infrawrench-sdk 1.7.0 → 1.9.0

data/lib/infrawrench/client.rb

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.7.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.9.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.7.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.9.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk
@@ -1287,6 +1287,7 @@ module Infrawrench
     # @param action [String, nil]
     # @param entity_type [String, nil]
     # @param user_id [String, nil]
+    # @param api_key_id [String, nil]
     # @param from [String, nil]
     # @param to [String, nil]
     # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
@@ -1299,6 +1300,7 @@ module Infrawrench
       action: nil,
       entity_type: nil,
       user_id: nil,
+      api_key_id: nil,
       from: nil,
       to: nil,
       request_options: nil
@@ -1313,6 +1315,7 @@ module Infrawrench
           "action" => action,
           "entityType" => entity_type,
           "userId" => user_id,
+          "apiKeyId" => api_key_id,
           "from" => from,
           "to" => to
         },
@@ -1568,6 +1571,159 @@ module Infrawrench
     end
   end
 
+  # `client.billing_rules`
+  class BillingRulesNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # Create a billing rule
+    #
+    # Requires `org:settings:write` rather than `costs:write`: a billing rule
+    # changes every figure the organisation reports about itself, which is a
+    # governance act on the scale of stating an exchange rate, not the scale of
+    # saving a report.
+    #
+    # _Requires permission: `org:settings:write`._
+    #
+    # POST /api/org/{orgId}/billing-rules
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 409: Conflict
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param body [Hash] Request body, shaped as `BillingRuleInput`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `BillingRule` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def create(body:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/billing-rules",
+        path_params: { "orgId" => org_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Delete a billing rule
+    #
+    # Nothing cascades and nothing is restated: no adjustment was ever written
+    # into stored cost data, so the next read simply computes without this rule.
+    #
+    # _Requires permission: `org:settings:write`._
+    #
+    # DELETE /api/org/{orgId}/billing-rules/{id}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Ok` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def delete(id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "DELETE",
+        path: "/api/org/{orgId}/billing-rules/{id}",
+        path_params: { "orgId" => org_id, "id" => id },
+        request_options: request_options
+      )
+    end
+
+    # Get a billing rule
+    #
+    # _Requires permission: `costs:read`._
+    #
+    # GET /api/org/{orgId}/billing-rules/{id}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `BillingRule` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/billing-rules/{id}",
+        path_params: { "orgId" => org_id, "id" => id },
+        request_options: request_options
+      )
+    end
+
+    # List billing rules in evaluation order
+    #
+    # Billing rules are the organisation's own adjustments to collected spend —
+    # a markup that recovers shared overhead, a discount negotiated outside the
+    # provider's pricing, a shared cluster reallocated onto the teams that use
+    # it.
+    #
+    # **They are applied at query time and never written into stored cost
+    # data.** Collected spend stays exactly what the provider reported, so it
+    # can still be reconciled against an invoice, and editing or deleting a rule
+    # restates nothing.
+    #
+    # _Requires permission: `costs:read`._
+    #
+    # GET /api/org/{orgId}/billing-rules
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Array<Hash>] Parsed JSON, shaped as `Array<BillingRule>` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def list(org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/billing-rules",
+        path_params: { "orgId" => org_id },
+        request_options: request_options
+      )
+    end
+
+    # Update a billing rule
+    #
+    # A full replace, `enabled` included — switching a markup off is an edit of
+    # the rule, so there is one audited action for “this rule changed” rather
+    # than two.
+    #
+    # _Requires permission: `org:settings:write`._
+    #
+    # PUT /api/org/{orgId}/billing-rules/{id}
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # Raises on 409: Conflict
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String]
+    # @param body [Hash] Request body, shaped as `BillingRuleInput`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `BillingRule` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def update(id:, body:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "PUT",
+        path: "/api/org/{orgId}/billing-rules/{id}",
+        path_params: { "orgId" => org_id, "id" => id },
+        body: body,
+        request_options: request_options
+      )
+    end
+  end
+
   # `client.budgets`
   class BudgetsNamespace
     # @api private
@@ -1707,6 +1863,286 @@ module Infrawrench
     end
   end
 
