@atensec/pulumi-thoth 0.1.15 → 0.1.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (50) hide show
  1. package/bin/governance/getExecutiveSummary.d.ts +2 -0
  2. package/bin/governance/getExecutiveSummary.d.ts.map +1 -1
  3. package/bin/governance/getExecutiveSummary.js.map +1 -1
  4. package/bin/governance/getReportsOverview.d.ts +3 -0
  5. package/bin/governance/getReportsOverview.d.ts.map +1 -1
  6. package/bin/governance/getReportsOverview.js.map +1 -1
  7. package/bin/governance/governanceSettings.d.ts +89 -3
  8. package/bin/governance/governanceSettings.d.ts.map +1 -1
  9. package/bin/governance/governanceSettings.js +18 -0
  10. package/bin/governance/governanceSettings.js.map +1 -1
  11. package/bin/governance/index.d.ts +3 -0
  12. package/bin/governance/index.d.ts.map +1 -1
  13. package/bin/governance/index.js +6 -1
  14. package/bin/governance/index.js.map +1 -1
  15. package/bin/governance/toolClassification.d.ts +65 -0
  16. package/bin/governance/toolClassification.d.ts.map +1 -0
  17. package/bin/governance/toolClassification.js +84 -0
  18. package/bin/governance/toolClassification.js.map +1 -0
  19. package/bin/index.d.ts +2 -1
  20. package/bin/index.d.ts.map +1 -1
  21. package/bin/index.js +3 -1
  22. package/bin/index.js.map +1 -1
  23. package/bin/mcp/vendor.d.ts +96 -0
  24. package/bin/mcp/vendor.d.ts.map +1 -1
  25. package/bin/mcp/vendor.js +16 -0
  26. package/bin/mcp/vendor.js.map +1 -1
  27. package/bin/types/index.d.ts +4 -0
  28. package/bin/types/index.d.ts.map +1 -0
  29. package/bin/types/index.js +34 -0
  30. package/bin/types/index.js.map +1 -0
  31. package/bin/types/input.d.ts +22 -0
  32. package/bin/types/input.d.ts.map +1 -0
  33. package/bin/types/input.js +5 -0
  34. package/bin/types/input.js.map +1 -0
  35. package/bin/types/output.d.ts +21 -0
  36. package/bin/types/output.d.ts.map +1 -0
  37. package/bin/types/output.js +5 -0
  38. package/bin/types/output.js.map +1 -0
  39. package/governance/getExecutiveSummary.ts +2 -0
  40. package/governance/getReportsOverview.ts +3 -0
  41. package/governance/governanceSettings.ts +103 -3
  42. package/governance/index.ts +8 -0
  43. package/governance/toolClassification.ts +109 -0
  44. package/index.ts +2 -0
  45. package/mcp/vendor.ts +112 -0
  46. package/package.json +1 -1
  47. package/tsconfig.json +4 -0
  48. package/types/index.ts +13 -0
  49. package/types/input.ts +27 -0
  50. package/types/output.ts +28 -0
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC;AAK3B,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,GAAG,MAAM,OAAO,CAAC;AAC7B,OAAO,KAAK,GAAG,MAAM,OAAO,CAAC;AAE7B,OAAO,EACH,MAAM,EACN,OAAO,EACP,OAAO,EACP,MAAM,EACN,KAAK,EACL,UAAU,EACV,GAAG,EACH,GAAG,GACN,CAAC"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC;AAK3B,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,GAAG,MAAM,OAAO,CAAC;AAC7B,OAAO,KAAK,GAAG,MAAM,OAAO,CAAC;AAC7B,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AAEjC,OAAO,EACH,MAAM,EACN,OAAO,EACP,OAAO,EACP,MAAM,EACN,KAAK,EACL,UAAU,EACV,GAAG,EACH,GAAG,EACH,KAAK,GACR,CAAC"}
package/bin/index.js CHANGED
@@ -28,7 +28,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
28
28
  for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
29
29
  };
30
30
  Object.defineProperty(exports, "__esModule", { value: true });
31
- exports.mdm = exports.mcp = exports.governance = exports.fleet = exports.config = exports.browser = exports.billing = exports.access = void 0;
31
+ exports.types = exports.mdm = exports.mcp = exports.governance = exports.fleet = exports.config = exports.browser = exports.billing = exports.access = void 0;
32
32
  const pulumi = __importStar(require("@pulumi/pulumi"));
33
33
  const utilities = __importStar(require("./utilities"));
34
34
  // Export members:
@@ -51,6 +51,8 @@ const mcp = __importStar(require("./mcp"));
51
51
  exports.mcp = mcp;
52
52
  const mdm = __importStar(require("./mdm"));
53
53
  exports.mdm = mdm;
54
+ const types = __importStar(require("./types"));
55
+ exports.types = types;
54
56
  pulumi.runtime.registerResourcePackage("thoth", {
55
57
  version: utilities.getVersion(),
56
58
  constructProvider: (name, type, urn) => {
