infrawrench-sdk 1.76.0 → 1.77.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7d84ac031e513ec0482cbad8f0b243720e6e6c0a68606a57071ab3b4e375bda8
-  data.tar.gz: 441ae2cbc0ef0016339092e29a7fafb6c80a8c27bc9c184c0d356f74f638a755
+  metadata.gz: ab0a40192266e73aeaa16ef58815681b52185e6dee4ca5c00af859785acb9ce9
+  data.tar.gz: 302e42dd303dd17ab94cb5601c698c384c2960b9e1cc289807c399b9db52955d
 SHA512:
-  metadata.gz: ecdb1efb98bd0682dc9ed867e0961422b6208f92d7773ad9ea7bfa4f229c7604fb790d56794cc4d4a185542f8ce9b32a4f17d82863208ace2943c9159769b714
-  data.tar.gz: 74ceaa8f1e48f8e53775a55b8bdce6efd8208fc435e114c3934c4dd356e0bb1ea0c3d02ed5eb22853d2fa3f7a82240614cccc9385befd3a9f191137f7f10a9b1
+  metadata.gz: fa993b4dd311c8ab813ca71383eb8be7b0f4d69b012351b47e38c42441da0685d55849db440029822900830d0d06773f636c264d50ac616eb724f798bae52ad8
+  data.tar.gz: 875ed1e3e5697713071a6db73bc5ae07958892858316d3b28e1fd2477a90c3e7c00b1a0376291a2c6eb0cef0154e43249191c82367be55fd52adf2b295de6769

data/README.md

@@ -1,6 +1,6 @@
 # infrawrench-sdk
 
-Generated Ruby client for the Infrawrench API (API version `1.76.0`).
+Generated Ruby client for the Infrawrench API (API version `1.77.0`).
 
 **Do not edit this gem by hand** — it is regenerated from `openapi.json` and is
 not checked into the repository. Run
@@ -41,7 +41,7 @@ Every method takes an optional trailing `request_options:` hash (`:headers`,
 Responses are the plain `Hash`/`Array` that `JSON.parse` returns, with String
 keys spelled exactly as the wire spells them. There are no model classes — see
 [`sig/infrawrench/sdk.rbs`](./sig/infrawrench/sdk.rbs) for the shape of every one of the
-941 schemas, as RBS type aliases that steep and TypeProf can read.
+954 schemas, as RBS type aliases that steep and TypeProf can read.
 
 Non-2xx responses raise `Infrawrench::ApiError`, which carries `#status`,
 the parsed `#body`, and the machine-readable `#code` when the API sends one —

data/infrawrench-sdk.gemspec

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.76.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.77.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.76.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.77.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk
@@ -17,8 +17,8 @@ require_relative "lib/infrawrench/version"
 Gem::Specification.new do |spec|
   spec.name = "infrawrench-sdk"
   spec.version = Infrawrench::VERSION
-  spec.summary = "Generated Ruby client for the Infrawrench API (v1.76.0)."
-  spec.description = "Generated Ruby client for the Infrawrench API (v1.76.0). Covers the published API surface only — operations marked x-internal in the spec are not generated. No runtime dependencies."
+  spec.summary = "Generated Ruby client for the Infrawrench API (v1.77.0)."
+  spec.description = "Generated Ruby client for the Infrawrench API (v1.77.0). Covers the published API surface only — operations marked x-internal in the spec are not generated. No runtime dependencies."
   spec.authors = ["Infrawrench LLC", "Astrid Gealer"]
   spec.email = ["astrid@infrawrench.com"]
   spec.homepage = "https://infrawrench.com/docs/team-and-billing/client-sdks"

data/lib/infrawrench/client.rb

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.76.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.77.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.76.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.77.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk
@@ -12408,6 +12408,555 @@ module Infrawrench
     end
   end
 
