@atensec/pulumi-thoth 0.1.15 → 0.1.17
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bin/governance/getExecutiveSummary.d.ts +2 -0
- package/bin/governance/getExecutiveSummary.d.ts.map +1 -1
- package/bin/governance/getExecutiveSummary.js.map +1 -1
- package/bin/governance/getReportsOverview.d.ts +3 -0
- package/bin/governance/getReportsOverview.d.ts.map +1 -1
- package/bin/governance/getReportsOverview.js.map +1 -1
- package/bin/governance/governanceSettings.d.ts +89 -3
- package/bin/governance/governanceSettings.d.ts.map +1 -1
- package/bin/governance/governanceSettings.js +18 -0
- package/bin/governance/governanceSettings.js.map +1 -1
- package/bin/governance/index.d.ts +3 -0
- package/bin/governance/index.d.ts.map +1 -1
- package/bin/governance/index.js +6 -1
- package/bin/governance/index.js.map +1 -1
- package/bin/governance/toolClassification.d.ts +65 -0
- package/bin/governance/toolClassification.d.ts.map +1 -0
- package/bin/governance/toolClassification.js +84 -0
- package/bin/governance/toolClassification.js.map +1 -0
- package/bin/index.d.ts +2 -1
- package/bin/index.d.ts.map +1 -1
- package/bin/index.js +3 -1
- package/bin/index.js.map +1 -1
- package/bin/mcp/vendor.d.ts +96 -0
- package/bin/mcp/vendor.d.ts.map +1 -1
- package/bin/mcp/vendor.js +16 -0
- package/bin/mcp/vendor.js.map +1 -1
- package/bin/types/index.d.ts +4 -0
- package/bin/types/index.d.ts.map +1 -0
- package/bin/types/index.js +34 -0
- package/bin/types/index.js.map +1 -0
- package/bin/types/input.d.ts +22 -0
- package/bin/types/input.d.ts.map +1 -0
- package/bin/types/input.js +5 -0
- package/bin/types/input.js.map +1 -0
- package/bin/types/output.d.ts +21 -0
- package/bin/types/output.d.ts.map +1 -0
- package/bin/types/output.js +5 -0
- package/bin/types/output.js.map +1 -0
- package/governance/getExecutiveSummary.ts +2 -0
- package/governance/getReportsOverview.ts +3 -0
- package/governance/governanceSettings.ts +103 -3
- package/governance/index.ts +8 -0
- package/governance/toolClassification.ts +109 -0
- package/index.ts +2 -0
- package/mcp/vendor.ts +112 -0
- package/package.json +1 -1
- package/tsconfig.json +4 -0
- package/types/index.ts +13 -0
- package/types/input.ts +27 -0
- package/types/output.ts +28 -0
package/bin/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC;AAK3B,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,GAAG,MAAM,OAAO,CAAC;AAC7B,OAAO,KAAK,GAAG,MAAM,OAAO,CAAC;
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC;AAK3B,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,GAAG,MAAM,OAAO,CAAC;AAC7B,OAAO,KAAK,GAAG,MAAM,OAAO,CAAC;AAC7B,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AAEjC,OAAO,EACH,MAAM,EACN,OAAO,EACP,OAAO,EACP,MAAM,EACN,KAAK,EACL,UAAU,EACV,GAAG,EACH,GAAG,EACH,KAAK,GACR,CAAC"}
|
package/bin/index.js
CHANGED
|
@@ -28,7 +28,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
|
28
28
|
for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
|
|
29
29
|
};
|
|
30
30
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
31
|
-
exports.mdm = exports.mcp = exports.governance = exports.fleet = exports.config = exports.browser = exports.billing = exports.access = void 0;
|
|
31
|
+
exports.types = exports.mdm = exports.mcp = exports.governance = exports.fleet = exports.config = exports.browser = exports.billing = exports.access = void 0;
|
|
32
32
|
const pulumi = __importStar(require("@pulumi/pulumi"));
|
|
33
33
|
const utilities = __importStar(require("./utilities"));
|
|
34
34
|
// Export members:
|
|
@@ -51,6 +51,8 @@ const mcp = __importStar(require("./mcp"));
|
|
|
51
51
|
exports.mcp = mcp;
|
|
52
52
|
const mdm = __importStar(require("./mdm"));
|
|
53
53
|
exports.mdm = mdm;
|
|
54
|
+
const types = __importStar(require("./types"));
|
|
55
|
+
exports.types = types;
|
|
54
56
|
pulumi.runtime.registerResourcePackage("thoth", {
|
|
55
57
|
version: utilities.getVersion(),
|
|
56
58
|
constructProvider: (name, type, urn) => {
|
package/bin/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC,kBAAkB;AAClB,6CAA2B;AAC3B,yCAAsC;AAGtC,sBAAsB;AACtB,iDAAmC;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC,kBAAkB;AAClB,6CAA2B;AAC3B,yCAAsC;AAGtC,sBAAsB;AACtB,iDAAmC;AAW/B,wBAAM;AAVV,mDAAqC;AAWjC,0BAAO;AAVX,mDAAqC;AAWjC,0BAAO;AAVX,iDAAmC;AAW/B,wBAAM;AAVV,+CAAiC;AAW7B,sBAAK;AAVT,yDAA2C;AAWvC,gCAAU;AAVd,2CAA6B;AAWzB,kBAAG;AAVP,2CAA6B;AAWzB,kBAAG;AAVP,+CAAiC;AAW7B,sBAAK;AAET,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,OAAO,EAAE;IAC5C,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,iBAAiB,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAA2B,EAAE;QACpF,IAAI,IAAI,KAAK,wBAAwB,EAAE;YACnC,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACpD;QACD,OAAO,IAAI,mBAAQ,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;CACJ,CAAC,CAAC"}
|
package/bin/mcp/vendor.d.ts
CHANGED
|
@@ -19,6 +19,10 @@ export declare class Vendor extends pulumi.CustomResource {
|
|
|
19
19
|
* Whether this vendor is approved for pass-through MCP host access.
