smplkit 3.0.94 → 3.0.96

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ff36445adee57feff67e69239e762107a851b76750f8eeac79cbf9ad2dc14dd4
-  data.tar.gz: ff3ba7653837f651b8a43ff6997ff7f94acfbaed015c5a72161c77ec13f16a82
+  metadata.gz: a1d765730dd1bb26ebf38f16627878d7d33220bc20bd005b98b12303a18e88c1
+  data.tar.gz: 1109c9cd1b02865ae3d2148a8232509b185d828ed8762c025cf82dcfc9c9c09e
 SHA512:
-  metadata.gz: 4f2496762d0f10322736e9ae14b9164d68b1ccb781c6a53405bc024393b50cfb841026c50402a4a22bb841484ef1d232736cd5a9d0bd6608fac79678a5844d24
-  data.tar.gz: af171d9cb412cd412b01e077c257f0d7a7a80a1c0856ae3845ccc25267571493afc1aca9525febaeaf43e48c3671003f812a20c02701ff340e36883ae715fa50
+  metadata.gz: '099f6f60a8acdbd5804cd32743d7f6d6e28261de9901f08a354536da0e49a8b3cec0809790106b072cd7275daa60fdd4279b979dca22590ae74d87382bed04ed'
+  data.tar.gz: '089e631caa282df42aea0344a2e38fe17795e2d773d6799e6684ee1d389d418b0d4c1714fcf398c70b8961fdd4919b11c1b7b56f26b8e7a6e1b631853ac12447'

data/lib/smplkit/_generated/audit/lib/smplkit_audit_client/api/categories_api.rb

@@ -22,7 +22,7 @@ module SmplkitGeneratedClient::Audit
     # List Categories
     # List the distinct `category` values recorded for this account.  The resource `id` is the category value itself. Default sort is `key` ascending; pass `sort=-key` for descending. Scoped to the selected environments (see `filter[environment]`). Useful for populating filter dropdowns in a UI.
     # @param [Hash] opts the optional parameters
-    # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results are scoped to your single accessible environment; send the `X-Smplkit-Environment` header instead if you can access more than one. The reserved value `smplkit` selects platform change events that smplkit records about your own resources (flags, configuration, and so on); these are not tied to a deployment environment and are readable regardless of which environments you manage.
+    # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results cover every environment you can access. The reserved value `smplkit` selects platform change events smplkit records about your own resources; it is included by default when your plan grants change history, and requesting it explicitly without that entitlement returns 402.
     # @option opts [String] :sort Field to sort by. Prefix with `-` for descending order. Default: `key`. Allowed values: `key`, `-key`. (default to 'key')
     # @option opts [Integer] :page_number 1-based page number to return. Optional; defaults to `1` when omitted. Must be `>= 1` — requests with a smaller value are rejected with a 400 error. (default to 1)
     # @option opts [Integer] :page_size Number of items per page. Optional; defaults to `1000` when omitted. Must be between `1` and `1000` inclusive — requests outside that range are rejected with a 400 error. (default to 1000)
@@ -36,7 +36,7 @@ module SmplkitGeneratedClient::Audit
     # List Categories
     # List the distinct `category` values recorded for this account.  The resource `id` is the category value itself. Default sort is `key` ascending; pass `sort=-key` for descending. Scoped to the selected environments (see `filter[environment]`). Useful for populating filter dropdowns in a UI.
     # @param [Hash] opts the optional parameters
-    # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results are scoped to your single accessible environment; send the `X-Smplkit-Environment` header instead if you can access more than one. The reserved value `smplkit` selects platform change events that smplkit records about your own resources (flags, configuration, and so on); these are not tied to a deployment environment and are readable regardless of which environments you manage.
+    # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results cover every environment you can access. The reserved value `smplkit` selects platform change events smplkit records about your own resources; it is included by default when your plan grants change history, and requesting it explicitly without that entitlement returns 402.
     # @option opts [String] :sort Field to sort by. Prefix with `-` for descending order. Default: `key`. Allowed values: `key`, `-key`. (default to 'key')
     # @option opts [Integer] :page_number 1-based page number to return. Optional; defaults to `1` when omitted. Must be `>= 1` — requests with a smaller value are rejected with a 400 error. (default to 1)
     # @option opts [Integer] :page_size Number of items per page. Optional; defaults to `1000` when omitted. Must be between `1` and `1000` inclusive — requests outside that range are rejected with a 400 error. (default to 1000)

data/lib/smplkit/_generated/audit/lib/smplkit_audit_client/api/event_types_api.rb

