infrawrench-sdk 1.18.0 → 1.20.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 88e054d8ab5e5f760e83695779f5d6fb4fd8630779b87d76c7268df6458a4368
-  data.tar.gz: 05cf568abc46f27c6488f536dba00e43f6b2905df806ac012a2bb1b8db33112c
+  metadata.gz: 2aade9009a4966cfaa9e82b4699079a6fd8d6905851025aae181ff1b7fbcbb81
+  data.tar.gz: 9a5246069b56720d98491a61586fc3e5974a6c9275c773bc5cc03fe155011794
 SHA512:
-  metadata.gz: 3a594eda98b0d94712d89d36a7898bb521d1efd0d68edc137841ee3bf237aa787fa10a15463b01f2a80386ec275671270d33936c00eae59b23803099426a7f95
-  data.tar.gz: 90bf6a53e80839579db54dff18b4f9ea3e2c8e7ee1685ba1041d8346ba33e31e8c112f6b223fea188ffc5703b6d3de40690401bf2687a1b1d983edbabddbd819
+  metadata.gz: 6e70ca3fc61a7f2e1ca9f4a2566bc0c304485d72d0753839c8754688f11cfcd482b260a30374c3b36cdf35d78c48d3b9c731950715ea6809b3d417d846f62456
+  data.tar.gz: b5837bebf73eda20028285801425c5c89a42271701ed783839a316b3119bba973baf32033db5f0bc945c967f0fbf3feca93aebc4a47af941a744a8862e65dabe

data/README.md

@@ -1,6 +1,6 @@
 # infrawrench-sdk
 
-Generated Ruby client for the Infrawrench API (API version `1.18.0`).
+Generated Ruby client for the Infrawrench API (API version `1.20.0`).
 
 **Do not edit this gem by hand** — it is regenerated from `openapi.json` and is
 not checked into the repository. Run
@@ -41,7 +41,7 @@ Every method takes an optional trailing `request_options:` hash (`:headers`,
 Responses are the plain `Hash`/`Array` that `JSON.parse` returns, with String
 keys spelled exactly as the wire spells them. There are no model classes — see
 [`sig/infrawrench/sdk.rbs`](./sig/infrawrench/sdk.rbs) for the shape of every one of the
-615 schemas, as RBS type aliases that steep and TypeProf can read.
+635 schemas, as RBS type aliases that steep and TypeProf can read.
 
 Non-2xx responses raise `Infrawrench::ApiError`, which carries `#status`,
 the parsed `#body`, and the machine-readable `#code` when the API sends one —

data/infrawrench-sdk.gemspec

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.18.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.20.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.18.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.20.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk
@@ -17,8 +17,8 @@ require_relative "lib/infrawrench/version"
 Gem::Specification.new do |spec|
   spec.name = "infrawrench-sdk"
   spec.version = Infrawrench::VERSION
-  spec.summary = "Generated Ruby client for the Infrawrench API (v1.18.0)."
-  spec.description = "Generated Ruby client for the Infrawrench API (v1.18.0). Covers the published API surface only — operations marked x-internal in the spec are not generated. No runtime dependencies."
+  spec.summary = "Generated Ruby client for the Infrawrench API (v1.20.0)."
+  spec.description = "Generated Ruby client for the Infrawrench API (v1.20.0). Covers the published API surface only — operations marked x-internal in the spec are not generated. No runtime dependencies."
   spec.authors = ["Infrawrench LLC", "Astrid Gealer"]
   spec.email = ["astrid@infrawrench.com"]
   spec.homepage = "https://infrawrench.com/docs/team-and-billing/client-sdks"

data/lib/infrawrench/client.rb

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.18.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.20.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.18.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.20.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk
@@ -1535,6 +1535,161 @@ module Infrawrench
     end
   end
 