|
|
20
20
|
*/
|
|
21
21
|
readonly approved: pulumi.Output<boolean>;
|
|
22
|
+
/**
|
|
23
|
+
* Capability bindings this vendor/runtime identity is allowed to request.
|
|
24
|
+
*/
|
|
25
|
+
readonly capabilities: pulumi.Output<string[]>;
|
|
22
26
|
/**
|
|
23
27
|
* Creation timestamp.
|
|
24
28
|
*/
|
|
@@ -27,6 +31,14 @@ export declare class Vendor extends pulumi.CustomResource {
|
|
|
27
31
|
* Human-friendly vendor display name.
|
|
28
32
|
*/
|
|
29
33
|
readonly displayName: pulumi.Output<string>;
|
|
34
|
+
/**
|
|
35
|
+
* Allowed egress host patterns enforced for this vendor/runtime identity.
|
|
36
|
+
*/
|
|
37
|
+
readonly egressAllowedHostPatterns: pulumi.Output<string[]>;
|
|
38
|
+
/**
|
|
39
|
+
* Egress policy mode for vendor traffic (enforce or observe).
|
|
40
|
+
*/
|
|
41
|
+
readonly egressPolicyMode: pulumi.Output<string>;
|
|
30
42
|
/**
|
|
31
43
|
* Allowed host patterns for this vendor (for example api.openai.com).
|
|
32
44
|
*/
|
|
@@ -35,10 +47,30 @@ export declare class Vendor extends pulumi.CustomResource {
|
|
|
35
47
|
* Last observed timestamp (RFC3339) for this vendor in runtime traffic.
|
|
36
48
|
*/
|
|
37
49
|
readonly lastSeenAt: pulumi.Output<string>;
|
|
50
|
+
/**
|
|
51
|
+
* Signature bundle reference used for manifest verification.
|
|
52
|
+
*/
|
|
53
|
+
readonly manifestSignatureBundleRef: pulumi.Output<string>;
|
|
54
|
+
/**
|
|
55
|
+
* Signer identity for verified manifest signatures.
|
|
56
|
+
*/
|
|
57
|
+
readonly manifestSignatureSigner: pulumi.Output<string>;
|
|
58
|
+
/**
|
|
59
|
+
* Manifest signature verification status (verified, pending, failed).
|
|
60
|
+
*/
|
|
61
|
+
readonly manifestSignatureStatus: pulumi.Output<string>;
|
|
62
|
+
/**
|
|
63
|
+
* RFC3339 timestamp when manifest signature was verified.
|
|
64
|
+
*/
|
|
65
|
+
readonly manifestSignatureVerifiedAt: pulumi.Output<string>;
|
|
38
66
|
/**
|
|
39
67
|
* Optional reviewer notes for this vendor entry.
|
|
40
68
|
*/
|
|
41
69
|
readonly notes: pulumi.Output<string | undefined>;
|
|
70
|
+
/**
|
|
71
|
+
* Capability-scoped runtime identity used at action-time enforcement.
|
|
72
|
+
*/
|
|
73
|
+
readonly runtimeIdentity: pulumi.Output<string>;
|
|
42
74
|
/**
|
|
43
75
|
* Vendor entry source (for example manual, discovered).
|
|
44
76
|
*/
|
|
@@ -72,6 +104,10 @@ export interface VendorState {
|
|
|
72
104
|
* Whether this vendor is approved for pass-through MCP host access.
|
|
73
105
|
*/
|
|
74
106
|
approved?: pulumi.Input<boolean | undefined>;
|
|
107
|
+
/**
|
|
108
|
+
* Capability bindings this vendor/runtime identity is allowed to request.
|
|
109
|
+
*/
|
|
110
|
+
capabilities?: pulumi.Input<pulumi.Input<string>[] | undefined>;
|
|
75
111
|
/**
|
|
76
112
|
* Creation timestamp.
|
|
77
113
|
*/
|
|
@@ -80,6 +116,14 @@ export interface VendorState {
|
|
|
80
116
|
* Human-friendly vendor display name.
|
|
81
117
|
*/
|
|
82
118
|
displayName?: pulumi.Input<string | undefined>;
|
|
119
|
+
/**
|
|
120
|
+
* Allowed egress host patterns enforced for this vendor/runtime identity.
|
|
121
|
+
*/
|
|
122
|
+
egressAllowedHostPatterns?: pulumi.Input<pulumi.Input<string>[] | undefined>;
|
|
123
|
+
/**
|
|
124
|
+
* Egress policy mode for vendor traffic (enforce or observe).
|
|
125
|
+
*/
|
|
126
|
+
egressPolicyMode?: pulumi.Input<string | undefined>;
|
|
83
127
|
/**
|
|
84
128
|
* Allowed host patterns for this vendor (for example api.openai.com).
|
|
85
129
|
*/
|
|
@@ -88,10 +132,30 @@ export interface VendorState {
|
|
|
88
132
|
* Last observed timestamp (RFC3339) for this vendor in runtime traffic.
|
|
89
133
|
*/
|
|
90
134
|
lastSeenAt?: pulumi.Input<string | undefined>;
|
|
135
|
+
/**
|
|
136
|
+
* Signature bundle reference used for manifest verification.
|
|
137
|
+
*/
|
|
138
|
+
manifestSignatureBundleRef?: pulumi.Input<string | undefined>;
|
|
139
|
+
/**
|
|
140
|
+
* Signer identity for verified manifest signatures.
|
|
141
|
+
*/
|
|
142
|
+
manifestSignatureSigner?: pulumi.Input<string | undefined>;
|
|
143
|
+
/**
|
|
144
|
+
* Manifest signature verification status (verified, pending, failed).
|
|
145
|
+
*/
|
|
146
|
+
manifestSignatureStatus?: pulumi.Input<string | undefined>;
|
|
147
|
+
/**
|
|
148
|
+
* RFC3339 timestamp when manifest signature was verified.
