@alvera-ai/platform-sdk 0.17.0 → 0.18.0

package/dist/index.d.mts

@@ -29,9 +29,9 @@ type EnvironmentName = keyof typeof ENVIRONMENTS;
  */
 type TextToSqlRequest = {
   /**
-   * Which datalake schema to target: `unregulated` (tokenized) or `regulated` (raw)
+   * Which lake to target: `raw`, `tokenized` or `redacted`
    */
-  mode: 'regulated' | 'unregulated';
+  mode: 'raw' | 'tokenized' | 'redacted';
   /**
    * Natural-language description of the desired query
    */
@@ -47,9 +47,9 @@ type TextToSqlRequest = {
  * `error_message`.
  *
  * UserSearch carries no `data_access_mode` of its own — the capability check
- * runs at query time via `Platform.RegulatedDatalakeRepo.prepare_query/3`,
- * which reads the ambient session and raises 403 when the ceiling is
- * insufficient. ExOpenApiUtils derives `UserSearchRequest` (writeable subset)
+ * runs where the lake's connection is acquired, via
+ * `Platform.Datalakes.authorize_lake_access!/1`, which reads the ambient
+ * session and raises 403 when the ceiling is insufficient. ExOpenApiUtils derives `UserSearchRequest` (writeable subset)
  * and `UserSearchResponse` (full readable shape) from this declaration via
  * the readOnly/writeOnly markers on each property.
  *
@@ -209,7 +209,7 @@ type ContextDatasetResponse = {
   position?: number;
   readonly updated_at?: string;
   /**
-   * Liquid-templated SQL WHERE clause for filtering records at runtime. The context builder appends the MDM subject FK automatically.
+   * Liquid-templated SQL WHERE clause for filtering records at runtime. The context builder appends the legal entity FK automatically.
    */
   where_clause?: string | null;
   /**
@@ -290,7 +290,7 @@ type AgenticWorkflowResponse = {
   readonly context_datasets?: Array<ContextDatasetResponse>;
   datalake?: DatalakeResponse;
   /**
-   * Dataset type the workflow listens on (e.g. patient, appointment, generic_table)
+   * Dataset type the workflow listens on (e.g. legal_entity, document, generic_table)
    */
   dataset_type: string;
   decision_config?: ComplexTemplateConfigResponse | null;
@@ -316,7 +316,7 @@ type AgenticWorkflowResponse = {
    */
   name: string;
   /**
-   * When true, skip MDM subject resolution
+   * When true, skip MDM resolution
    */
   skip_mdm_resolution?: boolean;
   /**
@@ -340,6 +340,25 @@ type AgenticWorkflowResponse = {
    */
   readonly workflow_ai_agents?: Array<WorkflowAiAgentResponse>;
 };
+/**
+ * AdvancedMigrationRequest
+ *
+ * An advanced migration — SQL a person wrote by hand for one datalake, run by the same migrator that applies the platform's own generated changes. Once it has run it can no longer be edited or deleted. Request
+ */
+type AdvancedMigrationRequest = {
+  /**
+   * The SQL that reverses `up_statement`, used when rolling the datalake back.
+   */
+  down_statement: string;
+  /**
+   * Identifier for the migration, unique within the datalake. Must start with a capital letter and contain only letters, numbers and underscores — for example `RenameMemoToNote`.
+   */
+  name: string;
+  /**
+   * The SQL to run. Anything the platform will not generate for itself belongs here — renaming a column, changing its type, dropping one, adding an index.
+   */
+  up_statement: string;
+};
 /**
  * ManualToolInvocationResponse
  *
@@ -507,7 +526,7 @@ type DataActivationClientLogResponse = {
    */
   readonly client_id: string;
   /**
-   * Target dataset table for this slice (e.g. patients, observations)
+   * Target dataset table for this slice (e.g. legal_entities, documents)
    */
   dataset_table: string;
   /**
@@ -515,7 +534,7 @@ type DataActivationClientLogResponse = {
    */
   dataset_updated?: number;
   /**
-   * Structured failure reason when `status` is `failed`; null otherwise.
