@ingram-cloud/pulumi 3.0.0 → 3.0.1

package/dist/resources.js

@@ -889,7 +889,13 @@ const telegramProvider = makePutResource({
         botId: res.bot_id,
         webhookUrl: res.webhook_url,
     }),
-    diff: { scalarKeys: ["botToken", "token", "baseUrl"] },
+    // The token is write-only, so refresh can only see whether a bot is set at
+    // all. An unconfigured tenant reads back as a missing botToken, which diffs
+    // and makes the next `up` PUT it again instead of reporting a clean state.
+    readProps: (_i, res) => (res.configured ? {} : { botToken: undefined }),
+    // A fixed-path singleton: create-before-delete would PUT the new config and
+    // then DELETE the same path, leaving the tenant with no bot.
+    diff: { scalarKeys: ["botToken", "token", "baseUrl"], deleteBeforeReplace: true },
 });
 class IcTelegramBot extends pulumi.dynamic.Resource {
     constructor(name, args, opts) {
@@ -991,6 +997,9 @@ const emailProvider = makePutResource({
         inboundUrl: res.inbound_url,
         configured: res.configured,
     }),
+    // Same refresh rule as Telegram: the API token is write-only, so an
+    // unconfigured tenant reads back as a missing token and the next `up` re-PUTs.
+    readProps: (_i, res) => (res.configured ? {} : { cloudflareApiToken: undefined }),
     // inboundSecret excluded — IC may generate it, so it's an output, not drift.
     diff: {
         scalarKeys: [
@@ -1001,6 +1010,8 @@ const emailProvider = makePutResource({
             "token",
             "baseUrl",
         ],
+        // Fixed-path singleton, see the Telegram provider.
+        deleteBeforeReplace: true,
     },
 });
 class IcEmail extends pulumi.dynamic.Resource {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@ingram-cloud/pulumi",
-	"version": "3.0.0",
+	"version": "3.0.1",
 	"description": "Pulumi dynamic resources for the Ingram Cloud /v1 API — projects, project tokens, agents, MCP servers, channels, webhooks, model keys.",
 	"keywords": [
 		"ingram",