@ingram-cloud/pulumi 1.1.0 → 1.3.0

package/README.md

@@ -121,6 +121,29 @@ const bookkeeper = new ic.IcAgent("bookkeeper", {
 > keep it as the app's migration script. New smiths attach at birth in app code.
 > Pulumi does not own per-smith runtime state.
 
+### IcWebPage (declare in the APP repo)
+
+A **hosted page** — a private, shareable web page that runs an agent (a `web`
+deployment). Each visitor gets their own smith; the 128-bit `dep_` id in the URL is
+the privacy boundary, with an optional shared `password` on top. Point it at an
+`IcAgent` and read back `pageUrl` — the link to hand out.
+
+```ts
+const page = new ic.IcWebPage("docs-page", {
+  ...conn,
+  agentId: curator.agentId,
+  title: "Ingram Cloud docs assistant",
+  greeting: "Ask me anything about Ingram Cloud.",
+  // password: "optional-shared-secret",
+});
+
+export const pageUrl = page.pageUrl; // https://cloud.ingram.tech/hosted/dep_…
+```
+
+> The API has no update path for a web deployment's title/greeting/password, so a
+> change to any of those (or to `agentId`) **replaces** the page and mints a fresh
+> `pageUrl`. The agent's instructions change on the `IcAgent`, not here.
+
 ### IcMcpServer, IcOauthProvider, IcTelegramBot, IcWhatsAppConfig, IcEmail, IcWebhook, IcModelKey (declare in INFRA)
 
 ```ts

package/dist/resources.d.ts

@@ -161,6 +161,10 @@ export interface IcOauthProviderArgs {
     clientSecret?: pulumi.Input<string>;
     tokenUri?: pulumi.Input<string>;
     scopesAllowed?: pulumi.Input<string[]>;
+    /** Delegated connector consent (#123): the connector OAuth authorize
+     *  endpoint 302s end-users to this tenant-hosted page (`?request_id=…`)
+     *  instead of rendering the built-in connect-token page. */
+    authorizeUrl?: pulumi.Input<string>;
 }
 export declare class IcOauthProvider extends pulumi.dynamic.Resource {
     constructor(name: string, args: IcOauthProviderArgs, opts?: pulumi.CustomResourceOptions);
@@ -248,3 +252,20 @@ export declare class IcProjectToken extends pulumi.dynamic.Resource {
     readonly tokenId: pulumi.Output<string>;
     constructor(name: string, args: IcProjectTokenArgs, opts?: pulumi.CustomResourceOptions);
 }
+export interface IcWebPageArgs {
+    baseUrl: pulumi.Input<string>;
+    token: pulumi.Input<string>;
+    /** The `agt_…` id this page runs. Typically an `IcAgent().agentId`. */
+    agentId: pulumi.Input<string>;
+    title?: pulumi.Input<string>;
+    greeting?: pulumi.Input<string>;
+    /** Optional shared password gating the page. */
+    password?: pulumi.Input<string>;
+}
+export declare class IcWebPage extends pulumi.dynamic.Resource {
+    /** The `dep_…` deployment id (same as `.id`, exposed for convenience). */
+    readonly deploymentId: pulumi.Output<string>;
+    /** The shareable page URL (e.g. `https://cloud.ingram.tech/hosted/dep_…`). */
+    readonly pageUrl: pulumi.Output<string>;
+    constructor(name: string, args: IcWebPageArgs, opts?: pulumi.CustomResourceOptions);
+}

package/dist/resources.js

@@ -33,7 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.IcProjectToken = exports.IcProject = exports.IcModelKey = exports.IcWebhook = exports.IcEmail = exports.IcWhatsAppConfig = exports.IcOauthProvider = exports.IcTelegramBot = exports.IcMcpServer = exports.IcAgent = exports.IC_API_VERSION = void 0;
+exports.IcWebPage = exports.IcProjectToken = exports.IcProject = exports.IcModelKey = exports.IcWebhook = exports.IcEmail = exports.IcWhatsAppConfig = exports.IcOauthProvider = exports.IcTelegramBot = exports.IcMcpServer = exports.IcAgent = exports.IC_API_VERSION = void 0;
 /**
  * Ingram Cloud /v1 tenant configuration as Pulumi dynamic resources.
  *
@@ -558,6 +558,7 @@ const oauthProviderResource = makePutResource({
