@pulumi/pulumiservice 0.35.0 → 0.38.0

package/buildEnvironmentScopedPermissions.d.ts

@@ -0,0 +1,41 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Builds an `OrganizationRole.permissions` descriptor that grants the supplied scopes only on the named environment. Pair with `Environment.environmentId` (or the `getEnvironment` data source) to avoid hand-rolling the underlying `PermissionDescriptorGroup` / `PermissionDescriptorCondition` / `PermissionLiteralExpressionEnvironment` JSON. The result is directly assignable to `OrganizationRole.permissions`. To grant scopes on more than one entity in a single role, hand-roll a `PermissionDescriptorGroup` whose `entries` list pulls a `PermissionDescriptorCondition` from each helper output.
+ */
+export declare function buildEnvironmentScopedPermissions(args: BuildEnvironmentScopedPermissionsArgs, opts?: pulumi.InvokeOptions): Promise<BuildEnvironmentScopedPermissionsResult>;
+export interface BuildEnvironmentScopedPermissionsArgs {
+    /**
+     * The target environment's UUID. Use the `environmentId` output of an `Environment` resource or the `getEnvironment` data source.
+     */
+    environmentId: string;
+    /**
+     * The set of `environment:*` scopes to grant on the target environment (e.g. `environment:read`, `environment:open`, `environment:update`). Discover valid scope names via the `getOrganizationRoleScopes` data source.
+     */
+    permissions: string[];
+}
+export interface BuildEnvironmentScopedPermissionsResult {
+    /**
+     * A `PermissionDescriptor` tree ready to assign to `OrganizationRole.permissions`.
+     */
+    readonly permissions: {
+        [key: string]: any;
+    };
+    /**
+     * A JSON-encoded copy of `permissions`. Pulumi's Python SDK strips `__`-prefixed keys from invoke responses (see `pulumi/sdk` Python `runtime/rpc.py:deserialize_property`), so the structured `permissions` Mapping arrives at downstream resources missing every `__type` discriminator and Pulumi Cloud rejects it. Python users should consume `permissionsJson` and `.apply(json.loads)` it instead — that re-creates the dict on the input path (`serialize_property`), which preserves `__` keys. TypeScript/Yaml/Go/.NET/Java callers can use either field; `permissions` is the more ergonomic default.
+     */
+    readonly permissionsJson: string;
+}
+/**
+ * Builds an `OrganizationRole.permissions` descriptor that grants the supplied scopes only on the named environment. Pair with `Environment.environmentId` (or the `getEnvironment` data source) to avoid hand-rolling the underlying `PermissionDescriptorGroup` / `PermissionDescriptorCondition` / `PermissionLiteralExpressionEnvironment` JSON. The result is directly assignable to `OrganizationRole.permissions`. To grant scopes on more than one entity in a single role, hand-roll a `PermissionDescriptorGroup` whose `entries` list pulls a `PermissionDescriptorCondition` from each helper output.
+ */
+export declare function buildEnvironmentScopedPermissionsOutput(args: BuildEnvironmentScopedPermissionsOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<BuildEnvironmentScopedPermissionsResult>;
+export interface BuildEnvironmentScopedPermissionsOutputArgs {
+    /**
+     * The target environment's UUID. Use the `environmentId` output of an `Environment` resource or the `getEnvironment` data source.
+     */
+    environmentId: pulumi.Input<string>;
+    /**
+     * The set of `environment:*` scopes to grant on the target environment (e.g. `environment:read`, `environment:open`, `environment:update`). Discover valid scope names via the `getOrganizationRoleScopes` data source.
+     */
+    permissions: pulumi.Input<pulumi.Input<string>[]>;
+}

