infrawrench-sdk 1.14.0 → 1.16.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c947d74d37069573fb9534ab1665a9ebcef67ad271943d690f1474ef27eb1913
-  data.tar.gz: 7b44c470da3df84fe8d0dbb39a253a0c30ab8a9bfb980bd2c4b1958c370b7b63
+  metadata.gz: ed2bbb041647f781da0b26a0d376c2cedcf6a4904aa085405ee8c7bd5d477de9
+  data.tar.gz: fc6adc2c9b7edd3188848c118b52f322ce2e54bd1d613fc927cc718401759df8
 SHA512:
-  metadata.gz: 2e314cc1ca73c8c0603ab5109e692215734058d3d5b412abe75e43debcc22952443e76820c0fdb90dcd9d66fe63a02c42e52496049b3d148a74e0d8161ad180c
-  data.tar.gz: '087ba4da5d3ab0ec9cf77f7aebdef7ee8af0dbc0911ea86b1ffbf0692e481107bf7061de81b627bd606ab56334470c6603e04fe4e6e3d0f0358f1eac8a8c3347'
+  metadata.gz: cfa7d9ba7d12d044aca5221751c60b316d4ac51133f6c17967417deaea411f688dafbce45af8c18836fd421cf9f1469b1972eb068c5fb085501efb3f7d14ff62
+  data.tar.gz: 1eb649eb2e24e58172ec86e6b84a4d90c2c8739bb7d01804defc426845bc566261a69f241f9b6af1cc7db1ea4ee888274ff2415a645c50efcc441d068962cc9d

data/README.md

@@ -1,6 +1,6 @@
 # infrawrench-sdk
 
-Generated Ruby client for the Infrawrench API (API version `1.14.0`).
+Generated Ruby client for the Infrawrench API (API version `1.16.0`).
 
 **Do not edit this gem by hand** — it is regenerated from `openapi.json` and is
 not checked into the repository. Run
@@ -41,7 +41,7 @@ Every method takes an optional trailing `request_options:` hash (`:headers`,
 Responses are the plain `Hash`/`Array` that `JSON.parse` returns, with String
 keys spelled exactly as the wire spells them. There are no model classes — see
 [`sig/infrawrench/sdk.rbs`](./sig/infrawrench/sdk.rbs) for the shape of every one of the
-573 schemas, as RBS type aliases that steep and TypeProf can read.
+596 schemas, as RBS type aliases that steep and TypeProf can read.
 
 Non-2xx responses raise `Infrawrench::ApiError`, which carries `#status`,
 the parsed `#body`, and the machine-readable `#code` when the API sends one —

data/infrawrench-sdk.gemspec

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.14.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.16.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.14.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.16.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk
@@ -17,8 +17,8 @@ require_relative "lib/infrawrench/version"
 Gem::Specification.new do |spec|
   spec.name = "infrawrench-sdk"
   spec.version = Infrawrench::VERSION
-  spec.summary = "Generated Ruby client for the Infrawrench API (v1.14.0)."
-  spec.description = "Generated Ruby client for the Infrawrench API (v1.14.0). Covers the published API surface only — operations marked x-internal in the spec are not generated. No runtime dependencies."
+  spec.summary = "Generated Ruby client for the Infrawrench API (v1.16.0)."
+  spec.description = "Generated Ruby client for the Infrawrench API (v1.16.0). Covers the published API surface only — operations marked x-internal in the spec are not generated. No runtime dependencies."
   spec.authors = ["Infrawrench LLC", "Astrid Gealer"]
   spec.email = ["astrid@infrawrench.com"]
   spec.homepage = "https://infrawrench.com/docs/team-and-billing/client-sdks"

data/lib/infrawrench/client.rb

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.14.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.16.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.14.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.16.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk
@@ -246,6 +246,173 @@ module Infrawrench
     end
   end
 
