@ingram-cloud/pulumi 2.2.0 → 3.0.1

package/README.md

@@ -20,7 +20,7 @@ pass. A typical split:
 app stack        IcAgent, IcWebPage, IcSkill — instructions come from the app's
                  own source.
 
-infra stack      IcMcpServer, IcOauthProvider, IcTelegramBot, IcWhatsAppConfig,
+infra stack      IcMcpServer, IcOauthProvider, IcTelegramBot, IcWhatsAppNumber,
                  IcEmail, IcWebhook, IcModelKey — tenant integration config. It can
                  read the app stack's outputs (agent ids, webhook secret) through
                  pulumi.StackReference and write them to the app's env.
@@ -162,7 +162,7 @@ const biller = new ic.IcAgent("biller", {
 });
 ```
 
-### IcMcpServer, IcOauthProvider, IcTelegramBot, IcWhatsAppConfig, IcEmail, IcWebhook, IcModelKey (infra stack)
+### IcMcpServer, IcOauthProvider, IcTelegramBot, IcWhatsAppNumber, IcEmail, IcWebhook, IcModelKey (infra stack)
 
 ```ts
 // Your own server (raw URL).

package/dist/resources.d.ts

@@ -14,7 +14,7 @@
  *     so declare these in the APP repo's Pulumi program, sourced from the app's
  *     own spec module. Never copy prompts into the infra repo.
  *   - **Integrations / tenant config** (`IcMcpServer`, `IcOauthProvider`,
- *     `IcTelegramBot`, `IcWhatsAppConfig`, `IcWebhook`, `IcModelKey`) —
+ *     `IcTelegramBot`, `IcWhatsAppNumber`, `IcWebhook`, `IcModelKey`) —
  *     tenant-level wiring; declare in the infra repo alongside DNS/DB/Vercel.
  *
  * Not modelled here, on purpose:
@@ -248,7 +248,7 @@ export interface IcOauthProviderArgs {
 export declare class IcOauthProvider extends pulumi.dynamic.Resource {
     constructor(name: string, args: IcOauthProviderArgs, opts?: pulumi.CustomResourceOptions);
 }
-export interface IcWhatsAppConfigArgs {
+export interface IcWhatsAppNumberArgs {
     baseUrl: pulumi.Input<string>;
     token: pulumi.Input<string>;
     phoneNumberId: pulumi.Input<string>;
@@ -256,10 +256,12 @@ export interface IcWhatsAppConfigArgs {
     /** The WhatsApp Business Account id — IC subscribes its app to it so inbound flows. */
     wabaId: pulumi.Input<string>;
 }
-export declare class IcWhatsAppConfig extends pulumi.dynamic.Resource {
-    readonly displayPhoneNumber: pulumi.Output<string>;
+/** One of the tenant's WhatsApp numbers. A tenant may register several; bind one to
+ *  an agent with a `whatsapp` deployment whose `address` is its `phoneNumberId`. */
+export declare class IcWhatsAppNumber extends pulumi.dynamic.Resource {
+    readonly displayPhoneNumber: pulumi.Output<string | null>;
     readonly webhookUrl: pulumi.Output<string>;
-    constructor(name: string, args: IcWhatsAppConfigArgs, opts?: pulumi.CustomResourceOptions);
+    constructor(name: string, args: IcWhatsAppNumberArgs, opts?: pulumi.CustomResourceOptions);
 }
 export interface IcEmailArgs {
     baseUrl: pulumi.Input<string>;