+  # `client.jit_access.accounts`
+  class JitAccessAccountsNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # Accounts that can grant just-in-time access
+    #
+    # Connected accounts whose provider plugin declares the just-in-time
+    # capability.
+    #
+    # _Requires permission: `access:read`._
+    #
+    # GET /api/org/{orgId}/jit-access/accounts
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Array<Hash>] Parsed JSON, shaped as `Array<JitAccessAccount>` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def list(org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/jit-access/accounts",
+        path_params: { "orgId" => org_id },
+        request_options: request_options
+      )
+    end
+
+    # Grantable roles in a scope (picker)
+    #
+    # _Requires permission: `org:settings:write`._
+    #
+    # GET /api/org/{orgId}/jit-access/accounts/{accountId}/roles
+    #
+    # Raises on 502: Provider error
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param account_id [String]
+    # @param scope_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Array<Hash>] Parsed JSON, shaped as `Array<JitPickerOption>` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def roles(account_id:, scope_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/jit-access/accounts/{accountId}/roles",
+        path_params: { "orgId" => org_id, "accountId" => account_id },
+        query: { "scopeId" => scope_id },
+        request_options: request_options
+      )
+    end
+
+    # Scopes on an account (picker)
+    #
+    # The places a role can be granted (AWS accounts, GCP projects, namespaces),
+    # read from the provider.
+    #
+    # _Requires permission: `org:settings:write`._
+    #
+    # GET /api/org/{orgId}/jit-access/accounts/{accountId}/scopes
+    #
+    # Raises on 502: Provider error
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param account_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Array<Hash>] Parsed JSON, shaped as `Array<JitPickerOption>` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def scopes(account_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/jit-access/accounts/{accountId}/scopes",
+        path_params: { "orgId" => org_id, "accountId" => account_id },
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.jit_access.policies`
+  class JitAccessPoliciesNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # Create a policy
+    #
+    # Audit-logged. At least one approver (member, role or on-call rotation) is
+    # required.
+    #
+    # _Requires permission: `org:settings:write`._
+    #
+    # POST /api/org/{orgId}/jit-access/policies
+    #
+    # Raises on 400: Bad request
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param body [Hash, nil] Request body, shaped as `JitPolicyInput`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitPolicy` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def create(org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/jit-access/policies",
+        path_params: { "orgId" => org_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Delete a policy
+    #
+    # Grants the policy produced still end on time; its pending requests have no
+    # approvers and time out.
+    #
+    # _Requires permission: `org:settings:write`._
+    #
+    # DELETE /api/org/{orgId}/jit-access/policies/{policyId}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param policy_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Ok` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def delete(policy_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "DELETE",
+        path: "/api/org/{orgId}/jit-access/policies/{policyId}",
+        path_params: { "orgId" => org_id, "policyId" => policy_id },
+        request_options: request_options
+      )
+    end
+
+    # Get a policy
+    #
+    # _Requires permission: `access:read`._
+    #
+    # GET /api/org/{orgId}/jit-access/policies/{policyId}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param policy_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitPolicy` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(policy_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/jit-access/policies/{policyId}",
+        path_params: { "orgId" => org_id, "policyId" => policy_id },
+        request_options: request_options
+      )
+    end
+
+    # List just-in-time access policies
+    #
+    # _Requires permission: `access:read`._
+    #
+    # GET /api/org/{orgId}/jit-access/policies
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Array<Hash>] Parsed JSON, shaped as `Array<JitPolicy>` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def list(org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/jit-access/policies",
+        path_params: { "orgId" => org_id },
+        request_options: request_options
+      )
+    end
+
+    # Resolve the caller's provider principal
+    #
+    # Who the grant would go to, matched by the caller's email in the provider.
+    #
+    # _Requires permission: `access:request`._
+    #
+    # GET /api/org/{orgId}/jit-access/policies/{policyId}/principal
+    #
+    # Raises on 403: Not a requester
