@atensec/pulumi-thoth 0.1.4 → 0.1.5

package/billing/getCreditBank.ts

@@ -0,0 +1,56 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+export function getCreditBank(args?: GetCreditBankArgs, opts?: pulumi.InvokeOptions): Promise<GetCreditBankResult> {
+    args = args || {};
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("thoth:billing/getCreditBank:getCreditBank", {
+        "asOf": args.asOf,
+        "averageMonthlyBurnCents": args.averageMonthlyBurnCents,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getCreditBank.
+ */
+export interface GetCreditBankArgs {
+    asOf?: string;
+    averageMonthlyBurnCents?: number;
+}
+
+/**
+ * A collection of values returned by getCreditBank.
+ */
+export interface GetCreditBankResult {
+    readonly activeWalletCount: number;
+    readonly activeWalletsJson: string;
+    readonly asOf?: string;
+    readonly averageMonthlyBurnCents?: number;
+    /**
+     * The provider-assigned unique ID for this managed resource.
+     */
+    readonly id: string;
+    readonly lowBalanceAlert: boolean;
+    readonly lowBalanceThresholdCents: number;
+    readonly responseJson: string;
+    readonly totalActiveBalanceCents: number;
+}
+export function getCreditBankOutput(args?: GetCreditBankOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetCreditBankResult> {
+    args = args || {};
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("thoth:billing/getCreditBank:getCreditBank", {
+        "asOf": args.asOf,
+        "averageMonthlyBurnCents": args.averageMonthlyBurnCents,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getCreditBank.
+ */
+export interface GetCreditBankOutputArgs {
+    asOf?: pulumi.Input<string | undefined>;
+    averageMonthlyBurnCents?: pulumi.Input<number | undefined>;
+}

package/billing/getEstimate.ts

@@ -0,0 +1,93 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+export function getEstimate(args?: GetEstimateArgs, opts?: pulumi.InvokeOptions): Promise<GetEstimateResult> {
+    args = args || {};
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("thoth:billing/getEstimate:getEstimate", {
+        "activeIdentitiesOverride": args.activeIdentitiesOverride,
+        "asOf": args.asOf,
+        "averageMonthlyBurnCents": args.averageMonthlyBurnCents,
+        "complianceUpliftPercent": args.complianceUpliftPercent,
+        "fixedDiscountPercent": args.fixedDiscountPercent,
+        "period": args.period,
+        "policyChecksOverride": args.policyChecksOverride,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getEstimate.
+ */
+export interface GetEstimateArgs {
+    activeIdentitiesOverride?: number;
+    asOf?: string;
+    averageMonthlyBurnCents?: number;
+    complianceUpliftPercent?: number;
+    fixedDiscountPercent?: number;
+    period?: string;
+    policyChecksOverride?: number;
+}
+
+/**
+ * A collection of values returned by getEstimate.
+ */
+export interface GetEstimateResult {
+    readonly activeIdentitiesOverride?: number;
+    readonly asOf?: string;
+    readonly averageMonthlyBurnCents?: number;
+    readonly complianceReceipt: string;
+    readonly complianceUpliftPercent?: number;
+    readonly creditBurnsJson: string;
+    readonly fixedDiscountPercent?: number;
+    readonly grossBillCents: number;
+    /**
+     * The provider-assigned unique ID for this managed resource.
+     */
+    readonly id: string;
+    readonly lineItemComplianceUpliftCents: number;
+    readonly lineItemCreditsAppliedCents: number;
+    readonly lineItemEnforcementOverageCents: number;
+    readonly lineItemFixedDiscountCents: number;
+    readonly lineItemIdentityOverageCents: number;
+    readonly lineItemPlatformFeeCents: number;
+    readonly lineItemStorageCapacityCents: number;
+    readonly lineItemStorageRetentionCents: number;
+    readonly lowBalanceAlert: boolean;
+    readonly netTotalCents: number;
+    readonly period?: string;
+    readonly periodEffective: string;
+    readonly policyChecksOverride?: number;
+    readonly pricingTier: string;
+    readonly responseJson: string;
+    readonly summaryJson: string;
+    readonly wormRetentionDays: number;
+}
+export function getEstimateOutput(args?: GetEstimateOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetEstimateResult> {
+    args = args || {};
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("thoth:billing/getEstimate:getEstimate", {
+        "activeIdentitiesOverride": args.activeIdentitiesOverride,
+        "asOf": args.asOf,
+        "averageMonthlyBurnCents": args.averageMonthlyBurnCents,
+        "complianceUpliftPercent": args.complianceUpliftPercent,
+        "fixedDiscountPercent": args.fixedDiscountPercent,
+        "period": args.period,
+        "policyChecksOverride": args.policyChecksOverride,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getEstimate.
+ */
+export interface GetEstimateOutputArgs {
+    activeIdentitiesOverride?: pulumi.Input<number | undefined>;
+    asOf?: pulumi.Input<string | undefined>;
+    averageMonthlyBurnCents?: pulumi.Input<number | undefined>;
+    complianceUpliftPercent?: pulumi.Input<number | undefined>;
+    fixedDiscountPercent?: pulumi.Input<number | undefined>;
+    period?: pulumi.Input<string | undefined>;
+    policyChecksOverride?: pulumi.Input<number | undefined>;
+}

