infrawrench-sdk 1.76.0 → 1.78.0

data/lib/infrawrench/client.rb

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-# infrawrench-sdk v1.76.0 | MIT | Copyright (c) 2026 Infrawrench LLC
+# infrawrench-sdk v1.78.0 | MIT | Copyright (c) 2026 Infrawrench LLC
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.76.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.78.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk
@@ -4885,9 +4885,9 @@ module Infrawrench
     # Export the organization's configuration as one document
     #
     # Dashboards, workflows, custom graphs, budgets, metric alerts, synthetic
-    # probes, cost centres, the tag policy and the org-wide alert settings,
-    # addressed by stable keys rather than row ids so the result applies to any
-    # organization.
+    # probes, SLOs, cost centres, the tag policy and the org-wide alert
+    # settings, addressed by stable keys rather than row ids so the result
+    # applies to any organization.
     #
     # Credentials, accounts, resources and workflow signing secrets are never
     # included. Ordering is stable, so re-exporting an unchanged organization
@@ -4908,8 +4908,8 @@ module Infrawrench
     # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
     #   constructed with.
     # @param sections [String, nil] Comma-separated subset of sections to export. Defaults to
-    #   all of: budgets, customGraphs, workflows, dashboards, metricAlerts, probes, costCentres,
-    #   tagPolicy, alertSettings.
+    #   all of: budgets, customGraphs, workflows, dashboards, metricAlerts, probes, slos,
+    #   costCentres, tagPolicy, alertSettings.
     # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
     # @return [Hash] Parsed JSON, shaped as `OrgConfigDocument` — see `sig/infrawrench/sdk.rbs`.
     # @raise [Infrawrench::ApiError] On any non-2xx response.
@@ -12408,6 +12408,555 @@ module Infrawrench
     end
   end
 
+  # `client.jit_access.accounts`
+  class JitAccessAccountsNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # Accounts that can grant just-in-time access
+    #
+    # Connected accounts whose provider plugin declares the just-in-time
+    # capability.
+    #
+    # _Requires permission: `access:read`._
+    #
+    # GET /api/org/{orgId}/jit-access/accounts
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Array<Hash>] Parsed JSON, shaped as `Array<JitAccessAccount>` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def list(org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/jit-access/accounts",
+        path_params: { "orgId" => org_id },
+        request_options: request_options
+      )
+    end
+
+    # Grantable roles in a scope (picker)
+    #
+    # _Requires permission: `org:settings:write`._
+    #
+    # GET /api/org/{orgId}/jit-access/accounts/{accountId}/roles
+    #
+    # Raises on 502: Provider error
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param account_id [String]
+    # @param scope_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Array<Hash>] Parsed JSON, shaped as `Array<JitPickerOption>` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def roles(account_id:, scope_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/jit-access/accounts/{accountId}/roles",
+        path_params: { "orgId" => org_id, "accountId" => account_id },
+        query: { "scopeId" => scope_id },
+        request_options: request_options
+      )
+    end
+
+    # Scopes on an account (picker)
+    #
+    # The places a role can be granted (AWS accounts, GCP projects, namespaces),
+    # read from the provider.
+    #
+    # _Requires permission: `org:settings:write`._
+    #
+    # GET /api/org/{orgId}/jit-access/accounts/{accountId}/scopes
+    #
+    # Raises on 502: Provider error
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param account_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Array<Hash>] Parsed JSON, shaped as `Array<JitPickerOption>` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def scopes(account_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/jit-access/accounts/{accountId}/scopes",
+        path_params: { "orgId" => org_id, "accountId" => account_id },
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.jit_access.policies`
+  class JitAccessPoliciesNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # Create a policy
+    #
+    # Audit-logged. At least one approver (member, role or on-call rotation) is
+    # required.
+    #
+    # _Requires permission: `org:settings:write`._
+    #
+    # POST /api/org/{orgId}/jit-access/policies
+    #
+    # Raises on 400: Bad request
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param body [Hash, nil] Request body, shaped as `JitPolicyInput`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitPolicy` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def create(org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/jit-access/policies",
+        path_params: { "orgId" => org_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Delete a policy
+    #
+    # Grants the policy produced still end on time; its pending requests have no
+    # approvers and time out.
