@atensec/pulumi-thoth 0.1.11 → 0.1.12

package/mcp/getVendors.ts

@@ -0,0 +1,48 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+export function getVendors(args?: GetVendorsArgs, opts?: pulumi.InvokeOptions): Promise<GetVendorsResult> {
+    args = args || {};
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("thoth:mcp/getVendors:getVendors", {
+        "approved": args.approved,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getVendors.
+ */
+export interface GetVendorsArgs {
+    approved?: boolean;
+}
+
+/**
+ * A collection of values returned by getVendors.
+ */
+export interface GetVendorsResult {
+    readonly approved?: boolean;
+    readonly dataJson: string;
+    /**
+     * The provider-assigned unique ID for this managed resource.
+     */
+    readonly id: string;
+    readonly responseJson: string;
+    readonly total: number;
+}
+export function getVendorsOutput(args?: GetVendorsOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetVendorsResult> {
+    args = args || {};
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("thoth:mcp/getVendors:getVendors", {
+        "approved": args.approved,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getVendors.
+ */
+export interface GetVendorsOutputArgs {
+    approved?: pulumi.Input<boolean | undefined>;
+}

package/mcp/index.ts

@@ -0,0 +1,48 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+// Export members:
+export { CatalogVerifyArgs, CatalogVerifyState } from "./catalogVerify";
+export type CatalogVerify = import("./catalogVerify").CatalogVerify;
+export const CatalogVerify: typeof import("./catalogVerify").CatalogVerify = null as any;
+utilities.lazyLoad(exports, ["CatalogVerify"], () => require("./catalogVerify"));
+
+export { GetInventoryReportArgs, GetInventoryReportResult, GetInventoryReportOutputArgs } from "./getInventoryReport";
+export const getInventoryReport: typeof import("./getInventoryReport").getInventoryReport = null as any;
+export const getInventoryReportOutput: typeof import("./getInventoryReport").getInventoryReportOutput = null as any;
+utilities.lazyLoad(exports, ["getInventoryReport","getInventoryReportOutput"], () => require("./getInventoryReport"));
+
+export { GetVendorArgs, GetVendorResult, GetVendorOutputArgs } from "./getVendor";
+export const getVendor: typeof import("./getVendor").getVendor = null as any;
+export const getVendorOutput: typeof import("./getVendor").getVendorOutput = null as any;
+utilities.lazyLoad(exports, ["getVendor","getVendorOutput"], () => require("./getVendor"));
+
+export { GetVendorsArgs, GetVendorsResult, GetVendorsOutputArgs } from "./getVendors";
+export const getVendors: typeof import("./getVendors").getVendors = null as any;
+export const getVendorsOutput: typeof import("./getVendors").getVendorsOutput = null as any;
+utilities.lazyLoad(exports, ["getVendors","getVendorsOutput"], () => require("./getVendors"));
+
+export { VendorArgs, VendorState } from "./vendor";
+export type Vendor = import("./vendor").Vendor;
+export const Vendor: typeof import("./vendor").Vendor = null as any;
+utilities.lazyLoad(exports, ["Vendor"], () => require("./vendor"));
+
+
+const _module = {
+    version: utilities.getVersion(),
+    construct: (name: string, type: string, urn: string): pulumi.Resource => {
+        switch (type) {
+            case "thoth:mcp/catalogVerify:CatalogVerify":
+                return new CatalogVerify(name, <any>undefined, { urn })
+            case "thoth:mcp/vendor:Vendor":
+                return new Vendor(name, <any>undefined, { urn })
+            default:
+                throw new Error(`unknown resource type ${type}`);
+        }
+    },
+};
+pulumi.runtime.registerResourceModule("thoth", "mcp/catalogVerify", _module)
+pulumi.runtime.registerResourceModule("thoth", "mcp/vendor", _module)