@@ -22,7 +22,7 @@ module SmplkitGeneratedClient::Audit
     # List Event Types
     # List the distinct `event_type` slugs recorded for this account.  Default sort is `key` ascending; pass `sort=-key` for descending. Scoped to the selected environments (see `filter[environment]`). Without `filter[resource_type]`, returns one row per distinct event_type. With `filter[resource_type]`, returns the event_types recorded for that specific resource type.
     # @param [Hash] opts the optional parameters
-    # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results are scoped to your single accessible environment; send the `X-Smplkit-Environment` header instead if you can access more than one. The reserved value `smplkit` selects platform change events that smplkit records about your own resources (flags, configuration, and so on); these are not tied to a deployment environment and are readable regardless of which environments you manage.
+    # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results cover every environment you can access. The reserved value `smplkit` selects platform change events smplkit records about your own resources; it is included by default when your plan grants change history, and requesting it explicitly without that entitlement returns 402.
     # @option opts [String] :filter_resource_type 
     # @option opts [String] :sort Field to sort by. Prefix with `-` for descending order. Default: `key`. Allowed values: `key`, `-key`. (default to 'key')
     # @option opts [Integer] :page_number 1-based page number to return. Optional; defaults to `1` when omitted. Must be `>= 1` — requests with a smaller value are rejected with a 400 error. (default to 1)
@@ -37,7 +37,7 @@ module SmplkitGeneratedClient::Audit
     # List Event Types
     # List the distinct `event_type` slugs recorded for this account.  Default sort is `key` ascending; pass `sort=-key` for descending. Scoped to the selected environments (see `filter[environment]`). Without `filter[resource_type]`, returns one row per distinct event_type. With `filter[resource_type]`, returns the event_types recorded for that specific resource type.
     # @param [Hash] opts the optional parameters
-    # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results are scoped to your single accessible environment; send the `X-Smplkit-Environment` header instead if you can access more than one. The reserved value `smplkit` selects platform change events that smplkit records about your own resources (flags, configuration, and so on); these are not tied to a deployment environment and are readable regardless of which environments you manage.
+    # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results cover every environment you can access. The reserved value `smplkit` selects platform change events smplkit records about your own resources; it is included by default when your plan grants change history, and requesting it explicitly without that entitlement returns 402.
     # @option opts [String] :filter_resource_type 
     # @option opts [String] :sort Field to sort by. Prefix with `-` for descending order. Default: `key`. Allowed values: `key`, `-key`. (default to 'key')
     # @option opts [Integer] :page_number 1-based page number to return. Optional; defaults to `1` when omitted. Must be `>= 1` — requests with a smaller value are rejected with a 400 error. (default to 1)

data/lib/smplkit/_generated/audit/lib/smplkit_audit_client/api/events_api.rb

@@ -85,7 +85,7 @@ module SmplkitGeneratedClient::Audit
     # List Events
     # List audit events for this account.  Default sort is `-occurred_at` (newest occurrence first). Sort by `occurred_at` or `created_at`, ascending or descending — keep the same `sort` value across paginated requests so the cursor stays consistent. Filters are exact-match except `filter[occurred_at]`, which uses interval notation (e.g. `[2026-01-01T00:00:00Z,2026-01-31T00:00:00Z)`), and `filter[search]`, which is a case-insensitive substring match against `resource_id` or `description`.  Two filter-combination rules:  - `filter[resource_id]` must be accompanied by `filter[resource_type]`   (the index is keyed on the pair). - `filter[search]` must be accompanied by either `filter[occurred_at]`   or `filter[resource_type]` + `filter[resource_id]` (substring   matching has no index, so an unbounded substring scan is rejected).  No other filter combinations are required — calling the endpoint with no query parameters returns the latest events for the account, paginated.  `page[size]` defaults to 1000 and must not exceed 1000.  Pass `format=CSV` or `format=JSONL` to stream a download of the full filtered result set instead of a paginated JSON:API response. The download honors every supplied filter and ignores `page[size]` and `page[after]`.
     # @param [Hash] opts the optional parameters
-    # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results are scoped to your single accessible environment; send the `X-Smplkit-Environment` header instead if you can access more than one. The reserved value `smplkit` selects platform change events that smplkit records about your own resources (flags, configuration, and so on); these are not tied to a deployment environment and are readable regardless of which environments you manage.
+    # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results cover every environment you can access. The reserved value `smplkit` selects platform change events smplkit records about your own resources; it is included by default when your plan grants change history, and requesting it explicitly without that entitlement returns 402.
     # @option opts [String] :filter_occurred_at 
     # @option opts [String] :filter_actor_type 
     # @option opts [String] :filter_actor_id 
@@ -109,7 +109,7 @@ module SmplkitGeneratedClient::Audit
     # List Events
     # List audit events for this account.  Default sort is `-occurred_at` (newest occurrence first). Sort by `occurred_at` or `created_at`, ascending or descending — keep the same `sort` value across paginated requests so the cursor stays consistent. Filters are exact-match except `filter[occurred_at]`, which uses interval notation (e.g. `[2026-01-01T00:00:00Z,2026-01-31T00:00:00Z)`), and `filter[search]`, which is a case-insensitive substring match against `resource_id` or `description`.  Two filter-combination rules:  - `filter[resource_id]` must be accompanied by `filter[resource_type]`   (the index is keyed on the pair). - `filter[search]` must be accompanied by either `filter[occurred_at]`   or `filter[resource_type]` + `filter[resource_id]` (substring   matching has no index, so an unbounded substring scan is rejected).  No other filter combinations are required — calling the endpoint with no query parameters returns the latest events for the account, paginated.  `page[size]` defaults to 1000 and must not exceed 1000.  Pass `format=CSV` or `format=JSONL` to stream a download of the full filtered result set instead of a paginated JSON:API response. The download honors every supplied filter and ignores `page[size]` and `page[after]`.
     # @param [Hash] opts the optional parameters
-    # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results are scoped to your single accessible environment; send the `X-Smplkit-Environment` header instead if you can access more than one. The reserved value `smplkit` selects platform change events that smplkit records about your own resources (flags, configuration, and so on); these are not tied to a deployment environment and are readable regardless of which environments you manage.
+    # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results cover every environment you can access. The reserved value `smplkit` selects platform change events smplkit records about your own resources; it is included by default when your plan grants change history, and requesting it explicitly without that entitlement returns 402.
     # @option opts [String] :filter_occurred_at 
     # @option opts [String] :filter_actor_type 
     # @option opts [String] :filter_actor_id 
@@ -268,7 +268,7 @@ module SmplkitGeneratedClient::Audit
     end
 
