@ingram-tech/pulumi-ingram-cloud 0.1.0 → 0.2.0

package/README.md

@@ -1,9 +1,9 @@
 # @ingram-tech/pulumi-ingram-cloud
 
 Pulumi dynamic resources for the [Ingram Cloud](https://cloud.ingram.tech) `/v1`
-API. Declare your tenant's IC configuration — blueprints, MCP servers, channels,
+API. Declare your tenant's IC configuration — agents, MCP servers, channels,
 webhooks, BYOK model keys — as Pulumi resources instead of imperative
-`register-*.ts` / `ensure-blueprint.ts` scripts, so it lives in state and a change
+`register-*.ts` / `ensure-agent.ts` scripts, so it lives in state and a change
 is a `pulumi up`.
 
 The library is published from the `pulumi/` folder of the
@@ -21,10 +21,10 @@ bun add @ingram-tech/pulumi-ingram-cloud @pulumi/pulumi
 
 ```
 cloud.ingram.tech/pulumi/   THIS LIBRARY — knows nothing about any consumer
-                            (Blueprint, McpServer, TelegramBot, WhatsAppConfig,
+                            (Agent, McpServer, TelegramBot, WhatsAppConfig,
                              Webhook, ModelKey, Secret)
 
-app repos (thornhill, …)    declare their BLUEPRINTS — the `instructions` are
+app repos (thornhill, …)    declare their AGENTS — the `instructions` are
                             app-owned content (prompts), so they stay in the app
                             repo, sourced from the app's own spec module. The app's
                             Pulumi program imports this library + those specs.
@@ -32,7 +32,7 @@ app repos (thornhill, …)    declare their BLUEPRINTS — the `instructions` ar
 infra repo (~/src/infra)    declares tenant CHANNEL config (MCP, Telegram, WhatsApp,
                             webhook, model keys) alongside DNS/DB/Vercel, and can
                             read an app stack's outputs via pulumi.StackReference to
-                            push IC-derived values (blueprint ids, webhook secret)
+                            push IC-derived values (agent ids, webhook secret)
                             into Vercel env. No prompts ever live here.
 ```
 
@@ -59,31 +59,31 @@ pulumi config set --secret ingram-cloud:token tha_live_…
 
 ## Resources
 
-### IcBlueprint (declare in the APP repo)
+### IcAgent (declare in the APP repo)
 
 Create-or-adopt by name → publish a new immutable version **only when the content
-changed** → roll it out. Mirrors the old `ensure-blueprint.ts` idempotency, so the
-first `pulumi up` after switching from a script **adopts** the existing blueprint
+changed** → roll it out. Mirrors the old `ensure-agent.ts` idempotency, so the
+first `pulumi up` after switching from a script **adopts** the existing agent
 (matched by name) rather than recreating it.
 
 ```ts
-import { BLUEPRINT_SPECS } from "../src/lib/cloud/blueprint-spec"; // app-owned
+import { AGENT_SPECS } from "../src/lib/cloud/agent-spec"; // app-owned
 
-const curator = new ic.IcBlueprint("curator", {
+const curator = new ic.IcAgent("curator", {
   ...conn,
-  name: BLUEPRINT_SPECS.curator.name,
-  instructions: BLUEPRINT_SPECS.curator.instructions,
-  model: BLUEPRINT_SPECS.curator.model,
-  autoMemory: BLUEPRINT_SPECS.curator.auto_memory,
+  name: AGENT_SPECS.curator.name,
+  instructions: AGENT_SPECS.curator.instructions,
+  model: AGENT_SPECS.curator.model,
+  autoMemory: AGENT_SPECS.curator.auto_memory,
   // variables: [...], enabledHostedTools: [...], rolloutPercent: 100,
 });
 
-export const curatorBlueprintId = curator.blueprintId;
+export const curatorAgentId = curator.agentId;
 ```
 
-> Attaching **existing** principals to a blueprint is a one-time fleet backfill —
-> keep it as the app's migration script. New principals attach at birth in app code.
-> Pulumi does not own per-user runtime state.
+> Attaching **existing** smiths to a agent is a one-time fleet backfill —
+> keep it as the app's migration script. New smiths attach at birth in app code.
+> Pulumi does not own per-smith runtime state.
 
 ### IcMcpServer, IcTelegramBot, IcWhatsAppConfig, IcWebhook, IcModelKey (declare in INFRA)
 
@@ -115,14 +115,14 @@ tenant runs an IC-hosted `app`.
 
