infrawrench-sdk 1.98.0 → 1.99.0

data/sig/infrawrench/sdk.rbs

@@ -1,7 +1,7 @@
-# infrawrench-sdk v1.98.0 | MIT | Copyright (c) 2026 Infrawrench Services, Inc.
+# infrawrench-sdk v1.99.0 | MIT | Copyright (c) 2026 Infrawrench Services, Inc.
 # https://github.com/Infrawrench/Infrawrench
 #
-# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.98.0).
+# Generated from the Infrawrench API OpenAPI 3.1 spec (API version 1.99.0).
 #
 # DO NOT EDIT. Regenerate with:
 #   pnpm --filter @infrawrench/web generate:sdk
@@ -138,22 +138,18 @@ module Infrawrench
     "admin" => bool | nil,
     "mfa" => bool | nil,
     "parent" => String | nil,
-    "owner" => access_principal_owner,
+    "owner" => access_principal_owner | nil,
     "revokeActionId" => String | nil
   }
 
-  # Who owns the resource, from the resource-ownership record. Null when nobody
-  # is named.
-  #
   # Spec schema: `AccessPrincipalOwner`.
   type access_principal_owner = {
-      "userId" => String | nil,
-      "displayName" => String,
-      "isLabel" => bool,
-      "ticketUrl" => String | nil,
-      "purpose" => String | nil
-    }
-    | nil
+    "userId" => String | nil,
+    "displayName" => String,
+    "isLabel" => bool,
+    "ticketUrl" => String | nil,
+    "purpose" => String | nil
+  }
 
   # Spec schema: `AccessRequest`.
   type access_request = {
@@ -486,7 +482,7 @@ module Infrawrench
     ?"surface" => "terminal" | "t3-code" | "nibblets",
     ?"serviceAccountIds" => Array[String],
     ?"t3Access" => "t3-connect" | "tailscale",
-    ?"t3Policy" => t3_code_policy & untyped,
+    ?"t3Policy" => untyped,
     ?"t3PolicyRestartPending" => bool,
     ?"serviceInstalls" => Array[agent_service_install],
     ?"agentLinkId" => String | nil,
@@ -500,17 +496,16 @@ module Infrawrench
 
   # Spec schema: `AgentSettings`.
   type agent_settings = {
-      "accountId" => String,
-      "pluginId" => String,
-      "resourceTypeId" => String,
-      "tool" => "codex" | "claude-code",
-      ?"surface" => "terminal" | "t3-code" | "nibblets",
-      "fields" => Hash[String, String],
-      ?"serviceAccountIds" => Array[String],
-      ?"t3Access" => "t3-connect" | "tailscale",
-      ?"t3Policy" => t3_code_policy
-    }
-    | nil
+    "accountId" => String,
+    "pluginId" => String,
+    "resourceTypeId" => String,
+    "tool" => "codex" | "claude-code",
+    ?"surface" => "terminal" | "t3-code" | "nibblets",
+    "fields" => Hash[String, String],
+    ?"serviceAccountIds" => Array[String],
+    ?"t3Access" => "t3-connect" | "tailscale",
+    ?"t3Policy" => untyped
+  }
 
   # Spec schema: `AgentT3PolicyApplyRequest`.
   type agent_t3_policy_apply_request = { "restart" => bool, ?"sessionId" => String }
@@ -776,8 +771,8 @@ module Infrawrench
     "conditions" => Array[alert_condition],
     "destinations" => Array[alert_destination],
     "continueOnMatch" => bool,
-    "quietHours" => quiet_hours,
-    "escalation" => escalation_policy
+    "quietHours" => quiet_hours | nil,
+    "escalation" => escalation_policy | nil
   }
 
   # Spec schema: `AlertRuleInput`.
@@ -788,8 +783,8 @@ module Infrawrench
     ?"conditions" => Array[alert_condition],
     ?"destinations" => Array[alert_destination],
     ?"continueOnMatch" => bool,
-    ?"quietHours" => quiet_hours,
-    ?"escalation" => escalation_policy
+    ?"quietHours" => quiet_hours | nil,
+    ?"escalation" => escalation_policy | nil
   }
 
   # Spec schema: `AlertRulesResponse`.
@@ -852,9 +847,6 @@ module Infrawrench
   # Spec schema: `AllocationRuleInput`.
   type allocation_rule_input = { "costCentreId" => String, "priority" => Integer, "match" => allocation_rule_match }
 
-  # All set fields must match (AND). A rule with no fields is a catch-all that
-  # claims everything reaching it.
-  #
   # Spec schema: `AllocationRuleMatch`.
   type allocation_rule_match = {
     ?"tagKey" => String,
@@ -926,7 +918,7 @@ module Infrawrench
     "action" => String,
     "entityType" => String,
     "entityId" => String,
-    "metadata" => json_object & (Hash[String, untyped] | nil),
+    "metadata" => json_object | nil,
     "ipAddress" => String | nil,
     "createdAt" => String,
     "userName" => String | nil,
@@ -953,7 +945,7 @@ module Infrawrench
   # JSON text.
   #
   # Spec schema: `AwsPricingCell`.
-  type aws_pricing_cell = String | Numeric | bool | nil | nil
+  type aws_pricing_cell = String | Numeric | bool | nil
 
   # Spec schema: `AwsPricingQueryRequest`.
   type aws_pricing_query_request = { "sql" => String, ?"maxRows" => Integer }
@@ -1171,7 +1163,7 @@ module Infrawrench
     "numberIncludesYear" => bool,
     "numberStart" => Integer,
     "taxRates" => Array[billing_profile_tax_rate],
-    "bank" => billing_profile_bank,
+    "bank" => billing_profile_bank | nil,
     "footer" => String | nil,
     "logo" => String | nil,
     "managedAccountIds" => Array[String],
@@ -1182,27 +1174,25 @@ module Infrawrench
 
   # Spec schema: `BillingProfileBank`.
   type billing_profile_bank = {
-      "accountName" => String | nil,
-      "bankName" => String | nil,
-      "iban" => String | nil,
-      "bic" => String | nil,
-      "accountNumber" => String | nil,
-      "routingNumber" => String | nil,
-      "instructions" => String | nil
-    }
-    | nil
+    "accountName" => String | nil,
+    "bankName" => String | nil,
+    "iban" => String | nil,
+    "bic" => String | nil,
+    "accountNumber" => String | nil,
+    "routingNumber" => String | nil,
+    "instructions" => String | nil
+  }
 
   # Spec schema: `BillingProfileBankInput`.
   type billing_profile_bank_input = {
-      ?"accountName" => String | nil,
-      ?"bankName" => String | nil,
-      ?"iban" => String | nil,
-      ?"bic" => String | nil,
-      ?"accountNumber" => String | nil,
-      ?"routingNumber" => String | nil,
-      ?"instructions" => String | nil
-    }
-    | nil
+    ?"accountName" => String | nil,
+    ?"bankName" => String | nil,
+    ?"iban" => String | nil,
+    ?"bic" => String | nil,
+    ?"accountNumber" => String | nil,
+    ?"routingNumber" => String | nil,
+    ?"instructions" => String | nil
+  }
 
   # Spec schema: `BillingProfileInput`.
   type billing_profile_input = {
@@ -1219,7 +1209,7 @@ module Infrawrench
     ?"numberIncludesYear" => bool,
     ?"numberStart" => Integer,
     ?"taxRates" => Array[billing_profile_tax_rate],
-    ?"bank" => billing_profile_bank_input,
+    ?"bank" => billing_profile_bank_input | nil,
     ?"footer" => String | nil,
     ?"logo" => String | nil
   }
@@ -1270,9 +1260,6 @@ module Infrawrench
     ?"managedAccountIds" => Array[String]
   }
 
-  # All set fields must match (AND); a rule with no fields matches all spend.
-  # The same vocabulary allocation rules use, plus chargeType.
-  #
   # Spec schema: `BillingRuleMatch`.
   type billing_rule_match = {
     ?"tagKey" => String,
@@ -1299,11 +1286,15 @@ module Infrawrench
   type billing_rule_tier = { "upTo" => Numeric | nil, "percent" => Numeric }
 
   # Spec schema: `BillingStatus`.
-  type billing_status = { "complimentary" => bool, "subscription" => subscription, "capacity" => capacity_status }
+  type billing_status = {
+    "complimentary" => bool,
+    "subscription" => subscription | nil,
+    "capacity" => capacity_status
+  }
 
   # Spec schema: `BlastRadiusDependant`.
   type blast_radius_dependant = {
-    "node" => blast_radius_node & Hash[String, untyped],
+    "node" => blast_radius_node,
     "depth" => Integer,
     ?"via" => {
       "fieldKey" => String,
@@ -1323,7 +1314,7 @@ module Infrawrench
     "estimatedCost" => Numeric,
     "currency" => String,
     "days" => Integer,
-    "resourceId" => resource_id & (String | nil)
+    "resourceId" => resource_id | nil
   }
 
   # Spec schema: `BlastRadiusGap`.
@@ -1336,21 +1327,18 @@ module Infrawrench
     "reason" => String
   }
 
-  # The resource itself, when it participates in the dependency graph.
-  #
   # Spec schema: `BlastRadiusNode`.
   type blast_radius_node = {
-      "id" => resource_id,
-      "displayName" => String,
-      "pluginId" => String,
-      "pluginDisplayName" => String,
-      "pluginLogoSvg" => String,
-      "resourceTypeId" => String,
-      "resourceTypeLabel" => String,
-      "accountId" => String,
-      "accountName" => String
-    }
-    | nil
+    "id" => resource_id,
+    "displayName" => String,
+    "pluginId" => String,
+    "pluginDisplayName" => String,
+    "pluginLogoSvg" => String,
+    "resourceTypeId" => String,
+    "resourceTypeLabel" => String,
+    "accountId" => String,
+    "accountName" => String
+  }
 
   # Spec schema: `BlastRadiusReference`.
   type blast_radius_reference = {
@@ -1373,7 +1361,7 @@ module Infrawrench
   # Spec schema: `BlastRadiusReport`.
   type blast_radius_report = {
     "resourceId" => resource_id,
-    "resource" => blast_radius_node,
+    "resource" => blast_radius_node | nil,
     "dependants" => Array[blast_radius_dependant],
     "directCount" => Integer,
     "transitiveCount" => Integer,
@@ -1398,26 +1386,39 @@ module Infrawrench
     "periodEnd" => String | nil,
     "actualUsage" => Numeric | nil,
     "forecastUsage" => Numeric | nil,
-    "note" => budget_alert_note
+    "note" => budget_alert_note | nil
   }
 
   # Somebody's explanation of this firing. Null while there is none.
   #
   # Spec schema: `BudgetAlertNote`.
   type budget_alert_note = {
-      "text" => String,
-      "notedAt" => String,
-      "notedByUserId" => String | nil,
-      "notedByName" => String | nil,
-      "annotationId" => String | nil
-    }
-    | nil
+    "text" => String,
+    "notedAt" => String,
+    "notedByUserId" => String | nil,
+    "notedByName" => String | nil,
+    "annotationId" => String | nil
+  }
 
   # Spec schema: `BudgetAlertNoteInput`.
   type budget_alert_note_input = { "note" => String }
 
   # Spec schema: `BudgetAlertNoteResult`.
-  type budget_alert_note_result = budget_alert_event & { "followUp" => { "slack" => Integer, "msTeams" => Integer } }
+  type budget_alert_note_result = {
+    "id" => String,
+    "month" => String,
+    "thresholdType" => "actual" | "forecast",
+    "thresholdPercent" => Integer,
+    "actualAmountCents" => Integer,
+    "forecastAmountCents" => Integer | nil,
+    "triggeredAt" => String,
+    "periodStart" => String | nil,
+    "periodEnd" => String | nil,
+    "actualUsage" => Numeric | nil,
+    "forecastUsage" => Numeric | nil,
+    "note" => budget_alert_note | nil,
+    "followUp" => { "slack" => Integer, "msTeams" => Integer }
+  }
 
   # The basis `actualCents` and `forecastCents` were measured on.
   #
@@ -1426,15 +1427,7 @@ module Infrawrench
 
   # Spec schema: `BudgetCostFilter`.
   type budget_cost_filter = {
-    "dimension" => "provider"
-      | "account"
-      | "service"
-      | "region"
-      | "resource"
-      | "tag"
-      | "charge_type"
-      | "commitment"
-      | "virtual_tag",
+    "dimension" => cost_dimension,
     "op" => cost_filter_operator,
     "values" => Array[String],
     ?"tagKey" => String
@@ -1457,7 +1450,7 @@ module Infrawrench
     "savedFilterId" => String | nil,
     "scenarioModelId" => String | nil,
     "thresholds" => Array[budget_threshold],
-    "costBasis" => budget_cost_basis & untyped,
+    "costBasis" => budget_cost_basis,
     "useAdjustedSpend" => bool,
     "emailRecipients" => alert_email_recipients,
     "createdByUserId" => String | nil,
@@ -1467,7 +1460,7 @@ module Infrawrench
     "measure" => budget_measure,
     "usageUnit" => String | nil,
     "usageAmount" => Numeric | nil,
-    "period" => budget_period,
+    "period" => budget_period | nil,
     "parentBudgetId" => String | nil
   }
 
@@ -1487,12 +1480,12 @@ module Infrawrench
     ?"savedFilterId" => String,
     ?"scenarioModelId" => String,
     "thresholds" => Array[budget_threshold],
-    ?"costBasis" => budget_cost_basis & untyped,
+    ?"costBasis" => budget_cost_basis,
     ?"useAdjustedSpend" => bool,
     ?"measure" => budget_measure,
     ?"usageUnit" => String,
     ?"usageAmount" => Numeric,
-    ?"period" => budget_period & (budget_recurring_period | budget_explicit_periods),
+    ?"period" => budget_period,
     ?"parentBudgetId" => String,
     ?"emailRecipients" => alert_email_recipients
   }
@@ -1515,7 +1508,7 @@ module Infrawrench
   # measured.
   #
   # Spec schema: `BudgetPeriod`.
-  type budget_period = budget_recurring_period | budget_explicit_periods | nil
+  type budget_period = budget_recurring_period | budget_explicit_periods
 
   # Spec schema: `BudgetRecurringPeriod`.
   type budget_recurring_period = {
@@ -1554,13 +1547,13 @@ module Infrawrench
       "thresholdType" => "actual" | "forecast",
       "thresholdPercent" => Integer,
       "triggeredAt" => String,
-      ?"note" => budget_alert_note
+      ?"note" => budget_alert_note | nil
     }],
     "placements" => Array[{ "widgetId" => String, "dashboardId" => String, "dashboardName" => String }],
     "measure" => budget_measure,
     "usageUnit" => String | nil,
     "usageAmount" => Numeric | nil,
-    "period" => budget_period,
+    "period" => budget_period | nil,
     "parentBudgetId" => String | nil,
     "periodStart" => String | nil,
     "periodEnd" => String | nil,
@@ -1588,15 +1581,12 @@ module Infrawrench
     "createdByUserId" => String | nil,
     "createdAt" => String,
     "updatedAt" => String,
-    "coverage" => business_metric_coverage,
-    "importer" => business_metric_importer_summary
+    "coverage" => business_metric_coverage | nil,
+    "importer" => business_metric_importer_summary | nil
   }
 
-  # Null when the metric has no values at all; not an error, but every unit-cost
-  # chart drawn from it is one continuous gap.
-  #
   # Spec schema: `BusinessMetricCoverage`.
-  type business_metric_coverage = { "firstDay" => String, "lastDay" => String, "reportedDays" => Integer } | nil
+  type business_metric_coverage = { "firstDay" => String, "lastDay" => String, "reportedDays" => Integer }
 
   # Spec schema: `BusinessMetricForecastValue`.
   type business_metric_forecast_value = { "day" => String, "value" => Numeric, "updatedAt" => String }
@@ -1656,28 +1646,27 @@ module Infrawrench
 
   # Spec schema: `BusinessMetricImporter`.
   type business_metric_importer = {
-      "id" => String,
-      "metricId" => String,
-      "accountId" => String,
-      "accountName" => String | nil,
-      "pluginId" => String | nil,
-      "sourceLabel" => String | nil,
-      "params" => Hash[String, String],
-      "schedule" => business_metric_import_schedule,
-      "backfillDays" => Integer,
-      "timezone" => String,
-      "aggregation" => business_metric_import_aggregation,
-      "enabled" => bool,
-      "nextRunAt" => String | nil,
-      "lastRunAt" => String | nil,
-      "lastStatus" => "success" | "error" | nil,
-      "lastError" => String | nil,
-      "consecutiveFailures" => Integer,
-      "createdByUserId" => String | nil,
-      "createdAt" => String,
-      "updatedAt" => String
-    }
-    | nil
+    "id" => String,
+    "metricId" => String,
+    "accountId" => String,
+    "accountName" => String | nil,
+    "pluginId" => String | nil,
+    "sourceLabel" => String | nil,
+    "params" => Hash[String, String],
+    "schedule" => business_metric_import_schedule,
+    "backfillDays" => Integer,
+    "timezone" => String,
+    "aggregation" => business_metric_import_aggregation,
+    "enabled" => bool,
+    "nextRunAt" => String | nil,
+    "lastRunAt" => String | nil,
+    "lastStatus" => "success" | "error" | nil,
+    "lastError" => String | nil,
+    "consecutiveFailures" => Integer,
+    "createdByUserId" => String | nil,
+    "createdAt" => String,
+    "updatedAt" => String
+  }
 
   # Spec schema: `BusinessMetricImporterInput`.
   type business_metric_importer_input = {
@@ -1686,25 +1675,21 @@ module Infrawrench
     ?"schedule" => business_metric_import_schedule & untyped,
     ?"backfillDays" => Integer,
     ?"timezone" => String,
-    ?"aggregation" => business_metric_import_aggregation,
+    ?"aggregation" => business_metric_import_aggregation & untyped,
     ?"enabled" => bool
   }
 
-  # The scheduled importer feeding this metric, or null when its values are only
-  # pushed.
-  #
   # Spec schema: `BusinessMetricImporterSummary`.
   type business_metric_importer_summary = {
-      "accountId" => String,
-      "accountName" => String | nil,
-      "pluginId" => String | nil,
-      "sourceLabel" => String | nil,
-      "enabled" => bool,
-      "lastRunAt" => String | nil,
-      "lastStatus" => "success" | "error" | nil,
-      "lastError" => String | nil
-    }
-    | nil
+    "accountId" => String,
+    "accountName" => String | nil,
+    "pluginId" => String | nil,
+    "sourceLabel" => String | nil,
+    "enabled" => bool,
+    "lastRunAt" => String | nil,
+    "lastStatus" => "success" | "error" | nil,
+    "lastError" => String | nil
+  }
 
   # Spec schema: `BusinessMetricInput`.
   type business_metric_input = {
@@ -1741,22 +1726,7 @@ module Infrawrench
     "key" => String,
     "values" => Array[String],
     "truncated" => bool,
-    "mapping" => business_metric_label_target
-      & ({
-          "kind" => "dimension",
-          "dimension" => "provider"
-            | "account"
-            | "service"
-            | "region"
-            | "resource"
-            | "tag"
-            | "charge_type"
-            | "commitment"
-            | "virtual_tag",
-          ?"tagKey" => String
-        }
-        | { "kind" => "cost_centre" }
-        | nil)
+    "mapping" => business_metric_label_target | nil
   }
 
   # Where a label's values live on the cost side. A `dimension` target matches
@@ -1764,19 +1734,7 @@ module Infrawrench
   # id or, case-insensitively, by name.
   #
   # Spec schema: `BusinessMetricLabelTarget`.
-  type business_metric_label_target = {
-      "kind" => "dimension",
-      "dimension" => "provider"
-        | "account"
-        | "service"
-        | "region"
-        | "resource"
-        | "tag"
-        | "charge_type"
-        | "commitment"
-        | "virtual_tag",
-      ?"tagKey" => String
-    }
+  type business_metric_label_target = { "kind" => "dimension", "dimension" => cost_dimension, ?"tagKey" => String }
     | { "kind" => "cost_centre" }
 
   # A value's labels, e.g. `{ "customer": "acme", "plan": "pro" }`. At most 8,
@@ -1790,15 +1748,7 @@ module Infrawrench
 
   # Spec schema: `BusinessMetricScopeTerm`.
   type business_metric_scope_term = {
-    "dimension" => "provider"
-      | "account"
-      | "service"
-      | "region"
-      | "resource"
-      | "tag"
-      | "charge_type"
-      | "commitment"
-      | "virtual_tag",
+    "dimension" => cost_dimension,
     "op" => cost_filter_operator,
     "values" => Array[String],
     ?"tagKey" => String
@@ -1985,22 +1935,19 @@ module Infrawrench
     "generatedAt" => String
   }
 
-  # Monthly (730 h) footprint, or null.
-  #
   # Spec schema: `CarbonFootprint`.
   type carbon_footprint = {
-      "vcpus" => Numeric,
-      "count" => Integer,
-      "region" => String,
-      "grid" => String,
-      "gridIntensity" => Numeric,
-      "gridZone" => String,
-      "gridBasis" => "ccf" | "ember-2024",
-      "pue" => Numeric,
-      "kwh" => Numeric,
-      "kgCo2e" => Numeric
-    }
-    | nil
+    "vcpus" => Numeric,
+    "count" => Integer,
+    "region" => String,
+    "grid" => String,
+    "gridIntensity" => Numeric,
+    "gridZone" => String,
+    "gridBasis" => "ccf" | "ember-2024",
+    "pue" => Numeric,
+    "kwh" => Numeric,
+    "kgCo2e" => Numeric
+  }
 
   # Spec schema: `CarbonGroup`.
   type carbon_group = {
@@ -2061,8 +2008,8 @@ module Infrawrench
     "windowDays" => Integer,
     "effectiveWindowDays" => Integer,
     "eventDay" => String,
-    "before" => change_cost_impact_window,
-    "after" => change_cost_impact_window,
+    "before" => change_cost_impact_window | nil,
+    "after" => change_cost_impact_window | nil,
     "series" => Array[change_cost_impact_series],
     "confidence" => change_cost_impact_confidence,
     "reasons" => Array[change_cost_impact_reason],
@@ -2127,7 +2074,7 @@ module Infrawrench
   type change_cost_impact_status = "measured" | "insufficient_data" | "unknown"
 
   # Spec schema: `ChangeCostImpactWindow`.
-  type change_cost_impact_window = { "from" => String, "to" => String } | nil
+  type change_cost_impact_window = { "from" => String, "to" => String }
 
   # Spec schema: `ChangeCostImpactsRequest`.
   type change_cost_impacts_request = { "changeIds" => Array[String], ?"windowDays" => Integer, ?"costBasis" => change_cost_basis }
@@ -2166,7 +2113,7 @@ module Infrawrench
   type change_freeze_input = { "name" => String, ?"reason" => String, ?"startsAt" => String, ?"endsAt" => String }
 