     # Search Events
-    # Search audit events with column filters and an optional JSON Logic expression.  Scoped by `filter[environment]` (a comma-separated set). When omitted, a single-environment credential is implied; otherwise send the `X-Smplkit-Environment` header. The reserved `smplkit` value selects platform change events smplkit records about your own resources.  Without a JSON Logic `filter`: behaves like `GET /api/v1/events` with the same column filters.  With a JSON Logic `filter`: the search is silently capped to the last 30 days by `occurred_at` (intersected with any explicit `filter[occurred_at]` the caller supplied), the column filters narrow the candidate set in SQL, and the JSON Logic expression runs in memory against each candidate row using the same `json-logic-qubit` evaluator the forwarder pipeline uses. Up to 50,000 rows are scanned per request; the response's `meta.scan` block reports the scan stats so a selective filter doesn't look like \"0 matches\" when the truth is \"ceiling reached.\"
+    # Search audit events with column filters and an optional JSON Logic expression.  Scoped by `filter[environment]` (a comma-separated set). When omitted, results cover every environment you can access. The reserved `smplkit` value selects platform change events smplkit records about your own resources; it is included by default when your plan grants change history, and requesting it explicitly without that entitlement returns 402.  Without a JSON Logic `filter`: behaves like `GET /api/v1/events` with the same column filters.  With a JSON Logic `filter`: the search is silently capped to the last 30 days by `occurred_at` (intersected with any explicit `filter[occurred_at]` the caller supplied), the column filters narrow the candidate set in SQL, and the JSON Logic expression runs in memory against each candidate row using the same `json-logic-qubit` evaluator the forwarder pipeline uses. Up to 50,000 rows are scanned per request; the response's `meta.scan` block reports the scan stats so a selective filter doesn't look like \"0 matches\" when the truth is \"ceiling reached.\"
     # @param event_search_request [EventSearchRequest] 
     # @param [Hash] opts the optional parameters
     # @return [EventSearchResponse]
@@ -278,7 +278,7 @@ module SmplkitGeneratedClient::Audit
     end
 
     # Search Events
-    # Search audit events with column filters and an optional JSON Logic expression.  Scoped by `filter[environment]` (a comma-separated set). When omitted, a single-environment credential is implied; otherwise send the `X-Smplkit-Environment` header. The reserved `smplkit` value selects platform change events smplkit records about your own resources.  Without a JSON Logic `filter`: behaves like `GET /api/v1/events` with the same column filters.  With a JSON Logic `filter`: the search is silently capped to the last 30 days by `occurred_at` (intersected with any explicit `filter[occurred_at]` the caller supplied), the column filters narrow the candidate set in SQL, and the JSON Logic expression runs in memory against each candidate row using the same `json-logic-qubit` evaluator the forwarder pipeline uses. Up to 50,000 rows are scanned per request; the response's `meta.scan` block reports the scan stats so a selective filter doesn't look like \"0 matches\" when the truth is \"ceiling reached.\"
+    # Search audit events with column filters and an optional JSON Logic expression.  Scoped by `filter[environment]` (a comma-separated set). When omitted, results cover every environment you can access. The reserved `smplkit` value selects platform change events smplkit records about your own resources; it is included by default when your plan grants change history, and requesting it explicitly without that entitlement returns 402.  Without a JSON Logic `filter`: behaves like `GET /api/v1/events` with the same column filters.  With a JSON Logic `filter`: the search is silently capped to the last 30 days by `occurred_at` (intersected with any explicit `filter[occurred_at]` the caller supplied), the column filters narrow the candidate set in SQL, and the JSON Logic expression runs in memory against each candidate row using the same `json-logic-qubit` evaluator the forwarder pipeline uses. Up to 50,000 rows are scanned per request; the response's `meta.scan` block reports the scan stats so a selective filter doesn't look like \"0 matches\" when the truth is \"ceiling reached.\"
     # @param event_search_request [EventSearchRequest] 
     # @param [Hash] opts the optional parameters
     # @return [Array<(EventSearchResponse, Integer, Hash)>] EventSearchResponse data, response status code and response headers