 ## Importing resources a script already created
 
-Blueprints and webhooks implement `read`, so you can adopt pre-existing ones:
+Agents and webhooks implement `read`, so you can adopt pre-existing ones:
 
 ```bash
-pulumi import 'ingram-cloud:index:IcBlueprint' curator bp_123…
+pulumi import 'ingram-cloud:index:IcAgent' curator agt_123…
 ```
 
-(Blueprints also self-adopt by name on first `create`, so an explicit import is
-usually unnecessary — a plain `pulumi up` will reconcile the live blueprint.)
+(Agents also self-adopt by name on first `create`, so an explicit import is
+usually unnecessary — a plain `pulumi up` will reconcile the live agent.)
 
 ## Notes
 

package/dist/connection.d.ts

@@ -3,7 +3,7 @@
  * program can spread it into every resource:
  *
  *   const conn = connectionFromConfig();
- *   new ic.IcBlueprint("assistant", { ...conn, name: "…", instructions: "…" });
+ *   new ic.IcAgent("assistant", { ...conn, name: "…", instructions: "…" });
  *
  * Resolution order (first hit wins):
  *   baseUrl: `ingram-cloud:baseUrl` config → IC_BASE_URL → CLOUD_BASE_URL → prod

package/dist/connection.js

@@ -40,7 +40,7 @@ exports.connectionFromConfig = connectionFromConfig;
  * program can spread it into every resource:
  *
  *   const conn = connectionFromConfig();
- *   new ic.IcBlueprint("assistant", { ...conn, name: "…", instructions: "…" });
+ *   new ic.IcAgent("assistant", { ...conn, name: "…", instructions: "…" });
  *
  * Resolution order (first hit wins):
  *   baseUrl: `ingram-cloud:baseUrl` config → IC_BASE_URL → CLOUD_BASE_URL → prod

package/dist/index.d.ts

@@ -2,7 +2,7 @@
  * @ingram-tech/pulumi-ingram-cloud
  *
  * Pulumi dynamic resources for the Ingram Cloud /v1 API. See README.md for the
- * repo-interaction model (library here, blueprints declared in app repos,
+ * repo-interaction model (library here, agents declared in app repos,
  * channel/tenant config in the infra repo).
  */
 export * from "./resources";

package/dist/index.js

@@ -18,7 +18,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
  * @ingram-tech/pulumi-ingram-cloud
  *
  * Pulumi dynamic resources for the Ingram Cloud /v1 API. See README.md for the
- * repo-interaction model (library here, blueprints declared in app repos,
+ * repo-interaction model (library here, agents declared in app repos,
  * channel/tenant config in the infra repo).
  */
 __exportStar(require("./resources"), exports);

package/dist/resources.d.ts

@@ -1,7 +1,7 @@
 /**
  * Ingram Cloud /v1 tenant configuration as Pulumi dynamic resources.
  *
- * Replaces the per-app `scripts/register-*.ts` / `ensure-blueprint.ts` one-shots
+ * Replaces the per-app `scripts/register-*.ts` / `ensure-agent.ts` one-shots
  * with declarative resources, so IC wiring is a `pulumi up` and lives in state
  * instead of drifting in someone's shell history.
  *
@@ -10,7 +10,7 @@
  * additional secret output so it's encrypted in state.
  *
  * Where each resource is meant to be declared:
- *   - **Blueprints** (`IcBlueprint`) — the `instructions` are app-owned *content*,
+ *   - **Agents** (`IcAgent`) — the `instructions` are app-owned *content*,
  *     so declare these in the APP repo's Pulumi program, sourced from the app's
  *     own spec module. Never copy prompts into the infra repo.
  *   - **Channels / tenant config** (`IcMcpServer`, `IcTelegramBot`,
@@ -21,9 +21,9 @@
  * Not modelled here, on purpose:
  *   - **Per-end-user actions** — creating users, binding channels, pushing
  *     per-user connection tokens, minting user tokens — happen at app runtime.
- *   - **Attaching existing principals to a blueprint** — a one-time backfill that
+ *   - **Attaching existing smiths to an agent** — a one-time backfill that
  *     mutates the live fleet; keep it as the app's migration script. New
- *     principals attach at birth in app code.
+ *     smiths attach at birth in app code.
  *   - **Slack app factory** — config-token rotation is stateful and app-driven.
  */
 import * as pulumi from "@pulumi/pulumi";
@@ -32,34 +32,34 @@ import * as pulumi from "@pulumi/pulumi";
  * library version bump — consumers pin behaviour by pinning this package.
  */
 export declare const IC_API_VERSION = "2026-05-01";
-export interface BlueprintVariable {
+export interface AgentVariable {
     name: string;
     default?: string | null;
     description?: string | null;
     required?: boolean;
 }
-export interface IcBlueprintArgs {
+export interface IcAgentArgs {
     baseUrl: pulumi.Input<string>;
     token: pulumi.Input<string>;
-    /** Tenant-unique blueprint name (the create/adopt key). */
+    /** Tenant-unique agent name (the create/adopt key). */
     name: pulumi.Input<string>;
     /** The persona/instruction template (may contain `{{ variables }}`). */
     instructions?: pulumi.Input<string>;
     model?: pulumi.Input<string>;
     enabledHostedTools?: pulumi.Input<string[]>;
     autoMemory?: pulumi.Input<boolean>;
-    variables?: pulumi.Input<BlueprintVariable[]>;
+    variables?: pulumi.Input<AgentVariable[]>;
     /** Release note recorded when a new version is published. */
     publishNote?: pulumi.Input<string>;
     /** Rollout percentage for the published version (default 100). */
     rolloutPercent?: pulumi.Input<number>;
 }
-export declare class IcBlueprint extends pulumi.dynamic.Resource {
-    /** The `bp_…` id (same as `.id`, exposed for convenience). */
-    readonly blueprintId: pulumi.Output<string>;
+export declare class IcAgent extends pulumi.dynamic.Resource {
+    /** The `agt_…` id (same as `.id`, exposed for convenience). */
+    readonly agentId: pulumi.Output<string>;
     /** The version number currently rolled out. */
     readonly activeVersion: pulumi.Output<number>;
-    constructor(name: string, args: IcBlueprintArgs, opts?: pulumi.CustomResourceOptions);
+    constructor(name: string, args: IcAgentArgs, opts?: pulumi.CustomResourceOptions);
 }
 export interface IcMcpServerArgs {
     baseUrl: pulumi.Input<string>;