   # Spec schema: `ChangeFreezeStatus`.
-  type change_freeze_status = { "freeze" => change_freeze & (Hash[String, untyped] | nil) }
+  type change_freeze_status = { "freeze" => change_freeze | nil }
 
   # Spec schema: `ChatAskQuestionAnswer`.
   type chat_ask_question_answer = { "questionId" => String, ?"optionId" => String, ?"text" => String }
@@ -2177,9 +2124,145 @@ module Infrawrench
   # Spec schema: `ChatAskQuestionResult`.
   type chat_ask_question_result = { "ok" => bool, "allResolved" => bool }
 
+  # Spec schema: `ChatContentBlock`.
+  type chat_content_block = {
+      "type" => "text",
+      "text" => String,
+      ?"signature" => String,
+      ?"provider" => "anthropic" | "gemini"
+    }
+    | {
+      "type" => "thinking",
+      "thinking" => String,
+      "signature" => String,
+      ?"provider" => "anthropic" | "gemini"
+    }
+    | {
+      "type" => "tool_use",
+      "id" => String,
+      "name" => String,
+      "input" => Hash[String, untyped],
+      ?"signature" => String,
+      ?"provider" => "anthropic" | "gemini"
+    }
+    | {
+      "type" => "tool_result",
+      "tool_use_id" => String,
+      "content" => String | Array[{ "type" => "text", "text" => String }],
+      ?"is_error" => bool
+    }
+
+  # Spec schema: `ChatConversation`.
+  type chat_conversation = {
+    "id" => String,
+    "organizationId" => String,
+    "userId" => String | nil,
+    "costCanvasId" => String | nil,
+    "title" => String,
+    "model" => String,
+    "systemPrompt" => String | nil,
+    "archivedAt" => String | nil,
+    "createdAt" => String,
+    "updatedAt" => String
+  }
+
+  # Spec schema: `ChatConversationCreateInput`.
+  type chat_conversation_create_input = {
+    ?"model" => "gemini-3.7-flash" | "claude-sonnet-5" | "claude-opus-5" | "claude-haiku-4-5",
+    ?"title" => String,
+    ?"systemPrompt" => String
+  }
+
+  # Spec schema: `ChatConversationCreated`.
+  type chat_conversation_created = { "id" => String }
+
+  # Spec schema: `ChatConversationDetail`.
+  type chat_conversation_detail = {
+    "conversation" => chat_conversation,
+    "messages" => Array[chat_message],
+    "pendingActions" => Array[chat_pending_action],
+    "pendingSecretRequests" => Array[chat_pending_secret_request]
+  }
+
+  # Spec schema: `ChatConversationList`.
+  type chat_conversation_list = { "conversations" => Array[chat_conversation_summary] }
+
+  # Spec schema: `ChatConversationModelInput`.
+  type chat_conversation_model_input = { "model" => "gemini-3.7-flash" | "claude-sonnet-5" | "claude-opus-5" | "claude-haiku-4-5" }
+
+  # Spec schema: `ChatConversationSummary`.
+  type chat_conversation_summary = {
+    "id" => String,
+    "title" => String,
+    "model" => String,
+    "createdAt" => String,
+    "updatedAt" => String
+  }
+
+  # Spec schema: `ChatMessage`.
+  type chat_message = {
+    "id" => String,
+    "conversationId" => String,
+    "role" => "user" | "assistant",
+    "content" => Array[chat_content_block],
+    "inputTokens" => Integer,
+    "outputTokens" => Integer,
+    "cacheReadTokens" => Integer,
+    "cacheWriteTokens" => Integer,
+    "stopReason" => String | nil,
+    "createdAt" => String
+  }
+
+  # Spec schema: `ChatPendingAction`.
+  type chat_pending_action = {
+    "id" => String,
+    "conversationId" => String,
+    "messageId" => String,
+    "toolUseId" => String,
+    "toolName" => String,
+    "toolInput" => Hash[String, untyped],
+    "status" => "pending" | "approved" | "rejected" | "executed" | "errored",
+    "result" => String | nil,
+    "isError" => bool,
+    "summary" => String | nil,
+    "resolvedAt" => String | nil,
+    "createdAt" => String
+  }
+
+  # Spec schema: `ChatPendingDecisionInput`.
+  type chat_pending_decision_input = { "action" => "approve" | "reject", ?"reason" => String }
+
+  # Spec schema: `ChatPendingDecisionResult`.
+  type chat_pending_decision_result = { "ok" => bool, "allResolved" => bool }
+
+  # Spec schema: `ChatPendingSecretRequest`.
+  type chat_pending_secret_request = {
+    "id" => String,
+    "conversationId" => String,
+    "messageId" => String,
+    "toolUseId" => String,
+    "secretId" => String | nil,
+    "name" => String,
+    "title" => String | nil,
+    "description" => String | nil,
+    "status" => "pending" | "submitting" | "stored",
+    "resolvedAt" => String | nil,
+    "createdAt" => String,
+    "updatedAt" => String
+  }
+
   # Spec schema: `ChatSecretRequestResult`.
   type chat_secret_request_result = { "ok" => bool, "allResolved" => bool }
 
+  # Spec schema: `ChatSpendStatus`.
+  type chat_spend_status = {
+    "monthToDateMicros" => Numeric,
+    "monthlyCapMicros" => Numeric | nil,
+    "exceeded" => bool,
+    "freeTier" => bool,
+    "complimentary" => bool
+  }
+
   # Spec schema: `ChildResourceRef`.
   type child_resource_ref = {
     "id" => resource_id,
@@ -2320,7 +2403,7 @@ module Infrawrench
   }
 
   # Spec schema: `ComplianceControlOwner`.
-  type compliance_control_owner = { "userId" => String | nil, "displayName" => String, "isLabel" => bool } | nil
+  type compliance_control_owner = { "userId" => String | nil, "displayName" => String, "isLabel" => bool }
 
   # Spec schema: `ComplianceControlRow`.
   type compliance_control_row = {
@@ -2333,7 +2416,7 @@ module Infrawrench
     "missingSources" => Array[String],
     "applicable" => bool,
     "justification" => String | nil,
-    "owner" => compliance_control_owner,
+    "owner" => compliance_control_owner | nil,
     "notes" => String | nil,
     "settingUpdatedAt" => String | nil
   }
@@ -2441,7 +2524,7 @@ module Infrawrench
   # Spec schema: `ComplianceStatus`.
   type compliance_status = {
     "framework" => compliance_framework_summary,
-    "period" => { "from" => String, "to" => String },
+    "period" => { "from" => untyped, "to" => untyped },
     "controls" => Array[compliance_control_row],
     "sources" => Array[compliance_evidence_source_result],
     "counts" => compliance_status_counts,
@@ -2552,16 +2635,7 @@ module Infrawrench
     "id" => String,
     "name" => String,
     "filters" => Array[cost_alert_filter],
-    "groupBy" => "provider"
-        | "account"
-        | "service"
-        | "region"
-        | "resource"
-        | "tag"
-        | "charge_type"
-        | "commitment"
-        | "virtual_tag"
-      | nil,
+    "groupBy" => cost_dimension | nil,
     "groupByTagKey" => String | nil,
     "cadence" => cost_change_cadence,
     "thresholdPercent" => Integer | nil,
@@ -2597,15 +2671,7 @@ module Infrawrench
 
   # Spec schema: `CostAlertFilter`.
   type cost_alert_filter = {
-    "dimension" => "provider"
-      | "account"
-      | "service"
-      | "region"
-      | "resource"
-      | "tag"
-      | "charge_type"
-      | "commitment"
-      | "virtual_tag",
+    "dimension" => cost_dimension,
     "op" => cost_filter_operator,
     "values" => Array[String],
     ?"tagKey" => String
@@ -2615,16 +2681,7 @@ module Infrawrench
   type cost_alert_input = {
     "name" => String,
     ?"filters" => Array[cost_alert_filter],
-    ?"groupBy" => "provider"
-        | "account"
-        | "service"
-        | "region"
-        | "resource"
-        | "tag"
-        | "charge_type"
-        | "commitment"
-        | "virtual_tag"
-      | nil,
+    ?"groupBy" => cost_dimension | nil,
     ?"groupByTagKey" => String,
     "cadence" => cost_change_cadence,
     ?"thresholdPercent" => Integer | nil,
@@ -2678,7 +2735,7 @@ module Infrawrench
         "annotationId" => String | nil
       }
       | nil,
-    "feedback" => cost_anomaly_feedback,
+    "feedback" => cost_anomaly_feedback | nil,
     "suppressionId" => String | nil
   }
 
@@ -2710,20 +2767,19 @@ module Infrawrench
   #
   # Spec schema: `CostAnomalyFeedback`.
   type cost_anomaly_feedback = {
-      "verdict" => "expected" | "unexpected",
-      "reason" => cost_anomaly_feedback_reason,
-      "note" => String | nil,
-      "at" => String,
-      "byUserId" => String | nil,
-      "byName" => String | nil,
-      "suppressionId" => String | nil
-    }
-    | nil
+    "verdict" => "expected" | "unexpected",
+    "reason" => cost_anomaly_feedback_reason | nil,
+    "note" => String | nil,
+    "at" => String,
+    "byUserId" => String | nil,
+    "byName" => String | nil,
+    "suppressionId" => String | nil
+  }
 
   # Spec schema: `CostAnomalyFeedbackInput`.
   type cost_anomaly_feedback_input = {
     "verdict" => "expected" | "unexpected",
-    ?"reason" => cost_anomaly_feedback_reason,
+    ?"reason" => cost_anomaly_feedback_reason | nil,
     ?"note" => String | nil,
     ?"explain" => bool,
     ?"suppress" => {
@@ -2737,10 +2793,9 @@ module Infrawrench
 
   # Spec schema: `CostAnomalyFeedbackReason`.
   type cost_anomaly_feedback_reason = "planned_launch" | "migration" | "seasonal" | "pricing_change" | "data_issue" | "other"
-    | nil
 
   # Spec schema: `CostAnomalyFeedbackResult`.
-  type cost_anomaly_feedback_result = { "anomaly" => cost_anomaly, "suppression" => cost_anomaly_suppression }
+  type cost_anomaly_feedback_result = { "anomaly" => cost_anomaly, "suppression" => cost_anomaly_suppression | nil }
 
   # Spec schema: `CostAnomalyPrecisionReport`.
   type cost_anomaly_precision_report = {
@@ -2760,7 +2815,7 @@ module Infrawrench
       "unexpected" => Integer,
       "precision" => Numeric | nil
     },
-    "reasons" => Array[{ "reason" => cost_anomaly_feedback_reason & String, "count" => Integer }]
+    "reasons" => Array[{ "reason" => cost_anomaly_feedback_reason, "count" => Integer }]
   }
 
   # How the suppression repeats. `one_off` covers every day from `startsOn` to
@@ -2795,34 +2850,41 @@ module Infrawrench
     "newSourceMinCents" => Integer,
     "smsAlerts" => "off" | "new_source" | "all",
     ?"feedbackTuning" => bool,
-    ?"emailRecipients" => alert_email_recipients
+    ?"emailRecipients" => alert_email_recipients & untyped
   }
 
   # Spec schema: `CostAnomalySettingsView`.
-  type cost_anomaly_settings_view = cost_anomaly_settings & { "smsConfigured" => bool }
+  type cost_anomaly_settings_view = {
+    "sigmas" => Numeric,
+    "minDeltaCents" => Integer,
+    "newSourceMinCents" => Integer,
+    "smsAlerts" => "off" | "new_source" | "all",
+    ?"feedbackTuning" => bool,
+    ?"emailRecipients" => alert_email_recipients & untyped,
+    "smsConfigured" => bool
+  }
 
   # Spec schema: `CostAnomalySuppression`.
   type cost_anomaly_suppression = {
-      "id" => String,
-      "scope" => cost_anomaly_suppression_scope,
-      "scopeKey" => String,
-      "tagKey" => String | nil,
-      "scopeLabel" => String | nil,
-      "recurrence" => cost_anomaly_recurrence,
-      "anchorDay" => String,
-      "startsOn" => String,
-      "expiresOn" => String,
-      "reason" => cost_anomaly_feedback_reason,
-      "note" => String | nil,
-      "sourceAnomalyId" => String | nil,
-      "createdByUserId" => String | nil,
-      "createdByName" => String | nil,
-      "createdAt" => String,
-      "updatedAt" => String,
-      "active" => bool,
-      "suppressedCount" => Integer
-    }
-    | nil
+    "id" => String,
+    "scope" => cost_anomaly_suppression_scope,
+    "scopeKey" => String,
+    "tagKey" => String | nil,
+    "scopeLabel" => String | nil,
+    "recurrence" => cost_anomaly_recurrence,
+    "anchorDay" => String,
+    "startsOn" => String,
+    "expiresOn" => String,
+    "reason" => cost_anomaly_feedback_reason | nil,
+    "note" => String | nil,
+    "sourceAnomalyId" => String | nil,
+    "createdByUserId" => String | nil,
+    "createdByName" => String | nil,
+    "createdAt" => String,
+    "updatedAt" => String,
+    "active" => bool,
+    "suppressedCount" => Integer
+  }
 
   # Spec schema: `CostAnomalySuppressionInput`.
   type cost_anomaly_suppression_input = {
@@ -2833,7 +2895,7 @@ module Infrawrench
     "anchorDay" => String,
     ?"startsOn" => String,
     "expiresOn" => String,
-    ?"reason" => cost_anomaly_feedback_reason,
+    ?"reason" => cost_anomaly_feedback_reason | nil,
     ?"note" => String | nil
   }
 
@@ -2894,7 +2956,49 @@ module Infrawrench
       "metric" => cost_canvas_kpi_metric,
       ?"comparePreviousPeriod" => bool
     }
-    | { "id" => String, "kind" => "chart", "title" => String, "config" => json_object }
+    | {
+      "id" => String,
+      "kind" => "chart",
+      "title" => String,
+      "config" => {
+        "version" => Numeric,
+        "chartType" => "stacked_bar" | "multi_bar" | "line" | "area" | "pie" | "donut" | "table",
+        "binning" => cost_binning,
+        "dateRange" => cost_date_range,
+        "groupBy" => "none"
+          | "provider"
+          | "account"
+          | "service"
+          | "region"
+          | "resource"
+          | "tag"
+          | "charge_type"
+          | "commitment"
+          | "virtual_tag",
+        ?"groupByTagKey" => String,
+        ?"filters" => Array[cost_report_filter],
+        ?"savedFilterId" => String,
+        ?"topN" => Integer,
+        ?"comparePreviousPeriod" => bool,
+        ?"showForecast" => bool,
+        ?"scenarioModelId" => String,
+        ?"costBasis" => "cash" | "amortized" | "blended",
+        ?"unitCostMetricId" => String,
+        ?"unitCostMode" => unit_cost_mode & untyped,
+        ?"unitCostScale" => Numeric,
+        ?"unitCostUsageUnit" => String,
+        ?"unitCostLabelFilters" => Array[unit_cost_label_filter],
+        ?"unitCostGroupByLabel" => String,
+        ?"adjusted" => bool,
+        ?"measure" => cost_measure,
+        ?"usageUnit" => String,
+        ?"cumulative" => bool,
+        ?"xAxis" => cost_dimension,
+        ?"xAxisTagKey" => String,
+        ?"segmentByDate" => bool,
+        ?"comparisonStyle" => "line" | "bars"
+      }
+    }
     | { "id" => String, "kind" => "table", "title" => String, "query" => cost_canvas_table_query }
     | { "id" => String, "kind" => "budgets", "title" => String, ?"budgetIds" => Array[String] }
     | {
@@ -2916,7 +3020,7 @@ module Infrawrench
   # Spec schema: `CostCanvasKpiMetric`.
   type cost_canvas_kpi_metric = {
       "type" => "spend",
-      "dateRange" => cost_date_range & untyped,
+      "dateRange" => cost_date_range,
       ?"filters" => Array[cost_report_filter],
       ?"savedFilterId" => String,
       ?"costBasis" => "cash" | "amortized" | "blended",
@@ -2925,7 +3029,7 @@ module Infrawrench
     | {
       "type" => "unit_cost",
       "businessMetricId" => String,
-      "dateRange" => cost_date_range & untyped,
+      "dateRange" => cost_date_range,
       ?"filters" => Array[cost_report_filter],
       ?"savedFilterId" => String,
       ?"costBasis" => "cash" | "amortized" | "blended"
@@ -2973,16 +3077,12 @@ module Infrawrench
     "blocks" => Array[json_object]
   }
 
-  # The structured query spec. It holds queries, never numbers: running the
-  # canvas re-executes every block, so a refresh needs no model call. Validated
-  # strictly on write; there is no field that takes a query string or SQL.
-  #
   # Spec schema: `CostCanvasSpec`.
   type cost_canvas_spec = { "version" => Numeric, "blocks" => Array[cost_canvas_block] }
 
   # Spec schema: `CostCanvasTableQuery`.
   type cost_canvas_table_query = {
-    "dateRange" => cost_date_range & untyped,
+    "dateRange" => cost_date_range,
     "binning" => "none" | "daily" | "weekly" | "monthly",
     "groupBy" => "provider"
       | "account"
@@ -2991,7 +3091,8 @@ module Infrawrench
       | "resource"
       | "tag"
       | "charge_type"
-      | "commitment",
+      | "commitment"
+      | "virtual_tag",
     ?"groupByTagKey" => String,
     ?"filters" => Array[cost_report_filter],
     ?"savedFilterId" => String,
@@ -3037,9 +3138,9 @@ module Infrawrench
     | "support"
     | "other"
 
-  # The window. Absent follows the source (a report's own range, the last 30
-  # days for savings); refused for a budget and for commitment coverage and
-  # utilization.
+  # A relative preset resolves against today every time the report runs, so a
+  # saved report keeps meaning 'the last 30 days'; an absolute range pins it to
+  # fixed dates.
   #
   # Spec schema: `CostDateRange`.
   type cost_date_range = {
@@ -3079,18 +3180,17 @@ module Infrawrench
     "unitCostWindowDays" => Integer,
     "unitCostMinReportedDays" => Integer,
     "unitCostMinSpendCents" => Integer,
-    ?"emailRecipients" => alert_email_recipients
+    ?"emailRecipients" => alert_email_recipients & untyped
   }
 
   # Spec schema: `CostEstimate`.
   type cost_estimate = {
-      "monthlyAmount" => Numeric,
-      "currency" => String,
-      "lineItems" => Array[cost_estimate_line_item],
-      ?"partial" => bool,
-      ?"notes" => Array[String]
-    }
-    | nil
+    "monthlyAmount" => Numeric,
+    "currency" => String,
+    "lineItems" => Array[cost_estimate_line_item],
+    ?"partial" => bool,
+    ?"notes" => Array[String]
+  }
 
   # Spec schema: `CostEstimateLineItem`.
   type cost_estimate_line_item = {
@@ -3156,15 +3256,7 @@ module Infrawrench
 
   # Spec schema: `CostExportFilter`.
   type cost_export_filter = {
-    "dimension" => "provider"
-      | "account"
-      | "service"
-      | "region"
-      | "resource"
-      | "tag"
-      | "charge_type"
-      | "commitment"
-      | "virtual_tag",
+    "dimension" => cost_dimension,
     "op" => cost_filter_operator,
     "values" => Array[String],
     ?"tagKey" => String
@@ -3223,7 +3315,7 @@ module Infrawrench
       ?"savedFilterId" => String,
       ?"chargeTypes" => Array[cost_charge_type],
       ?"costBasis" => cost_basis,
-      ?"dimensions" => Array["provider" | "account" | "service" | "region" | "resource" | "charge_type" | "commitment"],
+      ?"dimensions" => Array[String],
       ?"tagKeys" => Array[String],
       ?"virtualTagKeys" => Array[String]
     },
@@ -3250,15 +3342,7 @@ module Infrawrench
   # Spec schema: `CostExportQuery`.
   type cost_export_query = {
     "version" => Numeric,
-    "dimensions" => Array["provider"
-      | "account"
-      | "service"
-      | "region"
-      | "resource"
-      | "tag"
-      | "charge_type"
-      | "commitment"
-      | "virtual_tag"],
+    "dimensions" => Array[cost_dimension],
     "tagKeys" => Array[String],
     ?"virtualTagKeys" => Array[String],
     "filters" => Array[cost_export_filter],
@@ -3369,13 +3453,13 @@ module Infrawrench
   # badly a straight line fits the last 30 days.
   #
   # Spec schema: `CostForecastConfidenceLevel`.
-  type cost_forecast_confidence_level = Numeric | Numeric | Numeric
+  type cost_forecast_confidence_level = Numeric
 
   # Spec schema: `CostForecastInput`.
   type cost_forecast_input = {
     "name" => String,
     ?"description" => String | nil,
-    "scenarioModelIds" => Array[String],
+    ?"scenarioModelIds" => Array[String],
     ?"driverMetricId" => String | nil,
     ?"isDefault" => bool
   }
@@ -3455,7 +3539,7 @@ module Infrawrench
     "version" => Numeric,
     "chartType" => "stacked_bar" | "multi_bar" | "line" | "area" | "pie" | "donut" | "table",
     "binning" => cost_binning,
-    "dateRange" => cost_date_range & untyped,
+    "dateRange" => cost_date_range,
     "groupBy" => "none"
       | "provider"
       | "account"
@@ -3474,20 +3558,20 @@ module Infrawrench
     ?"showForecast" => bool,
     ?"scenarioModelId" => String,
     ?"costBasis" => "cash" | "amortized" | "blended",
+    ?"unitCostMetricId" => String,
+    ?"unitCostMode" => unit_cost_mode & untyped,
+    ?"unitCostScale" => Numeric,
+    ?"unitCostUsageUnit" => String,
+    ?"unitCostLabelFilters" => Array[unit_cost_label_filter],
+    ?"unitCostGroupByLabel" => String,
+    ?"adjusted" => bool,
     ?"measure" => cost_measure,
     ?"usageUnit" => String,
     ?"cumulative" => bool,
-    ?"xAxis" => cost_dimension & untyped,
+    ?"xAxis" => cost_dimension,
     ?"xAxisTagKey" => String,
     ?"segmentByDate" => bool,
-    ?"comparisonStyle" => "line" | "bars",
-    ?"unitCostMetricId" => String,
-    ?"unitCostMode" => "unit_cost" | "margin" | "usage_unit_cost" | "raw_metric",
-    ?"unitCostScale" => Numeric | Numeric | Numeric | Numeric | Numeric,
-    ?"unitCostUsageUnit" => String,
-    ?"unitCostLabelFilters" => Array[{ "key" => String, "op" => "in" | "not_in", "values" => Array[String] }],
-    ?"unitCostGroupByLabel" => String,
-    ?"adjusted" => bool
+    ?"comparisonStyle" => "line" | "bars"
   }
 