+  # `client.backups.policies`
+  class BackupsPoliciesNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # Create a backup policy
+    #
+    # A policy must demand at least one of `maxRpoHours` and `minRetentionDays`
+    # — one that demands nothing could never produce a finding and would read as
+    # protection while providing none. An empty `resourceTypeIds` selects every
+    # stateful resource type.
+    #
+    # POST /api/org/{orgId}/backups/policies
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 409: Conflict
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param body [Hash, nil] Request body, shaped as `BackupPolicyCreate`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `BackupPolicy` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def create(org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/backups/policies",
+        path_params: { "orgId" => org_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Delete a backup policy
+    #
+    # Removes the objective. To stop a policy judging without losing it, set
+    # `enabled` to false instead.
+    #
+    # DELETE /api/org/{orgId}/backups/policies/{policyId}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param policy_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [nil] This endpoint returns no content.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def delete(policy_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "DELETE",
+        path: "/api/org/{orgId}/backups/policies/{policyId}",
+        path_params: { "orgId" => org_id, "policyId" => policy_id },
+        accept: :empty,
+        request_options: request_options
+      )
+    end
+
+    # List the organization's backup policies
+    #
+    # The recovery objectives coverage is judged against. A policy selects
+    # resources by type and/or tag and demands a maximum RPO, a minimum
+    # retention, or both.
+    #
+    # GET /api/org/{orgId}/backups/policies
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `BackupPolicyList` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/backups/policies",
+        path_params: { "orgId" => org_id },
+        request_options: request_options
+      )
+    end
+
+    # Update a backup policy
+    #
+    # Omitted fields are left alone; an explicit `null` clears `tagKey`,
+    # `tagValue`, `maxRpoHours` or `minRetentionDays`. The result is validated
+    # after merging, so a patch that would leave the policy demanding nothing is
+    # rejected.
+    #
+    # PATCH /api/org/{orgId}/backups/policies/{policyId}
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param policy_id [String]
+    # @param body [Hash, nil] Request body, shaped as `BackupPolicyUpdate`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `BackupPolicy` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def update(policy_id:, org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "PATCH",
+        path: "/api/org/{orgId}/backups/policies/{policyId}",
+        path_params: { "orgId" => org_id, "policyId" => policy_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.backups`
+  class BackupsNamespace
+    # @return [BackupsPoliciesNamespace] `client.backups.policies`
+    attr_reader :policies
+
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+      @policies = BackupsPoliciesNamespace.new(@transport)
+    end
+
+    # List backup coverage across synced resources
+    #
+    # What protects the organization's stateful resources, what does not, and
+    # which backups protect nothing. Derived from already-synced inventory using
+    # the `backupRole` and `backupPolicy` declarations plugins carry on their
+    # resource types — no provider API calls are made and results reflect the
+    # last sync. Findings are recomputed on every read rather than stored.
+    # Orphaned backups carry a trailing-30-day spend quote when billing data is
+    # available.
+    #
+    # GET /api/org/{orgId}/backups
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `BackupCoverageResponse` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/backups",
+        path_params: { "orgId" => org_id },
+        request_options: request_options
+      )
+    end
+  end
+
   # `client.bastions`
   class BastionsNamespace
     # @api private
@@ -6823,6 +6978,192 @@ module Infrawrench
     end
   end
 