package/dist/resources.js

@@ -33,11 +33,11 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.IcSecret = exports.IcModelKey = exports.IcWebhook = exports.IcWhatsAppConfig = exports.IcTelegramBot = exports.IcMcpServer = exports.IcBlueprint = exports.IC_API_VERSION = void 0;
+exports.IcSecret = exports.IcModelKey = exports.IcWebhook = exports.IcWhatsAppConfig = exports.IcTelegramBot = exports.IcMcpServer = exports.IcAgent = exports.IC_API_VERSION = void 0;
 /**
  * Ingram Cloud /v1 tenant configuration as Pulumi dynamic resources.
  *
- * Replaces the per-app `scripts/register-*.ts` / `ensure-blueprint.ts` one-shots
+ * Replaces the per-app `scripts/register-*.ts` / `ensure-agent.ts` one-shots
  * with declarative resources, so IC wiring is a `pulumi up` and lives in state
  * instead of drifting in someone's shell history.
  *
@@ -46,7 +46,7 @@ exports.IcSecret = exports.IcModelKey = exports.IcWebhook = exports.IcWhatsAppCo
  * additional secret output so it's encrypted in state.
  *
  * Where each resource is meant to be declared:
- *   - **Blueprints** (`IcBlueprint`) — the `instructions` are app-owned *content*,
+ *   - **Agents** (`IcAgent`) — the `instructions` are app-owned *content*,
  *     so declare these in the APP repo's Pulumi program, sourced from the app's
  *     own spec module. Never copy prompts into the infra repo.
  *   - **Channels / tenant config** (`IcMcpServer`, `IcTelegramBot`,
@@ -57,9 +57,9 @@ exports.IcSecret = exports.IcModelKey = exports.IcWebhook = exports.IcWhatsAppCo
  * Not modelled here, on purpose:
  *   - **Per-end-user actions** — creating users, binding channels, pushing
  *     per-user connection tokens, minting user tokens — happen at app runtime.
- *   - **Attaching existing principals to a blueprint** — a one-time backfill that
+ *   - **Attaching existing smiths to an agent** — a one-time backfill that
  *     mutates the live fleet; keep it as the app's migration script. New
- *     principals attach at birth in app code.
+ *     smiths attach at birth in app code.
  *   - **Slack app factory** — config-token rotation is stateful and app-driven.
  */
 const pulumi = __importStar(require("@pulumi/pulumi"));
@@ -91,7 +91,7 @@ async function icRequest(baseUrl, token, method, path, body, idempotencyKey) {
     return text ? JSON.parse(text) : {};
 }
 // The draft body IC's create/patch expect (snake_case wire shape).
-function blueprintBody(i) {
+function agentBody(i) {
     return {
         name: i.name,
         instructions: i.instructions ?? null,
@@ -103,7 +103,7 @@ function blueprintBody(i) {
 }
 // Stable signature of the *content* that warrants a new published version
 // (name and rollout% deliberately excluded — a rename/restage is not new content).
-function blueprintContentSig(i) {
+function agentContentSig(i) {
     return JSON.stringify({
         instructions: i.instructions ?? null,
         model: i.model ?? null,
@@ -112,8 +112,8 @@ function blueprintContentSig(i) {
         variables: i.variables ?? [],
     });
 }
-async function findBlueprintByName(baseUrl, token, name) {
-    const res = await icRequest(baseUrl, token, "GET", "/v1/blueprints");
+async function findAgentByName(baseUrl, token, name) {
+    const res = await icRequest(baseUrl, token, "GET", "/v1/agents");
     return (res.data ?? []).find((b) => b.name === name) ?? null;
 }
 // Signature of the snapshot currently published as the active version, or null
@@ -121,12 +121,12 @@ async function findBlueprintByName(baseUrl, token, name) {
 async function activeSnapshotSig(baseUrl, token, id, activeVersion) {
     if (!activeVersion)
         return null;
-    const res = await icRequest(baseUrl, token, "GET", `/v1/blueprints/${id}/versions`);
+    const res = await icRequest(baseUrl, token, "GET", `/v1/agents/${id}/versions`);