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param policy_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitPrincipalResolution` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def principal(policy_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/jit-access/policies/{policyId}/principal",
+        path_params: { "orgId" => org_id, "policyId" => policy_id },
+        request_options: request_options
+      )
+    end
+
+    # Principals the caller may pick
+    #
+    # _Requires permission: `access:request`._
+    #
+    # GET /api/org/{orgId}/jit-access/policies/{policyId}/principals
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param policy_id [String]
+    # @param q [String, nil]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Array<Hash>] Parsed JSON, shaped as `Array<JitPrincipalOption & Hash>` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def principals(policy_id:, org_id: nil, q: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/jit-access/policies/{policyId}/principals",
+        path_params: { "orgId" => org_id, "policyId" => policy_id },
+        query: { "q" => q },
+        request_options: request_options
+      )
+    end
+
+    # Replace a policy
+    #
+    # Live grants keep their window; pending requests are decided against the
+    # new approver set.
+    #
+    # _Requires permission: `org:settings:write`._
+    #
+    # PUT /api/org/{orgId}/jit-access/policies/{policyId}
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param policy_id [String]
+    # @param body [Hash, nil] Request body, shaped as `JitPolicyInput`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitPolicy` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def update(policy_id:, org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "PUT",
+        path: "/api/org/{orgId}/jit-access/policies/{policyId}",
+        path_params: { "orgId" => org_id, "policyId" => policy_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.jit_access.requests`
+  class JitAccessRequestsNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # Approve a request
+    #
+    # The caller must be in the policy's approver set at this moment. On
+    # approval the provider grant is made; the response may still read
+    # `granting` when it completes in the background. Audit-logged. Not
+    # available to API keys.
+    #
+    # _Requires permission: `access:read`._
+    #
+    # POST /api/org/{orgId}/jit-access/requests/{requestId}/approve
+    #
+    # Raises on 403: Not allowed
+    #
+    # Raises on 404: Not found
+    #
+    # Raises on 409: Already decided, timed out, or not in a state for this
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_id [String]
+    # @param body [Hash, nil] Request body, shaped as `Hash`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitAccessRequest` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def approve(request_id:, org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/jit-access/requests/{requestId}/approve",
+        path_params: { "orgId" => org_id, "requestId" => request_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Cancel your pending request
+    #
+    # Requester only. Audit-logged. Not available to API keys.
+    #
+    # _Requires permission: `access:request`._
+    #
+    # POST /api/org/{orgId}/jit-access/requests/{requestId}/cancel
+    #
+    # Raises on 403: Not allowed
+    #
+    # Raises on 404: Not found
+    #
+    # Raises on 409: Already decided, timed out, or not in a state for this
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_id [String]
+    # @param body [Hash, nil] Request body, shaped as `Hash`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitAccessRequest` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def cancel(request_id:, org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/jit-access/requests/{requestId}/cancel",
+        path_params: { "orgId" => org_id, "requestId" => request_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Request just-in-time access
+    #
+    # Ask for one of a policy's scope and role pairs for a bounded window.
+    # Approvers are notified over push, Slack (with Approve/Deny buttons) and
+    # Microsoft Teams. Not available to API keys.
+    #
+    # _Requires permission: `access:request`._
+    #
+    # POST /api/org/{orgId}/jit-access/requests
+    #
+    # Raises on 400: Invalid
+    #
+    # Raises on 403: Not a requester under this policy
+    #
+    # Raises on 409: A pending or active request already covers this
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param body [Hash, nil] Request body, shaped as `JitCreateRequest`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitAccessRequest` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def create(org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/jit-access/requests",
+        path_params: { "orgId" => org_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Deny a request
+    #
+    # The caller must be in the policy's approver set. Audit-logged. Not
+    # available to API keys.
+    #
+    # _Requires permission: `access:read`._
+    #
+    # POST /api/org/{orgId}/jit-access/requests/{requestId}/deny
+    #
+    # Raises on 403: Not allowed
+    #
+    # Raises on 404: Not found
+    #
+    # Raises on 409: Already decided, timed out, or not in a state for this