+  # `client.iac.states`
+  class IacStatesNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # Upload a Terraform state document
+    #
+    # Parses a `.tfstate` (format version 4) or `terraform show -json` output
+    # (format_version 1.x) and records the resource instances it contains.
+    # Attributes the state marks sensitive are dropped before anything is
+    # written. The format version is checked, not assumed: an unsupported
+    # version is a 400 rather than a partial read.
+    #
+    # POST /api/org/{orgId}/iac/states
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param body [Hash, nil] Request body, shaped as `IacStateUploadRequest`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Hash` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def create(org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/iac/states",
+        path_params: { "orgId" => org_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Delete an uploaded state document
+    #
+    # DELETE /api/org/{orgId}/iac/states/{stateId}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param state_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [nil] This endpoint returns no content.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def delete(state_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "DELETE",
+        path: "/api/org/{orgId}/iac/states/{stateId}",
+        path_params: { "orgId" => org_id, "stateId" => state_id },
+        accept: :empty,
+        request_options: request_options
+      )
+    end
+
+    # List uploaded Terraform state documents
+    #
+    # Every state document the organization has uploaded, newest first. The
+    # documents themselves are never stored — only the parsed, redacted
+    # projection.
+    #
+    # GET /api/org/{orgId}/iac/states
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `IacStateListResponse` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/iac/states",
+        path_params: { "orgId" => org_id },
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.iac`
+  class IacNamespace
+    # @return [IacStatesNamespace] `client.iac.states`
+    attr_reader :states
+
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+      @states = IacStatesNamespace.new(@transport)
+    end
+
+    # Generate Terraform import blocks for unmanaged resources
+    #
+    # Terraform 1.5+ `import` blocks plus the matching resource stanzas,
+    # generated by the same plugin export mappers and HCL serializer that back
+    # "Export to Terraform…". Resources no plugin can express are returned in
+    # `unsupported` with a reason, never dropped.
+    #
+    # POST /api/org/{orgId}/iac/import-plan
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param body [Hash, nil] Request body, shaped as `IacImportPlanRequest`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `IacImportPlanResponse` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def import_plan(org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/iac/import-plan",
+        path_params: { "orgId" => org_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Classify inventory against a state document
+    #
+    # Every synced resource classified as managed, drifted or unmanaged against
+    # one uploaded state, plus state entries with no inventory match. Unmanaged
+    # resources carry the ownership and first-seen join that answers "who made
+    # this by hand, and when".
+    #
+    # GET /api/org/{orgId}/iac/reconciliation
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param state_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `IacReconciliationResponse` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def reconciliation(state_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/iac/reconciliation",
+        path_params: { "orgId" => org_id },
+        query: { "stateId" => state_id },
+        request_options: request_options
+      )
+    end
+
+    # IaC status for one resource
+    #
+    # The managed/unmanaged badge for a resource detail page, computed against
+    # the newest state document. `status` is null when the organization has
+    # uploaded none — absence of a state is not evidence of ClickOps. A query
+    # parameter rather than a path segment because composite resource ids
+    # contain slashes.
+    #
+    # GET /api/org/{orgId}/iac/resource
+    #
+    # Raises on 400: Bad request
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param resource_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `IacResourceStatusResponse` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def resource(resource_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/iac/resource",
+        path_params: { "orgId" => org_id },
+        query: { "resourceId" => resource_id },
+        request_options: request_options
+      )
+    end
+  end
+
   # `client.incidents.get`
   class IncidentsGetNamespace
     # @api private
@@ -13998,6 +14339,8 @@ module Infrawrench
     attr_reader :audit_logs
     # @return [AuthNamespace] `client.auth`
     attr_reader :auth
+    # @return [BackupsNamespace] `client.backups`
+    attr_reader :backups
     # @return [BastionsNamespace] `client.bastions`
     attr_reader :bastions
     # @return [BillingNamespace] `client.billing`
@@ -14062,6 +14405,8 @@ module Infrawrench
     attr_reader :environment_diff
     # @return [ExpiringNamespace] `client.expiring`
     attr_reader :expiring
+    # @return [IacNamespace] `client.iac`
+    attr_reader :iac
     # @return [IncidentsNamespace] `client.incidents`
     attr_reader :incidents
     # @return [InvitationsNamespace] `client.invitations`
@@ -14162,6 +14507,7 @@ module Infrawrench
       @associations = AssociationsNamespace.new(@transport)
       @audit_logs = AuditLogsNamespace.new(@transport)
       @auth = AuthNamespace.new(@transport)
+      @backups = BackupsNamespace.new(@transport)
       @bastions = BastionsNamespace.new(@transport)
       @billing = BillingNamespace.new(@transport)
       @billing_rules = BillingRulesNamespace.new(@transport)
@@ -14194,6 +14540,7 @@ module Infrawrench
       @docker = DockerNamespace.new(@transport)
       @environment_diff = EnvironmentDiffNamespace.new(@transport)
       @expiring = ExpiringNamespace.new(@transport)
+      @iac = IacNamespace.new(@transport)
       @incidents = IncidentsNamespace.new(@transport)
       @invitations = InvitationsNamespace.new(@transport)
       @invoices = InvoicesNamespace.new(@transport)

data/lib/infrawrench/sdk.rb

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.18.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.20.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.18.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.20.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk

data/lib/infrawrench/transport.rb

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.18.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.20.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.18.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.20.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk

data/lib/infrawrench/version.rb

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.18.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.20.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.18.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.20.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk
@@ -15,5 +15,5 @@
 # Kept in its own file so the gemspec can read the version without loading the
 # client — a gemspec that pulls in net/http is a gemspec that can fail to parse.
 module Infrawrench
-  VERSION = "1.18.0"
+  VERSION = "1.20.0"
 end

data/lib/infrawrench-sdk.rb

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.18.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.20.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.18.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.20.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk

data/sig/infrawrench/sdk.rbs

@@ -1,7 +1,7 @@
-# infrawrench-sdk v1.18.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.20.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.18.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.20.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk
@@ -546,6 +546,138 @@ module Infrawrench
     "totpUser" => String | nil
   }
 