|
|
149
|
+
*/
|
|
150
|
+
manifestSignatureVerifiedAt?: pulumi.Input<string | undefined>;
|
|
91
151
|
/**
|
|
92
152
|
* Optional reviewer notes for this vendor entry.
|
|
93
153
|
*/
|
|
94
154
|
notes?: pulumi.Input<string | undefined>;
|
|
155
|
+
/**
|
|
156
|
+
* Capability-scoped runtime identity used at action-time enforcement.
|
|
157
|
+
*/
|
|
158
|
+
runtimeIdentity?: pulumi.Input<string | undefined>;
|
|
95
159
|
/**
|
|
96
160
|
* Vendor entry source (for example manual, discovered).
|
|
97
161
|
*/
|
|
@@ -117,10 +181,22 @@ export interface VendorArgs {
|
|
|
117
181
|
* Whether this vendor is approved for pass-through MCP host access.
|
|
118
182
|
*/
|
|
119
183
|
approved?: pulumi.Input<boolean | undefined>;
|
|
184
|
+
/**
|
|
185
|
+
* Capability bindings this vendor/runtime identity is allowed to request.
|
|
186
|
+
*/
|
|
187
|
+
capabilities?: pulumi.Input<pulumi.Input<string>[] | undefined>;
|
|
120
188
|
/**
|
|
121
189
|
* Human-friendly vendor display name.
|
|
122
190
|
*/
|
|
123
191
|
displayName: pulumi.Input<string>;
|
|
192
|
+
/**
|
|
193
|
+
* Allowed egress host patterns enforced for this vendor/runtime identity.
|
|
194
|
+
*/
|
|
195
|
+
egressAllowedHostPatterns?: pulumi.Input<pulumi.Input<string>[] | undefined>;
|
|
196
|
+
/**
|
|
197
|
+
* Egress policy mode for vendor traffic (enforce or observe).
|
|
198
|
+
*/
|
|
199
|
+
egressPolicyMode?: pulumi.Input<string | undefined>;
|
|
124
200
|
/**
|
|
125
201
|
* Allowed host patterns for this vendor (for example api.openai.com).
|
|
126
202
|
*/
|
|
@@ -129,10 +205,30 @@ export interface VendorArgs {
|
|
|
129
205
|
* Last observed timestamp (RFC3339) for this vendor in runtime traffic.
|
|
130
206
|
*/
|
|
131
207
|
lastSeenAt?: pulumi.Input<string | undefined>;
|
|
208
|
+
/**
|
|
209
|
+
* Signature bundle reference used for manifest verification.
|
|
210
|
+
*/
|
|
211
|
+
manifestSignatureBundleRef?: pulumi.Input<string | undefined>;
|
|
212
|
+
/**
|
|
213
|
+
* Signer identity for verified manifest signatures.
|
|
214
|
+
*/
|
|
215
|
+
manifestSignatureSigner?: pulumi.Input<string | undefined>;
|
|
216
|
+
/**
|
|
217
|
+
* Manifest signature verification status (verified, pending, failed).
|
|
218
|
+
*/
|
|
219
|
+
manifestSignatureStatus?: pulumi.Input<string | undefined>;
|
|
220
|
+
/**
|
|
221
|
+
* RFC3339 timestamp when manifest signature was verified.
|
|
222
|
+
*/
|
|
223
|
+
manifestSignatureVerifiedAt?: pulumi.Input<string | undefined>;
|
|
132
224
|
/**
|
|
133
225
|
* Optional reviewer notes for this vendor entry.
|
|
134
226
|
*/
|
|
135
227
|
notes?: pulumi.Input<string | undefined>;
|
|
228
|
+
/**
|
|
229
|
+
* Capability-scoped runtime identity used at action-time enforcement.
|
|
230
|
+
*/
|
|
231
|
+
runtimeIdentity?: pulumi.Input<string | undefined>;
|
|
136
232
|
/**
|
|
137
233
|
* Vendor entry source (for example manual, discovered).
|
|
138
234
|
*/
|
package/bin/mcp/vendor.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"vendor.d.ts","sourceRoot":"","sources":["../../mcp/vendor.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC,qBAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,MAAM;IAO9H;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,MAAM;IAOjD;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzD;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D;;OAEG;IACH,SAAwB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D;;OAEG;IACH,SAAwB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClE;;OAEG;IACH,SAAgC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChE;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAExD;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;
|
|
1
|
+
{"version":3,"file":"vendor.d.ts","sourceRoot":"","sources":["../../mcp/vendor.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC,qBAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,MAAM;IAO9H;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,MAAM;IAOjD;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzD;;OAEG;IACH,SAAwB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D;;OAEG;IACH,SAAwB,yBAAyB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3E;;OAEG;IACH,SAAwB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChE;;OAEG;IACH,SAAwB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D;;OAEG;IACH,SAAwB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D;;OAEG;IACH,SAAwB,0BAA0B,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1E;;OAEG;IACH,SAAwB,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvE;;OAEG;IACH,SAAwB,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvE;;OAEG;IACH,SAAwB,2BAA2B,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3E;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/D;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClE;;OAEG;IACH,SAAgC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChE;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAExD;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAyDlF;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IACxB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAChE;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAC7E;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpD;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAChE;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9D;;OAEG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3D;;OAEG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3D;;OAEG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/D;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnD;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACvB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAChE;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC;;OAEG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAC7E;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpD;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnD;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9D;;OAEG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3D;;OAEG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3D;;OAEG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/D;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnD;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAClC"}
|
package/bin/mcp/vendor.js
CHANGED
|