+  # `client.access_review.dismissals`
+  class AccessReviewDismissalsNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # Dismiss an access review finding
+    #
+    # Accept a finding — that break-glass role really is meant to be admin, that
+    # shared key really is rotated out of band. The finding leaves `findings`
+    # and stops feeding the security alerts, but the rule keeps being evaluated
+    # and the finding is reported back under `dismissed` for as long as it still
+    # matches. The principal itself stays in `principals` either way.
+    # Idempotent: dismissing an already-dismissed finding rewrites the note and
+    # the author.
+    #
+    # _Requires permission: `resources:write`._
+    #
+    # POST /api/org/{orgId}/access-review/dismissals
+    #
+    # Raises on 400: Bad request
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param body [Hash, nil] Request body, shaped as `AccessReviewDismissalCreate`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `AccessReviewDismissal` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def create(org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/access-review/dismissals",
+        path_params: { "orgId" => org_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Restore a dismissed access review finding
+    #
+    # Undo a dismissal, putting the finding back on the list and back into the
+    # security alerts. The finding is identified by query parameters rather than
+    # path segments because resource ids are provider-native and routinely
+    # contain slashes.
+    #
+    # _Requires permission: `resources:write`._
+    #
+    # DELETE /api/org/{orgId}/access-review/dismissals
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param resource_id [String] Infrawrench resource id the finding is on.
+    # @param rule_id [String] Which rule was raised. Half of a dismissal's key, alongside the
+    #   resource id. The `access-review:` prefix is reserved so these can share the posture
+    #   dismissal store without colliding with plugin-declared posture rule ids.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [nil] This endpoint returns no content.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def delete(resource_id:, rule_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "DELETE",
+        path: "/api/org/{orgId}/access-review/dismissals",
+        path_params: { "orgId" => org_id },
+        query: { "resourceId" => resource_id, "ruleId" => rule_id },
+        accept: :empty,
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.access_review`
+  class AccessReviewNamespace
+    # @return [AccessReviewDismissalsNamespace] `client.access_review.dismissals`
+    attr_reader :dismissals
+
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+      @dismissals = AccessReviewDismissalsNamespace.new(@transport)
+    end
+
+    # Export the access review as compliance evidence
+    #
+    # The same review as a downloadable file, one row per finding. `format=csv`
+    # (the default) returns RFC 4180 CSV with every cell quoted and spreadsheet
+    # formulas neutralised; `format=json` returns the full response body
+    # pretty-printed.
+    #
+    # Dismissed findings are included and labelled in both formats, with the
+    # note and the person who accepted them: an evidence pack answers what you
+    # found *and* what you decided. Exports are recorded in the audit log.
+    #
+    # _Requires permission: `resources:read`._
+    #
+    # GET /api/org/{orgId}/access-review/export
+    #
+    # Raises on 400: Bad request
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param format [String, nil] Defaults to "csv".
+    # @param stale_days [Integer, nil] Staleness window in days. Defaults to 90.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `AccessReviewResponse` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def export(org_id: nil, format: nil, stale_days: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/access-review/export",
+        path_params: { "orgId" => org_id },
+        query: { "format" => format, "staleDays" => stale_days },
+        request_options: request_options
+      )
+    end
+
+    # Review the principals inside your connected clouds
+    #
+    # Every IAM user and role, service account, app registration, group, role
+    # binding and long-lived API key your connected accounts have synced, with
+    # the findings that have evidence against them: unused beyond the staleness
+    # window, holding administrative or wildcard permissions, past the rotation
+    # budget their plugin declares, carrying no recorded owner, or signing in
+    # without a second factor.
+    #
+    # This is about principals in **your** clouds — it is neither your
+    # Infrawrench team's roles (`/team`) nor the credentials Infrawrench stores
+    # for you (`/credential-hygiene`).
+    #
+    # No provider API calls are made: everything is computed from already-synced
+    # fields, so a principal whose provider does not report last use is reported
+    # with `activity: "unknown"` and is never called stale. Findings the
+    # organization has dismissed are reported separately under `dismissed` and
+    # are excluded from `findings`, `counts`, `byRule` and the security alerts.
+    #
+    # _Requires permission: `resources:read`._
+    #
+    # GET /api/org/{orgId}/access-review
+    #
+    # Raises on 400: Bad request
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param stale_days [Integer, nil] Staleness window in days. Defaults to 90.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `AccessReviewResponse` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(org_id: nil, stale_days: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/access-review",
+        path_params: { "orgId" => org_id },
+        query: { "staleDays" => stale_days },
+        request_options: request_options
+      )
+    end
+  end
+
   # `client.accounts.credentials`
   class AccountsCredentialsNamespace
     # @api private
@@ -6395,6 +6562,334 @@ module Infrawrench
     end
   end
 
