{
    "name": "thoth",
    "displayName": "Thoth",
    "description": "Pulumi provider for Aten Security Thoth AI governance control plane.",
    "keywords": [
        "pulumi",
        "thoth",
        "atensecurity",
        "category/utility",
        "governance",
        "ai"
    ],
    "homepage": "https://atensecurity.com",
    "license": "Apache-2.0",
    "attribution": "This Pulumi package is based on the [`thoth` Terraform Provider](https://github.com/atensecurity/terraform-provider-thoth).",
    "repository": "https://github.com/atensecurity/pulumi-thoth",
    "logoUrl": "https://raw.githubusercontent.com/atensecurity/pulumi-thoth/main/docs/logo.png",
    "pluginDownloadURL": "github://api.github.com/atensecurity/pulumi-thoth",
    "publisher": "Aten Security",
    "meta": {
        "moduleFormat": "(.*)(?:/[^/]*)"
    },
    "language": {
        "csharp": {
            "packageReferences": {
                "Pulumi": "3.*"
            },
            "compatibility": "tfbridge20",
            "rootNamespace": "AtenSecurity.Pulumi"
        },
        "nodejs": {
            "packageName": "@atensec/pulumi-thoth",
            "packageDescription": "Pulumi provider for Aten Security Thoth AI governance control plane.",
            "readme": "\u003e This provider is a derived work of the [Terraform Provider](https://github.com/atensecurity/terraform-provider-thoth)\n\u003e distributed under [MPL 2.0](https://www.mozilla.org/en-US/MPL/2.0/). If you encounter a bug or missing feature,\n\u003e first check the [`pulumi-thoth` repo](https://github.com/atensecurity/pulumi-thoth/issues); however, if that doesn't turn up anything,\n\u003e please consult the source [`terraform-provider-thoth` repo](https://github.com/atensecurity/terraform-provider-thoth/issues).",
            "compatibility": "tfbridge20",
            "disableUnionOutputTypes": true
        },
        "python": {
            "packageName": "pulumi_thoth",
            "requires": {
                "pulumi": "\u003e=3.0.0,\u003c4.0.0"
            },
            "readme": "\u003e This provider is a derived work of the [Terraform Provider](https://github.com/atensecurity/terraform-provider-thoth)\n\u003e distributed under [MPL 2.0](https://www.mozilla.org/en-US/MPL/2.0/). If you encounter a bug or missing feature,\n\u003e first check the [`pulumi-thoth` repo](https://github.com/atensecurity/pulumi-thoth/issues); however, if that doesn't turn up anything,\n\u003e please consult the source [`terraform-provider-thoth` repo](https://github.com/atensecurity/terraform-provider-thoth/issues).",
            "compatibility": "tfbridge20",
            "pyproject": {}
        }
    },
    "config": {
        "variables": {
            "adminBearerToken": {
                "type": "string",
                "description": "Admin bearer token used for authenticated GovAPI requests.",
                "secret": true
            },
            "adminBearerTokenFile": {
                "type": "string",
                "description": "Path to a file containing the admin bearer token."
            },
            "apexDomain": {
                "type": "string",
                "description": "Apex domain used to derive GovAPI host when\u003cspan pulumi-lang-nodejs=\" apiBaseUrl \" pulumi-lang-dotnet=\" ApiBaseUrl \" pulumi-lang-go=\" apiBaseUrl \" pulumi-lang-python=\" api_base_url \" pulumi-lang-yaml=\" apiBaseUrl \" pulumi-lang-java=\" apiBaseUrl \"\u003e apiBaseUrl \u003c/span\u003eis omitted. Defaults to atensecurity.com."
            },
            "apiBaseUrl": {
                "type": "string",
                "description": "GovAPI base URL override. When omitted, provider derives https://grid.\u003ctenant_id\u003e.\u003capex_domain\u003e."
            },
            "insecureSkipTlsVerify": {
                "type": "boolean",
                "description": "Skip TLS certificate verification (development/testing only)."
            },
            "orgApiKey": {
                "type": "string",
                "description": "Organization-scoped API key used for non-interactive CI/CD control-plane operations.",
                "secret": true
            },
            "orgApiKeyFile": {
                "type": "string",
                "description": "Path to a file containing the organization-scoped API key."
            },
            "requestTimeoutSeconds": {
                "type": "integer",
                "description": "Per-request timeout in seconds."
            },
            "retryBaseDelayMs": {
                "type": "integer",
                "description": "Base delay in milliseconds for exponential retry backoff."
            },
            "retryMaxAttempts": {
                "type": "integer",
                "description": "Maximum retry attempts for transient API/network failures."
            },
            "retryMaxDelayMs": {
                "type": "integer",
                "description": "Maximum delay in milliseconds for retry backoff."
            },
            "tenantId": {
                "type": "string",
                "description": "Tenant slug used in GovAPI route scoping. If omitted, provider reads THOTH_TENANT_ID."
            }
        }
    },
    "provider": {
        "description": "The provider type for the thoth package. By default, resources use package-wide configuration\nsettings, however an explicit `Provider` instance may be created and passed during resource\nconstruction to achieve fine-grained programmatic control over provider settings. See the\n[documentation](https://www.pulumi.com/docs/reference/programming-model/#providers) for more information.\n",
        "properties": {
            "adminBearerToken": {
                "type": "string",
                "description": "Admin bearer token used for authenticated GovAPI requests.",
                "secret": true
            },
            "adminBearerTokenFile": {
                "type": "string",
                "description": "Path to a file containing the admin bearer token."
            },
            "apexDomain": {
                "type": "string",
                "description": "Apex domain used to derive GovAPI host when\u003cspan pulumi-lang-nodejs=\" apiBaseUrl \" pulumi-lang-dotnet=\" ApiBaseUrl \" pulumi-lang-go=\" apiBaseUrl \" pulumi-lang-python=\" api_base_url \" pulumi-lang-yaml=\" apiBaseUrl \" pulumi-lang-java=\" apiBaseUrl \"\u003e apiBaseUrl \u003c/span\u003eis omitted. Defaults to atensecurity.com."
            },
            "apiBaseUrl": {
                "type": "string",
                "description": "GovAPI base URL override. When omitted, provider derives https://grid.\u003ctenant_id\u003e.\u003capex_domain\u003e."
            },
            "insecureSkipTlsVerify": {
                "type": "boolean",
                "description": "Skip TLS certificate verification (development/testing only)."
            },
            "orgApiKey": {
                "type": "string",
                "description": "Organization-scoped API key used for non-interactive CI/CD control-plane operations.",
                "secret": true
            },
            "orgApiKeyFile": {
                "type": "string",
                "description": "Path to a file containing the organization-scoped API key."
            },
            "requestTimeoutSeconds": {
                "type": "integer",
                "description": "Per-request timeout in seconds."
            },
            "retryBaseDelayMs": {
                "type": "integer",
                "description": "Base delay in milliseconds for exponential retry backoff."
            },
            "retryMaxAttempts": {
                "type": "integer",
                "description": "Maximum retry attempts for transient API/network failures."
            },
            "retryMaxDelayMs": {
                "type": "integer",
                "description": "Maximum delay in milliseconds for retry backoff."
            },
            "tenantId": {
                "type": "string",
                "description": "Tenant slug used in GovAPI route scoping. If omitted, provider reads THOTH_TENANT_ID."
            }
        },
        "inputProperties": {
            "adminBearerToken": {
                "type": "string",
                "description": "Admin bearer token used for authenticated GovAPI requests.",
                "secret": true
            },
            "adminBearerTokenFile": {
                "type": "string",
                "description": "Path to a file containing the admin bearer token."
            },
            "apexDomain": {
                "type": "string",
                "description": "Apex domain used to derive GovAPI host when\u003cspan pulumi-lang-nodejs=\" apiBaseUrl \" pulumi-lang-dotnet=\" ApiBaseUrl \" pulumi-lang-go=\" apiBaseUrl \" pulumi-lang-python=\" api_base_url \" pulumi-lang-yaml=\" apiBaseUrl \" pulumi-lang-java=\" apiBaseUrl \"\u003e apiBaseUrl \u003c/span\u003eis omitted. Defaults to atensecurity.com."
            },
            "apiBaseUrl": {
                "type": "string",
                "description": "GovAPI base URL override. When omitted, provider derives https://grid.\u003ctenant_id\u003e.\u003capex_domain\u003e."
            },
            "insecureSkipTlsVerify": {
                "type": "boolean",
                "description": "Skip TLS certificate verification (development/testing only)."
            },
            "orgApiKey": {
                "type": "string",
                "description": "Organization-scoped API key used for non-interactive CI/CD control-plane operations.",
                "secret": true
            },
            "orgApiKeyFile": {
                "type": "string",
                "description": "Path to a file containing the organization-scoped API key."
            },
            "requestTimeoutSeconds": {
                "type": "integer",
                "description": "Per-request timeout in seconds."
            },
            "retryBaseDelayMs": {
                "type": "integer",
                "description": "Base delay in milliseconds for exponential retry backoff."
            },
            "retryMaxAttempts": {
                "type": "integer",
                "description": "Maximum retry attempts for transient API/network failures."
            },
            "retryMaxDelayMs": {
                "type": "integer",
                "description": "Maximum delay in milliseconds for retry backoff."
            },
            "tenantId": {
                "type": "string",
                "description": "Tenant slug used in GovAPI route scoping. If omitted, provider reads THOTH_TENANT_ID."
            }
        },
        "methods": {
            "terraformConfig": "pulumi:providers:thoth/terraformConfig"
        }
    },
    "resources": {
        "thoth:access/agentApiKey:AgentApiKey": {
            "properties": {
                "active": {
                    "type": "boolean",
                    "description": "Whether key is currently active and not expired/revoked."
                },
                "apiKey": {
                    "type": "string",
                    "description": "One-time plaintext API key (returned only on create).",
                    "secret": true
                },
                "createdAt": {
                    "type": "string",
                    "description": "Creation timestamp."
                },
                "expiresAt": {
                    "type": "string",
                    "description": "Expiry timestamp."
                },
                "jitReason": {
                    "type": "string",
                    "description": "Audit reason for just-in-time issuance."
                },
                "keyId": {
                    "type": "string",
                    "description": "GovAPI key identifier."
                },
                "lastUsedAt": {
                    "type": "string",
                    "description": "Last authorization timestamp."
                },
                "name": {
                    "type": "string",
                    "description": "Display name for the API key."
                },
                "permissions": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Allowed permissions: read, write, execute."
                },
                "prefix": {
                    "type": "string",
                    "description": "Key prefix for operator identification."
                },
                "scopeLevel": {
                    "type": "string",
                    "description": "Fixed scope for this resource type."
                },
                "scopeTargetId": {
                    "type": "string",
                    "description": "Agent ID targeted by this API key scope."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "ttlSeconds": {
                    "type": "integer",
                    "description": "TTL in seconds for key expiry."
                }
            },
            "required": [
                "active",
                "apiKey",
                "createdAt",
                "expiresAt",
                "keyId",
                "lastUsedAt",
                "permissions",
                "prefix",
                "scopeLevel",
                "scopeTargetId",
                "tenantId"
            ],
            "inputProperties": {
                "jitReason": {
                    "type": "string",
                    "description": "Audit reason for just-in-time issuance."
                },
                "name": {
                    "type": "string",
                    "description": "Display name for the API key."
                },
                "permissions": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Allowed permissions: read, write, execute."
                },
                "scopeTargetId": {
                    "type": "string",
                    "description": "Agent ID targeted by this API key scope."
                },
                "ttlSeconds": {
                    "type": "integer",
                    "description": "TTL in seconds for key expiry."
                }
            },
            "requiredInputs": [
                "permissions",
                "scopeTargetId"
            ],
            "stateInputs": {
                "description": "Input properties used for looking up and filtering AgentApiKey resources.\n",
                "properties": {
                    "active": {
                        "type": "boolean",
                        "description": "Whether key is currently active and not expired/revoked."
                    },
                    "apiKey": {
                        "type": "string",
                        "description": "One-time plaintext API key (returned only on create).",
                        "secret": true
                    },
                    "createdAt": {
                        "type": "string",
                        "description": "Creation timestamp."
                    },
                    "expiresAt": {
                        "type": "string",
                        "description": "Expiry timestamp."
                    },
                    "jitReason": {
                        "type": "string",
                        "description": "Audit reason for just-in-time issuance."
                    },
                    "keyId": {
                        "type": "string",
                        "description": "GovAPI key identifier."
                    },
                    "lastUsedAt": {
                        "type": "string",
                        "description": "Last authorization timestamp."
                    },
                    "name": {
                        "type": "string",
                        "description": "Display name for the API key."
                    },
                    "permissions": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Allowed permissions: read, write, execute."
                    },
                    "prefix": {
                        "type": "string",
                        "description": "Key prefix for operator identification."
                    },
                    "scopeLevel": {
                        "type": "string",
                        "description": "Fixed scope for this resource type."
                    },
                    "scopeTargetId": {
                        "type": "string",
                        "description": "Agent ID targeted by this API key scope."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "ttlSeconds": {
                        "type": "integer",
                        "description": "TTL in seconds for key expiry."
                    }
                },
                "type": "object"
            }
        },
        "thoth:access/endpointApiKey:EndpointApiKey": {
            "properties": {
                "active": {
                    "type": "boolean",
                    "description": "Whether key is currently active and not expired/revoked."
                },
                "apiKey": {
                    "type": "string",
                    "description": "One-time plaintext API key (returned only on create).",
                    "secret": true
                },
                "createdAt": {
                    "type": "string",
                    "description": "Creation timestamp."
                },
                "expiresAt": {
                    "type": "string",
                    "description": "Expiry timestamp."
                },
                "jitReason": {
                    "type": "string",
                    "description": "Audit reason for just-in-time issuance."
                },
                "keyId": {
                    "type": "string",
                    "description": "GovAPI key identifier."
                },
                "lastUsedAt": {
                    "type": "string",
                    "description": "Last authorization timestamp."
                },
                "name": {
                    "type": "string",
                    "description": "Display name for the API key."
                },
                "permissions": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Allowed permissions: read, write, execute."
                },
                "prefix": {
                    "type": "string",
                    "description": "Key prefix for operator identification."
                },
                "scopeLevel": {
                    "type": "string",
                    "description": "Fixed scope for this resource type."
                },
                "scopeTargetId": {
                    "type": "string",
                    "description": "Endpoint ID targeted by this API key scope."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "ttlSeconds": {
                    "type": "integer",
                    "description": "TTL in seconds for key expiry."
                }
            },
            "required": [
                "active",
                "apiKey",
                "createdAt",
                "expiresAt",
                "keyId",
                "lastUsedAt",
                "permissions",
                "prefix",
                "scopeLevel",
                "scopeTargetId",
                "tenantId"
            ],
            "inputProperties": {
                "jitReason": {
                    "type": "string",
                    "description": "Audit reason for just-in-time issuance."
                },
                "name": {
                    "type": "string",
                    "description": "Display name for the API key."
                },
                "permissions": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Allowed permissions: read, write, execute."
                },
                "scopeTargetId": {
                    "type": "string",
                    "description": "Endpoint ID targeted by this API key scope."
                },
                "ttlSeconds": {
                    "type": "integer",
                    "description": "TTL in seconds for key expiry."
                }
            },
            "requiredInputs": [
                "permissions",
                "scopeTargetId"
            ],
            "stateInputs": {
                "description": "Input properties used for looking up and filtering EndpointApiKey resources.\n",
                "properties": {
                    "active": {
                        "type": "boolean",
                        "description": "Whether key is currently active and not expired/revoked."
                    },
                    "apiKey": {
                        "type": "string",
                        "description": "One-time plaintext API key (returned only on create).",
                        "secret": true
                    },
                    "createdAt": {
                        "type": "string",
                        "description": "Creation timestamp."
                    },
                    "expiresAt": {
                        "type": "string",
                        "description": "Expiry timestamp."
                    },
                    "jitReason": {
                        "type": "string",
                        "description": "Audit reason for just-in-time issuance."
                    },
                    "keyId": {
                        "type": "string",
                        "description": "GovAPI key identifier."
                    },
                    "lastUsedAt": {
                        "type": "string",
                        "description": "Last authorization timestamp."
                    },
                    "name": {
                        "type": "string",
                        "description": "Display name for the API key."
                    },
                    "permissions": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Allowed permissions: read, write, execute."
                    },
                    "prefix": {
                        "type": "string",
                        "description": "Key prefix for operator identification."
                    },
                    "scopeLevel": {
                        "type": "string",
                        "description": "Fixed scope for this resource type."
                    },
                    "scopeTargetId": {
                        "type": "string",
                        "description": "Endpoint ID targeted by this API key scope."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "ttlSeconds": {
                        "type": "integer",
                        "description": "TTL in seconds for key expiry."
                    }
                },
                "type": "object"
            }
        },
        "thoth:access/fleetApiKey:FleetApiKey": {
            "properties": {
                "active": {
                    "type": "boolean",
                    "description": "Whether key is currently active and not expired/revoked."
                },
                "apiKey": {
                    "type": "string",
                    "description": "One-time plaintext API key (returned only on create).",
                    "secret": true
                },
                "createdAt": {
                    "type": "string",
                    "description": "Creation timestamp."
                },
                "expiresAt": {
                    "type": "string",
                    "description": "Expiry timestamp."
                },
                "jitReason": {
                    "type": "string",
                    "description": "Audit reason for just-in-time issuance."
                },
                "keyId": {
                    "type": "string",
                    "description": "GovAPI key identifier."
                },
                "lastUsedAt": {
                    "type": "string",
                    "description": "Last authorization timestamp."
                },
                "name": {
                    "type": "string",
                    "description": "Display name for the API key."
                },
                "permissions": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Allowed permissions: read, write, execute."
                },
                "prefix": {
                    "type": "string",
                    "description": "Key prefix for operator identification."
                },
                "scopeLevel": {
                    "type": "string",
                    "description": "Fixed scope for this resource type."
                },
                "scopeTargetId": {
                    "type": "string",
                    "description": "Fleet ID targeted by this API key scope."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "ttlSeconds": {
                    "type": "integer",
                    "description": "TTL in seconds for key expiry."
                }
            },
            "required": [
                "active",
                "apiKey",
                "createdAt",
                "expiresAt",
                "keyId",
                "lastUsedAt",
                "permissions",
                "prefix",
                "scopeLevel",
                "scopeTargetId",
                "tenantId"
            ],
            "inputProperties": {
                "jitReason": {
                    "type": "string",
                    "description": "Audit reason for just-in-time issuance."
                },
                "name": {
                    "type": "string",
                    "description": "Display name for the API key."
                },
                "permissions": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Allowed permissions: read, write, execute."
                },
                "scopeTargetId": {
                    "type": "string",
                    "description": "Fleet ID targeted by this API key scope."
                },
                "ttlSeconds": {
                    "type": "integer",
                    "description": "TTL in seconds for key expiry."
                }
            },
            "requiredInputs": [
                "permissions",
                "scopeTargetId"
            ],
            "stateInputs": {
                "description": "Input properties used for looking up and filtering FleetApiKey resources.\n",
                "properties": {
                    "active": {
                        "type": "boolean",
                        "description": "Whether key is currently active and not expired/revoked."
                    },
                    "apiKey": {
                        "type": "string",
                        "description": "One-time plaintext API key (returned only on create).",
                        "secret": true
                    },
                    "createdAt": {
                        "type": "string",
                        "description": "Creation timestamp."
                    },
                    "expiresAt": {
                        "type": "string",
                        "description": "Expiry timestamp."
                    },
                    "jitReason": {
                        "type": "string",
                        "description": "Audit reason for just-in-time issuance."
                    },
                    "keyId": {
                        "type": "string",
                        "description": "GovAPI key identifier."
                    },
                    "lastUsedAt": {
                        "type": "string",
                        "description": "Last authorization timestamp."
                    },
                    "name": {
                        "type": "string",
                        "description": "Display name for the API key."
                    },
                    "permissions": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Allowed permissions: read, write, execute."
                    },
                    "prefix": {
                        "type": "string",
                        "description": "Key prefix for operator identification."
                    },
                    "scopeLevel": {
                        "type": "string",
                        "description": "Fixed scope for this resource type."
                    },
                    "scopeTargetId": {
                        "type": "string",
                        "description": "Fleet ID targeted by this API key scope."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "ttlSeconds": {
                        "type": "integer",
                        "description": "TTL in seconds for key expiry."
                    }
                },
                "type": "object"
            }
        },
        "thoth:billing/overageCap:OverageCap": {
            "properties": {
                "activeTier": {
                    "type": "string",
                    "description": "Effective active pricing tier."
                },
                "baseMonthlyPlatformFeeUsd": {
                    "type": "number",
                    "description": "Base monthly platform fee in USD for the active tier."
                },
                "governedIdentityUsdPerMonth": {
                    "type": "number",
                    "description": "Per-governed-identity overage rate."
                },
                "includedGovernedIdentities": {
                    "type": "integer",
                    "description": "Included governed identities before overage."
                },
                "includedPolicyChecks": {
                    "type": "integer",
                    "description": "Included policy checks before overage."
                },
                "overageCapUsd": {
                    "type": "number",
                    "description": "Monthly variable overage cap in USD."
                },
                "policyChecksUsdPerMillion": {
                    "type": "number",
                    "description": "Per-million policy checks overage rate."
                },
                "responseJson": {
                    "type": "string",
                    "description": "Full billing pricing profile response payload as JSON."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID resolved from provider configuration."