@@ -59,11 +59,19 @@ class Vendor extends pulumi.CustomResource {
|
|
|
59
59
|
if (opts.id) {
|
|
60
60
|
const state = argsOrState;
|
|
61
61
|
resourceInputs["approved"] = state?.approved;
|
|
62
|
+
resourceInputs["capabilities"] = state?.capabilities;
|
|
62
63
|
resourceInputs["createdAt"] = state?.createdAt;
|
|
63
64
|
resourceInputs["displayName"] = state?.displayName;
|
|
65
|
+
resourceInputs["egressAllowedHostPatterns"] = state?.egressAllowedHostPatterns;
|
|
66
|
+
resourceInputs["egressPolicyMode"] = state?.egressPolicyMode;
|
|
64
67
|
resourceInputs["hostPatterns"] = state?.hostPatterns;
|
|
65
68
|
resourceInputs["lastSeenAt"] = state?.lastSeenAt;
|
|
69
|
+
resourceInputs["manifestSignatureBundleRef"] = state?.manifestSignatureBundleRef;
|
|
70
|
+
resourceInputs["manifestSignatureSigner"] = state?.manifestSignatureSigner;
|
|
71
|
+
resourceInputs["manifestSignatureStatus"] = state?.manifestSignatureStatus;
|
|
72
|
+
resourceInputs["manifestSignatureVerifiedAt"] = state?.manifestSignatureVerifiedAt;
|
|
66
73
|
resourceInputs["notes"] = state?.notes;
|
|
74
|
+
resourceInputs["runtimeIdentity"] = state?.runtimeIdentity;
|
|
67
75
|
resourceInputs["source"] = state?.source;
|
|
68
76
|
resourceInputs["tenantId"] = state?.tenantId;
|
|
69
77
|
resourceInputs["updatedAt"] = state?.updatedAt;
|
|
@@ -81,10 +89,18 @@ class Vendor extends pulumi.CustomResource {
|
|
|
81
89
|
throw new Error("Missing required property 'vendorId'");
|
|
82
90
|
}
|
|
83
91
|
resourceInputs["approved"] = args?.approved;
|
|
92
|
+
resourceInputs["capabilities"] = args?.capabilities;
|
|
84
93
|
resourceInputs["displayName"] = args?.displayName;
|
|
94
|
+
resourceInputs["egressAllowedHostPatterns"] = args?.egressAllowedHostPatterns;
|
|
95
|
+
resourceInputs["egressPolicyMode"] = args?.egressPolicyMode;
|
|
85
96
|
resourceInputs["hostPatterns"] = args?.hostPatterns;
|
|
86
97
|
resourceInputs["lastSeenAt"] = args?.lastSeenAt;
|
|
98
|
+
resourceInputs["manifestSignatureBundleRef"] = args?.manifestSignatureBundleRef;
|
|
99
|
+
resourceInputs["manifestSignatureSigner"] = args?.manifestSignatureSigner;
|
|
100
|
+
resourceInputs["manifestSignatureStatus"] = args?.manifestSignatureStatus;
|
|
101
|
+
resourceInputs["manifestSignatureVerifiedAt"] = args?.manifestSignatureVerifiedAt;
|
|
87
102
|
resourceInputs["notes"] = args?.notes;
|
|
103
|
+
resourceInputs["runtimeIdentity"] = args?.runtimeIdentity;
|
|
88
104
|
resourceInputs["source"] = args?.source;
|
|
89
105
|
resourceInputs["vendorId"] = args?.vendorId;
|
|
90
106
|
resourceInputs["createdAt"] = undefined /*out*/;
|
package/bin/mcp/vendor.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"vendor.js","sourceRoot":"","sources":["../../mcp/vendor.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,wDAA0C;AAE1C,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,yBAAyB,CAAC;IAEhE;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;
|
|
1
|
+
{"version":3,"file":"vendor.js","sourceRoot":"","sources":["../../mcp/vendor.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,wDAA0C;AAE1C,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,yBAAyB,CAAC;IAEhE;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IAmFD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,EAAE,yBAAyB,CAAC;YAC/E,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,EAAE,0BAA0B,CAAC;YACjF,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,EAAE,uBAAuB,CAAC;YAC3E,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,EAAE,uBAAuB,CAAC;YAC3E,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,EAAE,2BAA2B,CAAC;YACnF,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;SAChD;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,IAAI,IAAI,EAAE,WAAW,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC9C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,IAAI,EAAE,YAAY,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC/C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,EAAE,yBAAyB,CAAC;YAC9E,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,EAAE,0BAA0B,CAAC;YAChF,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,EAAE,uBAAuB,CAAC;YAC1E,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,EAAE,uBAAuB,CAAC;YAC1E,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,EAAE,2BAA2B,CAAC;YAClF,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AApKL,wBAqKC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../types/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AAEnC,OAAO,EACH,KAAK,EACL,MAAM,GACT,CAAC"}
|
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
// *** WARNING: this file was generated by pulumi-language-nodejs. ***
|
|
3
|
+
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
5
|
+
if (k2 === undefined) k2 = k;
|
|
6
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
7
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
8
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
9
|
+
}
|
|
10
|
+
Object.defineProperty(o, k2, desc);
|
|
11
|
+
}) : (function(o, m, k, k2) {
|
|
12
|
+
if (k2 === undefined) k2 = k;
|
|
13
|
+
o[k2] = m[k];
|
|
14
|
+
}));
|
|
15
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
16
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
17
|
+
}) : function(o, v) {
|
|
18
|
+
o["default"] = v;
|
|
19
|
+
});
|
|
20
|
+
var __importStar = (this && this.__importStar) || function (mod) {
|
|
21
|
+
if (mod && mod.__esModule) return mod;
|
|
22
|
+
var result = {};
|
|
23
|
+
if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
|
|
24
|
+
__setModuleDefault(result, mod);
|
|
25
|
+
return result;
|
|
26
|
+
};
|
|
27
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
28
|
+
exports.output = exports.input = void 0;
|
|
29
|
+
// Export sub-modules:
|
|
30
|
+
const input = __importStar(require("./input"));
|
|
31
|
+
exports.input = input;
|
|
32
|
+
const output = __importStar(require("./output"));
|
|
33
|
+
exports.output = output;
|
|
34
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../types/index.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAIjF,sBAAsB;AACtB,+CAAiC;AAI7B,sBAAK;AAHT,iDAAmC;AAI/B,wBAAM"}
|
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
+
export declare namespace governance {
|
|
3
|
+
interface GovernanceSettingsComplianceCoverage {
|
|
4
|
+
/**
|
|
5
|
+
* Action-time controls with executable predicates.