package/bin/index.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC,kBAAkB;AAClB,6CAA2B;AAC3B,yCAAsC;AAGtC,sBAAsB;AACtB,iDAAmC;AAU/B,wBAAM;AATV,mDAAqC;AAUjC,0BAAO;AATX,mDAAqC;AAUjC,0BAAO;AATX,iDAAmC;AAU/B,wBAAM;AATV,+CAAiC;AAU7B,sBAAK;AATT,yDAA2C;AAUvC,gCAAU;AATd,2CAA6B;AAUzB,kBAAG;AATP,2CAA6B;AAUzB,kBAAG;AAEP,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,OAAO,EAAE;IAC5C,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,iBAAiB,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAA2B,EAAE;QACpF,IAAI,IAAI,KAAK,wBAAwB,EAAE;YACnC,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACpD;QACD,OAAO,IAAI,mBAAQ,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;CACJ,CAAC,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC,kBAAkB;AAClB,6CAA2B;AAC3B,yCAAsC;AAGtC,sBAAsB;AACtB,iDAAmC;AAW/B,wBAAM;AAVV,mDAAqC;AAWjC,0BAAO;AAVX,mDAAqC;AAWjC,0BAAO;AAVX,iDAAmC;AAW/B,wBAAM;AAVV,+CAAiC;AAW7B,sBAAK;AAVT,yDAA2C;AAWvC,gCAAU;AAVd,2CAA6B;AAWzB,kBAAG;AAVP,2CAA6B;AAWzB,kBAAG;AAVP,+CAAiC;AAW7B,sBAAK;AAET,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,OAAO,EAAE;IAC5C,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,iBAAiB,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAA2B,EAAE;QACpF,IAAI,IAAI,KAAK,wBAAwB,EAAE;YACnC,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACpD;QACD,OAAO,IAAI,mBAAQ,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;CACJ,CAAC,CAAC"}
@@ -19,6 +19,10 @@ export declare class Vendor extends pulumi.CustomResource {
19
19
  * Whether this vendor is approved for pass-through MCP host access.
20
20
  */
21
21
  readonly approved: pulumi.Output<boolean>;
22
+ /**
23
+ * Capability bindings this vendor/runtime identity is allowed to request.
24
+ */
25
+ readonly capabilities: pulumi.Output<string[]>;
22
26
  /**
23
27
  * Creation timestamp.
24
28
  */
@@ -27,6 +31,14 @@ export declare class Vendor extends pulumi.CustomResource {
27
31
  * Human-friendly vendor display name.
28
32
  */
29
33
  readonly displayName: pulumi.Output<string>;
34
+ /**
35
+ * Allowed egress host patterns enforced for this vendor/runtime identity.
36
+ */
37
+ readonly egressAllowedHostPatterns: pulumi.Output<string[]>;
38
+ /**
39
+ * Egress policy mode for vendor traffic (enforce or observe).
40
+ */
41
+ readonly egressPolicyMode: pulumi.Output<string>;
30
42
  /**
31
43
  * Allowed host patterns for this vendor (for example api.openai.com).
32
44
  */
@@ -35,10 +47,30 @@ export declare class Vendor extends pulumi.CustomResource {
35
47
  * Last observed timestamp (RFC3339) for this vendor in runtime traffic.
36
48
  */
37
49
  readonly lastSeenAt: pulumi.Output<string>;
50
+ /**
51
+ * Signature bundle reference used for manifest verification.
52
+ */
53
+ readonly manifestSignatureBundleRef: pulumi.Output<string>;
54
+ /**
55
+ * Signer identity for verified manifest signatures.
56
+ */
57
+ readonly manifestSignatureSigner: pulumi.Output<string>;
58
+ /**
59
+ * Manifest signature verification status (verified, pending, failed).
60
+ */
61
+ readonly manifestSignatureStatus: pulumi.Output<string>;
62
+ /**
63
+ * RFC3339 timestamp when manifest signature was verified.
64
+ */
65
+ readonly manifestSignatureVerifiedAt: pulumi.Output<string>;
38
66
  /**
39
67
  * Optional reviewer notes for this vendor entry.
40
68
  */
41
69
  readonly notes: pulumi.Output<string | undefined>;
70
+ /**
71
+ * Capability-scoped runtime identity used at action-time enforcement.
72
+ */
73
+ readonly runtimeIdentity: pulumi.Output<string>;
42
74
  /**
43
75
  * Vendor entry source (for example manual, discovered).
44
76
  */
@@ -72,6 +104,10 @@ export interface VendorState {
72
104
  * Whether this vendor is approved for pass-through MCP host access.
73
105
  */
74
106
  approved?: pulumi.Input<boolean | undefined>;
107
+ /**
108
+ * Capability bindings this vendor/runtime identity is allowed to request.
109
+ */
110
+ capabilities?: pulumi.Input<pulumi.Input<string>[] | undefined>;
75
111
  /**
76
112
  * Creation timestamp.
77
113
  */
@@ -80,6 +116,14 @@ export interface VendorState {
80
116
  * Human-friendly vendor display name.
81
117
  */
82
118
  displayName?: pulumi.Input<string | undefined>;
119
+ /**
120
+ * Allowed egress host patterns enforced for this vendor/runtime identity.
121
+ */
122
+ egressAllowedHostPatterns?: pulumi.Input<pulumi.Input<string>[] | undefined>;
123
+ /**
124
+ * Egress policy mode for vendor traffic (enforce or observe).
125
+ */
126
+ egressPolicyMode?: pulumi.Input<string | undefined>;
83
127
  /**
84
128
  * Allowed host patterns for this vendor (for example api.openai.com).
85
129
  */
@@ -88,10 +132,30 @@ export interface VendorState {
88
132
  * Last observed timestamp (RFC3339) for this vendor in runtime traffic.