                },
                "updatedAt": {
                    "type": "string",
                    "description": "Timestamp when the overage cap was last applied via provider."
                }
            },
            "required": [
                "activeTier",
                "baseMonthlyPlatformFeeUsd",
                "governedIdentityUsdPerMonth",
                "includedGovernedIdentities",
                "includedPolicyChecks",
                "overageCapUsd",
                "policyChecksUsdPerMillion",
                "responseJson",
                "tenantId",
                "updatedAt"
            ],
            "inputProperties": {
                "overageCapUsd": {
                    "type": "number",
                    "description": "Monthly variable overage cap in USD."
                }
            },
            "requiredInputs": [
                "overageCapUsd"
            ],
            "stateInputs": {
                "description": "Input properties used for looking up and filtering OverageCap resources.\n",
                "properties": {
                    "activeTier": {
                        "type": "string",
                        "description": "Effective active pricing tier."
                    },
                    "baseMonthlyPlatformFeeUsd": {
                        "type": "number",
                        "description": "Base monthly platform fee in USD for the active tier."
                    },
                    "governedIdentityUsdPerMonth": {
                        "type": "number",
                        "description": "Per-governed-identity overage rate."
                    },
                    "includedGovernedIdentities": {
                        "type": "integer",
                        "description": "Included governed identities before overage."
                    },
                    "includedPolicyChecks": {
                        "type": "integer",
                        "description": "Included policy checks before overage."
                    },
                    "overageCapUsd": {
                        "type": "number",
                        "description": "Monthly variable overage cap in USD."
                    },
                    "policyChecksUsdPerMillion": {
                        "type": "number",
                        "description": "Per-million policy checks overage rate."
                    },
                    "responseJson": {
                        "type": "string",
                        "description": "Full billing pricing profile response payload as JSON."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID resolved from provider configuration."
                    },
                    "updatedAt": {
                        "type": "string",
                        "description": "Timestamp when the overage cap was last applied via provider."
                    }
                },
                "type": "object"
            }
        },
        "thoth:browser/enrollment:Enrollment": {
            "properties": {
                "browserProfile": {
                    "type": "string",
                    "description": "Browser profile identifier."
                },
                "createdAt": {
                    "type": "string",
                    "description": "Creation timestamp."
                },
                "deviceId": {
                    "type": "string",
                    "description": "Device identifier for enrollment."
                },
                "enrollmentId": {
                    "type": "string",
                    "description": "Enrollment ID; generated by GovAPI if omitted."
                },
                "lastSeenAt": {
                    "type": "string",
                    "description": "Last-seen timestamp (RFC3339)."
                },
                "metadataJson": {
                    "type": "string",
                    "description": "Metadata JSON object."
                },
                "providerName": {
                    "type": "string",
                    "description": "Browser provider slug."
                },
                "status": {
                    "type": "string",
                    "description": "Enrollment status (active, pending, disabled)."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "updatedAt": {
                    "type": "string",
                    "description": "Update timestamp."
                },
                "userId": {
                    "type": "string",
                    "description": "User identifier for enrollment."
                }
            },
            "required": [
                "createdAt",
                "deviceId",
                "enrollmentId",
                "providerName",
                "tenantId",
                "updatedAt",
                "userId"
            ],
            "inputProperties": {
                "browserProfile": {
                    "type": "string",
                    "description": "Browser profile identifier."
                },
                "deviceId": {
                    "type": "string",
                    "description": "Device identifier for enrollment."
                },
                "enrollmentId": {
                    "type": "string",
                    "description": "Enrollment ID; generated by GovAPI if omitted."
                },
                "lastSeenAt": {
                    "type": "string",
                    "description": "Last-seen timestamp (RFC3339)."
                },
                "metadataJson": {
                    "type": "string",
                    "description": "Metadata JSON object."
                },
                "providerName": {
                    "type": "string",
                    "description": "Browser provider slug."
                },
                "status": {
                    "type": "string",
                    "description": "Enrollment status (active, pending, disabled)."
                },
                "userId": {
                    "type": "string",
                    "description": "User identifier for enrollment."
                }
            },
            "requiredInputs": [
                "deviceId",
                "providerName",
                "userId"
            ],
            "stateInputs": {
                "description": "Input properties used for looking up and filtering Enrollment resources.\n",
                "properties": {
                    "browserProfile": {
                        "type": "string",
                        "description": "Browser profile identifier."
                    },
                    "createdAt": {
                        "type": "string",
                        "description": "Creation timestamp."
                    },
                    "deviceId": {
                        "type": "string",
                        "description": "Device identifier for enrollment."
                    },
                    "enrollmentId": {
                        "type": "string",
                        "description": "Enrollment ID; generated by GovAPI if omitted."
                    },
                    "lastSeenAt": {
                        "type": "string",
                        "description": "Last-seen timestamp (RFC3339)."
                    },
                    "metadataJson": {
                        "type": "string",
                        "description": "Metadata JSON object."
                    },
                    "providerName": {
                        "type": "string",
                        "description": "Browser provider slug."
                    },
                    "status": {
                        "type": "string",
                        "description": "Enrollment status (active, pending, disabled)."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "updatedAt": {
                        "type": "string",
                        "description": "Update timestamp."
                    },
                    "userId": {
                        "type": "string",
                        "description": "User identifier for enrollment."
                    }
                },
                "type": "object"
            }
        },
        "thoth:browser/policy:Policy": {
            "properties": {
                "active": {
                    "type": "boolean",
                    "description": "Whether the policy is active."
                },
                "compiledPolicyJson": {
                    "type": "string",
                    "description": "Compiled provider-native policy JSON from GovAPI."
                },
                "createdAt": {
                    "type": "string",
                    "description": "Creation timestamp."
                },
                "createdBy": {
                    "type": "string",
                    "description": "Override\u003cspan pulumi-lang-nodejs=\" createdBy \" pulumi-lang-dotnet=\" CreatedBy \" pulumi-lang-go=\" createdBy \" pulumi-lang-python=\" created_by \" pulumi-lang-yaml=\" createdBy \" pulumi-lang-java=\" createdBy \"\u003e createdBy \u003c/span\u003eaudit value."
                },
                "enforcementMode": {
                    "type": "string",
                    "description": "Policy mode: monitor or enforce."
                },
                "metadataJson": {
                    "type": "string",
                    "description": "Arbitrary metadata JSON object."
                },
                "name": {
                    "type": "string",
                    "description": "Policy display name."
                },
                "policyId": {
                    "type": "string",
                    "description": "Policy ID. If omitted on create, GovAPI generates one."
                },
                "policyJson": {
                    "type": "string",
                    "description": "Policy JSON object."
                },
                "providerName": {
                    "type": "string",
                    "description": "Browser provider slug."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "updatedAt": {
                    "type": "string",
                    "description": "Update timestamp."
                },
                "updatedBy": {
                    "type": "string",
                    "description": "Override\u003cspan pulumi-lang-nodejs=\" updatedBy \" pulumi-lang-dotnet=\" UpdatedBy \" pulumi-lang-go=\" updatedBy \" pulumi-lang-python=\" updated_by \" pulumi-lang-yaml=\" updatedBy \" pulumi-lang-java=\" updatedBy \"\u003e updatedBy \u003c/span\u003eaudit value."
                },
                "version": {
                    "type": "integer",
                    "description": "Optional explicit policy version."
                }
            },
            "required": [
                "compiledPolicyJson",
                "createdAt",
                "createdBy",
                "name",
                "policyId",
                "policyJson",
                "providerName",
                "tenantId",
                "updatedAt",
                "updatedBy",
                "version"
            ],
            "inputProperties": {
                "active": {
                    "type": "boolean",
                    "description": "Whether the policy is active."
                },
                "createdBy": {
                    "type": "string",
                    "description": "Override\u003cspan pulumi-lang-nodejs=\" createdBy \" pulumi-lang-dotnet=\" CreatedBy \" pulumi-lang-go=\" createdBy \" pulumi-lang-python=\" created_by \" pulumi-lang-yaml=\" createdBy \" pulumi-lang-java=\" createdBy \"\u003e createdBy \u003c/span\u003eaudit value."
                },
                "enforcementMode": {
                    "type": "string",
                    "description": "Policy mode: monitor or enforce."
                },
                "metadataJson": {
                    "type": "string",
                    "description": "Arbitrary metadata JSON object."
                },
                "name": {
                    "type": "string",
                    "description": "Policy display name."
                },
                "policyId": {
                    "type": "string",
                    "description": "Policy ID. If omitted on create, GovAPI generates one."
                },
                "policyJson": {
                    "type": "string",
                    "description": "Policy JSON object."
                },
                "providerName": {
                    "type": "string",
                    "description": "Browser provider slug."
                },
                "updatedBy": {
                    "type": "string",
                    "description": "Override\u003cspan pulumi-lang-nodejs=\" updatedBy \" pulumi-lang-dotnet=\" UpdatedBy \" pulumi-lang-go=\" updatedBy \" pulumi-lang-python=\" updated_by \" pulumi-lang-yaml=\" updatedBy \" pulumi-lang-java=\" updatedBy \"\u003e updatedBy \u003c/span\u003eaudit value."
                },
                "version": {
                    "type": "integer",
                    "description": "Optional explicit policy version."
                }
            },
            "requiredInputs": [
                "name",
                "policyJson",
                "providerName"
            ],
            "stateInputs": {
                "description": "Input properties used for looking up and filtering Policy resources.\n",
                "properties": {
                    "active": {
                        "type": "boolean",
                        "description": "Whether the policy is active."
                    },
                    "compiledPolicyJson": {
                        "type": "string",
                        "description": "Compiled provider-native policy JSON from GovAPI."
                    },
                    "createdAt": {
                        "type": "string",
                        "description": "Creation timestamp."
                    },
                    "createdBy": {
                        "type": "string",
                        "description": "Override\u003cspan pulumi-lang-nodejs=\" createdBy \" pulumi-lang-dotnet=\" CreatedBy \" pulumi-lang-go=\" createdBy \" pulumi-lang-python=\" created_by \" pulumi-lang-yaml=\" createdBy \" pulumi-lang-java=\" createdBy \"\u003e createdBy \u003c/span\u003eaudit value."
                    },
                    "enforcementMode": {
                        "type": "string",
                        "description": "Policy mode: monitor or enforce."
                    },
                    "metadataJson": {
                        "type": "string",
                        "description": "Arbitrary metadata JSON object."
                    },
                    "name": {
                        "type": "string",
                        "description": "Policy display name."
                    },
                    "policyId": {
                        "type": "string",
                        "description": "Policy ID. If omitted on create, GovAPI generates one."
                    },
                    "policyJson": {
                        "type": "string",
                        "description": "Policy JSON object."
                    },
                    "providerName": {
                        "type": "string",
                        "description": "Browser provider slug."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "updatedAt": {
                        "type": "string",
                        "description": "Update timestamp."
                    },
                    "updatedBy": {
                        "type": "string",
                        "description": "Override\u003cspan pulumi-lang-nodejs=\" updatedBy \" pulumi-lang-dotnet=\" UpdatedBy \" pulumi-lang-go=\" updatedBy \" pulumi-lang-python=\" updated_by \" pulumi-lang-yaml=\" updatedBy \" pulumi-lang-java=\" updatedBy \"\u003e updatedBy \u003c/span\u003eaudit value."
                    },
                    "version": {
                        "type": "integer",
                        "description": "Optional explicit policy version."
                    }
                },
                "type": "object"
            }
        },
        "thoth:browser/provider:Provider": {
            "properties": {
                "configJson": {
                    "type": "string",
                    "description": "Provider-specific config JSON object.",
                    "secret": true
                },
                "createdAt": {
                    "type": "string",
                    "description": "Creation timestamp."
                },
                "enabled": {
                    "type": "boolean",
                    "description": "Enable provider integration."
                },
                "lastError": {
                    "type": "string",
                    "description": "Last integration error string."
                },
                "name": {
                    "type": "string",
                    "description": "Display name for this provider integration."
                },
                "providerName": {
                    "type": "string",
                    "description": "Browser provider slug: chrome, firefox, safari, island."
                },
                "status": {
                    "type": "string",
                    "description": "Provider status hint (connected, degraded, disconnected)."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider config."
                },
                "updatedAt": {
                    "type": "string",
                    "description": "Last update timestamp."
                }
            },
            "required": [
                "createdAt",
                "providerName",
                "tenantId",
                "updatedAt"
            ],
            "inputProperties": {
                "configJson": {
                    "type": "string",
                    "description": "Provider-specific config JSON object.",
                    "secret": true
                },
                "enabled": {
                    "type": "boolean",
                    "description": "Enable provider integration."
                },
                "lastError": {
                    "type": "string",
                    "description": "Last integration error string."
                },
                "name": {
                    "type": "string",
                    "description": "Display name for this provider integration."
                },
                "providerName": {
                    "type": "string",
                    "description": "Browser provider slug: chrome, firefox, safari, island."
                },
                "status": {
                    "type": "string",
                    "description": "Provider status hint (connected, degraded, disconnected)."
                }
            },
            "requiredInputs": [
                "providerName"
            ],
            "stateInputs": {
                "description": "Input properties used for looking up and filtering Provider resources.\n",
                "properties": {
                    "configJson": {
                        "type": "string",
                        "description": "Provider-specific config JSON object.",
                        "secret": true
                    },
                    "createdAt": {
                        "type": "string",
                        "description": "Creation timestamp."
                    },
                    "enabled": {
                        "type": "boolean",
                        "description": "Enable provider integration."
                    },
                    "lastError": {
                        "type": "string",
                        "description": "Last integration error string."
                    },
                    "name": {
                        "type": "string",
                        "description": "Display name for this provider integration."
                    },
                    "providerName": {
                        "type": "string",
                        "description": "Browser provider slug: chrome, firefox, safari, island."
                    },
                    "status": {
                        "type": "string",
                        "description": "Provider status hint (connected, degraded, disconnected)."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider config."
                    },
                    "updatedAt": {
                        "type": "string",
                        "description": "Last update timestamp."
                    }
                },
                "type": "object"
            }
        },
        "thoth:fleet/endpoint:Endpoint": {
            "properties": {
                "agentIds": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Agent IDs associated with this endpoint."
                },
                "createdAt": {
                    "type": "string",
                    "description": "Creation timestamp."
                },
                "department": {
                    "type": "string",
                    "description": "Department label for this endpoint."
                },
                "employeeEmail": {
                    "type": "string",
                    "description": "Employee email tied to this endpoint."
                },
                "employeeName": {
                    "type": "string",
                    "description": "Employee display name tied to this endpoint."
                },
                "endpointId": {
                    "type": "string",
                    "description": "Endpoint identifier."
                },
                "enforcementMode": {
                    "type": "string",
                    "description": "Enforcement mode (enforce, shadow, off)."
                },
                "enrollment": {
                    "type": "string",
                    "description": "Enrollment source (jamf, intune, manual, unmanaged)."
                },
                "environment": {
                    "type": "string",
                    "description": "Environment (dev, staging, prod)."
                },
                "fleetId": {
                    "type": "string",
                    "description": "Fleet ID associated with this endpoint."
                },
                "hostname": {
                    "type": "string",
                    "description": "Endpoint hostname."
                },
                "identityBindingUser": {
                    "type": "string",
                    "description": "User identity bound to endpoint runtime credentials."
                },
                "lastSeen": {
                    "type": "string",
                    "description": "Last heartbeat timestamp."
                },
                "managedRuntimeKeyId": {
                    "type": "string",
                    "description": "Server-managed runtime API key ID (when applicable)."
                },
                "os": {
                    "type": "string",
                    "description": "Operating system (macos, windows, linux)."
                },
                "osVersion": {
                    "type": "string",
                    "description": "Operating system version."
                },
                "providerName": {
                    "type": "string",
                    "description": "Provider hint for endpoint provenance."
                },
                "proxyVersion": {
                    "type": "string",
                    "description": "Reported proxy version."
                },
                "riskScore": {
                    "type": "number",
                    "description": "Risk score for this endpoint."
                },
                "runtimeAuthMode": {
                    "type": "string",
                    "description": "Runtime auth mode recorded by GovAPI."
                },
                "sessionsToday": {
                    "type": "integer",
                    "description": "Sessions seen today."
                },
                "status": {
                    "type": "string",
                    "description": "Endpoint status."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "updatedAt": {
                    "type": "string",
                    "description": "Last update timestamp."
                },
                "violationsToday": {
                    "type": "integer",
                    "description": "Violations seen today."
                }
            },
            "required": [
                "createdAt",
                "endpointId",
                "enforcementMode",
                "hostname",
                "identityBindingUser",
                "lastSeen",
                "managedRuntimeKeyId",
                "runtimeAuthMode",
                "status",
                "tenantId",
                "updatedAt"
            ],
            "inputProperties": {
                "agentIds": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Agent IDs associated with this endpoint."
                },
                "department": {
                    "type": "string",
                    "description": "Department label for this endpoint."
                },
                "employeeEmail": {
                    "type": "string",
                    "description": "Employee email tied to this endpoint."
                },
                "employeeName": {
                    "type": "string",
                    "description": "Employee display name tied to this endpoint."
                },
                "endpointId": {
                    "type": "string",
                    "description": "Endpoint identifier."
                },
                "enforcementMode": {
                    "type": "string",
                    "description": "Enforcement mode (enforce, shadow, off)."
                },
                "enrollment": {
                    "type": "string",
                    "description": "Enrollment source (jamf, intune, manual, unmanaged)."
                },
                "environment": {
                    "type": "string",
                    "description": "Environment (dev, staging, prod)."
                },
                "fleetId": {
                    "type": "string",
                    "description": "Fleet ID associated with this endpoint."
                },
                "hostname": {
                    "type": "string",
                    "description": "Endpoint hostname."
                },
                "os": {
                    "type": "string",
                    "description": "Operating system (macos, windows, linux)."
                },
                "osVersion": {
                    "type": "string",
                    "description": "Operating system version."
                },
                "providerName": {
                    "type": "string",
                    "description": "Provider hint for endpoint provenance."
                },
                "proxyVersion": {
                    "type": "string",
                    "description": "Reported proxy version."
                },
                "riskScore": {
                    "type": "number",
                    "description": "Risk score for this endpoint."
                },
                "sessionsToday": {
                    "type": "integer",
                    "description": "Sessions seen today."
                },
                "status": {
                    "type": "string",
                    "description": "Endpoint status."
                },
                "violationsToday": {
                    "type": "integer",
                    "description": "Violations seen today."
                }
            },
            "requiredInputs": [
                "endpointId",
                "hostname"
            ],
            "stateInputs": {
                "description": "Input properties used for looking up and filtering Endpoint resources.\n",
                "properties": {
                    "agentIds": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Agent IDs associated with this endpoint."
                    },
                    "createdAt": {
                        "type": "string",
                        "description": "Creation timestamp."
                    },
                    "department": {
                        "type": "string",
                        "description": "Department label for this endpoint."
                    },
                    "employeeEmail": {
                        "type": "string",
                        "description": "Employee email tied to this endpoint."
                    },
                    "employeeName": {
                        "type": "string",
                        "description": "Employee display name tied to this endpoint."
                    },
                    "endpointId": {
                        "type": "string",
                        "description": "Endpoint identifier."
                    },
                    "enforcementMode": {
                        "type": "string",
                        "description": "Enforcement mode (enforce, shadow, off)."
                    },
                    "enrollment": {
                        "type": "string",
                        "description": "Enrollment source (jamf, intune, manual, unmanaged)."
                    },
                    "environment": {
                        "type": "string",
                        "description": "Environment (dev, staging, prod)."
                    },
                    "fleetId": {
                        "type": "string",
                        "description": "Fleet ID associated with this endpoint."
                    },
                    "hostname": {
                        "type": "string",
                        "description": "Endpoint hostname."
                    },
                    "identityBindingUser": {
                        "type": "string",
                        "description": "User identity bound to endpoint runtime credentials."
                    },
                    "lastSeen": {
                        "type": "string",
                        "description": "Last heartbeat timestamp."
                    },
                    "managedRuntimeKeyId": {
                        "type": "string",
                        "description": "Server-managed runtime API key ID (when applicable)."
                    },
                    "os": {
                        "type": "string",
                        "description": "Operating system (macos, windows, linux)."
                    },
                    "osVersion": {
                        "type": "string",
                        "description": "Operating system version."
                    },
                    "providerName": {
                        "type": "string",
                        "description": "Provider hint for endpoint provenance."
                    },
                    "proxyVersion": {
                        "type": "string",
                        "description": "Reported proxy version."
                    },
                    "riskScore": {
                        "type": "number",
                        "description": "Risk score for this endpoint."
                    },
                    "runtimeAuthMode": {
                        "type": "string",
                        "description": "Runtime auth mode recorded by GovAPI."
                    },
                    "sessionsToday": {
                        "type": "integer",
                        "description": "Sessions seen today."
                    },
                    "status": {
                        "type": "string",
                        "description": "Endpoint status."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "updatedAt": {
                        "type": "string",
                        "description": "Last update timestamp."
                    },
                    "violationsToday": {
                        "type": "integer",
                        "description": "Violations seen today."
                    }
                },
                "type": "object"
            }
        },
        "thoth:fleet/fleet:Fleet": {
            "properties": {
                "compliancePct": {
                    "type": "number",
                    "description": "Compliance percentage."
                },
                "createdAt": {
                    "type": "string",
                    "description": "Creation timestamp."