+    #
+    # _Requires permission: `org:settings:write`._
+    #
+    # DELETE /api/org/{orgId}/jit-access/policies/{policyId}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param policy_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Ok` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def delete(policy_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "DELETE",
+        path: "/api/org/{orgId}/jit-access/policies/{policyId}",
+        path_params: { "orgId" => org_id, "policyId" => policy_id },
+        request_options: request_options
+      )
+    end
+
+    # Get a policy
+    #
+    # _Requires permission: `access:read`._
+    #
+    # GET /api/org/{orgId}/jit-access/policies/{policyId}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param policy_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitPolicy` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(policy_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/jit-access/policies/{policyId}",
+        path_params: { "orgId" => org_id, "policyId" => policy_id },
+        request_options: request_options
+      )
+    end
+
+    # List just-in-time access policies
+    #
+    # _Requires permission: `access:read`._
+    #
+    # GET /api/org/{orgId}/jit-access/policies
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Array<Hash>] Parsed JSON, shaped as `Array<JitPolicy>` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def list(org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/jit-access/policies",
+        path_params: { "orgId" => org_id },
+        request_options: request_options
+      )
+    end
+
+    # Resolve the caller's provider principal
+    #
+    # Who the grant would go to, matched by the caller's email in the provider.
+    #
+    # _Requires permission: `access:request`._
+    #
+    # GET /api/org/{orgId}/jit-access/policies/{policyId}/principal
+    #
+    # Raises on 403: Not a requester
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param policy_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitPrincipalResolution` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def principal(policy_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/jit-access/policies/{policyId}/principal",
+        path_params: { "orgId" => org_id, "policyId" => policy_id },
+        request_options: request_options
+      )
+    end
+
+    # Principals the caller may pick
+    #
+    # _Requires permission: `access:request`._
+    #
+    # GET /api/org/{orgId}/jit-access/policies/{policyId}/principals
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param policy_id [String]
+    # @param q [String, nil]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Array<Hash>] Parsed JSON, shaped as `Array<JitPrincipalOption & Hash>` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def principals(policy_id:, org_id: nil, q: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/jit-access/policies/{policyId}/principals",
+        path_params: { "orgId" => org_id, "policyId" => policy_id },
+        query: { "q" => q },
+        request_options: request_options
+      )
+    end
+
+    # Replace a policy
+    #
+    # Live grants keep their window; pending requests are decided against the
+    # new approver set.
+    #
+    # _Requires permission: `org:settings:write`._
+    #
+    # PUT /api/org/{orgId}/jit-access/policies/{policyId}
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param policy_id [String]
+    # @param body [Hash, nil] Request body, shaped as `JitPolicyInput`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitPolicy` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def update(policy_id:, org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "PUT",
+        path: "/api/org/{orgId}/jit-access/policies/{policyId}",
+        path_params: { "orgId" => org_id, "policyId" => policy_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.jit_access.requests`
+  class JitAccessRequestsNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # Approve a request
+    #
+    # The caller must be in the policy's approver set at this moment. On
+    # approval the provider grant is made; the response may still read
+    # `granting` when it completes in the background. Audit-logged. Not
+    # available to API keys.
+    #
+    # _Requires permission: `access:read`._
+    #
+    # POST /api/org/{orgId}/jit-access/requests/{requestId}/approve
+    #
+    # Raises on 403: Not allowed
+    #
+    # Raises on 404: Not found
+    #
+    # Raises on 409: Already decided, timed out, or not in a state for this
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_id [String]
+    # @param body [Hash, nil] Request body, shaped as `Hash`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitAccessRequest` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def approve(request_id:, org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/jit-access/requests/{requestId}/approve",
+        path_params: { "orgId" => org_id, "requestId" => request_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Cancel your pending request
+    #
+    # Requester only. Audit-logged. Not available to API keys.