+  # `client.incidents.get`
+  class IncidentsGetNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # List declared incidents
+    #
+    # Every incident the organization has declared, newest first, each with the
+    # artefacts its declaration created — including the ones that failed.
+    #
+    # _Requires permission: `incidents:read`._
+    #
+    # GET /api/org/{orgId}/incidents
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param status [String, nil] `open`, `mitigated`, `resolved`, or `all` (the default).
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `IncidentList` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(org_id: nil, status: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/incidents",
+        path_params: { "orgId" => org_id },
+        query: { "status" => status },
+        request_options: request_options
+      )
+    end
+
+    # Read one incident
+    #
+    # The incident with its artefacts and its operator notes.
+    #
+    # _Requires permission: `incidents:read`._
+    #
+    # GET /api/org/{orgId}/incidents/{incidentId}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param incident_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `IncidentDetail` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get_org_org_id_incidents_incident_id(incident_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/incidents/{incidentId}",
+        path_params: { "orgId" => org_id, "incidentId" => incident_id },
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.incidents.notes`
+  class IncidentsNotesNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # Add an operator note
+    #
+    # The running commentary no join can reconstruct. `occurredAt` may be
+    # backdated so a note typed at 04:00 lands on the timeline where it belongs.
+    #
+    # _Requires permission: `incidents:write`._
+    #
+    # POST /api/org/{orgId}/incidents/{incidentId}/notes
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param incident_id [String]
+    # @param body [Hash, nil] Request body, shaped as `IncidentNoteCreate`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `IncidentNote` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def create(incident_id:, org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/incidents/{incidentId}/notes",
+        path_params: { "orgId" => org_id, "incidentId" => incident_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Delete an operator note
+    #
+    # _Requires permission: `incidents:write`._
+    #
+    # DELETE /api/org/{orgId}/incidents/{incidentId}/notes/{noteId}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param incident_id [String]
+    # @param note_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [nil] This endpoint returns no content.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def delete(incident_id:, note_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "DELETE",
+        path: "/api/org/{orgId}/incidents/{incidentId}/notes/{noteId}",
+        path_params: { "orgId" => org_id, "incidentId" => incident_id, "noteId" => note_id },
+        accept: :empty,
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.incidents`
+  class IncidentsNamespace
+    # @return [IncidentsGetNamespace] `client.incidents.get`
+    attr_reader :get
+    # @return [IncidentsNotesNamespace] `client.incidents.notes`
+    attr_reader :notes
+
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+      @get = IncidentsGetNamespace.new(@transport)
+      @notes = IncidentsNotesNamespace.new(@transport)
+    end
+
+    # Declare an incident
+    #
+    # Record the incident and perform the opted-in side effects. The incident
+    # row is written first and alone: a 201 means it exists, and the `artifacts`
+    # array on the response says what else happened. No side effect can lose the
+    # declaration, and none is swallowed. Audit-logged.
+    #
+    # _Requires permission: `incidents:write`._
+    #
+    # POST /api/org/{orgId}/incidents
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 403: Forbidden
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param body [Hash, nil] Request body, shaped as `IncidentDeclare`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Incident` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def create(org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/incidents",
+        path_params: { "orgId" => org_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Delete an incident
+    #
+    # Removes the incident, its notes and its artefact records. It does not lift
+    # a freeze or close a status-page update — resolve for that; deleting is for
+    # a mis-declaration. Audit-logged.
+    #
+    # _Requires permission: `incidents:write`._
+    #
+    # DELETE /api/org/{orgId}/incidents/{incidentId}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param incident_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [nil] This endpoint returns no content.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def delete(incident_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "DELETE",
+        path: "/api/org/{orgId}/incidents/{incidentId}",
+        path_params: { "orgId" => org_id, "incidentId" => incident_id },
+        accept: :empty,
+        request_options: request_options
+      )
+    end
+
+    # Export a pre-filled postmortem
+    #
+    # Markdown with the timeline, the affected resources, the duration, the time
+    # to mitigate and the notes already filled in. The analysis headings —
+    # impact, root cause, action items — are deliberately left blank: a
+    # generated document that guesses at a root cause is worse than one that
+    # leaves a heading.
+    #
+    # _Requires permission: `incidents:read`._
+    #
+    # GET /api/org/{orgId}/incidents/{incidentId}/postmortem