89
133
  */
90
134
  lastSeenAt?: pulumi.Input<string | undefined>;
135
+ /**
136
+ * Signature bundle reference used for manifest verification.
137
+ */
138
+ manifestSignatureBundleRef?: pulumi.Input<string | undefined>;
139
+ /**
140
+ * Signer identity for verified manifest signatures.
141
+ */
142
+ manifestSignatureSigner?: pulumi.Input<string | undefined>;
143
+ /**
144
+ * Manifest signature verification status (verified, pending, failed).
145
+ */
146
+ manifestSignatureStatus?: pulumi.Input<string | undefined>;
147
+ /**
148
+ * RFC3339 timestamp when manifest signature was verified.
149
+ */
150
+ manifestSignatureVerifiedAt?: pulumi.Input<string | undefined>;
91
151
  /**
92
152
  * Optional reviewer notes for this vendor entry.
93
153
  */
94
154
  notes?: pulumi.Input<string | undefined>;
155
+ /**
156
+ * Capability-scoped runtime identity used at action-time enforcement.
157
+ */
158
+ runtimeIdentity?: pulumi.Input<string | undefined>;
95
159
  /**
96
160
  * Vendor entry source (for example manual, discovered).
97
161
  */
@@ -117,10 +181,22 @@ export interface VendorArgs {
117
181
  * Whether this vendor is approved for pass-through MCP host access.
118
182
  */
119
183
  approved?: pulumi.Input<boolean | undefined>;
184
+ /**
185
+ * Capability bindings this vendor/runtime identity is allowed to request.
186
+ */
187
+ capabilities?: pulumi.Input<pulumi.Input<string>[] | undefined>;
120
188
  /**
121
189
  * Human-friendly vendor display name.
122
190
  */
123
191
  displayName: pulumi.Input<string>;
192
+ /**
193
+ * Allowed egress host patterns enforced for this vendor/runtime identity.
194
+ */
195
+ egressAllowedHostPatterns?: pulumi.Input<pulumi.Input<string>[] | undefined>;
196
+ /**
197
+ * Egress policy mode for vendor traffic (enforce or observe).
198
+ */
199
+ egressPolicyMode?: pulumi.Input<string | undefined>;
124
200
  /**
125
201
  * Allowed host patterns for this vendor (for example api.openai.com).
126
202
  */
@@ -129,10 +205,30 @@ export interface VendorArgs {
129
205
  * Last observed timestamp (RFC3339) for this vendor in runtime traffic.
130
206
  */
131
207
  lastSeenAt?: pulumi.Input<string | undefined>;
208
+ /**
209
+ * Signature bundle reference used for manifest verification.
210
+ */
211
+ manifestSignatureBundleRef?: pulumi.Input<string | undefined>;
212
+ /**
213
+ * Signer identity for verified manifest signatures.
214
+ */
215
+ manifestSignatureSigner?: pulumi.Input<string | undefined>;
216
+ /**
217
+ * Manifest signature verification status (verified, pending, failed).
218
+ */
219
+ manifestSignatureStatus?: pulumi.Input<string | undefined>;
220
+ /**
221
+ * RFC3339 timestamp when manifest signature was verified.
222
+ */
223
+ manifestSignatureVerifiedAt?: pulumi.Input<string | undefined>;
132
224
  /**
133
225
  * Optional reviewer notes for this vendor entry.
134
226
  */
135
227
  notes?: pulumi.Input<string | undefined>;
228
+ /**
229
+ * Capability-scoped runtime identity used at action-time enforcement.
230
+ */
231
+ runtimeIdentity?: pulumi.Input<string | undefined>;
136
232
  /**
137
233
  * Vendor entry source (for example manual, discovered).