+  # Spec schema: `BackupCoverageResponse`.
+  type backup_coverage_response = {
+    "findings" => Array[backup_finding],
+    "counts" => backup_severity_counts,
+    "kindCounts" => backup_kind_counts,
+    "totalCount" => Integer,
+    "resources" => Array[backup_coverage_row],
+    "summary" => backup_coverage_summary,
+    "generatedAt" => String
+  }
+
+  # Spec schema: `BackupCoverageRow`.
+  type backup_coverage_row = {
+    "resourceId" => String,
+    "pluginId" => plugin_id,
+    "pluginName" => String,
+    "resourceTypeId" => String,
+    "resourceTypeName" => String,
+    "accountId" => String,
+    "accountName" => String,
+    "displayName" => String,
+    "externalId" => String | nil,
+    "state" => "protected" | "automated" | "stale" | "unknown" | "unprotected",
+    "backupCount" => Integer,
+    "latestBackupId" => String | nil,
+    "latestBackupName" => String | nil,
+    "latestBackupAt" => String | nil,
+    "rpoHours" => Numeric | nil,
+    "automatedBackups" => bool | nil,
+    "retentionDays" => Numeric | nil,
+    "rpoPolicyId" => String | nil,
+    "rpoPolicyName" => String | nil,
+    "retentionPolicyId" => String | nil,
+    "retentionPolicyName" => String | nil,
+    "maxRpoHours" => Integer | nil,
+    "minRetentionDays" => Integer | nil
+  }
+
+  # Spec schema: `BackupCoverageSummary`.
+  type backup_coverage_summary = {
+    "statefulCount" => Integer,
+    "protectedCount" => Integer,
+    "unprotectedCount" => Integer,
+    "unknownCount" => Integer,
+    "backupCount" => Integer,
+    "orphanedBackupCount" => Integer,
+    "unattributableBackupCount" => Integer,
+    "orphanedGb" => Numeric | nil,
+    "orphanedMonthlyCost" => Numeric | nil,
+    "currency" => String | nil,
+    "worstRpoHours" => Numeric | nil
+  }
+
+  # Spec schema: `BackupFinding`.
+  type backup_finding = {
+    "resourceId" => String,
+    "pluginId" => plugin_id,
+    "pluginName" => String,
+    "resourceTypeId" => String,
+    "resourceTypeName" => String,
+    "accountId" => String,
+    "accountName" => String,
+    "displayName" => String,
+    "externalId" => String | nil,
+    "kind" => "unprotected" | "rpo-breach" | "retention-below-policy" | "orphaned-snapshot",
+    "severity" => "critical" | "high" | "medium" | "low",
+    "title" => String,
+    "detail" => String,
+    "policyId" => String | nil,
+    "policyName" => String | nil,
+    "rpoHours" => Numeric | nil,
+    "maxRpoHours" => Integer | nil,
+    "retentionDays" => Numeric | nil,
+    "minRetentionDays" => Integer | nil,
+    "latestBackupId" => String | nil,
+    "latestBackupName" => String | nil,
+    "latestBackupAt" => String | nil,
+    "sizeGb" => Numeric | nil,
+    "monthlyCost" => Numeric | nil,
+    "currency" => String | nil
+  }
+
+  # Spec schema: `BackupKindCounts`.
+  type backup_kind_counts = {
+    "unprotected" => Integer,
+    "rpo-breach" => Integer,
+    "retention-below-policy" => Integer,
+    "orphaned-snapshot" => Integer
+  }
+
+  # Spec schema: `BackupPolicy`.
+  type backup_policy = {
+    "id" => String,
+    "name" => String,
+    "resourceTypeIds" => Array[String],
+    "tagKey" => String | nil,
+    "tagValue" => String | nil,
+    "maxRpoHours" => Integer | nil,
+    "minRetentionDays" => Integer | nil,
+    "enabled" => bool,
+    "createdAt" => String,
+    "updatedAt" => String
+  }
+
+  # Spec schema: `BackupPolicyCreate`.
+  type backup_policy_create = {
+    "name" => String,
+    ?"resourceTypeIds" => Array[String],
+    ?"tagKey" => String | nil,
+    ?"tagValue" => String | nil,
+    ?"maxRpoHours" => Integer | nil,
+    ?"minRetentionDays" => Integer | nil,
+    ?"enabled" => bool
+  }
+
+  # Spec schema: `BackupPolicyList`.
+  type backup_policy_list = { "policies" => Array[backup_policy] }
+
+  # Spec schema: `BackupPolicyUpdate`.
+  type backup_policy_update = {
+    ?"name" => String,
+    ?"resourceTypeIds" => Array[String],
+    ?"tagKey" => String | nil,
+    ?"tagValue" => String | nil,
+    ?"maxRpoHours" => Integer | nil,
+    ?"minRetentionDays" => Integer | nil,
+    ?"enabled" => bool
+  }
+
+  # Spec schema: `BackupSeverityCounts`.
+  type backup_severity_counts = { "critical" => Integer, "high" => Integer, "medium" => Integer, "low" => Integer }
+
   # Spec schema: `Bastion`.
   type bastion = {
     "id" => String,
@@ -2803,6 +2935,99 @@ module Infrawrench
     "counts" => { "high" => Integer, "medium" => Integer, "low" => Integer, "total" => Integer }
   }
 