+    #
+    # _Requires permission: `access:request`._
+    #
+    # POST /api/org/{orgId}/jit-access/requests/{requestId}/cancel
+    #
+    # Raises on 403: Not allowed
+    #
+    # Raises on 404: Not found
+    #
+    # Raises on 409: Already decided, timed out, or not in a state for this
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_id [String]
+    # @param body [Hash, nil] Request body, shaped as `Hash`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitAccessRequest` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def cancel(request_id:, org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/jit-access/requests/{requestId}/cancel",
+        path_params: { "orgId" => org_id, "requestId" => request_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Request just-in-time access
+    #
+    # Ask for one of a policy's scope and role pairs for a bounded window.
+    # Approvers are notified over push, Slack (with Approve/Deny buttons) and
+    # Microsoft Teams. Not available to API keys.
+    #
+    # _Requires permission: `access:request`._
+    #
+    # POST /api/org/{orgId}/jit-access/requests
+    #
+    # Raises on 400: Invalid
+    #
+    # Raises on 403: Not a requester under this policy
+    #
+    # Raises on 409: A pending or active request already covers this
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param body [Hash, nil] Request body, shaped as `JitCreateRequest`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitAccessRequest` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def create(org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/jit-access/requests",
+        path_params: { "orgId" => org_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Deny a request
+    #
+    # The caller must be in the policy's approver set. Audit-logged. Not
+    # available to API keys.
+    #
+    # _Requires permission: `access:read`._
+    #
+    # POST /api/org/{orgId}/jit-access/requests/{requestId}/deny
+    #
+    # Raises on 403: Not allowed
+    #
+    # Raises on 404: Not found
+    #
+    # Raises on 409: Already decided, timed out, or not in a state for this
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_id [String]
+    # @param body [Hash, nil] Request body, shaped as `Hash`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitAccessRequest` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def deny(request_id:, org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/jit-access/requests/{requestId}/deny",
+        path_params: { "orgId" => org_id, "requestId" => request_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Extend an active grant
+    #
+    # Approvers only, within the policy maximum for the whole window. A
+    # provider-enforced expiry is moved upstream first. Audit-logged. Not
+    # available to API keys.
+    #
+    # _Requires permission: `access:read`._
+    #
+    # POST /api/org/{orgId}/jit-access/requests/{requestId}/extend
+    #
+    # Raises on 400: Beyond the policy maximum
+    #
+    # Raises on 403: Not an approver
+    #
+    # Raises on 409: Not active
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_id [String]
+    # @param body [Hash, nil] Request body, shaped as `Hash`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitAccessRequest` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def post_org_org_id_jit_access_requests_request_id_extend(
+      request_id:,
+      org_id: nil,
+      body: nil,
+      request_options: nil
+    )
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/jit-access/requests/{requestId}/extend",
+        path_params: { "orgId" => org_id, "requestId" => request_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Get a request
+    #
+    # _Requires permission: `access:read`._
+    #
+    # GET /api/org/{orgId}/jit-access/requests/{requestId}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitAccessRequest` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(request_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/jit-access/requests/{requestId}",
+        path_params: { "orgId" => org_id, "requestId" => request_id },
+        request_options: request_options
+      )
+    end
+
+    # List just-in-time access requests
+    #
+    # Newest first, with caller-relative action flags.
+    #
+    # _Requires permission: `access:read`._
+    #
+    # GET /api/org/{orgId}/jit-access/requests
+    #
+    # Raises on 400: Bad request
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param status [String, nil]
+    # @param mine [String, nil]
+    # @param holding [String, nil] Only rows that may be holding access upstream.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Array<Hash>] Parsed JSON, shaped as `Array<JitAccessRequest>` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def list(org_id: nil, status: nil, mine: nil, holding: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/jit-access/requests",
+        path_params: { "orgId" => org_id },
+        query: { "status" => status, "mine" => mine, "holding" => holding },
+        request_options: request_options
+      )
+    end
+
+    # End a grant early
+    #
+    # Allowed for the holder, an approver, or a member with org:settings:write.
+    # Audit-logged. Not available to API keys.