package/buildEnvironmentScopedPermissions.js

@@ -0,0 +1,30 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildEnvironmentScopedPermissionsOutput = exports.buildEnvironmentScopedPermissions = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * Builds an `OrganizationRole.permissions` descriptor that grants the supplied scopes only on the named environment. Pair with `Environment.environmentId` (or the `getEnvironment` data source) to avoid hand-rolling the underlying `PermissionDescriptorGroup` / `PermissionDescriptorCondition` / `PermissionLiteralExpressionEnvironment` JSON. The result is directly assignable to `OrganizationRole.permissions`. To grant scopes on more than one entity in a single role, hand-roll a `PermissionDescriptorGroup` whose `entries` list pulls a `PermissionDescriptorCondition` from each helper output.
+ */
+function buildEnvironmentScopedPermissions(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("pulumiservice:index:buildEnvironmentScopedPermissions", {
+        "environmentId": args.environmentId,
+        "permissions": args.permissions,
+    }, opts);
+}
+exports.buildEnvironmentScopedPermissions = buildEnvironmentScopedPermissions;
+/**
+ * Builds an `OrganizationRole.permissions` descriptor that grants the supplied scopes only on the named environment. Pair with `Environment.environmentId` (or the `getEnvironment` data source) to avoid hand-rolling the underlying `PermissionDescriptorGroup` / `PermissionDescriptorCondition` / `PermissionLiteralExpressionEnvironment` JSON. The result is directly assignable to `OrganizationRole.permissions`. To grant scopes on more than one entity in a single role, hand-roll a `PermissionDescriptorGroup` whose `entries` list pulls a `PermissionDescriptorCondition` from each helper output.
+ */
+function buildEnvironmentScopedPermissionsOutput(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("pulumiservice:index:buildEnvironmentScopedPermissions", {
+        "environmentId": args.environmentId,
+        "permissions": args.permissions,
+    }, opts);
+}
+exports.buildEnvironmentScopedPermissionsOutput = buildEnvironmentScopedPermissionsOutput;
+//# sourceMappingURL=buildEnvironmentScopedPermissions.js.map

package/buildEnvironmentScopedPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildEnvironmentScopedPermissions.js","sourceRoot":"","sources":["../buildEnvironmentScopedPermissions.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;GAEG;AACH,SAAgB,iCAAiC,CAAC,IAA2C,EAAE,IAA2B;IACtH,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,uDAAuD,EAAE;QAClF,eAAe,EAAE,IAAI,CAAC,aAAa;QACnC,aAAa,EAAE,IAAI,CAAC,WAAW;KAClC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,8EAMC;AAuBD;;GAEG;AACH,SAAgB,uCAAuC,CAAC,IAAiD,EAAE,IAAiC;IACxI,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,uDAAuD,EAAE;QACxF,eAAe,EAAE,IAAI,CAAC,aAAa;QACnC,aAAa,EAAE,IAAI,CAAC,WAAW;KAClC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,0FAMC"}

package/buildInsightsAccountScopedPermissions.d.ts

@@ -0,0 +1,41 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Builds an `OrganizationRole.permissions` descriptor that grants the supplied scopes only on the named insights account. Pair with `InsightsAccount.insightsAccountId` (or the `getInsightsAccount` data source) to avoid hand-rolling the underlying `PermissionLiteralExpressionInsightsAccount` JSON. The result is directly assignable to `OrganizationRole.permissions`. To grant scopes on more than one entity in a single role, hand-roll a `PermissionDescriptorGroup` whose `entries` list pulls a `PermissionDescriptorCondition` from each helper output.
+ */
+export declare function buildInsightsAccountScopedPermissions(args: BuildInsightsAccountScopedPermissionsArgs, opts?: pulumi.InvokeOptions): Promise<BuildInsightsAccountScopedPermissionsResult>;
+export interface BuildInsightsAccountScopedPermissionsArgs {
+    /**
+     * The target insights account's identifier. Use the `insightsAccountId` output of an `InsightsAccount` resource or the `getInsightsAccount` data source.
+     */
+    insightsAccountId: string;
+    /**
+     * The set of `insights-account:*` scopes to grant on the target account. Discover valid scope names via the `getOrganizationRoleScopes` data source.
+     */
+    permissions: string[];
+}
+export interface BuildInsightsAccountScopedPermissionsResult {
+    /**
+     * A `PermissionDescriptor` tree ready to assign to `OrganizationRole.permissions`.
+     */
+    readonly permissions: {
+        [key: string]: any;
+    };
+    /**
+     * A JSON-encoded copy of `permissions`. Pulumi's Python SDK strips `__`-prefixed keys from invoke responses (see `pulumi/sdk` Python `runtime/rpc.py:deserialize_property`), so the structured `permissions` Mapping arrives at downstream resources missing every `__type` discriminator and Pulumi Cloud rejects it. Python users should consume `permissionsJson` and `.apply(json.loads)` it instead — that re-creates the dict on the input path (`serialize_property`), which preserves `__` keys. TypeScript/Yaml/Go/.NET/Java callers can use either field; `permissions` is the more ergonomic default.
+     */
+    readonly permissionsJson: string;
+}
+/**
+ * Builds an `OrganizationRole.permissions` descriptor that grants the supplied scopes only on the named insights account. Pair with `InsightsAccount.insightsAccountId` (or the `getInsightsAccount` data source) to avoid hand-rolling the underlying `PermissionLiteralExpressionInsightsAccount` JSON. The result is directly assignable to `OrganizationRole.permissions`. To grant scopes on more than one entity in a single role, hand-roll a `PermissionDescriptorGroup` whose `entries` list pulls a `PermissionDescriptorCondition` from each helper output.
+ */
+export declare function buildInsightsAccountScopedPermissionsOutput(args: BuildInsightsAccountScopedPermissionsOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<BuildInsightsAccountScopedPermissionsResult>;
+export interface BuildInsightsAccountScopedPermissionsOutputArgs {
+    /**
+     * The target insights account's identifier. Use the `insightsAccountId` output of an `InsightsAccount` resource or the `getInsightsAccount` data source.
+     */
+    insightsAccountId: pulumi.Input<string>;
+    /**
+     * The set of `insights-account:*` scopes to grant on the target account. Discover valid scope names via the `getOrganizationRoleScopes` data source.
+     */
+    permissions: pulumi.Input<pulumi.Input<string>[]>;
+}