+  # `client.business_metrics.get`
+  class BusinessMetricsGetNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # List business metrics
+    #
+    # The organization's declared denominators, by key, each with the range of
+    # days it has values for.
+    #
+    # _Requires permission: `costs:read`._
+    #
+    # GET /api/org/{orgId}/business-metrics
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Hash` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/business-metrics",
+        path_params: { "orgId" => org_id },
+        request_options: request_options
+      )
+    end
+
+    # Get a business metric
+    #
+    # `id` accepts either the metric's id or its key.
+    #
+    # _Requires permission: `costs:read`._
+    #
+    # GET /api/org/{orgId}/business-metrics/{id}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String] Metric id or key
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `BusinessMetric` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get_org_org_id_business_metrics_id(id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/business-metrics/{id}",
+        path_params: { "orgId" => org_id, "id" => id },
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.business_metrics.values`
+  class BusinessMetricsValuesNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # Report metric values
+    #
+    # Write a batch of days. **Re-reporting a day restates it rather than
+    # accumulating**, which is what makes a nightly job safe to retry. Nothing
+    # lands unless the whole batch validates, so a bad row is a 400 rather than
+    # half a month restated. The same guarantees back
+    # `infra.businessMetrics.write(...)` in a workflow — both go through one
+    # validator.
+    #
+    # _Requires permission: `costs:write`._
+    #
+    # POST /api/org/{orgId}/business-metrics/{id}/values
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String] Metric id or key
+    # @param body [Hash] Request body, shaped as `BusinessMetricValuesInput`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Hash` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def create(id:, body:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/business-metrics/{id}/values",
+        path_params: { "orgId" => org_id, "id" => id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # List a metric's reported values
+    #
+    # Newest day first.
+    #
+    # _Requires permission: `costs:read`._
+    #
+    # GET /api/org/{orgId}/business-metrics/{id}/values
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String] Metric id or key
+    # @param limit [Integer, nil] Default 90.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Hash` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(id:, org_id: nil, limit: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/business-metrics/{id}/values",
+        path_params: { "orgId" => org_id, "id" => id },
+        query: { "limit" => limit },
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.business_metrics`
+  class BusinessMetricsNamespace
+    # @return [BusinessMetricsGetNamespace] `client.business_metrics.get`
+    attr_reader :get
+    # @return [BusinessMetricsValuesNamespace] `client.business_metrics.values`
+    attr_reader :values
+
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+      @get = BusinessMetricsGetNamespace.new(@transport)
+      @values = BusinessMetricsValuesNamespace.new(@transport)
+    end
+
+    # Create a business metric
+    #
+    # Keys must be unique per organization among live metrics — they are how
+    # workflows and the CLI address the metric. A key collision is a 409.
+    #
+    # _Requires permission: `costs:write`._
+    #
+    # POST /api/org/{orgId}/business-metrics
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 409: A live metric already uses this key.
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param body [Hash] Request body, shaped as `BusinessMetricInput`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `BusinessMetric` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def create(body:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/business-metrics",
+        path_params: { "orgId" => org_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Delete a business metric
+    #
+    # Soft delete. Not refused when a dashboard card references the metric,
+    # unlike a saved cost filter: a unit-cost card whose metric is gone fails
+    # its query and says so, whereas a card that quietly reverted to plain spend
+    # would be a chart claiming to be something it is not.
+    #
+    # _Requires permission: `costs:write`._
+    #
+    # DELETE /api/org/{orgId}/business-metrics/{id}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String] Metric id or key
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Ok` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def delete(id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "DELETE",
+        path: "/api/org/{orgId}/business-metrics/{id}",
+        path_params: { "orgId" => org_id, "id" => id },
+        request_options: request_options
+      )
+    end
+
+    # Query unit costs or margin
+    #
+    # Divide spend by the metric, bucketed as asked. Three properties of the
+    # answer are worth knowing before reading it:
+    #
+    # - **The ratio is computed at the requested bucket**, from a summed
+    # numerator and a summed denominator — never a mean of daily ratios, which
+    # weights a quiet day as heavily as a peak one. The same holds for
+    # `overallValue`.
+    # - **A missing or non-positive denominator is a gap** (`value: null` with a
+    # `gap` reason), never 0 and never infinite.
+    # - **Currencies are never merged.** Spend in a currency with no stated rate
+    # keeps its own series rather than being dropped or added to another.
+    #
+    # There is no `groupBy`: a per-group ratio would need a per-group
+    # denominator, and dividing each service's spend by the whole customer count
+    # produces numbers that do not sum to the real one.
+    #
+    # _Requires permission: `costs:read`._
+    #
+    # POST /api/org/{orgId}/business-metrics/{id}/unit-costs
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String] Metric id or key
+    # @param body [Hash] Request body, shaped as `UnitCostQueryRequest`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `UnitCostQueryResponse` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def unit_costs(id:, body:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/business-metrics/{id}/unit-costs",
+        path_params: { "orgId" => org_id, "id" => id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Update a business metric
+    #
+    # Replaces the whole definition. Changing `key` never orphans history —
+    # values are keyed on the metric's id — but it does break a workflow still
+    # writing to the old key, which is why the key is separate from the display
+    # name in the first place.
+    #
+    # _Requires permission: `costs:write`._
+    #
+    # PUT /api/org/{orgId}/business-metrics/{id}
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # Raises on 409: A live metric already uses this key.
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String] Metric id or key
+    # @param body [Hash] Request body, shaped as `BusinessMetricInput`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `BusinessMetric` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def update(id:, body:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "PUT",
+        path: "/api/org/{orgId}/business-metrics/{id}",
+        path_params: { "orgId" => org_id, "id" => id },
+        body: body,
+        request_options: request_options
+      )
+    end
+  end
+
   # `client.change_freezes`
   class ChangeFreezesNamespace
     # @api private
@@ -2291,89 +2727,205 @@ module Infrawrench
     #
     # _Requires permission: `costs:read`._
     #
-    # GET /api/org/{orgId}/cost-alerts
+    # GET /api/org/{orgId}/cost-alerts
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Hash` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/cost-alerts",
+        path_params: { "orgId" => org_id },
+        request_options: request_options
+      )
+    end
+
+    # Get a cost alert
+    #
+    # _Requires permission: `costs:read`._
+    #
+    # GET /api/org/{orgId}/cost-alerts/{id}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `CostAlert` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get_org_org_id_cost_alerts_id(id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/cost-alerts/{id}",
+        path_params: { "orgId" => org_id, "id" => id },
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.cost_alerts`
+  class CostAlertsNamespace
+    # @return [CostAlertsGetNamespace] `client.cost_alerts.get`
+    attr_reader :get
+
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+      @get = CostAlertsGetNamespace.new(@transport)
+    end
+
+    # Create a change-based cost alert
+    #
+    # _Requires permission: `costs:write`._
+    #
+    # POST /api/org/{orgId}/cost-alerts
+    #
+    # Raises on 400: Bad request
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param body [Hash] Request body, shaped as `CostAlertInput`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `CostAlert` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def create(body:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/cost-alerts",
+        path_params: { "orgId" => org_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Delete a cost alert
+    #
+    # Soft delete. Fired events disappear from the org-wide event feed with it.
+    #
+    # _Requires permission: `costs:write`._
+    #
+    # DELETE /api/org/{orgId}/cost-alerts/{id}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Ok` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def delete(id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "DELETE",
+        path: "/api/org/{orgId}/cost-alerts/{id}",
+        path_params: { "orgId" => org_id, "id" => id },
+        request_options: request_options
+      )
+    end
+
+    # List recently fired cost-alert events
+    #
+    # Newest first. Optionally scoped to one alert with ?alertId=; an unknown
+    # alertId is a 404, distinct from an alert that simply has no events yet.
+    #
+    # _Requires permission: `costs:read`._
+    #
+    # GET /api/org/{orgId}/cost-alerts/events
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
     #
     # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
     #   constructed with.
+    # @param alert_id [String, nil]
+    # @param limit [Integer, nil]
     # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
     # @return [Hash] Parsed JSON, shaped as `Hash` — see `sig/infrawrench/sdk.rbs`.
     # @raise [Infrawrench::ApiError] On any non-2xx response.
-    def get(org_id: nil, request_options: nil)
+    def events(org_id: nil, alert_id: nil, limit: nil, request_options: nil)
       @transport.request(
         http_method: "GET",
-        path: "/api/org/{orgId}/cost-alerts",
+        path: "/api/org/{orgId}/cost-alerts/events",
         path_params: { "orgId" => org_id },
+        query: { "alertId" => alert_id, "limit" => limit },
         request_options: request_options
       )
     end
 
-    # Get a cost alert
+    # Update a cost alert
     #
-    # _Requires permission: `costs:read`._
+    # _Requires permission: `costs:write`._
     #
-    # GET /api/org/{orgId}/cost-alerts/{id}
+    # PUT /api/org/{orgId}/cost-alerts/{id}
+    #
+    # Raises on 400: Bad request
     #
     # Raises on 404: Not found
     #
     # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
     #   constructed with.
     # @param id [String]
+    # @param body [Hash] Request body, shaped as `CostAlertInput`.
     # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
     # @return [Hash] Parsed JSON, shaped as `CostAlert` — see `sig/infrawrench/sdk.rbs`.
     # @raise [Infrawrench::ApiError] On any non-2xx response.
-    def get_org_org_id_cost_alerts_id(id:, org_id: nil, request_options: nil)
+    def update(id:, body:, org_id: nil, request_options: nil)
       @transport.request(
-        http_method: "GET",
+        http_method: "PUT",
         path: "/api/org/{orgId}/cost-alerts/{id}",
         path_params: { "orgId" => org_id, "id" => id },
+        body: body,
         request_options: request_options
       )
     end
   end
 