+    #
+    # POST /api/org/{orgId}/jit-access/requests/{requestId}/revoke
+    #
+    # Raises on 403: Not allowed
+    #
+    # Raises on 404: Not found
+    #
+    # Raises on 409: Already decided, timed out, or not in a state for this
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_id [String]
+    # @param body [Hash, nil] Request body, shaped as `Hash`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `JitAccessRequest` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def revoke(request_id:, org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/jit-access/requests/{requestId}/revoke",
+        path_params: { "orgId" => org_id, "requestId" => request_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.jit_access`
+  class JitAccessNamespace
+    # @return [JitAccessAccountsNamespace] `client.jit_access.accounts`
+    attr_reader :accounts
+    # @return [JitAccessPoliciesNamespace] `client.jit_access.policies`
+    attr_reader :policies
+    # @return [JitAccessRequestsNamespace] `client.jit_access.requests`
+    attr_reader :requests
+
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+      @accounts = JitAccessAccountsNamespace.new(@transport)
+      @policies = JitAccessPoliciesNamespace.new(@transport)
+      @requests = JitAccessRequestsNamespace.new(@transport)
+    end
+  end
+
   # `client.kv`
   class KvNamespace
     # @api private
@@ -19150,6 +19699,225 @@ module Infrawrench
     end
   end
 
+  # `client.slos.get`
+  class SlosGetNamespace
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+    end
+
+    # List SLOs
+    #
+    # Every service-level objective with its last snapshot: SLI, error budget
+    # remaining (as a fraction and in minutes) and burn rates over the alerting
+    # windows.
+    #
+    # _Requires permission: `resources:read`._
+    #
+    # GET /api/org/{orgId}/slos
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `SloList` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get(org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/slos",
+        path_params: { "orgId" => org_id },
+        request_options: request_options
+      )
+    end
+
+    # Read an SLO with its history
+    #
+    # The SLO plus hourly good/total buckets over its window (the SLI and
+    # budget-burndown charts are drawn from these) and the change freeze in
+    # effect, if any.
+    #
+    # _Requires permission: `resources:read`._
+    #
+    # GET /api/org/{orgId}/slos/{sloId}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param slo_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `SloDetail` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def get_org_org_id_slos_slo_id(slo_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/slos/{sloId}",
+        path_params: { "orgId" => org_id, "sloId" => slo_id },
+        request_options: request_options
+      )
+    end
+  end
+
+  # `client.slos`
+  class SlosNamespace
+    # @return [SlosGetNamespace] `client.slos.get`
+    attr_reader :get
+
+    # @api private
+    # @param transport [Transport]
+    def initialize(transport)
+      @transport = transport
+      @get = SlosGetNamespace.new(@transport)
+    end
+
+    # Create an SLO
+    #
+    # Out-of-range inputs are rejected, not clamped. The source must exist in
+    # the organization. The first evaluation runs within one poller tick.
+    # Audit-logged.
+    #
+    # _Requires permission: `resources:write`._
+    #
+    # POST /api/org/{orgId}/slos
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # Raises on 409: Conflict
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param body [Hash, nil] Request body, shaped as `SloCreate`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Slo` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def create(org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/slos",
+        path_params: { "orgId" => org_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # Delete an SLO
+    #
+    # The measured series are untouched. Audit-logged.
+    #
+    # _Requires permission: `resources:write`._
+    #
+    # DELETE /api/org/{orgId}/slos/{sloId}
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param slo_id [String]
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [nil] This endpoint returns no content.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def delete(slo_id:, org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "DELETE",
+        path: "/api/org/{orgId}/slos/{sloId}",
+        path_params: { "orgId" => org_id, "sloId" => slo_id },
+        accept: :empty,
+        request_options: request_options
+      )
+    end
+
+    # Start a change freeze for an SLO
+    #
+    # Acts on the freeze suggestion an exhausted budget makes: creates an
+    # ordinary change freeze named after the SLO, listed and ended like any
+    # other. Needs `freezes:write`.