package/buildInsightsAccountScopedPermissions.js

@@ -0,0 +1,30 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildInsightsAccountScopedPermissionsOutput = exports.buildInsightsAccountScopedPermissions = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * Builds an `OrganizationRole.permissions` descriptor that grants the supplied scopes only on the named insights account. Pair with `InsightsAccount.insightsAccountId` (or the `getInsightsAccount` data source) to avoid hand-rolling the underlying `PermissionLiteralExpressionInsightsAccount` JSON. The result is directly assignable to `OrganizationRole.permissions`. To grant scopes on more than one entity in a single role, hand-roll a `PermissionDescriptorGroup` whose `entries` list pulls a `PermissionDescriptorCondition` from each helper output.
+ */
+function buildInsightsAccountScopedPermissions(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("pulumiservice:index:buildInsightsAccountScopedPermissions", {
+        "insightsAccountId": args.insightsAccountId,
+        "permissions": args.permissions,
+    }, opts);
+}
+exports.buildInsightsAccountScopedPermissions = buildInsightsAccountScopedPermissions;
+/**
+ * Builds an `OrganizationRole.permissions` descriptor that grants the supplied scopes only on the named insights account. Pair with `InsightsAccount.insightsAccountId` (or the `getInsightsAccount` data source) to avoid hand-rolling the underlying `PermissionLiteralExpressionInsightsAccount` JSON. The result is directly assignable to `OrganizationRole.permissions`. To grant scopes on more than one entity in a single role, hand-roll a `PermissionDescriptorGroup` whose `entries` list pulls a `PermissionDescriptorCondition` from each helper output.
+ */
+function buildInsightsAccountScopedPermissionsOutput(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("pulumiservice:index:buildInsightsAccountScopedPermissions", {
+        "insightsAccountId": args.insightsAccountId,
+        "permissions": args.permissions,
+    }, opts);
+}
+exports.buildInsightsAccountScopedPermissionsOutput = buildInsightsAccountScopedPermissionsOutput;
+//# sourceMappingURL=buildInsightsAccountScopedPermissions.js.map

package/buildInsightsAccountScopedPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildInsightsAccountScopedPermissions.js","sourceRoot":"","sources":["../buildInsightsAccountScopedPermissions.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;GAEG;AACH,SAAgB,qCAAqC,CAAC,IAA+C,EAAE,IAA2B;IAC9H,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,2DAA2D,EAAE;QACtF,mBAAmB,EAAE,IAAI,CAAC,iBAAiB;QAC3C,aAAa,EAAE,IAAI,CAAC,WAAW;KAClC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,sFAMC;AAuBD;;GAEG;AACH,SAAgB,2CAA2C,CAAC,IAAqD,EAAE,IAAiC;IAChJ,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,2DAA2D,EAAE;QAC5F,mBAAmB,EAAE,IAAI,CAAC,iBAAiB;QAC3C,aAAa,EAAE,IAAI,CAAC,WAAW;KAClC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,kGAMC"}