138
234
  */
@@ -1 +1 @@
1
- {"version":3,"file":"vendor.d.ts","sourceRoot":"","sources":["../../mcp/vendor.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC,qBAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,MAAM;IAO9H;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,MAAM;IAOjD;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzD;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D;;OAEG;IACH,SAAwB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D;;OAEG;IACH,SAAwB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClE;;OAEG;IACH,SAAgC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChE;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAExD;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAyClF;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IACxB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAChE;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACvB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnD;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAClC"}
1
+ {"version":3,"file":"vendor.d.ts","sourceRoot":"","sources":["../../mcp/vendor.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC,qBAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,MAAM;IAO9H;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,MAAM;IAOjD;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzD;;OAEG;IACH,SAAwB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D;;OAEG;IACH,SAAwB,yBAAyB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3E;;OAEG;IACH,SAAwB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChE;;OAEG;IACH,SAAwB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D;;OAEG;IACH,SAAwB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D;;OAEG;IACH,SAAwB,0BAA0B,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1E;;OAEG;IACH,SAAwB,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvE;;OAEG;IACH,SAAwB,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvE;;OAEG;IACH,SAAwB,2BAA2B,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3E;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/D;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClE;;OAEG;IACH,SAAgC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChE;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAExD;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAyDlF;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IACxB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAChE;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAC7E;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpD;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAChE;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9D;;OAEG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3D;;OAEG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3D;;OAEG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/D;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnD;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACvB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAChE;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC;;OAEG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAC7E;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpD;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnD;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9D;;OAEG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3D;;OAEG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3D;;OAEG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/D;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnD;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAClC"}
package/bin/mcp/vendor.js CHANGED
@@ -59,11 +59,19 @@ class Vendor extends pulumi.CustomResource {
59
59
  if (opts.id) {
60
60
  const state = argsOrState;
61
61
  resourceInputs["approved"] = state?.approved;
62
+ resourceInputs["capabilities"] = state?.capabilities;
62
63
  resourceInputs["createdAt"] = state?.createdAt;
63
64
  resourceInputs["displayName"] = state?.displayName;
65
+ resourceInputs["egressAllowedHostPatterns"] = state?.egressAllowedHostPatterns;
66
+ resourceInputs["egressPolicyMode"] = state?.egressPolicyMode;
64
67
  resourceInputs["hostPatterns"] = state?.hostPatterns;
65
68
  resourceInputs["lastSeenAt"] = state?.lastSeenAt;
69
+ resourceInputs["manifestSignatureBundleRef"] = state?.manifestSignatureBundleRef;
70
+ resourceInputs["manifestSignatureSigner"] = state?.manifestSignatureSigner;
71
+ resourceInputs["manifestSignatureStatus"] = state?.manifestSignatureStatus;
72
+ resourceInputs["manifestSignatureVerifiedAt"] = state?.manifestSignatureVerifiedAt;
66
73
  resourceInputs["notes"] = state?.notes;
74
+ resourceInputs["runtimeIdentity"] = state?.runtimeIdentity;
67
75
  resourceInputs["source"] = state?.source;
68
76
  resourceInputs["tenantId"] = state?.tenantId;
69
77
  resourceInputs["updatedAt"] = state?.updatedAt;
@@ -81,10 +89,18 @@ class Vendor extends pulumi.CustomResource {
81
89
  throw new Error("Missing required property 'vendorId'");
82
90
  }
83
91
  resourceInputs["approved"] = args?.approved;
92
+ resourceInputs["capabilities"] = args?.capabilities;
84
93
  resourceInputs["displayName"] = args?.displayName;
94
+ resourceInputs["egressAllowedHostPatterns"] = args?.egressAllowedHostPatterns;
95
+ resourceInputs["egressPolicyMode"] = args?.egressPolicyMode;
85
96
  resourceInputs["hostPatterns"] = args?.hostPatterns;
86
97
  resourceInputs["lastSeenAt"] = args?.lastSeenAt;
98
+ resourceInputs["manifestSignatureBundleRef"] = args?.manifestSignatureBundleRef;
99
+ resourceInputs["manifestSignatureSigner"] = args?.manifestSignatureSigner;
100
+ resourceInputs["manifestSignatureStatus"] = args?.manifestSignatureStatus;
101
+ resourceInputs["manifestSignatureVerifiedAt"] = args?.manifestSignatureVerifiedAt;
87
102
  resourceInputs["notes"] = args?.notes;
103
+ resourceInputs["runtimeIdentity"] = args?.runtimeIdentity;
88
104
  resourceInputs["source"] = args?.source;
89
105
  resourceInputs["vendorId"] = args?.vendorId;
90
106
  resourceInputs["createdAt"] = undefined /*out*/;
@@ -1 +1 @@
1
- {"version":3,"file":"vendor.js","sourceRoot":"","sources":["../../mcp/vendor.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,wDAA0C;AAE1C,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,yBAAyB,CAAC;IAEhE;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IAmDD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;SAChD;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,IAAI,IAAI,EAAE,WAAW,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC9C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,IAAI,EAAE,YAAY,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC/C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AApHL,wBAqHC"}
1
+ {"version":3,"file":"vendor.js","sourceRoot":"","sources":["../../mcp/vendor.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,wDAA0C;AAE1C,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,yBAAyB,CAAC;IAEhE;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IAmFD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,EAAE,yBAAyB,CAAC;YAC/E,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,EAAE,0BAA0B,CAAC;YACjF,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,EAAE,uBAAuB,CAAC;YAC3E,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,EAAE,uBAAuB,CAAC;YAC3E,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,EAAE,2BAA2B,CAAC;YACnF,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;SAChD;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,IAAI,IAAI,EAAE,WAAW,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC9C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,IAAI,EAAE,YAAY,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC/C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,EAAE,yBAAyB,CAAC;YAC9E,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,EAAE,0BAA0B,CAAC;YAChF,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,EAAE,uBAAuB,CAAC;YAC1E,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,EAAE,uBAAuB,CAAC;YAC1E,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,EAAE,2BAA2B,CAAC;YAClF,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AApKL,wBAqKC"}
@@ -0,0 +1,4 @@
1
+ import * as input from "./input";
2
+ import * as output from "./output";
3
+ export { input, output, };
4
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../types/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AAEnC,OAAO,EACH,KAAK,EACL,MAAM,GACT,CAAC"}
@@ -0,0 +1,34 @@
1
+ "use strict";
2
+ // *** WARNING: this file was generated by pulumi-language-nodejs. ***
3
+ // *** Do not edit by hand unless you're certain you know what you are doing! ***
4
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
5
+ if (k2 === undefined) k2 = k;
6
+ var desc = Object.getOwnPropertyDescriptor(m, k);
7
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
8
+ desc = { enumerable: true, get: function() { return m[k]; } };
9
+ }
10
+ Object.defineProperty(o, k2, desc);
11
+ }) : (function(o, m, k, k2) {
12
+ if (k2 === undefined) k2 = k;
13
+ o[k2] = m[k];
14
+ }));
15
+ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
16
+ Object.defineProperty(o, "default", { enumerable: true, value: v });
17
+ }) : function(o, v) {
18
+ o["default"] = v;
19
+ });
20
+ var __importStar = (this && this.__importStar) || function (mod) {
21
+ if (mod && mod.__esModule) return mod;
22
+ var result = {};
23
+ if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
24
+ __setModuleDefault(result, mod);
25
+ return result;
26
+ };
27
+ Object.defineProperty(exports, "__esModule", { value: true });
28
+ exports.output = exports.input = void 0;
29
+ // Export sub-modules:
30
+ const input = __importStar(require("./input"));
31
+ exports.input = input;
32
+ const output = __importStar(require("./output"));
33
+ exports.output = output;
34
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../types/index.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAIjF,sBAAsB;AACtB,+CAAiC;AAI7B,sBAAK;AAHT,iDAAmC;AAI/B,wBAAM"}
@@ -0,0 +1,22 @@
1
+ import * as pulumi from "@pulumi/pulumi";
2
+ export declare namespace governance {
3
+ interface GovernanceSettingsComplianceCoverage {
4
+ /**
5
+ * Action-time controls with executable predicates.