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param incident_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `IncidentPostmortem` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def postmortem(incident_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/incidents/{incidentId}/postmortem",
+        path_params: { "orgId" => org_id, "incidentId" => incident_id },
+        request_options: request_options
+      )
+    end
+
+    # Retry the artefacts that failed
+    #
+    # Re-runs only the side effects whose artefact is in a failure state,
+    # replacing each failure rather than queueing a second attempt beside it. A
+    # `failed` artefact is **re-created**; a `close_failed` one is **re-closed**
+    # — re-creating the latter would open a second change freeze or post a
+    # duplicate public notice. A status-page retry reuses the components
+    # recorded on the artefact's `request`, so the announcement keeps its
+    # original scope. Its own endpoint rather than a flag on PATCH, because it
+    # writes into three external systems. Audit-logged.
+    #
+    # _Requires permission: `incidents:write`._
+    #
+    # POST /api/org/{orgId}/incidents/{incidentId}/retry-artifacts
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param incident_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Incident` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def retry_artifacts(incident_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/incidents/{incidentId}/retry-artifacts",
+        path_params: { "orgId" => org_id, "incidentId" => incident_id },
+        request_options: request_options
+      )
+    end
+
+    # Assemble the incident's timeline
+    #
+    # Merged on read from what is already recorded between the incident's start
+    # and its resolution: resource changes, deployments, cost anomalies,
+    # provider status incidents, audit entries, change freezes and workflow runs
+    # (all via the same union the Moment screen uses), plus probe state
+    # transitions, metric-alert firings, the incident's own life events, its
+    # artefacts and its operator notes. Nothing is copied — a correction
+    # upstream shows up here on the next read.
+    #
+    # Probe transitions are an approximation: `synthetic_probes` keeps only a
+    # single `lastStateChangeAt`, so a probe that flapped twice inside the
+    # window contributes its most recent flip and no more.
+    #
+    # _Requires permission: `incidents:read`._
+    #
+    # GET /api/org/{orgId}/incidents/{incidentId}/timeline
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param incident_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `IncidentTimeline` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def timeline(incident_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/incidents/{incidentId}/timeline",
+        path_params: { "orgId" => org_id, "incidentId" => incident_id },
+        request_options: request_options
+      )
+    end
+
+    # Edit or transition an incident
+    #
+    # Omitted fields keep their value. Setting `status` stamps the matching
+    # timestamp, and resolving undoes exactly what this incident created — the
+    # freeze whose id is on its own artefact, not whatever freeze happens to be
+    # in effect. Resolving an incident that was never marked mitigated
+    # back-fills `mitigatedAt` from `resolvedAt`. Audit-logged.
+    #
+    # _Requires permission: `incidents:write`._
+    #
+    # PATCH /api/org/{orgId}/incidents/{incidentId}
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param incident_id [String]
+    # @param body [Hash, nil] Request body, shaped as `IncidentPatch`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Incident` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def update(incident_id:, org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "PATCH",
+        path: "/api/org/{orgId}/incidents/{incidentId}",
+        path_params: { "orgId" => org_id, "incidentId" => incident_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+  end
+
   # `client.invitations.by_token`
   class InvitationsByTokenNamespace
     # @api private
@@ -13224,6 +13719,8 @@ module Infrawrench
     attr_reader :transport
     # @return [AccessRequestsNamespace] `client.access_requests`
     attr_reader :access_requests
+    # @return [AccessReviewNamespace] `client.access_review`
+    attr_reader :access_review
     # @return [AccountsNamespace] `client.accounts`
     attr_reader :accounts
     # @return [AgentsNamespace] `client.agents`
@@ -13304,6 +13801,8 @@ module Infrawrench
     attr_reader :environment_diff
     # @return [ExpiringNamespace] `client.expiring`
     attr_reader :expiring
+    # @return [IncidentsNamespace] `client.incidents`
+    attr_reader :incidents
     # @return [InvitationsNamespace] `client.invitations`
     attr_reader :invitations
     # @return [InvoicesNamespace] `client.invoices`
@@ -13393,6 +13892,7 @@ module Infrawrench
     def initialize(**options)
       @transport = Transport.new(**options)
       @access_requests = AccessRequestsNamespace.new(@transport)
+      @access_review = AccessReviewNamespace.new(@transport)
       @accounts = AccountsNamespace.new(@transport)
       @agents = AgentsNamespace.new(@transport)
       @alert_rules = AlertRulesNamespace.new(@transport)
@@ -13433,6 +13933,7 @@ module Infrawrench
       @docker = DockerNamespace.new(@transport)
       @environment_diff = EnvironmentDiffNamespace.new(@transport)
       @expiring = ExpiringNamespace.new(@transport)
+      @incidents = IncidentsNamespace.new(@transport)
       @invitations = InvitationsNamespace.new(@transport)
       @invoices = InvoicesNamespace.new(@transport)
       @jira = JiraNamespace.new(@transport)