     const v = (res.data ?? []).find((x) => x.version === activeVersion);
     if (!v)
         return null;
     const s = v.snapshot ?? {};
-    return blueprintContentSig({
+    return agentContentSig({
         instructions: s.instructions,
         model: s.model,
         enabledHostedTools: s.enabled_hosted_tools,
@@ -134,15 +134,15 @@ async function activeSnapshotSig(baseUrl, token, id, activeVersion) {
         variables: s.variables,
     });
 }
-// Ensure the live blueprint matches desired: adopt-or-create, publish iff the
+// Ensure the live agent matches desired: adopt-or-create, publish iff the
 // content drifted from the active version, then roll out at `percent`.
-async function reconcileBlueprint(i, knownId, priorSig) {
+async function reconcileAgent(i, knownId, priorSig) {
     let id;
     if (!knownId) {
-        const existing = await findBlueprintByName(i.baseUrl, i.token, i.name);
+        const existing = await findAgentByName(i.baseUrl, i.token, i.name);
         if (existing) {
             id = existing.id;
-            await icRequest(i.baseUrl, i.token, "PATCH", `/v1/blueprints/${id}`, blueprintBody(i));
+            await icRequest(i.baseUrl, i.token, "PATCH", `/v1/agents/${id}`, agentBody(i));
         }
         else {
             // No idempotency key: Pulumi calls create once and tracks the id in
@@ -150,19 +150,19 @@ async function reconcileBlueprint(i, knownId, priorSig) {
             // script→Pulumi migration. Keying on the name would replay a stale
             // (possibly archived) create after a destroy+recreate within the 24h
             // idempotency window.
-            const bp = await icRequest(i.baseUrl, i.token, "POST", "/v1/blueprints", blueprintBody(i));
+            const bp = await icRequest(i.baseUrl, i.token, "POST", "/v1/agents", agentBody(i));
             id = bp.id;
         }
     }
     else {
         // Known id (update path): push the draft to the desired shape.
         id = knownId;
-        await icRequest(i.baseUrl, i.token, "PATCH", `/v1/blueprints/${id}`, blueprintBody(i));
+        await icRequest(i.baseUrl, i.token, "PATCH", `/v1/agents/${id}`, agentBody(i));
     }
-    const bp = await icRequest(i.baseUrl, i.token, "GET", `/v1/blueprints/${id}`);
-    const desiredSig = blueprintContentSig(i);
+    const bp = await icRequest(i.baseUrl, i.token, "GET", `/v1/agents/${id}`);
+    const desiredSig = agentContentSig(i);
     // On the create path we don't know the prior sig — compare to what's actually
-    // published so adopting a script-made blueprint doesn't churn a needless version.
+    // published so adopting a script-made agent doesn't churn a needless version.
     const liveSig = priorSig ?? (await activeSnapshotSig(i.baseUrl, i.token, id, bp.active_version));
     let version = bp.active_version ?? 0;
     if (!bp.active_version || liveSig !== desiredSig) {
@@ -170,7 +170,7 @@ async function reconcileBlueprint(i, knownId, priorSig) {
         // its number. Only the *first* publish auto-activates; later ones go live
         // only via the rollout below — so take the version from the publish reply,
         // not from active_version (which hasn't advanced yet).
-        const pub = await icRequest(i.baseUrl, i.token, "POST", `/v1/blueprints/${id}/versions`, {
+        const pub = await icRequest(i.baseUrl, i.token, "POST", `/v1/agents/${id}/versions`, {
             note: i.publishNote ?? null,
         });
         version = pub.version;
@@ -178,43 +178,43 @@ async function reconcileBlueprint(i, knownId, priorSig) {
     // Always assert the rollout: it activates a freshly published version and is
     // an idempotent no-op when `version` is already the active one at `percent`.
     const percent = i.rolloutPercent ?? 100;