package/billing/getMonthlyCost.ts

@@ -14,11 +14,22 @@ export function getMonthlyCost(opts?: pulumi.InvokeOptions): Promise<GetMonthlyC
  * A collection of values returned by getMonthlyCost.
  */
 export interface GetMonthlyCostResult {
+    readonly actionCostUsd: number;
+    readonly creditDiscountUsd: number;
+    readonly governedIdentitiesObserved: number;
+    readonly governedIdentityCostUsd: number;
     /**
      * The provider-assigned unique ID for this managed resource.
      */
     readonly id: string;
+    readonly netCostUsd: number;
+    readonly policyChecksCostUsd: number;
+    readonly policyChecksTotal: number;
     readonly responseJson: string;
+    readonly stripeInvoiceTotalUsd: number;
+    readonly stripeReconciliationUsd: number;
+    readonly tier: string;
+    readonly totalCostUsd: number;
 }
 export function getMonthlyCostOutput(opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetMonthlyCostResult> {
     opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});

package/billing/getPricing.ts

@@ -14,10 +14,20 @@ export function getPricing(opts?: pulumi.InvokeOptions): Promise<GetPricingResul
  * A collection of values returned by getPricing.
  */
 export interface GetPricingResult {
+    readonly activeTier: string;
+    readonly baseMonthlyPlatformFeeUsd: number;
+    readonly catalogVersion: string;
+    readonly creditDiscountPercent: number;
+    readonly governedIdentityUsdPerMonth: number;
     /**
      * The provider-assigned unique ID for this managed resource.
      */
     readonly id: string;
+    readonly includedGovernedIdentities: number;
+    readonly includedPolicyChecks: number;
+    readonly overageCapUsd: number;
+    readonly policyChecksUsdPerMillion: number;
+    readonly prepaidCreditUsd: number;
     readonly responseJson: string;
 }
 export function getPricingOutput(opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetPricingResult> {

package/billing/index.ts

@@ -1,9 +1,20 @@
 // *** WARNING: this file was generated by pulumi-language-nodejs. ***
 // *** Do not edit by hand unless you're certain you know what you are doing! ***
 
+import * as pulumi from "@pulumi/pulumi";
 import * as utilities from "../utilities";
 
 // Export members:
+export { GetCreditBankArgs, GetCreditBankResult, GetCreditBankOutputArgs } from "./getCreditBank";
+export const getCreditBank: typeof import("./getCreditBank").getCreditBank = null as any;
+export const getCreditBankOutput: typeof import("./getCreditBank").getCreditBankOutput = null as any;
+utilities.lazyLoad(exports, ["getCreditBank","getCreditBankOutput"], () => require("./getCreditBank"));
+
+export { GetEstimateArgs, GetEstimateResult, GetEstimateOutputArgs } from "./getEstimate";
+export const getEstimate: typeof import("./getEstimate").getEstimate = null as any;
+export const getEstimateOutput: typeof import("./getEstimate").getEstimateOutput = null as any;
+utilities.lazyLoad(exports, ["getEstimate","getEstimateOutput"], () => require("./getEstimate"));
+
 export { GetInvoicesArgs, GetInvoicesResult, GetInvoicesOutputArgs } from "./getInvoices";
 export const getInvoices: typeof import("./getInvoices").getInvoices = null as any;
 export const getInvoicesOutput: typeof import("./getInvoices").getInvoicesOutput = null as any;
@@ -29,3 +40,21 @@ export const getReports: typeof import("./getReports").getReports = null as any;
 export const getReportsOutput: typeof import("./getReports").getReportsOutput = null as any;
 utilities.lazyLoad(exports, ["getReports","getReportsOutput"], () => require("./getReports"));
 