6
+ */
7
+ enforced?: pulumi.Input<number | undefined>;
8
+ /**
9
+ * Controls classified as evidence gaps.
10
+ */
11
+ evidenceGap?: pulumi.Input<number | undefined>;
12
+ /**
13
+ * Controls outside action-time enforcement.
14
+ */
15
+ notActionTime?: pulumi.Input<number | undefined>;
16
+ /**
17
+ * Total classified controls.
18
+ */
19
+ total?: pulumi.Input<number | undefined>;
20
+ }
21
+ }
22
+ //# sourceMappingURL=input.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"input.d.ts","sourceRoot":"","sources":["../../types/input.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAIzC,yBAAiB,UAAU,CAAC;IACxB,UAAiB,oCAAoC;QACjD;;WAEG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QAC5C;;WAEG;QACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QAC/C;;WAEG;QACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QACjD;;WAEG;QACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;KAC5C;CACJ"}
@@ -0,0 +1,5 @@
1
+ "use strict";
2
+ // *** WARNING: this file was generated by pulumi-language-nodejs. ***
3
+ // *** Do not edit by hand unless you're certain you know what you are doing! ***
4
+ Object.defineProperty(exports, "__esModule", { value: true });
5
+ //# sourceMappingURL=input.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"input.js","sourceRoot":"","sources":["../../types/input.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF"}
@@ -0,0 +1,21 @@
1
+ export declare namespace governance {
2
+ interface GovernanceSettingsComplianceCoverage {
3
+ /**
4
+ * Action-time controls with executable predicates.
5
+ */
6
+ enforced: number;
7
+ /**
8
+ * Controls classified as evidence gaps.
9
+ */
10
+ evidenceGap: number;
11
+ /**
12
+ * Controls outside action-time enforcement.
13
+ */
14
+ notActionTime: number;
15
+ /**
16
+ * Total classified controls.
17
+ */
18
+ total: number;
19
+ }
20
+ }
21
+ //# sourceMappingURL=output.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../types/output.ts"],"names":[],"mappings":"AAOA,yBAAiB,UAAU,CAAC;IACxB,UAAiB,oCAAoC;QACjD;;WAEG;QACH,QAAQ,EAAE,MAAM,CAAC;QACjB;;WAEG;QACH,WAAW,EAAE,MAAM,CAAC;QACpB;;WAEG;QACH,aAAa,EAAE,MAAM,CAAC;QACtB;;WAEG;QACH,KAAK,EAAE,MAAM,CAAC;KACjB;CAEJ"}
@@ -0,0 +1,5 @@
1
+ "use strict";
2
+ // *** WARNING: this file was generated by pulumi-language-nodejs. ***
3
+ // *** Do not edit by hand unless you're certain you know what you are doing! ***
4
+ Object.defineProperty(exports, "__esModule", { value: true });
5
+ //# sourceMappingURL=output.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"output.js","sourceRoot":"","sources":["../../types/output.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF"}
@@ -30,6 +30,8 @@ export interface GetExecutiveSummaryResult {
30
30
  * The provider-assigned unique ID for this managed resource.
31
31
  */
32
32
  readonly id: string;
33
+ readonly mcpCriticalDeviationAlerts: number;
34
+ readonly mcpDeviationAlerts: number;
33
35
  readonly rate?: number;
34
36
  readonly responseJson: string;
35
37
  }
@@ -28,6 +28,9 @@ export interface GetReportsOverviewResult {
28
28
  * The provider-assigned unique ID for this managed resource.