-  # `client.cost_alerts`
-  class CostAlertsNamespace
-    # @return [CostAlertsGetNamespace] `client.cost_alerts.get`
-    attr_reader :get
-
+  # `client.cost_annotations`
+  class CostAnnotationsNamespace
     # @api private
     # @param transport [Transport]
     def initialize(transport)
       @transport = transport
-      @get = CostAlertsGetNamespace.new(@transport)
     end
 
-    # Create a change-based cost alert
+    # Create a cost annotation
     #
     # _Requires permission: `costs:write`._
     #
-    # POST /api/org/{orgId}/cost-alerts
+    # POST /api/org/{orgId}/cost-annotations
     #
     # Raises on 400: Bad request
     #
     # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
     #   constructed with.
-    # @param body [Hash] Request body, shaped as `CostAlertInput`.
+    # @param body [Hash] Request body, shaped as `CostAnnotationInput`.
     # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
-    # @return [Hash] Parsed JSON, shaped as `CostAlert` — see `sig/infrawrench/sdk.rbs`.
+    # @return [Hash] Parsed JSON, shaped as `CostAnnotation` — see `sig/infrawrench/sdk.rbs`.
     # @raise [Infrawrench::ApiError] On any non-2xx response.
     def create(body:, org_id: nil, request_options: nil)
       @transport.request(
         http_method: "POST",
-        path: "/api/org/{orgId}/cost-alerts",
+        path: "/api/org/{orgId}/cost-annotations",
         path_params: { "orgId" => org_id },
         body: body,
         request_options: request_options
       )
     end
 
-    # Delete a cost alert
+    # Delete a cost annotation
     #
-    # Soft delete. Fired events disappear from the org-wide event feed with it.
+    # A hard delete. A withdrawn explanation should stop being drawn, and
+    # nothing references a note by id.
     #
     # _Requires permission: `costs:write`._
     #
-    # DELETE /api/org/{orgId}/cost-alerts/{id}
+    # DELETE /api/org/{orgId}/cost-annotations/{id}
     #
     # Raises on 404: Not found
     #
@@ -2386,47 +2938,47 @@ module Infrawrench
     def delete(id:, org_id: nil, request_options: nil)
       @transport.request(
         http_method: "DELETE",
-        path: "/api/org/{orgId}/cost-alerts/{id}",
+        path: "/api/org/{orgId}/cost-annotations/{id}",
         path_params: { "orgId" => org_id, "id" => id },
         request_options: request_options
       )
     end
 
-    # List recently fired cost-alert events
+    # List cost annotations
     #
-    # Newest first. Optionally scoped to one alert with ?alertId=; an unknown
-    # alertId is a 404, distinct from an alert that simply has no events yet.
+    # Dated notes drawn over cost charts. With `reportId`, the set a chart for
+    # that report draws: the org-wide notes plus that report's own. Without it,
+    # every annotation in the org. Annotations are an overlay — they never
+    # appear in a series, a total, or an axis.
     #
     # _Requires permission: `costs:read`._
     #
-    # GET /api/org/{orgId}/cost-alerts/events
-    #
-    # Raises on 400: Bad request
-    #
-    # Raises on 404: Not found
+    # GET /api/org/{orgId}/cost-annotations
     #
     # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
     #   constructed with.
-    # @param alert_id [String, nil]
-    # @param limit [Integer, nil]
+    # @param report_id [String, nil] Scope to the notes a chart for this report should draw.
     # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
     # @return [Hash] Parsed JSON, shaped as `Hash` — see `sig/infrawrench/sdk.rbs`.
     # @raise [Infrawrench::ApiError] On any non-2xx response.
-    def events(org_id: nil, alert_id: nil, limit: nil, request_options: nil)
+    def get(org_id: nil, report_id: nil, request_options: nil)
       @transport.request(
         http_method: "GET",
-        path: "/api/org/{orgId}/cost-alerts/events",
+        path: "/api/org/{orgId}/cost-annotations",
         path_params: { "orgId" => org_id },
-        query: { "alertId" => alert_id, "limit" => limit },
+        query: { "reportId" => report_id },
         request_options: request_options
       )
     end
 
-    # Update a cost alert
+    # Update a cost annotation
+    #
+    # Replaces the note's dates, text and scope. Moving a note between org-wide
+    # and one report is this same PUT with a different `costReportId`.
     #
     # _Requires permission: `costs:write`._
     #
-    # PUT /api/org/{orgId}/cost-alerts/{id}
+    # PUT /api/org/{orgId}/cost-annotations/{id}
     #
     # Raises on 400: Bad request
     #
@@ -2435,14 +2987,14 @@ module Infrawrench
     # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
     #   constructed with.
     # @param id [String]
-    # @param body [Hash] Request body, shaped as `CostAlertInput`.
+    # @param body [Hash] Request body, shaped as `CostAnnotationInput`.
     # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
-    # @return [Hash] Parsed JSON, shaped as `CostAlert` — see `sig/infrawrench/sdk.rbs`.
+    # @return [Hash] Parsed JSON, shaped as `CostAnnotation` — see `sig/infrawrench/sdk.rbs`.
     # @raise [Infrawrench::ApiError] On any non-2xx response.
     def update(id:, body:, org_id: nil, request_options: nil)
       @transport.request(
         http_method: "PUT",
-        path: "/api/org/{orgId}/cost-alerts/{id}",
+        path: "/api/org/{orgId}/cost-annotations/{id}",
         path_params: { "orgId" => org_id, "id" => id },
         body: body,
         request_options: request_options
@@ -2628,6 +3180,12 @@ module Infrawrench
 
     # Delete a cost centre (its allocation rules go with it)
     #
+    # The centre's allocation rules are deleted with it, so the spend they
+    # claimed falls through to the next matching rule or to "Unallocated". Child
+    # centres are not deleted: they are re-parented onto the deleted centre's
+    # own parent (a root's children become roots), so a subtree keeps its shape
+    # and no ancestor's subtree total moves unexpectedly.
+    #
     # _Requires permission: `costs:write`._
     #
     # DELETE /api/org/{orgId}/cost-centres/{id}
@@ -2670,7 +3228,11 @@ module Infrawrench
       )
     end
 
-    # Update a cost centre
+    # Update or move a cost centre
+    #
+    # Renames, redescribes, and/or moves a centre. Moving is `parentId`
+    # changing; omitting the field leaves the centre where it is. 400 when the
+    # move would cycle or breach the depth cap.
     #
     # _Requires permission: `costs:write`._
     #
@@ -3370,6 +3932,203 @@ module Infrawrench
     end
   end
 