   # What the Y axis sums. `cost` (the default) is money per currency. `usage`
@@ -3533,11 +3617,12 @@ module Infrawrench
     ?"scenarioModelId" => String,
     ?"costBasis" => cost_basis,
     ?"chargeTypes" => Array[cost_charge_type],
+    ?"displayCurrency" => String,
     ?"adjusted" => bool,
     ?"measure" => cost_measure,
     ?"usageUnit" => String,
     ?"cumulative" => bool,
-    ?"xAxis" => cost_dimension & untyped,
+    ?"xAxis" => cost_dimension,
     ?"xAxisTagKey" => String,
     ?"segmentByDate" => bool
   }
@@ -3592,17 +3677,20 @@ module Infrawrench
   }
 
   # Spec schema: `CostReportAnomalyAlert`.
-  type cost_report_anomaly_alert = cost_report_anomaly_alert_input
-    & {
-      "id" => String,
-      "reportId" => String,
-      "reportName" => String,
-      "createdAt" => String,
-      "updatedAt" => String,
-      "lastEvaluatedAt" => String | nil,
-      "lastError" => String | nil,
-      "recent" => Array[cost_report_anomaly]
-    }
+  type cost_report_anomaly_alert = {
+    "enabled" => bool,
+    "sigmas" => Numeric,
+    "minDeltaCents" => Integer,
+    "destinations" => Array[alert_destination],
+    "id" => String,
+    "reportId" => String,
+    "reportName" => String,
+    "createdAt" => String,
+    "updatedAt" => String,
+    "lastEvaluatedAt" => String | nil,
+    "lastError" => String | nil,
+    "recent" => Array[cost_report_anomaly]
+  }
 
   # Spec schema: `CostReportAnomalyAlertInput`.
   type cost_report_anomaly_alert_input = {
@@ -3656,15 +3744,7 @@ module Infrawrench
 
   # Spec schema: `CostReportFilter`.
   type cost_report_filter = {
-    "dimension" => "provider"
-      | "account"
-      | "service"
-      | "region"
-      | "resource"
-      | "tag"
-      | "charge_type"
-      | "commitment"
-      | "virtual_tag",
+    "dimension" => cost_dimension,
     "op" => cost_filter_operator,
     "values" => Array[String],
     ?"tagKey" => String
@@ -3727,14 +3807,17 @@ module Infrawrench
     "label" => String,
     "kind" => "one_off" | "recurring" | "rate_change",
     "startDate" => String,
-    "endDate" => String | nil,
-    "amountCents" => Integer | nil,
-    "currency" => String | nil,
-    "period" => "daily" | "monthly" | nil,
-    "percent" => Numeric | nil,
-    "scope" => Array[cost_scenario_scope_term]
+    ?"endDate" => String | nil,
+    ?"amountCents" => Integer | nil,
+    ?"currency" => String | nil,
+    ?"period" => "daily" | "monthly" | nil,
+    ?"percent" => Numeric | nil,
+    ?"scope" => Array[cost_scenario_scope_term]
   }
 
+  # Spec schema: `CostScenarioInUse`.
+  type cost_scenario_in_use = { "error" => String, "referents" => Array[cost_scenario_referent] }
+
   # Spec schema: `CostScenarioModel`.
   type cost_scenario_model = {
     "id" => String,
@@ -3752,9 +3835,12 @@ module Infrawrench
     "name" => String,
     ?"description" => String,
     "currency" => String,
-    "adjustments" => Array[cost_scenario_adjustment]
+    ?"adjustments" => Array[cost_scenario_adjustment]
   }
 
+  # Spec schema: `CostScenarioNameConflict`.
+  type cost_scenario_name_conflict = { "error" => String }
+
   # Spec schema: `CostScenarioReferent`.
   type cost_scenario_referent = {
     "kind" => "budget" | "cost_report" | "cost_graph_widget" | "cost_forecast",
@@ -3783,15 +3869,7 @@ module Infrawrench
 
   # Spec schema: `CostScenarioScopeTerm`.
   type cost_scenario_scope_term = {
-    "dimension" => "provider"
-      | "account"
-      | "service"
-      | "region"
-      | "resource"
-      | "tag"
-      | "charge_type"
-      | "commitment"
-      | "virtual_tag",
+    "dimension" => cost_dimension,
     "op" => cost_filter_operator,
     "values" => Array[String],
     ?"tagKey" => String
@@ -3856,7 +3934,7 @@ module Infrawrench
 
   # Spec schema: `CreateAccountRequest`.
   type create_account_request = {
-    "pluginId" => String,
+    "pluginId" => plugin_id,
     "displayName" => String,
     "credentials" => Hash[String, String],
     ?"bastionId" => String | nil
@@ -3870,7 +3948,7 @@ module Infrawrench
     ?"repo" => String,
     ?"projectName" => String,
     ?"workspaceName" => String,
-    "settings" => agent_settings & Hash[String, untyped],
+    "settings" => agent_settings,
     ?"nibbletsLink" => { "scopes" => Array[String] }
   }
 
@@ -3953,7 +4031,7 @@ module Infrawrench
   }
 
   # Spec schema: `CreateResourceResponse`.
-  type create_resource_response = { "id" => resource_id, "displayName" => String, ?"warnings" => Array[String] }
+  type create_resource_response = { "id" => resource_id, "displayName" => String, ?"warnings" => Array[resource_warning] }
 
   # Spec schema: `CreateSharedConsole`.
   type create_shared_console = {
@@ -4086,11 +4164,7 @@ module Infrawrench
   }
 
   # Spec schema: `CurrencySettingsInput`.
-  type currency_settings_input = {
-    "displayCurrency" => String | nil,
-    ?"autoRates" => bool,
-    ?"rateBasis" => "daily" | "month_end"
-  }
+  type currency_settings_input = { "displayCurrency" => untyped, ?"autoRates" => untyped, ?"rateBasis" => untyped }
 
   # Spec schema: `CustomCostDeleted`.
   type custom_cost_deleted = { "ok" => bool, "zeroedRows" => Integer }
@@ -4215,7 +4289,7 @@ module Infrawrench
   # Spec schema: `CustomGraphRenderResult`.
   type custom_graph_render_result = {
     "ok" => bool,
-    "spec" => json_object & (Hash[String, untyped] | nil),
+    "spec" => json_object | nil,
     "error" => String | nil,
     "logs" => Array[{ "level" => "info" | "warn" | "error", "message" => String }],
     "renderedAt" => String,
@@ -4423,9 +4497,9 @@ module Infrawrench
 
   # Spec schema: `DependencyGraphEdge`.
   type dependency_graph_edge = {
-    "consumerResourceId" => resource_id & untyped,
+    "consumerResourceId" => resource_id,
     "consumerFieldKey" => String,
-    "providerResourceId" => resource_id & untyped,
+    "providerResourceId" => resource_id,
     "providerOutputKey" => String,
     ?"kind" => "output-ref" | "declared" | "containment" | "field-match",
     ?"label" => String
@@ -4529,7 +4603,7 @@ module Infrawrench
     "env" => String,
     "enabled" => bool,
     "lastSha" => String | nil,
-    "lastRunAt" => String | nil | nil
+    "lastRunAt" => String | nil
   }
 
   # Spec schema: `DeployTriggerInput`.
@@ -4566,10 +4640,10 @@ module Infrawrench
     "image" => String | nil,
     "status" => deploy_status,
     "origin" => "web" | "cli" | "trigger",
-    "stage" => deploy_stage | nil | nil,
+    "stage" => deploy_stage | nil,
     "durationMs" => Integer | nil,
     "buildSeconds" => Integer | nil,
-    "buildRunner" => "cloud-build" | "ssh" | nil | nil,
+    "buildRunner" => "cloud-build" | "ssh" | nil,
     "startedAt" => String
   }
 
@@ -4645,10 +4719,6 @@ module Infrawrench
   # Spec schema: `DigestTransportResult`.
   type digest_transport_result = { "attempted" => Integer, "succeeded" => Integer }
 
-  # Provider discounts: `commitment_discount` lines and negative
-  # `other`/`adjustment` lines (enterprise agreements, private pricing, Savings
-  # Plan negation).
-  #
   # Spec schema: `DiscountTreatment`.
   type discount_treatment = { "mode" => "pass_through" | "partial" | "retain", ?"passThroughPercent" => Numeric | nil }
 
@@ -4729,7 +4799,7 @@ module Infrawrench
     "fixedVersion" => String | nil,
     "fixAvailable" => bool | nil,
     "exploitAvailable" => bool | nil,
-    "kev" => vulnerability_kev_entry,
+    "kev" => vulnerability_kev_entry | nil,
     "artifact" => {
       "kind" => "image" | "function" | "host" | "repository" | "package",
       "name" => String,
@@ -4744,12 +4814,7 @@ module Infrawrench
     "url" => String | nil,
     "collectedAt" => String,
     "running" => Array[vulnerability_running_ref],
-    "services" => Array[{
-      "id" => String,
-      "name" => String,
-      "slug" => String,
-      "tier" => Numeric | Numeric | Numeric | Numeric | nil
-    }],
+    "services" => Array[{ "id" => String, "name" => String, "slug" => String, "tier" => Numeric | nil }],
     "dismissal" => vulnerability_dismissal
   }
 
@@ -4798,40 +4863,34 @@ module Infrawrench
   type dns_record_target = {
     "value" => String,
     "classification" => "owned" | "dangling" | "external" | "not-analysed",
-    "resource" => dns_target_resource,
-    "service" => dns_target_service
+    "resource" => dns_target_resource | nil,
+    "service" => dns_target_service | nil
   }
 
   # Spec schema: `DnsSkippedNamespace`.
   type dns_skipped_namespace = { "pluginId" => plugin_id, "pluginName" => String, "label" => String, "reason" => String }
 
-  # Set only when classification is "owned".
-  #
   # Spec schema: `DnsTargetResource`.
   type dns_target_resource = {
-      "resourceId" => String,
-      "displayName" => String,
-      "pluginId" => plugin_id,
-      "resourceTypeId" => String,
-      "resourceTypeName" => String,
-      "accountId" => String
-    }
-    | nil
+    "resourceId" => String,
+    "displayName" => String,
+    "pluginId" => plugin_id,
+    "resourceTypeId" => String,
+    "resourceTypeName" => String,
+    "accountId" => String
+  }
 
-  # Set only when classification is "dangling".
-  #
   # Spec schema: `DnsTargetService`.
   type dns_target_service = {
-      "pluginId" => plugin_id,
-      "pluginName" => String,
-      "resourceTypeId" => String,
-      "ruleId" => String,
-      "label" => String,
-      "severity" => "critical" | "high" | "medium" | "low",
-      "reason" => String,
-      "claimLabel" => String
-    }
-    | nil
+    "pluginId" => plugin_id,
+    "pluginName" => String,
+    "resourceTypeId" => String,
+    "ruleId" => String,
+    "label" => String,
+    "severity" => "critical" | "high" | "medium" | "low",
+    "reason" => String,
+    "claimLabel" => String
+  }
 
   # Spec schema: `DnsZone`.
   type dns_zone = {
@@ -4862,7 +4921,7 @@ module Infrawrench
   # was nothing to measure.
   #
   # Spec schema: `DoraBand`.
-  type dora_band = "elite" | "high" | "medium" | "low" | nil
+  type dora_band = "elite" | "high" | "medium" | "low"
 
   # Spec schema: `DoraChange`.
   type dora_change = {
@@ -4879,8 +4938,8 @@ module Infrawrench
     "url" => String | nil,
     "isRollback" => bool,
     "leadTimeHours" => Numeric | nil,
-    "failure" => dora_failure,
-    "scope" => Hash[String, dora_scope_value & (Hash[String, untyped] | nil)]
+    "failure" => dora_failure | nil,
+    "scope" => Hash[String, dora_scope_value | nil]
   }
 
   # Spec schema: `DoraChangeList`.
@@ -4905,22 +4964,21 @@ module Infrawrench
 
   # Spec schema: `DoraFailure`.
   type dora_failure = {
-      "kind" => "incident" | "rollback" | "failed_deploy" | "reverted",
-      "refId" => String,
-      "title" => String,
-      "at" => String
-    }
-    | nil
+    "kind" => "incident" | "rollback" | "failed_deploy" | "reverted",
+    "refId" => String,
+    "title" => String,
+    "at" => String
+  }
 
   # Spec schema: `DoraReport`.
   type dora_report = {
     "from" => String,
     "to" => String,
     "bucket" => "day" | "week",
-    "filter" => dora_scope_filter,
+    "filter" => dora_scope_filter | nil,
     "groupBy" => String,
     "summary" => dora_summary,
-    "previous" => dora_summary & untyped,
+    "previous" => dora_summary,
     "trend" => Array[{
       "start" => String,
       "deploys" => Integer,
@@ -4953,7 +5011,7 @@ module Infrawrench
   type dora_restore_list = { "restores" => Array[dora_restore] }
 
   # Spec schema: `DoraScopeFilter`.
-  type dora_scope_filter = { "dimension" => String, "value" => String | nil } | nil
+  type dora_scope_filter = { "dimension" => String, "value" => String | nil }
 
   # Spec schema: `DoraScopeValue`.
   type dora_scope_value = { "key" => String, "label" => String }
@@ -4990,27 +5048,27 @@ module Infrawrench
   type dora_summary = {
     "deploymentFrequency" => {
       "value" => Numeric | nil,
-      "band" => dora_band,
+      "band" => dora_band | nil,
       "sample" => Integer,
       "deploys" => Integer,
       "days" => Numeric
     },
     "leadTime" => {
       "value" => Numeric | nil,
-      "band" => dora_band,
+      "band" => dora_band | nil,
       "sample" => Integer,
       "p90Hours" => Numeric | nil
     },
     "changeFailureRate" => {
       "value" => Numeric | nil,
-      "band" => dora_band,
+      "band" => dora_band | nil,
       "sample" => Integer,
       "changes" => Integer,
       "failures" => Integer
     },
     "timeToRestore" => {
       "value" => Numeric | nil,
-      "band" => dora_band,
+      "band" => dora_band | nil,
       "sample" => Integer,
       "restores" => Integer
     }
@@ -5091,7 +5149,7 @@ module Infrawrench
     "accountName" => String | nil,
     "currency" => String | nil,
     "amount" => Numeric | nil,
-    "detail" => Hash[String, String | Numeric | nil | nil],
+    "detail" => Hash[String, String | Numeric | nil],
     "firedAt" => String,
     "notifiedAt" => String | nil,
     ?"remediation" => finding_remediation
@@ -5105,16 +5163,24 @@ module Infrawrench
   }
 
   # Spec schema: `EnvironmentCaptureDraftMember`.
-  type environment_capture_draft_member = environment_template_member
-    & {
-      "fieldMeta" => Hash[String, {
-        "label" => String,
-        "kind" => String,
-        "required" => bool,
-        ?"options" => Array[{ "id" => String, "label" => String }],
-        "parameterisable" => bool
-      }]
-    }
+  type environment_capture_draft_member = {
+    "key" => String,
+    "pluginId" => plugin_id,
+    "resourceTypeId" => String,
+    "accountId" => String,
+    "sourceName" => String,
+    ?"sourceResourceId" => String,
+    ?"nameFieldKey" => String,
+    ?"parentMember" => String,
+    "fields" => Hash[String, environment_template_field_value],
+    "fieldMeta" => Hash[String, {
+      "label" => String,
+      "kind" => String,
+      "required" => bool,
+      ?"options" => Array[{ "id" => String, "label" => String }],
+      "parameterisable" => bool
+    }]
+  }
 
   # Spec schema: `EnvironmentCaptureRequest`.
   type environment_capture_request = {
@@ -5147,8 +5213,8 @@ module Infrawrench
     "resourceTypeId" => String,
     "resourceTypeName" => String,
     "status" => "only-in-a" | "only-in-b" | "changed",
-    "a" => environment_diff_resource_ref,
-    "b" => environment_diff_resource_ref & untyped,
+    "a" => environment_diff_resource_ref | nil,
+    "b" => environment_diff_resource_ref | nil,
     "changes" => Array[environment_diff_field_change],
     "suppressedCount" => Integer
   }
@@ -5156,16 +5222,13 @@ module Infrawrench
   # Spec schema: `EnvironmentDiffFieldChange`.
   type environment_diff_field_change = { "field" => String, ?"a" => untyped, ?"b" => untyped }
 
-  # Null when the resource exists only on B.
-  #
   # Spec schema: `EnvironmentDiffResourceRef`.
   type environment_diff_resource_ref = {
-      "resourceId" => String,
-      "accountId" => String,
-      "displayName" => String,
-      "externalId" => String | nil
-    }
-    | nil
+    "resourceId" => String,
+    "accountId" => String,
+    "displayName" => String,
+    "externalId" => String | nil
+  }
 
   # Spec schema: `EnvironmentDiffResponse`.
   type environment_diff_response = {
@@ -5339,7 +5402,7 @@ module Infrawrench
   # routed only to Teams or push will always escalate.
   #
   # Spec schema: `EscalationPolicy`.
-  type escalation_policy = { "afterMinutes" => Integer, "destinations" => Array[alert_destination] } | nil
+  type escalation_policy = { "afterMinutes" => Integer, "destinations" => Array[alert_destination] }
 
   # `data` of a `account.sync.failing` event, version 1. An account's sync kept
   # failing past the org's paging threshold.
@@ -5786,7 +5849,7 @@ module Infrawrench
     "redeliveryOf" => String | nil,
     "attempts" => Array[event_delivery_attempt],
     "createdAt" => String,
-    "payload" => Hash[String, untyped]
+    "payload" => untyped
   }
 
   # Spec schema: `EventDeliveryAttempt`.
@@ -5817,7 +5880,7 @@ module Infrawrench
     "destination" => event_destination,
     "destinationLabel" => String,
     "eventTypes" => Array[String],
-    "minSeverity" => event_severity & (String | nil),
+    "minSeverity" => event_severity | nil,
     "accountIds" => Array[String],
     "environments" => Array[String],
     "secretHint" => String | nil,
@@ -5838,7 +5901,7 @@ module Infrawrench
     ?"enabled" => bool,
     "destination" => event_destination,
     ?"eventTypes" => Array[String],
-    ?"minSeverity" => event_severity & (String | nil),
+    ?"minSeverity" => event_severity | nil,
     ?"accountIds" => Array[String],
     ?"environments" => Array[String]
   }
@@ -5872,7 +5935,7 @@ module Infrawrench
     "category" => "cost" | "security" | "reliability" | "access" | "operations" | "system",
     "defaultSeverity" => event_severity,
     "carriesCost" => bool,
-    "schema" => Hash[String, untyped]
+    "schema" => untyped
   }
 
   # An account's sync kept failing past the org's paging threshold.
@@ -6350,9 +6413,23 @@ module Infrawrench
     "updatedAt" => String
   }
 
-  # Spec schema: `ExchangeRateImportRefusal`.
-  type exchange_rate_import_refusal = exchange_rate_import_result & { "error" => String }
-
+  # Spec schema: `ExchangeRateImportRefusal`.
+  type exchange_rate_import_refusal = {
+    "dryRun" => bool,
+    "applied" => bool,
+    "rows" => Array[{
+      "line" => Integer,
+      "action" => "create" | "update" | "unchanged" | "error",
+      ?"rate" => exchange_rate_input & untyped,
+      ?"previousRate" => String,
+      ?"previousEffectiveTo" => String | nil,
+      ?"error" => String
+    }],
+    "counts" => { "create" => Integer, "update" => Integer, "unchanged" => Integer, "error" => Integer },
+    "fileError" => String | nil,
+    "error" => String
+  }
+
   # Spec schema: `ExchangeRateImportRequest`.
   type exchange_rate_import_request = { "csv" => String, ?"dryRun" => bool, ?"skipInvalid" => bool }
 
@@ -6438,8 +6515,6 @@ module Infrawrench
     "generatedAt" => String
   }
 
-  # Item count per severity; every bucket present, zeros included.
-  #
   # Spec schema: `ExpirySeverityCounts`.
   type expiry_severity_counts = {
     "expired" => Integer,
@@ -6555,12 +6630,12 @@ module Infrawrench
     "sourceKind" => github_issue_source_kind,
     "sourceId" => String,
     "title" => String,
-    ?"details" => Array[{ "label" => String, ?"value" => String | Numeric | nil | nil }],
+    ?"details" => Array[{ "label" => String, ?"value" => String | Numeric | nil }],
     ?"note" => String,
     ?"resourceId" => String,
     ?"monthlyCost" => { "amount" => Numeric, "currency" => String },
     ?"remediation" => Array[String],
-    ?"repo" => github_repo_ref & Hash[String, untyped],
+    ?"repo" => github_repo_ref,
     ?"labels" => Array[String],
     ?"assignees" => Array[String],
     ?"appUrl" => String
@@ -6598,13 +6673,20 @@ module Infrawrench
   }
 
   # Spec schema: `FxFeedRates`.
-  type fx_feed_rates = fx_feed_status
-    & {
-      "date" => String,
-      "base" => String,
-      "rateDate" => String | nil,
-      "rates" => Array[{ "currency" => String, "rate" => Numeric }]
-    }
+  type fx_feed_rates = {
+    "source" => "ecb",
+    "sourceName" => String,
+    "sourceUrl" => String,
+    "latestRateDate" => String | nil,
+    "earliestRateDate" => String | nil,
+    "currencies" => Array[String],
+    "lastSuccessAt" => String | nil,
+    "lastError" => String | nil,
+    "date" => String,
+    "base" => String,
+    "rateDate" => String | nil,
+    "rates" => Array[{ "currency" => String, "rate" => Numeric }]
+  }
 
   # Spec schema: `FxFeedStatus`.
   type fx_feed_status = {
@@ -6631,21 +6713,48 @@ module Infrawrench
     "privateKey" => String
   }
 
+  # Spec schema: `GithubAppRepos`.
+  type github_app_repos = {
+    "repos" => Array[{
+      "installationId" => Integer,
+      "id" => Integer,
+      "fullName" => String,
+      "defaultBranch" => String,
+      "private" => bool
+    }]
+  }
+
+  # Spec schema: `GithubAppStatus`.
+  type github_app_status = {
+    "configured" => bool,
+    "appSlug" => String | nil,
+    "installations" => Array[{ "installationId" => Integer, "accountLogin" => String | nil }]
+  }
+
   # Spec schema: `GithubAssignee`.
   type github_assignee = { "login" => String, "avatarUrl" => String | nil }
 
   # Spec schema: `GithubIacSource`.
-  type github_iac_source = github_iac_source_input & { "id" => String }
+  type github_iac_source = {
+    "id" => String,
+    "iacAccountId" => String | nil,
+    "repo" => github_repo_ref,
+    "baseBranch" => String | nil,
+    "directory" => String
+  }
 
   # Spec schema: `GithubIacSourceInput`.
   type github_iac_source_input = {
     ?"id" => String,
     "iacAccountId" => String | nil,
-    "repo" => github_repo_ref & Hash[String, untyped],
+    "repo" => github_repo_ref,
     "baseBranch" => String | nil,
     "directory" => String
   }
 
