+     * Optional auth context JSON object merged into the verification request.
+     */
+    authContextJson?: pulumi.Input<string | undefined>;
+    /**
+     * Optional environment filter (dev/prod).
+     */
+    environment?: pulumi.Input<string | undefined>;
+    /**
+     * Optional human groups for catalog verification context.
+     */
+    humanGroups?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Optional human principal seed for catalog verification.
+     */
+    humanPrincipal?: pulumi.Input<string | undefined>;
+    /**
+     * Optional human role seed for catalog verification.
+     */
+    humanRole?: pulumi.Input<string | undefined>;
+    /**
+     * Principal used for catalog verification.
+     */
+    principal?: pulumi.Input<string | undefined>;
+    /**
+     * Change this field to force another verification run.
+     */
+    trigger?: pulumi.Input<string | undefined>;
+}

package/mcp/getInventoryReport.ts

@@ -0,0 +1,50 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+export function getInventoryReport(args?: GetInventoryReportArgs, opts?: pulumi.InvokeOptions): Promise<GetInventoryReportResult> {
+    args = args || {};
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("thoth:mcp/getInventoryReport:getInventoryReport", {
+        "windowHours": args.windowHours,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getInventoryReport.
+ */
+export interface GetInventoryReportArgs {
+    windowHours?: number;
+}
+
+/**
+ * A collection of values returned by getInventoryReport.
+ */
+export interface GetInventoryReportResult {
+    readonly dataJson: string;
+    /**
+     * The provider-assigned unique ID for this managed resource.
+     */
+    readonly id: string;
+    readonly responseJson: string;
+    readonly total: number;
+    readonly unapprovedCalls: number;
+    readonly unapprovedEndpoints: number;
+    readonly windowHours: number;
+}
+export function getInventoryReportOutput(args?: GetInventoryReportOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetInventoryReportResult> {
+    args = args || {};
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("thoth:mcp/getInventoryReport:getInventoryReport", {
+        "windowHours": args.windowHours,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getInventoryReport.
+ */
+export interface GetInventoryReportOutputArgs {
+    windowHours?: pulumi.Input<number | undefined>;
+}

package/mcp/getVendor.ts

@@ -0,0 +1,44 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+export function getVendor(args: GetVendorArgs, opts?: pulumi.InvokeOptions): Promise<GetVendorResult> {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("thoth:mcp/getVendor:getVendor", {
+        "vendorId": args.vendorId,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getVendor.
+ */
+export interface GetVendorArgs {
+    vendorId: string;
+}
+
+/**
+ * A collection of values returned by getVendor.
+ */
+export interface GetVendorResult {
+    /**
+     * The provider-assigned unique ID for this managed resource.
+     */
+    readonly id: string;
+    readonly responseJson: string;
+    readonly vendorId: string;
+}
+export function getVendorOutput(args: GetVendorOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetVendorResult> {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("thoth:mcp/getVendor:getVendor", {
+        "vendorId": args.vendorId,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getVendor.
+ */
+export interface GetVendorOutputArgs {
+    vendorId: pulumi.Input<string>;
+}