|
|
6
|
+
*/
|
|
7
|
+
enforced?: pulumi.Input<number | undefined>;
|
|
8
|
+
/**
|
|
9
|
+
* Controls classified as evidence gaps.
|
|
10
|
+
*/
|
|
11
|
+
evidenceGap?: pulumi.Input<number | undefined>;
|
|
12
|
+
/**
|
|
13
|
+
* Controls outside action-time enforcement.
|
|
14
|
+
*/
|
|
15
|
+
notActionTime?: pulumi.Input<number | undefined>;
|
|
16
|
+
/**
|
|
17
|
+
* Total classified controls.
|
|
18
|
+
*/
|
|
19
|
+
total?: pulumi.Input<number | undefined>;
|
|
20
|
+
}
|
|
21
|
+
}
|
|
22
|
+
//# sourceMappingURL=input.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"input.d.ts","sourceRoot":"","sources":["../../types/input.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAIzC,yBAAiB,UAAU,CAAC;IACxB,UAAiB,oCAAoC;QACjD;;WAEG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QAC5C;;WAEG;QACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QAC/C;;WAEG;QACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QACjD;;WAEG;QACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;KAC5C;CACJ"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"input.js","sourceRoot":"","sources":["../../types/input.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF"}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
export declare namespace governance {
|
|
2
|
+
interface GovernanceSettingsComplianceCoverage {
|
|
3
|
+
/**
|
|
4
|
+
* Action-time controls with executable predicates.
|
|
5
|
+
*/
|
|
6
|
+
enforced: number;
|
|
7
|
+
/**
|
|
8
|
+
* Controls classified as evidence gaps.
|
|
9
|
+
*/
|
|
10
|
+
evidenceGap: number;
|
|
11
|
+
/**
|
|
12
|
+
* Controls outside action-time enforcement.
|
|
13
|
+
*/
|
|
14
|
+
notActionTime: number;
|
|
15
|
+
/**
|
|
16
|
+
* Total classified controls.
|
|
17
|
+
*/
|
|
18
|
+
total: number;
|
|
19
|
+
}
|
|
20
|
+
}
|
|
21
|
+
//# sourceMappingURL=output.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../types/output.ts"],"names":[],"mappings":"AAOA,yBAAiB,UAAU,CAAC;IACxB,UAAiB,oCAAoC;QACjD;;WAEG;QACH,QAAQ,EAAE,MAAM,CAAC;QACjB;;WAEG;QACH,WAAW,EAAE,MAAM,CAAC;QACpB;;WAEG;QACH,aAAa,EAAE,MAAM,CAAC;QACtB;;WAEG;QACH,KAAK,EAAE,MAAM,CAAC;KACjB;CAEJ"}
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
// *** WARNING: this file was generated by pulumi-language-nodejs. ***
|
|
3
|
+
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
+
//# sourceMappingURL=output.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"output.js","sourceRoot":"","sources":["../../types/output.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF"}
|
|
@@ -30,6 +30,8 @@ export interface GetExecutiveSummaryResult {
|
|
|
30
30
|
* The provider-assigned unique ID for this managed resource.
|
|
31
31
|
*/
|
|
32
32
|
readonly id: string;
|
|
33
|
+
readonly mcpCriticalDeviationAlerts: number;
|
|
34
|
+
readonly mcpDeviationAlerts: number;
|
|
33
35
|
readonly rate?: number;
|
|
34
36
|
readonly responseJson: string;
|
|
35
37
|
}
|
|
@@ -28,6 +28,9 @@ export interface GetReportsOverviewResult {
|
|
|
28
28
|
* The provider-assigned unique ID for this managed resource.
|
|
29
29
|
*/
|
|
30
30
|
readonly id: string;
|
|
31
|
+
readonly mcpCriticalDeviationAlerts: number;
|
|
32
|
+
readonly mcpDeviationAlerts: number;
|
|
33
|
+
readonly mcpDeviationByTypeJson: string;
|
|
31
34
|
readonly responseJson: string;
|
|
32
35
|
}
|
|
33
36
|
export function getReportsOverviewOutput(args?: GetReportsOverviewOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetReportsOverviewResult> {
|
|
@@ -2,6 +2,8 @@
|
|
|
2
2
|
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
3
3
|
|
|
4
4
|
import * as pulumi from "@pulumi/pulumi";
|
|
5
|
+
import * as inputs from "../types/input";
|
|
6
|
+
import * as outputs from "../types/output";
|
|
5
7
|
import * as utilities from "../utilities";
|
|
6
8
|
|
|
7
9
|
export class GovernanceSettings extends pulumi.CustomResource {
|
|
@@ -32,10 +34,38 @@ export class GovernanceSettings extends pulumi.CustomResource {
|
|
|
32
34
|
return obj['__pulumiType'] === GovernanceSettings.__pulumiType;
|
|
33
35
|
}
|
|
34
36
|
|
|
37
|
+
/**
|
|
38
|
+
* Canonical declared regimes. Known during planning for known declarations.
|
|
39
|
+
*/
|
|
40
|
+
declare public /*out*/ readonly canonicalRegimes: pulumi.Output<string[]>;
|
|
41
|
+
/**
|
|
42
|
+
* Pinned catalogue identity. Apply fails before mutation if the running catalogue differs.