data/lib/infrawrench/sdk.rb

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.14.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.16.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.14.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.16.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk

data/lib/infrawrench/transport.rb

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.14.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.16.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.14.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.16.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk

data/lib/infrawrench/version.rb

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.14.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.16.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.14.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.16.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk
@@ -15,5 +15,5 @@
 # Kept in its own file so the gemspec can read the version without loading the
 # client — a gemspec that pulls in net/http is a gemspec that can fail to parse.
 module Infrawrench
-  VERSION = "1.14.0"
+  VERSION = "1.16.0"
 end

data/lib/infrawrench-sdk.rb

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.14.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.16.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.14.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.16.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk

data/sig/infrawrench/sdk.rbs

@@ -1,7 +1,7 @@
-# infrawrench-sdk v1.14.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.16.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.14.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.16.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk
@@ -104,6 +104,57 @@ module Infrawrench
     ?"missing" => Array[String]
   }
 
+  # Spec schema: `AccessFinding`.
+  type access_finding = {
+    "resourceId" => String,
+    "ruleId" => "access-review:stale-principal"
+      | "access-review:admin-principal"
+      | "access-review:key-past-rotation"
+      | "access-review:no-recorded-owner"
+      | "access-review:no-mfa",
+    "title" => String,
+    "severity" => "critical" | "high" | "medium" | "low",
+    "reason" => String,
+    "principal" => access_principal
+  }
+
+  # Spec schema: `AccessPrincipal`.
+  type access_principal = {
+    "resourceId" => String,
+    "pluginId" => plugin_id,
+    "pluginName" => String,
+    "resourceTypeId" => String,
+    "resourceTypeName" => String,
+    "accountId" => String,
+    "accountName" => String,
+    "displayName" => String,
+    "externalId" => String | nil,
+    "role" => "user" | "group" | "role" | "service-account" | "key" | "binding",
+    "lastUsedAt" => String | nil,
+    "daysSinceLastUsed" => Integer | nil,
+    "activity" => "active" | "stale" | "unknown",
+    "createdAt" => String | nil,
+    "ageDays" => Integer | nil,
+    "admin" => bool | nil,
+    "mfa" => bool | nil,
+    "parent" => String | nil,
+    "owner" => access_principal_owner,
+    "revokeActionId" => String | nil
+  }
+
+  # Who owns the resource, from the resource-ownership record. Null when nobody
+  # is named.
+  #
+  # Spec schema: `AccessPrincipalOwner`.
+  type access_principal_owner = {
+      "userId" => String | nil,
+      "displayName" => String,
+      "isLabel" => bool,
+      "ticketUrl" => String | nil,
+      "purpose" => String | nil
+    }
+    | nil
+
   # Spec schema: `AccessRequest`.
   type access_request = {
     "id" => String,
@@ -137,6 +188,63 @@ module Infrawrench
   # Spec schema: `AccessRequestCreate`.
   type access_request_create = { "permissions" => Array[String], "reason" => String, "durationMinutes" => Integer }
 