+export { OverageCapArgs, OverageCapState } from "./overageCap";
+export type OverageCap = import("./overageCap").OverageCap;
+export const OverageCap: typeof import("./overageCap").OverageCap = null as any;
+utilities.lazyLoad(exports, ["OverageCap"], () => require("./overageCap"));
+
+
+const _module = {
+    version: utilities.getVersion(),
+    construct: (name: string, type: string, urn: string): pulumi.Resource => {
+        switch (type) {
+            case "thoth:billing/overageCap:OverageCap":
+                return new OverageCap(name, <any>undefined, { urn })
+            default:
+                throw new Error(`unknown resource type ${type}`);
+        }
+    },
+};
+pulumi.runtime.registerResourceModule("thoth", "billing/overageCap", _module)

package/billing/overageCap.ts

@@ -0,0 +1,174 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+export class OverageCap extends pulumi.CustomResource {
+    /**
+     * Get an existing OverageCap resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: OverageCapState, opts?: pulumi.CustomResourceOptions): OverageCap {
+        return new OverageCap(name, <any>state, { ...opts, id: id });
+    }
+
+    /** @internal */
+    public static readonly __pulumiType = 'thoth:billing/overageCap:OverageCap';
+
+    /**
+     * Returns true if the given object is an instance of OverageCap.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    public static isInstance(obj: any): obj is OverageCap {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === OverageCap.__pulumiType;
+    }
+
+    /**
+     * Effective active pricing tier.
+     */
+    declare public /*out*/ readonly activeTier: pulumi.Output<string>;
+    /**
+     * Base monthly platform fee in USD for the active tier.
+     */
+    declare public /*out*/ readonly baseMonthlyPlatformFeeUsd: pulumi.Output<number>;
+    /**
+     * Per-governed-identity overage rate.
+     */
+    declare public /*out*/ readonly governedIdentityUsdPerMonth: pulumi.Output<number>;
+    /**
+     * Included governed identities before overage.
+     */
+    declare public /*out*/ readonly includedGovernedIdentities: pulumi.Output<number>;
+    /**
+     * Included policy checks before overage.
+     */
+    declare public /*out*/ readonly includedPolicyChecks: pulumi.Output<number>;
+    /**
+     * Monthly variable overage cap in USD.
+     */
+    declare public readonly overageCapUsd: pulumi.Output<number>;
+    /**
+     * Per-million policy checks overage rate.
+     */
+    declare public /*out*/ readonly policyChecksUsdPerMillion: pulumi.Output<number>;
+    /**
+     * Full billing pricing profile response payload as JSON.
+     */
+    declare public /*out*/ readonly responseJson: pulumi.Output<string>;
+    /**
+     * Tenant ID resolved from provider configuration.
+     */
+    declare public /*out*/ readonly tenantId: pulumi.Output<string>;
+    /**
+     * Timestamp when the overage cap was last applied via provider.
+     */
+    declare public /*out*/ readonly updatedAt: pulumi.Output<string>;
+
+    /**
+     * Create a OverageCap resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: OverageCapArgs, opts?: pulumi.CustomResourceOptions)
+    constructor(name: string, argsOrState?: OverageCapArgs | OverageCapState, opts?: pulumi.CustomResourceOptions) {
+        let resourceInputs: pulumi.Inputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState as OverageCapState | undefined;