|
|
43
|
+
*/
|
|
44
|
+
declare public /*out*/ readonly complianceCatalogueSha256: pulumi.Output<string>;
|
|
45
|
+
/**
|
|
46
|
+
* Per-regime author classifications from the pinned executable catalogue, available before first apply. These counts are not a regulatory conformance assessment.
|
|
47
|
+
*/
|
|
48
|
+
declare public /*out*/ readonly complianceCoverage: pulumi.Output<{[key: string]: outputs.governance.GovernanceSettingsComplianceCoverage}>;
|
|
49
|
+
/**
|
|
50
|
+
* Required with a nonempty declaration: observe evaluates and records advisory findings while preserving independent authorization; enforce adds non-grantable restrictions for DENY, STEP_UP and evidence-based UNRESOLVED. Changing mode affects every tenant agent within 1000 ms. Structurally unserved regimes report coverage gaps and add no action restriction.
|
|
51
|
+
*/
|
|
52
|
+
declare public readonly complianceEnforcementMode: pulumi.Output<string | undefined>;
|
|
53
|
+
/**
|
|
54
|
+
* Pinned evaluator identity, checked before mutation.
|
|
55
|
+
*/
|
|
56
|
+
declare public /*out*/ readonly complianceEvaluatorSha256: pulumi.Output<string>;
|
|
35
57
|
/**
|
|
36
58
|
* Compliance profile (soc2, healthcare, financial, public_sector, privacy, ai_governance).
|
|
37
59
|
*/
|
|
38
60
|
declare public readonly complianceProfile: pulumi.Output<string | undefined>;
|
|
61
|
+
/**
|
|
62
|
+
* Revision used for optimistic concurrency. A stale apply or destroy fails without replacing a newer declaration.
|
|
63
|
+
*/
|
|
64
|
+
declare public /*out*/ readonly complianceRevision: pulumi.Output<number>;
|
|
65
|
+
/**
|
|
66
|
+
* Explicit executable compliance declaration for all current and future tenant agents. Case and separators are ignored. Removing a managed declaration or setting [] clears it. Legacy profile defaults never activate this binding.
|
|
67
|
+
*/
|
|
68
|
+
declare public readonly declaredRegulatoryRegimes: pulumi.Output<string[] | undefined>;
|
|
39
69
|
/**
|
|
40
70
|
* Additional JSON object merged into the outgoing settings payload for forward compatibility.
|
|
41
71
|
*/
|
|
@@ -65,7 +95,15 @@ export class GovernanceSettings extends pulumi.CustomResource {
|
|
|
65
95
|
*/
|
|
66
96
|
declare public readonly modelRouterFailoverProviders: pulumi.Output<string[]>;
|
|
67
97
|
/**
|
|
68
|
-
*
|
|
98
|
+
* Maximum positive cache lifetime for declaration changes: 1000 milliseconds.
|
|
99
|
+
*/
|
|
100
|
+
declare public /*out*/ readonly propagationMaxMs: pulumi.Output<number>;
|
|
101
|
+
/**
|
|
102
|
+
* Declared regimes with no executable controls. These are coverage gaps, never a clean result or a per-action restriction.
|
|
103
|
+
*/
|
|
104
|
+
declare public /*out*/ readonly regimesWithoutControls: pulumi.Output<string[]>;
|
|
105
|
+
/**
|
|
106
|
+
* Explicit regulatory regimes for onboarding baseline auto-pack loading (for example: soc2, hipaa, gdpr, fedramp, sec_cftc). Legacy packs only; defaults to SOC2 when unset. Does not activate executable compliance.
|
|
69
107
|
*/
|
|
70
108
|
declare public readonly regulatoryRegimes: pulumi.Output<string[] | undefined>;
|
|
71
109
|
/**
|
|
@@ -134,7 +172,14 @@ export class GovernanceSettings extends pulumi.CustomResource {
|
|
|
134
172
|
opts = opts || {};
|
|
135
173
|
if (opts.id) {
|
|
136
174
|
const state = argsOrState as GovernanceSettingsState | undefined;
|
|
175
|
+
resourceInputs["canonicalRegimes"] = state?.canonicalRegimes;
|
|
176
|
+
resourceInputs["complianceCatalogueSha256"] = state?.complianceCatalogueSha256;
|
|
177
|
+
resourceInputs["complianceCoverage"] = state?.complianceCoverage;
|
|
178
|
+
resourceInputs["complianceEnforcementMode"] = state?.complianceEnforcementMode;
|
|
179
|
+
resourceInputs["complianceEvaluatorSha256"] = state?.complianceEvaluatorSha256;
|
|
137
180
|
resourceInputs["complianceProfile"] = state?.complianceProfile;
|
|
181
|
+
resourceInputs["complianceRevision"] = state?.complianceRevision;
|
|
182
|
+
resourceInputs["declaredRegulatoryRegimes"] = state?.declaredRegulatoryRegimes;
|
|
138
183
|
resourceInputs["extraSettingsJson"] = state?.extraSettingsJson;
|
|
139
184
|
resourceInputs["modelRouterAllowedModels"] = state?.modelRouterAllowedModels;
|
|
140
185
|
resourceInputs["modelRouterAllowedProviders"] = state?.modelRouterAllowedProviders;
|
|
@@ -142,6 +187,8 @@ export class GovernanceSettings extends pulumi.CustomResource {
|
|
|
142
187
|
resourceInputs["modelRouterDefaultProvider"] = state?.modelRouterDefaultProvider;
|
|
143
188
|
resourceInputs["modelRouterEnabled"] = state?.modelRouterEnabled;
|
|
144
189
|
resourceInputs["modelRouterFailoverProviders"] = state?.modelRouterFailoverProviders;
|
|
190
|
+
resourceInputs["propagationMaxMs"] = state?.propagationMaxMs;
|
|
191
|
+
resourceInputs["regimesWithoutControls"] = state?.regimesWithoutControls;
|
|
145
192
|