29
29
  */
30
30
  readonly id: string;
31
+ readonly mcpCriticalDeviationAlerts: number;
32
+ readonly mcpDeviationAlerts: number;
33
+ readonly mcpDeviationByTypeJson: string;
31
34
  readonly responseJson: string;
32
35
  }
33
36
  export function getReportsOverviewOutput(args?: GetReportsOverviewOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetReportsOverviewResult> {
@@ -2,6 +2,8 @@
2
2
  // *** Do not edit by hand unless you're certain you know what you are doing! ***
3
3
 
4
4
  import * as pulumi from "@pulumi/pulumi";
5
+ import * as inputs from "../types/input";
6
+ import * as outputs from "../types/output";
5
7
  import * as utilities from "../utilities";
6
8
 
7
9
  export class GovernanceSettings extends pulumi.CustomResource {
@@ -32,10 +34,38 @@ export class GovernanceSettings extends pulumi.CustomResource {
32
34
  return obj['__pulumiType'] === GovernanceSettings.__pulumiType;
33
35
  }
34
36
 
37
+ /**
38
+ * Canonical declared regimes. Known during planning for known declarations.
39
+ */
40
+ declare public /*out*/ readonly canonicalRegimes: pulumi.Output<string[]>;
41
+ /**
42
+ * Pinned catalogue identity. Apply fails before mutation if the running catalogue differs.
43
+ */
44
+ declare public /*out*/ readonly complianceCatalogueSha256: pulumi.Output<string>;
45
+ /**
46
+ * Per-regime author classifications from the pinned executable catalogue, available before first apply. These counts are not a regulatory conformance assessment.
47
+ */
48
+ declare public /*out*/ readonly complianceCoverage: pulumi.Output<{[key: string]: outputs.governance.GovernanceSettingsComplianceCoverage}>;
49
+ /**
50
+ * Required with a nonempty declaration: observe evaluates and records advisory findings while preserving independent authorization; enforce adds non-grantable restrictions for DENY, STEP_UP and evidence-based UNRESOLVED. Changing mode affects every tenant agent within 1000 ms. Structurally unserved regimes report coverage gaps and add no action restriction.
51
+ */
52
+ declare public readonly complianceEnforcementMode: pulumi.Output<string | undefined>;
53
+ /**
54
+ * Pinned evaluator identity, checked before mutation.
55
+ */
56
+ declare public /*out*/ readonly complianceEvaluatorSha256: pulumi.Output<string>;
35
57
  /**
36
58
  * Compliance profile (soc2, healthcare, financial, public_sector, privacy, ai_governance).
37
59
  */
38
60
  declare public readonly complianceProfile: pulumi.Output<string | undefined>;
61
+ /**
62
+ * Revision used for optimistic concurrency. A stale apply or destroy fails without replacing a newer declaration.
63
+ */
64
+ declare public /*out*/ readonly complianceRevision: pulumi.Output<number>;
65
+ /**
66
+ * Explicit executable compliance declaration for all current and future tenant agents. Case and separators are ignored. Removing a managed declaration or setting [] clears it. Legacy profile defaults never activate this binding.
67
+ */
68
+ declare public readonly declaredRegulatoryRegimes: pulumi.Output<string[] | undefined>;
39
69
  /**
40
70
  * Additional JSON object merged into the outgoing settings payload for forward compatibility.
41
71
  */
@@ -65,7 +95,15 @@ export class GovernanceSettings extends pulumi.CustomResource {
65
95
  */
66
96
  declare public readonly modelRouterFailoverProviders: pulumi.Output<string[]>;
67
97
  /**
68
- * Explicit regulatory regimes for onboarding baseline auto-pack loading (for example: soc2, hipaa, gdpr, fedramp, sec_cftc). Defaults to SOC2 when unset.
98
+ * Maximum positive cache lifetime for declaration changes: 1000 milliseconds.
99
+ */
100
+ declare public /*out*/ readonly propagationMaxMs: pulumi.Output<number>;
101
+ /**
102
+ * Declared regimes with no executable controls. These are coverage gaps, never a clean result or a per-action restriction.
103
+ */
104
+ declare public /*out*/ readonly regimesWithoutControls: pulumi.Output<string[]>;
105
+ /**
106
+ * Explicit regulatory regimes for onboarding baseline auto-pack loading (for example: soc2, hipaa, gdpr, fedramp, sec_cftc). Legacy packs only; defaults to SOC2 when unset. Does not activate executable compliance.