data/lib/smplkit/_generated/audit/lib/smplkit_audit_client/api/resource_types_api.rb

@@ -22,7 +22,7 @@ module SmplkitGeneratedClient::Audit
     # List Resource Types
     # List the distinct `resource_type` slugs recorded for this account.  The resource `id` is the slug itself. Default sort is `key` ascending; pass `sort=-key` for descending. Useful for populating filter dropdowns in a UI. Results are scoped to the selected environments (see `filter[environment]`); platform resource types appear under the reserved `smplkit` value.
     # @param [Hash] opts the optional parameters
-    # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results are scoped to your single accessible environment; send the `X-Smplkit-Environment` header instead if you can access more than one. The reserved value `smplkit` selects platform change events that smplkit records about your own resources (flags, configuration, and so on); these are not tied to a deployment environment and are readable regardless of which environments you manage.
+    # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results cover every environment you can access. The reserved value `smplkit` selects platform change events smplkit records about your own resources; it is included by default when your plan grants change history, and requesting it explicitly without that entitlement returns 402.
     # @option opts [String] :sort Field to sort by. Prefix with `-` for descending order. Default: `key`. Allowed values: `key`, `-key`. (default to 'key')
     # @option opts [Integer] :page_number 1-based page number to return. Optional; defaults to `1` when omitted. Must be `>= 1` — requests with a smaller value are rejected with a 400 error. (default to 1)
     # @option opts [Integer] :page_size Number of items per page. Optional; defaults to `1000` when omitted. Must be between `1` and `1000` inclusive — requests outside that range are rejected with a 400 error. (default to 1000)
@@ -36,7 +36,7 @@ module SmplkitGeneratedClient::Audit
     # List Resource Types
     # List the distinct `resource_type` slugs recorded for this account.  The resource `id` is the slug itself. Default sort is `key` ascending; pass `sort=-key` for descending. Useful for populating filter dropdowns in a UI. Results are scoped to the selected environments (see `filter[environment]`); platform resource types appear under the reserved `smplkit` value.
     # @param [Hash] opts the optional parameters
-    # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results are scoped to your single accessible environment; send the `X-Smplkit-Environment` header instead if you can access more than one. The reserved value `smplkit` selects platform change events that smplkit records about your own resources (flags, configuration, and so on); these are not tied to a deployment environment and are readable regardless of which environments you manage.
+    # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results cover every environment you can access. The reserved value `smplkit` selects platform change events smplkit records about your own resources; it is included by default when your plan grants change history, and requesting it explicitly without that entitlement returns 402.
     # @option opts [String] :sort Field to sort by. Prefix with `-` for descending order. Default: `key`. Allowed values: `key`, `-key`. (default to 'key')
     # @option opts [Integer] :page_number 1-based page number to return. Optional; defaults to `1` when omitted. Must be `>= 1` — requests with a smaller value are rejected with a 400 error. (default to 1)
     # @option opts [Integer] :page_size Number of items per page. Optional; defaults to `1000` when omitted. Must be between `1` and `1000` inclusive — requests outside that range are rejected with a 400 error. (default to 1000)

data/lib/smplkit/_generated/audit/lib/smplkit_audit_client/models/event_search_request.rb

@@ -19,7 +19,7 @@ module SmplkitGeneratedClient::Audit
     # Optional JSON Logic expression evaluated against each row after column filters narrow the candidate set. Null, absent, or an empty object disables JSON Logic filtering. When present, the search is silently capped to the last 30 days by `occurred_at` (intersected with any explicit `filter[occurred_at]` the caller supplied).
     attr_accessor :filter
 
-    # Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results are scoped to your single accessible environment; send the `X-Smplkit-Environment` header instead if you can access more than one. The reserved value `smplkit` selects platform change events that smplkit records about your own resources (flags, configuration, and so on); these are not tied to a deployment environment and are readable regardless of which environments you manage.
+    # Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results cover every environment you can access. The reserved value `smplkit` selects platform change events smplkit records about your own resources; it is included by default when your plan grants change history, and requesting it explicitly without that entitlement returns 402.
     attr_accessor :filter_environment
 