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_id [String]
+    # @param body [Hash, nil] Request body, shaped as `Hash`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitAccessRequest` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def deny(request_id:, org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/jit-access/requests/{requestId}/deny",
+        path_params: { "orgId" => org_id, "requestId" => request_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Extend an active grant
+    #
+    # Approvers only, within the policy maximum for the whole window. A
+    # provider-enforced expiry is moved upstream first. Audit-logged. Not
+    # available to API keys.
+    #
+    # _Requires permission: `access:read`._
+    #
+    # POST /api/org/{orgId}/jit-access/requests/{requestId}/extend
+    #
+    # Raises on 400: Beyond the policy maximum
+    #
+    # Raises on 403: Not an approver
+    #
+    # Raises on 409: Not active
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_id [String]
+    # @param body [Hash, nil] Request body, shaped as `Hash`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitAccessRequest` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def post_org_org_id_jit_access_requests_request_id_extend(
+      request_id:,
+      org_id: nil,
+      body: nil,
+      request_options: nil
+    )
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/jit-access/requests/{requestId}/extend",
+        path_params: { "orgId" => org_id, "requestId" => request_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Get a request
+    #
+    # _Requires permission: `access:read`._
+    #
+    # GET /api/org/{orgId}/jit-access/requests/{requestId}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitAccessRequest` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(request_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/jit-access/requests/{requestId}",
+        path_params: { "orgId" => org_id, "requestId" => request_id },
+        request_options: request_options
+      )
+    end
+
+    # List just-in-time access requests
+    #
+    # Newest first, with caller-relative action flags.
+    #
+    # _Requires permission: `access:read`._
+    #
+    # GET /api/org/{orgId}/jit-access/requests
+    #
+    # Raises on 400: Bad request
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param status [String, nil]
+    # @param mine [String, nil]
+    # @param holding [String, nil] Only rows that may be holding access upstream.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Array<Hash>] Parsed JSON, shaped as `Array<JitAccessRequest>` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def list(org_id: nil, status: nil, mine: nil, holding: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/jit-access/requests",
+        path_params: { "orgId" => org_id },
+        query: { "status" => status, "mine" => mine, "holding" => holding },
+        request_options: request_options
+      )
+    end
+
+    # End a grant early
+    #
+    # Allowed for the holder, an approver, or a member with org:settings:write.
+    # Audit-logged. Not available to API keys.
+    #
+    # POST /api/org/{orgId}/jit-access/requests/{requestId}/revoke
+    #
+    # Raises on 403: Not allowed
+    #
+    # Raises on 404: Not found
+    #
+    # Raises on 409: Already decided, timed out, or not in a state for this
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_id [String]
+    # @param body [Hash, nil] Request body, shaped as `Hash`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitAccessRequest` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def revoke(request_id:, org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/jit-access/requests/{requestId}/revoke",
+        path_params: { "orgId" => org_id, "requestId" => request_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.jit_access`
+  class JitAccessNamespace
+    # @return [JitAccessAccountsNamespace] `client.jit_access.accounts`
+    attr_reader :accounts
+    # @return [JitAccessPoliciesNamespace] `client.jit_access.policies`
+    attr_reader :policies
+    # @return [JitAccessRequestsNamespace] `client.jit_access.requests`
+    attr_reader :requests
+
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+      @accounts = JitAccessAccountsNamespace.new(@transport)
+      @policies = JitAccessPoliciesNamespace.new(@transport)
+      @requests = JitAccessRequestsNamespace.new(@transport)
+    end
+  end
+
   # `client.kv`
   class KvNamespace
     # @api private
@@ -21392,6 +21941,8 @@ module Infrawrench
     attr_reader :invoices
     # @return [JiraNamespace] `client.jira`
     attr_reader :jira
+    # @return [JitAccessNamespace] `client.jit_access`
+    attr_reader :jit_access
     # @return [KvNamespace] `client.kv`
     attr_reader :kv
     # @return [LeasesNamespace] `client.leases`
@@ -21563,6 +22114,7 @@ module Infrawrench
       @invitations = InvitationsNamespace.new(@transport)
       @invoices = InvoicesNamespace.new(@transport)
       @jira = JiraNamespace.new(@transport)
+      @jit_access = JitAccessNamespace.new(@transport)
       @kv = KvNamespace.new(@transport)
       @leases = LeasesNamespace.new(@transport)
       @linear = LinearNamespace.new(@transport)