-    await icRequest(i.baseUrl, i.token, "POST", `/v1/blueprints/${id}/rollout`, { version, percent });
+    await icRequest(i.baseUrl, i.token, "POST", `/v1/agents/${id}/rollout`, { version, percent });
     return {
         ...i,
-        blueprintId: id,
+        agentId: id,
         contentSig: desiredSig,
         activeVersion: version,
         rolloutPercent: percent,
     };
 }
-const blueprintProvider = {
+const agentProvider = {
     async create(i) {
-        const outs = await reconcileBlueprint(i);
-        return { id: outs.blueprintId, outs };
+        const outs = await reconcileAgent(i);
+        return { id: outs.agentId, outs };
     },
     async update(id, olds, news) {
-        const outs = await reconcileBlueprint(news, id, olds.contentSig);
+        const outs = await reconcileAgent(news, id, olds.contentSig);
         return { outs };
     },
     async delete(id, props) {
         try {
-            await icRequest(props.baseUrl, props.token, "DELETE", `/v1/blueprints/${id}`);
+            await icRequest(props.baseUrl, props.token, "DELETE", `/v1/agents/${id}`);
         }
         catch (e) {
-            throw new Error(`Blueprint ${id} could not be archived (it likely still has users attached). ` +
+            throw new Error(`Agent ${id} could not be archived (it likely still has smiths attached). ` +
                 `Detach its users first, or set { retainOnDelete: true } on the resource. ` +
                 `Original error: ${e}`);
         }
     },
     async diff(_id, olds, news) {
-        const contentChanged = blueprintContentSig(olds) !== blueprintContentSig(news);
+        const contentChanged = agentContentSig(olds) !== agentContentSig(news);
         const nameChanged = olds.name !== news.name;
         const rolloutChanged = (olds.rolloutPercent ?? 100) !== (news.rolloutPercent ?? 100);
         return { changes: contentChanged || nameChanged || rolloutChanged };
     },
-    // Adopt a blueprint a script already created (`pulumi import <id>`).
+    // Adopt a agent a script already created (`pulumi import <id>`).
     async read(id, props) {
-        const bp = await icRequest(props.baseUrl, props.token, "GET", `/v1/blueprints/${id}`);
+        const bp = await icRequest(props.baseUrl, props.token, "GET", `/v1/agents/${id}`);
         if (!bp || !bp.id)
             return { id, props: props };
         const d = bp.draft ?? {};
@@ -232,9 +232,9 @@ const blueprintProvider = {
         };
     },
 };
-class IcBlueprint extends pulumi.dynamic.Resource {
+class IcAgent extends pulumi.dynamic.Resource {
     constructor(name, args, opts) {
-        super(blueprintProvider, name, {
+        super(agentProvider, name, {
             instructions: undefined,
             model: undefined,
             enabledHostedTools: undefined,
@@ -242,14 +242,14 @@ class IcBlueprint extends pulumi.dynamic.Resource {
             variables: undefined,
             publishNote: undefined,
             rolloutPercent: undefined,
-            blueprintId: undefined,
+            agentId: undefined,
             activeVersion: undefined,
             contentSig: undefined,
             ...args,
         }, { ...opts, additionalSecretOutputs: ["token"] });
     }
 }
-exports.IcBlueprint = IcBlueprint;
+exports.IcAgent = IcAgent;
 function mcpBody(i) {
     const auth = { kind: i.authKind };
     if (i.authProvider)

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@ingram-tech/pulumi-ingram-cloud",
-	"version": "0.1.0",
-	"description": "Pulumi dynamic resources for the Ingram Cloud /v1 API — blueprints, MCP servers, channels, webhooks, model keys.",
+	"version": "0.2.0",
+	"description": "Pulumi dynamic resources for the Ingram Cloud /v1 API — agents, MCP servers, channels, webhooks, model keys.",
 	"license": "MIT",
 	"repository": {
 		"type": "git",