     # Exact match on the event's `event_type` field.

data/lib/smplkit/_generated/audit/spec/api/categories_api_spec.rb

@@ -36,7 +36,7 @@ describe 'CategoriesApi' do
   # List Categories
   # List the distinct `category` values recorded for this account.  The resource `id` is the category value itself. Default sort is `key` ascending; pass `sort=-key` for descending. Scoped to the selected environments (see `filter[environment]`). Useful for populating filter dropdowns in a UI.
   # @param [Hash] opts the optional parameters
-  # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results are scoped to your single accessible environment; send the `X-Smplkit-Environment` header instead if you can access more than one. The reserved value `smplkit` selects platform change events that smplkit records about your own resources (flags, configuration, and so on); these are not tied to a deployment environment and are readable regardless of which environments you manage.
+  # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results cover every environment you can access. The reserved value `smplkit` selects platform change events smplkit records about your own resources; it is included by default when your plan grants change history, and requesting it explicitly without that entitlement returns 402.
   # @option opts [String] :sort Field to sort by. Prefix with `-` for descending order. Default: `key`. Allowed values: `key`, `-key`.
   # @option opts [Integer] :page_number 1-based page number to return. Optional; defaults to `1` when omitted. Must be `>= 1` — requests with a smaller value are rejected with a 400 error.
   # @option opts [Integer] :page_size Number of items per page. Optional; defaults to `1000` when omitted. Must be between `1` and `1000` inclusive — requests outside that range are rejected with a 400 error.

data/lib/smplkit/_generated/audit/spec/api/event_types_api_spec.rb

@@ -36,7 +36,7 @@ describe 'EventTypesApi' do
   # List Event Types
   # List the distinct `event_type` slugs recorded for this account.  Default sort is `key` ascending; pass `sort=-key` for descending. Scoped to the selected environments (see `filter[environment]`). Without `filter[resource_type]`, returns one row per distinct event_type. With `filter[resource_type]`, returns the event_types recorded for that specific resource type.
   # @param [Hash] opts the optional parameters
-  # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results are scoped to your single accessible environment; send the `X-Smplkit-Environment` header instead if you can access more than one. The reserved value `smplkit` selects platform change events that smplkit records about your own resources (flags, configuration, and so on); these are not tied to a deployment environment and are readable regardless of which environments you manage.
+  # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results cover every environment you can access. The reserved value `smplkit` selects platform change events smplkit records about your own resources; it is included by default when your plan grants change history, and requesting it explicitly without that entitlement returns 402.
   # @option opts [String] :filter_resource_type 
   # @option opts [String] :sort Field to sort by. Prefix with `-` for descending order. Default: `key`. Allowed values: `key`, `-key`.
   # @option opts [Integer] :page_number 1-based page number to return. Optional; defaults to `1` when omitted. Must be `>= 1` — requests with a smaller value are rejected with a 400 error.

data/lib/smplkit/_generated/audit/spec/api/events_api_spec.rb

@@ -48,7 +48,7 @@ describe 'EventsApi' do
   # List Events
   # List audit events for this account.  Default sort is `-occurred_at` (newest occurrence first). Sort by `occurred_at` or `created_at`, ascending or descending — keep the same `sort` value across paginated requests so the cursor stays consistent. Filters are exact-match except `filter[occurred_at]`, which uses interval notation (e.g. `[2026-01-01T00:00:00Z,2026-01-31T00:00:00Z)`), and `filter[search]`, which is a case-insensitive substring match against `resource_id` or `description`.  Two filter-combination rules:  - `filter[resource_id]` must be accompanied by `filter[resource_type]`   (the index is keyed on the pair). - `filter[search]` must be accompanied by either `filter[occurred_at]`   or `filter[resource_type]` + `filter[resource_id]` (substring   matching has no index, so an unbounded substring scan is rejected).  No other filter combinations are required — calling the endpoint with no query parameters returns the latest events for the account, paginated.  `page[size]` defaults to 1000 and must not exceed 1000.  Pass `format=CSV` or `format=JSONL` to stream a download of the full filtered result set instead of a paginated JSON:API response. The download honors every supplied filter and ignores `page[size]` and `page[after]`.
   # @param [Hash] opts the optional parameters
-  # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results are scoped to your single accessible environment; send the `X-Smplkit-Environment` header instead if you can access more than one. The reserved value `smplkit` selects platform change events that smplkit records about your own resources (flags, configuration, and so on); these are not tied to a deployment environment and are readable regardless of which environments you manage.
+  # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results cover every environment you can access. The reserved value `smplkit` selects platform change events smplkit records about your own resources; it is included by default when your plan grants change history, and requesting it explicitly without that entitlement returns 402.
   # @option opts [String] :filter_occurred_at 
   # @option opts [String] :filter_actor_type 
   # @option opts [String] :filter_actor_id 
@@ -85,7 +85,7 @@ describe 'EventsApi' do
 