package/mcp/vendor.ts

@@ -0,0 +1,204 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+export class Vendor extends pulumi.CustomResource {
+    /**
+     * Get an existing Vendor resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: VendorState, opts?: pulumi.CustomResourceOptions): Vendor {
+        return new Vendor(name, <any>state, { ...opts, id: id });
+    }
+
+    /** @internal */
+    public static readonly __pulumiType = 'thoth:mcp/vendor:Vendor';
+
+    /**
+     * Returns true if the given object is an instance of Vendor.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    public static isInstance(obj: any): obj is Vendor {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === Vendor.__pulumiType;
+    }
+
+    /**
+     * Whether this vendor is approved for pass-through MCP host access.
+     */
+    declare public readonly approved: pulumi.Output<boolean>;
+    /**
+     * Creation timestamp.
+     */
+    declare public /*out*/ readonly createdAt: pulumi.Output<string>;
+    /**
+     * Human-friendly vendor display name.
+     */
+    declare public readonly displayName: pulumi.Output<string>;
+    /**
+     * Allowed host patterns for this vendor (for example api.openai.com).
+     */
+    declare public readonly hostPatterns: pulumi.Output<string[]>;
+    /**
+     * Last observed timestamp (RFC3339) for this vendor in runtime traffic.
+     */
+    declare public readonly lastSeenAt: pulumi.Output<string>;
+    /**
+     * Optional reviewer notes for this vendor entry.
+     */
+    declare public readonly notes: pulumi.Output<string | undefined>;
+    /**
+     * Vendor entry source (for example manual, discovered).
+     */
+    declare public readonly source: pulumi.Output<string | undefined>;
+    /**
+     * Tenant ID from provider configuration.
+     */
+    declare public /*out*/ readonly tenantId: pulumi.Output<string>;
+    /**
+     * Last update timestamp.
+     */
+    declare public /*out*/ readonly updatedAt: pulumi.Output<string>;
+    /**
+     * Stable vendor identifier.
+     */
+    declare public readonly vendorId: pulumi.Output<string>;
+
+    /**
+     * Create a Vendor resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: VendorArgs, opts?: pulumi.CustomResourceOptions)
+    constructor(name: string, argsOrState?: VendorArgs | VendorState, opts?: pulumi.CustomResourceOptions) {
+        let resourceInputs: pulumi.Inputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState as VendorState | undefined;
+            resourceInputs["approved"] = state?.approved;
+            resourceInputs["createdAt"] = state?.createdAt;
+            resourceInputs["displayName"] = state?.displayName;
+            resourceInputs["hostPatterns"] = state?.hostPatterns;
+            resourceInputs["lastSeenAt"] = state?.lastSeenAt;
+            resourceInputs["notes"] = state?.notes;
+            resourceInputs["source"] = state?.source;
+            resourceInputs["tenantId"] = state?.tenantId;
+            resourceInputs["updatedAt"] = state?.updatedAt;
+            resourceInputs["vendorId"] = state?.vendorId;
+        } else {
+            const args = argsOrState as VendorArgs | undefined;
+            if (args?.displayName === undefined && !opts.urn) {
+                throw new Error("Missing required property 'displayName'");
+            }
+            if (args?.hostPatterns === undefined && !opts.urn) {
+                throw new Error("Missing required property 'hostPatterns'");
+            }
+            if (args?.vendorId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'vendorId'");
+            }
+            resourceInputs["approved"] = args?.approved;
+            resourceInputs["displayName"] = args?.displayName;
+            resourceInputs["hostPatterns"] = args?.hostPatterns;
+            resourceInputs["lastSeenAt"] = args?.lastSeenAt;
+            resourceInputs["notes"] = args?.notes;
+            resourceInputs["source"] = args?.source;
+            resourceInputs["vendorId"] = args?.vendorId;
+            resourceInputs["createdAt"] = undefined /*out*/;
+            resourceInputs["tenantId"] = undefined /*out*/;
+            resourceInputs["updatedAt"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(Vendor.__pulumiType, name, resourceInputs, opts);
+    }
+}
+
+/**
+ * Input properties used for looking up and filtering Vendor resources.
+ */
+export interface VendorState {
+    /**
+     * Whether this vendor is approved for pass-through MCP host access.
+     */
+    approved?: pulumi.Input<boolean | undefined>;
+    /**
+     * Creation timestamp.
+     */
+    createdAt?: pulumi.Input<string | undefined>;
+    /**
+     * Human-friendly vendor display name.
+     */
+    displayName?: pulumi.Input<string | undefined>;
+    /**
+     * Allowed host patterns for this vendor (for example api.openai.com).
+     */
+    hostPatterns?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Last observed timestamp (RFC3339) for this vendor in runtime traffic.
+     */
+    lastSeenAt?: pulumi.Input<string | undefined>;
+    /**
+     * Optional reviewer notes for this vendor entry.
+     */
+    notes?: pulumi.Input<string | undefined>;
+    /**
+     * Vendor entry source (for example manual, discovered).
+     */
+    source?: pulumi.Input<string | undefined>;
+    /**
+     * Tenant ID from provider configuration.
+     */
+    tenantId?: pulumi.Input<string | undefined>;
+    /**
+     * Last update timestamp.
+     */
+    updatedAt?: pulumi.Input<string | undefined>;
+    /**
+     * Stable vendor identifier.
+     */
+    vendorId?: pulumi.Input<string | undefined>;
+}
+
+/**
+ * The set of arguments for constructing a Vendor resource.
+ */
+export interface VendorArgs {
+    /**
+     * Whether this vendor is approved for pass-through MCP host access.
+     */
+    approved?: pulumi.Input<boolean | undefined>;
+    /**
+     * Human-friendly vendor display name.
+     */
+    displayName: pulumi.Input<string>;
+    /**
+     * Allowed host patterns for this vendor (for example api.openai.com).
+     */
+    hostPatterns: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Last observed timestamp (RFC3339) for this vendor in runtime traffic.
+     */
+    lastSeenAt?: pulumi.Input<string | undefined>;
+    /**
+     * Optional reviewer notes for this vendor entry.
+     */
+    notes?: pulumi.Input<string | undefined>;
+    /**
+     * Vendor entry source (for example manual, discovered).
+     */
+    source?: pulumi.Input<string | undefined>;
+    /**
+     * Stable vendor identifier.
+     */
+    vendorId: pulumi.Input<string>;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atensec/pulumi-thoth",
-  "version": "0.1.11",
+  "version": "0.1.12",
   "description": "Pulumi provider for Aten Security Thoth AI governance control plane.",
   "keywords": [
     "pulumi",
@@ -16,7 +16,7 @@
     "build": "tsc"
   },
   "dependencies": {
-    "@pulumi/pulumi": "^3.0.0"
+    "@pulumi/pulumi": "^3.142.0"
   },
   "devDependencies": {
     "@types/node": "^20",