+  # `client.cost_scenarios.get`
+  class CostScenariosGetNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # List scenario models
+    #
+    # Named, reusable sets of adjustments an organization overlays on a cost
+    # forecast — the **known future cost a trend fit cannot see**. Pass an id as
+    # `POST /costs/query`'s `scenarioModelId` (alongside `forecast: true`) to
+    # get the adjusted projection back *beside* the unadjusted one, never
+    # instead of it.
+    #
+    # _Requires permission: `costs:read`._
+    #
+    # GET /api/org/{orgId}/cost-scenarios
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Hash` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/cost-scenarios",
+        path_params: { "orgId" => org_id },
+        request_options: request_options
+      )
+    end
+
+    # Get a scenario model
+    #
+    # _Requires permission: `costs:read`._
+    #
+    # GET /api/org/{orgId}/cost-scenarios/{id}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `CostScenarioModel` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get_org_org_id_cost_scenarios_id(id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/cost-scenarios/{id}",
+        path_params: { "orgId" => org_id, "id" => id },
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.cost_scenarios`
+  class CostScenariosNamespace
+    # @return [CostScenariosGetNamespace] `client.cost_scenarios.get`
+    attr_reader :get
+
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+      @get = CostScenariosGetNamespace.new(@transport)
+    end
+
+    # Create a scenario model
+    #
+    # Names must be unique per organization (case-insensitively) — the name is
+    # what a chart prints under its scenario line and what the CLI's `--scenario
+    # <name>` addresses, so two models sharing one would make both meaningless.
+    # A model needs at least one adjustment: an empty model changes nothing,
+    # which is the same as applying no scenario.
+    #
+    # _Requires permission: `costs:write`._
+    #
+    # POST /api/org/{orgId}/cost-scenarios
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 409: A live scenario model already uses this name.
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param body [Hash] Request body, shaped as `CostScenarioModelInput`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `CostScenarioModel` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def create(body:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/cost-scenarios",
+        path_params: { "orgId" => org_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Delete a scenario model
+    #
+    # Soft delete — **refused with a 409 while anything references the model**,
+    # with the referents in the body. For a chart, deleting would silently drop
+    # the assumptions from a projection somebody is reading; for a budget it
+    # would move the forecast thresholds back to the bare trend, changing when
+    # people get paged. Detaching the referents is a deliberate step, never a
+    # side effect of deletion.
+    #
+    # _Requires permission: `costs:write`._
+    #
+    # DELETE /api/org/{orgId}/cost-scenarios/{id}
+    #
+    # Raises on 404: Not found
+    #
+    # Raises on 409: Still referenced — the body lists every referent.
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Ok` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def delete(id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "DELETE",
+        path: "/api/org/{orgId}/cost-scenarios/{id}",
+        path_params: { "orgId" => org_id, "id" => id },
+        request_options: request_options
+      )
+    end
+
+    # List a scenario model's referents
+    #
+    # Every budget, cost report and dashboard cost graph referencing this model
+    # — what an edit will change, and what a delete would be refused over.
+    # Budgets come first: they are the referents that page people.
+    #
+    # _Requires permission: `costs:read`._
+    #
+    # GET /api/org/{orgId}/cost-scenarios/{id}/referents
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Hash` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def referents(id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/cost-scenarios/{id}/referents",
+        path_params: { "orgId" => org_id, "id" => id },
+        request_options: request_options
+      )
+    end
+
+    # Update a scenario model
+    #
+    # Replaces the whole model. This is the high-leverage write: every chart
+    # drawing it, and **every budget whose forecast thresholds are measured
+    # against it**, uses the new numbers on its next evaluation — which for a
+    # budget can change which alerts fire. `GET /{id}/referents` names what a
+    # change will touch.
+    #
+    # _Requires permission: `costs:write`._
+    #
+    # PUT /api/org/{orgId}/cost-scenarios/{id}
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # Raises on 409: A live scenario model already uses this name.
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String]
+    # @param body [Hash] Request body, shaped as `CostScenarioModelInput`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `CostScenarioModel` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def update(id:, body:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "PUT",
+        path: "/api/org/{orgId}/cost-scenarios/{id}",
+        path_params: { "orgId" => org_id, "id" => id },
+        body: body,
+        request_options: request_options
+      )
+    end
+  end
+
   # `client.costs.anomaly_settings`
   class CostsAnomalySettingsNamespace
     # @api private
@@ -3424,13 +4183,78 @@ module Infrawrench
     #   constructed with.
     # @param body [Hash] Request body, shaped as `CostAnomalySettings`.
     # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
-    # @return [Hash] Parsed JSON, shaped as `CostAnomalySettingsView` — see
+    # @return [Hash] Parsed JSON, shaped as `CostAnomalySettingsView` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def update(body:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "PUT",
+        path: "/api/org/{orgId}/costs/anomaly-settings",
+        path_params: { "orgId" => org_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.costs.efficiency_alert_settings`
+  class CostsEfficiencyAlertSettingsNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # Get the organization's efficiency alert tuning
+    #
+    # Thresholds for the commitment-expiry, idle-commitment and
+    # unit-cost-regression detectors. An organization that has never changed one
+    # reads back the defaults, which are chosen to work with no setup.
+    #
+    # _Requires permission: `costs:read`._
+    #
+    # GET /api/org/{orgId}/costs/efficiency-alert-settings
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `CostEfficiencySettings` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/costs/efficiency-alert-settings",
+        path_params: { "orgId" => org_id },
+        request_options: request_options
+      )
+    end
+
+    # Update the organization's efficiency alert tuning
+    #
+    # Takes effect on the next evaluation pass (which runs after each cost
+    # collection). Already-fired alerts are not re-judged, and horizons that
+    # have already fired for a commitment's current term do not fire again —
+    # widening the horizon list warns about future crossings, not past ones. A
+    # PUT of the whole object, not a patch.
+    #
+    # _Requires permission: `costs:write`._
+    #
+    # PUT /api/org/{orgId}/costs/efficiency-alert-settings
+    #
+    # Raises on 400: Bad request
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param body [Hash] Request body, shaped as `CostEfficiencySettings`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `CostEfficiencySettings` — see
     #   `sig/infrawrench/sdk.rbs`.
     # @raise [Infrawrench::ApiError] On any non-2xx response.
     def update(body:, org_id: nil, request_options: nil)
       @transport.request(
         http_method: "PUT",
-        path: "/api/org/{orgId}/costs/anomaly-settings",
+        path: "/api/org/{orgId}/costs/efficiency-alert-settings",
         path_params: { "orgId" => org_id },
         body: body,
         request_options: request_options
@@ -3442,12 +4266,15 @@ module Infrawrench
   class CostsNamespace
     # @return [CostsAnomalySettingsNamespace] `client.costs.anomaly_settings`
     attr_reader :anomaly_settings
+    # @return [CostsEfficiencyAlertSettingsNamespace] `client.costs.efficiency_alert_settings`
+    attr_reader :efficiency_alert_settings
 