package/buildStackScopedPermissions.d.ts

@@ -0,0 +1,41 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Builds an `OrganizationRole.permissions` descriptor that grants the supplied scopes only on the named stack. The `stackId` is the stack's opaque Pulumi Cloud identifier — distinct from the `organization/project/stack` triple — and is what `PermissionLiteralExpressionStack` expects. The result is directly assignable to `OrganizationRole.permissions`. To grant scopes on more than one entity in a single role, hand-roll a `PermissionDescriptorGroup` whose `entries` list pulls a `PermissionDescriptorCondition` from each helper output.
+ */
+export declare function buildStackScopedPermissions(args: BuildStackScopedPermissionsArgs, opts?: pulumi.InvokeOptions): Promise<BuildStackScopedPermissionsResult>;
+export interface BuildStackScopedPermissionsArgs {
+    /**
+     * The set of `stack:*` scopes to grant on the target stack (e.g. `stack:read`, `stack:edit`, `stack:admin`). Discover valid scope names via the `getOrganizationRoleScopes` data source.
+     */
+    permissions: string[];
+    /**
+     * The target stack's opaque Pulumi Cloud identifier (not the `organization/project/stack` triple).
+     */
+    stackId: string;
+}
+export interface BuildStackScopedPermissionsResult {
+    /**
+     * A `PermissionDescriptor` tree ready to assign to `OrganizationRole.permissions`.
+     */
+    readonly permissions: {
+        [key: string]: any;
+    };
+    /**
+     * A JSON-encoded copy of `permissions`. Pulumi's Python SDK strips `__`-prefixed keys from invoke responses (see `pulumi/sdk` Python `runtime/rpc.py:deserialize_property`), so the structured `permissions` Mapping arrives at downstream resources missing every `__type` discriminator and Pulumi Cloud rejects it. Python users should consume `permissionsJson` and `.apply(json.loads)` it instead — that re-creates the dict on the input path (`serialize_property`), which preserves `__` keys. TypeScript/Yaml/Go/.NET/Java callers can use either field; `permissions` is the more ergonomic default.
+     */
+    readonly permissionsJson: string;
+}
+/**
+ * Builds an `OrganizationRole.permissions` descriptor that grants the supplied scopes only on the named stack. The `stackId` is the stack's opaque Pulumi Cloud identifier — distinct from the `organization/project/stack` triple — and is what `PermissionLiteralExpressionStack` expects. The result is directly assignable to `OrganizationRole.permissions`. To grant scopes on more than one entity in a single role, hand-roll a `PermissionDescriptorGroup` whose `entries` list pulls a `PermissionDescriptorCondition` from each helper output.
+ */
+export declare function buildStackScopedPermissionsOutput(args: BuildStackScopedPermissionsOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<BuildStackScopedPermissionsResult>;
+export interface BuildStackScopedPermissionsOutputArgs {
+    /**
+     * The set of `stack:*` scopes to grant on the target stack (e.g. `stack:read`, `stack:edit`, `stack:admin`). Discover valid scope names via the `getOrganizationRoleScopes` data source.
+     */
+    permissions: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The target stack's opaque Pulumi Cloud identifier (not the `organization/project/stack` triple).
+     */
+    stackId: pulumi.Input<string>;
+}

package/buildStackScopedPermissions.js

@@ -0,0 +1,30 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildStackScopedPermissionsOutput = exports.buildStackScopedPermissions = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * Builds an `OrganizationRole.permissions` descriptor that grants the supplied scopes only on the named stack. The `stackId` is the stack's opaque Pulumi Cloud identifier — distinct from the `organization/project/stack` triple — and is what `PermissionLiteralExpressionStack` expects. The result is directly assignable to `OrganizationRole.permissions`. To grant scopes on more than one entity in a single role, hand-roll a `PermissionDescriptorGroup` whose `entries` list pulls a `PermissionDescriptorCondition` from each helper output.
+ */
+function buildStackScopedPermissions(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("pulumiservice:index:buildStackScopedPermissions", {
+        "permissions": args.permissions,
+        "stackId": args.stackId,
+    }, opts);
+}
+exports.buildStackScopedPermissions = buildStackScopedPermissions;
+/**
+ * Builds an `OrganizationRole.permissions` descriptor that grants the supplied scopes only on the named stack. The `stackId` is the stack's opaque Pulumi Cloud identifier — distinct from the `organization/project/stack` triple — and is what `PermissionLiteralExpressionStack` expects. The result is directly assignable to `OrganizationRole.permissions`. To grant scopes on more than one entity in a single role, hand-roll a `PermissionDescriptorGroup` whose `entries` list pulls a `PermissionDescriptorCondition` from each helper output.
+ */
+function buildStackScopedPermissionsOutput(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("pulumiservice:index:buildStackScopedPermissions", {
+        "permissions": args.permissions,
+        "stackId": args.stackId,
+    }, opts);
+}
+exports.buildStackScopedPermissionsOutput = buildStackScopedPermissionsOutput;
+//# sourceMappingURL=buildStackScopedPermissions.js.map