                },
                "driftPct": {
                    "type": "number",
                    "description": "Percent drift detected."
                },
                "driftedEndpointCount": {
                    "type": "integer",
                    "description": "Drifted endpoint count."
                },
                "endpointCount": {
                    "type": "integer",
                    "description": "Endpoint count in this fleet."
                },
                "fleetCode": {
                    "type": "string",
                    "description": "Fleet code."
                },
                "fleetId": {
                    "type": "string",
                    "description": "Fleet identifier."
                },
                "lastDeployedAt": {
                    "type": "string",
                    "description": "Last deployment timestamp."
                },
                "lastDeployedVersion": {
                    "type": "string",
                    "description": "Last deployed version."
                },
                "name": {
                    "type": "string",
                    "description": "Fleet display name."
                },
                "policyId": {
                    "type": "string",
                    "description": "Attached policy ID."
                },
                "policyName": {
                    "type": "string",
                    "description": "Attached policy name."
                },
                "providerName": {
                    "type": "string",
                    "description": "Provider hint (jamf, intune, workspace_one, custom, none)."
                },
                "region": {
                    "type": "string",
                    "description": "Fleet region."
                },
                "rolloutPct": {
                    "type": "integer",
                    "description": "Current rollout percentage."
                },
                "rolloutStrategy": {
                    "type": "string",
                    "description": "Rollout strategy (canary or staged)."
                },
                "status": {
                    "type": "string",
                    "description": "Fleet status (active, paused, deploying, error)."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "updatedAt": {
                    "type": "string",
                    "description": "Last update timestamp."
                }
            },
            "required": [
                "compliancePct",
                "createdAt",
                "driftPct",
                "driftedEndpointCount",
                "endpointCount",
                "fleetCode",
                "fleetId",
                "lastDeployedAt",
                "lastDeployedVersion",
                "name",
                "tenantId",
                "updatedAt"
            ],
            "inputProperties": {
                "name": {
                    "type": "string",
                    "description": "Fleet display name."
                },
                "policyId": {
                    "type": "string",
                    "description": "Attached policy ID."
                },
                "policyName": {
                    "type": "string",
                    "description": "Attached policy name."
                },
                "providerName": {
                    "type": "string",
                    "description": "Provider hint (jamf, intune, workspace_one, custom, none)."
                },
                "region": {
                    "type": "string",
                    "description": "Fleet region."
                },
                "rolloutPct": {
                    "type": "integer",
                    "description": "Current rollout percentage."
                },
                "rolloutStrategy": {
                    "type": "string",
                    "description": "Rollout strategy (canary or staged)."
                },
                "status": {
                    "type": "string",
                    "description": "Fleet status (active, paused, deploying, error)."
                }
            },
            "requiredInputs": [
                "name"
            ],
            "stateInputs": {
                "description": "Input properties used for looking up and filtering Fleet resources.\n",
                "properties": {
                    "compliancePct": {
                        "type": "number",
                        "description": "Compliance percentage."
                    },
                    "createdAt": {
                        "type": "string",
                        "description": "Creation timestamp."
                    },
                    "driftPct": {
                        "type": "number",
                        "description": "Percent drift detected."
                    },
                    "driftedEndpointCount": {
                        "type": "integer",
                        "description": "Drifted endpoint count."
                    },
                    "endpointCount": {
                        "type": "integer",
                        "description": "Endpoint count in this fleet."
                    },
                    "fleetCode": {
                        "type": "string",
                        "description": "Fleet code."
                    },
                    "fleetId": {
                        "type": "string",
                        "description": "Fleet identifier."
                    },
                    "lastDeployedAt": {
                        "type": "string",
                        "description": "Last deployment timestamp."
                    },
                    "lastDeployedVersion": {
                        "type": "string",
                        "description": "Last deployed version."
                    },
                    "name": {
                        "type": "string",
                        "description": "Fleet display name."
                    },
                    "policyId": {
                        "type": "string",
                        "description": "Attached policy ID."
                    },
                    "policyName": {
                        "type": "string",
                        "description": "Attached policy name."
                    },
                    "providerName": {
                        "type": "string",
                        "description": "Provider hint (jamf, intune, workspace_one, custom, none)."
                    },
                    "region": {
                        "type": "string",
                        "description": "Fleet region."
                    },
                    "rolloutPct": {
                        "type": "integer",
                        "description": "Current rollout percentage."
                    },
                    "rolloutStrategy": {
                        "type": "string",
                        "description": "Rollout strategy (canary or staged)."
                    },
                    "status": {
                        "type": "string",
                        "description": "Fleet status (active, paused, deploying, error)."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "updatedAt": {
                        "type": "string",
                        "description": "Last update timestamp."
                    }
                },
                "type": "object"
            }
        },
        "thoth:governance/approvalDecision:ApprovalDecision": {
            "properties": {
                "approvalId": {
                    "type": "string",
                    "description": "Approval ID to resolve."
                },
                "decision": {
                    "type": "string",
                    "description": "Decision value: approve or deny."
                },
                "reason": {
                    "type": "string",
                    "description": "Observed approval reason."
                },
                "resolvedBy": {
                    "type": "string",
                    "description": "Resolver identity returned by GovAPI."
                },
                "status": {
                    "type": "string",
                    "description": "Observed approval status from approvals list endpoint."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                }
            },
            "required": [
                "approvalId",
                "decision",
                "reason",
                "resolvedBy",
                "status",
                "tenantId"
            ],
            "inputProperties": {
                "approvalId": {
                    "type": "string",
                    "description": "Approval ID to resolve."
                },
                "decision": {
                    "type": "string",
                    "description": "Decision value: approve or deny."
                }
            },
            "requiredInputs": [
                "approvalId",
                "decision"
            ],
            "stateInputs": {
                "description": "Input properties used for looking up and filtering ApprovalDecision resources.\n",
                "properties": {
                    "approvalId": {
                        "type": "string",
                        "description": "Approval ID to resolve."
                    },
                    "decision": {
                        "type": "string",
                        "description": "Decision value: approve or deny."
                    },
                    "reason": {
                        "type": "string",
                        "description": "Observed approval reason."
                    },
                    "resolvedBy": {
                        "type": "string",
                        "description": "Resolver identity returned by GovAPI."
                    },
                    "status": {
                        "type": "string",
                        "description": "Observed approval status from approvals list endpoint."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    }
                },
                "type": "object"
            }
        },
        "thoth:governance/decisionFieldBackfill:DecisionFieldBackfill": {
            "properties": {
                "candidates": {
                    "type": "integer",
                    "description": "Rows eligible for decision-field patching."
                },
                "dryRun": {
                    "type": "boolean",
                    "description": "Preview candidate patches without persisting updates."
                },
                "examined": {
                    "type": "integer",
                    "description": "Rows scanned by the backfill operation."
                },
                "executedAt": {
                    "type": "string",
                    "description": "Timestamp when backfill execution completed."
                },
                "includeBlockedEvents": {
                    "type": "boolean",
                    "description": "Include blocked events in candidate selection."
                },
                "limit": {
                    "type": "integer",
                    "description": "Maximum number of candidate rows to evaluate (1-5000)."
                },
                "patchedAuthorizationDecision": {
                    "type": "integer",
                    "description": "Rows where\u003cspan pulumi-lang-nodejs=\" authorizationDecision \" pulumi-lang-dotnet=\" AuthorizationDecision \" pulumi-lang-go=\" authorizationDecision \" pulumi-lang-python=\" authorization_decision \" pulumi-lang-yaml=\" authorizationDecision \" pulumi-lang-java=\" authorizationDecision \"\u003e authorizationDecision \u003c/span\u003ewas patched."
                },
                "patchedDecisionEvidence": {
                    "type": "integer",
                    "description": "Rows where\u003cspan pulumi-lang-nodejs=\" decisionEvidence \" pulumi-lang-dotnet=\" DecisionEvidence \" pulumi-lang-go=\" decisionEvidence \" pulumi-lang-python=\" decision_evidence \" pulumi-lang-yaml=\" decisionEvidence \" pulumi-lang-java=\" decisionEvidence \"\u003e decisionEvidence \u003c/span\u003ewas patched."
                },
                "patchedDecisionReasonCode": {
                    "type": "integer",
                    "description": "Rows where\u003cspan pulumi-lang-nodejs=\" decisionReasonCode \" pulumi-lang-dotnet=\" DecisionReasonCode \" pulumi-lang-go=\" decisionReasonCode \" pulumi-lang-python=\" decision_reason_code \" pulumi-lang-yaml=\" decisionReasonCode \" pulumi-lang-java=\" decisionReasonCode \"\u003e decisionReasonCode \u003c/span\u003ewas patched."
                },
                "patchedDeepllmEnrichment": {
                    "type": "integer",
                    "description": "Rows where\u003cspan pulumi-lang-nodejs=\" deepllmEnrichment \" pulumi-lang-dotnet=\" DeepllmEnrichment \" pulumi-lang-go=\" deepllmEnrichment \" pulumi-lang-python=\" deepllm_enrichment \" pulumi-lang-yaml=\" deepllmEnrichment \" pulumi-lang-java=\" deepllmEnrichment \"\u003e deepllmEnrichment \u003c/span\u003ewas patched."
                },
                "patchedEnforcementTraceId": {
                    "type": "integer",
                    "description": "Rows where\u003cspan pulumi-lang-nodejs=\" enforcementTraceId \" pulumi-lang-dotnet=\" EnforcementTraceId \" pulumi-lang-go=\" enforcementTraceId \" pulumi-lang-python=\" enforcement_trace_id \" pulumi-lang-yaml=\" enforcementTraceId \" pulumi-lang-java=\" enforcementTraceId \"\u003e enforcementTraceId \u003c/span\u003ewas patched."
                },
                "patchedViolationId": {
                    "type": "integer",
                    "description": "Rows where\u003cspan pulumi-lang-nodejs=\" violationId \" pulumi-lang-dotnet=\" ViolationId \" pulumi-lang-go=\" violationId \" pulumi-lang-python=\" violation_id \" pulumi-lang-yaml=\" violationId \" pulumi-lang-java=\" violationId \"\u003e violationId \u003c/span\u003ewas patched."
                },
                "rowIdsJson": {
                    "type": "string",
                    "description": "Candidate row IDs as a JSON array."
                },
                "skippedNoChange": {
                    "type": "integer",
                    "description": "Eligible rows skipped because no field changes were required."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "trigger": {
                    "type": "string",
                    "description": "Change this value to force a re-run."
                },
                "updated": {
                    "type": "integer",
                    "description": "Rows updated when dry_run=false."
                },
                "windowHours": {
                    "type": "integer",
                    "description": "Trailing lookback window in hours (1-2880)."
                },
                "wouldUpdate": {
                    "type": "integer",
                    "description": "Rows that would be updated when dry_run=true."
                }
            },
            "required": [
                "candidates",
                "examined",
                "executedAt",
                "patchedAuthorizationDecision",
                "patchedDecisionEvidence",
                "patchedDecisionReasonCode",
                "patchedDeepllmEnrichment",
                "patchedEnforcementTraceId",
                "patchedViolationId",
                "rowIdsJson",
                "skippedNoChange",
                "tenantId",
                "updated",
                "wouldUpdate"
            ],
            "inputProperties": {
                "dryRun": {
                    "type": "boolean",
                    "description": "Preview candidate patches without persisting updates."
                },
                "includeBlockedEvents": {
                    "type": "boolean",
                    "description": "Include blocked events in candidate selection."
                },
                "limit": {
                    "type": "integer",
                    "description": "Maximum number of candidate rows to evaluate (1-5000)."
                },
                "trigger": {
                    "type": "string",
                    "description": "Change this value to force a re-run."
                },
                "windowHours": {
                    "type": "integer",
                    "description": "Trailing lookback window in hours (1-2880)."
                }
            },
            "stateInputs": {
                "description": "Input properties used for looking up and filtering DecisionFieldBackfill resources.\n",
                "properties": {
                    "candidates": {
                        "type": "integer",
                        "description": "Rows eligible for decision-field patching."
                    },
                    "dryRun": {
                        "type": "boolean",
                        "description": "Preview candidate patches without persisting updates."
                    },
                    "examined": {
                        "type": "integer",
                        "description": "Rows scanned by the backfill operation."
                    },
                    "executedAt": {
                        "type": "string",
                        "description": "Timestamp when backfill execution completed."
                    },
                    "includeBlockedEvents": {
                        "type": "boolean",
                        "description": "Include blocked events in candidate selection."
                    },
                    "limit": {
                        "type": "integer",
                        "description": "Maximum number of candidate rows to evaluate (1-5000)."
                    },
                    "patchedAuthorizationDecision": {
                        "type": "integer",
                        "description": "Rows where\u003cspan pulumi-lang-nodejs=\" authorizationDecision \" pulumi-lang-dotnet=\" AuthorizationDecision \" pulumi-lang-go=\" authorizationDecision \" pulumi-lang-python=\" authorization_decision \" pulumi-lang-yaml=\" authorizationDecision \" pulumi-lang-java=\" authorizationDecision \"\u003e authorizationDecision \u003c/span\u003ewas patched."
                    },
                    "patchedDecisionEvidence": {
                        "type": "integer",
                        "description": "Rows where\u003cspan pulumi-lang-nodejs=\" decisionEvidence \" pulumi-lang-dotnet=\" DecisionEvidence \" pulumi-lang-go=\" decisionEvidence \" pulumi-lang-python=\" decision_evidence \" pulumi-lang-yaml=\" decisionEvidence \" pulumi-lang-java=\" decisionEvidence \"\u003e decisionEvidence \u003c/span\u003ewas patched."
                    },
                    "patchedDecisionReasonCode": {
                        "type": "integer",
                        "description": "Rows where\u003cspan pulumi-lang-nodejs=\" decisionReasonCode \" pulumi-lang-dotnet=\" DecisionReasonCode \" pulumi-lang-go=\" decisionReasonCode \" pulumi-lang-python=\" decision_reason_code \" pulumi-lang-yaml=\" decisionReasonCode \" pulumi-lang-java=\" decisionReasonCode \"\u003e decisionReasonCode \u003c/span\u003ewas patched."
                    },
                    "patchedDeepllmEnrichment": {
                        "type": "integer",
                        "description": "Rows where\u003cspan pulumi-lang-nodejs=\" deepllmEnrichment \" pulumi-lang-dotnet=\" DeepllmEnrichment \" pulumi-lang-go=\" deepllmEnrichment \" pulumi-lang-python=\" deepllm_enrichment \" pulumi-lang-yaml=\" deepllmEnrichment \" pulumi-lang-java=\" deepllmEnrichment \"\u003e deepllmEnrichment \u003c/span\u003ewas patched."
                    },
                    "patchedEnforcementTraceId": {
                        "type": "integer",
                        "description": "Rows where\u003cspan pulumi-lang-nodejs=\" enforcementTraceId \" pulumi-lang-dotnet=\" EnforcementTraceId \" pulumi-lang-go=\" enforcementTraceId \" pulumi-lang-python=\" enforcement_trace_id \" pulumi-lang-yaml=\" enforcementTraceId \" pulumi-lang-java=\" enforcementTraceId \"\u003e enforcementTraceId \u003c/span\u003ewas patched."
                    },
                    "patchedViolationId": {
                        "type": "integer",
                        "description": "Rows where\u003cspan pulumi-lang-nodejs=\" violationId \" pulumi-lang-dotnet=\" ViolationId \" pulumi-lang-go=\" violationId \" pulumi-lang-python=\" violation_id \" pulumi-lang-yaml=\" violationId \" pulumi-lang-java=\" violationId \"\u003e violationId \u003c/span\u003ewas patched."
                    },
                    "rowIdsJson": {
                        "type": "string",
                        "description": "Candidate row IDs as a JSON array."
                    },
                    "skippedNoChange": {
                        "type": "integer",
                        "description": "Eligible rows skipped because no field changes were required."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "trigger": {
                        "type": "string",
                        "description": "Change this value to force a re-run."
                    },
                    "updated": {
                        "type": "integer",
                        "description": "Rows updated when dry_run=false."
                    },
                    "windowHours": {
                        "type": "integer",
                        "description": "Trailing lookback window in hours (1-2880)."
                    },
                    "wouldUpdate": {
                        "type": "integer",
                        "description": "Rows that would be updated when dry_run=true."
                    }
                },
                "type": "object"
            }
        },
        "thoth:governance/evidenceBackfill:EvidenceBackfill": {
            "properties": {
                "candidates": {
                    "type": "integer",
                    "description": "Number of events that qualified for backfill."
                },
                "created": {
                    "type": "integer",
                    "description": "Number of new evidence records created."
                },
                "dryRun": {
                    "type": "boolean",
                    "description": "When true, preview records without persisting evidence."
                },
                "evidenceIdsJson": {
                    "type": "string",
                    "description": "Created or candidate evidence IDs as JSON array."
                },
                "examined": {
                    "type": "integer",
                    "description": "Number of source events examined."
                },
                "executedAt": {
                    "type": "string",
                    "description": "Timestamp when backfill was executed."
                },
                "includeBlockedEvents": {
                    "type": "boolean",
                    "description": "Include blocked decisions in addition to explicit violations."
                },
                "integrationId": {
                    "type": "string",
                    "description": "Optional integration ID stamped on created evidence records."
                },
                "limit": {
                    "type": "integer",
                    "description": "Maximum number of candidate events to evaluate (1-1000)."
                },
                "skippedExisting": {
                    "type": "integer",
                    "description": "Number of candidates skipped due to existing evidence."
                },
                "sourceCollection": {
                    "type": "string",
                    "description": "Source collection used by the backfill endpoint."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "trigger": {
                    "type": "string",
                    "description": "Change this value to force a re-run."
                },
                "wouldCreate": {
                    "type": "integer",
                    "description": "Number of records that would be created in dry-run mode."
                }
            },
            "required": [
                "candidates",
                "created",
                "evidenceIdsJson",
                "examined",
                "executedAt",
                "skippedExisting",
                "sourceCollection",
                "tenantId",
                "wouldCreate"
            ],
            "inputProperties": {
                "dryRun": {
                    "type": "boolean",
                    "description": "When true, preview records without persisting evidence."
                },
                "includeBlockedEvents": {
                    "type": "boolean",
                    "description": "Include blocked decisions in addition to explicit violations."
                },
                "integrationId": {
                    "type": "string",
                    "description": "Optional integration ID stamped on created evidence records."
                },
                "limit": {
                    "type": "integer",
                    "description": "Maximum number of candidate events to evaluate (1-1000)."
                },
                "trigger": {
                    "type": "string",
                    "description": "Change this value to force a re-run."
                }
            },
            "stateInputs": {
                "description": "Input properties used for looking up and filtering EvidenceBackfill resources.\n",
                "properties": {
                    "candidates": {
                        "type": "integer",
                        "description": "Number of events that qualified for backfill."
                    },
                    "created": {
                        "type": "integer",
                        "description": "Number of new evidence records created."
                    },
                    "dryRun": {
                        "type": "boolean",
                        "description": "When true, preview records without persisting evidence."
                    },
                    "evidenceIdsJson": {
                        "type": "string",
                        "description": "Created or candidate evidence IDs as JSON array."
                    },
                    "examined": {
                        "type": "integer",
                        "description": "Number of source events examined."
                    },
                    "executedAt": {
                        "type": "string",
                        "description": "Timestamp when backfill was executed."
                    },
                    "includeBlockedEvents": {
                        "type": "boolean",
                        "description": "Include blocked decisions in addition to explicit violations."
                    },
                    "integrationId": {
                        "type": "string",
                        "description": "Optional integration ID stamped on created evidence records."
                    },
                    "limit": {
                        "type": "integer",
                        "description": "Maximum number of candidate events to evaluate (1-1000)."
                    },
                    "skippedExisting": {
                        "type": "integer",
                        "description": "Number of candidates skipped due to existing evidence."
                    },
                    "sourceCollection": {
                        "type": "string",
                        "description": "Source collection used by the backfill endpoint."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "trigger": {
                        "type": "string",
                        "description": "Change this value to force a re-run."
                    },
                    "wouldCreate": {
                        "type": "integer",
                        "description": "Number of records that would be created in dry-run mode."
                    }
                },
                "type": "object"
            }
        },
        "thoth:governance/governanceSettings:GovernanceSettings": {
            "properties": {
                "complianceProfile": {
                    "type": "string",
                    "description": "Compliance profile (soc2, healthcare, financial, public_sector, privacy, ai_governance)."
                },
                "extraSettingsJson": {
                    "type": "string",
                    "description": "Additional JSON object merged into the outgoing settings payload for forward compatibility."
                },
                "modelRouterAllowedModels": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Allowed model names allowlist."
                },
                "modelRouterAllowedProviders": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Allowed model providers allowlist."
                },
                "modelRouterDefaultModel": {
                    "type": "string",
                    "description": "Default model name."
                },
                "modelRouterDefaultProvider": {
                    "type": "string",
                    "description": "Default model provider."
                },
                "modelRouterEnabled": {
                    "type": "boolean",
                    "description": "Enable model routing policy controls."
                },
                "modelRouterFailoverProviders": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Failover provider order."
                },
                "regulatoryRegimes": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Explicit regulatory regimes for onboarding baseline auto-pack loading (for example: soc2, hipaa, gdpr, fedramp, sec_cftc). Defaults to SOC2 when unset."
                },
                "secretBrokerAllowedHosts": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Allowed host patterns for secret broker."