data/lib/infrawrench/sdk.rb

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.76.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.77.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.76.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.77.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk

data/lib/infrawrench/transport.rb

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.76.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.77.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.76.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.77.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk

data/lib/infrawrench/version.rb

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.76.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.77.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.76.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.77.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk
@@ -15,5 +15,5 @@
 # Kept in its own file so the gemspec can read the version without loading the
 # client — a gemspec that pulls in net/http is a gemspec that can fail to parse.
 module Infrawrench
-  VERSION = "1.76.0"
+  VERSION = "1.77.0"
 end

data/lib/infrawrench-sdk.rb

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.76.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.77.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.76.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.77.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk

data/sig/infrawrench/sdk.rbs

@@ -1,7 +1,7 @@
-# infrawrench-sdk v1.76.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.77.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.76.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.77.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk
@@ -220,7 +220,8 @@ module Infrawrench
     "dismissedCount" => Integer,
     "unknownActivityCount" => Integer,
     "staleDays" => Integer,
-    "generatedAt" => String
+    "generatedAt" => String,
+    ?"jitGrantIssues" => Array[jit_grant_issue]
   }
 
   # Spec schema: `AccessReviewRoleCounts`.
@@ -5411,6 +5412,176 @@ module Infrawrench
     "emailAddress" => String | nil
   }
 