   # unit tests for search_events
   # Search Events
-  # Search audit events with column filters and an optional JSON Logic expression.  Scoped by `filter[environment]` (a comma-separated set). When omitted, a single-environment credential is implied; otherwise send the `X-Smplkit-Environment` header. The reserved `smplkit` value selects platform change events smplkit records about your own resources.  Without a JSON Logic `filter`: behaves like `GET /api/v1/events` with the same column filters.  With a JSON Logic `filter`: the search is silently capped to the last 30 days by `occurred_at` (intersected with any explicit `filter[occurred_at]` the caller supplied), the column filters narrow the candidate set in SQL, and the JSON Logic expression runs in memory against each candidate row using the same `json-logic-qubit` evaluator the forwarder pipeline uses. Up to 50,000 rows are scanned per request; the response's `meta.scan` block reports the scan stats so a selective filter doesn't look like \"0 matches\" when the truth is \"ceiling reached.\"
+  # Search audit events with column filters and an optional JSON Logic expression.  Scoped by `filter[environment]` (a comma-separated set). When omitted, results cover every environment you can access. The reserved `smplkit` value selects platform change events smplkit records about your own resources; it is included by default when your plan grants change history, and requesting it explicitly without that entitlement returns 402.  Without a JSON Logic `filter`: behaves like `GET /api/v1/events` with the same column filters.  With a JSON Logic `filter`: the search is silently capped to the last 30 days by `occurred_at` (intersected with any explicit `filter[occurred_at]` the caller supplied), the column filters narrow the candidate set in SQL, and the JSON Logic expression runs in memory against each candidate row using the same `json-logic-qubit` evaluator the forwarder pipeline uses. Up to 50,000 rows are scanned per request; the response's `meta.scan` block reports the scan stats so a selective filter doesn't look like \"0 matches\" when the truth is \"ceiling reached.\"
   # @param event_search_request 
   # @param [Hash] opts the optional parameters
   # @return [EventSearchResponse]

data/lib/smplkit/_generated/audit/spec/api/resource_types_api_spec.rb

@@ -36,7 +36,7 @@ describe 'ResourceTypesApi' do
   # List Resource Types
   # List the distinct `resource_type` slugs recorded for this account.  The resource `id` is the slug itself. Default sort is `key` ascending; pass `sort=-key` for descending. Useful for populating filter dropdowns in a UI. Results are scoped to the selected environments (see `filter[environment]`); platform resource types appear under the reserved `smplkit` value.
   # @param [Hash] opts the optional parameters
-  # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results are scoped to your single accessible environment; send the `X-Smplkit-Environment` header instead if you can access more than one. The reserved value `smplkit` selects platform change events that smplkit records about your own resources (flags, configuration, and so on); these are not tied to a deployment environment and are readable regardless of which environments you manage.
+  # @option opts [String] :filter_environment Comma-separated list of environment keys to scope results to (e.g. `production,staging`). When omitted, results cover every environment you can access. The reserved value `smplkit` selects platform change events smplkit records about your own resources; it is included by default when your plan grants change history, and requesting it explicitly without that entitlement returns 402.
   # @option opts [String] :sort Field to sort by. Prefix with `-` for descending order. Default: `key`. Allowed values: `key`, `-key`.
   # @option opts [Integer] :page_number 1-based page number to return. Optional; defaults to `1` when omitted. Must be `>= 1` — requests with a smaller value are rejected with a 400 error.
   # @option opts [Integer] :page_size Number of items per page. Optional; defaults to `1000` when omitted. Must be between `1` and `1000` inclusive — requests outside that range are rejected with a 400 error.