                },
                "secretBrokerAuthBindingsJson": {
                    "type": "string",
                    "description": "JSON array of auth binding objects (host_pattern, header, secret_ref, prefix)."
                },
                "secretBrokerEnabled": {
                    "type": "boolean",
                    "description": "Enable secret broker policy enforcement."
                },
                "secretBrokerFailOnMissingSecret": {
                    "type": "boolean",
                    "description": "Fail governed calls when referenced secret is unavailable."
                },
                "secretBrokerProvider": {
                    "type": "string",
                    "description": "Secret broker provider slug."
                },
                "secretBrokerStrictEndpointMode": {
                    "type": "boolean",
                    "description": "Require endpoint registration for secret resolution."
                },
                "shadowCritical": {
                    "type": "string",
                    "description": "Default action for critical risk events."
                },
                "shadowHigh": {
                    "type": "string",
                    "description": "Default action for high risk events."
                },
                "shadowLow": {
                    "type": "string",
                    "description": "Default action for low risk events."
                },
                "shadowMedium": {
                    "type": "string",
                    "description": "Default action for medium risk events."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID resolved from provider configuration."
                },
                "toolRiskOverrides": {
                    "type": "object",
                    "additionalProperties": {
                        "type": "string"
                    },
                    "description": "Tool-specific risk tier overrides."
                },
                "updatedAt": {
                    "type": "string",
                    "description": "Last update timestamp returned by GovAPI."
                }
            },
            "required": [
                "modelRouterAllowedModels",
                "modelRouterAllowedProviders",
                "modelRouterDefaultModel",
                "modelRouterDefaultProvider",
                "modelRouterEnabled",
                "modelRouterFailoverProviders",
                "secretBrokerProvider",
                "tenantId",
                "updatedAt"
            ],
            "inputProperties": {
                "complianceProfile": {
                    "type": "string",
                    "description": "Compliance profile (soc2, healthcare, financial, public_sector, privacy, ai_governance)."
                },
                "extraSettingsJson": {
                    "type": "string",
                    "description": "Additional JSON object merged into the outgoing settings payload for forward compatibility."
                },
                "modelRouterAllowedModels": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Allowed model names allowlist."
                },
                "modelRouterAllowedProviders": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Allowed model providers allowlist."
                },
                "modelRouterDefaultModel": {
                    "type": "string",
                    "description": "Default model name."
                },
                "modelRouterDefaultProvider": {
                    "type": "string",
                    "description": "Default model provider."
                },
                "modelRouterEnabled": {
                    "type": "boolean",
                    "description": "Enable model routing policy controls."
                },
                "modelRouterFailoverProviders": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Failover provider order."
                },
                "regulatoryRegimes": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Explicit regulatory regimes for onboarding baseline auto-pack loading (for example: soc2, hipaa, gdpr, fedramp, sec_cftc). Defaults to SOC2 when unset."
                },
                "secretBrokerAllowedHosts": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Allowed host patterns for secret broker."
                },
                "secretBrokerAuthBindingsJson": {
                    "type": "string",
                    "description": "JSON array of auth binding objects (host_pattern, header, secret_ref, prefix)."
                },
                "secretBrokerEnabled": {
                    "type": "boolean",
                    "description": "Enable secret broker policy enforcement."
                },
                "secretBrokerFailOnMissingSecret": {
                    "type": "boolean",
                    "description": "Fail governed calls when referenced secret is unavailable."
                },
                "secretBrokerProvider": {
                    "type": "string",
                    "description": "Secret broker provider slug."
                },
                "secretBrokerStrictEndpointMode": {
                    "type": "boolean",
                    "description": "Require endpoint registration for secret resolution."
                },
                "shadowCritical": {
                    "type": "string",
                    "description": "Default action for critical risk events."
                },
                "shadowHigh": {
                    "type": "string",
                    "description": "Default action for high risk events."
                },
                "shadowLow": {
                    "type": "string",
                    "description": "Default action for low risk events."
                },
                "shadowMedium": {
                    "type": "string",
                    "description": "Default action for medium risk events."
                },
                "toolRiskOverrides": {
                    "type": "object",
                    "additionalProperties": {
                        "type": "string"
                    },
                    "description": "Tool-specific risk tier overrides."
                }
            },
            "stateInputs": {
                "description": "Input properties used for looking up and filtering GovernanceSettings resources.\n",
                "properties": {
                    "complianceProfile": {
                        "type": "string",
                        "description": "Compliance profile (soc2, healthcare, financial, public_sector, privacy, ai_governance)."
                    },
                    "extraSettingsJson": {
                        "type": "string",
                        "description": "Additional JSON object merged into the outgoing settings payload for forward compatibility."
                    },
                    "modelRouterAllowedModels": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Allowed model names allowlist."
                    },
                    "modelRouterAllowedProviders": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Allowed model providers allowlist."
                    },
                    "modelRouterDefaultModel": {
                        "type": "string",
                        "description": "Default model name."
                    },
                    "modelRouterDefaultProvider": {
                        "type": "string",
                        "description": "Default model provider."
                    },
                    "modelRouterEnabled": {
                        "type": "boolean",
                        "description": "Enable model routing policy controls."
                    },
                    "modelRouterFailoverProviders": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Failover provider order."
                    },
                    "regulatoryRegimes": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Explicit regulatory regimes for onboarding baseline auto-pack loading (for example: soc2, hipaa, gdpr, fedramp, sec_cftc). Defaults to SOC2 when unset."
                    },
                    "secretBrokerAllowedHosts": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Allowed host patterns for secret broker."
                    },
                    "secretBrokerAuthBindingsJson": {
                        "type": "string",
                        "description": "JSON array of auth binding objects (host_pattern, header, secret_ref, prefix)."
                    },
                    "secretBrokerEnabled": {
                        "type": "boolean",
                        "description": "Enable secret broker policy enforcement."
                    },
                    "secretBrokerFailOnMissingSecret": {
                        "type": "boolean",
                        "description": "Fail governed calls when referenced secret is unavailable."
                    },
                    "secretBrokerProvider": {
                        "type": "string",
                        "description": "Secret broker provider slug."
                    },
                    "secretBrokerStrictEndpointMode": {
                        "type": "boolean",
                        "description": "Require endpoint registration for secret resolution."
                    },
                    "shadowCritical": {
                        "type": "string",
                        "description": "Default action for critical risk events."
                    },
                    "shadowHigh": {
                        "type": "string",
                        "description": "Default action for high risk events."
                    },
                    "shadowLow": {
                        "type": "string",
                        "description": "Default action for low risk events."
                    },
                    "shadowMedium": {
                        "type": "string",
                        "description": "Default action for medium risk events."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID resolved from provider configuration."
                    },
                    "toolRiskOverrides": {
                        "type": "object",
                        "additionalProperties": {
                            "type": "string"
                        },
                        "description": "Tool-specific risk tier overrides."
                    },
                    "updatedAt": {
                        "type": "string",
                        "description": "Last update timestamp returned by GovAPI."
                    }
                },
                "type": "object"
            }
        },
        "thoth:governance/packAssignment:PackAssignment": {
            "properties": {
                "agentId": {
                    "type": "string",
                    "description": "Target agent ID."
                },
                "appliedAt": {
                    "type": "string",
                    "description": "Apply timestamp."
                },
                "appliedBy": {
                    "type": "string",
                    "description": "Principal that applied the pack."
                },
                "approvalPolicyId": {
                    "type": "string",
                    "description": "Approval policy ID for pack application."
                },
                "criticalThreshold": {
                    "type": "number",
                    "description": "Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1)."
                },
                "delegationBoost": {
                    "type": "number",
                    "description": "Deterministic boost for delegation risk signals (0-100)."
                },
                "environment": {
                    "type": "string",
                    "description": "Environment: dev or prod."
                },
                "mismatchBoost": {
                    "type": "number",
                    "description": "Deterministic boost for purpose/sensitivity mismatch signals (0-100)."
                },
                "overridesJson": {
                    "type": "string",
                    "description": "Pack override JSON object."
                },
                "packId": {
                    "type": "string",
                    "description": "Compliance pack identifier."
                },
                "regulation": {
                    "type": "string",
                    "description": "Regulation family for applied pack."
                },
                "revokedAt": {
                    "type": "string",
                    "description": "Revoke timestamp when assignment is removed."
                },
                "ruleVersion": {
                    "type": "integer",
                    "description": "Rule version applied by enforcer."
                },
                "status": {
                    "type": "string",
                    "description": "Current assignment status."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "trustFloor": {
                    "type": "number",
                    "description": "Ignore low-confidence purpose/delegation signals below this floor (0-1)."
                }
            },
            "required": [
                "agentId",
                "appliedAt",
                "appliedBy",
                "packId",
                "regulation",
                "revokedAt",
                "ruleVersion",
                "status",
                "tenantId"
            ],
            "inputProperties": {
                "agentId": {
                    "type": "string",
                    "description": "Target agent ID."
                },
                "approvalPolicyId": {
                    "type": "string",
                    "description": "Approval policy ID for pack application."
                },
                "criticalThreshold": {
                    "type": "number",
                    "description": "Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1)."
                },
                "delegationBoost": {
                    "type": "number",
                    "description": "Deterministic boost for delegation risk signals (0-100)."
                },
                "environment": {
                    "type": "string",
                    "description": "Environment: dev or prod."
                },
                "mismatchBoost": {
                    "type": "number",
                    "description": "Deterministic boost for purpose/sensitivity mismatch signals (0-100)."
                },
                "overridesJson": {
                    "type": "string",
                    "description": "Pack override JSON object."
                },
                "packId": {
                    "type": "string",
                    "description": "Compliance pack identifier."
                },
                "trustFloor": {
                    "type": "number",
                    "description": "Ignore low-confidence purpose/delegation signals below this floor (0-1)."
                }
            },
            "requiredInputs": [
                "agentId",
                "packId"
            ],
            "stateInputs": {
                "description": "Input properties used for looking up and filtering PackAssignment resources.\n",
                "properties": {
                    "agentId": {
                        "type": "string",
                        "description": "Target agent ID."
                    },
                    "appliedAt": {
                        "type": "string",
                        "description": "Apply timestamp."
                    },
                    "appliedBy": {
                        "type": "string",
                        "description": "Principal that applied the pack."
                    },
                    "approvalPolicyId": {
                        "type": "string",
                        "description": "Approval policy ID for pack application."
                    },
                    "criticalThreshold": {
                        "type": "number",
                        "description": "Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1)."
                    },
                    "delegationBoost": {
                        "type": "number",
                        "description": "Deterministic boost for delegation risk signals (0-100)."
                    },
                    "environment": {
                        "type": "string",
                        "description": "Environment: dev or prod."
                    },
                    "mismatchBoost": {
                        "type": "number",
                        "description": "Deterministic boost for purpose/sensitivity mismatch signals (0-100)."
                    },
                    "overridesJson": {
                        "type": "string",
                        "description": "Pack override JSON object."
                    },
                    "packId": {
                        "type": "string",
                        "description": "Compliance pack identifier."
                    },
                    "regulation": {
                        "type": "string",
                        "description": "Regulation family for applied pack."
                    },
                    "revokedAt": {
                        "type": "string",
                        "description": "Revoke timestamp when assignment is removed."
                    },
                    "ruleVersion": {
                        "type": "integer",
                        "description": "Rule version applied by enforcer."
                    },
                    "status": {
                        "type": "string",
                        "description": "Current assignment status."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "trustFloor": {
                        "type": "number",
                        "description": "Ignore low-confidence purpose/delegation signals below this floor (0-1)."
                    }
                },
                "type": "object"
            }
        },
        "thoth:governance/packAssignmentBulk:PackAssignmentBulk": {
            "properties": {
                "agentIds": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Specific agent IDs to target."
                },
                "allAgents": {
                    "type": "boolean",
                    "description": "Apply to all known agents for the tenant."
                },
                "appliedCount": {
                    "type": "integer",
                    "description": "Successful apply operations."
                },
                "approvalPolicyId": {
                    "type": "string",
                    "description": "Approval policy ID for pack application (defaults to 'default')."
                },
                "criticalThreshold": {
                    "type": "number",
                    "description": "Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1). Applied to selected pack_ids."
                },
                "delegationBoost": {
                    "type": "number",
                    "description": "Deterministic boost for delegation risk signals (0-100). Applied to selected pack_ids."
                },
                "endpointIds": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Endpoint IDs whose agents should receive the selected packs."
                },
                "environment": {
                    "type": "string",
                    "description": "Environment: dev or prod."
                },
                "failedCount": {
                    "type": "integer",
                    "description": "Failed apply operations."
                },
                "fleetIds": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Fleet IDs whose agents should receive the selected packs."
                },
                "lastAppliedAt": {
                    "type": "string",
                    "description": "Timestamp of the most recent apply operation."
                },
                "mismatchBoost": {
                    "type": "number",
                    "description": "Deterministic boost for purpose/sensitivity mismatch signals (0-100). Applied to selected pack_ids."
                },
                "overridesByPackJson": {
                    "type": "string",
                    "description": "JSON map keyed by\u003cspan pulumi-lang-nodejs=\" packId \" pulumi-lang-dotnet=\" PackId \" pulumi-lang-go=\" packId \" pulumi-lang-python=\" pack_id \" pulumi-lang-yaml=\" packId \" pulumi-lang-java=\" packId \"\u003e packId \u003c/span\u003ewith per-pack overrides."
                },
                "packIds": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Pack IDs to apply in one bulk operation."
                },
                "resultsJson": {
                    "type": "string",
                    "description": "Raw apply results as JSON array."
                },
                "targetAgentIdsJson": {
                    "type": "string",
                    "description": "Resolved target agent IDs as JSON array."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "totalOps": {
                    "type": "integer",
                    "description": "Total attempted apply operations."
                },
                "trigger": {
                    "type": "string",
                    "description": "Change this value to force a fresh apply run."
                },
                "trustFloor": {
                    "type": "number",
                    "description": "Ignore low-confidence purpose/delegation signals below this floor (0-1). Applied to selected pack_ids."
                }
            },
            "required": [
                "appliedCount",
                "failedCount",
                "lastAppliedAt",
                "packIds",
                "resultsJson",
                "targetAgentIdsJson",
                "tenantId",
                "totalOps"
            ],
            "inputProperties": {
                "agentIds": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Specific agent IDs to target."
                },
                "allAgents": {
                    "type": "boolean",
                    "description": "Apply to all known agents for the tenant."
                },
                "approvalPolicyId": {
                    "type": "string",
                    "description": "Approval policy ID for pack application (defaults to 'default')."
                },
                "criticalThreshold": {
                    "type": "number",
                    "description": "Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1). Applied to selected pack_ids."
                },
                "delegationBoost": {
                    "type": "number",
                    "description": "Deterministic boost for delegation risk signals (0-100). Applied to selected pack_ids."
                },
                "endpointIds": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Endpoint IDs whose agents should receive the selected packs."
                },
                "environment": {
                    "type": "string",
                    "description": "Environment: dev or prod."
                },
                "fleetIds": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Fleet IDs whose agents should receive the selected packs."
                },
                "mismatchBoost": {
                    "type": "number",
                    "description": "Deterministic boost for purpose/sensitivity mismatch signals (0-100). Applied to selected pack_ids."
                },
                "overridesByPackJson": {
                    "type": "string",
                    "description": "JSON map keyed by\u003cspan pulumi-lang-nodejs=\" packId \" pulumi-lang-dotnet=\" PackId \" pulumi-lang-go=\" packId \" pulumi-lang-python=\" pack_id \" pulumi-lang-yaml=\" packId \" pulumi-lang-java=\" packId \"\u003e packId \u003c/span\u003ewith per-pack overrides."
                },
                "packIds": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Pack IDs to apply in one bulk operation."
                },
                "trigger": {
                    "type": "string",
                    "description": "Change this value to force a fresh apply run."
                },
                "trustFloor": {
                    "type": "number",
                    "description": "Ignore low-confidence purpose/delegation signals below this floor (0-1). Applied to selected pack_ids."
                }
            },
            "requiredInputs": [
                "packIds"
            ],
            "stateInputs": {
                "description": "Input properties used for looking up and filtering PackAssignmentBulk resources.\n",
                "properties": {
                    "agentIds": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Specific agent IDs to target."
                    },
                    "allAgents": {
                        "type": "boolean",
                        "description": "Apply to all known agents for the tenant."
                    },
                    "appliedCount": {
                        "type": "integer",
                        "description": "Successful apply operations."
                    },
                    "approvalPolicyId": {
                        "type": "string",
                        "description": "Approval policy ID for pack application (defaults to 'default')."
                    },
                    "criticalThreshold": {
                        "type": "number",
                        "description": "Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1). Applied to selected pack_ids."
                    },
                    "delegationBoost": {
                        "type": "number",
                        "description": "Deterministic boost for delegation risk signals (0-100). Applied to selected pack_ids."
                    },
                    "endpointIds": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Endpoint IDs whose agents should receive the selected packs."
                    },
                    "environment": {
                        "type": "string",
                        "description": "Environment: dev or prod."
                    },
                    "failedCount": {
                        "type": "integer",
                        "description": "Failed apply operations."
                    },
                    "fleetIds": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Fleet IDs whose agents should receive the selected packs."
                    },
                    "lastAppliedAt": {
                        "type": "string",
                        "description": "Timestamp of the most recent apply operation."
                    },
                    "mismatchBoost": {
                        "type": "number",
                        "description": "Deterministic boost for purpose/sensitivity mismatch signals (0-100). Applied to selected pack_ids."
                    },
                    "overridesByPackJson": {
                        "type": "string",
                        "description": "JSON map keyed by\u003cspan pulumi-lang-nodejs=\" packId \" pulumi-lang-dotnet=\" PackId \" pulumi-lang-go=\" packId \" pulumi-lang-python=\" pack_id \" pulumi-lang-yaml=\" packId \" pulumi-lang-java=\" packId \"\u003e packId \u003c/span\u003ewith per-pack overrides."
                    },
                    "packIds": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Pack IDs to apply in one bulk operation."
                    },
                    "resultsJson": {
                        "type": "string",
                        "description": "Raw apply results as JSON array."
                    },
                    "targetAgentIdsJson": {
                        "type": "string",
                        "description": "Resolved target agent IDs as JSON array."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "totalOps": {
                        "type": "integer",
                        "description": "Total attempted apply operations."
                    },
                    "trigger": {
                        "type": "string",
                        "description": "Change this value to force a fresh apply run."
                    },
                    "trustFloor": {
                        "type": "number",
                        "description": "Ignore low-confidence purpose/delegation signals below this floor (0-1). Applied to selected pack_ids."
                    }
                },
                "type": "object"
            }
        },
        "thoth:governance/pamSettings:PamSettings": {
            "properties": {
                "pamCallbackSecret": {
                    "type": "string",
                    "description": "Shared secret for PAM callback validation.",
                    "secret": true
                },
                "pamEnabled": {
                    "type": "boolean",
                    "description": "Enable PAM step-up callback integration."
                },
                "pamProvider": {
                    "type": "string",
                    "description": "PAM provider slug."
                },
                "pamRequestAuthToken": {
                    "type": "string",
                    "description": "Outbound PAM auth token.",
                    "secret": true
                },
                "pamRequestSecret": {
                    "type": "string",
                    "description": "Outbound PAM request secret.",
                    "secret": true
                },
                "pamRequestTimeoutSeconds": {
                    "type": "number",
                    "description": "Outbound PAM request timeout in seconds."
                },
                "pamRequestUrl": {
                    "type": "string",
                    "description": "Outbound PAM request URL."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID resolved from provider configuration."
                },
                "updatedAt": {
                    "type": "string",
                    "description": "Last update timestamp returned by GovAPI."
                }
            },
            "required": [
                "pamEnabled",
                "pamProvider",
                "pamRequestTimeoutSeconds",
                "pamRequestUrl",
                "tenantId",
                "updatedAt"
            ],
            "inputProperties": {
                "pamCallbackSecret": {
                    "type": "string",
                    "description": "Shared secret for PAM callback validation.",
                    "secret": true
                },
                "pamEnabled": {
                    "type": "boolean",
                    "description": "Enable PAM step-up callback integration."
                },
                "pamProvider": {
                    "type": "string",
                    "description": "PAM provider slug."
                },
                "pamRequestAuthToken": {
                    "type": "string",
                    "description": "Outbound PAM auth token.",
                    "secret": true
                },
                "pamRequestSecret": {
                    "type": "string",
                    "description": "Outbound PAM request secret.",
                    "secret": true
                },
                "pamRequestTimeoutSeconds": {
                    "type": "number",
                    "description": "Outbound PAM request timeout in seconds."
                },
                "pamRequestUrl": {
                    "type": "string",
                    "description": "Outbound PAM request URL."
                }
            },
            "stateInputs": {
                "description": "Input properties used for looking up and filtering PamSettings resources.\n",
                "properties": {
                    "pamCallbackSecret": {
                        "type": "string",
                        "description": "Shared secret for PAM callback validation.",
                        "secret": true
                    },
                    "pamEnabled": {
                        "type": "boolean",
                        "description": "Enable PAM step-up callback integration."
                    },
                    "pamProvider": {
                        "type": "string",
                        "description": "PAM provider slug."
                    },
                    "pamRequestAuthToken": {
                        "type": "string",
                        "description": "Outbound PAM auth token.",
                        "secret": true
                    },
                    "pamRequestSecret": {
                        "type": "string",
                        "description": "Outbound PAM request secret.",
                        "secret": true
                    },
                    "pamRequestTimeoutSeconds": {
                        "type": "number",
                        "description": "Outbound PAM request timeout in seconds."