package/buildStackScopedPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildStackScopedPermissions.js","sourceRoot":"","sources":["../buildStackScopedPermissions.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;GAEG;AACH,SAAgB,2BAA2B,CAAC,IAAqC,EAAE,IAA2B;IAC1G,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,iDAAiD,EAAE;QAC5E,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,SAAS,EAAE,IAAI,CAAC,OAAO;KAC1B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,kEAMC;AAuBD;;GAEG;AACH,SAAgB,iCAAiC,CAAC,IAA2C,EAAE,IAAiC;IAC5H,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,iDAAiD,EAAE;QAClF,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,SAAS,EAAE,IAAI,CAAC,OAAO;KAC1B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,8EAMC"}

package/environment.d.ts

@@ -17,6 +17,10 @@ export declare class Environment extends pulumi.CustomResource {
      * when multiple copies of the Pulumi SDK have been loaded into the same process.
      */
     static isInstance(obj: any): obj is Environment;
+    /**
+     * The environment's UUID. Use this as the `identity` value when pinning a custom RBAC role to this environment via a `PermissionLiteralExpressionEnvironment` expression in `OrganizationRole.permissions`.
+     */
+    readonly environmentId: pulumi.Output<string | undefined>;
     /**
      * Environment name.
      */

package/environment.js

@@ -54,9 +54,11 @@ class Environment extends pulumi.CustomResource {
             resourceInputs["organization"] = args?.organization;
             resourceInputs["project"] = (args?.project) ?? "default";
             resourceInputs["yaml"] = args?.yaml;
+            resourceInputs["environmentId"] = undefined /*out*/;
             resourceInputs["revision"] = undefined /*out*/;
         }
         else {
+            resourceInputs["environmentId"] = undefined /*out*/;
             resourceInputs["name"] = undefined /*out*/;
             resourceInputs["organization"] = undefined /*out*/;
             resourceInputs["project"] = undefined /*out*/;

package/environment.js.map

@@ -1 +1 @@
-{"version":3,"file":"environment.js","sourceRoot":"","sources":["../environment.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;GAEG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;OAOG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,IAAmC;QAC5F,OAAO,IAAI,WAAW,CAAC,IAAI,EAAE,SAAgB,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;IAuBD;;;;;;OAMG;IACH,YAAY,IAAY,EAAE,IAAqB,EAAE,IAAmC;QAChF,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACV,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,IAAI,IAAI,EAAE,YAAY,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC/C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,SAAS,CAAC;YACzD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAClD;aAAM;YACH,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC9C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;;AAlFL,kCAmFC;AAtEG,gBAAgB;AACO,wBAAY,GAAG,iCAAiC,CAAC"}
+{"version":3,"file":"environment.js","sourceRoot":"","sources":["../environment.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;GAEG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;OAOG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,IAAmC;QAC5F,OAAO,IAAI,WAAW,CAAC,IAAI,EAAE,SAAgB,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;IA2BD;;;;;;OAMG;IACH,YAAY,IAAY,EAAE,IAAqB,EAAE,IAAmC;QAChF,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACV,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,IAAI,IAAI,EAAE,YAAY,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC/C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,SAAS,CAAC;YACzD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACpD,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAClD;aAAM;YACH,cAAc,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACpD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC9C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;;AAxFL,kCAyFC;AA5EG,gBAAgB;AACO,wBAAY,GAAG,iCAAiC,CAAC"}

package/getCurrentUser.d.ts

@@ -0,0 +1,29 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Returns the Pulumi Cloud user that the provider's access token belongs to. Useful for seeding a newly-created `Team` with the creator as a member, since Pulumi Cloud auto-adds the creator. Omitting this user from the team will result in a refresh drift.
+ */
+export declare function getCurrentUser(args?: GetCurrentUserArgs, opts?: pulumi.InvokeOptions): Promise<GetCurrentUserResult>;
+export interface GetCurrentUserArgs {
+}
+export interface GetCurrentUserResult {
+    /**
+     * URL of the user's avatar image.
+     */
+    readonly avatarUrl: string;
+    /**
+     * The user's email address.
+     */
+    readonly email: string;
+    /**
+     * The user's display name.
+     */
+    readonly name: string;
+    /**
+     * The user's Pulumi Cloud username.
+     */
+    readonly username: string;
+}
+/**
+ * Returns the Pulumi Cloud user that the provider's access token belongs to. Useful for seeding a newly-created `Team` with the creator as a member, since Pulumi Cloud auto-adds the creator. Omitting this user from the team will result in a refresh drift.
+ */
+export declare function getCurrentUserOutput(opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetCurrentUserResult>;