resourceInputs["regulatoryRegimes"] = state?.regulatoryRegimes;
|
|
146
193
|
resourceInputs["secretBrokerAllowedHosts"] = state?.secretBrokerAllowedHosts;
|
|
147
194
|
resourceInputs["secretBrokerAuthBindingsJson"] = state?.secretBrokerAuthBindingsJson;
|
|
@@ -158,7 +205,9 @@ export class GovernanceSettings extends pulumi.CustomResource {
|
|
|
158
205
|
resourceInputs["updatedAt"] = state?.updatedAt;
|
|
159
206
|
} else {
|
|
160
207
|
const args = argsOrState as GovernanceSettingsArgs | undefined;
|
|
208
|
+
resourceInputs["complianceEnforcementMode"] = args?.complianceEnforcementMode;
|
|
161
209
|
resourceInputs["complianceProfile"] = args?.complianceProfile;
|
|
210
|
+
resourceInputs["declaredRegulatoryRegimes"] = args?.declaredRegulatoryRegimes;
|
|
162
211
|
resourceInputs["extraSettingsJson"] = args?.extraSettingsJson;
|
|
163
212
|
resourceInputs["modelRouterAllowedModels"] = args?.modelRouterAllowedModels;
|
|
164
213
|
resourceInputs["modelRouterAllowedProviders"] = args?.modelRouterAllowedProviders;
|
|
@@ -178,6 +227,13 @@ export class GovernanceSettings extends pulumi.CustomResource {
|
|
|
178
227
|
resourceInputs["shadowLow"] = args?.shadowLow;
|
|
179
228
|
resourceInputs["shadowMedium"] = args?.shadowMedium;
|
|
180
229
|
resourceInputs["toolRiskOverrides"] = args?.toolRiskOverrides;
|
|
230
|
+
resourceInputs["canonicalRegimes"] = undefined /*out*/;
|
|
231
|
+
resourceInputs["complianceCatalogueSha256"] = undefined /*out*/;
|
|
232
|
+
resourceInputs["complianceCoverage"] = undefined /*out*/;
|
|
233
|
+
resourceInputs["complianceEvaluatorSha256"] = undefined /*out*/;
|
|
234
|
+
resourceInputs["complianceRevision"] = undefined /*out*/;
|
|
235
|
+
resourceInputs["propagationMaxMs"] = undefined /*out*/;
|
|
236
|
+
resourceInputs["regimesWithoutControls"] = undefined /*out*/;
|
|
181
237
|
resourceInputs["tenantId"] = undefined /*out*/;
|
|
182
238
|
resourceInputs["updatedAt"] = undefined /*out*/;
|
|
183
239
|
}
|
|
@@ -190,10 +246,38 @@ export class GovernanceSettings extends pulumi.CustomResource {
|
|
|
190
246
|
* Input properties used for looking up and filtering GovernanceSettings resources.
|
|
191
247
|
*/
|
|
192
248
|
export interface GovernanceSettingsState {
|
|
249
|
+
/**
|
|
250
|
+
* Canonical declared regimes. Known during planning for known declarations.
|
|
251
|
+
*/
|
|
252
|
+
canonicalRegimes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
|
|
253
|
+
/**
|
|
254
|
+
* Pinned catalogue identity. Apply fails before mutation if the running catalogue differs.
|
|
255
|
+
*/
|
|
256
|
+
complianceCatalogueSha256?: pulumi.Input<string | undefined>;
|
|
257
|
+
/**
|
|
258
|
+
* Per-regime author classifications from the pinned executable catalogue, available before first apply. These counts are not a regulatory conformance assessment.
|
|
259
|
+
*/
|
|
260
|
+
complianceCoverage?: pulumi.Input<{[key: string]: pulumi.Input<inputs.governance.GovernanceSettingsComplianceCoverage>} | undefined>;
|
|
261
|
+
/**
|
|
262
|
+
* Required with a nonempty declaration: observe evaluates and records advisory findings while preserving independent authorization; enforce adds non-grantable restrictions for DENY, STEP_UP and evidence-based UNRESOLVED. Changing mode affects every tenant agent within 1000 ms. Structurally unserved regimes report coverage gaps and add no action restriction.
|
|
263
|
+
*/
|
|
264
|
+
complianceEnforcementMode?: pulumi.Input<string | undefined>;
|
|
265
|
+
/**
|
|
266
|
+
* Pinned evaluator identity, checked before mutation.
|
|
267
|
+
*/
|
|
268
|
+
complianceEvaluatorSha256?: pulumi.Input<string | undefined>;
|
|
193
269
|
/**
|
|
194
270
|
* Compliance profile (soc2, healthcare, financial, public_sector, privacy, ai_governance).
|
|
195
271
|
*/
|
|
196
272
|
complianceProfile?: pulumi.Input<string | undefined>;
|
|
273
|
+
/**
|
|
274
|
+
* Revision used for optimistic concurrency. A stale apply or destroy fails without replacing a newer declaration.
|
|
275
|
+
*/
|
|
276
|
+
complianceRevision?: pulumi.Input<number | undefined>;
|
|
277
|
+
/**
|
|
278
|
+
* Explicit executable compliance declaration for all current and future tenant agents. Case and separators are ignored. Removing a managed declaration or setting [] clears it. Legacy profile defaults never activate this binding.
|
|
279
|
+
*/
|
|
280
|
+
declaredRegulatoryRegimes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
|
|
197
281
|
/**
|
|
198
282
|
* Additional JSON object merged into the outgoing settings payload for forward compatibility.
|
|
199
283
|
*/
|
|
@@ -223,7 +307,15 @@ export interface GovernanceSettingsState {
|
|
|
223
307
|
*/
|
|
224
308
|
modelRouterFailoverProviders?: pulumi.Input<pulumi.Input<string>[] | undefined>;
|
|
225
309
|
/**
|
|
226
|
-
*
|
|
310
|
+
* Maximum positive cache lifetime for declaration changes: 1000 milliseconds.