+   * Structured failure reason when `status` is `failed` or `partial`; null otherwise.
    */
   readonly error?: string | null;
   /**
@@ -536,9 +555,9 @@ type DataActivationClientLogResponse = {
    */
   rows_ingested?: number;
   /**
-   * `failed` when the batch died before enqueueing any row — the fetch itself errored. `rows_ingested` and `input_files` are 0/[] on such a row; read `error` for the reason.
+   * `failed` when the batch died before enqueueing any row — the fetch itself errored, and `rows_ingested` and `input_files` are 0/[] on such a row. `partial` when the batch ran and at least one row was refused on the way in; the rows that landed are still there. Read `error` for the reason in both cases.
    */
-  status?: 'succeeded' | 'failed';
+  status?: 'succeeded' | 'partial' | 'failed';
   readonly updated_at?: string;
 };
 /**
@@ -847,7 +866,7 @@ type ExecuteActionRequest = {
    */
   dataset_id: string;
   /**
-   * Decision key identifying which action to execute (e.g. 'cahps_survey')
+   * Decision key identifying which action to execute (e.g. 'send_welcome_email')
    */
   decision_key: string;
   /**
@@ -931,7 +950,11 @@ type ResolvePageResponse = {
    */
   expires_at: string;
   /**
-   * Regulated message from the workflow action that generated this page token (raw body/subject)
+   * Legal entity id associated with this page token
+   */
+  legal_entity_id: string;
+  /**
+   * Raw message from the workflow action that generated this page token (raw body/subject)
    */
   message?: {
     /**
@@ -959,7 +982,7 @@ type ResolvePageResponse = {
      */
     form_submitted_at?: string | null;
     /**
-     * Regulated message UUID
+     * Raw message UUID
      */
     id: string;
     /**
@@ -1002,13 +1025,9 @@ type ResolvePageResponse = {
     subject?: string | null;
   } | null;
   /**
-   * Route path within the connected app (e.g. /forms/cahps)
+   * Route path within the connected app (e.g. /forms/onboarding)
    */
   route_path: string;
-  /**
-   * MDM subject ID associated with this page token
-   */
-  subject_id: string;
   /**
    * Puid token that was resolved
    */
@@ -1033,9 +1052,9 @@ declare enum ActionType {
 /**
  * MDMVerifyRequest
  *
- * Request body for MDM subject identity verification.
+ * Request body for MDM identity verification.
  *
- * Every MDM subject is ultimately a **person** or a **company**, so the identity
+ * Every legal entity is ultimately a **person** or a **company**, so the identity
  * fields are organized along that ontology rather than per industry. All identity
  * fields are optional on the wire; the datalake's own data-domain validator casts
  * only the fields its domain knows and requires **at least one** of them — a body
@@ -1044,55 +1063,64 @@ declare enum ActionType {
  *
  * Field vocabulary per data domain:
  *
- * | data_domain | identity fields |
+ * | identity fields |
  * |---|---|
- * | `healthcare` | `given_name`, `family_name`, `birth_date`, `gender`, `phone`, `email`, `identifiers` |
- * | `foundation` | `legal_entity_type`, `first_name`, `middle_name`, `last_name`, `preferred_name`, `date_of_birth`, `citizenship_country`, `nationality`, `business_name`, `doing_business_as_names`, `date_formed`, `jurisdiction_country`, `phone`, `email`, `identifiers` |
- * | `subscription` | `customer_type`, `name`, `tax_id`, `phone`, `email`, `identifiers` |
- * | `service_commerce` | `consumer_type`, `name`, `phone`, `email`, `identifiers` |
- * | `core_banking` | `party_type`, `given_name`, `family_name`, `company_name`, `birth_date`, `phone`, `email`, `identifiers` |
- * | `payments` | `account_holder_type`, `given_name`, `family_name`, `company_name`, `birth_date`, `phone`, `email`, `identifiers` (each identifier additionally requires `id_type`) |
+ * | `legal_entity_type`, `first_name`, `middle_name`, `last_name`, `preferred_name`, `date_of_birth`, `citizenship_country`, `nationality`, `business_name`, `doing_business_as_names`, `date_formed`, `jurisdiction_country`, `phone`, `email`, `identifiers` |
+ *
+ * Every property below is cast by `Platform.MDMInput`'s
+ * `@verification_fields`. Keep the two in step — a property advertised here
+ * but absent there is accepted by the router and then silently dropped by
+ * `cast/3`, which reads to the caller as "my attribute did not match".