         ...(i.clientSecret !== undefined ? { client_secret: i.clientSecret } : {}),
         token_uri: i.tokenUri,
         scopes_allowed: i.scopesAllowed,
+        authorize_url: i.authorizeUrl,
     }),
     diff: {
         replaceKeys: ["provider"],
@@ -566,6 +567,7 @@ const oauthProviderResource = makePutResource({
             "clientId",
             "clientSecret",
             "tokenUri",
+            "authorizeUrl",
             "token",
             "baseUrl",
         ],
@@ -581,6 +583,7 @@ class IcOauthProvider extends pulumi.dynamic.Resource {
             clientSecret: undefined,
             tokenUri: undefined,
             scopesAllowed: undefined,
+            authorizeUrl: undefined,
             ...args,
         }, { ...opts, additionalSecretOutputs: ["token", "clientSecret"] });
     }
@@ -799,3 +802,53 @@ class IcProjectToken extends pulumi.dynamic.Resource {
     }
 }
 exports.IcProjectToken = IcProjectToken;
+const webPageProvider = {
+    async create(i) {
+        const body = {
+            target: { type: "agent", id: i.agentId },
+            kind: "web",
+            provider_metadata: {
+                ...(i.title ? { title: i.title } : {}),
+                ...(i.greeting ? { greeting: i.greeting } : {}),
+            },
+        };
+        if (i.password)
+            body.secrets = { password: i.password };
+        const res = await icRequest(i.baseUrl, i.token, "POST", "/v1/deployments", body);
+        return {
+            id: res.id,
+            outs: { ...i, deploymentId: res.id, pageUrl: res.page_url },
+        };
+    },
+    async update(_id, olds, news) {
+        // No web-metadata PATCH on the API — diff marks every field as a replace, so
+        // this path is only reached for a no-op refresh. Carry outputs forward.
+        return { outs: { ...news, deploymentId: _id, pageUrl: olds.pageUrl } };
+    },
+    async delete(id, props) {
+        await icRequest(props.baseUrl, props.token, "DELETE", `/v1/deployments/${id}`);
+    },
+    async diff(_id, olds, news) {
+        return simpleDiff(olds, news, {
+            replaceKeys: ["agentId", "title", "greeting", "password"],
+        });
+    },
+    async read(id, props) {
+        return read404(() => icRequest(props.baseUrl, props.token, "GET", `/v1/deployments/${id}`), (dep) => ({
+            id,
+            props: {
+                ...props,
+                title: dep.provider_metadata?.title,
+                greeting: dep.provider_metadata?.greeting,
+                deploymentId: id,
+                pageUrl: dep.page_url,
+            },
+        }));
+    },
+};
+class IcWebPage extends pulumi.dynamic.Resource {
+    constructor(name, args, opts) {
+        super(webPageProvider, name, { deploymentId: undefined, pageUrl: undefined, ...args }, { ...opts, additionalSecretOutputs: ["token", "password"] });
+    }
+}
+exports.IcWebPage = IcWebPage;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@ingram-cloud/pulumi",
-	"version": "1.1.0",
+	"version": "1.3.0",
 	"description": "Pulumi dynamic resources for the Ingram Cloud /v1 API — projects, project tokens, agents, MCP servers, channels, webhooks, model keys.",
 	"license": "MIT",
 	"homepage": "https://cloud.ingram.tech",
@@ -28,11 +28,11 @@
 		"@pulumi/pulumi": "^3.0.0"
 	},
 	"devDependencies": {
-		"@ingram-tech/oxlint-config": "^0.2.1",
-		"@pulumi/pulumi": "^3.0.0",
-		"@types/node": "^25.0.0",
-		"oxfmt": "^0.54.0",
-		"oxlint": "^1.70.0",
-		"typescript": "^6.0.0"
+		"@ingram-tech/oxlint-config": "^0.2.2",
+		"@pulumi/pulumi": "^3.251.0",
+		"@types/node": "^26.1.1",
+		"oxfmt": "^0.58.0",
+		"oxlint": "^1.73.0",
+		"typescript": "^7.0.2"
 	}
 }