     # @api private
     # @param transport [Transport]
     def initialize(transport)
       @transport = transport
       @anomaly_settings = CostsAnomalySettingsNamespace.new(@transport)
+      @efficiency_alert_settings = CostsEfficiencyAlertSettingsNamespace.new(@transport)
     end
 
     # List recently detected cost anomalies
@@ -3513,6 +4340,39 @@ module Infrawrench
       )
     end
 
+    # Recently fired efficiency alerts
+    #
+    # The three slow-lane cost alerts in one feed, newest first: commitments
+    # about to lapse, commitments that are not being used, and business metrics
+    # whose cost per unit rose. Unlike budgets, anomalies and change alerts —
+    # all of which compare a spend total against another spend total — these
+    # read the commitment calendar and the volume the spend bought, so they see
+    # the two surprises the other three structurally cannot.
+    #
+    # _Requires permission: `costs:read`._
+    #
+    # GET /api/org/{orgId}/costs/efficiency-alerts
+    #
+    # Raises on 400: Bad request
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param kind [String, nil] Restrict to one detector. Omitted returns all three, interleaved
+    #   by time.
+    # @param limit [Integer, nil] Rows to return, newest first. Defaults to 50.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Hash` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def efficiency_alerts(org_id: nil, kind: nil, limit: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/costs/efficiency-alerts",
+        path_params: { "orgId" => org_id },
+        query: { "kind" => kind, "limit" => limit },
+        request_options: request_options
+      )
+    end
+
     # Query aggregated cost series
     #
     # Aggregates collected provider spend into per-bucket, per-group series for
@@ -3596,6 +4456,14 @@ module Infrawrench
     # centre and currency. Spend no rule claims comes back as the "Unallocated"
     # bucket; every defined centre appears even with zero spend.
     #
+    # Cost centres nest, so the list is a depth-first tree. Each entry carries
+    # `totals` (spend allocated directly to it) and `subtreeTotals` (its own
+    # plus every descendant's) — "Engineering, of which Platform" needs both.
+    # Rules still evaluate first-match-wins by ascending priority against a flat
+    # list, so a row is allocated exactly once even when a rule targets a parent
+    # and another targets its child; at equal priority the more deeply nested
+    # centre wins.
+    #
     # _Requires permission: `costs:read`._
     #
     # GET /api/org/{orgId}/costs/showback
@@ -3610,15 +4478,21 @@ module Infrawrench
     #   charged on the day it charged it; `amortized` spreads a commitment's up-front fee across
     #   the term it buys. Providers that report no amortized amount fall back to their cash
     #   amount.
+    # @param adjusted [String, nil] Apply the organization's billing rules (see /billing-rules):
+    #   markups multiply, and a reallocation moves a centre's spend onto another centre. Off by
+    #   default — a chargeback report that silently showed marked-up numbers is one the receiving
+    #   team could not reconcile. On, the response carries `adjustment` with the collected totals
+    #   beside the adjusted ones. Fixed-amount rules are booked onto the cost centre they name (or
+    #   "Unallocated" when they name none), pro-rated across the period.
     # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
     # @return [Hash] Parsed JSON, shaped as `ShowbackReport` — see `sig/infrawrench/sdk.rbs`.
     # @raise [Infrawrench::ApiError] On any non-2xx response.
-    def showback(org_id: nil, from: nil, to: nil, basis: nil, request_options: nil)
+    def showback(org_id: nil, from: nil, to: nil, basis: nil, adjusted: nil, request_options: nil)
       @transport.request(
         http_method: "GET",
         path: "/api/org/{orgId}/costs/showback",
         path_params: { "orgId" => org_id },
-        query: { "from" => from, "to" => to, "basis" => basis },
+        query: { "from" => from, "to" => to, "basis" => basis, "adjusted" => adjusted },
         request_options: request_options
       )
     end
@@ -5327,160 +6201,475 @@ module Infrawrench
       @transport = transport
     end
 