+  # Spec schema: `GithubInstallUrl`.
+  type github_install_url = { "url" => String }
+
   # What an installation has **accepted**. An installation made before issue
   # filing existed shows `issues: none` until an owner of the GitHub account
   # approves the app's updated permissions.
@@ -6677,7 +6786,7 @@ module Infrawrench
     "pullRequestNumber" => Integer | nil,
     "pullRequestUrl" => String | nil,
     "status" => String | nil,
-    "statusCategory" => issue_status_category,
+    "statusCategory" => issue_status_category | nil,
     "assignee" => String | nil,
     "issueUpdatedAt" => String | nil,
     "statusSyncedAt" => String | nil,
@@ -6687,13 +6796,19 @@ module Infrawrench
   }
 
   # Spec schema: `GithubIssueRoute`.
-  type github_issue_route = github_issue_route_input & { "id" => String }
+  type github_issue_route = {
+    "id" => String,
+    "match" => github_issue_route_match,
+    "repo" => github_repo_ref,
+    "labels" => Array[String],
+    "assignees" => Array[String]
+  }
 
   # Spec schema: `GithubIssueRouteInput`.
   type github_issue_route_input = {
     ?"id" => String,
     "match" => github_issue_route_match,
-    "repo" => github_repo_ref & Hash[String, untyped],
+    "repo" => github_repo_ref,
     "labels" => Array[String],
     "assignees" => Array[String]
   }
@@ -6709,7 +6824,7 @@ module Infrawrench
 
   # Spec schema: `GithubIssueRouteResolution`.
   type github_issue_route_resolution = {
-    "repo" => github_repo_ref,
+    "repo" => github_repo_ref | nil,
     "labels" => Array[String],
     "assignees" => Array[String],
     "routeId" => String | nil
@@ -6718,7 +6833,7 @@ module Infrawrench
   # Spec schema: `GithubIssueSettings`.
   type github_issue_settings = {
     "enabled" => bool,
-    "defaultRepo" => github_repo_ref,
+    "defaultRepo" => github_repo_ref | nil,
     "labels" => Array[String],
     "assignees" => Array[String],
     "routes" => Array[github_issue_route],
@@ -6732,7 +6847,7 @@ module Infrawrench
   # Spec schema: `GithubIssueSettingsInput`.
   type github_issue_settings_input = {
     "enabled" => bool,
-    "defaultRepo" => github_repo_ref,
+    "defaultRepo" => github_repo_ref | nil,
     "labels" => Array[String],
     "assignees" => Array[String],
     "routes" => Array[github_issue_route_input],
@@ -6767,9 +6882,6 @@ module Infrawrench
   # Spec schema: `GithubLabel`.
   type github_label = { "name" => String, "color" => String, "description" => String | nil }
 
-  # The installation has not accepted the permission this needs. An owner of the
-  # GitHub account approves it from `manageUrl`.
-  #
   # Spec schema: `GithubPermissionRequired`.
   type github_permission_required = {
     "error" => String,
@@ -6791,7 +6903,7 @@ module Infrawrench
   # Spec schema: `GithubPullRequestPreview`.
   type github_pull_request_preview = {
       "eligible" => bool,
-      "repo" => github_repo_ref & Hash[String, untyped],
+      "repo" => github_repo_ref,
       "baseBranch" => String,
       "path" => String,
       "terraformAddress" => String,
@@ -6804,11 +6916,11 @@ module Infrawrench
   # Spec schema: `GithubPullRequestResult`.
   type github_pull_request_result = {
     "pullRequest" => { "number" => Integer, "url" => String },
-    "link" => github_issue_link & (Hash[String, untyped] | nil)
+    "link" => github_issue_link | nil
   }
 
   # Spec schema: `GithubRepoRef`.
-  type github_repo_ref = { "installationId" => Integer, "fullName" => String } | nil
+  type github_repo_ref = { "installationId" => Integer, "fullName" => String }
 
   # What happens to an open issue when its finding goes away: close it with a
   # comment, only comment, or leave it alone.
@@ -6834,7 +6946,7 @@ module Infrawrench
     "entityType" => "api-key" | "ssh-key" | "member",
     "entityId" => String,
     "entityName" => String,
-    "facts" => Hash[String, String | Numeric | bool | nil | nil]
+    "facts" => Hash[String, String | Numeric | bool | nil]
   }
 
   # Spec schema: `HygieneReport`.
@@ -7011,18 +7123,13 @@ module Infrawrench
     "thresholds" => Array[idle_rule_threshold_view]
   }
 
-  # Monthly figure at the provider's published list price, for idle rows a
-  # plugin could price. An estimate: show it only when `cost` (billed spend) is
-  # null.
-  #
   # Spec schema: `IdleSavingsEstimate`.
   type idle_savings_estimate = {
-      "monthlyAmount" => Numeric,
-      "currency" => String,
-      "basis" => "list-price",
-      ?"note" => String
-    }
-    | nil
+    "monthlyAmount" => Numeric,
+    "currency" => String,
+    "basis" => "list-price",
+    ?"note" => String
+  }
 
   # Spec schema: `ImportSshKeyRequest`.
   type import_ssh_key_request = { "name" => String, "publicKey" => String }
@@ -7080,7 +7187,7 @@ module Infrawrench
     "refId" => String | String | nil,
     "refSecondary" => String | nil,
     "error" => String | nil,
-    "request" => incident_artifact_request,
+    "request" => incident_artifact_request | nil,
     "createdAt" => String,
     "updatedAt" => String
   }
@@ -7091,7 +7198,7 @@ module Infrawrench
   # page.
   #
   # Spec schema: `IncidentArtifactRequest`.
-  type incident_artifact_request = { ?"statusPageId" => String | nil, ?"componentIds" => Array[String] } | nil
+  type incident_artifact_request = { ?"statusPageId" => String | nil, ?"componentIds" => Array[String] }
 
   # Spec schema: `IncidentDeclare`.
   type incident_declare = {
@@ -7108,12 +7215,7 @@ module Infrawrench
   type incident_detail = {
     "incident" => incident,
     "notes" => Array[incident_note],
-    "affectedServices" => Array[{
-      "id" => String,
-      "name" => String,
-      "slug" => String,
-      "tier" => Numeric | Numeric | Numeric | Numeric | nil
-    }]
+    "affectedServices" => Array[{ "id" => String, "name" => String, "slug" => String, "tier" => Numeric | nil }]
   }
 
   # Spec schema: `IncidentList`.
@@ -7221,63 +7323,81 @@ module Infrawrench
   type invite_response = { "id" => String, "token" => String }
 
   # Spec schema: `Invoice`.
-  type invoice = invoice_summary
-    & {
-      ?"totals" => invoice_totals & Hash[String, untyped],
-      "notes" => String | nil,
-      "lines" => Array[invoice_line],
-      "derivation" => invoice_derivation,
-      "billing" => invoice_billing,
-      "live" => bool,
-      "computedAt" => String,
-      "approvedByUserId" => String | nil,
-      "sentByUserId" => String | nil,
-      "voidedByUserId" => String | nil,
-      "createdByUserId" => String | nil
-    }
-
-  # Addressee, recipients, terms and remittance details. Null on invoices
-  # approved before billing profiles existed.
+  type invoice = {
+    "id" => String,
+    "managedAccountId" => String,
+    "managedAccountName" => String,
+    "number" => String | nil,
+    "status" => invoice_status,
+    "periodFrom" => String,
+    "periodTo" => String,
+    "currency" => String,
+    "totals" => invoice_totals,
+    "issuedAt" => String | nil,
+    "sentAt" => String | nil,
+    "delivery" => invoice_delivery | nil,
+    "voidedAt" => String | nil,
+    "voidReason" => String | nil,
+    "supersedesInvoiceId" => String | nil,
+    "supersededByInvoiceId" => String | nil,
+    "createdAt" => String,
+    "updatedAt" => String,
+    "notes" => String | nil,
+    "lines" => Array[invoice_line],
+    "derivation" => invoice_derivation,
+    "billing" => invoice_billing | nil,
+    "live" => bool,
+    "computedAt" => String,
+    "approvedByUserId" => String | nil,
+    "sentByUserId" => String | nil,
+    "voidedByUserId" => String | nil,
+    "createdByUserId" => String | nil
+  }
+
+  # Who the invoice is addressed to and how to pay it: the customer and its
+  # billing profile resolved together. Live on a draft; written once at approval
+  # and read back verbatim after.
   #
   # Spec schema: `InvoiceBilling`.
   type invoice_billing = {
-      "profileId" => String | nil,
-      "profileName" => String | nil,
-      "legalName" => String,
-      "attention" => String | nil,
-      "address" => String | nil,
-      "taxId" => String | nil,
-      "poNumber" => String | nil,
-      "to" => Array[String],
-      "cc" => Array[String],
-      "paymentTermsDays" => Integer | nil,
-      "issueDate" => String,
-      "dueDate" => String | nil,
-      "taxRates" => Array[billing_profile_tax_rate],
-      "bank" => billing_profile_bank,
-      "footer" => String | nil,
-      "logoId" => String | nil,
-      "numberPrefix" => String,
-      "numberIncludesYear" => bool
-    }
-    | nil
+    "profileId" => String | nil,
+    "profileName" => String | nil,
+    "legalName" => String,
+    "attention" => String | nil,
+    "address" => String | nil,
+    "taxId" => String | nil,
+    "poNumber" => String | nil,
+    "to" => Array[String],
+    "cc" => Array[String],
+    "paymentTermsDays" => Integer | nil,
+    "issueDate" => String,
+    "dueDate" => String | nil,
+    "taxRates" => Array[billing_profile_tax_rate],
+    "bank" => billing_profile_bank | nil,
+    "footer" => String | nil,
+    "logoId" => String | nil,
+    "numberPrefix" => String,
+    "numberIncludesYear" => bool
+  }
 
-  # The last delivery attempt, or null when none has been made; including on an
-  # invoice marked sent by a deployment with no mail provider. “A person
-  # released this” and “we delivered it” are different claims, and this field is
-  # only ever the second.
+  # What became of the last attempt to email this invoice to its customer.
+  # Separate from the figures in every sense: delivery records where a frozen
+  # document went and cannot restate what it says.
+  #
+  # **A partial delivery is terminal.** The mail provider has no idempotency
+  # key, so retrying after some addresses succeeded would put a second copy of
+  # the same bill in inboxes that already have it.
   #
   # Spec schema: `InvoiceDelivery`.
   type invoice_delivery = {
-      "status" => "pending" | "succeeded" | "partial" | "failed" | "no_targets",
-      "recipients" => Array[String],
-      "delivered" => Integer,
-      "attemptedAt" => String,
-      "deliveredAt" => String | nil,
-      "attempts" => Integer,
-      "error" => String | nil
-    }
-    | nil
+    "status" => "pending" | "succeeded" | "partial" | "failed" | "no_targets",
+    "recipients" => Array[String],
+    "delivered" => Integer,
+    "attemptedAt" => String,
+    "deliveredAt" => String | nil,
+    "attempts" => Integer,
+    "error" => String | nil
+  }
 
   # Everything needed to re-derive the invoice by hand. Not decoration: an
   # invoice a customer cannot reconcile is an invoice a customer does not pay.
@@ -7300,9 +7420,9 @@ module Infrawrench
       "accounts" => Array[{ "id" => String, "label" => String }]
     },
     "missingScope" => Array[String],
-    ?"pricing" => managed_account_pricing & Hash[String, untyped],
+    ?"pricing" => managed_account_pricing & untyped,
     ?"effects" => Array[pricing_effect],
-    ?"rerateCoverage" => rerate_coverage & untyped,
+    ?"rerateCoverage" => rerate_coverage | nil,
     ?"warnings" => Array[String],
     ?"expressionFailures" => Array[pricing_expression_failure]
   }
@@ -7367,10 +7487,10 @@ module Infrawrench
     "periodFrom" => String,
     "periodTo" => String,
     "currency" => String,
-    "totals" => invoice_totals,
+    "totals" => invoice_totals | nil,
     "issuedAt" => String | nil,
     "sentAt" => String | nil,
-    "delivery" => invoice_delivery,
+    "delivery" => invoice_delivery | nil,
     "voidedAt" => String | nil,
     "voidReason" => String | nil,
     "supersedesInvoiceId" => String | nil,
@@ -7379,18 +7499,17 @@ module Infrawrench
     "updatedAt" => String
   }
 
-  # **Null for a draft**, null, not zero. A draft's figures are recomputed on
-  # read and the list does not recompute; fetch the invoice by id for a draft's
-  # current numbers.
+  # `collected + adjustment === adjusted` holds for every currency. That
+  # identity is what makes an invoice reconcilable back to the spend that
+  # produced it, and it is checked before anything is frozen.
   #
   # Spec schema: `InvoiceTotals`.
   type invoice_totals = {
-      "collected" => Hash[String, Numeric],
-      "adjustment" => Hash[String, Numeric],
-      "adjusted" => Hash[String, Numeric],
-      "billed" => Hash[String, Numeric]
-    }
-    | nil
+    "collected" => Hash[String, Numeric],
+    "adjustment" => Hash[String, Numeric],
+    "adjusted" => Hash[String, Numeric],
+    "billed" => Hash[String, Numeric]
+  }
 
   # Spec schema: `InvoiceUpdate`.
   type invoice_update = { "periodFrom" => String, "periodTo" => String, ?"notes" => String | nil }
@@ -7399,25 +7518,7 @@ module Infrawrench
   type invoice_void_request = { "reason" => String, ?"supersede" => bool }
 
   # Spec schema: `InvoiceVoidResponse`.
-  type invoice_void_response = {
-    "invoice" => invoice,
-    "replacement" => invoice
-      & invoice_summary
-        & ({
-            ?"totals" => invoice_totals & Hash[String, untyped],
-            "notes" => String | nil,
-            "lines" => Array[invoice_line],
-            "derivation" => invoice_derivation,
-            "billing" => invoice_billing,
-            "live" => bool,
-            "computedAt" => String,
-            "approvedByUserId" => String | nil,
-            "sentByUserId" => String | nil,
-            "voidedByUserId" => String | nil,
-            "createdByUserId" => String | nil
-          }
-          | nil)
-  }
+  type invoice_void_response = { "invoice" => invoice, "replacement" => invoice | nil }
 
   # Spec schema: `InvokeActionRequest`.
   type invoke_action_request = {
@@ -7433,7 +7534,7 @@ module Infrawrench
   # type, and GitHub's state and close reason all map onto these four.
   #
   # Spec schema: `IssueStatusCategory`.
-  type issue_status_category = "todo" | "in_progress" | "done" | "canceled" | nil
+  type issue_status_category = "todo" | "in_progress" | "done" | "canceled"
 
   # Spec schema: `IssueStatusRefreshResult`.
   type issue_status_refresh_result = { "checked" => Integer, "changed" => Integer }
@@ -7450,16 +7551,15 @@ module Infrawrench
 
   # Spec schema: `JiraIntegration`.
   type jira_integration = {
-      "siteUrl" => String,
-      "accountEmail" => String,
-      "tokenHint" => String,
-      "defaultProjectKey" => String | nil,
-      "defaultIssueTypeId" => String | nil,
-      "acknowledgeOnDone" => bool,
-      "webhook" => issue_webhook_state,
-      "updatedAt" => String
-    }
-    | nil
+    "siteUrl" => String,
+    "accountEmail" => String,
+    "tokenHint" => String,
+    "defaultProjectKey" => String | nil,
+    "defaultIssueTypeId" => String | nil,
+    "acknowledgeOnDone" => bool,
+    "webhook" => issue_webhook_state,
+    "updatedAt" => String
+  }
 
   # Spec schema: `JiraIntegrationInput`.
   type jira_integration_input = {
@@ -7479,7 +7579,7 @@ module Infrawrench
     "issueKey" => String,
     "issueUrl" => String,
     "status" => String | nil,
-    "statusCategory" => issue_status_category,
+    "statusCategory" => issue_status_category | nil,
     "assignee" => String | nil,
     "issueUpdatedAt" => String | nil,
     "statusSyncedAt" => String | nil,
@@ -7631,7 +7731,7 @@ module Infrawrench
     "requireTicket" => bool,
     "createdAt" => String,
     "updatedAt" => String,
-    ?"labels" => jit_provider_labels & (Hash[String, untyped] | nil),
+    ?"labels" => jit_provider_labels | nil,
     ?"canRequest" => bool
   }
 
@@ -7660,10 +7760,13 @@ module Infrawrench
 
   # Spec schema: `JitPrincipalOption`.
   type jit_principal_option = { "id" => String, "name" => String, "kind" => "user" | "group", ?"email" => String | nil }
-    | nil
 
   # Spec schema: `JitPrincipalResolution`.
-  type jit_principal_resolution = { "principal" => jit_principal_option, "canPick" => bool, "labels" => jit_provider_labels }
+  type jit_principal_resolution = {
+    "principal" => jit_principal_option | nil,
+    "canPick" => bool,
+    "labels" => jit_provider_labels
+  }
 
   # Spec schema: `JitProviderLabels`.
   type jit_provider_labels = {
@@ -7701,7 +7804,7 @@ module Infrawrench
   type kpi_widget_config = {
     "version" => Numeric,
     "source" => kpi_widget_source,
-    ?"dateRange" => cost_date_range,
+    ?"dateRange" => cost_date_range & untyped,
     "comparePreviousPeriod" => bool,
     ?"upIsGood" => bool
   }
@@ -7747,7 +7850,7 @@ module Infrawrench
   # Spec schema: `KubernetesEfficiencyConfig`.
   type kubernetes_efficiency_config = {
     "version" => Numeric,
-    "dateRange" => cost_date_range & untyped,
+    "dateRange" => cost_date_range,
     "granularity" => "day" | "week" | "month",
     "filters" => Array[kubernetes_efficiency_filter],
     "groupBy" => "cluster" | "namespace" | "workload" | "label" | "node_pool" | "category",
@@ -7911,7 +8014,7 @@ module Infrawrench
     "namespaces" => Array[kubernetes_network_row],
     "workloads" => Array[kubernetes_network_row],
     "topTalkers" => Array[network_flow_pair],
-    "collection" => network_flow_account_status & (Hash[String, untyped] | nil)
+    "collection" => network_flow_account_status | nil
   }
 
   # Spec schema: `KubernetesNetworkRow`.
@@ -8034,13 +8137,12 @@ module Infrawrench
 
   # Spec schema: `LinearIntegration`.
   type linear_integration = {
-      "keyHint" => String,
-      "defaultTeamId" => String | nil,
-      "acknowledgeOnDone" => bool,
-      "webhook" => issue_webhook_state,
-      "updatedAt" => String
-    }
-    | nil
+    "keyHint" => String,
+    "defaultTeamId" => String | nil,
+    "acknowledgeOnDone" => bool,
+    "webhook" => issue_webhook_state,
+    "updatedAt" => String
+  }
 
   # Spec schema: `LinearIntegrationInput`.
   type linear_integration_input = { ?"apiKey" => String, ?"defaultTeamId" => String | nil, ?"acknowledgeOnDone" => bool }
@@ -8053,7 +8155,7 @@ module Infrawrench
     "issueIdentifier" => String,
     "issueUrl" => String,
     "status" => String | nil,
-    "statusCategory" => issue_status_category,
+    "statusCategory" => issue_status_category | nil,
     "assignee" => String | nil,
     "issueUpdatedAt" => String | nil,
     "statusSyncedAt" => String | nil,
@@ -8091,7 +8193,7 @@ module Infrawrench
   type linear_webhook_input = { "mode" => "auto" } | { "mode" => "manual", "signingSecret" => String }
 
   # Spec schema: `LinuxAppHostCheck`.
-  type linux_app_host_check = { "preflight" => linux_app_host_preflight, "plan" => linux_app_install_plan }
+  type linux_app_host_check = { "preflight" => linux_app_host_preflight, "plan" => linux_app_install_plan | nil }
 
   # Spec schema: `LinuxAppHostPreflight`.
   type linux_app_host_preflight = {
@@ -8121,15 +8223,14 @@ module Infrawrench
 
   # Spec schema: `LinuxAppInstallPlan`.
   type linux_app_install_plan = {
-      "packageManager" => "apt-get" | "dnf" | "yum" | "apk" | "pacman" | "zypper",
-      "privilege" => "root" | "sudo" | "sudo-password" | "none",
-      "requirements" => Array[linux_app_requirement_id],
-      "packages" => Array[String],
-      "commands" => Array[String],
-      "canInstall" => bool,
-      ?"blockedReason" => String
-    }
-    | nil
+    "packageManager" => "apt-get" | "dnf" | "yum" | "apk" | "pacman" | "zypper",
+    "privilege" => "root" | "sudo" | "sudo-password" | "none",
+    "requirements" => Array[linux_app_requirement_id],
+    "packages" => Array[String],
+    "commands" => Array[String],
+    "canInstall" => bool,
+    ?"blockedReason" => String
+  }
 
   # Spec schema: `LinuxAppRequirement`.
   type linux_app_requirement = {
@@ -8148,10 +8249,18 @@ module Infrawrench
   type linux_app_requirement_id = "gzip" | "xkb" | "dbus" | "fonts" | "mesa" | "icons"
 
   # Spec schema: `LinuxAppSetupEvent`.
-  type linux_app_setup_event = { ?"line" => String, ?"outcome" => linux_app_install_outcome, ?"error" => String }
+  type linux_app_setup_event = Hash[String, untyped]
 
   # Spec schema: `LinuxAppSetupRequest`.
-  type linux_app_setup_request = linux_app_host_target & { ?"requirements" => Array[linux_app_requirement_id] }
+  type linux_app_setup_request = {
+    "accountId" => String,
+    "resourceId" => String,
+    "sshKeyId" => String,
+    "host" => String,
+    "username" => String,
+    ?"port" => Integer,
+    ?"requirements" => Array[linux_app_requirement_id]
+  }
 
   # Spec schema: `LiteralAssociationRequest`.
   type literal_association_request = { "resourceId" => resource_id, "fieldKey" => String, "plaintextValue" => String }
@@ -8249,7 +8358,7 @@ module Infrawrench
     "billingCurrency" => String,
     "costBasis" => "cash" | "amortized" | "blended",
     "applyBillingRules" => bool,
-    "pricing" => managed_account_pricing & Hash[String, untyped],
+    "pricing" => managed_account_pricing,
     "notes" => String | nil,
     "billingProfileId" => String | nil,
     "costCentreIds" => Array[String],
@@ -8295,7 +8404,13 @@ module Infrawrench
   # month.
   #
   # Spec schema: `ManagedAccountAssignmentPreviewRequest`.
-  type managed_account_assignment_preview_request = managed_account_assignment & { ?"periodFrom" => String, ?"periodTo" => String }
+  type managed_account_assignment_preview_request = {
+    "managedAccountId" => String | nil,
+    ?"costCentreIds" => Array[String],
+    ?"accountIds" => Array[String],
+    ?"periodFrom" => String,
+    ?"periodTo" => String
+  }
 