                    },
                    "pamRequestUrl": {
                        "type": "string",
                        "description": "Outbound PAM request URL."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID resolved from provider configuration."
                    },
                    "updatedAt": {
                        "type": "string",
                        "description": "Last update timestamp returned by GovAPI."
                    }
                },
                "type": "object"
            }
        },
        "thoth:governance/policyBundle:PolicyBundle": {
            "properties": {
                "assignments": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Assignment targets (for example: all, agent:security-analyst-agent, coding-agent). Defaults to all."
                },
                "createdAt": {
                    "type": "string",
                    "description": "Creation timestamp."
                },
                "createdBy": {
                    "type": "string",
                    "description": "Creator identity."
                },
                "description": {
                    "type": "string",
                    "description": "Optional policy bundle description."
                },
                "enforcementMode": {
                    "type": "string",
                    "description": "Customer-facing policy mode: enforce or observe. Defaults to enforce."
                },
                "expectedHash": {
                    "type": "string",
                    "description": "Optional expected SHA-256 hash (hex or sha256:\u003chex\u003e) to enforce policy integrity."
                },
                "framework": {
                    "type": "string",
                    "description": "Policy framework: OPA or CEDAR."
                },
                "name": {
                    "type": "string",
                    "description": "Stable bundle name. Updates create a new version for the same name."
                },
                "policyHash": {
                    "type": "string",
                    "description": "SHA-256 hash of policy content."
                },
                "rawPolicy": {
                    "type": "string",
                    "description": "Raw Rego/Cedar policy payload. Set this or source_uri/s3_uri.",
                    "secret": true
                },
                "resolvedVersion": {
                    "type": "string",
                    "description": "Resolved immutable source version (S3 version ID or file revision hint)."
                },
                "s3Uri": {
                    "type": "string",
                    "description": "Legacy S3 source URI (for example: s3://bucket/path/policy.rego). Set this or raw_policy. Prefer source_uri."
                },
                "s3VersionId": {
                    "type": "string",
                    "description": "Optional S3 object version ID to pin deterministic policy enforcement."
                },
                "sourceUri": {
                    "type": "string",
                    "description": "Unified policy source URI (file:// or s3://). Set this or raw_policy."
                },
                "status": {
                    "type": "string",
                    "description": "Bundle lifecycle status: active, staged, paused, or disabled (alias of paused)."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "updatedAt": {
                    "type": "string",
                    "description": "Last update timestamp."
                },
                "version": {
                    "type": "integer",
                    "description": "Monotonic policy bundle version."
                }
            },
            "required": [
                "createdAt",
                "createdBy",
                "framework",
                "name",
                "policyHash",
                "resolvedVersion",
                "tenantId",
                "updatedAt",
                "version"
            ],
            "inputProperties": {
                "assignments": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Assignment targets (for example: all, agent:security-analyst-agent, coding-agent). Defaults to all."
                },
                "description": {
                    "type": "string",
                    "description": "Optional policy bundle description."
                },
                "enforcementMode": {
                    "type": "string",
                    "description": "Customer-facing policy mode: enforce or observe. Defaults to enforce."
                },
                "expectedHash": {
                    "type": "string",
                    "description": "Optional expected SHA-256 hash (hex or sha256:\u003chex\u003e) to enforce policy integrity."
                },
                "framework": {
                    "type": "string",
                    "description": "Policy framework: OPA or CEDAR."
                },
                "name": {
                    "type": "string",
                    "description": "Stable bundle name. Updates create a new version for the same name."
                },
                "rawPolicy": {
                    "type": "string",
                    "description": "Raw Rego/Cedar policy payload. Set this or source_uri/s3_uri.",
                    "secret": true
                },
                "s3Uri": {
                    "type": "string",
                    "description": "Legacy S3 source URI (for example: s3://bucket/path/policy.rego). Set this or raw_policy. Prefer source_uri."
                },
                "s3VersionId": {
                    "type": "string",
                    "description": "Optional S3 object version ID to pin deterministic policy enforcement."
                },
                "sourceUri": {
                    "type": "string",
                    "description": "Unified policy source URI (file:// or s3://). Set this or raw_policy."
                },
                "status": {
                    "type": "string",
                    "description": "Bundle lifecycle status: active, staged, paused, or disabled (alias of paused)."
                }
            },
            "requiredInputs": [
                "framework",
                "name"
            ],
            "stateInputs": {
                "description": "Input properties used for looking up and filtering PolicyBundle resources.\n",
                "properties": {
                    "assignments": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Assignment targets (for example: all, agent:security-analyst-agent, coding-agent). Defaults to all."
                    },
                    "createdAt": {
                        "type": "string",
                        "description": "Creation timestamp."
                    },
                    "createdBy": {
                        "type": "string",
                        "description": "Creator identity."
                    },
                    "description": {
                        "type": "string",
                        "description": "Optional policy bundle description."
                    },
                    "enforcementMode": {
                        "type": "string",
                        "description": "Customer-facing policy mode: enforce or observe. Defaults to enforce."
                    },
                    "expectedHash": {
                        "type": "string",
                        "description": "Optional expected SHA-256 hash (hex or sha256:\u003chex\u003e) to enforce policy integrity."
                    },
                    "framework": {
                        "type": "string",
                        "description": "Policy framework: OPA or CEDAR."
                    },
                    "name": {
                        "type": "string",
                        "description": "Stable bundle name. Updates create a new version for the same name."
                    },
                    "policyHash": {
                        "type": "string",
                        "description": "SHA-256 hash of policy content."
                    },
                    "rawPolicy": {
                        "type": "string",
                        "description": "Raw Rego/Cedar policy payload. Set this or source_uri/s3_uri.",
                        "secret": true
                    },
                    "resolvedVersion": {
                        "type": "string",
                        "description": "Resolved immutable source version (S3 version ID or file revision hint)."
                    },
                    "s3Uri": {
                        "type": "string",
                        "description": "Legacy S3 source URI (for example: s3://bucket/path/policy.rego). Set this or raw_policy. Prefer source_uri."
                    },
                    "s3VersionId": {
                        "type": "string",
                        "description": "Optional S3 object version ID to pin deterministic policy enforcement."
                    },
                    "sourceUri": {
                        "type": "string",
                        "description": "Unified policy source URI (file:// or s3://). Set this or raw_policy."
                    },
                    "status": {
                        "type": "string",
                        "description": "Bundle lifecycle status: active, staged, paused, or disabled (alias of paused)."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "updatedAt": {
                        "type": "string",
                        "description": "Last update timestamp."
                    },
                    "version": {
                        "type": "integer",
                        "description": "Monotonic policy bundle version."
                    }
                },
                "type": "object"
            }
        },
        "thoth:governance/policyChangeArtifactApply:PolicyChangeArtifactApply": {
            "properties": {
                "appliedAt": {
                    "type": "string",
                    "description": "Apply execution timestamp."
                },
                "appliedBy": {
                    "type": "string",
                    "description": "Actor applying the artifact."
                },
                "applyChannel": {
                    "type": "string",
                    "description": "Apply channel to use. Defaults to govapi."
                },
                "artifactId": {
                    "type": "string",
                    "description": "Artifact ID used for apply."
                },
                "assignments": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Optional assignment targets for govapi policy bundle apply."
                },
                "bundleDescription": {
                    "type": "string",
                    "description": "Optional bundle description for govapi apply."
                },
                "bundleName": {
                    "type": "string",
                    "description": "Optional override bundle name for govapi apply."
                },
                "enforcementMode": {
                    "type": "string",
                    "description": "Optional enforcement mode override (enforce or observe)."
                },
                "govapiResourceJson": {
                    "type": "string",
                    "description": "GovAPI resource returned by apply operation as JSON."
                },
                "overrideRevoked": {
                    "type": "boolean",
                    "description": "Whether a temporary runtime override was revoked after apply."
                },
                "policyFormat": {
                    "type": "string",
                    "description": "Preferred policy format for apply payload (cedar, rego, yaml)."
                },
                "requestId": {
                    "type": "string",
                    "description": "Policy exception request ID."
                },
                "responseJson": {
                    "type": "string",
                    "description": "Full apply response as JSON."
                },
                "status": {
                    "type": "string",
                    "description": "Optional policy bundle status override (active, staged, paused, disabled)."
                },
                "targetEnvironment": {
                    "type": "string",
                    "description": "Target environment for the apply operation."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                }
            },
            "required": [
                "appliedAt",
                "appliedBy",
                "artifactId",
                "govapiResourceJson",
                "overrideRevoked",
                "requestId",
                "responseJson",
                "targetEnvironment",
                "tenantId"
            ],
            "inputProperties": {
                "appliedBy": {
                    "type": "string",
                    "description": "Actor applying the artifact."
                },
                "applyChannel": {
                    "type": "string",
                    "description": "Apply channel to use. Defaults to govapi."
                },
                "assignments": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Optional assignment targets for govapi policy bundle apply."
                },
                "bundleDescription": {
                    "type": "string",
                    "description": "Optional bundle description for govapi apply."
                },
                "bundleName": {
                    "type": "string",
                    "description": "Optional override bundle name for govapi apply."
                },
                "enforcementMode": {
                    "type": "string",
                    "description": "Optional enforcement mode override (enforce or observe)."
                },
                "policyFormat": {
                    "type": "string",
                    "description": "Preferred policy format for apply payload (cedar, rego, yaml)."
                },
                "requestId": {
                    "type": "string",
                    "description": "Policy exception request ID."
                },
                "status": {
                    "type": "string",
                    "description": "Optional policy bundle status override (active, staged, paused, disabled)."
                }
            },
            "requiredInputs": [
                "appliedBy",
                "requestId"
            ],
            "stateInputs": {
                "description": "Input properties used for looking up and filtering PolicyChangeArtifactApply resources.\n",
                "properties": {
                    "appliedAt": {
                        "type": "string",
                        "description": "Apply execution timestamp."
                    },
                    "appliedBy": {
                        "type": "string",
                        "description": "Actor applying the artifact."
                    },
                    "applyChannel": {
                        "type": "string",
                        "description": "Apply channel to use. Defaults to govapi."
                    },
                    "artifactId": {
                        "type": "string",
                        "description": "Artifact ID used for apply."
                    },
                    "assignments": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Optional assignment targets for govapi policy bundle apply."
                    },
                    "bundleDescription": {
                        "type": "string",
                        "description": "Optional bundle description for govapi apply."
                    },
                    "bundleName": {
                        "type": "string",
                        "description": "Optional override bundle name for govapi apply."
                    },
                    "enforcementMode": {
                        "type": "string",
                        "description": "Optional enforcement mode override (enforce or observe)."
                    },
                    "govapiResourceJson": {
                        "type": "string",
                        "description": "GovAPI resource returned by apply operation as JSON."
                    },
                    "overrideRevoked": {
                        "type": "boolean",
                        "description": "Whether a temporary runtime override was revoked after apply."
                    },
                    "policyFormat": {
                        "type": "string",
                        "description": "Preferred policy format for apply payload (cedar, rego, yaml)."
                    },
                    "requestId": {
                        "type": "string",
                        "description": "Policy exception request ID."
                    },
                    "responseJson": {
                        "type": "string",
                        "description": "Full apply response as JSON."
                    },
                    "status": {
                        "type": "string",
                        "description": "Optional policy bundle status override (active, staged, paused, disabled)."
                    },
                    "targetEnvironment": {
                        "type": "string",
                        "description": "Target environment for the apply operation."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    }
                },
                "type": "object"
            }
        },
        "thoth:governance/policyException:PolicyException": {
            "properties": {
                "agentId": {
                    "type": "string",
                    "description": "Agent ID associated with the request."
                },
                "alternativesConsidered": {
                    "type": "string",
                    "description": "Optional alternatives reviewed before requesting an exception."
                },
                "businessJustification": {
                    "type": "string",
                    "description": "Business reason for requesting the exception."
                },
                "createdAt": {
                    "type": "string",
                    "description": "Creation timestamp."
                },
                "dataSensitivity": {
                    "type": "string",
                    "description": "Data sensitivity level touched by this exception."
                },
                "frequencyEstimate": {
                    "type": "string",
                    "description": "How often this exception is expected to occur."
                },
                "holdToken": {
                    "type": "string",
                    "description": "Optional hold token when exception is tied to STEP_UP workflow."
                },
                "policyChangeJson": {
                    "type": "string",
                    "description": "Policy change metadata returned by the review flow."
                },
                "requestId": {
                    "type": "string",
                    "description": "Optional request ID. If omitted, enforcer generates one."
                },
                "requestedBy": {
                    "type": "string",
                    "description": "Requester identity."
                },
                "reviewDecision": {
                    "type": "string",
                    "description": "Review decision when present."
                },
                "reviewNotes": {
                    "type": "string",
                    "description": "Review notes when present."
                },
                "reviewedBy": {
                    "type": "string",
                    "description": "Reviewer identity when present."
                },
                "status": {
                    "type": "string",
                    "description": "Current policy exception status."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "toolName": {
                    "type": "string",
                    "description": "Tool/action name associated with the request."
                },
                "updatedAt": {
                    "type": "string",
                    "description": "Last update timestamp."
                },
                "violationId": {
                    "type": "string",
                    "description": "Violation ID associated with this exception request."
                }
            },
            "required": [
                "businessJustification",
                "createdAt",
                "dataSensitivity",
                "frequencyEstimate",
                "policyChangeJson",
                "requestId",
                "requestedBy",
                "reviewDecision",
                "reviewNotes",
                "reviewedBy",
                "status",
                "tenantId",
                "updatedAt",
                "violationId"
            ],
            "inputProperties": {
                "agentId": {
                    "type": "string",
                    "description": "Agent ID associated with the request."
                },
                "alternativesConsidered": {
                    "type": "string",
                    "description": "Optional alternatives reviewed before requesting an exception."
                },
                "businessJustification": {
                    "type": "string",
                    "description": "Business reason for requesting the exception."
                },
                "dataSensitivity": {
                    "type": "string",
                    "description": "Data sensitivity level touched by this exception."
                },
                "frequencyEstimate": {
                    "type": "string",
                    "description": "How often this exception is expected to occur."
                },
                "holdToken": {
                    "type": "string",
                    "description": "Optional hold token when exception is tied to STEP_UP workflow."
                },
                "requestId": {
                    "type": "string",
                    "description": "Optional request ID. If omitted, enforcer generates one."
                },
                "requestedBy": {
                    "type": "string",
                    "description": "Requester identity."
                },
                "toolName": {
                    "type": "string",
                    "description": "Tool/action name associated with the request."
                },
                "violationId": {
                    "type": "string",
                    "description": "Violation ID associated with this exception request."
                }
            },
            "requiredInputs": [
                "businessJustification",
                "dataSensitivity",
                "frequencyEstimate",
                "requestedBy",
                "violationId"
            ],
            "stateInputs": {
                "description": "Input properties used for looking up and filtering PolicyException resources.\n",
                "properties": {
                    "agentId": {
                        "type": "string",
                        "description": "Agent ID associated with the request."
                    },
                    "alternativesConsidered": {
                        "type": "string",
                        "description": "Optional alternatives reviewed before requesting an exception."
                    },
                    "businessJustification": {
                        "type": "string",
                        "description": "Business reason for requesting the exception."
                    },
                    "createdAt": {
                        "type": "string",
                        "description": "Creation timestamp."
                    },
                    "dataSensitivity": {
                        "type": "string",
                        "description": "Data sensitivity level touched by this exception."
                    },
                    "frequencyEstimate": {
                        "type": "string",
                        "description": "How often this exception is expected to occur."
                    },
                    "holdToken": {
                        "type": "string",
                        "description": "Optional hold token when exception is tied to STEP_UP workflow."
                    },
                    "policyChangeJson": {
                        "type": "string",
                        "description": "Policy change metadata returned by the review flow."
                    },
                    "requestId": {
                        "type": "string",
                        "description": "Optional request ID. If omitted, enforcer generates one."
                    },
                    "requestedBy": {
                        "type": "string",
                        "description": "Requester identity."
                    },
                    "reviewDecision": {
                        "type": "string",
                        "description": "Review decision when present."
                    },
                    "reviewNotes": {
                        "type": "string",
                        "description": "Review notes when present."
                    },
                    "reviewedBy": {
                        "type": "string",
                        "description": "Reviewer identity when present."
                    },
                    "status": {
                        "type": "string",
                        "description": "Current policy exception status."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "toolName": {
                        "type": "string",
                        "description": "Tool/action name associated with the request."
                    },
                    "updatedAt": {
                        "type": "string",
                        "description": "Last update timestamp."
                    },
                    "violationId": {
                        "type": "string",
                        "description": "Violation ID associated with this exception request."
                    }
                },
                "type": "object"
            }
        },
        "thoth:governance/policyExceptionReview:PolicyExceptionReview": {
            "properties": {
                "appliedPolicyChangeJson": {
                    "type": "string",
                    "description": "Policy change metadata present on the reviewed exception."
                },
                "overrideExpiresAt": {
                    "type": "string",
                    "description": "Optional runtime override expiration timestamp (RFC3339)."
                },
                "owner": {
                    "type": "string",
                    "description": "Optional owner metadata used when synthesizing policy artifacts."
                },
                "policyChangeJson": {
                    "type": "string",
                    "description": "Optional policy change override JSON payload."
                },
                "requestId": {
                    "type": "string",
                    "description": "Policy exception request ID."
                },
                "reviewDecision": {
                    "type": "string",
                    "description": "Review outcome: approve, deny, request_changes, approve_with_modification."
                },
                "reviewNotes": {
                    "type": "string",
                    "description": "Optional review notes."
                },
                "reviewedBy": {
                    "type": "string",
                    "description": "Reviewer identity."
                },
                "status": {
                    "type": "string",
                    "description": "Resulting policy exception status."
                },
                "targetEnvironment": {
                    "type": "string",
                    "description": "Optional target environment (for example prod or staging)."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "updatedAt": {
                    "type": "string",
                    "description": "Updated timestamp after review."
                }
            },
            "required": [
                "appliedPolicyChangeJson",
                "requestId",
                "reviewDecision",
                "reviewedBy",
                "status",
                "tenantId",
                "updatedAt"
            ],
            "inputProperties": {
                "overrideExpiresAt": {
                    "type": "string",
                    "description": "Optional runtime override expiration timestamp (RFC3339)."
                },
                "owner": {
                    "type": "string",
                    "description": "Optional owner metadata used when synthesizing policy artifacts."
                },
                "policyChangeJson": {
                    "type": "string",
                    "description": "Optional policy change override JSON payload."
                },
                "requestId": {
                    "type": "string",
                    "description": "Policy exception request ID."
                },
                "reviewDecision": {
                    "type": "string",
                    "description": "Review outcome: approve, deny, request_changes, approve_with_modification."
                },
                "reviewNotes": {
                    "type": "string",
                    "description": "Optional review notes."
                },
                "reviewedBy": {
                    "type": "string",
                    "description": "Reviewer identity."
                },
                "targetEnvironment": {
                    "type": "string",
                    "description": "Optional target environment (for example prod or staging)."
                }
            },
            "requiredInputs": [
                "requestId",
                "reviewDecision",
                "reviewedBy"
            ],
            "stateInputs": {
                "description": "Input properties used for looking up and filtering PolicyExceptionReview resources.\n",
                "properties": {
                    "appliedPolicyChangeJson": {
                        "type": "string",
                        "description": "Policy change metadata present on the reviewed exception."
                    },
                    "overrideExpiresAt": {
                        "type": "string",
                        "description": "Optional runtime override expiration timestamp (RFC3339)."
                    },
                    "owner": {
                        "type": "string",
                        "description": "Optional owner metadata used when synthesizing policy artifacts."
                    },
                    "policyChangeJson": {
                        "type": "string",
                        "description": "Optional policy change override JSON payload."
                    },
                    "requestId": {
                        "type": "string",
                        "description": "Policy exception request ID."
                    },
                    "reviewDecision": {
                        "type": "string",
                        "description": "Review outcome: approve, deny, request_changes, approve_with_modification."
                    },
                    "reviewNotes": {
                        "type": "string",
                        "description": "Optional review notes."
                    },
                    "reviewedBy": {
                        "type": "string",
                        "description": "Reviewer identity."
                    },
                    "status": {
                        "type": "string",
                        "description": "Resulting policy exception status."
                    },
                    "targetEnvironment": {
                        "type": "string",
                        "description": "Optional target environment (for example prod or staging)."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "updatedAt": {
                        "type": "string",
                        "description": "Updated timestamp after review."
                    }
                },
                "type": "object"
            }
        },
        "thoth:governance/policySync:PolicySync": {
            "properties": {
                "appliedAgentsJson": {
                    "type": "string",
                    "description": "Applied agent IDs as JSON array."
                },
                "appliedCount": {
                    "type": "integer",
                    "description": "Policies applied during sync."
                },
                "changed": {
                    "type": "boolean",
                    "description": "Whether sync applied changes."
                },
                "configured": {
                    "type": "boolean",
                    "description": "Whether policy sync is configured."
                },
                "errorCount": {
                    "type": "integer",
                    "description": "Sync error count."
                },
                "errorsJson": {
                    "type": "string",
                    "description": "Sync errors as JSON array."
                },
                "intervalSeconds": {
                    "type": "integer",
                    "description": "Configured enforcer sync interval seconds."