+            resourceInputs["activeTier"] = state?.activeTier;
+            resourceInputs["baseMonthlyPlatformFeeUsd"] = state?.baseMonthlyPlatformFeeUsd;
+            resourceInputs["governedIdentityUsdPerMonth"] = state?.governedIdentityUsdPerMonth;
+            resourceInputs["includedGovernedIdentities"] = state?.includedGovernedIdentities;
+            resourceInputs["includedPolicyChecks"] = state?.includedPolicyChecks;
+            resourceInputs["overageCapUsd"] = state?.overageCapUsd;
+            resourceInputs["policyChecksUsdPerMillion"] = state?.policyChecksUsdPerMillion;
+            resourceInputs["responseJson"] = state?.responseJson;
+            resourceInputs["tenantId"] = state?.tenantId;
+            resourceInputs["updatedAt"] = state?.updatedAt;
+        } else {
+            const args = argsOrState as OverageCapArgs | undefined;
+            if (args?.overageCapUsd === undefined && !opts.urn) {
+                throw new Error("Missing required property 'overageCapUsd'");
+            }
+            resourceInputs["overageCapUsd"] = args?.overageCapUsd;
+            resourceInputs["activeTier"] = undefined /*out*/;
+            resourceInputs["baseMonthlyPlatformFeeUsd"] = undefined /*out*/;
+            resourceInputs["governedIdentityUsdPerMonth"] = undefined /*out*/;
+            resourceInputs["includedGovernedIdentities"] = undefined /*out*/;
+            resourceInputs["includedPolicyChecks"] = undefined /*out*/;
+            resourceInputs["policyChecksUsdPerMillion"] = undefined /*out*/;
+            resourceInputs["responseJson"] = undefined /*out*/;
+            resourceInputs["tenantId"] = undefined /*out*/;
+            resourceInputs["updatedAt"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(OverageCap.__pulumiType, name, resourceInputs, opts);
+    }
+}
+
+/**
+ * Input properties used for looking up and filtering OverageCap resources.
+ */
+export interface OverageCapState {
+    /**
+     * Effective active pricing tier.
+     */
+    activeTier?: pulumi.Input<string | undefined>;
+    /**
+     * Base monthly platform fee in USD for the active tier.
+     */
+    baseMonthlyPlatformFeeUsd?: pulumi.Input<number | undefined>;
+    /**
+     * Per-governed-identity overage rate.
+     */
+    governedIdentityUsdPerMonth?: pulumi.Input<number | undefined>;
+    /**
+     * Included governed identities before overage.
+     */
+    includedGovernedIdentities?: pulumi.Input<number | undefined>;
+    /**
+     * Included policy checks before overage.
+     */
+    includedPolicyChecks?: pulumi.Input<number | undefined>;
+    /**
+     * Monthly variable overage cap in USD.
+     */
+    overageCapUsd?: pulumi.Input<number | undefined>;
+    /**
+     * Per-million policy checks overage rate.
+     */
+    policyChecksUsdPerMillion?: pulumi.Input<number | undefined>;
+    /**
+     * Full billing pricing profile response payload as JSON.
+     */
+    responseJson?: pulumi.Input<string | undefined>;
+    /**
+     * Tenant ID resolved from provider configuration.
+     */
+    tenantId?: pulumi.Input<string | undefined>;
+    /**
+     * Timestamp when the overage cap was last applied via provider.
+     */
+    updatedAt?: pulumi.Input<string | undefined>;
+}
+
+/**
+ * The set of arguments for constructing a OverageCap resource.
+ */
+export interface OverageCapArgs {
+    /**
+     * Monthly variable overage cap in USD.
+     */
+    overageCapUsd: pulumi.Input<number>;
+}