69
107
  */
70
108
  declare public readonly regulatoryRegimes: pulumi.Output<string[] | undefined>;
71
109
  /**
@@ -134,7 +172,14 @@ export class GovernanceSettings extends pulumi.CustomResource {
134
172
  opts = opts || {};
135
173
  if (opts.id) {
136
174
  const state = argsOrState as GovernanceSettingsState | undefined;
175
+ resourceInputs["canonicalRegimes"] = state?.canonicalRegimes;
176
+ resourceInputs["complianceCatalogueSha256"] = state?.complianceCatalogueSha256;
177
+ resourceInputs["complianceCoverage"] = state?.complianceCoverage;
178
+ resourceInputs["complianceEnforcementMode"] = state?.complianceEnforcementMode;
179
+ resourceInputs["complianceEvaluatorSha256"] = state?.complianceEvaluatorSha256;
137
180
  resourceInputs["complianceProfile"] = state?.complianceProfile;
181
+ resourceInputs["complianceRevision"] = state?.complianceRevision;
182
+ resourceInputs["declaredRegulatoryRegimes"] = state?.declaredRegulatoryRegimes;
138
183
  resourceInputs["extraSettingsJson"] = state?.extraSettingsJson;
139
184
  resourceInputs["modelRouterAllowedModels"] = state?.modelRouterAllowedModels;
140
185
  resourceInputs["modelRouterAllowedProviders"] = state?.modelRouterAllowedProviders;
@@ -142,6 +187,8 @@ export class GovernanceSettings extends pulumi.CustomResource {
142
187
  resourceInputs["modelRouterDefaultProvider"] = state?.modelRouterDefaultProvider;
143
188
  resourceInputs["modelRouterEnabled"] = state?.modelRouterEnabled;
144
189
  resourceInputs["modelRouterFailoverProviders"] = state?.modelRouterFailoverProviders;
190
+ resourceInputs["propagationMaxMs"] = state?.propagationMaxMs;
191
+ resourceInputs["regimesWithoutControls"] = state?.regimesWithoutControls;
145
192
  resourceInputs["regulatoryRegimes"] = state?.regulatoryRegimes;
146
193
  resourceInputs["secretBrokerAllowedHosts"] = state?.secretBrokerAllowedHosts;
147
194
  resourceInputs["secretBrokerAuthBindingsJson"] = state?.secretBrokerAuthBindingsJson;
@@ -158,7 +205,9 @@ export class GovernanceSettings extends pulumi.CustomResource {
158
205
  resourceInputs["updatedAt"] = state?.updatedAt;
159
206
  } else {
160
207
  const args = argsOrState as GovernanceSettingsArgs | undefined;
208
+ resourceInputs["complianceEnforcementMode"] = args?.complianceEnforcementMode;
161
209
  resourceInputs["complianceProfile"] = args?.complianceProfile;
210
+ resourceInputs["declaredRegulatoryRegimes"] = args?.declaredRegulatoryRegimes;
162
211
  resourceInputs["extraSettingsJson"] = args?.extraSettingsJson;
163
212
  resourceInputs["modelRouterAllowedModels"] = args?.modelRouterAllowedModels;
164
213
  resourceInputs["modelRouterAllowedProviders"] = args?.modelRouterAllowedProviders;
@@ -178,6 +227,13 @@ export class GovernanceSettings extends pulumi.CustomResource {
178
227
  resourceInputs["shadowLow"] = args?.shadowLow;
179
228
  resourceInputs["shadowMedium"] = args?.shadowMedium;
180
229
  resourceInputs["toolRiskOverrides"] = args?.toolRiskOverrides;
230
+ resourceInputs["canonicalRegimes"] = undefined /*out*/;
231
+ resourceInputs["complianceCatalogueSha256"] = undefined /*out*/;
232
+ resourceInputs["complianceCoverage"] = undefined /*out*/;
233
+ resourceInputs["complianceEvaluatorSha256"] = undefined /*out*/;
234
+ resourceInputs["complianceRevision"] = undefined /*out*/;
235
+ resourceInputs["propagationMaxMs"] = undefined /*out*/;
236
+ resourceInputs["regimesWithoutControls"] = undefined /*out*/;
181
237
  resourceInputs["tenantId"] = undefined /*out*/;
182
238
  resourceInputs["updatedAt"] = undefined /*out*/;
183
239
  }
@@ -190,10 +246,38 @@ export class GovernanceSettings extends pulumi.CustomResource {
190
246
  * Input properties used for looking up and filtering GovernanceSettings resources.
191
247
  */
192
248
  export interface GovernanceSettingsState {
249
+ /**
250
+ * Canonical declared regimes. Known during planning for known declarations.
251
+ */
252
+ canonicalRegimes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
253
+ /**
254
+ * Pinned catalogue identity. Apply fails before mutation if the running catalogue differs.
255
+ */
256
+ complianceCatalogueSha256?: pulumi.Input<string | undefined>;
257
+ /**
258
+ * Per-regime author classifications from the pinned executable catalogue, available before first apply. These counts are not a regulatory conformance assessment.
259
+ */
260
+ complianceCoverage?: pulumi.Input<{[key: string]: pulumi.Input<inputs.governance.GovernanceSettingsComplianceCoverage>} | undefined>;
261
+ /**
262
+ * Required with a nonempty declaration: observe evaluates and records advisory findings while preserving independent authorization; enforce adds non-grantable restrictions for DENY, STEP_UP and evidence-based UNRESOLVED. Changing mode affects every tenant agent within 1000 ms. Structurally unserved regimes report coverage gaps and add no action restriction.
263
+ */
264
+ complianceEnforcementMode?: pulumi.Input<string | undefined>;
265
+ /**
266
+ * Pinned evaluator identity, checked before mutation.
267
+ */
268
+ complianceEvaluatorSha256?: pulumi.Input<string | undefined>;
193
269
  /**
194
270
  * Compliance profile (soc2, healthcare, financial, public_sector, privacy, ai_governance).
195
271
  */
196
272
  complianceProfile?: pulumi.Input<string | undefined>;
273
+ /**
274
+ * Revision used for optimistic concurrency. A stale apply or destroy fails without replacing a newer declaration.
275
+ */
276
+ complianceRevision?: pulumi.Input<number | undefined>;
277
+ /**
278
+ * Explicit executable compliance declaration for all current and future tenant agents. Case and separators are ignored. Removing a managed declaration or setting [] clears it. Legacy profile defaults never activate this binding.
279
+ */
280
+ declaredRegulatoryRegimes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
197
281
  /**
198
282
  * Additional JSON object merged into the outgoing settings payload for forward compatibility.