package/getCurrentUser.js

@@ -0,0 +1,25 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCurrentUserOutput = exports.getCurrentUser = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * Returns the Pulumi Cloud user that the provider's access token belongs to. Useful for seeding a newly-created `Team` with the creator as a member, since Pulumi Cloud auto-adds the creator. Omitting this user from the team will result in a refresh drift.
+ */
+function getCurrentUser(args, opts) {
+    args = args || {};
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("pulumiservice:index:getCurrentUser", {}, opts);
+}
+exports.getCurrentUser = getCurrentUser;
+/**
+ * Returns the Pulumi Cloud user that the provider's access token belongs to. Useful for seeding a newly-created `Team` with the creator as a member, since Pulumi Cloud auto-adds the creator. Omitting this user from the team will result in a refresh drift.
+ */
+function getCurrentUserOutput(opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("pulumiservice:index:getCurrentUser", {}, opts);
+}
+exports.getCurrentUserOutput = getCurrentUserOutput;
+//# sourceMappingURL=getCurrentUser.js.map

package/getCurrentUser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getCurrentUser.js","sourceRoot":"","sources":["../getCurrentUser.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;GAEG;AACH,SAAgB,cAAc,CAAC,IAAyB,EAAE,IAA2B;IACjF,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAClB,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,oCAAoC,EAAE,EAClE,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AALD,wCAKC;AAuBD;;GAEG;AACH,SAAgB,oBAAoB,CAAC,IAAiC;IAClE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,oCAAoC,EAAE,EACxE,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAJD,oDAIC"}

package/getEnvironment.d.ts

@@ -0,0 +1,55 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Looks up an existing ESC environment by name and returns its UUID. Use this to pin a custom RBAC role to a specific environment via `PermissionLiteralExpressionEnvironment` when the environment is not managed by the current Pulumi program. Errors when the environment is not found.
+ */
+export declare function getEnvironment(args: GetEnvironmentArgs, opts?: pulumi.InvokeOptions): Promise<GetEnvironmentResult>;
+export interface GetEnvironmentArgs {
+    /**
+     * The environment name.
+     */
+    name: string;
+    /**
+     * The Pulumi Cloud organization that owns the environment.
+     */
+    organizationName: string;
+    /**
+     * The ESC project name. Defaults to `default`.
+     */
+    projectName?: string;
+}
+export interface GetEnvironmentResult {
+    /**
+     * The environment's UUID. Use this as the `identity` value when pinning a custom RBAC role to this environment via a `PermissionLiteralExpressionEnvironment` expression.
+     */
+    readonly environmentId: string;
+    /**
+     * The environment name.
+     */
+    readonly name: string;
+    /**
+     * The Pulumi Cloud organization that owns the environment.
+     */
+    readonly organizationName: string;
+    /**
+     * The ESC project the environment lives in.
+     */
+    readonly projectName: string;
+}
+/**
+ * Looks up an existing ESC environment by name and returns its UUID. Use this to pin a custom RBAC role to a specific environment via `PermissionLiteralExpressionEnvironment` when the environment is not managed by the current Pulumi program. Errors when the environment is not found.
+ */
+export declare function getEnvironmentOutput(args: GetEnvironmentOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetEnvironmentResult>;
+export interface GetEnvironmentOutputArgs {
+    /**
+     * The environment name.
+     */
+    name: pulumi.Input<string>;
+    /**
+     * The Pulumi Cloud organization that owns the environment.
+     */
+    organizationName: pulumi.Input<string>;
+    /**
+     * The ESC project name. Defaults to `default`.
+     */
+    projectName?: pulumi.Input<string>;
+}

package/getEnvironment.js

@@ -0,0 +1,32 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getEnvironmentOutput = exports.getEnvironment = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * Looks up an existing ESC environment by name and returns its UUID. Use this to pin a custom RBAC role to a specific environment via `PermissionLiteralExpressionEnvironment` when the environment is not managed by the current Pulumi program. Errors when the environment is not found.
+ */
+function getEnvironment(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("pulumiservice:index:getEnvironment", {
+        "name": args.name,
+        "organizationName": args.organizationName,
+        "projectName": args.projectName,
+    }, opts);
+}
+exports.getEnvironment = getEnvironment;
+/**
+ * Looks up an existing ESC environment by name and returns its UUID. Use this to pin a custom RBAC role to a specific environment via `PermissionLiteralExpressionEnvironment` when the environment is not managed by the current Pulumi program. Errors when the environment is not found.
+ */
+function getEnvironmentOutput(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("pulumiservice:index:getEnvironment", {
+        "name": args.name,
+        "organizationName": args.organizationName,
+        "projectName": args.projectName,
+    }, opts);
+}
+exports.getEnvironmentOutput = getEnvironmentOutput;
+//# sourceMappingURL=getEnvironment.js.map