package/governance/packAssignment.ts

@@ -48,10 +48,22 @@ export class PackAssignment extends pulumi.CustomResource {
      * Approval policy ID for pack application.
      */
     declare public readonly approvalPolicyId: pulumi.Output<string | undefined>;
+    /**
+     * Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
+     */
+    declare public readonly criticalThreshold: pulumi.Output<number | undefined>;
+    /**
+     * Deterministic boost for delegation risk signals (0-100).
+     */
+    declare public readonly delegationBoost: pulumi.Output<number | undefined>;
     /**
      * Environment: dev or prod.
      */
     declare public readonly environment: pulumi.Output<string | undefined>;
+    /**
+     * Deterministic boost for purpose/sensitivity mismatch signals (0-100).
+     */
+    declare public readonly mismatchBoost: pulumi.Output<number | undefined>;
     /**
      * Pack override JSON object.
      */
@@ -80,6 +92,10 @@ export class PackAssignment extends pulumi.CustomResource {
      * Tenant ID from provider configuration.
      */
     declare public /*out*/ readonly tenantId: pulumi.Output<string>;
+    /**
+     * Ignore low-confidence purpose/delegation signals below this floor (0-1).
+     */
+    declare public readonly trustFloor: pulumi.Output<number | undefined>;
 
     /**
      * Create a PackAssignment resource with the given unique name, arguments, and options.
@@ -98,7 +114,10 @@ export class PackAssignment extends pulumi.CustomResource {
             resourceInputs["appliedAt"] = state?.appliedAt;
             resourceInputs["appliedBy"] = state?.appliedBy;
             resourceInputs["approvalPolicyId"] = state?.approvalPolicyId;
+            resourceInputs["criticalThreshold"] = state?.criticalThreshold;
+            resourceInputs["delegationBoost"] = state?.delegationBoost;
             resourceInputs["environment"] = state?.environment;
+            resourceInputs["mismatchBoost"] = state?.mismatchBoost;
             resourceInputs["overridesJson"] = state?.overridesJson;
             resourceInputs["packId"] = state?.packId;
             resourceInputs["regulation"] = state?.regulation;
@@ -106,6 +125,7 @@ export class PackAssignment extends pulumi.CustomResource {
             resourceInputs["ruleVersion"] = state?.ruleVersion;
             resourceInputs["status"] = state?.status;
             resourceInputs["tenantId"] = state?.tenantId;
+            resourceInputs["trustFloor"] = state?.trustFloor;
         } else {
             const args = argsOrState as PackAssignmentArgs | undefined;
             if (args?.agentId === undefined && !opts.urn) {
@@ -116,9 +136,13 @@ export class PackAssignment extends pulumi.CustomResource {
             }
             resourceInputs["agentId"] = args?.agentId;
             resourceInputs["approvalPolicyId"] = args?.approvalPolicyId;
+            resourceInputs["criticalThreshold"] = args?.criticalThreshold;
+            resourceInputs["delegationBoost"] = args?.delegationBoost;
             resourceInputs["environment"] = args?.environment;
+            resourceInputs["mismatchBoost"] = args?.mismatchBoost;
             resourceInputs["overridesJson"] = args?.overridesJson;
             resourceInputs["packId"] = args?.packId;
+            resourceInputs["trustFloor"] = args?.trustFloor;
             resourceInputs["appliedAt"] = undefined /*out*/;
             resourceInputs["appliedBy"] = undefined /*out*/;
             resourceInputs["regulation"] = undefined /*out*/;
@@ -152,10 +176,22 @@ export interface PackAssignmentState {
      * Approval policy ID for pack application.
      */
     approvalPolicyId?: pulumi.Input<string | undefined>;
+    /**
+     * Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
+     */
+    criticalThreshold?: pulumi.Input<number | undefined>;
+    /**
+     * Deterministic boost for delegation risk signals (0-100).
+     */
+    delegationBoost?: pulumi.Input<number | undefined>;
     /**
      * Environment: dev or prod.
      */
     environment?: pulumi.Input<string | undefined>;
+    /**
+     * Deterministic boost for purpose/sensitivity mismatch signals (0-100).
+     */
+    mismatchBoost?: pulumi.Input<number | undefined>;
     /**
      * Pack override JSON object.
      */
@@ -184,6 +220,10 @@ export interface PackAssignmentState {
      * Tenant ID from provider configuration.
      */
     tenantId?: pulumi.Input<string | undefined>;
+    /**
+     * Ignore low-confidence purpose/delegation signals below this floor (0-1).
+     */
+    trustFloor?: pulumi.Input<number | undefined>;
 }
 
 /**
@@ -198,10 +238,22 @@ export interface PackAssignmentArgs {
      * Approval policy ID for pack application.
      */
     approvalPolicyId?: pulumi.Input<string | undefined>;
+    /**
+     * Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
+     */
+    criticalThreshold?: pulumi.Input<number | undefined>;
+    /**
+     * Deterministic boost for delegation risk signals (0-100).
+     */
+    delegationBoost?: pulumi.Input<number | undefined>;
     /**
      * Environment: dev or prod.
      */
     environment?: pulumi.Input<string | undefined>;
+    /**
+     * Deterministic boost for purpose/sensitivity mismatch signals (0-100).
+     */
+    mismatchBoost?: pulumi.Input<number | undefined>;
     /**
      * Pack override JSON object.
      */
@@ -210,4 +262,8 @@ export interface PackAssignmentArgs {
      * Compliance pack identifier.
      */
     packId: pulumi.Input<string>;
+    /**
+     * Ignore low-confidence purpose/delegation signals below this floor (0-1).
+     */
+    trustFloor?: pulumi.Input<number | undefined>;
 }