package/dist/resources.js

@@ -33,7 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.IcWebPage = exports.IcProjectToken = exports.IcProject = exports.IcModelKey = exports.IcWebhook = exports.IcEmail = exports.IcWhatsAppConfig = exports.IcOauthProvider = exports.IcTelegramBot = exports.IcMcpServer = exports.IcVectorStore = exports.IcSkill = exports.IcAgent = exports.IC_API_VERSION = void 0;
+exports.IcWebPage = exports.IcProjectToken = exports.IcProject = exports.IcModelKey = exports.IcWebhook = exports.IcEmail = exports.IcWhatsAppNumber = exports.IcOauthProvider = exports.IcTelegramBot = exports.IcMcpServer = exports.IcVectorStore = exports.IcSkill = exports.IcAgent = exports.IC_API_VERSION = void 0;
 /**
  * Ingram Cloud /v1 tenant configuration as Pulumi dynamic resources.
  *
@@ -50,7 +50,7 @@ exports.IcWebPage = exports.IcProjectToken = exports.IcProject = exports.IcModel
  *     so declare these in the APP repo's Pulumi program, sourced from the app's
  *     own spec module. Never copy prompts into the infra repo.
  *   - **Integrations / tenant config** (`IcMcpServer`, `IcOauthProvider`,
- *     `IcTelegramBot`, `IcWhatsAppConfig`, `IcWebhook`, `IcModelKey`) —
+ *     `IcTelegramBot`, `IcWhatsAppNumber`, `IcWebhook`, `IcModelKey`) —
  *     tenant-level wiring; declare in the infra repo alongside DNS/DB/Vercel.
  *
  * Not modelled here, on purpose:
@@ -889,7 +889,13 @@ const telegramProvider = makePutResource({
         botId: res.bot_id,
         webhookUrl: res.webhook_url,
     }),
-    diff: { scalarKeys: ["botToken", "token", "baseUrl"] },
+    // The token is write-only, so refresh can only see whether a bot is set at
+    // all. An unconfigured tenant reads back as a missing botToken, which diffs
+    // and makes the next `up` PUT it again instead of reporting a clean state.
+    readProps: (_i, res) => (res.configured ? {} : { botToken: undefined }),
+    // A fixed-path singleton: create-before-delete would PUT the new config and
+    // then DELETE the same path, leaving the tenant with no bot.
+    diff: { scalarKeys: ["botToken", "token", "baseUrl"], deleteBeforeReplace: true },
 });
 class IcTelegramBot extends pulumi.dynamic.Resource {
     constructor(name, args, opts) {
@@ -947,22 +953,21 @@ class IcOauthProvider extends pulumi.dynamic.Resource {
 }
 exports.IcOauthProvider = IcOauthProvider;
 const whatsappProvider = makePutResource({
-    path: () => "/v1/tenant/whatsapp",
-    id: () => "whatsapp",
-    body: (i) => ({
-        phone_number_id: i.phoneNumberId,
-        access_token: i.accessToken,
-        waba_id: i.wabaId,
-    }),
+    path: (i) => `/v1/tenant/whatsapp/${encodeURIComponent(i.phoneNumberId)}`,
+    id: (i) => i.phoneNumberId,
+    body: (i) => ({ access_token: i.accessToken, waba_id: i.wabaId }),
     outs: (_i, res) => ({
         displayPhoneNumber: res.display_phone_number,
         webhookUrl: res.webhook_url,
     }),
     diff: {
-        scalarKeys: ["phoneNumberId", "accessToken", "wabaId", "token", "baseUrl"],
+        replaceKeys: ["phoneNumberId"],
+        scalarKeys: ["accessToken", "wabaId", "token", "baseUrl"],
     },
 });
-class IcWhatsAppConfig extends pulumi.dynamic.Resource {
+/** One of the tenant's WhatsApp numbers. A tenant may register several; bind one to
+ *  an agent with a `whatsapp` deployment whose `address` is its `phoneNumberId`. */
+class IcWhatsAppNumber extends pulumi.dynamic.Resource {
     constructor(name, args, opts) {
         super(whatsappProvider, name, {
             displayPhoneNumber: undefined,
@@ -974,7 +979,7 @@ class IcWhatsAppConfig extends pulumi.dynamic.Resource {
         });
     }
 }
-exports.IcWhatsAppConfig = IcWhatsAppConfig;
+exports.IcWhatsAppNumber = IcWhatsAppNumber;
 const emailProvider = makePutResource({
     path: () => "/v1/tenant/email",
     id: () => "email",
@@ -992,6 +997,9 @@ const emailProvider = makePutResource({
         inboundUrl: res.inbound_url,
         configured: res.configured,
     }),
+    // Same refresh rule as Telegram: the API token is write-only, so an
+    // unconfigured tenant reads back as a missing token and the next `up` re-PUTs.
+    readProps: (_i, res) => (res.configured ? {} : { cloudflareApiToken: undefined }),
     // inboundSecret excluded — IC may generate it, so it's an output, not drift.
     diff: {
         scalarKeys: [
@@ -1002,6 +1010,8 @@ const emailProvider = makePutResource({
             "token",
             "baseUrl",
         ],
+        // Fixed-path singleton, see the Telegram provider.
+        deleteBeforeReplace: true,
     },
 });
 class IcEmail extends pulumi.dynamic.Resource {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@ingram-cloud/pulumi",
-	"version": "2.2.0",
+	"version": "3.0.1",
 	"description": "Pulumi dynamic resources for the Ingram Cloud /v1 API — projects, project tokens, agents, MCP servers, channels, webhooks, model keys.",
 	"keywords": [
 		"ingram",