199
283
  */
@@ -223,7 +307,15 @@ export interface GovernanceSettingsState {
223
307
  */
224
308
  modelRouterFailoverProviders?: pulumi.Input<pulumi.Input<string>[] | undefined>;
225
309
  /**
226
- * Explicit regulatory regimes for onboarding baseline auto-pack loading (for example: soc2, hipaa, gdpr, fedramp, sec_cftc). Defaults to SOC2 when unset.
310
+ * Maximum positive cache lifetime for declaration changes: 1000 milliseconds.
311
+ */
312
+ propagationMaxMs?: pulumi.Input<number | undefined>;
313
+ /**
314
+ * Declared regimes with no executable controls. These are coverage gaps, never a clean result or a per-action restriction.
315
+ */
316
+ regimesWithoutControls?: pulumi.Input<pulumi.Input<string>[] | undefined>;
317
+ /**
318
+ * Explicit regulatory regimes for onboarding baseline auto-pack loading (for example: soc2, hipaa, gdpr, fedramp, sec_cftc). Legacy packs only; defaults to SOC2 when unset. Does not activate executable compliance.
227
319
  */
228
320
  regulatoryRegimes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
229
321
  /**
@@ -284,10 +376,18 @@ export interface GovernanceSettingsState {
284
376
  * The set of arguments for constructing a GovernanceSettings resource.
285
377
  */
286
378
  export interface GovernanceSettingsArgs {
379
+ /**
380
+ * Required with a nonempty declaration: observe evaluates and records advisory findings while preserving independent authorization; enforce adds non-grantable restrictions for DENY, STEP_UP and evidence-based UNRESOLVED. Changing mode affects every tenant agent within 1000 ms. Structurally unserved regimes report coverage gaps and add no action restriction.
381
+ */
382
+ complianceEnforcementMode?: pulumi.Input<string | undefined>;
287
383
  /**
288
384
  * Compliance profile (soc2, healthcare, financial, public_sector, privacy, ai_governance).
289
385
  */
290
386
  complianceProfile?: pulumi.Input<string | undefined>;
387
+ /**
388
+ * Explicit executable compliance declaration for all current and future tenant agents. Case and separators are ignored. Removing a managed declaration or setting [] clears it. Legacy profile defaults never activate this binding.
389
+ */
390
+ declaredRegulatoryRegimes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
291
391
  /**
292
392
  * Additional JSON object merged into the outgoing settings payload for forward compatibility.
293
393
  */
@@ -317,7 +417,7 @@ export interface GovernanceSettingsArgs {
317
417
  */
318
418
  modelRouterFailoverProviders?: pulumi.Input<pulumi.Input<string>[] | undefined>;
319
419
  /**
320
- * Explicit regulatory regimes for onboarding baseline auto-pack loading (for example: soc2, hipaa, gdpr, fedramp, sec_cftc). Defaults to SOC2 when unset.
420
+ * Explicit regulatory regimes for onboarding baseline auto-pack loading (for example: soc2, hipaa, gdpr, fedramp, sec_cftc). Legacy packs only; defaults to SOC2 when unset. Does not activate executable compliance.
321
421
  */
322
422
  regulatoryRegimes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
323
423
  /**
@@ -205,6 +205,11 @@ export type SiemSettings = import("./siemSettings").SiemSettings;
205
205
  export const SiemSettings: typeof import("./siemSettings").SiemSettings = null as any;
206
206
  utilities.lazyLoad(exports, ["SiemSettings"], () => require("./siemSettings"));
207
207
 
208
+ export { ToolClassificationArgs, ToolClassificationState } from "./toolClassification";
209
+ export type ToolClassification = import("./toolClassification").ToolClassification;
210
+ export const ToolClassification: typeof import("./toolClassification").ToolClassification = null as any;
211
+ utilities.lazyLoad(exports, ["ToolClassification"], () => require("./toolClassification"));
212
+
208
213
  export { WebhookSettingsArgs, WebhookSettingsState } from "./webhookSettings";
209
214
  export type WebhookSettings = import("./webhookSettings").WebhookSettings;
210
215
  export const WebhookSettings: typeof import("./webhookSettings").WebhookSettings = null as any;
@@ -246,6 +251,8 @@ const _module = {
246
251
  return new PolicySync(name, <any>undefined, { urn })
247
252
  case "thoth:governance/siemSettings:SiemSettings":
248
253
  return new SiemSettings(name, <any>undefined, { urn })
254
+ case "thoth:governance/toolClassification:ToolClassification":
255
+ return new ToolClassification(name, <any>undefined, { urn })
249
256
  case "thoth:governance/webhookSettings:WebhookSettings":
250
257
  return new WebhookSettings(name, <any>undefined, { urn })
251
258
  case "thoth:governance/webhookTest:WebhookTest":
@@ -268,5 +275,6 @@ pulumi.runtime.registerResourceModule("thoth", "governance/policyException", _mo
268
275
  pulumi.runtime.registerResourceModule("thoth", "governance/policyExceptionReview", _module)
269
276
  pulumi.runtime.registerResourceModule("thoth", "governance/policySync", _module)
270
277
  pulumi.runtime.registerResourceModule("thoth", "governance/siemSettings", _module)
278
+ pulumi.runtime.registerResourceModule("thoth", "governance/toolClassification", _module)
271
279
  pulumi.runtime.registerResourceModule("thoth", "governance/webhookSettings", _module)
272
280
  pulumi.runtime.registerResourceModule("thoth", "governance/webhookTest", _module)