|
|
311
|
+
*/
|
|
312
|
+
propagationMaxMs?: pulumi.Input<number | undefined>;
|
|
313
|
+
/**
|
|
314
|
+
* Declared regimes with no executable controls. These are coverage gaps, never a clean result or a per-action restriction.
|
|
315
|
+
*/
|
|
316
|
+
regimesWithoutControls?: pulumi.Input<pulumi.Input<string>[] | undefined>;
|
|
317
|
+
/**
|
|
318
|
+
* Explicit regulatory regimes for onboarding baseline auto-pack loading (for example: soc2, hipaa, gdpr, fedramp, sec_cftc). Legacy packs only; defaults to SOC2 when unset. Does not activate executable compliance.
|
|
227
319
|
*/
|
|
228
320
|
regulatoryRegimes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
|
|
229
321
|
/**
|
|
@@ -284,10 +376,18 @@ export interface GovernanceSettingsState {
|
|
|
284
376
|
* The set of arguments for constructing a GovernanceSettings resource.
|
|
285
377
|
*/
|
|
286
378
|
export interface GovernanceSettingsArgs {
|
|
379
|
+
/**
|
|
380
|
+
* Required with a nonempty declaration: observe evaluates and records advisory findings while preserving independent authorization; enforce adds non-grantable restrictions for DENY, STEP_UP and evidence-based UNRESOLVED. Changing mode affects every tenant agent within 1000 ms. Structurally unserved regimes report coverage gaps and add no action restriction.
|
|
381
|
+
*/
|
|
382
|
+
complianceEnforcementMode?: pulumi.Input<string | undefined>;
|
|
287
383
|
/**
|
|
288
384
|
* Compliance profile (soc2, healthcare, financial, public_sector, privacy, ai_governance).
|
|
289
385
|
*/
|
|
290
386
|
complianceProfile?: pulumi.Input<string | undefined>;
|
|
387
|
+
/**
|
|
388
|
+
* Explicit executable compliance declaration for all current and future tenant agents. Case and separators are ignored. Removing a managed declaration or setting [] clears it. Legacy profile defaults never activate this binding.
|
|
389
|
+
*/
|
|
390
|
+
declaredRegulatoryRegimes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
|
|
291
391
|
/**
|
|
292
392
|
* Additional JSON object merged into the outgoing settings payload for forward compatibility.
|
|
293
393
|
*/
|
|
@@ -317,7 +417,7 @@ export interface GovernanceSettingsArgs {
|
|
|
317
417
|
*/
|
|
318
418
|
modelRouterFailoverProviders?: pulumi.Input<pulumi.Input<string>[] | undefined>;
|
|
319
419
|
/**
|
|
320
|
-
* Explicit regulatory regimes for onboarding baseline auto-pack loading (for example: soc2, hipaa, gdpr, fedramp, sec_cftc).
|
|
420
|
+
* Explicit regulatory regimes for onboarding baseline auto-pack loading (for example: soc2, hipaa, gdpr, fedramp, sec_cftc). Legacy packs only; defaults to SOC2 when unset. Does not activate executable compliance.
|
|
321
421
|
*/
|
|
322
422
|
regulatoryRegimes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
|
|
323
423
|
/**
|
package/governance/index.ts
CHANGED
|
@@ -205,6 +205,11 @@ export type SiemSettings = import("./siemSettings").SiemSettings;
|
|
|
205
205
|
export const SiemSettings: typeof import("./siemSettings").SiemSettings = null as any;
|
|
206
206
|
utilities.lazyLoad(exports, ["SiemSettings"], () => require("./siemSettings"));
|
|
207
207
|
|
|
208
|
+
export { ToolClassificationArgs, ToolClassificationState } from "./toolClassification";
|
|
209
|
+
export type ToolClassification = import("./toolClassification").ToolClassification;
|
|
210
|
+
export const ToolClassification: typeof import("./toolClassification").ToolClassification = null as any;
|
|
211
|
+
utilities.lazyLoad(exports, ["ToolClassification"], () => require("./toolClassification"));
|
|
212
|
+
|
|
208
213
|
export { WebhookSettingsArgs, WebhookSettingsState } from "./webhookSettings";
|
|
209
214
|
export type WebhookSettings = import("./webhookSettings").WebhookSettings;
|
|
210
215
|
export const WebhookSettings: typeof import("./webhookSettings").WebhookSettings = null as any;
|
|
@@ -246,6 +251,8 @@ const _module = {
|
|
|
246
251
|
return new PolicySync(name, <any>undefined, { urn })
|
|
247
252
|
case "thoth:governance/siemSettings:SiemSettings":
|
|
248
253
|
return new SiemSettings(name, <any>undefined, { urn })
|
|
254
|
+
case "thoth:governance/toolClassification:ToolClassification":
|
|
255
|
+
return new ToolClassification(name, <any>undefined, { urn })
|
|
249
256
|
case "thoth:governance/webhookSettings:WebhookSettings":
|
|
250
257
|
return new WebhookSettings(name, <any>undefined, { urn })
|
|
251
258
|
case "thoth:governance/webhookTest:WebhookTest":
|
|
@@ -268,5 +275,6 @@ pulumi.runtime.registerResourceModule("thoth", "governance/policyException", _mo
|
|
|
268
275
|
pulumi.runtime.registerResourceModule("thoth", "governance/policyExceptionReview", _module)
|
|
269
276
|
pulumi.runtime.registerResourceModule("thoth", "governance/policySync", _module)
|
|
270
277
|
pulumi.runtime.registerResourceModule("thoth", "governance/siemSettings", _module)
|
|
278
|
+
pulumi.runtime.registerResourceModule("thoth", "governance/toolClassification", _module)
|
|
271
279
|
pulumi.runtime.registerResourceModule("thoth", "governance/webhookSettings", _module)
|
|
272
280
|
pulumi.runtime.registerResourceModule("thoth", "governance/webhookTest", _module)
|