+  # Spec schema: `IacFieldChange`.
+  type iac_field_change = { "field" => String, ?"from" => untyped, ?"to" => untyped }
+
+  # Spec schema: `IacImportPlanRequest`.
+  type iac_import_plan_request = { "resourceIds" => Array[String] }
+
+  # Spec schema: `IacImportPlanResponse`.
+  type iac_import_plan_response = {
+    "hcl" => String,
+    "exported" => Array[{ "resourceId" => String, "address" => String, "importId" => String | nil }],
+    "unsupported" => Array[{ "resourceId" => String, "displayName" => String, "reason" => String }]
+  }
+
+  # Spec schema: `IacReconciledResource`.
+  type iac_reconciled_resource = {
+    "resourceId" => String,
+    "pluginId" => plugin_id,
+    "resourceTypeId" => String,
+    "accountId" => String,
+    "displayName" => String,
+    "externalId" => String | nil,
+    "status" => "managed" | "drifted" | "unmanaged",
+    "terraformType" => String | nil,
+    "terraformAddress" => String | nil,
+    "matchedBy" => "import-id" | "external-id" | "identifier" | nil,
+    "drift" => Array[iac_field_change],
+    "unmappableReason" => String | nil,
+    "owner" => Hash[String, untyped] | nil,
+    "firstSeenAt" => String | nil
+  }
+
+  # Spec schema: `IacReconciliationResponse`.
+  type iac_reconciliation_response = {
+    "state" => iac_state,
+    "resources" => Array[iac_reconciled_resource],
+    "stateOnly" => Array[iac_state_only_resource],
+    "summary" => {
+      "inventoryTotal" => Integer,
+      "managed" => Integer,
+      "drifted" => Integer,
+      "unmanaged" => Integer,
+      "stateOnly" => Integer,
+      "undiffable" => Integer,
+      "stateResources" => Integer,
+      "dataSourcesIgnored" => Integer
+    },
+    "underivable" => Array[{ "pluginId" => plugin_id, "resourceTypeId" => String, "reason" => String }]
+  }
+
+  # Spec schema: `IacResourceStatusResponse`.
+  type iac_resource_status_response = {
+    "status" => "managed" | "drifted" | "unmanaged" | nil,
+    "stateId" => String | nil,
+    "stateLabel" => String | nil,
+    "terraformAddress" => String | nil,
+    "driftFieldCount" => Integer
+  }
+
+  # Spec schema: `IacState`.
+  type iac_state = {
+    "id" => String,
+    "label" => String,
+    "accountId" => String | nil,
+    "accountName" => String | nil,
+    "format" => "tfstate" | "show-json",
+    "formatVersion" => String,
+    "terraformVersion" => String | nil,
+    "serial" => Integer | nil,
+    "lineage" => String | nil,
+    "resourceCount" => Integer,
+    "dataSourceCount" => Integer,
+    "redactedAttributeCount" => Integer,
+    "parseWarnings" => Array[String],
+    "uploadedByUserId" => String | nil,
+    "uploadedByName" => String | nil,
+    "createdAt" => String
+  }
+
+  # Spec schema: `IacStateListResponse`.
+  type iac_state_list_response = { "states" => Array[iac_state] }
+
+  # Spec schema: `IacStateOnlyResource`.
+  type iac_state_only_resource = {
+    "address" => String,
+    "terraformType" => String,
+    "identifiers" => Array[String],
+    "candidates" => Array[{ "pluginId" => plugin_id, "resourceTypeId" => String }],
+    "reason" => "no-inventory-match" | "unknown-terraform-type"
+  }
+
+  # Spec schema: `IacStateUploadRequest`.
+  type iac_state_upload_request = { "label" => String, ?"accountId" => String | nil, "document" => String }
+
   # Spec schema: `ImportSshKeyRequest`.
   type import_ssh_key_request = { "name" => String, "publicKey" => String }
 