+  # Spec schema: `AccessReviewDismissal`.
+  type access_review_dismissal = {
+    "resourceId" => String,
+    "ruleId" => String,
+    "dismissedAt" => String,
+    "dismissedBy" => String | nil,
+    "reason" => String | nil
+  }
+
+  # Spec schema: `AccessReviewDismissalCreate`.
+  type access_review_dismissal_create = {
+    "resourceId" => String,
+    "ruleId" => "access-review:stale-principal"
+      | "access-review:admin-principal"
+      | "access-review:key-past-rotation"
+      | "access-review:no-recorded-owner"
+      | "access-review:no-mfa",
+    ?"reason" => String | nil
+  }
+
+  # Spec schema: `AccessReviewResponse`.
+  type access_review_response = {
+    "principals" => Array[access_principal],
+    "findings" => Array[access_finding],
+    "totalCount" => Integer,
+    "counts" => access_review_severity_counts,
+    "byRule" => access_review_rule_counts,
+    "byRole" => access_review_role_counts,
+    "dismissed" => Array[dismissed_access_finding],
+    "dismissedCount" => Integer,
+    "unknownActivityCount" => Integer,
+    "staleDays" => Integer,
+    "generatedAt" => String
+  }
+
+  # Spec schema: `AccessReviewRoleCounts`.
+  type access_review_role_counts = {
+    "user" => Integer,
+    "group" => Integer,
+    "role" => Integer,
+    "service-account" => Integer,
+    "key" => Integer,
+    "binding" => Integer
+  }
+
+  # Spec schema: `AccessReviewRuleCounts`.
+  type access_review_rule_counts = {
+    "access-review:stale-principal" => Integer,
+    "access-review:admin-principal" => Integer,
+    "access-review:key-past-rotation" => Integer,
+    "access-review:no-recorded-owner" => Integer,
+    "access-review:no-mfa" => Integer
+  }
+
+  # Spec schema: `AccessReviewSeverityCounts`.
+  type access_review_severity_counts = { "critical" => Integer, "high" => Integer, "medium" => Integer, "low" => Integer }
+
   # Spec schema: `AccessRevokeConflict`.
   type access_revoke_conflict = { "error" => String }
 
@@ -328,6 +436,7 @@ module Infrawrench
     | "postureAlerts"
     | "probeAlerts"
     | "quotaAlerts"
+    | "incidentAlerts"
     | "weeklyDigest"
 
   # Spec schema: `AllocationRule`.
@@ -2177,6 +2286,21 @@ module Infrawrench
   # Spec schema: `DigestTransportResult`.
   type digest_transport_result = { "attempted" => Integer, "succeeded" => Integer }
 
+  # Spec schema: `DismissedAccessFinding`.
+  type dismissed_access_finding = {
+    "resourceId" => String,
+    "ruleId" => "access-review:stale-principal"
+      | "access-review:admin-principal"
+      | "access-review:key-past-rotation"
+      | "access-review:no-recorded-owner"
+      | "access-review:no-mfa",
+    "title" => String,
+    "severity" => "critical" | "high" | "medium" | "low",
+    "reason" => String,
+    "principal" => access_principal,
+    "dismissal" => access_review_dismissal
+  }
+
   # Spec schema: `DismissedPostureFinding`.
   type dismissed_posture_finding = {
     "resourceId" => String,
@@ -2584,6 +2708,148 @@ module Infrawrench
     "isImported" => bool
   }
 