   # Spec schema: `ManagedAccountAssignmentResult`.
   type managed_account_assignment_result = {
@@ -8317,28 +8432,28 @@ module Infrawrench
     "billingCurrency" => String,
     ?"costBasis" => "cash" | "amortized" | "blended",
     ?"applyBillingRules" => bool,
-    ?"pricing" => managed_account_pricing & Hash[String, untyped],
+    ?"pricing" => managed_account_pricing & untyped,
     ?"notes" => String | nil,
     ?"billingProfileId" => String | nil,
     ?"costCentreIds" => Array[String],
     ?"accountIds" => Array[String]
   }
 
-  # Customer settings to try instead of the saved ones.
+  # How a customer's invoice is priced beyond the billing rules. Applied when an
+  # invoice is computed; collected spend is never rewritten.
   #
   # Spec schema: `ManagedAccountPricing`.
   type managed_account_pricing = {
-      "rerate" => {
-        "enabled" => bool,
-        "scope" => Array[{ "pluginId" => String, ?"service" => String | nil }],
-        "fallbackUpliftPercent" => Numeric,
-        "uplifts" => Array[{ "pluginId" => String, ?"service" => String | nil, "percent" => Numeric }]
-      },
-      "discounts" => discount_treatment,
-      "credits" => discount_treatment & untyped,
-      "commitmentBenefits" => discount_treatment & untyped
-    }
-    | nil
+    "rerate" => {
+      "enabled" => bool,
+      "scope" => Array[{ "pluginId" => String, ?"service" => String | nil }],
+      "fallbackUpliftPercent" => Numeric,
+      "uplifts" => Array[{ "pluginId" => String, ?"service" => String | nil, "percent" => Numeric }]
+    },
+    "discounts" => discount_treatment & untyped,
+    "credits" => discount_treatment & untyped,
+    "commitmentBenefits" => discount_treatment & untyped
+  }
 
   # Spec schema: `Manifest`.
   type manifest = { "manifest" => String }
@@ -8347,7 +8462,7 @@ module Infrawrench
   type me_response = {
     "userId" => String,
     "email" => String,
-    "role" => role_summary,
+    "role" => role_summary | nil,
     "permissions" => Array[permission],
     ?"costVisibility" => cost_visibility_summary
   }
@@ -8367,11 +8482,11 @@ module Infrawrench
 
   # Spec schema: `MetricAlertRule`.
   type metric_alert_rule = {
+    "pluginId" => untyped,
+    "resourceTypeId" => untyped,
+    "tagKey" => untyped,
+    "tagValue" => untyped,
     "name" => String,
-    "pluginId" => String | nil,
-    "resourceTypeId" => String | nil,
-    "tagKey" => String | nil,
-    "tagValue" => String | nil,
     "metricKey" => String,
     "comparator" => ">" | ">=" | "<" | "<=",
     "threshold" => Numeric,
@@ -8386,11 +8501,11 @@ module Infrawrench
 
   # Spec schema: `MetricAlertRuleInput`.
   type metric_alert_rule_input = {
+    "pluginId" => untyped,
+    "resourceTypeId" => untyped,
+    "tagKey" => untyped,
+    "tagValue" => untyped,
     "name" => String,
-    "pluginId" => String | nil,
-    "resourceTypeId" => String | nil,
-    "tagKey" => String | nil,
-    "tagValue" => String | nil,
     "metricKey" => String,
     "comparator" => ">" | ">=" | "<" | "<=",
     "threshold" => Numeric,
@@ -8401,11 +8516,11 @@ module Infrawrench
 
   # Spec schema: `MetricAlertRuleWithStatus`.
   type metric_alert_rule_with_status = {
+    "pluginId" => untyped,
+    "resourceTypeId" => untyped,
+    "tagKey" => untyped,
+    "tagValue" => untyped,
     "name" => String,
-    "pluginId" => String | nil,
-    "resourceTypeId" => String | nil,
-    "tagKey" => String | nil,
-    "tagValue" => String | nil,
     "metricKey" => String,
     "comparator" => ">" | ">=" | "<" | "<=",
     "threshold" => Numeric,
@@ -8467,25 +8582,24 @@ module Infrawrench
     ?"resourceId" => String | nil,
     ?"resourceTypeId" => String | nil,
     ?"resourceName" => String | nil,
-    ?"link" => moment_event_link
+    ?"link" => moment_event_link | nil
   }
 
   # Spec schema: `MomentEventLink`.
   type moment_event_link = {
-      "kind" => "resource"
-        | "changes"
-        | "incident"
-        | "costs"
-        | "workflow-run"
-        | "deployment"
-        | "audit"
-        | "freeze"
-        | "expiring",
-      ?"id" => String | nil,
-      ?"parentId" => String | nil,
-      ?"url" => String | nil
-    }
-    | nil
+    "kind" => "resource"
+      | "changes"
+      | "incident"
+      | "costs"
+      | "workflow-run"
+      | "deployment"
+      | "audit"
+      | "freeze"
+      | "expiring",
+    ?"id" => String | nil,
+    ?"parentId" => String | nil,
+    ?"url" => String | nil
+  }
 
   # One of the indexed feeds the moment union draws from.
   #
@@ -8645,7 +8759,7 @@ module Infrawrench
   # Spec schema: `NetworkFlowReportConfig`.
   type network_flow_report_config = {
     "version" => Numeric,
-    "dateRange" => cost_date_range & untyped,
+    "dateRange" => cost_date_range,
     "granularity" => network_flow_report_granularity,
     "groupBy" => network_flow_report_group_by,
     "filters" => network_flow_report_filters,
@@ -8874,6 +8988,9 @@ module Infrawrench
   # Spec schema: `NetworkFlowSettings`.
   type network_flow_settings = { "enabled" => bool, "initialLookbackDays" => Integer }
 
+  # Spec schema: `NetworkFlowSettingsInput`.
+  type network_flow_settings_input = { "enabled" => bool, ?"initialLookbackDays" => Integer }
+
   # Spec schema: `NetworkFlowSource`.
   type network_flow_source = {
     "id" => String,
@@ -8956,8 +9073,8 @@ module Infrawrench
     "scheduleId" => String,
     "scheduleName" => String,
     "enabled" => bool,
-    "shift" => on_call_shift,
-    "next" => on_call_participant
+    "shift" => on_call_shift | nil,
+    "next" => on_call_participant | nil
   }
 
   # Spec schema: `OnCallNowResponse`.
@@ -8985,12 +9102,8 @@ module Infrawrench
     ?"reason" => String | nil
   }
 
-  # The next person in the rotation, where an escalation goes. Resolved from the
-  # rotation and never from a cover: a cover is somebody standing in for one
-  # shift.
-  #
   # Spec schema: `OnCallParticipant`.
-  type on_call_participant = { "userId" => String, "name" => String | nil, "email" => String | nil } | nil
+  type on_call_participant = { "userId" => String, "name" => String | nil, "email" => String | nil }
 
   # Spec schema: `OnCallSchedule`.
   type on_call_schedule = {
@@ -9000,7 +9113,7 @@ module Infrawrench
     "rotationDays" => Integer,
     "handoffTime" => String,
     "startDate" => String,
-    "participants" => Array[on_call_participant & Hash[String, untyped]],
+    "participants" => Array[on_call_participant],
     "enabled" => bool,
     "createdAt" => String,
     "updatedAt" => String
@@ -9033,21 +9146,17 @@ module Infrawrench
 
   # Spec schema: `OnCallShift`.
   type on_call_shift = {
-      "startsAt" => String,
-      "endsAt" => String,
-      "userId" => String,
-      "name" => String | nil,
-      "email" => String | nil,
-      "source" => "rotation" | "override",
-      "rotationIndex" => Integer | nil
-    }
-    | nil
+    "startsAt" => String,
+    "endsAt" => String,
+    "userId" => String,
+    "name" => String | nil,
+    "email" => String | nil,
+    "source" => "rotation" | "override",
+    "rotationIndex" => Integer | nil
+  }
 
   # Spec schema: `OnCallShiftsResponse`.
-  type on_call_shifts_response = {
-    "shifts" => Array[on_call_shift & Hash[String, untyped]],
-    "overrides" => Array[on_call_override]
-  }
+  type on_call_shifts_response = { "shifts" => Array[on_call_shift], "overrides" => Array[on_call_override] }
 
   # What everyone in the organization can do with the object. `editor` is the
   # default for an object nobody has shared.
@@ -9094,7 +9203,13 @@ module Infrawrench
   }
 
   # Spec schema: `OrgConfigApplyResult`.
-  type org_config_apply_result = org_config_plan & { "applied" => bool }
+  type org_config_apply_result = {
+    "mode" => "merge" | "replace",
+    "changes" => Array[org_config_change],
+    "unresolved" => Array[org_config_unresolved],
+    "counts" => { "create" => Integer, "update" => Integer, "delete" => Integer, "unchanged" => Integer },
+    "applied" => bool
+  }
 
   # Spec schema: `OrgConfigBudget`.
   type org_config_budget = {
@@ -9304,7 +9419,7 @@ module Infrawrench
     ?"comparator" => "<" | "<=" | ">" | ">=",
     ?"threshold" => Numeric,
     "targetPercent" => Numeric,
-    ?"windowDays" => Numeric | Numeric | Numeric,
+    ?"windowDays" => Numeric,
     ?"alertsEnabled" => bool,
     ?"suggestFreeze" => bool,
     ?"enabled" => bool
@@ -9368,7 +9483,7 @@ module Infrawrench
   # Spec schema: `OrgScorecard`.
   type org_scorecard = {
     "score" => Integer | nil,
-    "grade" => org_scorecard_grade,
+    "grade" => org_scorecard_grade | nil,
     "pillars" => Array[org_scorecard_pillar],
     "failedPillars" => Array[org_scorecard_pillar_id],
     "trend" => Array[org_scorecard_trend_point],
@@ -9379,7 +9494,7 @@ module Infrawrench
   type org_scorecard_fact = { "label" => String, "value" => String, ?"bad" => bool }
 
   # Spec schema: `OrgScorecardGrade`.
-  type org_scorecard_grade = "A" | "B" | "C" | "D" | "F" | nil
+  type org_scorecard_grade = "A" | "B" | "C" | "D" | "F"
 
   # Spec schema: `OrgScorecardHistory`.
   type org_scorecard_history = { "trend" => Array[org_scorecard_trend_point] }
@@ -9412,7 +9527,7 @@ module Infrawrench
   type org_scorecard_trend_point = {
     "day" => String,
     "score" => Integer,
-    "grade" => org_scorecard_grade & String,
+    "grade" => org_scorecard_grade,
     "pillars" => Hash[String, Integer]
   }
 
@@ -9459,12 +9574,8 @@ module Infrawrench
     "resources" => Array[orphaned_resource]
   }
 
-  # Best-effort trailing spend matched from collected per-resource cost rows;
-  # null when the provider reports no per-resource cost. The flag itself never
-  # depends on billing data.
-  #
   # Spec schema: `OrphanCostAnnotation`.
-  type orphan_cost_annotation = { "amount" => Numeric, "currency" => String } | nil
+  type orphan_cost_annotation = { "amount" => Numeric, "currency" => String }
 
   # Present when a metric-based idle rule flagged the row rather than the type's
   # orphan rule: the rule, the metric evidence and the lookback window.
@@ -9500,12 +9611,12 @@ module Infrawrench
     "displayName" => String,
     "externalId" => String | nil,
     "reason" => String,
-    "cost" => orphan_cost_annotation,
-    "owner" => resource_owner_annotation,
+    "cost" => orphan_cost_annotation | nil,
+    "owner" => resource_owner_annotation | nil,
     "lastSyncedAt" => String | nil,
-    ?"remediation" => finding_remediation & Hash[String, untyped],
+    ?"remediation" => finding_remediation & untyped,
     ?"idle" => orphan_idle_detail,
-    ?"estimate" => idle_savings_estimate
+    ?"estimate" => idle_savings_estimate | nil
   }
 
   # Spec schema: `OversizedAccountGroup`.
@@ -9539,7 +9650,7 @@ module Infrawrench
     "monthlyKgCo2eSaving" => Numeric | nil,
     "resizeNote" => String | nil,
     "lastSyncedAt" => String | nil,
-    ?"remediation" => finding_remediation & Hash[String, untyped]
+    ?"remediation" => finding_remediation & untyped
   }
 
   # Spec schema: `OversizedSizeSummary`.
@@ -9703,7 +9814,12 @@ module Infrawrench
   type patch_platform_agent = { ?"label" => String, ?"scopes" => Array[String], ?"providers" => Array[String] }
 
   # Spec schema: `PeerPane`.
-  type peer_pane = peer_pane_stub & { "schema" => json_object }
+  type peer_pane = {
+    "tabLabel" => String,
+    "pluginLogoSvg" => String,
+    "peerPluginId" => String,
+    "schema" => json_object
+  }
 
   # Spec schema: `PeerPaneStub`.
   type peer_pane_stub = { "tabLabel" => String, "pluginLogoSvg" => String, "peerPluginId" => String }
@@ -10019,10 +10135,6 @@ module Infrawrench
     | "xai"
     | "xata"
 
-  # Present only when this server can connect the plugin through provider OAuth
-  # (the plugin supports it and the server has a client configured). See `POST
-  # /provider-oauth/{pluginId}/authorize`.
-  #
   # Spec schema: `PluginOAuthSummary`.
   type plugin_oauth_summary = {
     "access" => "read-only" | "read-write" | "full",
@@ -10038,8 +10150,8 @@ module Infrawrench
     "displayName" => String,
     "logoSvg" => String,
     "credentialFields" => Array[credential_field],
-    "preflight" => preflight_declaration,
-    ?"oauth" => plugin_oauth_summary,
+    "preflight" => untyped,
+    ?"oauth" => plugin_oauth_summary & untyped,
     ?"sshTunnel" => { "label" => String, "defaultPort" => Integer, "credentials" => Hash[String, String] },
     ?"jumpHost" => bool,
     ?"kvBrowser" => "keys" | "documents"
@@ -10104,8 +10216,6 @@ module Infrawrench
     "generatedAt" => String
   }
 
-  # Live finding count per severity; every bucket present, zeros included.
-  #
   # Spec schema: `PostureSeverityCounts`.
   type posture_severity_counts = { "critical" => Integer, "high" => Integer, "medium" => Integer, "low" => Integer }
 
@@ -10122,8 +10232,8 @@ module Infrawrench
     "resourceTypeId" => String | nil,
     "changedAttributes" => Array[String],
     "count" => Integer | nil,
-    "before" => pr_check_estimate_side,
-    "after" => pr_check_estimate_side,
+    "before" => pr_check_estimate_side | nil,
+    "after" => pr_check_estimate_side | nil,
     "monthlyDelta" => Numeric | nil,
     "currency" => String | nil,
     "unpricedReason" => String | nil,
@@ -10145,10 +10255,10 @@ module Infrawrench
   }
 
   # Spec schema: `PrCheckConclusion`.
-  type pr_check_conclusion = "success" | "neutral" | "failure" | nil
+  type pr_check_conclusion = "success" | "neutral" | "failure"
 
   # Spec schema: `PrCheckEstimateSide`.
-  type pr_check_estimate_side = { "monthlyAmount" => Numeric, "currency" => String, "partial" => bool } | nil
+  type pr_check_estimate_side = { "monthlyAmount" => Numeric, "currency" => String, "partial" => bool }
 
   # What an installation has **accepted** of the permissions checks need:
   # `checks: write`, `pull_requests` (read, or write for the comment) and
@@ -10170,8 +10280,8 @@ module Infrawrench
 
   # Spec schema: `PrCheckPreview`.
   type pr_check_preview = {
-    "report" => pr_check_report & Hash[String, untyped],
-    "conclusion" => pr_check_conclusion & String,
+    "report" => pr_check_report,
+    "conclusion" => pr_check_conclusion,
     "title" => String,
     "markdown" => String
   }
@@ -10189,36 +10299,45 @@ module Infrawrench
 
   # Spec schema: `PrCheckReport`.
   type pr_check_report = {
-      "generatedAt" => String,
-      "files" => Array[{
-        "path" => String,
-        "kind" => "terraform" | "infrafile" | "kubernetes",
-        "status" => "added" | "modified" | "removed" | "renamed",
-        "analysed" => bool,
-        "note" => String | nil
-      }],
-      "changes" => Array[pr_check_change],
-      "totals" => {
-        "monthlyDelta" => Numeric | nil,
-        "currency" => String | nil,
-        "partial" => bool,
-        "pricedChanges" => Integer,
-        "unpricedChanges" => Integer,
-        "otherCurrencyChanges" => Integer
-      },
-      "blast" => {
-        "touchedResources" => Integer,
-        "dependants" => Integer,
-        "highestSeverity" => "none" | "low" | "medium" | "high" | "unknown" | nil
-      },
-      "notes" => Array[String],
-      "truncated" => bool
-    }
-    | nil
+    "generatedAt" => String,
+    "files" => Array[{
+      "path" => String,
+      "kind" => "terraform" | "infrafile" | "kubernetes",
+      "status" => "added" | "modified" | "removed" | "renamed",
+      "analysed" => bool,
+      "note" => String | nil
+    }],
+    "changes" => Array[pr_check_change],
+    "totals" => {
+      "monthlyDelta" => Numeric | nil,
+      "currency" => String | nil,
+      "partial" => bool,
+      "pricedChanges" => Integer,
+      "unpricedChanges" => Integer,
+      "otherCurrencyChanges" => Integer
+    },
+    "blast" => {
+      "touchedResources" => Integer,
+      "dependants" => Integer,
+      "highestSeverity" => "none" | "low" | "medium" | "high" | "unknown" | nil
+    },
+    "notes" => Array[String],
+    "truncated" => bool
+  }
 
   # Spec schema: `PrCheckRepository`.
-  type pr_check_repository = pr_check_repository_input
-    & { "id" => String, "createdAt" => String, "updatedAt" => String }
+  type pr_check_repository = {
+    "installationId" => Integer,
+    "repo" => String,
+    "enabled" => bool,
+    "commentEnabled" => bool,
+    "costThreshold" => Numeric | nil,
+    "thresholdConclusion" => pr_check_threshold_conclusion,
+    "directories" => Array[String],
+    "id" => String,
+    "createdAt" => String,
+    "updatedAt" => String
+  }
 
   # Spec schema: `PrCheckRepositoryInput`.
   type pr_check_repository_input = {
@@ -10241,10 +10360,10 @@ module Infrawrench
     "pullUrl" => String | nil,
     "headSha" => String,
     "status" => "running" | "completed" | "failed",
-    "conclusion" => pr_check_conclusion,
+    "conclusion" => pr_check_conclusion | nil,
     "checkRunUrl" => String | nil,
     "commentUrl" => String | nil,
-    "report" => pr_check_report,
+    "report" => pr_check_report | nil,
     "error" => String | nil,
     "createdAt" => String,
     "completedAt" => String | nil
@@ -10282,15 +10401,11 @@ module Infrawrench
     "helpLink" => { "label" => String, "url" => String } | nil
   }
 
-  # Declared when the plugin supports credential preflight (per-capability
-  # permission checks). `null` for plugins without it.
-  #
   # Spec schema: `PreflightDeclaration`.
   type preflight_declaration = {
-      "capabilities" => Array[preflight_capability],
-      ?"templateFormat" => { "label" => String, "language" => "json" | "yaml" | "text" }
-    }
-    | nil
+    "capabilities" => Array[preflight_capability],
+    ?"templateFormat" => { "label" => String, "language" => "json" | "yaml" | "text" }
+  }
 
   # Spec schema: `PreflightPermission`.
   type preflight_permission = { "id" => String, "label" => String }
@@ -10318,12 +10433,8 @@ module Infrawrench
     | "africa"
     | "oceania"
 
-  # Monthly amount in the org's display currency (converted at the org's stated
-  # rate), or in the native currency when no display currency is configured;
-  # null when there is no rate. Sorting and `maxMonthlyPrice` use it.
-  #
   # Spec schema: `PriceCatalogComparable`.
-  type price_catalog_comparable = { "amount" => Numeric, "currency" => String } | nil
+  type price_catalog_comparable = { "amount" => Numeric, "currency" => String }
 
   # Spec schema: `PriceCatalogCompareProvider`.
   type price_catalog_compare_provider = {
@@ -10333,14 +10444,14 @@ module Infrawrench
     "regionLabel" => String | nil,
     "state" => price_catalog_provider_state,
     "error" => String | nil,
-    "best" => price_catalog_row & (Hash[String, untyped] | nil),
+    "best" => price_catalog_row | nil,
     "alternatives" => Array[price_catalog_row]
   }
 
   # Spec schema: `PriceCatalogCompareResponse`.
   type price_catalog_compare_response = {
     "target" => price_catalog_compare_target,
-    "reference" => price_catalog_row & (Hash[String, untyped] | nil),
+    "reference" => price_catalog_row | nil,
     "area" => price_catalog_area,
     "rateType" => price_rate_type,
     "providers" => Array[price_catalog_compare_provider],
@@ -10411,7 +10522,7 @@ module Infrawrench
     "regionLabel" => String,
     "price" => price_catalog_price,
     "monthlyAmount" => Numeric | nil,
-    "comparable" => price_catalog_comparable,
+    "comparable" => price_catalog_comparable | nil,
     "otherPrices" => Array[price_catalog_price],
     "estimate" => { "resourceTypeId" => String, "fields" => Hash[String, String] } | nil
   }
@@ -10477,10 +10588,10 @@ module Infrawrench
 
   # Spec schema: `PricingPreviewRequest`.
   type pricing_preview_request = {
-    ?"rule" => billing_rule_input & (Hash[String, untyped] | nil),
+    ?"rule" => untyped,
     ?"ruleId" => String | nil,
     ?"managedAccountId" => String | nil,
-    ?"pricing" => managed_account_pricing,
+    ?"pricing" => untyped,
     ?"month" => String | nil
   }
 
@@ -10494,7 +10605,7 @@ module Infrawrench
     "before" => Hash[String, Numeric],
     "after" => Hash[String, Numeric],
     "effects" => Array[pricing_effect],
-    "coverage" => rerate_coverage,
+    "coverage" => rerate_coverage | nil,
     "warnings" => Array[String],
     "expressionFailures" => Array[pricing_expression_failure],
     "changes" => Array[{
@@ -10732,13 +10843,12 @@ module Infrawrench
   #
   # Spec schema: `QuietHours`.
   type quiet_hours = {
-      "timezone" => String,
-      "startMinute" => Integer,
-      "endMinute" => Integer,
-      "days" => Array[Integer],
-      "urgentOverride" => alert_severity & (String | nil)
-    }
-    | nil
+    "timezone" => String,
+    "startMinute" => Integer,
+    "endMinute" => Integer,
+    "days" => Array[Integer],
+    "urgentOverride" => alert_severity | nil
+  }
 