+    #
+    # _Requires permission: `freezes:write`._
+    #
+    # POST /api/org/{orgId}/slos/{sloId}/freeze
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param slo_id [String]
+    # @param body [Hash, nil] Request body, shaped as `SloFreezeRequest`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `SloActiveFreeze & Hash` — see
+    #   `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def post_org_org_id_slos_slo_id_freeze(slo_id:, org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "POST",
+        path: "/api/org/{orgId}/slos/{sloId}/freeze",
+        path_params: { "orgId" => org_id, "sloId" => slo_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+
+    # List what an SLO can be measured from
+    #
+    # Every synthetic probe, and every synced resource that reported a metric
+    # series in the last week with the series it reported. Feeds the editor's
+    # pickers.
+    #
+    # _Requires permission: `resources:read`._
+    #
+    # GET /api/org/{orgId}/slos/sources
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `SloSources` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def sources(org_id: nil, request_options: nil)
+      @transport.request(
+        http_method: "GET",
+        path: "/api/org/{orgId}/slos/sources",
+        path_params: { "orgId" => org_id },
+        request_options: request_options
+      )
+    end
+
+    # Update an SLO
+    #
+    # Omitted fields keep their value. Changing the source, target or window
+    # resets the snapshot and the alert state. Audit-logged.
+    #
+    # _Requires permission: `resources:write`._
+    #
+    # PUT /api/org/{orgId}/slos/{sloId}
+    #
+    # Raises on 400: Bad request
+    #
+    # Raises on 404: Not found
+    #
+    # Raises on 409: Conflict
+    #
+    # @param org_id [String, nil] Organization id. Defaults to the `org_id` the client was
+    #   constructed with.
+    # @param slo_id [String]
+    # @param body [Hash, nil] Request body, shaped as `SloUpdate`.
+    # @param request_options [Hash, nil] Per-call `:headers`, `:timeout` and `:open_timeout`.
+    # @return [Hash] Parsed JSON, shaped as `Slo` — see `sig/infrawrench/sdk.rbs`.
+    # @raise [Infrawrench::ApiError] On any non-2xx response.
+    def update(slo_id:, org_id: nil, body: nil, request_options: nil)
+      @transport.request(
+        http_method: "PUT",
+        path: "/api/org/{orgId}/slos/{sloId}",
+        path_params: { "orgId" => org_id, "sloId" => slo_id },
+        body: body,
+        request_options: request_options
+      )
+    end
+  end
+
   # `client.sql`
   class SqlNamespace
     # @api private
@@ -21392,6 +22160,8 @@ module Infrawrench
     attr_reader :invoices
     # @return [JiraNamespace] `client.jira`
     attr_reader :jira
+    # @return [JitAccessNamespace] `client.jit_access`
+    attr_reader :jit_access
     # @return [KvNamespace] `client.kv`
     attr_reader :kv
     # @return [LeasesNamespace] `client.leases`
@@ -21462,6 +22232,8 @@ module Infrawrench
     attr_reader :sharing
     # @return [SlackNamespace] `client.slack`
     attr_reader :slack
+    # @return [SlosNamespace] `client.slos`
+    attr_reader :slos
     # @return [SqlNamespace] `client.sql`
     attr_reader :sql
     # @return [SshFanoutNamespace] `client.ssh_fanout`
@@ -21563,6 +22335,7 @@ module Infrawrench
       @invitations = InvitationsNamespace.new(@transport)
       @invoices = InvoicesNamespace.new(@transport)
       @jira = JiraNamespace.new(@transport)
+      @jit_access = JitAccessNamespace.new(@transport)
       @kv = KvNamespace.new(@transport)
       @leases = LeasesNamespace.new(@transport)
       @linear = LinearNamespace.new(@transport)
@@ -21598,6 +22371,7 @@ module Infrawrench
       @shared_consoles = SharedConsolesNamespace.new(@transport)
       @sharing = SharingNamespace.new(@transport)
       @slack = SlackNamespace.new(@transport)
+      @slos = SlosNamespace.new(@transport)
       @sql = SqlNamespace.new(@transport)
       @ssh_fanout = SshFanoutNamespace.new(@transport)
       @ssh_keys = SshKeysNamespace.new(@transport)