+  # Spec schema: `Incident`.
+  type incident = {
+    "id" => String,
+    "title" => String,
+    "severity" => "sev1" | "sev2" | "sev3" | "sev4",
+    "status" => "open" | "mitigated" | "resolved",
+    "summary" => String | nil,
+    "startedAt" => String,
+    "mitigatedAt" => String | nil,
+    "resolvedAt" => String | nil,
+    "declaredByUserId" => String | nil,
+    "declaredByName" => String | nil,
+    "resolvedByUserId" => String | nil,
+    "affectedResourceIds" => Array[String],
+    "affectedAccountIds" => Array[String],
+    "issueUrl" => String | nil,
+    "createdAt" => String,
+    "updatedAt" => String,
+    "artifacts" => Array[incident_artifact],
+    "noteCount" => Integer
+  }
+
+  # Spec schema: `IncidentActions`.
+  type incident_actions = {
+    ?"openFreeze" => bool,
+    ?"pinMoment" => bool,
+    ?"postSlack" => bool,
+    ?"statusPageId" => String | nil,
+    ?"statusPageComponentIds" => Array[String]
+  }
+
+  # Spec schema: `IncidentArtifact`.
+  type incident_artifact = {
+    "id" => String,
+    "kind" => "freeze" | "moment" | "slack" | "status-page",
+    "status" => "created" | "failed" | "closed" | "close_failed",
+    "label" => String | nil,
+    "refId" => String | String | nil,
+    "refSecondary" => String | nil,
+    "error" => String | nil,
+    "request" => incident_artifact_request,
+    "createdAt" => String,
+    "updatedAt" => String
+  }
+
+  # What the declaration asked for, recorded so a retry asks for the same thing.
+  # Present on the status-page artefact, where a retry that forgot the
+  # operator's chosen components would publish the outage against the whole
+  # page.
+  #
+  # Spec schema: `IncidentArtifactRequest`.
+  type incident_artifact_request = { ?"statusPageId" => String | nil, ?"componentIds" => Array[String] } | nil
+
+  # Spec schema: `IncidentDeclare`.
+  type incident_declare = {
+    "title" => String,
+    ?"severity" => "sev1" | "sev2" | "sev3" | "sev4",
+    ?"summary" => String | nil,
+    ?"startedAt" => String,
+    ?"affectedResourceIds" => Array[String],
+    ?"affectedAccountIds" => Array[String],
+    ?"actions" => incident_actions
+  }
+
+  # Spec schema: `IncidentDetail`.
+  type incident_detail = { "incident" => incident, "notes" => Array[incident_note] }
+
+  # Spec schema: `IncidentList`.
+  type incident_list = { "incidents" => Array[incident] }
+
+  # Spec schema: `IncidentNote`.
+  type incident_note = {
+    "id" => String,
+    "body" => String,
+    "authorUserId" => String | nil,
+    "authorName" => String | nil,
+    "occurredAt" => String,
+    "createdAt" => String
+  }
+
+  # Spec schema: `IncidentNoteCreate`.
+  type incident_note_create = { "body" => String, ?"occurredAt" => String }
+
+  # Spec schema: `IncidentPatch`.
+  type incident_patch = {
+    ?"title" => String,
+    ?"severity" => "sev1" | "sev2" | "sev3" | "sev4",
+    ?"status" => "open" | "mitigated" | "resolved",
+    ?"summary" => String | nil,
+    ?"affectedResourceIds" => Array[String],
+    ?"affectedAccountIds" => Array[String],
+    ?"issueUrl" => String | nil
+  }
+
+  # Spec schema: `IncidentPostmortem`.
+  type incident_postmortem = { "markdown" => String, "filename" => String }
+
+  # Spec schema: `IncidentTimeline`.
+  type incident_timeline = {
+    "incidentId" => String,
+    "from" => String,
+    "to" => String,
+    "generatedAt" => String,
+    "entries" => Array[incident_timeline_entry],
+    "feeds" => Array[{ "feed" => String, "status" => "ok" | "omitted" | "error", ?"error" => String | nil }],
+    "truncated" => bool
+  }
+
+  # Spec schema: `IncidentTimelineEntry`.
+  type incident_timeline_entry = {
+    "id" => String,
+    "source" => "incident" | "note" | "artifact" | "moment" | "probe" | "metric-alert",
+    "kind" => String,
+    "at" => String,
+    "title" => String,
+    ?"detail" => String | nil,
+    "severity" => "info" | "warning" | "critical",
+    ?"authorName" => String | nil,
+    ?"resourceId" => String | nil,
+    ?"resourceName" => String | nil,
+    ?"pluginId" => String | nil,
+    ?"accountId" => String | nil,
+    ?"link" => {
+        "kind" => "resource"
+          | "changes"
+          | "provider-incident"
+          | "costs"
+          | "workflow-run"
+          | "deployment"
+          | "audit"
+          | "freeze"
+          | "expiring"
+          | "probe"
+          | "metric-alert"
+          | "incident",
+        ?"id" => String | nil,
+        ?"parentId" => String | nil,
+        ?"url" => String | nil
+      }
+      | nil
+  }
+
   # Spec schema: `Invitation`.
   type invitation = {
     "id" => String,
@@ -3793,6 +4059,8 @@ module Infrawrench
     | "freezes:read"
     | "freezes:write"
     | "freezes:override"
+    | "incidents:read"
+    | "incidents:write"
     | "tag-policy:override"
     | "config:read"
     | "config:write"
@@ -5647,12 +5915,14 @@ module Infrawrench
       | "changes"
       | "expiring"
       | "posture"
+      | "access-review"
       | "dns"
       | "environment-diff"
       | "ssh-fanout"
       | "metric-alerts"
       | "probes"
       | "quotas"
+      | "incidents"
       | "workflows"
       | "deployments"
       | "settings"
@@ -5892,6 +6162,19 @@ module Infrawrench
     def withdraw: (request_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> ok
   end
 