package/governance/packAssignmentBulk.ts

@@ -48,6 +48,14 @@ export class PackAssignmentBulk extends pulumi.CustomResource {
      * Approval policy ID for pack application (defaults to 'default').
      */
     declare public readonly approvalPolicyId: pulumi.Output<string | undefined>;
+    /**
+     * Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1). Applied to selected pack_ids.
+     */
+    declare public readonly criticalThreshold: pulumi.Output<number | undefined>;
+    /**
+     * Deterministic boost for delegation risk signals (0-100). Applied to selected pack_ids.
+     */
+    declare public readonly delegationBoost: pulumi.Output<number | undefined>;
     /**
      * Endpoint IDs whose agents should receive the selected packs.
      */
@@ -68,6 +76,10 @@ export class PackAssignmentBulk extends pulumi.CustomResource {
      * Timestamp of the most recent apply operation.
      */
     declare public /*out*/ readonly lastAppliedAt: pulumi.Output<string>;
+    /**
+     * Deterministic boost for purpose/sensitivity mismatch signals (0-100). Applied to selected pack_ids.
+     */
+    declare public readonly mismatchBoost: pulumi.Output<number | undefined>;
     /**
      * JSON map keyed by<span pulumi-lang-nodejs=" packId " pulumi-lang-dotnet=" PackId " pulumi-lang-go=" packId " pulumi-lang-python=" pack_id " pulumi-lang-yaml=" packId " pulumi-lang-java=" packId "> packId </span>with per-pack overrides.
      */
@@ -96,6 +108,10 @@ export class PackAssignmentBulk extends pulumi.CustomResource {
      * Change this value to force a fresh apply run.
      */
     declare public readonly trigger: pulumi.Output<string | undefined>;
+    /**
+     * Ignore low-confidence purpose/delegation signals below this floor (0-1). Applied to selected pack_ids.
+     */
+    declare public readonly trustFloor: pulumi.Output<number | undefined>;
 
     /**
      * Create a PackAssignmentBulk resource with the given unique name, arguments, and options.
@@ -114,11 +130,14 @@ export class PackAssignmentBulk extends pulumi.CustomResource {
             resourceInputs["allAgents"] = state?.allAgents;
             resourceInputs["appliedCount"] = state?.appliedCount;
             resourceInputs["approvalPolicyId"] = state?.approvalPolicyId;
+            resourceInputs["criticalThreshold"] = state?.criticalThreshold;
+            resourceInputs["delegationBoost"] = state?.delegationBoost;
             resourceInputs["endpointIds"] = state?.endpointIds;
             resourceInputs["environment"] = state?.environment;
             resourceInputs["failedCount"] = state?.failedCount;
             resourceInputs["fleetIds"] = state?.fleetIds;
             resourceInputs["lastAppliedAt"] = state?.lastAppliedAt;
+            resourceInputs["mismatchBoost"] = state?.mismatchBoost;
             resourceInputs["overridesByPackJson"] = state?.overridesByPackJson;
             resourceInputs["packIds"] = state?.packIds;
             resourceInputs["resultsJson"] = state?.resultsJson;
@@ -126,6 +145,7 @@ export class PackAssignmentBulk extends pulumi.CustomResource {
             resourceInputs["tenantId"] = state?.tenantId;
             resourceInputs["totalOps"] = state?.totalOps;
             resourceInputs["trigger"] = state?.trigger;
+            resourceInputs["trustFloor"] = state?.trustFloor;
         } else {
             const args = argsOrState as PackAssignmentBulkArgs | undefined;
             if (args?.packIds === undefined && !opts.urn) {
@@ -134,12 +154,16 @@ export class PackAssignmentBulk extends pulumi.CustomResource {
             resourceInputs["agentIds"] = args?.agentIds;
             resourceInputs["allAgents"] = args?.allAgents;
             resourceInputs["approvalPolicyId"] = args?.approvalPolicyId;
+            resourceInputs["criticalThreshold"] = args?.criticalThreshold;
+            resourceInputs["delegationBoost"] = args?.delegationBoost;
             resourceInputs["endpointIds"] = args?.endpointIds;
             resourceInputs["environment"] = args?.environment;
             resourceInputs["fleetIds"] = args?.fleetIds;
+            resourceInputs["mismatchBoost"] = args?.mismatchBoost;
             resourceInputs["overridesByPackJson"] = args?.overridesByPackJson;
             resourceInputs["packIds"] = args?.packIds;
             resourceInputs["trigger"] = args?.trigger;
+            resourceInputs["trustFloor"] = args?.trustFloor;
             resourceInputs["appliedCount"] = undefined /*out*/;
             resourceInputs["failedCount"] = undefined /*out*/;
             resourceInputs["lastAppliedAt"] = undefined /*out*/;
@@ -173,6 +197,14 @@ export interface PackAssignmentBulkState {
      * Approval policy ID for pack application (defaults to 'default').
      */
     approvalPolicyId?: pulumi.Input<string | undefined>;
+    /**
+     * Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1). Applied to selected pack_ids.
+     */
+    criticalThreshold?: pulumi.Input<number | undefined>;
+    /**
+     * Deterministic boost for delegation risk signals (0-100). Applied to selected pack_ids.
+     */
+    delegationBoost?: pulumi.Input<number | undefined>;
     /**
      * Endpoint IDs whose agents should receive the selected packs.
      */
@@ -193,6 +225,10 @@ export interface PackAssignmentBulkState {
      * Timestamp of the most recent apply operation.
      */
     lastAppliedAt?: pulumi.Input<string | undefined>;
+    /**
+     * Deterministic boost for purpose/sensitivity mismatch signals (0-100). Applied to selected pack_ids.
+     */
+    mismatchBoost?: pulumi.Input<number | undefined>;
     /**
      * JSON map keyed by<span pulumi-lang-nodejs=" packId " pulumi-lang-dotnet=" PackId " pulumi-lang-go=" packId " pulumi-lang-python=" pack_id " pulumi-lang-yaml=" packId " pulumi-lang-java=" packId "> packId </span>with per-pack overrides.
      */
@@ -221,6 +257,10 @@ export interface PackAssignmentBulkState {
      * Change this value to force a fresh apply run.
      */
     trigger?: pulumi.Input<string | undefined>;
+    /**
+     * Ignore low-confidence purpose/delegation signals below this floor (0-1). Applied to selected pack_ids.
+     */
+    trustFloor?: pulumi.Input<number | undefined>;
 }
 