                },
                "pollIntervalSeconds": {
                    "type": "integer",
                    "description": "Polling interval when wait_for_completion=true."
                },
                "skippedCount": {
                    "type": "integer",
                    "description": "Skipped policy entries count."
                },
                "status": {
                    "type": "string",
                    "description": "Current policy sync status."
                },
                "syncedAt": {
                    "type": "string",
                    "description": "Last sync timestamp."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "timeoutSeconds": {
                    "type": "integer",
                    "description": "Polling timeout when wait_for_completion=true."
                },
                "trigger": {
                    "type": "string",
                    "description": "Change this value to force a sync run."
                },
                "waitForCompletion": {
                    "type": "boolean",
                    "description": "Poll status until terminal state."
                }
            },
            "required": [
                "appliedAgentsJson",
                "appliedCount",
                "changed",
                "configured",
                "errorCount",
                "errorsJson",
                "intervalSeconds",
                "skippedCount",
                "status",
                "syncedAt",
                "tenantId"
            ],
            "inputProperties": {
                "pollIntervalSeconds": {
                    "type": "integer",
                    "description": "Polling interval when wait_for_completion=true."
                },
                "timeoutSeconds": {
                    "type": "integer",
                    "description": "Polling timeout when wait_for_completion=true."
                },
                "trigger": {
                    "type": "string",
                    "description": "Change this value to force a sync run."
                },
                "waitForCompletion": {
                    "type": "boolean",
                    "description": "Poll status until terminal state."
                }
            },
            "stateInputs": {
                "description": "Input properties used for looking up and filtering PolicySync resources.\n",
                "properties": {
                    "appliedAgentsJson": {
                        "type": "string",
                        "description": "Applied agent IDs as JSON array."
                    },
                    "appliedCount": {
                        "type": "integer",
                        "description": "Policies applied during sync."
                    },
                    "changed": {
                        "type": "boolean",
                        "description": "Whether sync applied changes."
                    },
                    "configured": {
                        "type": "boolean",
                        "description": "Whether policy sync is configured."
                    },
                    "errorCount": {
                        "type": "integer",
                        "description": "Sync error count."
                    },
                    "errorsJson": {
                        "type": "string",
                        "description": "Sync errors as JSON array."
                    },
                    "intervalSeconds": {
                        "type": "integer",
                        "description": "Configured enforcer sync interval seconds."
                    },
                    "pollIntervalSeconds": {
                        "type": "integer",
                        "description": "Polling interval when wait_for_completion=true."
                    },
                    "skippedCount": {
                        "type": "integer",
                        "description": "Skipped policy entries count."
                    },
                    "status": {
                        "type": "string",
                        "description": "Current policy sync status."
                    },
                    "syncedAt": {
                        "type": "string",
                        "description": "Last sync timestamp."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "timeoutSeconds": {
                        "type": "integer",
                        "description": "Polling timeout when wait_for_completion=true."
                    },
                    "trigger": {
                        "type": "string",
                        "description": "Change this value to force a sync run."
                    },
                    "waitForCompletion": {
                        "type": "boolean",
                        "description": "Poll status until terminal state."
                    }
                },
                "type": "object"
            }
        },
        "thoth:governance/siemSettings:SiemSettings": {
            "properties": {
                "siemProvider": {
                    "type": "string",
                    "description": "SIEM provider slug."
                },
                "siemWebhookEnabled": {
                    "type": "boolean",
                    "description": "Enable SIEM webhook delivery."
                },
                "siemWebhookProvider": {
                    "type": "string",
                    "description": "SIEM webhook provider slug."
                },
                "siemWebhookSecret": {
                    "type": "string",
                    "description": "SIEM webhook signing secret.",
                    "secret": true
                },
                "siemWebhookUrl": {
                    "type": "string",
                    "description": "SIEM webhook URL."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID resolved from provider configuration."
                },
                "updatedAt": {
                    "type": "string",
                    "description": "Last update timestamp returned by GovAPI."
                }
            },
            "required": [
                "tenantId",
                "updatedAt"
            ],
            "inputProperties": {
                "siemProvider": {
                    "type": "string",
                    "description": "SIEM provider slug."
                },
                "siemWebhookEnabled": {
                    "type": "boolean",
                    "description": "Enable SIEM webhook delivery."
                },
                "siemWebhookProvider": {
                    "type": "string",
                    "description": "SIEM webhook provider slug."
                },
                "siemWebhookSecret": {
                    "type": "string",
                    "description": "SIEM webhook signing secret.",
                    "secret": true
                },
                "siemWebhookUrl": {
                    "type": "string",
                    "description": "SIEM webhook URL."
                }
            },
            "stateInputs": {
                "description": "Input properties used for looking up and filtering SiemSettings resources.\n",
                "properties": {
                    "siemProvider": {
                        "type": "string",
                        "description": "SIEM provider slug."
                    },
                    "siemWebhookEnabled": {
                        "type": "boolean",
                        "description": "Enable SIEM webhook delivery."
                    },
                    "siemWebhookProvider": {
                        "type": "string",
                        "description": "SIEM webhook provider slug."
                    },
                    "siemWebhookSecret": {
                        "type": "string",
                        "description": "SIEM webhook signing secret.",
                        "secret": true
                    },
                    "siemWebhookUrl": {
                        "type": "string",
                        "description": "SIEM webhook URL."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID resolved from provider configuration."
                    },
                    "updatedAt": {
                        "type": "string",
                        "description": "Last update timestamp returned by GovAPI."
                    }
                },
                "type": "object"
            }
        },
        "thoth:governance/webhookSettings:WebhookSettings": {
            "properties": {
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID resolved from provider configuration."
                },
                "testWebhookOnApply": {
                    "type": "boolean",
                    "description": "Run webhook test endpoint after applying settings."
                },
                "updatedAt": {
                    "type": "string",
                    "description": "Last update timestamp returned by GovAPI."
                },
                "webhookEnabled": {
                    "type": "boolean",
                    "description": "Enable outbound webhook delivery."
                },
                "webhookSecret": {
                    "type": "string",
                    "description": "Webhook signing secret.",
                    "secret": true
                },
                "webhookUrl": {
                    "type": "string",
                    "description": "Outbound webhook URL."
                }
            },
            "required": [
                "tenantId",
                "updatedAt"
            ],
            "inputProperties": {
                "testWebhookOnApply": {
                    "type": "boolean",
                    "description": "Run webhook test endpoint after applying settings."
                },
                "webhookEnabled": {
                    "type": "boolean",
                    "description": "Enable outbound webhook delivery."
                },
                "webhookSecret": {
                    "type": "string",
                    "description": "Webhook signing secret.",
                    "secret": true
                },
                "webhookUrl": {
                    "type": "string",
                    "description": "Outbound webhook URL."
                }
            },
            "stateInputs": {
                "description": "Input properties used for looking up and filtering WebhookSettings resources.\n",
                "properties": {
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID resolved from provider configuration."
                    },
                    "testWebhookOnApply": {
                        "type": "boolean",
                        "description": "Run webhook test endpoint after applying settings."
                    },
                    "updatedAt": {
                        "type": "string",
                        "description": "Last update timestamp returned by GovAPI."
                    },
                    "webhookEnabled": {
                        "type": "boolean",
                        "description": "Enable outbound webhook delivery."
                    },
                    "webhookSecret": {
                        "type": "string",
                        "description": "Webhook signing secret.",
                        "secret": true
                    },
                    "webhookUrl": {
                        "type": "string",
                        "description": "Outbound webhook URL."
                    }
                },
                "type": "object"
            }
        },
        "thoth:governance/webhookTest:WebhookTest": {
            "properties": {
                "error": {
                    "type": "string",
                    "description": "Error string returned by webhook test endpoint."
                },
                "httpStatus": {
                    "type": "integer",
                    "description": "HTTP status returned by webhook endpoint (if available)."
                },
                "status": {
                    "type": "string",
                    "description": "Webhook test status (delivered or failed)."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "testedAt": {
                    "type": "string",
                    "description": "Timestamp when the test was executed."
                },
                "trigger": {
                    "type": "string",
                    "description": "Change this value to force a re-test."
                }
            },
            "required": [
                "error",
                "httpStatus",
                "status",
                "tenantId",
                "testedAt"
            ],
            "inputProperties": {
                "trigger": {
                    "type": "string",
                    "description": "Change this value to force a re-test."
                }
            },
            "stateInputs": {
                "description": "Input properties used for looking up and filtering WebhookTest resources.\n",
                "properties": {
                    "error": {
                        "type": "string",
                        "description": "Error string returned by webhook test endpoint."
                    },
                    "httpStatus": {
                        "type": "integer",
                        "description": "HTTP status returned by webhook endpoint (if available)."
                    },
                    "status": {
                        "type": "string",
                        "description": "Webhook test status (delivered or failed)."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "testedAt": {
                        "type": "string",
                        "description": "Timestamp when the test was executed."
                    },
                    "trigger": {
                        "type": "string",
                        "description": "Change this value to force a re-test."
                    }
                },
                "type": "object"
            }
        },
        "thoth:mcp/catalogVerify:CatalogVerify": {
            "properties": {
                "allowedToolsCount": {
                    "type": "integer",
                    "description": "Number of allowed tools in the result catalog."
                },
                "authContextJson": {
                    "type": "string",
                    "description": "Optional auth context JSON object merged into the verification request."
                },
                "blockedToolsCount": {
                    "type": "integer",
                    "description": "Number of blocked tools in the result catalog."
                },
                "environment": {
                    "type": "string",
                    "description": "Optional environment filter (dev/prod)."
                },
                "humanGroups": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Optional human groups for catalog verification context."
                },
                "humanPrincipal": {
                    "type": "string",
                    "description": "Optional human principal seed for catalog verification."
                },
                "humanRole": {
                    "type": "string",
                    "description": "Optional human role seed for catalog verification."
                },
                "policyCount": {
                    "type": "integer",
                    "description": "Matched policy count returned by the verifier."
                },
                "principal": {
                    "type": "string",
                    "description": "Principal used for catalog verification."
                },
                "responseJson": {
                    "type": "string",
                    "description": "Catalog verification response payload as JSON."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "trigger": {
                    "type": "string",
                    "description": "Change this field to force another verification run."
                },
                "verifiedAt": {
                    "type": "string",
                    "description": "RFC3339 timestamp when verification ran."
                }
            },
            "required": [
                "allowedToolsCount",
                "blockedToolsCount",
                "policyCount",
                "responseJson",
                "tenantId",
                "verifiedAt"
            ],
            "inputProperties": {
                "authContextJson": {
                    "type": "string",
                    "description": "Optional auth context JSON object merged into the verification request."
                },
                "environment": {
                    "type": "string",
                    "description": "Optional environment filter (dev/prod)."
                },
                "humanGroups": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Optional human groups for catalog verification context."
                },
                "humanPrincipal": {
                    "type": "string",
                    "description": "Optional human principal seed for catalog verification."
                },
                "humanRole": {
                    "type": "string",
                    "description": "Optional human role seed for catalog verification."
                },
                "principal": {
                    "type": "string",
                    "description": "Principal used for catalog verification."
                },
                "trigger": {
                    "type": "string",
                    "description": "Change this field to force another verification run."
                }
            },
            "stateInputs": {
                "description": "Input properties used for looking up and filtering CatalogVerify resources.\n",
                "properties": {
                    "allowedToolsCount": {
                        "type": "integer",
                        "description": "Number of allowed tools in the result catalog."
                    },
                    "authContextJson": {
                        "type": "string",
                        "description": "Optional auth context JSON object merged into the verification request."
                    },
                    "blockedToolsCount": {
                        "type": "integer",
                        "description": "Number of blocked tools in the result catalog."
                    },
                    "environment": {
                        "type": "string",
                        "description": "Optional environment filter (dev/prod)."
                    },
                    "humanGroups": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Optional human groups for catalog verification context."
                    },
                    "humanPrincipal": {
                        "type": "string",
                        "description": "Optional human principal seed for catalog verification."
                    },
                    "humanRole": {
                        "type": "string",
                        "description": "Optional human role seed for catalog verification."
                    },
                    "policyCount": {
                        "type": "integer",
                        "description": "Matched policy count returned by the verifier."
                    },
                    "principal": {
                        "type": "string",
                        "description": "Principal used for catalog verification."
                    },
                    "responseJson": {
                        "type": "string",
                        "description": "Catalog verification response payload as JSON."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "trigger": {
                        "type": "string",
                        "description": "Change this field to force another verification run."
                    },
                    "verifiedAt": {
                        "type": "string",
                        "description": "RFC3339 timestamp when verification ran."
                    }
                },
                "type": "object"
            }
        },
        "thoth:mcp/vendor:Vendor": {
            "properties": {
                "approved": {
                    "type": "boolean",
                    "description": "Whether this vendor is approved for pass-through MCP host access."
                },
                "createdAt": {
                    "type": "string",
                    "description": "Creation timestamp."
                },
                "displayName": {
                    "type": "string",
                    "description": "Human-friendly vendor display name."
                },
                "hostPatterns": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Allowed host patterns for this vendor (for example api.openai.com)."
                },
                "lastSeenAt": {
                    "type": "string",
                    "description": "Last observed timestamp (RFC3339) for this vendor in runtime traffic."
                },
                "notes": {
                    "type": "string",
                    "description": "Optional reviewer notes for this vendor entry."
                },
                "source": {
                    "type": "string",
                    "description": "Vendor entry source (for example manual, discovered)."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "updatedAt": {
                    "type": "string",
                    "description": "Last update timestamp."
                },
                "vendorId": {
                    "type": "string",
                    "description": "Stable vendor identifier."
                }
            },
            "required": [
                "approved",
                "createdAt",
                "displayName",
                "hostPatterns",
                "lastSeenAt",
                "tenantId",
                "updatedAt",
                "vendorId"
            ],
            "inputProperties": {
                "approved": {
                    "type": "boolean",
                    "description": "Whether this vendor is approved for pass-through MCP host access."
                },
                "displayName": {
                    "type": "string",
                    "description": "Human-friendly vendor display name."
                },
                "hostPatterns": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "description": "Allowed host patterns for this vendor (for example api.openai.com)."
                },
                "lastSeenAt": {
                    "type": "string",
                    "description": "Last observed timestamp (RFC3339) for this vendor in runtime traffic."
                },
                "notes": {
                    "type": "string",
                    "description": "Optional reviewer notes for this vendor entry."
                },
                "source": {
                    "type": "string",
                    "description": "Vendor entry source (for example manual, discovered)."
                },
                "vendorId": {
                    "type": "string",
                    "description": "Stable vendor identifier."
                }
            },
            "requiredInputs": [
                "displayName",
                "hostPatterns",
                "vendorId"
            ],
            "stateInputs": {
                "description": "Input properties used for looking up and filtering Vendor resources.\n",
                "properties": {
                    "approved": {
                        "type": "boolean",
                        "description": "Whether this vendor is approved for pass-through MCP host access."
                    },
                    "createdAt": {
                        "type": "string",
                        "description": "Creation timestamp."
                    },
                    "displayName": {
                        "type": "string",
                        "description": "Human-friendly vendor display name."
                    },
                    "hostPatterns": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Allowed host patterns for this vendor (for example api.openai.com)."
                    },
                    "lastSeenAt": {
                        "type": "string",
                        "description": "Last observed timestamp (RFC3339) for this vendor in runtime traffic."
                    },
                    "notes": {
                        "type": "string",
                        "description": "Optional reviewer notes for this vendor entry."
                    },
                    "source": {
                        "type": "string",
                        "description": "Vendor entry source (for example manual, discovered)."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "updatedAt": {
                        "type": "string",
                        "description": "Last update timestamp."
                    },
                    "vendorId": {
                        "type": "string",
                        "description": "Stable vendor identifier."
                    }
                },
                "type": "object"
            }
        },
        "thoth:mdm/provider:Provider": {
            "properties": {
                "configJson": {
                    "type": "string",
                    "description": "Provider configuration JSON object.",
                    "secret": true
                },
                "createdAt": {
                    "type": "string",
                    "description": "Creation timestamp."
                },
                "enabled": {
                    "type": "boolean",
                    "description": "Enable the provider integration."
                },
                "lastError": {
                    "type": "string",
                    "description": "Last error message from provider sync."
                },
                "lastSyncAt": {
                    "type": "string",
                    "description": "Last sync timestamp."
                },
                "lastSyncJobId": {
                    "type": "string",
                    "description": "Last sync job identifier."
                },
                "lastSyncStatus": {
                    "type": "string",
                    "description": "Last sync status."
                },
                "name": {
                    "type": "string",
                    "description": "Display name for the provider."
                },
                "providerName": {
                    "type": "string",
                    "description": "Provider slug: jamf, intune, workspace_one, custom."
                },
                "status": {
                    "type": "string",
                    "description": "Provider status from GovAPI."
                },
                "syncedEndpoints": {
                    "type": "integer",
                    "description": "Count of endpoints synchronized on latest run."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "updatedAt": {
                    "type": "string",
                    "description": "Update timestamp."
                }
            },
            "required": [
                "createdAt",
                "lastError",
                "lastSyncAt",
                "lastSyncJobId",
                "lastSyncStatus",
                "providerName",
                "status",
                "syncedEndpoints",
                "tenantId",
                "updatedAt"
            ],
            "inputProperties": {
                "configJson": {
                    "type": "string",
                    "description": "Provider configuration JSON object.",
                    "secret": true
                },
                "enabled": {
                    "type": "boolean",
                    "description": "Enable the provider integration."
                },
                "name": {
                    "type": "string",
                    "description": "Display name for the provider."
                },
                "providerName": {
                    "type": "string",
                    "description": "Provider slug: jamf, intune, workspace_one, custom."
                }
            },
            "requiredInputs": [
                "providerName"
            ],
            "stateInputs": {
                "description": "Input properties used for looking up and filtering Provider resources.\n",
                "properties": {
                    "configJson": {
                        "type": "string",
                        "description": "Provider configuration JSON object.",
                        "secret": true
                    },
                    "createdAt": {
                        "type": "string",
                        "description": "Creation timestamp."
                    },
                    "enabled": {
                        "type": "boolean",
                        "description": "Enable the provider integration."
                    },
                    "lastError": {
                        "type": "string",
                        "description": "Last error message from provider sync."
                    },
                    "lastSyncAt": {
                        "type": "string",
                        "description": "Last sync timestamp."
                    },
                    "lastSyncJobId": {
                        "type": "string",
                        "description": "Last sync job identifier."
                    },
                    "lastSyncStatus": {
                        "type": "string",
                        "description": "Last sync status."
                    },
                    "name": {
                        "type": "string",
                        "description": "Display name for the provider."
                    },
                    "providerName": {
                        "type": "string",
                        "description": "Provider slug: jamf, intune, workspace_one, custom."
                    },
                    "status": {
                        "type": "string",
                        "description": "Provider status from GovAPI."
                    },
                    "syncedEndpoints": {
                        "type": "integer",
                        "description": "Count of endpoints synchronized on latest run."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "updatedAt": {
                        "type": "string",
                        "description": "Update timestamp."
                    }
                },
                "type": "object"
            }
        },
        "thoth:mdm/sync:Sync": {
            "properties": {
                "completedAt": {
                    "type": "string",
                    "description": "Job completion timestamp."
                },
                "createdAt": {
                    "type": "string",
                    "description": "Job creation timestamp."
                },
                "error": {
                    "type": "string",
                    "description": "Job error string when status=failed."
                },
                "pollIntervalSeconds": {
                    "type": "integer",
                    "description": "Polling interval when wait_for_completion=true."
                },
                "providerName": {
                    "type": "string",
                    "description": "MDM provider slug."
                },
                "startedAt": {
                    "type": "string",
                    "description": "Job start timestamp."
                },
                "status": {
                    "type": "string",
                    "description": "Job status: queued, running, succeeded, failed."
                },
                "syncedEndpoints": {
                    "type": "integer",
                    "description": "Number of endpoints synchronized by the job."
                },
                "tenantId": {
                    "type": "string",
                    "description": "Tenant ID from provider configuration."
                },
                "timeoutSeconds": {
                    "type": "integer",
                    "description": "Polling timeout when wait_for_completion=true."
                },
                "trigger": {
                    "type": "string",
                    "description": "Arbitrary replacement trigger value."
                },
                "unassignedCount": {
                    "type": "integer",
                    "description": "Count of devices that could not be mapped."
                },
                "updatedAt": {
                    "type": "string",
                    "description": "Job update timestamp."
                },
                "waitForCompletion": {
                    "type": "boolean",
                    "description": "Wait for sync job completion before returning state."
                }
            },
            "required": [
                "completedAt",
                "createdAt",
                "error",
                "providerName",
                "startedAt",
                "status",
                "syncedEndpoints",
                "tenantId",
                "unassignedCount",
                "updatedAt"
            ],
            "inputProperties": {
                "pollIntervalSeconds": {
                    "type": "integer",
                    "description": "Polling interval when wait_for_completion=true."
                },
                "providerName": {
                    "type": "string",
                    "description": "MDM provider slug."
                },
                "timeoutSeconds": {
                    "type": "integer",
                    "description": "Polling timeout when wait_for_completion=true."
                },
                "trigger": {
                    "type": "string",
                    "description": "Arbitrary replacement trigger value."
                },
                "waitForCompletion": {
                    "type": "boolean",
                    "description": "Wait for sync job completion before returning state."