+  class AccessReviewDismissalsNamespace
+    def initialize: (Transport) -> void
+    def create: (?org_id: String?, ?body: access_review_dismissal_create?, ?request_options: Hash[Symbol, untyped]?) -> access_review_dismissal
+    def delete: (resource_id: String, rule_id: "access-review:stale-principal" | "access-review:admin-principal" | "access-review:key-past-rotation" | "access-review:no-recorded-owner" | "access-review:no-mfa", ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> nil
+  end
+
+  class AccessReviewNamespace
+    attr_reader dismissals: AccessReviewDismissalsNamespace
+    def initialize: (Transport) -> void
+    def export: (?org_id: String?, ?format: "csv" | "json"?, ?stale_days: Integer?, ?request_options: Hash[Symbol, untyped]?) -> access_review_response
+    def get: (?org_id: String?, ?stale_days: Integer?, ?request_options: Hash[Symbol, untyped]?) -> access_review_response
+  end
+
   class AccountsCredentialsNamespace
     def initialize: (Transport) -> void
     def get: (id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> Hash[String, String]
@@ -6382,6 +6665,30 @@ module Infrawrench
     def get: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> expiry_list_response
   end
 
+  class IncidentsGetNamespace
+    def initialize: (Transport) -> void
+    def get: (?org_id: String?, ?status: String?, ?request_options: Hash[Symbol, untyped]?) -> incident_list
+    def get_org_org_id_incidents_incident_id: (incident_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> incident_detail
+  end
+
+  class IncidentsNotesNamespace
+    def initialize: (Transport) -> void
+    def create: (incident_id: String, ?org_id: String?, ?body: incident_note_create?, ?request_options: Hash[Symbol, untyped]?) -> incident_note
+    def delete: (incident_id: String, note_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> nil
+  end
+
+  class IncidentsNamespace
+    attr_reader get: IncidentsGetNamespace
+    attr_reader notes: IncidentsNotesNamespace
+    def initialize: (Transport) -> void
+    def create: (?org_id: String?, ?body: incident_declare?, ?request_options: Hash[Symbol, untyped]?) -> incident
+    def delete: (incident_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> nil
+    def postmortem: (incident_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> incident_postmortem
+    def retry_artifacts: (incident_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> incident
+    def timeline: (incident_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> incident_timeline
+    def update: (incident_id: String, ?org_id: String?, ?body: incident_patch?, ?request_options: Hash[Symbol, untyped]?) -> incident
+  end
+
   class InvitationsByTokenNamespace
     def initialize: (Transport) -> void
     def get: (token: String, ?request_options: Hash[Symbol, untyped]?) -> invitation_detail
@@ -6879,6 +7186,7 @@ module Infrawrench
   class APIV1Client
     attr_reader transport: Transport
     attr_reader access_requests: AccessRequestsNamespace
+    attr_reader access_review: AccessReviewNamespace
     attr_reader accounts: AccountsNamespace
     attr_reader agents: AgentsNamespace
     attr_reader alert_rules: AlertRulesNamespace
@@ -6919,6 +7227,7 @@ module Infrawrench
     attr_reader docker: DockerNamespace
     attr_reader environment_diff: EnvironmentDiffNamespace
     attr_reader expiring: ExpiringNamespace
+    attr_reader incidents: IncidentsNamespace
     attr_reader invitations: InvitationsNamespace
     attr_reader invoices: InvoicesNamespace
     attr_reader jira: JiraNamespace

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: infrawrench-sdk
 version: !ruby/object:Gem::Version
-  version: 1.14.0
+  version: 1.16.0
 platform: ruby
 authors:
 - Infrawrench LLC
@@ -11,7 +11,7 @@ bindir: bin
 cert_chain: []
 date: 2026-08-12 00:00:00.000000000 Z
 dependencies: []
-description: Generated Ruby client for the Infrawrench API (v1.14.0). Covers the published
+description: Generated Ruby client for the Infrawrench API (v1.16.0). Covers the published
   API surface only — operations marked x-internal in the spec are not generated. No
   runtime dependencies.
 email:
@@ -58,5 +58,5 @@ requirements: []
 rubygems_version: 3.5.22
 signing_key:
 specification_version: 4
-summary: Generated Ruby client for the Infrawrench API (v1.14.0).
+summary: Generated Ruby client for the Infrawrench API (v1.16.0).
 test_files: []