-    # Get the organization's expiry alert settings
+    # Get the organization's expiry alert settings
+    #
+    # The lead time feeds both the feed's `upcoming` bucket and the poller's
+    # daily alert scan. An organization that never saved reads the shipped
+    # defaults (enabled, 60 days).
+    #
+    # _Requires permission: `org:settings:write`._
+    #
+    # GET /api/org/{orgId}/expiring/settings
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `ExpiryAlertSettings` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/expiring/settings",
+        path_params: { "orgId" => org_id },
+        request_options: request_options
+      )
+    end
+
+    # Update the expiry alert settings
+    #
+    # Every field is optional so a single toggle can be saved on its own.
+    # `leadDays` must be a whole number from 1 to 365. Saving never resets the
+    # alert cooldown.
+    #
+    # _Requires permission: `org:settings:write`._
+    #
+    # PUT /api/org/{orgId}/expiring/settings
+    #
+    # Raises on 400: Bad request
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param body [Hash, nil] Request body, shaped as `ExpiryAlertSettingsUpdate`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `ExpiryAlertSettings` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def update(org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "PUT",
+        path: "/api/org/{orgId}/expiring/settings",
+        path_params: { "orgId" => org_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.expiring`
+  class ExpiringNamespace
+    # @return [ExpiringSettingsNamespace] `client.expiring.settings`
+    attr_reader :settings
+
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+      @settings = ExpiringSettingsNamespace.new(@transport)
+    end
+
+    # List approaching deadlines on synced resources
+    #
+    # One cross-provider countdown of everything with a clock on it: TLS
+    # certificate expiries, domain registrations, API token expirations, access
+    # keys past their rotation budget, Kubernetes/SSH credential ages. Plugins
+    # declare which synced fields carry deadlines; the feed is computed over
+    # already-stored state, so no provider API calls are made and results
+    # reflect the last sync. Items are sorted soonest first and bucketed by
+    # severity against the organization's lead time.
+    #
+    # _Requires permission: `resources:read`._
+    #
+    # GET /api/org/{orgId}/expiring
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `ExpiryListResponse` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/expiring",
+        path_params: { "orgId" => org_id },
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.invitations.by_token`
+  class InvitationsByTokenNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # Get invitation details by token
+    #
+    # GET /api/invitations/by-token/{token}
+    #
+    # Raises on 404: Not found
+    #
+    # @param token [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `InvitationDetail` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(token:, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/invitations/by-token/{token}",
+        path_params: { "token" => token },
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.invitations`
+  class InvitationsNamespace
+    # @return [InvitationsByTokenNamespace] `client.invitations.by_token`
+    attr_reader :by_token
+
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+      @by_token = InvitationsByTokenNamespace.new(@transport)
+    end
+
+    # Accept an invitation
+    #
+    # POST /api/invitations/accept
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 403: Forbidden
+    #
+    # @param body [Hash] Request body, shaped as `AcceptInvitationRequest`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `AcceptInvitationResponse` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def accept(body:, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/invitations/accept",
+        body: body,
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.invoices`
+  class InvoicesNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # Approve an invoice — freeze its figures
+    #
+    # Computes the figures one last time and writes them onto the invoice
+    # together with the exchange rates, the day they were read, the billing
+    # rules in force and the names everything in scope had. From here the
+    # invoice is a document, not a query.
+    #
+    # A distinct act from generation, on a distinct permission
+    # (`invoices:issue`), with its own audit entry recording who approved what.
+    #
+    # Refused with 409 when a currency in the invoice has no stated exchange
+    # rate: an approved invoice has to be quotable as one number in the
+    # customer's currency.
+    #
+    # Refused with 409, too, when the draft or its customer changed while the
+    # figures were being computed — a different period, scope, currency, cost
+    # basis or billing-rules setting. Nothing is approved in that case: freezing
+    # figures that describe a different question would be worse than making the
+    # caller look again.
+    #
+    # _Requires permission: `invoices:issue`._
+    #
+    # POST /api/org/{orgId}/invoices/{id}/approve
+    #
+    # Raises on 404: Not found
+    #
+    # Raises on 409: Conflict
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Invoice` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def approve(id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/invoices/{id}/approve",
+        path_params: { "orgId" => org_id, "id" => id },
+        request_options: request_options
+      )
+    end
+
+    # Raise a draft invoice
+    #
+    # Always lands in `draft`. Generating and issuing are two acts on two
+    # permissions: a mistyped period must not be able to reach a customer
+    # without anyone having read the numbers.
+    #
+    # _Requires permission: `invoices:write`._
+    #
+    # POST /api/org/{orgId}/invoices
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # Raises on 409: Conflict
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param body [Hash] Request body, shaped as `InvoiceInput`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Invoice` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def create(body:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/invoices",
+        path_params: { "orgId" => org_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Delete a draft invoice
+    #
+    # Draft only, and refused with 409 otherwise. An issued invoice is voided;
+    # deleting one would erase a document a customer holds a copy of.
+    #
+    # _Requires permission: `invoices:write`._
+    #
+    # DELETE /api/org/{orgId}/invoices/{id}
+    #
+    # Raises on 404: Not found
+    #
+    # Raises on 409: Conflict
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Ok` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def delete(id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "DELETE",
+        path: "/api/org/{orgId}/invoices/{id}",
+        path_params: { "orgId" => org_id, "id" => id },
+        request_options: request_options
+      )
+    end
+
+    # Download an invoice as CSV
     #
-    # The lead time feeds both the feed's `upcoming` bucket and the poller's
-    # daily alert scan. An organization that never saved reads the shipped
-    # defaults (enabled, 60 days).
+    # The derivation, not a rendered document: what was collected, what the
+    # rules added, the rate and the day it was read, and the final figure —
+    # every column an accounts-payable clerk needs to check the arithmetic. Same
+    # RFC 4180 quoting as the scheduled cost exports.
     #
-    # _Requires permission: `org:settings:write`._
+    # _Requires permission: `invoices:read`._
     #
-    # GET /api/org/{orgId}/expiring/settings
+    # GET /api/org/{orgId}/invoices/{id}/export
+    #
+    # Raises on 404: Not found
     #
     # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
     #   constructed with.
+    # @param id [String]
     # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
-    # @return [Hash] Parsed JSON, shaped as `ExpiryAlertSettings` — see
-    #   `sig/infrawrench/sdk.rbs`.
+    # @return [String] Raw response bytes.
     # @raise [Infrawrench::ApiError] On any non-2xx response.
-    def get(org_id: nil, request_options: nil)
+    def export(id:, org_id: nil, request_options: nil)
       @transport.request(
         http_method: "GET",
-        path: "/api/org/{orgId}/expiring/settings",
-        path_params: { "orgId" => org_id },
+        path: "/api/org/{orgId}/invoices/{id}/export",
+        path_params: { "orgId" => org_id, "id" => id },
+        accept: :binary,
         request_options: request_options
       )
     end
 
-    # Update the expiry alert settings
+    # Get an invoice
     #
-    # Every field is optional so a single toggle can be saved on its own.
-    # `leadDays` must be a whole number from 1 to 365. Saving never resets the
-    # alert cooldown.
+    # **A draft recomputes from live spend; an approved, sent or void invoice
+    # does not.** `live` says which happened. A frozen invoice returns the
+    # figures written at approval and does not read cost data at all.
     #
-    # _Requires permission: `org:settings:write`._
+    # _Requires permission: `invoices:read`._
     #
-    # PUT /api/org/{orgId}/expiring/settings
+    # GET /api/org/{orgId}/invoices/{id}
     #
-    # Raises on 400: Bad request
+    # Raises on 404: Not found
     #
     # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
     #   constructed with.
-    # @param body [Hash, nil] Request body, shaped as `ExpiryAlertSettingsUpdate`.
+    # @param id [String]
     # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
-    # @return [Hash] Parsed JSON, shaped as `ExpiryAlertSettings` — see
-    #   `sig/infrawrench/sdk.rbs`.
+    # @return [Hash] Parsed JSON, shaped as `Invoice` — see `sig/infrawrench/sdk.rbs`.
     # @raise [Infrawrench::ApiError] On any non-2xx response.
-    def update(org_id: nil, body: nil, request_options: nil)
+    def get(id:, org_id: nil, request_options: nil)
       @transport.request(
-        http_method: "PUT",
-        path: "/api/org/{orgId}/expiring/settings",
-        path_params: { "orgId" => org_id },
-        body: body,
+        http_method: "GET",
+        path: "/api/org/{orgId}/invoices/{id}",
+        path_params: { "orgId" => org_id, "id" => id },
         request_options: request_options
       )
     end
-  end
-
-  # `client.expiring`
-  class ExpiringNamespace
-    # @return [ExpiringSettingsNamespace] `client.expiring.settings`
-    attr_reader :settings
-
-    # @api private
-    # @param transport [Transport]
-    def initialize(transport)
-      @transport = transport
-      @settings = ExpiringSettingsNamespace.new(@transport)
-    end
 