package/getEnvironment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getEnvironment.js","sourceRoot":"","sources":["../getEnvironment.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;GAEG;AACH,SAAgB,cAAc,CAAC,IAAwB,EAAE,IAA2B;IAChF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,oCAAoC,EAAE;QAC/D,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,kBAAkB,EAAE,IAAI,CAAC,gBAAgB;QACzC,aAAa,EAAE,IAAI,CAAC,WAAW;KAClC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAPD,wCAOC;AAmCD;;GAEG;AACH,SAAgB,oBAAoB,CAAC,IAA8B,EAAE,IAAiC;IAClG,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,oCAAoC,EAAE;QACrE,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,kBAAkB,EAAE,IAAI,CAAC,gBAAgB;QACzC,aAAa,EAAE,IAAI,CAAC,WAAW;KAClC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAPD,oDAOC"}

package/getInsightsAccount.d.ts

@@ -36,7 +36,7 @@ export interface GetInsightsAccountResult {
         [key: string]: any;
     };
     /**
-     * Schedule for automated scanning. Use 'daily' to enable daily scans, or 'none' to disable scheduled scanning. Defaults to 'none'.
+     * Schedule for automated scanning. Use 'daily' for daily scans, '12h' for scans every twelve hours, or 'none' to disable scheduled scanning. Defaults to 'none'.
      */
     readonly scanSchedule: enums.ScanSchedule;
     /**

package/getOrganizationMember.d.ts

@@ -0,0 +1,51 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Looks up a single member of a Pulumi Cloud organization by username (the backing identity-provider login, e.g. GitHub login). Returns an error when the member is not found.
+ */
+export declare function getOrganizationMember(args: GetOrganizationMemberArgs, opts?: pulumi.InvokeOptions): Promise<GetOrganizationMemberResult>;
+export interface GetOrganizationMemberArgs {
+    /**
+     * The name of the Pulumi organization.
+     */
+    organizationName: string;
+    /**
+     * The Pulumi Cloud username (backing identity-provider login) to look up.
+     */
+    username: string;
+}
+export interface GetOrganizationMemberResult {
+    /**
+     * The member's built-in role (member, admin, billing-manager). Absent when a custom role is assigned — check `roleId` in that case.
+     */
+    readonly role?: string;
+    /**
+     * The custom role ID assigned to this member, if any.
+     */
+    readonly roleId?: string;
+    /**
+     * The name of the currently assigned role (custom role name, or built-in role).
+     */
+    readonly roleName?: string;
+    /**
+     * The member's Pulumi Cloud username.
+     */
+    readonly username: string;
+    /**
+     * Whether this member is an admin in Pulumi Cloud without admin access on the backing identity provider.
+     */
+    readonly virtualAdmin: boolean;
+}
+/**
+ * Looks up a single member of a Pulumi Cloud organization by username (the backing identity-provider login, e.g. GitHub login). Returns an error when the member is not found.
+ */
+export declare function getOrganizationMemberOutput(args: GetOrganizationMemberOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetOrganizationMemberResult>;
+export interface GetOrganizationMemberOutputArgs {
+    /**
+     * The name of the Pulumi organization.
+     */
+    organizationName: pulumi.Input<string>;
+    /**
+     * The Pulumi Cloud username (backing identity-provider login) to look up.
+     */
+    username: pulumi.Input<string>;
+}

package/getOrganizationMember.js

@@ -0,0 +1,30 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getOrganizationMemberOutput = exports.getOrganizationMember = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * Looks up a single member of a Pulumi Cloud organization by username (the backing identity-provider login, e.g. GitHub login). Returns an error when the member is not found.
+ */
+function getOrganizationMember(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("pulumiservice:index:getOrganizationMember", {
+        "organizationName": args.organizationName,
+        "username": args.username,
+    }, opts);
+}
+exports.getOrganizationMember = getOrganizationMember;
+/**
+ * Looks up a single member of a Pulumi Cloud organization by username (the backing identity-provider login, e.g. GitHub login). Returns an error when the member is not found.
+ */
+function getOrganizationMemberOutput(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("pulumiservice:index:getOrganizationMember", {
+        "organizationName": args.organizationName,
+        "username": args.username,
+    }, opts);
+}
+exports.getOrganizationMemberOutput = getOrganizationMemberOutput;
+//# sourceMappingURL=getOrganizationMember.js.map