  *
  */
 type MdmVerifyRequest = {
   /**
-   * payments: individual | business
-   */
-  account_holder_type?: string;
-  /**
-   * Date of birth — healthcare, core_banking, payments (component-fuzzy match)
+   * Addresses to match against the legal entity's own — every domain. Each supplied component must agree (case- and whitespace-insensitive); components left out are not compared, and at least one address in the list must match.
    */
-  birth_date?: string;
+  addresses?: Array<{
+    /**
+     * City / locality
+     */
+    city?: string;
+    /**
+     * Country
+     */
+    country?: string;
+    /**
+     * Postal code
+     */
+    postal_code?: string;
+    /**
+     * State / region
+     */
+    state?: string;
+    /**
+     * Street line 1
+     */
+    street1?: string;
+    /**
+     * Street line 2
+     */
+    street2?: string;
+  }>;
   /**
-   * Business name — foundation (fuzzy match incl. doing-business-as names)
+   * Business name (fuzzy match incl. doing-business-as names)
    */
   business_name?: string;
   /**
-   * Citizenship country — foundation
+   * Citizenship country
    */
   citizenship_country?: string;
   /**
-   * Company legal name — core_banking (exact match), payments
-   */
-  company_name?: string;
-  /**
-   * service_commerce consumer kind
-   */
-  consumer_type?: string;
-  /**
-   * subscription customer kind
-   */
-  customer_type?: string;
-  /**
-   * Company formation date — foundation (component-fuzzy match)
+   * Company formation date (component-fuzzy match)
    */
   date_formed?: string;
   /**
-   * Date of birth — foundation (component-fuzzy match)
+   * Date of birth (component-fuzzy match)
    */
   date_of_birth?: string;
   /**
-   * Doing-business-as names — foundation
+   * Doing-business-as names
    */
   doing_business_as_names?: Array<string>;
   /**
@@ -1100,35 +1128,23 @@ type MdmVerifyRequest = {
    */
   email?: string;
   /**
-   * Family/last name — healthcare, core_banking, payments (fuzzy match)
-   */
-  family_name?: string;
-  /**
-   * Given/first name — foundation (fuzzy match over first/middle/preferred)
+   * Given/first name (fuzzy match over first/middle/preferred)
    */
   first_name?: string;
-  /**
-   * Administrative gender — healthcare
-   */
-  gender?: string;
-  /**
-   * Given/first name — healthcare, core_banking, payments (fuzzy match)
-   */
-  given_name?: string;
   /**
    * Identifiers for exact (system, value) matching — every domain
    */
   identifiers?: Array<{
     /**
-     * Issuing country — foundation
+     * Issuing country
      */
     country?: string;
     /**
-     * Identifier kind (e.g. us_ssn, lei, digital_identifier) — required by payments
+     * Identifier kind (e.g. us_ssn, lei, digital_identifier)
      */
     id_type?: string;
     /**
-     * Identifier system (e.g. MRN, SSN, account_holder_number)
+     * Identifier system (e.g. lei_register, us_ssn_authority)
      */
     system: string;
     /**
@@ -1137,49 +1153,37 @@ type MdmVerifyRequest = {
     value: string;
   }>;
   /**
-   * Jurisdiction country — foundation
+   * Jurisdiction country
    */
   jurisdiction_country?: string;
   /**
-   * Family/last name — foundation (fuzzy match)
+   * Family/last name (fuzzy match)
    */
   last_name?: string;
   /**
-   * foundation: individual | business
+   * The legal entity id to verify against
    */
-  legal_entity_type?: string;
+  legal_entity_id: string;
   /**
-   * Middle name — foundation
+   * individual | business
    */
-  middle_name?: string;
+  legal_entity_type?: string;
   /**