                }
            },
            "requiredInputs": [
                "providerName"
            ],
            "stateInputs": {
                "description": "Input properties used for looking up and filtering Sync resources.\n",
                "properties": {
                    "completedAt": {
                        "type": "string",
                        "description": "Job completion timestamp."
                    },
                    "createdAt": {
                        "type": "string",
                        "description": "Job creation timestamp."
                    },
                    "error": {
                        "type": "string",
                        "description": "Job error string when status=failed."
                    },
                    "pollIntervalSeconds": {
                        "type": "integer",
                        "description": "Polling interval when wait_for_completion=true."
                    },
                    "providerName": {
                        "type": "string",
                        "description": "MDM provider slug."
                    },
                    "startedAt": {
                        "type": "string",
                        "description": "Job start timestamp."
                    },
                    "status": {
                        "type": "string",
                        "description": "Job status: queued, running, succeeded, failed."
                    },
                    "syncedEndpoints": {
                        "type": "integer",
                        "description": "Number of endpoints synchronized by the job."
                    },
                    "tenantId": {
                        "type": "string",
                        "description": "Tenant ID from provider configuration."
                    },
                    "timeoutSeconds": {
                        "type": "integer",
                        "description": "Polling timeout when wait_for_completion=true."
                    },
                    "trigger": {
                        "type": "string",
                        "description": "Arbitrary replacement trigger value."
                    },
                    "unassignedCount": {
                        "type": "integer",
                        "description": "Count of devices that could not be mapped."
                    },
                    "updatedAt": {
                        "type": "string",
                        "description": "Job update timestamp."
                    },
                    "waitForCompletion": {
                        "type": "boolean",
                        "description": "Wait for sync job completion before returning state."
                    }
                },
                "type": "object"
            }
        }
    },
    "functions": {
        "pulumi:providers:thoth/terraformConfig": {
            "description": "This function returns a Terraform config object with terraform-namecased keys,to be used with the Terraform Module Provider.",
            "inputs": {
                "properties": {
                    "__self__": {
                        "type": "ref",
                        "$ref": "#/provider"
                    }
                },
                "type": "pulumi:providers:thoth/terraformConfig",
                "required": [
                    "__self__"
                ]
            },
            "outputs": {
                "properties": {
                    "result": {
                        "additionalProperties": {
                            "$ref": "pulumi.json#/Any"
                        },
                        "type": "object"
                    }
                },
                "required": [
                    "result"
                ],
                "type": "object"
            }
        },
        "thoth:access/getApiKeyAuthorization:getApiKeyAuthorization": {
            "inputs": {
                "description": "A collection of arguments for invoking getApiKeyAuthorization.\n",
                "properties": {
                    "apiKey": {
                        "type": "string",
                        "secret": true
                    },
                    "keyId": {
                        "type": "string"
                    },
                    "permission": {
                        "type": "string"
                    },
                    "resourceId": {
                        "type": "string"
                    },
                    "resourceType": {
                        "type": "string"
                    }
                },
                "type": "object",
                "required": [
                    "apiKey",
                    "keyId",
                    "permission",
                    "resourceType"
                ]
            },
            "outputs": {
                "description": "A collection of values returned by getApiKeyAuthorization.\n",
                "properties": {
                    "apiKey": {
                        "secret": true,
                        "type": "string"
                    },
                    "authorized": {
                        "type": "boolean"
                    },
                    "expired": {
                        "type": "boolean"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "keyId": {
                        "type": "string"
                    },
                    "permission": {
                        "type": "string"
                    },
                    "permissionAllowed": {
                        "type": "boolean"
                    },
                    "resourceId": {
                        "type": "string"
                    },
                    "resourceType": {
                        "type": "string"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "scopeAllowed": {
                        "type": "boolean"
                    },
                    "scopeLevel": {
                        "type": "string"
                    },
                    "scopeTargetId": {
                        "type": "string"
                    },
                    "valid": {
                        "type": "boolean"
                    },
                    "validatedAt": {
                        "type": "string"
                    }
                },
                "required": [
                    "apiKey",
                    "authorized",
                    "expired",
                    "keyId",
                    "permission",
                    "permissionAllowed",
                    "resourceType",
                    "responseJson",
                    "scopeAllowed",
                    "scopeLevel",
                    "scopeTargetId",
                    "valid",
                    "validatedAt",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:access/getApiKeyMetrics:getApiKeyMetrics": {
            "outputs": {
                "description": "A collection of values returned by getApiKeyMetrics.\n",
                "properties": {
                    "activeSdkKeys": {
                        "type": "integer"
                    },
                    "avgLatencyMs": {
                        "type": "number"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "keyUsage24h": {
                        "type": "integer"
                    },
                    "metricsJson": {
                        "type": "string"
                    },
                    "redTeamTests": {
                        "type": "integer"
                    }
                },
                "required": [
                    "activeSdkKeys",
                    "avgLatencyMs",
                    "keyUsage24h",
                    "metricsJson",
                    "redTeamTests",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:access/getApiKeys:getApiKeys": {
            "inputs": {
                "description": "A collection of arguments for invoking getApiKeys.\n",
                "properties": {
                    "activeOnly": {
                        "type": "boolean"
                    },
                    "scopeLevel": {
                        "type": "string"
                    },
                    "scopeTargetId": {
                        "type": "string"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getApiKeys.\n",
                "properties": {
                    "activeOnly": {
                        "type": "boolean"
                    },
                    "dataJson": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "scopeLevel": {
                        "type": "string"
                    },
                    "scopeTargetId": {
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    }
                },
                "required": [
                    "dataJson",
                    "total",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:billing/getArtifact:getArtifact": {
            "inputs": {
                "description": "A collection of arguments for invoking getArtifact.\n",
                "properties": {
                    "month": {
                        "type": "integer"
                    },
                    "year": {
                        "type": "integer"
                    }
                },
                "type": "object",
                "required": [
                    "month",
                    "year"
                ]
            },
            "outputs": {
                "description": "A collection of values returned by getArtifact.\n",
                "properties": {
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "month": {
                        "type": "integer"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "year": {
                        "type": "integer"
                    }
                },
                "required": [
                    "month",
                    "responseJson",
                    "year",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:billing/getArtifacts:getArtifacts": {
            "inputs": {
                "description": "A collection of arguments for invoking getArtifacts.\n",
                "properties": {
                    "limit": {
                        "type": "integer"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getArtifacts.\n",
                "properties": {
                    "artifactsJson": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "limit": {
                        "type": "integer"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "totalCount": {
                        "type": "integer"
                    }
                },
                "required": [
                    "artifactsJson",
                    "responseJson",
                    "totalCount",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:billing/getCreditBank:getCreditBank": {
            "inputs": {
                "description": "A collection of arguments for invoking getCreditBank.\n",
                "properties": {
                    "asOf": {
                        "type": "string"
                    },
                    "averageMonthlyBurnCents": {
                        "type": "integer"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getCreditBank.\n",
                "properties": {
                    "activeWalletCount": {
                        "type": "integer"
                    },
                    "activeWalletsJson": {
                        "type": "string"
                    },
                    "asOf": {
                        "type": "string"
                    },
                    "averageMonthlyBurnCents": {
                        "type": "integer"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "lowBalanceAlert": {
                        "type": "boolean"
                    },
                    "lowBalanceThresholdCents": {
                        "type": "integer"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "totalActiveBalanceCents": {
                        "type": "integer"
                    }
                },
                "required": [
                    "activeWalletCount",
                    "activeWalletsJson",
                    "lowBalanceAlert",
                    "lowBalanceThresholdCents",
                    "responseJson",
                    "totalActiveBalanceCents",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:billing/getEstimate:getEstimate": {
            "inputs": {
                "description": "A collection of arguments for invoking getEstimate.\n",
                "properties": {
                    "activeIdentitiesOverride": {
                        "type": "integer"
                    },
                    "asOf": {
                        "type": "string"
                    },
                    "averageMonthlyBurnCents": {
                        "type": "integer"
                    },
                    "complianceUpliftPercent": {
                        "type": "number"
                    },
                    "fixedDiscountPercent": {
                        "type": "number"
                    },
                    "period": {
                        "type": "string"
                    },
                    "policyChecksOverride": {
                        "type": "integer"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getEstimate.\n",
                "properties": {
                    "activeIdentitiesOverride": {
                        "type": "integer"
                    },
                    "asOf": {
                        "type": "string"
                    },
                    "averageMonthlyBurnCents": {
                        "type": "integer"
                    },
                    "complianceReceipt": {
                        "type": "string"
                    },
                    "complianceUpliftPercent": {
                        "type": "number"
                    },
                    "creditBurnsJson": {
                        "type": "string"
                    },
                    "fixedDiscountPercent": {
                        "type": "number"
                    },
                    "grossBillCents": {
                        "type": "integer"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "lineItemComplianceUpliftCents": {
                        "type": "integer"
                    },
                    "lineItemCreditsAppliedCents": {
                        "type": "integer"
                    },
                    "lineItemEnforcementOverageCents": {
                        "type": "integer"
                    },
                    "lineItemFixedDiscountCents": {
                        "type": "integer"
                    },
                    "lineItemIdentityOverageCents": {
                        "type": "integer"
                    },
                    "lineItemPlatformFeeCents": {
                        "type": "integer"
                    },
                    "lineItemStorageCapacityCents": {
                        "type": "integer"
                    },
                    "lineItemStorageRetentionCents": {
                        "type": "integer"
                    },
                    "lowBalanceAlert": {
                        "type": "boolean"
                    },
                    "netTotalCents": {
                        "type": "integer"
                    },
                    "period": {
                        "type": "string"
                    },
                    "periodEffective": {
                        "type": "string"
                    },
                    "policyChecksOverride": {
                        "type": "integer"
                    },
                    "pricingTier": {
                        "type": "string"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "summaryJson": {
                        "type": "string"
                    },
                    "wormRetentionDays": {
                        "type": "integer"
                    }
                },
                "required": [
                    "complianceReceipt",
                    "creditBurnsJson",
                    "grossBillCents",
                    "lineItemComplianceUpliftCents",
                    "lineItemCreditsAppliedCents",
                    "lineItemEnforcementOverageCents",
                    "lineItemFixedDiscountCents",
                    "lineItemIdentityOverageCents",
                    "lineItemPlatformFeeCents",
                    "lineItemStorageCapacityCents",
                    "lineItemStorageRetentionCents",
                    "lowBalanceAlert",
                    "netTotalCents",
                    "periodEffective",
                    "pricingTier",
                    "responseJson",
                    "summaryJson",
                    "wormRetentionDays",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:billing/getInvoices:getInvoices": {
            "inputs": {
                "description": "A collection of arguments for invoking getInvoices.\n",
                "properties": {
                    "limit": {
                        "type": "integer"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getInvoices.\n",
                "properties": {
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "invoicesJson": {
                        "type": "string"
                    },
                    "limit": {
                        "type": "integer"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    },
                    "totalsJson": {
                        "type": "string"
                    }
                },
                "required": [
                    "invoicesJson",
                    "responseJson",
                    "total",
                    "totalsJson",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:billing/getMonthlyCost:getMonthlyCost": {
            "outputs": {
                "description": "A collection of values returned by getMonthlyCost.\n",
                "properties": {
                    "actionCostUsd": {
                        "type": "number"
                    },
                    "creditDiscountUsd": {
                        "type": "number"
                    },
                    "governedIdentitiesObserved": {
                        "type": "integer"
                    },
                    "governedIdentityCostUsd": {
                        "type": "number"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "netCostUsd": {
                        "type": "number"
                    },
                    "policyChecksCostUsd": {
                        "type": "number"
                    },
                    "policyChecksTotal": {
                        "type": "integer"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "stripeInvoiceTotalUsd": {
                        "type": "number"
                    },
                    "stripeReconciliationUsd": {
                        "type": "number"
                    },
                    "tier": {
                        "type": "string"
                    },
                    "totalCostUsd": {
                        "type": "number"
                    }
                },
                "required": [
                    "actionCostUsd",
                    "creditDiscountUsd",
                    "governedIdentitiesObserved",
                    "governedIdentityCostUsd",
                    "netCostUsd",
                    "policyChecksCostUsd",
                    "policyChecksTotal",
                    "responseJson",
                    "stripeInvoiceTotalUsd",
                    "stripeReconciliationUsd",
                    "tier",
                    "totalCostUsd",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:billing/getPricing:getPricing": {
            "outputs": {
                "description": "A collection of values returned by getPricing.\n",
                "properties": {
                    "activeTier": {
                        "type": "string"
                    },
                    "baseMonthlyPlatformFeeUsd": {
                        "type": "number"
                    },
                    "catalogVersion": {
                        "type": "string"
                    },
                    "creditDiscountPercent": {
                        "type": "number"
                    },
                    "governedIdentityUsdPerMonth": {
                        "type": "number"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "includedGovernedIdentities": {
                        "type": "integer"
                    },
                    "includedPolicyChecks": {
                        "type": "integer"
                    },
                    "overageCapUsd": {
                        "type": "number"
                    },
                    "policyChecksUsdPerMillion": {
                        "type": "number"
                    },
                    "prepaidCreditUsd": {
                        "type": "number"
                    },
                    "responseJson": {
                        "type": "string"
                    }
                },
                "required": [
                    "activeTier",
                    "baseMonthlyPlatformFeeUsd",
                    "catalogVersion",
                    "creditDiscountPercent",
                    "governedIdentityUsdPerMonth",
                    "includedGovernedIdentities",
                    "includedPolicyChecks",
                    "overageCapUsd",
                    "policyChecksUsdPerMillion",
                    "prepaidCreditUsd",
                    "responseJson",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:billing/getReport:getReport": {
            "inputs": {
                "description": "A collection of arguments for invoking getReport.\n",
                "properties": {
                    "month": {
                        "type": "integer"
                    },
                    "year": {
                        "type": "integer"
                    }
                },
                "type": "object",
                "required": [
                    "month",
                    "year"
                ]
            },
            "outputs": {
                "description": "A collection of values returned by getReport.\n",
                "properties": {
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "month": {
                        "type": "integer"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "year": {
                        "type": "integer"
                    }
                },
                "required": [
                    "month",
                    "responseJson",
                    "year",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:billing/getReports:getReports": {
            "outputs": {
                "description": "A collection of values returned by getReports.\n",
                "properties": {
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "reportsJson": {
                        "type": "string"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    }
                },
                "required": [
                    "reportsJson",
                    "responseJson",
                    "total",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:browser/getEnrollments:getEnrollments": {
            "inputs": {
                "description": "A collection of arguments for invoking getEnrollments.\n",
                "properties": {
                    "providerName": {
                        "type": "string"
                    },
                    "status": {
                        "type": "string"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getEnrollments.\n",
                "properties": {
                    "dataJson": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "providerName": {
                        "type": "string"
                    },
                    "status": {
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    }
                },
                "required": [
                    "dataJson",
                    "total",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:browser/getPolicies:getPolicies": {
            "inputs": {
                "description": "A collection of arguments for invoking getPolicies.\n",
                "properties": {
                    "providerName": {
                        "type": "string"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getPolicies.\n",
                "properties": {
                    "dataJson": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "providerName": {
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    }
                },
                "required": [
                    "dataJson",
                    "total",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:browser/getProviders:getProviders": {
            "outputs": {
                "description": "A collection of values returned by getProviders.\n",
                "properties": {
                    "dataJson": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    }
                },
                "required": [
                    "dataJson",
                    "total",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:fleet/getEndpointStats:getEndpointStats": {
            "outputs": {
                "description": "A collection of values returned by getEndpointStats.\n",
                "properties": {
                    "atRisk": {
                        "type": "integer"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "latestVersion": {
                        "type": "string"
                    },
                    "managed": {
                        "type": "integer"
                    },
                    "online": {
                        "type": "integer"
                    },
                    "proxyOutdated": {
                        "type": "integer"
                    },
                    "quarantined": {
                        "type": "integer"
                    },
                    "stale": {
                        "type": "integer"
                    },
                    "statsJson": {
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    },
                    "unmanaged": {
                        "type": "integer"
                    }
                },
                "required": [
                    "atRisk",
                    "latestVersion",
                    "managed",
                    "online",
                    "proxyOutdated",
                    "quarantined",
                    "stale",
                    "statsJson",
                    "total",
                    "unmanaged",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:fleet/getEndpoints:getEndpoints": {
            "inputs": {
                "description": "A collection of arguments for invoking getEndpoints.\n",
                "properties": {
                    "environment": {
                        "type": "string"
                    },
                    "fleetId": {
                        "type": "string"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getEndpoints.\n",
                "properties": {
                    "dataJson": {
                        "type": "string"
                    },
                    "environment": {
                        "type": "string"
                    },
                    "fleetId": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    }
                },
                "required": [
                    "dataJson",
                    "total",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:fleet/getFleet:getFleet": {
            "inputs": {
                "description": "A collection of arguments for invoking getFleet.\n",
                "properties": {
                    "fleetId": {
                        "type": "string"
                    }
                },
                "type": "object",
                "required": [
                    "fleetId"
                ]
            },
            "outputs": {
                "description": "A collection of values returned by getFleet.\n",
                "properties": {
                    "endpointCount": {
                        "type": "integer"
                    },
                    "fleetId": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "name": {
                        "type": "string"
                    },
                    "region": {
                        "type": "string"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "status": {
                        "type": "string"
                    }
                },
                "required": [
                    "endpointCount",
                    "fleetId",
                    "name",
                    "region",
                    "responseJson",
                    "status",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:fleet/getFleets:getFleets": {
            "inputs": {
                "description": "A collection of arguments for invoking getFleets.\n",
                "properties": {
                    "providerName": {
                        "type": "string"
                    },
                    "region": {
                        "type": "string"
                    },
                    "status": {
                        "type": "string"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getFleets.\n",
                "properties": {
                    "dataJson": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "providerName": {
                        "type": "string"
                    },
                    "region": {
                        "type": "string"
                    },
                    "status": {
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    }
                },
                "required": [
                    "dataJson",
                    "total",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getAgentLatestForensics:getAgentLatestForensics": {
            "inputs": {
                "description": "A collection of arguments for invoking getAgentLatestForensics.\n",
                "properties": {
                    "agentId": {
                        "type": "string"
                    }
                },
                "type": "object",
                "required": [
                    "agentId"
                ]
            },
            "outputs": {
                "description": "A collection of values returned by getAgentLatestForensics.\n",
                "properties": {
                    "agentId": {
                        "type": "string"
                    },
                    "agentName": {
                        "type": "string"
                    },
                    "attackSurfaceJson": {
                        "type": "string"
                    },
                    "eventsJson": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "riskScore": {
                        "type": "integer"
                    },
                    "sessionId": {
                        "type": "string"
                    },
                    "telemetrySummaryJson": {
                        "type": "string"
                    }
                },
                "required": [
                    "agentId",
                    "agentName",
                    "attackSurfaceJson",
                    "eventsJson",
                    "responseJson",
                    "riskScore",
                    "sessionId",
                    "telemetrySummaryJson",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getApprovals:getApprovals": {
            "inputs": {
                "description": "A collection of arguments for invoking getApprovals.\n",
                "properties": {
                    "page": {
                        "type": "integer"
                    },
                    "perPage": {
                        "type": "integer"
                    },
                    "status": {
                        "type": "string"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getApprovals.\n",
                "properties": {
                    "dataJson": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "page": {
                        "type": "integer"
                    },
                    "perPage": {
                        "type": "integer"
                    },
                    "status": {
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    }
                },
                "required": [
                    "dataJson",
                    "total",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getBoardIncidentSummary:getBoardIncidentSummary": {
            "inputs": {
                "description": "A collection of arguments for invoking getBoardIncidentSummary.\n",
                "properties": {
                    "violationId": {
                        "type": "string"
                    }
                },
                "type": "object",
                "required": [
                    "violationId"
                ]
            },
            "outputs": {
                "description": "A collection of values returned by getBoardIncidentSummary.\n",
                "properties": {
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "violationId": {
                        "type": "string"
                    }
                },
                "required": [
                    "responseJson",
                    "violationId",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getCostReport:getCostReport": {
            "inputs": {
                "description": "A collection of arguments for invoking getCostReport.\n",
                "properties": {
                    "days": {
                        "type": "integer"
                    },
                    "rate": {
                        "type": "number"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getCostReport.\n",
                "properties": {
                    "days": {
                        "type": "integer"
                    },
                    "eventEstimatedFallbacks": {
                        "type": "integer"
                    },
                    "flatRateFallbacks": {
                        "type": "integer"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "pricedWithCatalogCount": {
                        "type": "integer"
                    },
                    "pricingSha256": {
                        "type": "string"
                    },
                    "pricingSource": {
                        "type": "string"
                    },
                    "pricingUpdatedAt": {
                        "type": "string"
                    },
                    "pricingVersion": {
                        "type": "string"
                    },
                    "rate": {
                        "type": "number"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "unresolvedModels": {
                        "items": {
                            "type": "string"
                        },
                        "type": "array"
                    }
                },
                "required": [
                    "eventEstimatedFallbacks",
                    "flatRateFallbacks",
                    "pricedWithCatalogCount",
                    "pricingSha256",
                    "pricingSource",
                    "pricingUpdatedAt",
                    "pricingVersion",
                    "responseJson",
                    "unresolvedModels",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getDay7Report:getDay7Report": {
            "inputs": {
                "description": "A collection of arguments for invoking getDay7Report.\n",
                "properties": {
                    "days": {
                        "type": "integer"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getDay7Report.\n",
                "properties": {
                    "days": {
                        "type": "integer"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "responseJson": {
                        "type": "string"
                    }
                },
                "required": [
                    "responseJson",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getEffectivePolicyBundles:getEffectivePolicyBundles": {
            "inputs": {