   # Spec schema: `QuotaAccountStatus`.
   type quota_account_status = {
@@ -10930,16 +11040,15 @@ module Infrawrench
 
   # Spec schema: `RerateCoverage`.
   type rerate_coverage = {
-      "byCurrency" => Hash[String, { "listPriced" => Numeric, "listTotal" => Numeric, "fallback" => Numeric }],
-      "services" => Array[{
-        "pluginId" => String,
-        "service" => String,
-        "currency" => String,
-        "listPriced" => Numeric,
-        "fallback" => Numeric
-      }]
-    }
-    | nil
+    "byCurrency" => Hash[String, { "listPriced" => Numeric, "listTotal" => Numeric, "fallback" => Numeric }],
+    "services" => Array[{
+      "pluginId" => String,
+      "service" => String,
+      "currency" => String,
+      "listPriced" => Numeric,
+      "fallback" => Numeric
+    }]
+  }
 
   # Spec schema: `Resource`.
   type resource = {
@@ -10951,26 +11060,22 @@ module Infrawrench
     "externalId" => String | nil,
     "fieldsJson" => json_object,
     "outputsJson" => json_object,
-    "parentResourceId" => resource_id & (String | nil)
+    "parentResourceId" => resource_id | nil
   }
 
-  # Estimated monthly CO2e of the same configuration, beside its price. Null for
-  # a peer resource or when the size catalogue could not be read.
-  #
   # Spec schema: `ResourceCarbonEstimate`.
   type resource_carbon_estimate = {
-      "estimate" => carbon_footprint,
-      "reason" => "unsupported-provider" | "unknown-region" | "unknown-size" | nil,
-      "inScope" => bool,
-      "role" => "instance" | "aggregate",
-      "assumptions" => {
-        "cpuUtilization" => Numeric,
-        "coefficientSource" => String,
-        "coefficientVintage" => String,
-        "scope" => String
-      }
+    "estimate" => carbon_footprint | nil,
+    "reason" => "unsupported-provider" | "unknown-region" | "unknown-size" | nil,
+    "inScope" => bool,
+    "role" => "instance" | "aggregate",
+    "assumptions" => {
+      "cpuUtilization" => Numeric,
+      "coefficientSource" => String,
+      "coefficientVintage" => String,
+      "scope" => String
     }
-    | nil
+  }
 
   # Spec schema: `ResourceChangeEntry`.
   type resource_change_entry = {
@@ -10988,7 +11093,20 @@ module Infrawrench
   }
 
   # Spec schema: `ResourceChangeFeedEntry`.
-  type resource_change_feed_entry = resource_change_entry & { "accountName" => String | nil }
+  type resource_change_feed_entry = {
+    "id" => String,
+    "resourceId" => resource_id,
+    "accountId" => String,
+    "pluginId" => String,
+    "resourceTypeId" => String,
+    "displayName" => String,
+    "changeKind" => resource_change_kind,
+    "diff" => Array[resource_field_change],
+    ?"origin" => "schedule" | nil,
+    "createdAt" => String,
+    ?"revertedAt" => String | nil,
+    "accountName" => String | nil
+  }
 
   # Spec schema: `ResourceChangeFeedResponse`.
   type resource_change_feed_response = { "entries" => Array[resource_change_feed_entry], "total" => Integer }
@@ -11088,24 +11206,19 @@ module Infrawrench
   type resource_lease_list = { "leases" => Array[resource_lease] }
 
   # Spec schema: `ResourceLeaseLookup`.
-  type resource_lease_lookup = { "lease" => resource_lease & (Hash[String, untyped] | nil) }
+  type resource_lease_lookup = { "lease" => resource_lease | nil }
 
   # Spec schema: `ResourceLeaseUpdate`.
   type resource_lease_update = { ?"expiresAt" => String, ?"autoDelete" => bool, ?"note" => String | nil }
 
-  # Who owns this resource, or null when nobody has claimed it. Present only
-  # when the owner can be named: a resource carrying a purpose but no owner
-  # reads as null, because the question this answers is who to tell.
-  #
   # Spec schema: `ResourceOwnerAnnotation`.
   type resource_owner_annotation = {
-      "userId" => String | nil,
-      "displayName" => String,
-      "isLabel" => bool,
-      "ticketUrl" => String | nil,
-      "purpose" => String | nil
-    }
-    | nil
+    "userId" => String | nil,
+    "displayName" => String,
+    "isLabel" => bool,
+    "ticketUrl" => String | nil,
+    "purpose" => String | nil
+  }
 
   # Spec schema: `ResourceOwnership`.
   type resource_ownership = {
@@ -11126,7 +11239,7 @@ module Infrawrench
   }
 
   # Spec schema: `ResourceOwnershipEnvelope`.
-  type resource_ownership_envelope = { "ownership" => resource_ownership & (Hash[String, untyped] | nil) }
+  type resource_ownership_envelope = { "ownership" => resource_ownership | nil }
 
   # Spec schema: `ResourceOwnershipListResponse`.
   type resource_ownership_list_response = { "ownership" => Array[resource_ownership] }
@@ -11165,8 +11278,8 @@ module Infrawrench
     "version" => Numeric,
     "filters" => resource_report_filters,
     "columns" => Array[String],
-    "sort" => resource_report_sort,
-    "costRange" => cost_date_range & untyped,
+    "sort" => untyped,
+    "costRange" => cost_date_range,
     "costBasis" => cost_basis,
     "pageSize" => Integer
   }
@@ -11230,7 +11343,7 @@ module Infrawrench
     "offset" => Integer,
     "limit" => Integer,
     "truncated" => bool,
-    "sort" => resource_report_sort & Hash[String, untyped],
+    "sort" => resource_report_sort,
     "cost" => {
         "available" => bool,
         "reason" => String | nil,
@@ -11240,10 +11353,8 @@ module Infrawrench
       | nil
   }
 
-  # Null sorts by name, ascending.
-  #
   # Spec schema: `ResourceReportSort`.
-  type resource_report_sort = { "column" => String, "direction" => "asc" | "desc" } | nil
+  type resource_report_sort = { "column" => String, "direction" => "asc" | "desc" }
 
   # Spec schema: `ResourceReportTagFilter`.
   type resource_report_tag_filter = {
@@ -12057,6 +12168,7 @@ module Infrawrench
     | "parsing-rule-group"
     | "permission"
     | "perplexity-agent-model"
+    | "perplexity-async-request"
     | "perplexity-router-model"
     | "perplexity-skill"
     | "perplexity-sonar-model"
@@ -12500,7 +12612,7 @@ module Infrawrench
   type resource_type_summary = {
     "id" => String,
     "displayName" => String,
-    ?"pluralDisplayName" => String,
+    "pluralDisplayName" => String,
     ?"iconKey" => String,
     ?"showcase" => Array[{ "key" => String, "label" => String }],
     ?"parentTypeId" => String,
@@ -12518,6 +12630,9 @@ module Infrawrench
     ?"schedulable" => bool
   }
 
+  # Spec schema: `ResourceWarning`.
+  type resource_warning = { "code" => String, "message" => String }
+
   # Spec schema: `RestoreDrill`.
   type restore_drill = {
     "id" => String,
@@ -12612,7 +12727,14 @@ module Infrawrench
   }
 
   # Spec schema: `Role`.
-  type role = role_summary & { "permissions" => Array[permission] }
+  type role = {
+    "id" => String,
+    "name" => String,
+    "description" => String | nil,
+    "isSystem" => bool,
+    "systemKey" => String | nil,
+    "permissions" => Array[permission]
+  }
 
   # Spec schema: `RoleChangeRequest`.
   type role_change_request = { ?"role" => organization_role, ?"roleId" => String }
@@ -12631,13 +12753,12 @@ module Infrawrench
 
   # Spec schema: `RoleSummary`.
   type role_summary = {
-      "id" => String,
-      "name" => String,
-      "description" => String | nil,
-      "isSystem" => bool,
-      "systemKey" => String | nil
-    }
-    | nil
+    "id" => String,
+    "name" => String,
+    "description" => String | nil,
+    "isSystem" => bool,
+    "systemKey" => String | nil
+  }
 
   # Spec schema: `RoleUpdateRequest`.
   type role_update_request = { ?"name" => String, ?"description" => String | nil, ?"permissions" => Array[permission] }
@@ -12761,6 +12882,9 @@ module Infrawrench
     "updatedAt" => String
   }
 
+  # Spec schema: `SavedCostFilterInUse`.
+  type saved_cost_filter_in_use = { "error" => String, "referents" => Array[saved_cost_filter_referent] }
+
   # Spec schema: `SavedCostFilterInput`.
   type saved_cost_filter_input = {
     "name" => String,
@@ -12769,6 +12893,9 @@ module Infrawrench
     ?"query" => String
   }
 
+  # Spec schema: `SavedCostFilterNameConflict`.
+  type saved_cost_filter_name_conflict = { "error" => String }
+
   # Spec schema: `SavedCostFilterReferent`.
   type saved_cost_filter_referent = {
     "kind" => "budget" | "cost_report" | "cost_graph_widget" | "cost_visibility_scope",
@@ -12780,15 +12907,7 @@ module Infrawrench
 
   # Spec schema: `SavedCostFilterTerm`.
   type saved_cost_filter_term = {
-    "dimension" => "provider"
-      | "account"
-      | "service"
-      | "region"
-      | "resource"
-      | "tag"
-      | "charge_type"
-      | "commitment"
-      | "virtual_tag",
+    "dimension" => cost_dimension,
     "op" => cost_filter_operator,
     "values" => Array[String],
     ?"tagKey" => String
@@ -12889,7 +13008,7 @@ module Infrawrench
     "horizonEndsOn" => String | nil,
     "attributedCostCentreId" => String | nil,
     "attributedCostCentreName" => String | nil,
-    "shortfall" => savings_shortfall,
+    "shortfall" => savings_shortfall | nil,
     "editable" => "full" | "annotate" | "none"
   }
 
@@ -12918,10 +13037,10 @@ module Infrawrench
     "resourceTypeId" => String | nil,
     "resourceTypeName" => String | nil,
     "tags" => Hash[String, String],
-    "monthlySavings" => savings_finding_money,
+    "monthlySavings" => savings_finding_money | nil,
     "status" => savings_finding_status,
     "statusChangedAt" => String | nil,
-    "statusChangedBy" => savings_finding_actor,
+    "statusChangedBy" => savings_finding_actor | nil,
     "statusNote" => String | nil,
     "resolution" => "manual" | "resolved" | nil,
     "detectedAt" => String,
@@ -12930,10 +13049,8 @@ module Infrawrench
     "realizedSavings" => { "eventId" => String, "title" => String } | nil
   }
 
-  # Null for the initial Ready and automatic changes.
-  #
   # Spec schema: `SavingsFindingActor`.
-  type savings_finding_actor = { "userId" => String, "name" => String | nil } | nil
+  type savings_finding_actor = { "userId" => String, "name" => String | nil }
 
   # Empty lists and blank fields are dropped on write.
   #
@@ -12957,11 +13074,8 @@ module Infrawrench
   # Spec schema: `SavingsFindingKind`.
   type savings_finding_kind = "orphan" | "oversized" | "extended_support" | "seat"
 
-  # What acting on it saves per month; null when the finder has no price (and,
-  # for orphans, when the caller lacks `costs:read`, as on `/orphans`).
-  #
   # Spec schema: `SavingsFindingMoney`.
-  type savings_finding_money = { "amount" => Numeric, "currency" => String } | nil
+  type savings_finding_money = { "amount" => Numeric, "currency" => String }
 
   # Spec schema: `SavingsFindingSort`.
   type savings_finding_sort = {
@@ -12980,12 +13094,12 @@ module Infrawrench
     "key" => String,
     "status" => savings_finding_status,
     "statusChangedAt" => String,
-    "statusChangedBy" => savings_finding_actor,
+    "statusChangedBy" => savings_finding_actor | nil,
     "statusNote" => String | nil,
     "resolution" => "manual" | "resolved" | nil
   }
 
-  # Status tab. Defaults to `all` (or the view's).
+  # A status, `open` (Ready or In progress), or `all`.
   #
   # Spec schema: `SavingsFindingStatusFilter`.
   type savings_finding_status_filter = "open" | "ready" | "in_progress" | "completed" | "archived" | "all"
@@ -13011,27 +13125,26 @@ module Infrawrench
       "completed" => Integer,
       "archived" => Integer
     },
-    "potentialMonthly" => Array[savings_finding_money & Hash[String, untyped]],
+    "potentialMonthly" => Array[savings_finding_money],
     "unpricedOpenCount" => Integer,
-    "realized" => Array[savings_finding_money & Hash[String, untyped]] | nil,
+    "realized" => Array[savings_finding_money] | nil,
     "realizedWindowDays" => Integer,
     "savingsRate" => Array[{ "currency" => String, "rate" => Numeric }] | nil
   }
 
   # Spec schema: `SavingsShortfall`.
   type savings_shortfall = {
-      "kind" => "below_projection" | "grew_back",
-      "realizedPerDay" => Numeric,
-      "projectedPerDay" => Numeric | nil
-    }
-    | nil
+    "kind" => "below_projection" | "grew_back",
+    "realizedPerDay" => Numeric,
+    "projectedPerDay" => Numeric | nil
+  }
 
   # Spec schema: `SavingsView`.
   type savings_view = {
     "id" => String,
     "name" => String,
     "description" => String | nil,
-    "status" => savings_finding_status_filter & untyped,
+    "status" => savings_finding_status_filter,
     "filter" => savings_finding_filter,
     "sort" => savings_finding_sort,
     "createdByUserId" => String | nil,
@@ -13061,7 +13174,7 @@ module Infrawrench
     "description" => String | nil,
     "checks" => Array[scorecard_check],
     "levels" => Array[scorecard_level],
-    "applicableTiers" => Array[Numeric | Numeric | Numeric | Numeric],
+    "applicableTiers" => Array[Numeric],
     "alertOnLevelDrop" => bool,
     "enabled" => bool,
     "isDefault" => bool,
@@ -13110,7 +13223,7 @@ module Infrawrench
     ?"description" => String | nil,
     ?"checks" => Array[scorecard_check],
     ?"levels" => Array[scorecard_level],
-    ?"applicableTiers" => Array[Numeric | Numeric | Numeric | Numeric],
+    ?"applicableTiers" => Array[Numeric],
     ?"alertOnLevelDrop" => bool,
     ?"enabled" => bool
   }
@@ -13131,7 +13244,7 @@ module Infrawrench
       "id" => String,
       "name" => String,
       "slug" => String,
-      "tier" => Numeric | Numeric | Numeric | Numeric | nil,
+      "tier" => Numeric | nil,
       "ownerTeam" => String | nil
     }],
     "results" => Array[scorecard_result]
@@ -13155,7 +13268,7 @@ module Infrawrench
     ?"description" => String | nil,
     ?"checks" => Array[scorecard_check],
     ?"levels" => Array[scorecard_level],
-    ?"applicableTiers" => Array[Numeric | Numeric | Numeric | Numeric],
+    ?"applicableTiers" => Array[Numeric],
     ?"alertOnLevelDrop" => bool,
     ?"enabled" => bool
   }
@@ -13163,7 +13276,6 @@ module Infrawrench
   # Spec schema: `SearchHit`.
   type search_hit = {
     "id" => resource_id,
-    ?"kind" => search_result_kind,
     "pluginId" => String,
     "pluginDisplayName" => String,
     "pluginLogoSvg" => String,
@@ -13172,7 +13284,8 @@ module Infrawrench
     "accountId" => String,
     "accountName" => String,
     "displayName" => String,
-    ?"subtitle" => String
+    ?"subtitle" => String,
+    ?"kind" => search_result_kind
   }
 
   # What a search hit is. `resource` and `workflow` are the original kinds; the
@@ -13251,7 +13364,7 @@ module Infrawrench
     },
     ?"targetSeatType" => String,
     ?"reason" => String,
-    ?"remediation" => finding_remediation & Hash[String, untyped]
+    ?"remediation" => finding_remediation
   }
 
   # Spec schema: `SeatLimitResponse`.
@@ -13363,7 +13476,7 @@ module Infrawrench
     "name" => String,
     "slug" => String,
     "description" => String | nil,
-    "tier" => Numeric | Numeric | Numeric | Numeric | nil,
+    "tier" => Numeric | nil,
     "ownerTeam" => String | nil,
     "ownerUserIds" => Array[String],
     "links" => Array[service_link],
@@ -13386,7 +13499,7 @@ module Infrawrench
     "name" => String,
     ?"slug" => String,
     ?"description" => String | nil,
-    ?"tier" => Numeric | Numeric | Numeric | Numeric | nil,
+    ?"tier" => Numeric | nil,
     ?"ownerTeam" => String | nil,
     ?"ownerUserIds" => Array[String],
     ?"links" => Array[service_link],
@@ -13422,19 +13535,18 @@ module Infrawrench
     "externalId" => String | nil,
     "source" => "manual" | "rule",
     "ruleIndex" => Integer | nil,
-    "owner" => service_member_owner,
+    "owner" => service_member_owner | nil,
     "missing" => bool
   }
 
   # Spec schema: `ServiceMemberOwner`.
   type service_member_owner = {
-      "userId" => String | nil,
-      "displayName" => String,
-      "isLabel" => bool,
-      "ticketUrl" => String | nil,
-      "purpose" => String | nil
-    }
-    | nil
+    "userId" => String | nil,
+    "displayName" => String,
+    "isLabel" => bool,
+    "ticketUrl" => String | nil,
+    "purpose" => String | nil
+  }
 
   # Spec schema: `ServiceMembersRequest`.
   type service_members_request = { "resourceIds" => Array[String] }
@@ -13449,31 +13561,8 @@ module Infrawrench
     "accountId" => String | nil
   }
 
-  # Spec schema: `ServicePostureFinding`.
-  type service_posture_finding = {
-    "resourceId" => String,
-    "pluginId" => String,
-    "pluginName" => String,
-    "resourceTypeId" => String,
-    "resourceTypeName" => String,
-    "accountId" => String,
-    "accountName" => String,
-    "displayName" => String,
-    "externalId" => String | nil,
-    "ruleId" => String,
-    "title" => String,
-    "severity" => "critical" | "high" | "medium" | "low",
-    "category" => String,
-    "reason" => String
-  }
-
   # Spec schema: `ServiceRef`.
-  type service_ref = {
-    "id" => String,
-    "name" => String,
-    "slug" => String,
-    "tier" => Numeric | Numeric | Numeric | Numeric | nil
-  }
+  type service_ref = { "id" => String, "name" => String, "slug" => String, "tier" => Numeric | nil }
 
   # Spec schema: `ServiceScoreBadge`.
   type service_score_badge = {
@@ -13526,7 +13615,7 @@ module Infrawrench
     "findings" => {
       "posture" => {
         "counts" => { "critical" => Integer, "high" => Integer, "medium" => Integer, "low" => Integer },
-        "items" => Array[service_posture_finding]
+        "items" => Array[posture_finding]
       },
       "orphans" => Array[{ "resourceId" => String, "resourceName" => String, "reason" => String }],
       "backups" => Array[{ "resourceId" => String, "resourceName" => String, "kind" => String, "detail" => String }],
@@ -13550,7 +13639,7 @@ module Infrawrench
     ?"name" => String,
     ?"slug" => String,
     ?"description" => String | nil,
-    ?"tier" => Numeric | Numeric | Numeric | Numeric | nil,
+    ?"tier" => Numeric | nil,
     ?"ownerTeam" => String | nil,
     ?"ownerUserIds" => Array[String],
     ?"links" => Array[service_link],
@@ -13622,7 +13711,14 @@ module Infrawrench
   type set_default_dashboard_request = { "dashboardId" => String }
 
   # Spec schema: `SftpDeleteRequest`.
-  type sftp_delete_request = sftp_list_request & { "isDir" => bool }
+  type sftp_delete_request = {
+    "accountId" => String,
+    "path" => String,
+    ?"sshKeyId" => String,
+    ?"sshHost" => String,
+    ?"sshUsername" => String,
+    "isDir" => bool
+  }
 
   # Spec schema: `SftpEntry`.
   type sftp_entry = {
@@ -13733,7 +13829,27 @@ module Infrawrench
   type shared_console_state = { "share" => shared_console, "participants" => Array[shared_console_participant] }
 
   # Spec schema: `SharedConsoleSummary`.
-  type shared_console_summary = shared_console & { "participants" => Array[shared_console_participant] }
+  type shared_console_summary = {
+    "id" => String,
+    "routingKey" => String,
+    "ownerUserId" => String | nil,
+    "ownerName" => String | nil,
+    "accountId" => String | nil,
+    "resourceId" => String | nil,
+    "host" => String,
+    "port" => Integer,
+    "username" => String,
+    "allowHandover" => bool,
+    "status" => "active" | "revoked" | "ended",
+    "inviteTokenPrefix" => String | nil,
+    "inviteExpiresAt" => String | nil,
+    "inviteConsumedAt" => String | nil,
+    "recordingId" => String | nil,
+    "ptyCols" => Integer,
+    "ptyRows" => Integer,
+    "createdAt" => String,
+    "participants" => Array[shared_console_participant]
+  }
 
   # Spec schema: `ShowbackReport`.
   type showback_report = {
@@ -13818,7 +13934,7 @@ module Infrawrench
     "currency" => String | nil,
     "createdAt" => String,
     "updatedAt" => String,
-    ?"remediation" => finding_remediation & Hash[String, untyped]
+    ?"remediation" => finding_remediation & untyped
   }
 
   # Spec schema: `SleepScheduleCreate`.
@@ -13869,7 +13985,7 @@ module Infrawrench
     "name" => String,
     "description" => String | nil,
     "targetPercent" => Numeric,
-    "windowDays" => Numeric | Numeric | Numeric,
+    "windowDays" => Numeric,
     "alertsEnabled" => bool,
     "suggestFreeze" => bool,
     "enabled" => bool,
@@ -13883,7 +13999,7 @@ module Infrawrench
     "probeName" => String | nil,
     "resourceName" => String | nil,
     "accountId" => String | nil,
-    "pluginId" => plugin_id & (String | nil),
+    "pluginId" => plugin_id | nil,
     "resourceTypeId" => String | nil,
     "status" => "exhausted" | "fast_burn" | "slow_burn" | "ok" | "unknown",
     "sli" => Numeric | nil,
@@ -13901,10 +14017,8 @@ module Infrawrench
     "updatedAt" => String
   }
 
-  # The change freeze in effect, if any.
-  #
   # Spec schema: `SloActiveFreeze`.
-  type slo_active_freeze = { "id" => String, "name" => String, "endsAt" => String | nil } | nil
+  type slo_active_freeze = { "id" => String, "name" => String, "endsAt" => String | nil }
 