-    # List approaching deadlines on synced resources
+    # List invoices
     #
-    # One cross-provider countdown of everything with a clock on it: TLS
-    # certificate expiries, domain registrations, API token expirations, access
-    # keys past their rotation budget, Kubernetes/SSH credential ages. Plugins
-    # declare which synced fields carry deadlines; the feed is computed over
-    # already-stored state, so no provider API calls are made and results
-    # reflect the last sync. Items are sorted soonest first and bucketed by
-    # severity against the organization's lead time.
+    # Summaries, newest period first. A draft's `totals` is null here rather
+    # than recomputed — recomputing every draft would make opening the list one
+    # cost-data scan per draft, and zero would be a lie the reader cannot
+    # detect.
     #
-    # _Requires permission: `resources:read`._
+    # _Requires permission: `invoices:read`._
     #
-    # GET /api/org/{orgId}/expiring
+    # GET /api/org/{orgId}/invoices
+    #
+    # Raises on 400: Bad request
     #
     # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
     #   constructed with.
+    # @param managed_account_id [String, nil]
+    # @param status [String, nil]
     # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
-    # @return [Hash] Parsed JSON, shaped as `ExpiryListResponse` — see
+    # @return [Array<Hash>] Parsed JSON, shaped as `Array<InvoiceSummary>` — see
     #   `sig/infrawrench/sdk.rbs`.
     # @raise [Infrawrench::ApiError] On any non-2xx response.
-    def get(org_id: nil, request_options: nil)
+    def list(org_id: nil, managed_account_id: nil, status: nil, request_options: nil)
       @transport.request(
         http_method: "GET",
-        path: "/api/org/{orgId}/expiring",
+        path: "/api/org/{orgId}/invoices",
         path_params: { "orgId" => org_id },
+        query: { "managedAccountId" => managed_account_id, "status" => status },
         request_options: request_options
       )
     end
-  end
-
-  # `client.invitations.by_token`
-  class InvitationsByTokenNamespace
-    # @api private
-    # @param transport [Transport]
-    def initialize(transport)
-      @transport = transport
-    end
 
-    # Get invitation details by token
+    # Send an invoice to its customer
     #
-    # GET /api/invitations/by-token/{token}
+    # Changes no figure — the document was frozen at approval. It records the
+    # **release** (this may go to the customer, and this person said so), then
+    # emails the invoice to the customer's contact addresses with the CSV
+    # attached.
+    #
+    # **200 even when delivery failed.** The release happened and is recorded
+    # either way; `delivery` says what became of the transport. An error status
+    # would leave the caller unable to tell which of the two failed. A failed
+    # delivery is visible, and re-sending retries it.
+    #
+    # Sending again needs `resend: true` only when the last attempt reached
+    # somebody — see `InvoiceSendRequest`. The body may be omitted entirely for
+    # a first send.
+    #
+    # _Requires permission: `invoices:issue`._
+    #
+    # POST /api/org/{orgId}/invoices/{id}/send
+    #
+    # Raises on 400: Bad request
     #
     # Raises on 404: Not found
     #
-    # @param token [String]
+    # Raises on 409: Conflict
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String]
+    # @param body [Hash, nil] Request body, shaped as `InvoiceSendRequest`.
     # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
-    # @return [Hash] Parsed JSON, shaped as `InvitationDetail` — see `sig/infrawrench/sdk.rbs`.
+    # @return [Hash] Parsed JSON, shaped as `Invoice` — see `sig/infrawrench/sdk.rbs`.
     # @raise [Infrawrench::ApiError] On any non-2xx response.
-    def get(token:, request_options: nil)
+    def post_org_org_id_invoices_id_send(id:, org_id: nil, body: nil, request_options: nil)
       @transport.request(
-        http_method: "GET",
-        path: "/api/invitations/by-token/{token}",
-        path_params: { "token" => token },
+        http_method: "POST",
+        path: "/api/org/{orgId}/invoices/{id}/send",
+        path_params: { "orgId" => org_id, "id" => id },
+        body: body,
         request_options: request_options
       )
     end
-  end
-
-  # `client.invitations`
-  class InvitationsNamespace
-    # @return [InvitationsByTokenNamespace] `client.invitations.by_token`
-    attr_reader :by_token
 
-    # @api private
-    # @param transport [Transport]
-    def initialize(transport)
-      @transport = transport
-      @by_token = InvitationsByTokenNamespace.new(@transport)
+    # Edit a draft invoice
+    #
+    # Draft only. An approved, sent or void invoice is refused with 409 by the
+    # service, not merely hidden by the UI — an issued invoice that silently
+    # changed after the customer received it is the worst outcome this feature
+    # could produce.
+    #
+    # _Requires permission: `invoices:write`._
+    #
+    # PUT /api/org/{orgId}/invoices/{id}
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # Raises on 409: Conflict
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String]
+    # @param body [Hash] Request body, shaped as `InvoiceUpdate`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Invoice` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def update(id:, body:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "PUT",
+        path: "/api/org/{orgId}/invoices/{id}",
+        path_params: { "orgId" => org_id, "id" => id },
+        body: body,
+        request_options: request_options
+      )
     end
 
-    # Accept an invitation
+    # Void an issued invoice
     #
-    # POST /api/invitations/accept
+    # The only correction there is. The original keeps every figure it was sent
+    # with — “we billed you this, it was wrong, here is the corrected one” is a
+    # story a customer can follow, and “we changed the invoice” is not.
+    #
+    # With `supersede`, the void, the corrective draft and both directions of
+    # the link between them are one transaction. Void is irreversible, so a
+    # half-applied correction would leave a withdrawn invoice with no way
+    # forward; this call either applies whole or not at all.
+    #
+    # _Requires permission: `invoices:issue`._
+    #
+    # POST /api/org/{orgId}/invoices/{id}/void
     #
     # Raises on 400: Bad request
     #
-    # Raises on 403: Forbidden
+    # Raises on 404: Not found
     #
-    # @param body [Hash] Request body, shaped as `AcceptInvitationRequest`.
+    # Raises on 409: Conflict
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String]
+    # @param body [Hash] Request body, shaped as `InvoiceVoidRequest`.
     # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
-    # @return [Hash] Parsed JSON, shaped as `AcceptInvitationResponse` — see
+    # @return [Hash] Parsed JSON, shaped as `InvoiceVoidResponse` — see
     #   `sig/infrawrench/sdk.rbs`.
     # @raise [Infrawrench::ApiError] On any non-2xx response.
-    def accept(body:, request_options: nil)
+    def void(id:, body:, org_id: nil, request_options: nil)
       @transport.request(
         http_method: "POST",
-        path: "/api/invitations/accept",
+        path: "/api/org/{orgId}/invoices/{id}/void",
+        path_params: { "orgId" => org_id, "id" => id },
         body: body,
         request_options: request_options
       )
@@ -6293,6 +7482,156 @@ module Infrawrench
     end
   end
 