package/getOrganizationMember.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getOrganizationMember.js","sourceRoot":"","sources":["../getOrganizationMember.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;GAEG;AACH,SAAgB,qBAAqB,CAAC,IAA+B,EAAE,IAA2B;IAC9F,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,2CAA2C,EAAE;QACtE,kBAAkB,EAAE,IAAI,CAAC,gBAAgB;QACzC,UAAU,EAAE,IAAI,CAAC,QAAQ;KAC5B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,sDAMC;AAmCD;;GAEG;AACH,SAAgB,2BAA2B,CAAC,IAAqC,EAAE,IAAiC;IAChH,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,2CAA2C,EAAE;QAC5E,kBAAkB,EAAE,IAAI,CAAC,gBAAgB;QACzC,UAAU,EAAE,IAAI,CAAC,QAAQ;KAC5B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,kEAMC"}

package/getOrganizationMembers.d.ts

@@ -0,0 +1,25 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as outputs from "./types/output";
+/**
+ * Lists all members of a Pulumi Cloud organization, including their role assignments.
+ */
+export declare function getOrganizationMembers(args: GetOrganizationMembersArgs, opts?: pulumi.InvokeOptions): Promise<GetOrganizationMembersResult>;
+export interface GetOrganizationMembersArgs {
+    /**
+     * The name of the Pulumi organization.
+     */
+    organizationName: string;
+}
+export interface GetOrganizationMembersResult {
+    readonly members: outputs.OrganizationMemberInfo[];
+}
+/**
+ * Lists all members of a Pulumi Cloud organization, including their role assignments.
+ */
+export declare function getOrganizationMembersOutput(args: GetOrganizationMembersOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetOrganizationMembersResult>;
+export interface GetOrganizationMembersOutputArgs {
+    /**
+     * The name of the Pulumi organization.
+     */
+    organizationName: pulumi.Input<string>;
+}

package/getOrganizationMembers.js

@@ -0,0 +1,28 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getOrganizationMembersOutput = exports.getOrganizationMembers = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * Lists all members of a Pulumi Cloud organization, including their role assignments.
+ */
+function getOrganizationMembers(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("pulumiservice:index:getOrganizationMembers", {
+        "organizationName": args.organizationName,
+    }, opts);
+}
+exports.getOrganizationMembers = getOrganizationMembers;
+/**
+ * Lists all members of a Pulumi Cloud organization, including their role assignments.
+ */
+function getOrganizationMembersOutput(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("pulumiservice:index:getOrganizationMembers", {
+        "organizationName": args.organizationName,
+    }, opts);
+}
+exports.getOrganizationMembersOutput = getOrganizationMembersOutput;
+//# sourceMappingURL=getOrganizationMembers.js.map

package/getOrganizationMembers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getOrganizationMembers.js","sourceRoot":"","sources":["../getOrganizationMembers.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,yCAAyC;AAEzC;;GAEG;AACH,SAAgB,sBAAsB,CAAC,IAAgC,EAAE,IAA2B;IAChG,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,4CAA4C,EAAE;QACvE,kBAAkB,EAAE,IAAI,CAAC,gBAAgB;KAC5C,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AALD,wDAKC;AAYD;;GAEG;AACH,SAAgB,4BAA4B,CAAC,IAAsC,EAAE,IAAiC;IAClH,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,4CAA4C,EAAE;QAC7E,kBAAkB,EAAE,IAAI,CAAC,gBAAgB;KAC5C,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AALD,oEAKC"}

package/getOrganizationRoleScopes.d.ts

@@ -0,0 +1,25 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as outputs from "./types/output";
+/**
+ * Lists the permission scopes available for custom roles in an organization. Use this to discover valid scope names before setting `OrganizationRole.permissions`. The catalogue is flattened into a single list with resource type and group context, sorted deterministically.
+ */
+export declare function getOrganizationRoleScopes(args: GetOrganizationRoleScopesArgs, opts?: pulumi.InvokeOptions): Promise<GetOrganizationRoleScopesResult>;
+export interface GetOrganizationRoleScopesArgs {
+    /**
+     * The Pulumi Cloud organization name.
+     */
+    organizationName: string;
+}
+export interface GetOrganizationRoleScopesResult {
+    readonly scopes: outputs.RoleScopeInfo[];
+}
+/**
+ * Lists the permission scopes available for custom roles in an organization. Use this to discover valid scope names before setting `OrganizationRole.permissions`. The catalogue is flattened into a single list with resource type and group context, sorted deterministically.
+ */
+export declare function getOrganizationRoleScopesOutput(args: GetOrganizationRoleScopesOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetOrganizationRoleScopesResult>;
+export interface GetOrganizationRoleScopesOutputArgs {
+    /**
+     * The Pulumi Cloud organization name.
+     */
+    organizationName: pulumi.Input<string>;
+}