   # Spec schema: `SloBucket`.
   type slo_bucket = { "startMs" => Numeric, "good" => Numeric, "total" => Numeric }
@@ -13912,8 +14026,8 @@ module Infrawrench
   # Spec schema: `SloCreate`.
   type slo_create = {
     "name" => String,
-    ?"description" => String | nil,
     "sliKind" => "probe_availability" | "probe_latency" | "metric_threshold",
+    ?"description" => String | nil,
     ?"probeId" => String | nil,
     ?"latencyThresholdMs" => Integer | nil,
     ?"resourceId" => String | nil,
@@ -13921,17 +14035,17 @@ module Infrawrench
     ?"comparator" => "<" | "<=" | ">" | ">=" | nil,
     ?"threshold" => Numeric | nil,
     ?"targetPercent" => Numeric,
-    ?"windowDays" => Numeric | Numeric | Numeric,
+    ?"windowDays" => Numeric,
     ?"alertsEnabled" => bool,
     ?"suggestFreeze" => bool,
     ?"enabled" => bool
   }
 
   # Spec schema: `SloDetail`.
-  type slo_detail = { "slo" => slo, "buckets" => Array[slo_bucket], "activeFreeze" => slo_active_freeze }
+  type slo_detail = { "slo" => slo, "buckets" => Array[slo_bucket], "activeFreeze" => slo_active_freeze | nil }
 
   # Spec schema: `SloFreezeRequest`.
-  type slo_freeze_request = { ?"durationHours" => Numeric | Numeric | Numeric | nil, ?"reason" => String }
+  type slo_freeze_request = { ?"durationHours" => Numeric | nil, ?"reason" => String }
 
   # Spec schema: `SloList`.
   type slo_list = { "slos" => Array[slo] }
@@ -13952,8 +14066,8 @@ module Infrawrench
   # Spec schema: `SloUpdate`.
   type slo_update = {
     ?"name" => String,
-    ?"description" => String | nil,
     ?"sliKind" => "probe_availability" | "probe_latency" | "metric_threshold",
+    ?"description" => String | nil,
     ?"probeId" => String | nil,
     ?"latencyThresholdMs" => Integer | nil,
     ?"resourceId" => String | nil,
@@ -13961,7 +14075,7 @@ module Infrawrench
     ?"comparator" => "<" | "<=" | ">" | ">=" | nil,
     ?"threshold" => Numeric | nil,
     ?"targetPercent" => Numeric,
-    ?"windowDays" => Numeric | Numeric | Numeric,
+    ?"windowDays" => Numeric,
     ?"alertsEnabled" => bool,
     ?"suggestFreeze" => bool,
     ?"enabled" => bool
@@ -13971,7 +14085,13 @@ module Infrawrench
   type sql_estimate_request = { "accountId" => String, "resourceId" => resource_id, "sql" => String }
 
   # Spec schema: `SqlExecuteRequest`.
-  type sql_execute_request = sql_query_request & { ?"params" => Array[untyped] }
+  type sql_execute_request = {
+    "accountId" => String,
+    ?"resourceId" => resource_id,
+    ?"resourceTypeId" => String,
+    "sql" => String,
+    ?"params" => untyped
+  }
 
   # Spec schema: `SqlExecuteResponse`.
   type sql_execute_response = { "affectedRows" => Integer }
@@ -14049,6 +14169,17 @@ module Infrawrench
   # Spec schema: `SshFanoutTargetsResponse`.
   type ssh_fanout_targets_response = { "targets" => Array[ssh_fanout_target] }
 
+  # Spec schema: `SshHostKeyTrustRequired`.
+  type ssh_host_key_trust_required = {
+    "error" => "ssh_host_key_trust_required",
+    "message" => String,
+    "kind" => "unknown" | "mismatch",
+    "host" => String,
+    "port" => Integer,
+    "presentedFingerprint" => String,
+    "storedFingerprint" => String | nil
+  }
+
   # Spec schema: `SshInstallAccount`.
   type ssh_install_account = {
     "accountId" => String,
@@ -14147,7 +14278,6 @@ module Infrawrench
   # Spec schema: `StarredItem`.
   type starred_item = {
     "id" => resource_id,
-    "kind" => search_result_kind,
     "pluginId" => String,
     "pluginDisplayName" => String,
     "pluginLogoSvg" => String,
@@ -14157,6 +14287,7 @@ module Infrawrench
     "accountName" => String,
     "displayName" => String,
     ?"subtitle" => String,
+    "kind" => search_result_kind,
     "starredAt" => String
   }
 
@@ -14250,12 +14381,11 @@ module Infrawrench
 
   # Spec schema: `Subscription`.
   type subscription = {
-      "status" => "trialing" | "active" | "past_due" | "canceled" | "unpaid",
-      "seatCount" => Integer,
-      "currentPeriodEnd" => String | nil,
-      "stripeCustomerId" => String
-    }
-    | nil
+    "status" => "trialing" | "active" | "past_due" | "canceled" | "unpaid",
+    "seatCount" => Integer,
+    "currentPeriodEnd" => String | nil,
+    "stripeCustomerId" => String
+  }
 
   # Spec schema: `SubscriptionCheckoutRequest`.
   type subscription_checkout_request = { ?"measurement" => revnu_checkout_measurement }
@@ -14263,7 +14393,7 @@ module Infrawrench
   # Two allocation rule ids in the same org whose priorities should be swapped.
   #
   # Spec schema: `SwapAllocationRulesBody`.
-  type swap_allocation_rules_body = { "aId" => String, "bId" => String }
+  type swap_allocation_rules_body = { "aId" => untyped, "bId" => untyped }
 
   # Spec schema: `SyncResponse`.
   type sync_response = {
@@ -14280,7 +14410,7 @@ module Infrawrench
     "externalId" => String | nil,
     "fieldsJson" => json_object,
     "outputsJson" => json_object,
-    "parentResourceId" => resource_id & (String | nil)
+    "parentResourceId" => resource_id | nil
   }
 
   # Spec schema: `SyntheticProbe`.
@@ -14295,7 +14425,7 @@ module Infrawrench
     "enabled" => bool,
     "accountId" => String | nil,
     "resourceId" => String | nil,
-    "pluginId" => plugin_id & (String | nil),
+    "pluginId" => plugin_id | nil,
     "resourceTypeId" => String | nil,
     "outputKey" => String | nil,
     "status" => "up" | "down" | "unknown",
@@ -14337,32 +14467,26 @@ module Infrawrench
     ?"enabled" => bool
   }
 
-  # The organization's T3 Code managed policy, installed on every T3 Code server
-  # (`/etc/t3code/policy.json`). On save: omit to keep the stored policy, `null`
-  # to remove it. A new T3 Code session is refused when the policy does not
-  # allow its tool or turns off the T3 Connect it is reached through.
-  #
   # Spec schema: `T3CodePolicy`.
   type t3_code_policy = {
-      "schemaVersion" => Numeric,
-      "organization" => String,
-      ?"supportUrl" => String,
-      ?"settings" => Hash[String, { ?"value" => untyped, "locked" => bool }],
-      ?"limits" => {
-        ?"maxRuntimeMode" => "approval-required" | "auto-accept-edits" | "auto" | "full-access",
-        ?"clients" => Array["desktop" | "local-browser" | "remote"],
-        ?"connect" => bool,
-        ?"webhookTasks" => bool,
-        ?"telemetry" => bool,
-        ?"browserCookieImport" => bool,
-        ?"providers" => {
-          ?"allowedDrivers" => Array[String],
-          ?"instances" => Hash[String, t3_code_policy_provider_instance]
-        },
-        ?"updates" => { "mode" => "auto" | "off", ?"feedUrl" => String, ?"allowNightly" => bool }
-      }
+    "schemaVersion" => Numeric,
+    "organization" => String,
+    ?"supportUrl" => String,
+    ?"settings" => Hash[String, { ?"value" => untyped, "locked" => bool }],
+    ?"limits" => {
+      ?"maxRuntimeMode" => "approval-required" | "auto-accept-edits" | "auto" | "full-access",
+      ?"clients" => Array["desktop" | "local-browser" | "remote"],
+      ?"connect" => bool,
+      ?"webhookTasks" => bool,
+      ?"telemetry" => bool,
+      ?"browserCookieImport" => bool,
+      ?"providers" => {
+        ?"allowedDrivers" => Array[String],
+        ?"instances" => Hash[String, t3_code_policy_provider_instance]
+      },
+      ?"updates" => { "mode" => "auto" | "off", ?"feedUrl" => String, ?"allowNightly" => bool }
     }
-    | nil
+  }
 
   # Spec schema: `T3CodePolicyProviderInstance`.
   type t3_code_policy_provider_instance = {
@@ -14488,6 +14612,29 @@ module Infrawrench
     "uri" => String | nil
   }
 
+  # Spec schema: `TunnelSshAttachRequest`.
+  type tunnel_ssh_attach_request = {
+    "tunnel" => { "accountId" => String, "pluginId" => String, "resourceId" => String },
+    "host" => {
+      "accountId" => String,
+      "pluginId" => String,
+      "resourceTypeId" => String,
+      "resourceId" => String
+    },
+    "hostname" => String,
+    "zoneId" => String,
+    ?"serviceType" => "http" | "https" | "ssh" | "tcp",
+    ?"port" => String,
+    "sshUsername" => String,
+    ?"sshKeyId" => String
+  }
+
+  # Spec schema: `TunnelSshAttachResult`.
+  type tunnel_ssh_attach_result = {
+    "steps" => Array[{ "label" => String, "ok" => bool, ?"detail" => String }],
+    ?"connectCommand" => String
+  }
+
   # Spend in the period no customer is billed for. Resolved exactly the way an
   # invoice resolves it: allocation rules claim spend for cost centres first,
   # and each account claims only what no rule did. A cost centre is assigned
@@ -14528,7 +14675,32 @@ module Infrawrench
   }
 
   # Spec schema: `UnitCostExportRequest`.
-  type unit_cost_export_request = unit_cost_query_request & { ?"format" => "csv" | "ndjson" }
+  type unit_cost_export_request = {
+    "from" => String,
+    "to" => String,
+    "binning" => "hourly" | "daily" | "weekly" | "monthly" | "quarterly" | "cumulative",
+    ?"mode" => unit_cost_mode & untyped,
+    ?"scale" => unit_cost_scale,
+    ?"labelFilters" => Array[unit_cost_label_filter],
+    ?"groupByLabel" => String,
+    ?"usageUnit" => String,
+    ?"filters" => Array[business_metric_scope_term],
+    ?"query" => String,
+    ?"savedFilterId" => String,
+    ?"costBasis" => "cash" | "amortized" | "blended",
+    ?"chargeTypes" => Array["usage"
+      | "commitment_covered_usage"
+      | "commitment_fee"
+      | "commitment_discount"
+      | "credit"
+      | "tax"
+      | "refund"
+      | "adjustment"
+      | "support"
+      | "other"],
+    ?"displayCurrency" => String,
+    ?"format" => "csv" | "ndjson"
+  }
 
   # Spec schema: `UnitCostLabelFilter`.
   type unit_cost_label_filter = { "key" => String, "op" => "in" | "not_in", "values" => Array[String] }
@@ -14560,7 +14732,7 @@ module Infrawrench
     "from" => String,
     "to" => String,
     "binning" => "hourly" | "daily" | "weekly" | "monthly" | "quarterly" | "cumulative",
-    ?"mode" => unit_cost_mode,
+    ?"mode" => unit_cost_mode & untyped,
     ?"scale" => unit_cost_scale,
     ?"labelFilters" => Array[unit_cost_label_filter],
     ?"groupByLabel" => String,
@@ -14569,7 +14741,16 @@ module Infrawrench
     ?"query" => String,
     ?"savedFilterId" => String,
     ?"costBasis" => "cash" | "amortized" | "blended",
-    ?"chargeTypes" => Array[String],
+    ?"chargeTypes" => Array["usage"
+      | "commitment_covered_usage"
+      | "commitment_fee"
+      | "commitment_discount"
+      | "credit"
+      | "tax"
+      | "refund"
+      | "adjustment"
+      | "support"
+      | "other"],
     ?"displayCurrency" => String
   }
 
@@ -14607,7 +14788,7 @@ module Infrawrench
   # raw metric. Margin ignores it. Absent is 1.
   #
   # Spec schema: `UnitCostScale`.
-  type unit_cost_scale = Numeric | Numeric | Numeric | Numeric | Numeric
+  type unit_cost_scale = Numeric
 
   # Spec schema: `UnitCostSeries`.
   type unit_cost_series = {
@@ -14715,7 +14896,7 @@ module Infrawrench
       "state" => "pending" | "processing" | "ready" | "failed",
       "processedAt" => String | nil,
       "error" => String | nil,
-      "stats" => virtual_tag_stats
+      "stats" => virtual_tag_stats | nil
     },
     "createdByUserId" => String | nil,
     "createdAt" => String,
@@ -14761,13 +14942,12 @@ module Infrawrench
 
   # Spec schema: `VirtualTagStats`.
   type virtual_tag_stats = {
-      "from" => String | nil,
-      "to" => String | nil,
-      "currencies" => Array[virtual_tag_currency_stats],
-      "metricFallbackDays" => Integer,
-      "distinctValues" => Integer
-    }
-    | nil
+    "from" => String | nil,
+    "to" => String | nil,
+    "currencies" => Array[virtual_tag_currency_stats],
+    "metricFallbackDays" => Integer,
+    "distinctValues" => Integer
+  }
 
   # Spec schema: `VulnerabilityDismissal`.
   type vulnerability_dismissal = {
@@ -14802,7 +14982,7 @@ module Infrawrench
     "fixedVersion" => String | nil,
     "fixAvailable" => bool | nil,
     "exploitAvailable" => bool | nil,
-    "kev" => vulnerability_kev_entry,
+    "kev" => vulnerability_kev_entry | nil,
     "artifact" => {
       "kind" => "image" | "function" | "host" | "repository" | "package",
       "name" => String,
@@ -14817,25 +14997,18 @@ module Infrawrench
     "url" => String | nil,
     "collectedAt" => String,
     "running" => Array[vulnerability_running_ref],
-    "services" => Array[{
-      "id" => String,
-      "name" => String,
-      "slug" => String,
-      "tier" => Numeric | Numeric | Numeric | Numeric | nil
-    }]
+    "services" => Array[{ "id" => String, "name" => String, "slug" => String, "tier" => Numeric | nil }]
   }
 
-  # CISA Known Exploited Vulnerabilities entry, when listed.
-  #
   # Spec schema: `VulnerabilityKevEntry`.
-  type vulnerability_kev_entry = { "dateAdded" => String, "dueDate" => String | nil, "knownRansomware" => bool } | nil
+  type vulnerability_kev_entry = { "dateAdded" => String, "dueDate" => String | nil, "knownRansomware" => bool }
 
   # Spec schema: `VulnerabilityListResponse`.
   type vulnerability_list_response = {
     "findings" => Array[vulnerability_finding],
     "totalCount" => Integer,
     "counts" => vulnerability_severity_counts,
-    "runningCounts" => vulnerability_severity_counts & untyped,
+    "runningCounts" => vulnerability_severity_counts,
     "dismissed" => Array[dismissed_vulnerability_finding],
     "dismissedCount" => Integer,
     "sources" => Array[vulnerability_source],
@@ -14930,6 +15103,30 @@ module Infrawrench
     "principal" => "user" | "api_key" | "agent"
   }
 
+  # Spec schema: `Workflow`.
+  type workflow = {
+    "id" => String,
+    "organizationId" => String,
+    "name" => String,
+    "description" => String | nil,
+    "source" => String,
+    "trigger" => workflow_trigger,
+    "metricDefs" => Array[workflow_metric_def],
+    "enabled" => bool,
+    "webhookToken" => String | nil,
+    "hasWebhookSecret" => bool,
+    "gitLastSha" => String | nil,
+    "budgetLastFiredKey" => String | nil,
+    "nextRunAt" => String | nil,
+    "lastRunAt" => String | nil,
+    "createdByUserId" => String | nil,
+    "sourceAuthorUserId" => String | nil,
+    "syncVersion" => Integer,
+    "deletedAt" => String | nil,
+    "createdAt" => String,
+    "updatedAt" => String
+  }
+
   # Spec schema: `WorkflowApproval`.
   type workflow_approval = {
     "id" => String,
@@ -14948,9 +15145,94 @@ module Infrawrench
   # Spec schema: `WorkflowApprovalStatus`.
   type workflow_approval_status = "pending" | "approved" | "denied" | "expired"
 
+  # Spec schema: `WorkflowCheckInput`.
+  type workflow_check_input = { ?"source" => String }
+
+  # Spec schema: `WorkflowDiagnostic`.
+  type workflow_diagnostic = {
+    "line" => Integer,
+    "column" => Integer,
+    "code" => Integer,
+    "category" => "error" | "warning" | "suggestion" | "message",
+    "message" => String
+  }
+
+  # Spec schema: `WorkflowInput`.
+  type workflow_input = {
+    ?"name" => String,
+    ?"description" => String | nil,
+    ?"source" => String,
+    ?"trigger" => workflow_trigger,
+    ?"metrics" => Array[workflow_metric_def],
+    ?"enabled" => bool,
+    ?"secretIds" => Array[String],
+    ?"webhookSecret" => String | nil
+  }
+
+  # Spec schema: `WorkflowMetric`.
+  type workflow_metric = {
+    "id" => String,
+    "organizationId" => String,
+    "workflowId" => String,
+    "key" => String,
+    "label" => String,
+    "type" => String,
+    "unit" => String | nil,
+    "value" => untyped,
+    "syncVersion" => Integer,
+    "deletedAt" => String | nil,
+    "updatedAt" => String
+  }
+
+  # Spec schema: `WorkflowMetricDef`.
+  type workflow_metric_def = {
+    "key" => String,
+    "label" => String,
+    "type" => "number" | "string" | "boolean",
+    ?"unit" => String,
+    ?"description" => String
+  }
+
   # Spec schema: `WorkflowPinRequest`.
   type workflow_pin_request = { "dashboardId" => String, "workflowId" => String }
 
+  # Spec schema: `WorkflowRun`.
+  type workflow_run = {
+    "id" => String,
+    "organizationId" => String,
+    "workflowId" => String,
+    "status" => "pending" | "running" | "success" | "failure" | "canceled",
+    "triggerSource" => String,
+    "logs" => Array[workflow_run_log],
+    "output" => untyped,
+    "error" => workflow_run_error | nil,
+    "startedAt" => String | nil,
+    "finishedAt" => String | nil,
+    "durationMs" => Integer | nil,
+    "syncVersion" => Integer,
+    "createdAt" => String
+  }
+
+  # Spec schema: `WorkflowRunError`.
+  type workflow_run_error = { "message" => String, ?"stack" => String }
+
+  # Spec schema: `WorkflowRunLog`.
+  type workflow_run_log = { "at" => Numeric, "level" => "debug" | "info" | "warn" | "error", "message" => String }
+
+  # Spec schema: `WorkflowRunOutcome`.
+  type workflow_run_outcome = { "runId" => String, "result" => workflow_run_result }
+
+  # Spec schema: `WorkflowRunResult`.
+  type workflow_run_result = {
+    "status" => "pending" | "running" | "success" | "failure" | "canceled",
+    "logs" => Array[workflow_run_log],
+    ?"output" => untyped,
+    ?"error" => workflow_run_error,
+    "startedAt" => Numeric,
+    "finishedAt" => Numeric,
+    "durationMs" => Numeric
+  }
+
   # Spec schema: `WorkflowSchedule`.
   type workflow_schedule = {
     "expression" => String,
@@ -14965,7 +15247,7 @@ module Infrawrench
   type workflow_schedule_input = { "expression" => String, ?"timezone" => String | nil, ?"enabled" => bool }
 
   # Spec schema: `WorkflowScheduleResponse`.
-  type workflow_schedule_response = { "schedule" => workflow_schedule | nil | nil }
+  type workflow_schedule_response = { "schedule" => workflow_schedule | nil }
 
   # Spec schema: `WorkflowSecret`.
   type workflow_secret = {
@@ -14992,6 +15274,27 @@ module Infrawrench
   # Spec schema: `WorkflowSecretValueWrite`.
   type workflow_secret_value_write = { "value" => String }
 
+  # Spec schema: `WorkflowTrigger`.
+  type workflow_trigger = { "kind" => "manual" }
+    | { "kind" => "cron", "expression" => String, ?"timezone" => String }
+    | {
+      "kind" => "git",
+      ?"provider" => String,
+      ?"repo" => String,
+      ?"branch" => String,
+      ?"events" => Array[String],
+      ?"installationId" => Integer
+    }
+    | {
+      "kind" => "budget",
+      "budgetId" => String,
+      ?"percent" => Numeric,
+      ?"metric" => "actual" | "forecast"
+    }
+
+  # Spec schema: `WorkflowTypecheckResult`.
+  type workflow_typecheck_result = { "diagnostics" => Array[workflow_diagnostic], "hasErrors" => bool, "degraded" => bool }
+
   # Spec schema: `WorkflowTypingsResponse`.
   type workflow_typings_response = { "dts" => String }
 