+  # `client.managed_accounts`
+  class ManagedAccountsNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # Create a managed account
+    #
+    # Refused with 409 when a cost centre or account named here is already
+    # billed to another customer. The error names the other customer, because
+    # “it conflicts” without saying with whom sends the caller hunting.
+    #
+    # _Requires permission: `invoices:write`._
+    #
+    # POST /api/org/{orgId}/managed-accounts
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 409: Conflict
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param body [Hash] Request body, shaped as `ManagedAccountInput`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `ManagedAccount` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def create(body:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/managed-accounts",
+        path_params: { "orgId" => org_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Retire a managed account
+    #
+    # A soft delete: an issued invoice names its customer, and an invoice whose
+    # customer stopped resolving is exactly the unreconcilable document this
+    # feature exists to prevent. Draft invoices are removed with it — a draft
+    # was never issued.
+    #
+    # _Requires permission: `invoices:write`._
+    #
+    # DELETE /api/org/{orgId}/managed-accounts/{id}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Ok` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def delete(id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "DELETE",
+        path: "/api/org/{orgId}/managed-accounts/{id}",
+        path_params: { "orgId" => org_id, "id" => id },
+        request_options: request_options
+      )
+    end
+
+    # Get a managed account
+    #
+    # _Requires permission: `invoices:read`._
+    #
+    # GET /api/org/{orgId}/managed-accounts/{id}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `ManagedAccount` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/managed-accounts/{id}",
+        path_params: { "orgId" => org_id, "id" => id },
+        request_options: request_options
+      )
+    end
+
+    # List managed accounts
+    #
+    # The customers a managed service provider bills. A managed account
+    # references existing cost centres rather than defining its own matching
+    # rules, so the spend on an invoice is the same spend the showback report
+    # attributes to those centres.
+    #
+    # _Requires permission: `invoices:read`._
+    #
+    # GET /api/org/{orgId}/managed-accounts
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Array<Hash>] Parsed JSON, shaped as `Array<ManagedAccount>` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def list(org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/managed-accounts",
+        path_params: { "orgId" => org_id },
+        request_options: request_options
+      )
+    end
+
+    # Update a managed account
+    #
+    # A full replace. Editing the scope changes what **future** drafts are drawn
+    # over and nothing else: every approved invoice holds its own copy of the
+    # scope, so moving a cost centre between customers cannot re-bill a period
+    # that has already been invoiced.
+    #
+    # _Requires permission: `invoices:write`._
+    #
+    # PUT /api/org/{orgId}/managed-accounts/{id}
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # Raises on 409: Conflict
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param id [String]
+    # @param body [Hash] Request body, shaped as `ManagedAccountInput`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `ManagedAccount` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def update(id:, body:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "PUT",
+        path: "/api/org/{orgId}/managed-accounts/{id}",
+        path_params: { "orgId" => org_id, "id" => id },
+        body: body,
+        request_options: request_options
+      )
+    end
+  end
+
   # `client.metric_alerts`
   class MetricAlertsNamespace
     # @api private
@@ -11137,8 +12476,12 @@ module Infrawrench
     attr_reader :bastions
     # @return [BillingNamespace] `client.billing`
     attr_reader :billing
+    # @return [BillingRulesNamespace] `client.billing_rules`
+    attr_reader :billing_rules
     # @return [BudgetsNamespace] `client.budgets`
     attr_reader :budgets
+    # @return [BusinessMetricsNamespace] `client.business_metrics`
+    attr_reader :business_metrics
     # @return [ChangeFreezesNamespace] `client.change_freezes`
     attr_reader :change_freezes
     # @return [ChangesNamespace] `client.changes`
@@ -11151,6 +12494,8 @@ module Infrawrench
     attr_reader :connect
     # @return [CostAlertsNamespace] `client.cost_alerts`
     attr_reader :cost_alerts
+    # @return [CostAnnotationsNamespace] `client.cost_annotations`
+    attr_reader :cost_annotations
     # @return [CostCentresNamespace] `client.cost_centres`
     attr_reader :cost_centres
     # @return [CostExportsNamespace] `client.cost_exports`
@@ -11161,6 +12506,8 @@ module Infrawrench
     attr_reader :cost_report_notifications
     # @return [CostReportsNamespace] `client.cost_reports`
     attr_reader :cost_reports
+    # @return [CostScenariosNamespace] `client.cost_scenarios`
+    attr_reader :cost_scenarios
     # @return [CostsNamespace] `client.costs`
     attr_reader :costs
     # @return [CredentialHygieneNamespace] `client.credential_hygiene`
@@ -11189,6 +12536,8 @@ module Infrawrench
     attr_reader :expiring
     # @return [InvitationsNamespace] `client.invitations`
     attr_reader :invitations
+    # @return [InvoicesNamespace] `client.invoices`
+    attr_reader :invoices
     # @return [JiraNamespace] `client.jira`
     attr_reader :jira
     # @return [KvNamespace] `client.kv`
@@ -11199,6 +12548,8 @@ module Infrawrench
     attr_reader :linear
     # @return [LogWorkspacesNamespace] `client.log_workspaces`
     attr_reader :log_workspaces
+    # @return [ManagedAccountsNamespace] `client.managed_accounts`
+    attr_reader :managed_accounts
     # @return [MetricAlertsNamespace] `client.metric_alerts`
     attr_reader :metric_alerts
     # @return [MomentNamespace] `client.moment`
@@ -11276,18 +12627,22 @@ module Infrawrench
       @auth = AuthNamespace.new(@transport)
       @bastions = BastionsNamespace.new(@transport)
       @billing = BillingNamespace.new(@transport)
+      @billing_rules = BillingRulesNamespace.new(@transport)
       @budgets = BudgetsNamespace.new(@transport)
+      @business_metrics = BusinessMetricsNamespace.new(@transport)
       @change_freezes = ChangeFreezesNamespace.new(@transport)
       @changes = ChangesNamespace.new(@transport)
       @commitments = CommitmentsNamespace.new(@transport)
       @config = ConfigNamespace.new(@transport)
       @connect = ConnectNamespace.new(@transport)
       @cost_alerts = CostAlertsNamespace.new(@transport)
+      @cost_annotations = CostAnnotationsNamespace.new(@transport)
       @cost_centres = CostCentresNamespace.new(@transport)
       @cost_exports = CostExportsNamespace.new(@transport)
       @cost_report_folders = CostReportFoldersNamespace.new(@transport)
       @cost_report_notifications = CostReportNotificationsNamespace.new(@transport)
       @cost_reports = CostReportsNamespace.new(@transport)
+      @cost_scenarios = CostScenariosNamespace.new(@transport)
       @costs = CostsNamespace.new(@transport)
       @credential_hygiene = CredentialHygieneNamespace.new(@transport)
       @credits = CreditsNamespace.new(@transport)
@@ -11302,11 +12657,13 @@ module Infrawrench
       @environment_diff = EnvironmentDiffNamespace.new(@transport)
       @expiring = ExpiringNamespace.new(@transport)
       @invitations = InvitationsNamespace.new(@transport)
+      @invoices = InvoicesNamespace.new(@transport)
       @jira = JiraNamespace.new(@transport)
       @kv = KvNamespace.new(@transport)
       @leases = LeasesNamespace.new(@transport)
       @linear = LinearNamespace.new(@transport)
       @log_workspaces = LogWorkspacesNamespace.new(@transport)
+      @managed_accounts = ManagedAccountsNamespace.new(@transport)
       @metric_alerts = MetricAlertsNamespace.new(@transport)
       @moment = MomentNamespace.new(@transport)
       @msteams = MsteamsNamespace.new(@transport)