 /**
@@ -239,6 +279,14 @@ export interface PackAssignmentBulkArgs {
      * Approval policy ID for pack application (defaults to 'default').
      */
     approvalPolicyId?: pulumi.Input<string | undefined>;
+    /**
+     * Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1). Applied to selected pack_ids.
+     */
+    criticalThreshold?: pulumi.Input<number | undefined>;
+    /**
+     * Deterministic boost for delegation risk signals (0-100). Applied to selected pack_ids.
+     */
+    delegationBoost?: pulumi.Input<number | undefined>;
     /**
      * Endpoint IDs whose agents should receive the selected packs.
      */
@@ -251,6 +299,10 @@ export interface PackAssignmentBulkArgs {
      * Fleet IDs whose agents should receive the selected packs.
      */
     fleetIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Deterministic boost for purpose/sensitivity mismatch signals (0-100). Applied to selected pack_ids.
+     */
+    mismatchBoost?: pulumi.Input<number | undefined>;
     /**
      * JSON map keyed by<span pulumi-lang-nodejs=" packId " pulumi-lang-dotnet=" PackId " pulumi-lang-go=" packId " pulumi-lang-python=" pack_id " pulumi-lang-yaml=" packId " pulumi-lang-java=" packId "> packId </span>with per-pack overrides.
      */
@@ -263,4 +315,8 @@ export interface PackAssignmentBulkArgs {
      * Change this value to force a fresh apply run.
      */
     trigger?: pulumi.Input<string | undefined>;
+    /**
+     * Ignore low-confidence purpose/delegation signals below this floor (0-1). Applied to selected pack_ids.
+     */
+    trustFloor?: pulumi.Input<number | undefined>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atensec/pulumi-thoth",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Pulumi provider for Aten Security Thoth AI governance control plane.",
   "keywords": [
     "pulumi",

package/tsconfig.json

@@ -26,12 +26,15 @@
         "access/getApiKeyMetrics.ts",
         "access/getApiKeys.ts",
         "access/index.ts",
+        "billing/getCreditBank.ts",
+        "billing/getEstimate.ts",
         "billing/getInvoices.ts",
         "billing/getMonthlyCost.ts",
         "billing/getPricing.ts",
         "billing/getReport.ts",
         "billing/getReports.ts",
         "billing/index.ts",
+        "billing/overageCap.ts",
         "browser/enrollment.ts",
         "browser/getEnrollments.ts",
         "browser/getPolicies.ts",