package/provider.ts

@@ -34,7 +34,7 @@ export class Provider extends pulumi.ProviderResource {
      */
     declare public readonly adminBearerTokenFile: pulumi.Output<string | undefined>;
     /**
-     * Apex domain used to derive GovAPI host when<span pulumi-lang-nodejs=" apiBaseUrl " pulumi-lang-dotnet=" ApiBaseUrl " pulumi-lang-go=" apiBaseUrl " pulumi-lang-python=" api_base_url " pulumi-lang-yaml=" apiBaseUrl " pulumi-lang-java=" apiBaseUrl "> apiBaseUrl </span>is omitted. Defaults to atensecurity.com.
+     * Apex domain used to derive GovAPI host when apiBaseUrl is omitted. Defaults to atensecurity.com.
      */
     declare public readonly apexDomain: pulumi.Output<string | undefined>;
     /**
@@ -107,7 +107,7 @@ export interface ProviderArgs {
      */
     adminBearerTokenFile?: pulumi.Input<string | undefined>;
     /**
-     * Apex domain used to derive GovAPI host when<span pulumi-lang-nodejs=" apiBaseUrl " pulumi-lang-dotnet=" ApiBaseUrl " pulumi-lang-go=" apiBaseUrl " pulumi-lang-python=" api_base_url " pulumi-lang-yaml=" apiBaseUrl " pulumi-lang-java=" apiBaseUrl "> apiBaseUrl </span>is omitted. Defaults to atensecurity.com.
+     * Apex domain used to derive GovAPI host when apiBaseUrl is omitted. Defaults to atensecurity.com.
      */
     apexDomain?: pulumi.Input<string | undefined>;
     /**

package/tsconfig.json

@@ -26,6 +26,8 @@
         "access/getApiKeyMetrics.ts",
         "access/getApiKeys.ts",
         "access/index.ts",
+        "billing/getArtifact.ts",
+        "billing/getArtifacts.ts",
         "billing/getCreditBank.ts",
         "billing/getEstimate.ts",
         "billing/getInvoices.ts",
@@ -44,6 +46,7 @@
         "browser/provider.ts",
         "config/index.ts",
         "config/vars.ts",
+        "fleet/endpoint.ts",
         "fleet/fleet.ts",
         "fleet/getEndpointStats.ts",
         "fleet/getEndpoints.ts",
@@ -53,6 +56,7 @@
         "governance/approvalDecision.ts",
         "governance/decisionFieldBackfill.ts",
         "governance/evidenceBackfill.ts",
+        "governance/getAgentLatestForensics.ts",
         "governance/getApprovals.ts",
         "governance/getCostReport.ts",
         "governance/getDay7Report.ts",
@@ -62,12 +66,15 @@
         "governance/getEvidenceSlos.ts",
         "governance/getEvidenceVerify.ts",
         "governance/getFeed.ts",
+        "governance/getIncidentForensics.ts",
         "governance/getPackRuleVersions.ts",
         "governance/getPackRules.ts",
         "governance/getPacks.ts",
         "governance/getPolicyBundles.ts",
+        "governance/getReportData.ts",
         "governance/getReportsOverview.ts",
         "governance/getRuntimeStatus.ts",
+        "governance/getSessionForensics.ts",
         "governance/getTenantSettings.ts",
         "governance/getTools.ts",
         "governance/governanceSettings.ts",
@@ -81,6 +88,12 @@
         "governance/webhookSettings.ts",
         "governance/webhookTest.ts",
         "index.ts",
+        "mcp/catalogVerify.ts",
+        "mcp/getInventoryReport.ts",
+        "mcp/getVendor.ts",
+        "mcp/getVendors.ts",
+        "mcp/index.ts",
+        "mcp/vendor.ts",
         "mdm/getProviders.ts",
         "mdm/getSyncJob.ts",
         "mdm/index.ts",

package/.gitattributes

@@ -1 +0,0 @@
-* linguist-generated