@@ -4175,6 +4400,8 @@ module Infrawrench
     | "tag-policy:override"
     | "config:read"
     | "config:write"
+    | "iac:read"
+    | "iac:write"
     | "audit:read"
     | "access:read"
     | "access:request"
@@ -6080,7 +6307,9 @@ module Infrawrench
       | "expiring"
       | "posture"
       | "access-review"
+      | "backups"
       | "dns"
+      | "iac"
       | "environment-diff"
       | "ssh-fanout"
       | "metric-alerts"
@@ -6445,6 +6674,20 @@ module Infrawrench
     def orgs: (?request_options: Hash[Symbol, untyped]?) -> Array[org_membership]
   end
 
+  class BackupsPoliciesNamespace
+    def initialize: (Transport) -> void
+    def create: (?org_id: String?, ?body: backup_policy_create?, ?request_options: Hash[Symbol, untyped]?) -> backup_policy
+    def delete: (policy_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> nil
+    def get: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> backup_policy_list
+    def update: (policy_id: String, ?org_id: String?, ?body: backup_policy_update?, ?request_options: Hash[Symbol, untyped]?) -> backup_policy
+  end
+
+  class BackupsNamespace
+    attr_reader policies: BackupsPoliciesNamespace
+    def initialize: (Transport) -> void
+    def get: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> backup_coverage_response
+  end
+
   class BastionsNamespace
     def initialize: (Transport) -> void
     def create: (body: create_bastion_request, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> create_bastion_response
@@ -6839,6 +7082,21 @@ module Infrawrench
     def get: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> expiry_list_response
   end
 
+  class IacStatesNamespace
+    def initialize: (Transport) -> void
+    def create: (?org_id: String?, ?body: iac_state_upload_request?, ?request_options: Hash[Symbol, untyped]?) -> { "state" => iac_state }
+    def delete: (state_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> nil
+    def get: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> iac_state_list_response
+  end
+
+  class IacNamespace
+    attr_reader states: IacStatesNamespace
+    def initialize: (Transport) -> void
+    def import_plan: (?org_id: String?, ?body: iac_import_plan_request?, ?request_options: Hash[Symbol, untyped]?) -> iac_import_plan_response
+    def reconciliation: (state_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> iac_reconciliation_response
+    def resource: (resource_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> iac_resource_status_response
+  end
+
   class IncidentsGetNamespace
     def initialize: (Transport) -> void
     def get: (?org_id: String?, ?status: String?, ?request_options: Hash[Symbol, untyped]?) -> incident_list
@@ -7369,6 +7627,7 @@ module Infrawrench
     attr_reader associations: AssociationsNamespace
     attr_reader audit_logs: AuditLogsNamespace
     attr_reader auth: AuthNamespace
+    attr_reader backups: BackupsNamespace
     attr_reader bastions: BastionsNamespace
     attr_reader billing: BillingNamespace
     attr_reader billing_rules: BillingRulesNamespace
@@ -7401,6 +7660,7 @@ module Infrawrench
     attr_reader docker: DockerNamespace
     attr_reader environment_diff: EnvironmentDiffNamespace
     attr_reader expiring: ExpiringNamespace
+    attr_reader iac: IacNamespace
     attr_reader incidents: IncidentsNamespace
     attr_reader invitations: InvitationsNamespace
     attr_reader invoices: InvoicesNamespace

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: infrawrench-sdk
 version: !ruby/object:Gem::Version
-  version: 1.18.0
+  version: 1.20.0
 platform: ruby
 authors:
 - Infrawrench LLC
@@ -11,7 +11,7 @@ bindir: bin
 cert_chain: []
 date: 2026-08-12 00:00:00.000000000 Z
 dependencies: []
-description: Generated Ruby client for the Infrawrench API (v1.18.0). Covers the published
+description: Generated Ruby client for the Infrawrench API (v1.20.0). Covers the published
   API surface only — operations marked x-internal in the spec are not generated. No
   runtime dependencies.
 email:
@@ -58,5 +58,5 @@ requirements: []
 rubygems_version: 3.5.22
 signing_key:
 specification_version: 4
-summary: Generated Ruby client for the Infrawrench API (v1.18.0).
+summary: Generated Ruby client for the Infrawrench API (v1.20.0).
 test_files: []