data/lib/smplkit/account/client.rb

@@ -0,0 +1,121 @@
+# frozen_string_literal: true
+
+require "faraday"
+require "json"
+
+module Smplkit
+  module Account
+    # Resolve the (app_base_url, api_key, extra_headers) for the settings client.
+    #
+    # +base_url+/+api_key+ are used directly when both are supplied (the path
+    # the top-level client takes after it has already resolved them); otherwise
+    # the management config resolver fills in whatever is missing.
+    def self.resolve_account_target(api_key:, base_url:, profile:, base_domain:, scheme:, debug:, extra_headers:)
+      cfg = ConfigResolution.resolve_management_config(
+        profile: profile, api_key: api_key, base_domain: base_domain, scheme: scheme, debug: debug
+      )
+      resolved_key = api_key.nil? ? cfg.api_key : api_key
+      app_url = base_url.nil? ? ConfigResolution.service_url(cfg.scheme, "app", cfg.base_domain) : base_url
+      headers = {}
+      headers.merge!(cfg.extra_headers || {})
+      headers.merge!(extra_headers || {})
+      [app_url.sub(%r{/+\z}, ""), resolved_key, headers]
+    end
+
+    # Sync account-settings get/save (+client.account.settings+).
+    #
+    # The endpoint isn't JSON:API — body is a raw JSON object — so we use an
+    # HTTP client directly rather than going through a generated client.
+    class SettingsClient
+      SETTINGS_PATH = "/api/v1/accounts/current/settings"
+
+      def initialize(app_base_url, api_key, extra_headers = nil)
+        @base_url = app_base_url
+        @headers = {
+          "Authorization" => "Bearer #{api_key}",
+          "Content-Type" => "application/json"
+        }.merge(extra_headers || {})
+      end
+
+      def get
+        resp = connection.get(SETTINGS_PATH)
+        Errors.raise_for_status(resp.status, resp.body.to_s)
+        AccountSettings.new(self, data: parse_body(resp.body))
+      end
+
+      def _save(data)
+        resp = connection.put(SETTINGS_PATH) { |req| req.body = JSON.generate(data) }
+        Errors.raise_for_status(resp.status, resp.body.to_s)
+        AccountSettings.new(self, data: parse_body(resp.body))
+      end
+
+      private
+
+      # A short-lived connection per call — mirrors the Python settings client
+      # opening and closing its own HTTP client each time.
+      def connection
+        Faraday.new(url: @base_url, headers: @headers, request: { timeout: 30 })
+      end
+
+      def parse_body(body)
+        return {} if body.nil? || body.to_s.empty?
+
+        parsed = JSON.parse(body)
+        parsed.is_a?(Hash) ? parsed : {}
+      rescue JSON::ParserError
+        {}
+      end
+    end
+
+    # The Smpl Account client (sync).
+    #
+    # Exposes the authenticated account's own configuration, reachable as
+    # +client.account+ (+Smplkit::Client+) or constructed directly:
+    #
+    #   account = Smplkit::AccountClient.new(api_key: "sk_...")
+    #   settings = account.settings.get
+    #   settings.environment_order = ["production", "staging"]
+    #   settings.save
+    #
+    # Sub-client: +settings+ (get/save). Pure CRUD — no +install+ required.
+    #
+    # @param api_key [String, nil] API key. When omitted, resolved from
+    #   +SMPLKIT_API_KEY+ or +~/.smplkit+.
+    # @param base_url [String, nil] Full app-service base URL. Usually resolved
+    #   from +base_domain+/+scheme+; supplied directly by the top-level clients
+    #   which have already computed it.
+    # @param profile [String, nil] Named +~/.smplkit+ profile section.
+    # @param base_domain [String, nil] Base domain for API requests (default
+    #   +"smplkit.com"+).
+    # @param scheme [String, nil] URL scheme (default +"https"+).
+    # @param debug [Boolean, nil] Enable SDK debug logging.
+    # @param extra_headers [Hash, nil] Extra headers attached to every request.
+    class AccountClient
+      attr_reader :settings
+
+      def initialize(api_key: nil, base_url: nil, profile: nil, base_domain: nil,
+                     scheme: nil, debug: nil, extra_headers: nil)
+        app_url, resolved_key, headers = Account.resolve_account_target(
+          api_key: api_key, base_url: base_url, profile: profile,
+          base_domain: base_domain, scheme: scheme, debug: debug, extra_headers: extra_headers
+        )
+        @settings = SettingsClient.new(app_url, resolved_key, headers.empty? ? nil : headers)
+      end
+
+      # No-op — the settings client opens a short-lived HTTP client per call.
+      def close; end
+
+      # Construct, yield to the block, and close on exit.
+      def self.open(**kwargs)
+        client = new(**kwargs)
+        begin
+          yield client
+        ensure
+          client.close
+        end
+      end
+    end
+  end
+
+  AccountClient = Account::AccountClient
+end

data/lib/smplkit/account/models.rb

@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+module Smplkit
+  module Account
+    # Active-record account-settings model.
+    #
+    # The wire format is opaque JSON. Documented keys are exposed as typed
+    # properties; unknown keys live in +raw+. +save+ writes the full settings
+    # object back.
+    class AccountSettings
+      def initialize(client = nil, data: nil)
+        @client = client
+        @data = data ? data.dup : {}
+      end
+
+      # The full settings dict. Mutations are persisted on save.
+      def raw
+        @data
+      end
+
+      def raw=(value)
+        @data = value.dup
+      end
+
+      # Canonical ordering of STANDARD environments. Empty list if unset.
+      def environment_order
+        Array(@data["environment_order"] || [])
+      end
+
+      def environment_order=(value)
+        @data["environment_order"] = value.to_a
+      end
+
+      def save
+        raise "AccountSettings was constructed without a client; cannot save" if @client.nil?
+
+        other = @client._save(@data)
+        _apply(other)
+        self
+      end
+      alias save! save
+
+      def to_s
+        "AccountSettings(#{@data.inspect})"
+      end
+      alias inspect to_s
+
+      def _apply(other)
+        @data = other.raw.dup
+      end
+    end
+  end
+end