+  # Spec schema: `JitAccessAccount`.
+  type jit_access_account = {
+    "id" => String,
+    "displayName" => String,
+    "pluginId" => String,
+    "labels" => jit_provider_labels
+  }
+
+  # Spec schema: `JitAccessRequest`.
+  type jit_access_request = {
+    "id" => String,
+    "policyId" => String | nil,
+    "policyName" => String | nil,
+    "accountId" => String,
+    "accountName" => String | nil,
+    "pluginId" => String,
+    "scopeId" => String,
+    "scopeName" => String,
+    "roleId" => String,
+    "roleName" => String,
+    "userId" => String,
+    "userName" => String | nil,
+    "principalId" => String,
+    "principalName" => String,
+    "principalKind" => "user" | "group",
+    "principalMatched" => bool,
+    "reason" => String,
+    "ticket" => String | nil,
+    "durationMinutes" => Integer,
+    "status" => jit_request_status,
+    "requestExpiresAt" => String,
+    "decidedAt" => String | nil,
+    "decidedByUserId" => String | nil,
+    "decidedByName" => String | nil,
+    "decisionNote" => String | nil,
+    "selfApproved" => bool,
+    "incidentId" => String | nil,
+    "grantedAt" => String | nil,
+    "grantExpiresAt" => String | nil,
+    "preexisting" => bool,
+    "extendedMinutes" => Integer,
+    "endedAt" => String | nil,
+    "endedByName" => String | nil,
+    "endReason" => "expired" | "revoked" | "grant_failed" | nil,
+    "lastError" => String | nil,
+    "revokeAttempts" => Integer,
+    "createdAt" => String,
+    "canDecide" => bool,
+    "canCancel" => bool,
+    "canExtend" => bool,
+    "canRevoke" => bool
+  }
+
+  # Spec schema: `JitCreateRequest`.
+  type jit_create_request = {
+    "policyId" => String,
+    "scopeId" => String,
+    "roleId" => String,
+    "durationMinutes" => Integer,
+    "reason" => String,
+    ?"ticket" => String,
+    ?"principalId" => String
+  }
+
+  # Spec schema: `JitError`.
+  type jit_error = { "error" => String, ?"code" => String }
+
+  # Spec schema: `JitGrantIssue`.
+  type jit_grant_issue = {
+    "requestId" => String,
+    "kind" => "revoke_failed" | "overdue" | "still_present",
+    "accountId" => String,
+    "accountName" => String | nil,
+    "pluginId" => String,
+    "scopeName" => String,
+    "roleName" => String,
+    "principalName" => String,
+    "userName" => String | nil,
+    "grantExpiresAt" => String | nil,
+    "lastError" => String | nil,
+    "revokeAttempts" => Integer
+  }
+
+  # Spec schema: `JitPickerOption`.
+  type jit_picker_option = { "id" => String, "name" => String, ?"description" => String, ?"privileged" => bool }
+
+  # Spec schema: `JitPolicy`.
+  type jit_policy = {
+    "id" => String,
+    "name" => String,
+    "description" => String | nil,
+    "enabled" => bool,
+    "accountId" => String,
+    "accountName" => String | nil,
+    "pluginId" => String,
+    "targets" => Array[jit_policy_target],
+    "maxDurationMinutes" => Integer,
+    "defaultDurationMinutes" => Integer,
+    "requestTimeoutMinutes" => Integer,
+    "requesterUserIds" => Array[String],
+    "requesterRoleIds" => Array[String],
+    "approverUserIds" => Array[String],
+    "approverRoleIds" => Array[String],
+    "approverOnCallScheduleIds" => Array[String],
+    "allowSelfApprovalDuringIncident" => bool,
+    "requireReason" => bool,
+    "requireTicket" => bool,
+    "createdAt" => String,
+    "updatedAt" => String,
+    ?"labels" => jit_provider_labels & (Hash[String, untyped] | nil),
+    ?"canRequest" => bool
+  }
+
+  # Spec schema: `JitPolicyInput`.
+  type jit_policy_input = {
+    "name" => String,
+    ?"description" => String | nil,
+    ?"enabled" => bool,
+    "accountId" => String,
+    "targets" => Array[jit_policy_target],
+    "maxDurationMinutes" => Integer,
+    ?"defaultDurationMinutes" => Integer,
+    ?"requestTimeoutMinutes" => Integer,
+    ?"requesterUserIds" => Array[String],
+    ?"requesterRoleIds" => Array[String],
+    ?"approverUserIds" => Array[String],
+    ?"approverRoleIds" => Array[String],
+    ?"approverOnCallScheduleIds" => Array[String],
+    ?"allowSelfApprovalDuringIncident" => bool,
+    ?"requireReason" => bool,
+    ?"requireTicket" => bool
+  }
+
+  # Spec schema: `JitPolicyTarget`.
+  type jit_policy_target = { "scopeId" => String, "scopeName" => String, "roleId" => String, "roleName" => String }
+
+  # Spec schema: `JitPrincipalOption`.
+  type jit_principal_option = { "id" => String, "name" => String, "kind" => "user" | "group", ?"email" => String | nil }
+    | nil
+
+  # Spec schema: `JitPrincipalResolution`.
+  type jit_principal_resolution = { "principal" => jit_principal_option, "canPick" => bool, "labels" => jit_provider_labels }
+
+  # Spec schema: `JitProviderLabels`.
+  type jit_provider_labels = {
+    "scopeLabel" => String,
+    "roleLabel" => String,
+    "principalLabel" => String,
+    ?"description" => String,
+    "providerEnforcedExpiry" => bool,
+    "principalPicker" => bool
+  }
+
+  # `pending` (awaiting an approver) or `timed_out`; `denied` / `cancelled`;
+  # `granting` (the provider call is in flight), `active`, `grant_failed`;
+  # `revoking` then `revoked` when the window ends; `revoke_failed` while a
+  # failed revoke is retried.
+  #
+  # Spec schema: `JitRequestStatus`.
+  type jit_request_status = "pending"
+    | "timed_out"
+    | "denied"
+    | "cancelled"
+    | "granting"
+    | "active"
+    | "grant_failed"
+    | "revoking"
+    | "revoked"
+    | "revoke_failed"
+
   # Free-form JSON object whose shape depends on the plugin.
   #
   # Spec schema: `JsonObject`.
@@ -10334,6 +10505,7 @@ module Infrawrench
       | "expiring"
       | "posture"
       | "access-review"
+      | "jit-access"
       | "backups"
       | "wallboard"
       | "calendar"
@@ -11698,6 +11870,43 @@ module Infrawrench
     def verify: (?org_id: String?, ?body: jira_verify_input?, ?request_options: Hash[Symbol, untyped]?) -> jira_verify_result
   end
 