                "description": "A collection of arguments for invoking getEffectivePolicyBundles.\n",
                "properties": {
                    "agentId": {
                        "type": "string"
                    },
                    "framework": {
                        "type": "string"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getEffectivePolicyBundles.\n",
                "properties": {
                    "agentId": {
                        "type": "string"
                    },
                    "dataJson": {
                        "type": "string"
                    },
                    "framework": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    }
                },
                "required": [
                    "dataJson",
                    "total",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getEvidenceBundle:getEvidenceBundle": {
            "inputs": {
                "description": "A collection of arguments for invoking getEvidenceBundle.\n",
                "properties": {
                    "sessionId": {
                        "type": "string"
                    }
                },
                "type": "object",
                "required": [
                    "sessionId"
                ]
            },
            "outputs": {
                "description": "A collection of values returned by getEvidenceBundle.\n",
                "properties": {
                    "bundleHash": {
                        "type": "string"
                    },
                    "exportedAt": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "sessionId": {
                        "type": "string"
                    },
                    "summaryJson": {
                        "type": "string"
                    }
                },
                "required": [
                    "bundleHash",
                    "exportedAt",
                    "responseJson",
                    "sessionId",
                    "summaryJson",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getEvidenceChain:getEvidenceChain": {
            "inputs": {
                "description": "A collection of arguments for invoking getEvidenceChain.\n",
                "properties": {
                    "fromSequence": {
                        "type": "integer"
                    },
                    "limit": {
                        "type": "integer"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getEvidenceChain.\n",
                "properties": {
                    "dataJson": {
                        "type": "string"
                    },
                    "fromSequence": {
                        "type": "integer"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "limit": {
                        "type": "integer"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    }
                },
                "required": [
                    "dataJson",
                    "responseJson",
                    "total",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getEvidenceSlos:getEvidenceSlos": {
            "inputs": {
                "description": "A collection of arguments for invoking getEvidenceSlos.\n",
                "properties": {
                    "scanLimit": {
                        "type": "integer"
                    },
                    "windowHours": {
                        "type": "integer"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getEvidenceSlos.\n",
                "properties": {
                    "decisionReasonCodeCoverage": {
                        "type": "number"
                    },
                    "decisionToApiVisibilityLatencyP95Seconds": {
                        "type": "number"
                    },
                    "deepllmEnrichmentJoinRate": {
                        "type": "number"
                    },
                    "evidenceChainVerificationSuccess": {
                        "type": "number"
                    },
                    "failuresJson": {
                        "type": "string"
                    },
                    "generatedAt": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "metricsJson": {
                        "type": "string"
                    },
                    "passed": {
                        "type": "boolean"
                    },
                    "policyReferenceCoverageNonAllow": {
                        "type": "number"
                    },
                    "rowsScanned": {
                        "type": "integer"
                    },
                    "scanLimit": {
                        "type": "integer"
                    },
                    "tenantId": {
                        "type": "string"
                    },
                    "thresholdsJson": {
                        "type": "string"
                    },
                    "violationIdPresenceRate": {
                        "type": "number"
                    },
                    "violationRelevantRows": {
                        "type": "integer"
                    },
                    "windowHours": {
                        "type": "integer"
                    }
                },
                "required": [
                    "decisionReasonCodeCoverage",
                    "decisionToApiVisibilityLatencyP95Seconds",
                    "deepllmEnrichmentJoinRate",
                    "evidenceChainVerificationSuccess",
                    "failuresJson",
                    "generatedAt",
                    "metricsJson",
                    "passed",
                    "policyReferenceCoverageNonAllow",
                    "rowsScanned",
                    "tenantId",
                    "thresholdsJson",
                    "violationIdPresenceRate",
                    "violationRelevantRows",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getEvidenceVerify:getEvidenceVerify": {
            "inputs": {
                "description": "A collection of arguments for invoking getEvidenceVerify.\n",
                "properties": {
                    "limit": {
                        "type": "integer"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getEvidenceVerify.\n",
                "properties": {
                    "breachDetail": {
                        "type": "string"
                    },
                    "chainHead": {
                        "type": "integer"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "limit": {
                        "type": "integer"
                    },
                    "recordsChecked": {
                        "type": "integer"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "verified": {
                        "type": "boolean"
                    }
                },
                "required": [
                    "breachDetail",
                    "chainHead",
                    "recordsChecked",
                    "responseJson",
                    "verified",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getExecutiveSummary:getExecutiveSummary": {
            "inputs": {
                "description": "A collection of arguments for invoking getExecutiveSummary.\n",
                "properties": {
                    "days": {
                        "type": "integer"
                    },
                    "rate": {
                        "type": "number"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getExecutiveSummary.\n",
                "properties": {
                    "days": {
                        "type": "integer"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "rate": {
                        "type": "number"
                    },
                    "responseJson": {
                        "type": "string"
                    }
                },
                "required": [
                    "responseJson",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getFeed:getFeed": {
            "inputs": {
                "description": "A collection of arguments for invoking getFeed.\n",
                "properties": {
                    "agentId": {
                        "type": "string"
                    },
                    "callerAgentId": {
                        "type": "string"
                    },
                    "decision": {
                        "type": "string"
                    },
                    "from": {
                        "type": "string"
                    },
                    "page": {
                        "type": "integer"
                    },
                    "perPage": {
                        "type": "integer"
                    },
                    "reasonCode": {
                        "type": "string"
                    },
                    "search": {
                        "type": "string"
                    },
                    "sortBy": {
                        "type": "string"
                    },
                    "sortDir": {
                        "type": "string"
                    },
                    "to": {
                        "type": "string"
                    },
                    "toolName": {
                        "type": "string"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getFeed.\n",
                "properties": {
                    "agentId": {
                        "type": "string"
                    },
                    "callerAgentId": {
                        "type": "string"
                    },
                    "dataJson": {
                        "type": "string"
                    },
                    "decision": {
                        "type": "string"
                    },
                    "from": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "page": {
                        "type": "integer"
                    },
                    "perPage": {
                        "type": "integer"
                    },
                    "reasonCode": {
                        "type": "string"
                    },
                    "search": {
                        "type": "string"
                    },
                    "sortBy": {
                        "type": "string"
                    },
                    "sortDir": {
                        "type": "string"
                    },
                    "to": {
                        "type": "string"
                    },
                    "toolName": {
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    }
                },
                "required": [
                    "dataJson",
                    "total",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getIncidentForensics:getIncidentForensics": {
            "inputs": {
                "description": "A collection of arguments for invoking getIncidentForensics.\n",
                "properties": {
                    "incidentId": {
                        "type": "string"
                    }
                },
                "type": "object",
                "required": [
                    "incidentId"
                ]
            },
            "outputs": {
                "description": "A collection of values returned by getIncidentForensics.\n",
                "properties": {
                    "agentId": {
                        "type": "string"
                    },
                    "agentName": {
                        "type": "string"
                    },
                    "attackSurfaceJson": {
                        "type": "string"
                    },
                    "eventsJson": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "incidentId": {
                        "type": "string"
                    },
                    "incidentSource": {
                        "type": "string"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "riskScore": {
                        "type": "integer"
                    },
                    "sessionId": {
                        "type": "string"
                    },
                    "telemetrySummaryJson": {
                        "type": "string"
                    }
                },
                "required": [
                    "agentId",
                    "agentName",
                    "attackSurfaceJson",
                    "eventsJson",
                    "incidentId",
                    "incidentSource",
                    "responseJson",
                    "riskScore",
                    "sessionId",
                    "telemetrySummaryJson",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getPackRuleVersions:getPackRuleVersions": {
            "inputs": {
                "description": "A collection of arguments for invoking getPackRuleVersions.\n",
                "properties": {
                    "packId": {
                        "type": "string"
                    }
                },
                "type": "object",
                "required": [
                    "packId"
                ]
            },
            "outputs": {
                "description": "A collection of values returned by getPackRuleVersions.\n",
                "properties": {
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "packId": {
                        "type": "string"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    },
                    "versionsJson": {
                        "type": "string"
                    }
                },
                "required": [
                    "packId",
                    "responseJson",
                    "total",
                    "versionsJson",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getPackRules:getPackRules": {
            "inputs": {
                "description": "A collection of arguments for invoking getPackRules.\n",
                "properties": {
                    "packId": {
                        "type": "string"
                    }
                },
                "type": "object",
                "required": [
                    "packId"
                ]
            },
            "outputs": {
                "description": "A collection of values returned by getPackRules.\n",
                "properties": {
                    "basePackVersion": {
                        "type": "string"
                    },
                    "currentVersionJson": {
                        "type": "string"
                    },
                    "displayName": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "packId": {
                        "type": "string"
                    },
                    "regulation": {
                        "type": "string"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "totalVersions": {
                        "type": "integer"
                    }
                },
                "required": [
                    "basePackVersion",
                    "currentVersionJson",
                    "displayName",
                    "packId",
                    "regulation",
                    "responseJson",
                    "totalVersions",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getPacks:getPacks": {
            "outputs": {
                "description": "A collection of values returned by getPacks.\n",
                "properties": {
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "packsJson": {
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    }
                },
                "required": [
                    "packsJson",
                    "total",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getPolicyBundles:getPolicyBundles": {
            "inputs": {
                "description": "A collection of arguments for invoking getPolicyBundles.\n",
                "properties": {
                    "assignment": {
                        "type": "string"
                    },
                    "enforcementMode": {
                        "type": "string"
                    },
                    "framework": {
                        "type": "string"
                    },
                    "status": {
                        "type": "string"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getPolicyBundles.\n",
                "properties": {
                    "assignment": {
                        "type": "string"
                    },
                    "dataJson": {
                        "type": "string"
                    },
                    "enforcementMode": {
                        "type": "string"
                    },
                    "framework": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "status": {
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    }
                },
                "required": [
                    "dataJson",
                    "total",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getPolicyChangeArtifact:getPolicyChangeArtifact": {
            "inputs": {
                "description": "A collection of arguments for invoking getPolicyChangeArtifact.\n",
                "properties": {
                    "requestId": {
                        "type": "string"
                    }
                },
                "type": "object",
                "required": [
                    "requestId"
                ]
            },
            "outputs": {
                "description": "A collection of values returned by getPolicyChangeArtifact.\n",
                "properties": {
                    "artifactId": {
                        "type": "string"
                    },
                    "dataJson": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "requestId": {
                        "type": "string"
                    },
                    "targetEnvironment": {
                        "type": "string"
                    },
                    "updatedAt": {
                        "type": "string"
                    }
                },
                "required": [
                    "artifactId",
                    "dataJson",
                    "requestId",
                    "targetEnvironment",
                    "updatedAt",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getPolicyChangeArtifacts:getPolicyChangeArtifacts": {
            "inputs": {
                "description": "A collection of arguments for invoking getPolicyChangeArtifacts.\n",
                "properties": {
                    "limit": {
                        "type": "integer"
                    },
                    "offset": {
                        "type": "integer"
                    },
                    "targetEnvironment": {
                        "type": "string"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getPolicyChangeArtifacts.\n",
                "properties": {
                    "dataJson": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "limit": {
                        "type": "integer"
                    },
                    "offset": {
                        "type": "integer"
                    },
                    "targetEnvironment": {
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    }
                },
                "required": [
                    "dataJson",
                    "total",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getPolicyException:getPolicyException": {
            "inputs": {
                "description": "A collection of arguments for invoking getPolicyException.\n",
                "properties": {
                    "requestId": {
                        "type": "string"
                    }
                },
                "type": "object",
                "required": [
                    "requestId"
                ]
            },
            "outputs": {
                "description": "A collection of values returned by getPolicyException.\n",
                "properties": {
                    "dataJson": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "requestId": {
                        "type": "string"
                    },
                    "requestedBy": {
                        "type": "string"
                    },
                    "reviewedBy": {
                        "type": "string"
                    },
                    "status": {
                        "type": "string"
                    },
                    "updatedAt": {
                        "type": "string"
                    }
                },
                "required": [
                    "dataJson",
                    "requestId",
                    "requestedBy",
                    "reviewedBy",
                    "status",
                    "updatedAt",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getPolicyExceptions:getPolicyExceptions": {
            "inputs": {
                "description": "A collection of arguments for invoking getPolicyExceptions.\n",
                "properties": {
                    "limit": {
                        "type": "integer"
                    },
                    "offset": {
                        "type": "integer"
                    },
                    "requestedBy": {
                        "type": "string"
                    },
                    "reviewedBy": {
                        "type": "string"
                    },
                    "status": {
                        "type": "string"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getPolicyExceptions.\n",
                "properties": {
                    "dataJson": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "limit": {
                        "type": "integer"
                    },
                    "offset": {
                        "type": "integer"
                    },
                    "requestedBy": {
                        "type": "string"
                    },
                    "reviewedBy": {
                        "type": "string"
                    },
                    "status": {
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    }
                },
                "required": [
                    "dataJson",
                    "total",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getReportData:getReportData": {
            "inputs": {
                "description": "A collection of arguments for invoking getReportData.\n",
                "properties": {
                    "agentId": {
                        "type": "string"
                    },
                    "cadence": {
                        "type": "string"
                    },
                    "reportId": {
                        "type": "string"
                    },
                    "reportType": {
                        "type": "string"
                    },
                    "status": {
                        "type": "string"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getReportData.\n",
                "properties": {
                    "agentId": {
                        "type": "string"
                    },
                    "cadence": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "metadataJson": {
                        "type": "string"
                    },
                    "reportId": {
                        "type": "string"
                    },
                    "reportType": {
                        "type": "string"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "status": {
                        "type": "string"
                    }
                },
                "required": [
                    "metadataJson",
                    "reportId",
                    "responseJson",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getReportsOverview:getReportsOverview": {
            "inputs": {
                "description": "A collection of arguments for invoking getReportsOverview.\n",
                "properties": {
                    "days": {
                        "type": "integer"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getReportsOverview.\n",
                "properties": {
                    "days": {
                        "type": "integer"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "responseJson": {
                        "type": "string"
                    }
                },
                "required": [
                    "responseJson",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getRuntimeStatus:getRuntimeStatus": {
            "inputs": {
                "description": "A collection of arguments for invoking getRuntimeStatus.\n",
                "properties": {
                    "environment": {
                        "type": "string"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getRuntimeStatus.\n",
                "properties": {
                    "environment": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "responseJson": {
                        "type": "string"
                    }
                },
                "required": [
                    "responseJson",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getSessionForensics:getSessionForensics": {
            "inputs": {
                "description": "A collection of arguments for invoking getSessionForensics.\n",
                "properties": {
                    "sessionId": {
                        "type": "string"
                    }
                },
                "type": "object",
                "required": [
                    "sessionId"
                ]
            },
            "outputs": {
                "description": "A collection of values returned by getSessionForensics.\n",
                "properties": {
                    "agentId": {
                        "type": "string"
                    },
                    "agentName": {
                        "type": "string"
                    },
                    "attackSurfaceJson": {
                        "type": "string"
                    },
                    "eventsJson": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "riskScore": {
                        "type": "integer"
                    },
                    "sessionId": {
                        "type": "string"
                    },
                    "telemetrySummaryJson": {
                        "type": "string"
                    }
                },
                "required": [
                    "agentId",
                    "agentName",
                    "attackSurfaceJson",
                    "eventsJson",
                    "responseJson",
                    "riskScore",
                    "sessionId",
                    "telemetrySummaryJson",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getTenantSettings:getTenantSettings": {
            "outputs": {
                "description": "A collection of values returned by getTenantSettings.\n",
                "properties": {
                    "complianceProfile": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "regulatoryRegimes": {
                        "items": {
                            "type": "string"
                        },
                        "type": "array"
                    },
                    "settingsJson": {
                        "type": "string"
                    },
                    "tenantId": {
                        "type": "string"
                    },
                    "toolRiskOverrides": {
                        "additionalProperties": {
                            "type": "string"
                        },
                        "type": "object"
                    },
                    "updatedAt": {
                        "type": "string"
                    },
                    "webhookEnabled": {
                        "type": "boolean"
                    },
                    "webhookUrl": {
                        "type": "string"
                    }
                },
                "required": [
                    "complianceProfile",
                    "regulatoryRegimes",
                    "settingsJson",
                    "tenantId",
                    "toolRiskOverrides",
                    "updatedAt",
                    "webhookEnabled",
                    "webhookUrl",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:governance/getTools:getTools": {
            "inputs": {
                "description": "A collection of arguments for invoking getTools.\n",
                "properties": {
                    "limit": {
                        "type": "integer"
                    },
                    "windowHours": {
                        "type": "integer"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getTools.\n",
                "properties": {
                    "dataJson": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "limit": {
                        "type": "integer"
                    },
                    "total": {
                        "type": "integer"
                    },
                    "windowHours": {
                        "type": "integer"
                    }
                },
                "required": [
                    "dataJson",
                    "total",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:mcp/getInventoryDigest:getInventoryDigest": {
            "inputs": {
                "description": "A collection of arguments for invoking getInventoryDigest.\n",
                "properties": {
                    "windowHours": {
                        "type": "integer"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getInventoryDigest.\n",
                "properties": {
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "recommendedActions": {
                        "items": {
                            "type": "string"
                        },
                        "type": "array"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "topUnapprovedEndpointsJson": {
                        "type": "string"
                    },
                    "totalEndpoints": {
                        "type": "integer"
                    },
                    "unapprovedCalls": {
                        "type": "integer"
                    },
                    "unapprovedEndpoints": {
                        "type": "integer"
                    },
                    "windowHours": {
                        "type": "integer"
                    }
                },
                "required": [
                    "recommendedActions",
                    "responseJson",
                    "topUnapprovedEndpointsJson",
                    "totalEndpoints",
                    "unapprovedCalls",
                    "unapprovedEndpoints",
                    "windowHours",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:mcp/getInventoryReport:getInventoryReport": {
            "inputs": {
                "description": "A collection of arguments for invoking getInventoryReport.\n",
                "properties": {
                    "windowHours": {
                        "type": "integer"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getInventoryReport.\n",
                "properties": {
                    "dataJson": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    },
                    "unapprovedCalls": {
                        "type": "integer"
                    },
                    "unapprovedEndpoints": {
                        "type": "integer"
                    },
                    "windowHours": {
                        "type": "integer"
                    }
                },
                "required": [
                    "dataJson",
                    "responseJson",
                    "total",
                    "unapprovedCalls",
                    "unapprovedEndpoints",
                    "windowHours",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:mcp/getVendor:getVendor": {
            "inputs": {
                "description": "A collection of arguments for invoking getVendor.\n",
                "properties": {
                    "vendorId": {
                        "type": "string"
                    }
                },
                "type": "object",
                "required": [
                    "vendorId"
                ]
            },
            "outputs": {
                "description": "A collection of values returned by getVendor.\n",
                "properties": {
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "vendorId": {
                        "type": "string"
                    }
                },
                "required": [
                    "responseJson",
                    "vendorId",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:mcp/getVendors:getVendors": {
            "inputs": {
                "description": "A collection of arguments for invoking getVendors.\n",
                "properties": {
                    "approved": {
                        "type": "boolean"
                    }
                },
                "type": "object"
            },
            "outputs": {
                "description": "A collection of values returned by getVendors.\n",
                "properties": {
                    "approved": {
                        "type": "boolean"
                    },
                    "dataJson": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "responseJson": {
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    }
                },
                "required": [
                    "dataJson",
                    "responseJson",
                    "total",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:mdm/getProviders:getProviders": {
            "outputs": {
                "description": "A collection of values returned by getProviders.\n",
                "properties": {
                    "dataJson": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "total": {
                        "type": "integer"
                    }
                },
                "required": [
                    "dataJson",
                    "total",
                    "id"
                ],
                "type": "object"
            }
        },
        "thoth:mdm/getSyncJob:getSyncJob": {
            "inputs": {
                "description": "A collection of arguments for invoking getSyncJob.\n",
                "properties": {
                    "jobId": {
                        "type": "string"
                    }
                },
                "type": "object",
                "required": [
                    "jobId"
                ]
            },
            "outputs": {
                "description": "A collection of values returned by getSyncJob.\n",
                "properties": {
                    "completedAt": {
                        "type": "string"
                    },
                    "createdAt": {
                        "type": "string"
                    },
                    "error": {
                        "type": "string"
                    },
                    "id": {
                        "description": "The provider-assigned unique ID for this managed resource.",
                        "type": "string"
                    },
                    "jobId": {
                        "type": "string"
                    },
                    "jobJson": {
                        "type": "string"
                    },
                    "providerName": {
                        "type": "string"
                    },
                    "startedAt": {
                        "type": "string"
                    },
                    "status": {
                        "type": "string"
                    },
                    "syncedEndpoints": {
                        "type": "integer"
                    },
                    "unassignedCount": {
                        "type": "integer"
                    },
                    "updatedAt": {
                        "type": "string"
                    }
                },
                "required": [
                    "completedAt",
                    "createdAt",
                    "error",
                    "jobId",
                    "jobJson",
                    "providerName",
                    "startedAt",
                    "status",
                    "syncedEndpoints",
                    "unassignedCount",
                    "updatedAt",
                    "id"
                ],
                "type": "object"
            }
        }
    }
}