data/lib/smplkit/api_support.rb

@@ -0,0 +1,83 @@
+# frozen_string_literal: true
+
+module Smplkit
+  # Ruby-internal adapters bridging the generated client layer to the wrapper.
+  module ApiSupport
+    # Default page[size] the runtime asks for when walking a list endpoint to
+    # completion. The platform caps page[size] at 1000; using the same value
+    # here makes the minimum number of round-trips per exhaustive fetch.
+    RUNTIME_PAGE_SIZE = 1000
+
+    # Wraps a generated-API call and converts any +ApiError+ raised by the
+    # generated layer into the +Smplkit::Error+ hierarchy. Connection-level
+    # failures (no response from the server) become +Smplkit::ConnectionError+;
+    # status-coded failures route through +Errors.raise_for_status+ which emits
+    # +NotFoundError+ / +ConflictError+ / +ValidationError+ / +Error+ depending
+    # on the JSON:API body.
+    module ErrorMapping
+      module_function
+
+      def call
+        yield
+      rescue StandardError => e
+        raise unless generated_api_error?(e)
+
+        raise Smplkit::ConnectionError, e.message.to_s if e.code.nil? || e.code.zero?
+
+        Smplkit::Errors.raise_for_status(e.code, e.response_body.to_s)
+        # raise_for_status only returns on 2xx; if we get here the generated
+        # layer raised on a 2xx (shouldn't happen) so re-raise the original.
+        raise
+      end
+
+      def generated_api_error?(err)
+        klass_name = err.class.name.to_s
+        klass_name.start_with?("SmplkitGeneratedClient::") && klass_name.end_with?("::ApiError")
+      end
+    end
+
+    # Walk a generated paginated list endpoint to completion.
+    #
+    # The block receives a per-page +opts+ hash with +page_number+ and
+    # +page_size+ filled in, calls the generated list method through
+    # {ErrorMapping.call}, and returns the response object. Pages stop when the
+    # server returns fewer rows than requested — the platform's standard
+    # last-page signal across every offset-paginated list endpoint. Returns the
+    # concatenated +response.data+ rows.
+    module PaginatedFetch
+      module_function
+
+      def collect(page_size: RUNTIME_PAGE_SIZE)
+        rows = []
+        page_number = 1
+        loop do
+          opts = { page_number: page_number, page_size: page_size }
+          response = ErrorMapping.call { yield(opts) }
+          page = response.data || []
+          rows.concat(page)
+          break if page.length < page_size
+
+          page_number += 1
+        end
+        rows
+      end
+    end
+
+    # Deep-stringify Hash keys so resources returned by generated +to_hash+
+    # (symbol-keyed) match what the wrapper helpers expect (string-keyed).
+    module ResourceShim
+      module_function
+
+      def stringify(value)
+        Smplkit::Helpers.deep_stringify_keys(value)
+      end
+
+      # Convenience: produce a string-keyed Hash from a generated model.
+      def from_model(model)
+        return {} if model.nil?
+
+        stringify(model.to_hash)
+      end
+    end
+  end
+end

data/lib/smplkit/audit/client.rb

@@ -2,18 +2,16 @@
 
 module Smplkit
   module Audit
-    # Audit-product entry point — accessed via +client.audit+.
+    # The Smpl Audit client — accessed via +client.audit+.
     #
-    # Owns event recording and read-side queries: fire-and-forget
-    # +#events.record+, plus the audit-log +list+ / +get+ and the
-    # distinct-value listings (+resource_types+, +event_types+,
-    # +categories+) that back the Activity tab filter dropdowns.
-    # ADR-047 §2.7.
-    #
-    # SIEM forwarder CRUD lives on {Smplkit::ManagementClient} under
-    # +mgmt.audit.forwarders.*+.
+    # One client exposes the full surface — there is no runtime/management
+    # split for audit. Owns event recording and read-side queries:
+    # fire-and-forget +#events.record+, plus the audit-log +list+ / +get+ and
+    # the distinct-value listings (+resource_types+, +event_types+,
+    # +categories+) that back the Activity tab filter dropdowns, plus SIEM
+    # forwarder CRUD on +#forwarders+. ADR-047 §2.7.
     class AuditClient
-      attr_reader :events, :resource_types, :event_types, :categories
+      attr_reader :events, :resource_types, :event_types, :categories, :forwarders
 
       SDK_OWNED_HEADERS = %w[authorization content-type user-agent].freeze
 
@@ -41,6 +39,7 @@ module Smplkit
         @resource_types = ResourceTypes.new(SmplkitGeneratedClient::Audit::ResourceTypesApi.new(api_client))
         @event_types = EventTypes.new(SmplkitGeneratedClient::Audit::EventTypesApi.new(api_client))
         @categories = Categories.new(SmplkitGeneratedClient::Audit::CategoriesApi.new(api_client))
+        @forwarders = ForwardersClient.new(SmplkitGeneratedClient::Audit::ForwardersApi.new(api_client))
       end
 
       def _close