@@ -15048,7 +15351,7 @@ module Infrawrench
     attr_reader preflight: AccountsPreflightNamespace
     attr_reader sync_type: AccountsSyncTypeNamespace
     def initialize: (Transport) -> void
-    def create: (body: (create_account_request & { ?"pluginId" => plugin_id }), ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> create_account_response
+    def create: (body: create_account_request, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> create_account_response
     def credential_options: (body: credential_options_request, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> credential_options_response
     def delete: (id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> ok
     def detail: (id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> account_detail
@@ -15128,8 +15431,8 @@ module Infrawrench
 
   class AgentsSettingsNamespace
     def initialize: (Transport) -> void
-    def get: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> agent_settings
-    def update: (body: (agent_settings & Hash[String, untyped]), ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> (agent_settings & Hash[String, untyped])
+    def get: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> (agent_settings | nil)
+    def update: (body: agent_settings, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> agent_settings
   end
 
   class AgentsT3PolicyNamespace
@@ -15316,7 +15619,7 @@ module Infrawrench
 
   class BlastRadiusNamespace
     def initialize: (Transport) -> void
-    def get: (resource_id: (resource_id & untyped), ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> blast_radius_report
+    def get: (resource_id: resource_id, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> blast_radius_report
   end
 
   class BudgetsEventsNamespace
@@ -15351,10 +15654,10 @@ module Infrawrench
   class BusinessMetricsImporterNamespace
     def initialize: (Transport) -> void
     def delete: (id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> ok
-    def get: (id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> { "importer" => business_metric_importer }
+    def get: (id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> { "importer" => business_metric_importer | nil }
     def run: (id: String, ?org_id: String?, ?body: { ?"from" => String, ?"to" => String }?, ?request_options: Hash[Symbol, untyped]?) -> business_metric_import_run
     def runs: (id: String, ?org_id: String?, ?limit: Integer?, ?request_options: Hash[Symbol, untyped]?) -> { "runs" => Array[business_metric_import_run] }
-    def update: (id: String, body: business_metric_importer_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> (business_metric_importer & Hash[String, untyped])
+    def update: (id: String, body: business_metric_importer_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> business_metric_importer
   end
 
   class BusinessMetricsUnitCostsNamespace
@@ -15445,6 +15748,7 @@ module Infrawrench
   class ChatConversationsPendingNamespace
     def initialize: (Transport) -> void
     def answer: (conversation_id: String, pending_id: String, body: chat_ask_question_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> chat_ask_question_result
+    def create: (conversation_id: String, pending_id: String, body: chat_pending_decision_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> chat_pending_decision_result
   end
 
   class ChatConversationsSecretRequestsNamespace
@@ -15456,11 +15760,17 @@ module Infrawrench
     attr_reader pending: ChatConversationsPendingNamespace
     attr_reader secret_requests: ChatConversationsSecretRequestsNamespace
     def initialize: (Transport) -> void
+    def create: (body: chat_conversation_create_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> chat_conversation_created
+    def delete: (conversation_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> ok
+    def get: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> chat_conversation_list
+    def get_org_org_id_chat_conversations_conversation_id: (conversation_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> chat_conversation_detail
+    def update: (conversation_id: String, body: chat_conversation_model_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> ok
   end
 
   class ChatNamespace
     attr_reader conversations: ChatConversationsNamespace
     def initialize: (Transport) -> void
+    def spend: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> chat_spend_status
   end
 
   class CommitmentsNamespace
@@ -15492,8 +15802,8 @@ module Infrawrench
     attr_reader schedules: ComplianceSchedulesNamespace
     def initialize: (Transport) -> void
     def frameworks: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> { "frameworks" => Array[compliance_framework_summary] }
-    def get: (framework: String, ?org_id: String?, ?from: String?, ?to: String?, ?request_options: Hash[Symbol, untyped]?) -> compliance_status
-    def pack: (framework: String, ?org_id: String?, ?from: String?, ?to: String?, ?request_options: Hash[Symbol, untyped]?) -> String
+    def get: (framework: String, ?org_id: String?, ?from: untyped?, ?to: untyped?, ?request_options: Hash[Symbol, untyped]?) -> compliance_status
+    def pack: (framework: String, ?org_id: String?, ?from: untyped?, ?to: untyped?, ?request_options: Hash[Symbol, untyped]?) -> String
   end
 
   class ConfigNamespace
@@ -15693,11 +16003,11 @@ module Infrawrench
 
   class CostsAnomalySuppressionsNamespace
     def initialize: (Transport) -> void
-    def create: (body: cost_anomaly_suppression_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> (cost_anomaly_suppression & Hash[String, untyped])
+    def create: (body: cost_anomaly_suppression_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> cost_anomaly_suppression
     def delete: (suppression_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> nil
-    def get: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> { "suppressions" => Array[cost_anomaly_suppression & Hash[String, untyped]] }
-    def get_org_org_id_costs_anomaly_suppressions_suppression_id: (suppression_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> (cost_anomaly_suppression & Hash[String, untyped])
-    def update: (suppression_id: String, body: cost_anomaly_suppression_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> (cost_anomaly_suppression & Hash[String, untyped])
+    def get: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> { "suppressions" => Array[cost_anomaly_suppression] }
+    def get_org_org_id_costs_anomaly_suppressions_suppression_id: (suppression_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> cost_anomaly_suppression
+    def update: (suppression_id: String, body: cost_anomaly_suppression_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> cost_anomaly_suppression
   end
 
   class CostsEfficiencyAlertSettingsNamespace
@@ -15829,7 +16139,7 @@ module Infrawrench
     def initialize: (Transport) -> void
     def create: (body: pin_request, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> ok
     def get: (pin_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> pin_full
-    def range: (pin_id: String, ?org_id: String?, ?from_ms: (Integer | nil)?, ?to_ms: (Integer | nil)?, ?request_options: Hash[Symbol, untyped]?) -> pin_range_response
+    def range: (pin_id: String, ?org_id: String?, ?from_ms: Integer?, ?to_ms: Integer?, ?request_options: Hash[Symbol, untyped]?) -> pin_range_response
   end
 
   class DashboardsRoleDefaultsNamespace
@@ -15871,7 +16181,7 @@ module Infrawrench
 
   class DependencyGraphNamespace
     def initialize: (Transport) -> void
-    def get: (?org_id: String?, ?resource_id: (resource_id & untyped)?, ?request_options: Hash[Symbol, untyped]?) -> dependency_graph_response
+    def get: (?org_id: String?, ?resource_id: resource_id?, ?request_options: Hash[Symbol, untyped]?) -> dependency_graph_response
   end
 
   class DeploymentsRunsNamespace
@@ -15956,7 +16266,7 @@ module Infrawrench
   class EnvironmentsSettingsNamespace
     def initialize: (Transport) -> void
     def get: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> environment_settings
-    def update: (?org_id: String?, ?body: environment_settings?, ?request_options: Hash[Symbol, untyped]?) -> environment_settings
+    def update: (?org_id: String?, ?body: { ?"maxTtlHours" => Integer, ?"defaultTtlHours" => Integer }?, ?request_options: Hash[Symbol, untyped]?) -> environment_settings
   end
 
   class EnvironmentsTemplatesNamespace
@@ -16027,6 +16337,19 @@ module Infrawrench
     def get: (?org_id: String?, ?refresh: "true" | "false"?, ?request_options: Hash[Symbol, untyped]?) -> extended_support_list_response
   end
 
+  class GithubInstallationsNamespace
+    def initialize: (Transport) -> void
+    def delete: (installation_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> ok
+  end
+
+  class GithubNamespace
+    attr_reader installations: GithubInstallationsNamespace
+    def initialize: (Transport) -> void
+    def install_url: (?org_id: String?, ?return_param: "agents" | "workflows" | "settings/github-issues"?, ?request_options: Hash[Symbol, untyped]?) -> github_install_url
+    def repos: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> github_app_repos
+    def status: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> github_app_status
+  end
+
   class GithubIssuesLinksNamespace
     def initialize: (Transport) -> void
     def list: (?org_id: String?, ?source_kind: github_issue_source_kind?, ?state: "open" | "closed"?, ?source_id: Array[String]?, ?request_options: Hash[Symbol, untyped]?) -> Array[github_issue_link]
@@ -16088,7 +16411,7 @@ module Infrawrench
 
   class IncidentsNotesNamespace
     def initialize: (Transport) -> void
-    def create: (incident_id: String, ?org_id: String?, ?body: incident_note_create?, ?request_options: Hash[Symbol, untyped]?) -> incident_note
+    def create: (incident_id: String, body: incident_note_create, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> incident_note
     def delete: (incident_id: String, note_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> nil
   end
 
@@ -16096,12 +16419,12 @@ module Infrawrench
     attr_reader get: IncidentsGetNamespace
     attr_reader notes: IncidentsNotesNamespace
     def initialize: (Transport) -> void
-    def create: (?org_id: String?, ?body: incident_declare?, ?request_options: Hash[Symbol, untyped]?) -> incident
+    def create: (body: incident_declare, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> incident
     def delete: (incident_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> nil
     def postmortem: (incident_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> incident_postmortem
     def retry_artifacts: (incident_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> incident
     def timeline: (incident_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> incident_timeline
-    def update: (incident_id: String, ?org_id: String?, ?body: incident_patch?, ?request_options: Hash[Symbol, untyped]?) -> incident
+    def update: (incident_id: String, body: incident_patch, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> incident
   end
 
   class InstancePricingNamespace
@@ -16128,7 +16451,7 @@ module Infrawrench
     def delete: (id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> ok
     def export: (id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> String
     def get: (id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> invoice
-    def list: (?org_id: String?, ?managed_account_id: String?, ?status: invoice_status?, ?request_options: Hash[Symbol, untyped]?) -> Array[invoice_summary]
+    def list: (?org_id: String?, ?managed_account_id: untyped?, ?status: invoice_status?, ?request_options: Hash[Symbol, untyped]?) -> Array[invoice_summary]
     def pdf: (id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> String
     def post_org_org_id_invoices_id_send: (id: String, ?org_id: String?, ?body: invoice_send_request?, ?request_options: Hash[Symbol, untyped]?) -> invoice
     def update: (id: String, body: invoice_update, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> invoice
@@ -16149,7 +16472,7 @@ module Infrawrench
     attr_reader jira: IssueWebhooksJiraNamespace
     attr_reader linear: IssueWebhooksLinearNamespace
     def initialize: (Transport) -> void
-    def github: (?request_options: Hash[Symbol, untyped]?) -> nil
+    def github: (?request_options: Hash[Symbol, untyped]?) -> { "ok" => bool }
   end
 
   class JiraLinksNamespace
@@ -16176,9 +16499,9 @@ module Infrawrench
     attr_reader webhook: JiraWebhookNamespace
     def initialize: (Transport) -> void
     def delete: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> ok
-    def get: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> { "integration" => jira_integration }
+    def get: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> { "integration" => jira_integration | nil }
     def issues: (body: create_jira_issue_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> create_jira_issue_result
-    def update: (body: jira_integration_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> (jira_integration & Hash[String, untyped])
+    def update: (body: jira_integration_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> jira_integration
     def verify: (?org_id: String?, ?body: jira_verify_input?, ?request_options: Hash[Symbol, untyped]?) -> jira_verify_result
   end
 
@@ -16196,7 +16519,7 @@ module Infrawrench
     def get: (policy_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> jit_policy
     def list: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> Array[jit_policy]
     def principal: (policy_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> jit_principal_resolution
-    def principals: (policy_id: String, ?org_id: String?, ?q: String?, ?request_options: Hash[Symbol, untyped]?) -> Array[jit_principal_option & Hash[String, untyped]]
+    def principals: (policy_id: String, ?org_id: String?, ?q: String?, ?request_options: Hash[Symbol, untyped]?) -> Array[jit_principal_option]
     def update: (policy_id: String, ?org_id: String?, ?body: jit_policy_input?, ?request_options: Hash[Symbol, untyped]?) -> jit_policy
   end
 
@@ -16276,10 +16599,10 @@ module Infrawrench
     attr_reader webhook: LinearWebhookNamespace
     def initialize: (Transport) -> void
     def delete: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> ok
-    def get: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> { "integration" => linear_integration }
+    def get: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> { "integration" => linear_integration | nil }
     def issues: (body: create_linear_issue_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> create_linear_issue_result
     def teams: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> Array[linear_team]
-    def update: (body: linear_integration_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> (linear_integration & Hash[String, untyped])
+    def update: (body: linear_integration_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> linear_integration
     def verify: (?org_id: String?, ?body: linear_verify_input?, ?request_options: Hash[Symbol, untyped]?) -> linear_verify_result
   end
 
@@ -16366,7 +16689,7 @@ module Infrawrench
   class NetworkFlowsSettingsNamespace
     def initialize: (Transport) -> void
     def get: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> network_flow_settings
-    def update: (body: network_flow_settings, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> network_flow_settings
+    def update: (body: network_flow_settings_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> network_flow_settings
   end
 
   class NetworkFlowsNamespace
@@ -16381,18 +16704,18 @@ module Infrawrench
 
   class OnCallOverridesNamespace
     def initialize: (Transport) -> void
-    def create: (?org_id: String?, ?body: on_call_override_create?, ?request_options: Hash[Symbol, untyped]?) -> on_call_override
+    def create: (body: on_call_override_create, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> on_call_override
     def delete: (override_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> nil
     def get: (?org_id: String?, ?schedule_id: String?, ?request_options: Hash[Symbol, untyped]?) -> { "overrides" => Array[on_call_override] }
   end
 
   class OnCallSchedulesNamespace
     def initialize: (Transport) -> void
-    def create: (?org_id: String?, ?body: on_call_schedule_create?, ?request_options: Hash[Symbol, untyped]?) -> on_call_schedule
+    def create: (body: on_call_schedule_create, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> on_call_schedule
     def delete: (schedule_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> nil
     def get: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> on_call_schedule_list
     def shifts: (schedule_id: String, ?org_id: String?, ?count: Integer?, ?request_options: Hash[Symbol, untyped]?) -> on_call_shifts_response
-    def update: (schedule_id: String, ?org_id: String?, ?body: on_call_schedule_update?, ?request_options: Hash[Symbol, untyped]?) -> on_call_schedule
+    def update: (schedule_id: String, body: on_call_schedule_update, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> on_call_schedule
   end
 
   class OnCallNamespace
@@ -16418,7 +16741,7 @@ module Infrawrench
     def get: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> resource_ownership_list_response
     def members: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> owner_candidate_list_response
     def resource: (resource_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> resource_ownership_envelope
-    def update: (?org_id: String?, ?body: resource_ownership_patch?, ?request_options: Hash[Symbol, untyped]?) -> (resource_ownership & (Hash[String, untyped] | nil))
+    def update: (?org_id: String?, ?body: resource_ownership_patch?, ?request_options: Hash[Symbol, untyped]?) -> (resource_ownership | nil)
   end
 
   class PagesNamespace
@@ -16445,7 +16768,7 @@ module Infrawrench
     def destinations: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> paging_destinations_response
     def events: (?org_id: String?, ?limit: Integer?, ?request_options: Hash[Symbol, untyped]?) -> paging_events_response
     def get: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> paging_providers_response
-    def settings: (account_id: String, ?org_id: String?, ?body: paging_provider_settings_input?, ?request_options: Hash[Symbol, untyped]?) -> paging_provider_settings_result
+    def settings: (account_id: String, body: paging_provider_settings_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> paging_provider_settings_result
     def sync: (account_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> paging_sync_result
   end
 
@@ -16556,11 +16879,11 @@ module Infrawrench
   class QueryMonitorsNamespace
     attr_reader get: QueryMonitorsGetNamespace
     def initialize: (Transport) -> void
-    def create: (?org_id: String?, ?body: query_monitor_create?, ?request_options: Hash[Symbol, untyped]?) -> query_monitor
+    def create: (body: query_monitor_create, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> query_monitor
     def delete: (monitor_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> nil
     def targets: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> query_monitor_targets
-    def test: (?org_id: String?, ?body: query_monitor_create?, ?request_options: Hash[Symbol, untyped]?) -> query_monitor_test_result
-    def update: (monitor_id: String, ?org_id: String?, ?body: query_monitor_update?, ?request_options: Hash[Symbol, untyped]?) -> query_monitor
+    def test: (body: { ?"name" => String, ?"description" => String | nil, ?"accountId" => String, ?"resourceId" => String | nil, ?"resourceTypeId" => String | nil, ?"sql" => String, ?"mode" => "scalar" | "rowCount", ?"operator" => "gt" | "gte" | "lt" | "lte" | "eq" | "neq", ?"threshold" => Numeric, ?"intervalMinutes" => Integer, ?"consecutiveBreaches" => Integer, ?"enabled" => bool }, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> query_monitor_test_result
+    def update: (monitor_id: String, body: query_monitor_update, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> query_monitor
   end
 
   class QuotasSettingsNamespace
@@ -16591,7 +16914,7 @@ module Infrawrench
     def list: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> Array[resource_report]
     def options: (?org_id: String?, ?types: String?, ?request_options: Hash[Symbol, untyped]?) -> resource_report_options
     def query: (?org_id: String?, ?body: resource_report_query_request?, ?request_options: Hash[Symbol, untyped]?) -> resource_report_rows
-    def rows: (id: String, ?org_id: String?, ?offset: (Integer | nil)?, ?limit: Integer?, ?sort: String?, ?direction: "asc" | "desc"?, ?request_options: Hash[Symbol, untyped]?) -> resource_report_rows
+    def rows: (id: String, ?org_id: String?, ?offset: Integer?, ?limit: Integer?, ?sort: String?, ?direction: "asc" | "desc"?, ?request_options: Hash[Symbol, untyped]?) -> resource_report_rows
     def tag_values: (key: String, ?org_id: String?, ?source: "tag" | "virtual_tag"?, ?request_options: Hash[Symbol, untyped]?) -> { "values" => Array[String] }
     def update: (id: String, ?org_id: String?, ?body: resource_report_input?, ?request_options: Hash[Symbol, untyped]?) -> resource_report
   end
@@ -16622,7 +16945,7 @@ module Infrawrench
     attr_reader ssh_install: ResourcesSshInstallNamespace
     def initialize: (Transport) -> void
     def attach: (body: attach_request, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> ok
-    def cost_estimate: (body: cost_estimate_request, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> { "estimate" => cost_estimate, "carbon" => resource_carbon_estimate }
+    def cost_estimate: (body: cost_estimate_request, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> { "estimate" => cost_estimate | nil, "carbon" => resource_carbon_estimate | nil }
     def create: (body: create_resource_request, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> create_resource_response
     def create_config: (body: create_config_request, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> json_object
     def create_pricing: (body: create_pricing_request, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> Hash[String, json_object]
@@ -16639,6 +16962,7 @@ module Infrawrench
     def nosql_command: (body: no_sql_command_request, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> { "result" => json_object }
     def peer_panes: (plugin_id: plugin_id, type_id: resource_type_id, body: peer_panes_request, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> Array[peer_pane]
     def picker_resources: (body: picker_resources_request, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> Array[picker_resource]
+    def tunnel_ssh_attach: (body: tunnel_ssh_attach_request, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> tunnel_ssh_attach_result
     def update: (body: update_resource_request, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> update_resource_response
   end
 
@@ -16655,13 +16979,13 @@ module Infrawrench
 
   class RunbooksRunsStepsNamespace
     def initialize: (Transport) -> void
-    def update: (run_id: String, step_id: String, ?org_id: String?, ?body: runbook_step_update?, ?request_options: Hash[Symbol, untyped]?) -> runbook_run
+    def update: (run_id: String, step_id: String, body: runbook_step_update, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> runbook_run
   end
 
   class RunbooksRunsNamespace
     attr_reader steps: RunbooksRunsStepsNamespace
     def initialize: (Transport) -> void
-    def close: (run_id: String, ?org_id: String?, ?body: runbook_run_close?, ?request_options: Hash[Symbol, untyped]?) -> runbook_run
+    def close: (run_id: String, body: runbook_run_close, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> runbook_run
     def create: (runbook_id: String, ?org_id: String?, ?body: runbook_run_start?, ?request_options: Hash[Symbol, untyped]?) -> runbook_run
     def get: (?org_id: String?, ?runbook_id: String?, ?incident_id: String?, ?limit: Integer?, ?request_options: Hash[Symbol, untyped]?) -> runbook_run_list
     def get_org_org_id_runbooks_runs_run_id: (run_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> runbook_run
@@ -16671,9 +16995,9 @@ module Infrawrench
     attr_reader get: RunbooksGetNamespace
     attr_reader runs: RunbooksRunsNamespace
     def initialize: (Transport) -> void
-    def create: (?org_id: String?, ?body: runbook_create?, ?request_options: Hash[Symbol, untyped]?) -> runbook
+    def create: (body: runbook_create, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> runbook
     def delete: (runbook_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> nil
-    def update: (runbook_id: String, ?org_id: String?, ?body: runbook_update?, ?request_options: Hash[Symbol, untyped]?) -> runbook
+    def update: (runbook_id: String, body: runbook_update, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> runbook
   end
 
   class SavedCostFiltersNamespace
@@ -16701,7 +17025,7 @@ module Infrawrench
 
   class SavingsFindingsNamespace
     def initialize: (Transport) -> void
-    def get: (?org_id: String?, ?view: String?, ?status: savings_finding_status_filter?, ?kind: String?, ?provider: String?, ?account: String?, ?region: String?, ?tag: String?, ?min_savings: String?, ?detected_from: String?, ?detected_to: String?, ?q: String?, ?sort: String?, ?refresh: String?, ?request_options: Hash[Symbol, untyped]?) -> savings_findings_response
+    def get: (?org_id: String?, ?view: String?, ?status: savings_finding_status_filter?, ?kind: String?, ?provider: String?, ?account: String?, ?region: String?, ?tag: Array[String]?, ?min_savings: String?, ?detected_from: String?, ?detected_to: String?, ?q: String?, ?sort: String?, ?refresh: String?, ?request_options: Hash[Symbol, untyped]?) -> savings_findings_response
     def status: (body: savings_finding_status_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> { "updated" => Array[savings_finding_status_change], "missing" => Array[String] }
   end
 
@@ -16893,7 +17217,7 @@ module Infrawrench
     def initialize: (Transport) -> void
     def create: (?org_id: String?, ?body: slo_create?, ?request_options: Hash[Symbol, untyped]?) -> slo
     def delete: (slo_id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> nil
-    def post_org_org_id_slos_slo_id_freeze: (slo_id: String, ?org_id: String?, ?body: slo_freeze_request?, ?request_options: Hash[Symbol, untyped]?) -> (slo_active_freeze & Hash[String, untyped])
+    def post_org_org_id_slos_slo_id_freeze: (slo_id: String, ?org_id: String?, ?body: slo_freeze_request?, ?request_options: Hash[Symbol, untyped]?) -> slo_active_freeze
     def sources: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> slo_sources
     def update: (slo_id: String, ?org_id: String?, ?body: slo_update?, ?request_options: Hash[Symbol, untyped]?) -> slo
   end
@@ -17029,7 +17353,7 @@ module Infrawrench
     def delete: (id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> ok
     def get: (id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> virtual_tag
     def list: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> Array[virtual_tag]
-    def preview: (body: virtual_tag_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> (virtual_tag_stats & Hash[String, untyped])
+    def preview: (body: virtual_tag_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> virtual_tag_stats
     def reprocess: (id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> virtual_tag
     def update: (id: String, body: virtual_tag_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> virtual_tag
   end
@@ -17096,7 +17420,16 @@ module Infrawrench
     attr_reader schedule: WorkflowsScheduleNamespace
     attr_reader secrets: WorkflowsSecretsNamespace
     def initialize: (Transport) -> void
+    def check: (id: String, body: workflow_check_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> workflow_typecheck_result
+    def create: (body: workflow_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> workflow
+    def delete: (id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> ok
+    def get: (id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> workflow
+    def list: (?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> Array[workflow]
+    def metrics: (id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> Array[workflow_metric]
+    def run: (id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> workflow_run_outcome
+    def runs: (id: String, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> Array[workflow_run]
     def typings: (id: String, ?org_id: String?, ?enrich: "1" | "true"?, ?request_options: Hash[Symbol, untyped]?) -> workflow_typings_response
+    def update: (id: String, body: workflow_input, ?org_id: String?, ?request_options: Hash[Symbol, untyped]?) -> workflow
   end
 
   class APIV1Client
@@ -17166,6 +17499,7 @@ module Infrawrench
     attr_reader event_subscriptions: EventSubscriptionsNamespace
     attr_reader expiring: ExpiringNamespace
     attr_reader extended_support: ExtendedSupportNamespace
+    attr_reader github: GithubNamespace
     attr_reader github_issues: GithubIssuesNamespace
     attr_reader iac: IacNamespace
     attr_reader idle_findings: IdleFindingsNamespace