+  class JitAccessAccountsNamespace
+    def initialize: (Transport) -> void
+    def list: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> Array[jit_access_account]
+    def roles: (account_id: String, scope_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> Array[jit_picker_option]
+    def scopes: (account_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> Array[jit_picker_option]
+  end
+
+  class JitAccessPoliciesNamespace
+    def initialize: (Transport) -> void
+    def create: (?org_id: String?, ?body: jit_policy_input?, ?request_options: Hash[Symbol, untyped]?) -> jit_policy
+    def delete: (policy_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> ok
+    def get: (policy_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> jit_policy
+    def list: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> Array[jit_policy]
+    def principal: (policy_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> jit_principal_resolution
+    def principals: (policy_id: String, ?org_id: String?, ?q: String?, ?request_options: Hash[Symbol, untyped]?) -> Array[jit_principal_option & Hash[String, untyped]]
+    def update: (policy_id: String, ?org_id: String?, ?body: jit_policy_input?, ?request_options: Hash[Symbol, untyped]?) -> jit_policy
+  end
+
+  class JitAccessRequestsNamespace
+    def initialize: (Transport) -> void
+    def approve: (request_id: String, ?org_id: String?, ?body: { ?"note" => String }?, ?request_options: Hash[Symbol, untyped]?) -> jit_access_request
+    def cancel: (request_id: String, ?org_id: String?, ?body: { ?"note" => String }?, ?request_options: Hash[Symbol, untyped]?) -> jit_access_request
+    def create: (?org_id: String?, ?body: jit_create_request?, ?request_options: Hash[Symbol, untyped]?) -> jit_access_request
+    def deny: (request_id: String, ?org_id: String?, ?body: { ?"note" => String }?, ?request_options: Hash[Symbol, untyped]?) -> jit_access_request
+    def post_org_org_id_jit_access_requests_request_id_extend: (request_id: String, ?org_id: String?, ?body: { "minutes" => Integer }?, ?request_options: Hash[Symbol, untyped]?) -> jit_access_request
+    def get: (request_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> jit_access_request
+    def list: (?org_id: String?, ?status: jit_request_status?, ?mine: "1"?, ?holding: "1"?, ?request_options: Hash[Symbol, untyped]?) -> Array[jit_access_request]
+    def revoke: (request_id: String, ?org_id: String?, ?body: { ?"note" => String }?, ?request_options: Hash[Symbol, untyped]?) -> jit_access_request
+  end
+
+  class JitAccessNamespace
+    attr_reader accounts: JitAccessAccountsNamespace
+    attr_reader policies: JitAccessPoliciesNamespace
+    attr_reader requests: JitAccessRequestsNamespace
+    def initialize: (Transport) -> void
+  end
+
   class KvNamespace
     def initialize: (Transport) -> void
     def command: (body: kv_command_request, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> kv_command_response
@@ -12417,6 +12626,7 @@ module Infrawrench
     attr_reader invitations: InvitationsNamespace
     attr_reader invoices: InvoicesNamespace
     attr_reader jira: JiraNamespace
+    attr_reader jit_access: JitAccessNamespace
     attr_reader kv: KvNamespace
     attr_reader leases: LeasesNamespace
     attr_reader linear: LinearNamespace

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: infrawrench-sdk
 version: !ruby/object:Gem::Version
-  version: 1.76.0
+  version: 1.77.0
 platform: ruby
 authors:
 - Infrawrench LLC
@@ -9,9 +9,9 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-10-07 00:00:00.000000000 Z
+date: 2026-10-08 00:00:00.000000000 Z
 dependencies: []
-description: Generated Ruby client for the Infrawrench API (v1.76.0). Covers the published
+description: Generated Ruby client for the Infrawrench API (v1.77.0). Covers the published
   API surface only — operations marked x-internal in the spec are not generated. No
   runtime dependencies.
 email:
@@ -58,5 +58,5 @@ requirements: []
 rubygems_version: 3.5.22
 signing_key:
 specification_version: 4
-summary: Generated Ruby client for the Infrawrench API (v1.76.0).
+summary: Generated Ruby client for the Infrawrench API (v1.77.0).
 test_files: []