-   * Subject full name (person or company) — subscription, service_commerce (fuzzy match)
+   * Middle name
    */
-  name?: string;
+  middle_name?: string;
   /**
-   * Nationality — foundation
+   * Nationality
    */
   nationality?: string;
   /**
-   * core_banking: individual | organization | sole_trader | partnership | trust | government
-   */
-  party_type?: string;
-  /**
-   * Phone number — service_commerce matches it; other domains accept it
+   * Phone number
    */
   phone?: string;
   /**
-   * Preferred/nickname — foundation
+   * Preferred/nickname
    */
   preferred_name?: string;
-  /**
-   * The MDM subject ID to verify against
-   */
-  subject_id: string;
-  /**
-   * Tax identifier — subscription (exact match)
-   */
-  tax_id?: string;
 };
 /**
  * ActionResponse
@@ -1217,7 +1221,7 @@ type ActionResponse = {
    */
   readonly id?: string;
   /**
-   * Liquid template producing the idempotency key; receives checksum, subject_id, workflow_id, action_id, decision_key
+   * Liquid template producing the idempotency key; receives checksum, legal_entity_id, legal_entity_id, workflow_id, action_id, decision_key
    */
   idempotency_template: string;
   readonly inserted_at?: string;
@@ -1314,7 +1318,7 @@ type InteroperabilityContractResponse = {
    */
   name: string;
   /**
-   * Dataset this contract targets (e.g. "patient", "observation", "generic_table")
+   * Dataset this contract targets (e.g. "legal_entity", "beneficial_owner", "generic_table")
    */
   resource_type: string;
   /**
@@ -1873,11 +1877,11 @@ type WorkflowLogListResponse = {
 /**
  * SystemDatasetListResponse
  *
- * Industry-registered dataset name strings for the datalake's data domain.
+ * The dataset name strings the platform registers. Identical for every datalake.
  */
 type SystemDatasetListResponse = {
   /**
-   * Sorted unique dataset name strings (e.g. `patient`, `appointment`, `legal_entity`).
+   * Sorted unique dataset name strings (e.g. `legal_entity`, `document`, `action_log`).
    */
   datasets: Array<string>;
 };
@@ -1933,7 +1937,7 @@ type UpdatePageResponse = {
      */
     form_submitted_at?: string | null;
     /**
-     * Regulated message UUID
+     * Raw message UUID
      */
     id: string;
     /**
@@ -1976,9 +1980,9 @@ type SharePointExcelCallRequest = {
  */
 type DacRawLogFileResponse = {
   /**
-   * Bucket the archive lives in — regulated (raw) or unregulated (tokenized)
+   * Bucket the archive lives in. One archive is written per log, and it is raw.
    */
-  mode: 'regulated' | 'unregulated';
+  mode: 'raw';
   /**
    * Cloud-storage object key of the merged NDJSON archive
    */
@@ -1990,6 +1994,52 @@ type DacRawLogFileResponse = {
 type DataActivationClientManualUploadCallResponse = ManualUploadCallResponse & {
   tool_call_type: 'manual_upload';
 };
+/**
+ * DerivedLakeTablesResponse
+ *
+ * Every table a derived lake's copy carries, and how far each one has got.
+ *
+ * Every table, not only the ones behind — a caller cannot ask to re-copy a
+ * table it cannot see, and a table someone merely suspects has to be listed
+ * even when the copy says it is fine.
+ *
+ */
+type DerivedLakeTablesResponse = {
+  /**
+   * One entry per table the copy carries, ordered by name
+   */
+  data: Array<{
+    /**
+     * Whether this table has finished arriving
+     */
+    caught_up: boolean;
+    /**
+     * The same state in words, identical to what the platform's own screen shows
+     */
+    label: string;
+    /**
+     * Every table `POST .../resync` would empty for this one: the table
+     * itself, plus anything that points at it, transitively. Postgres will
+     * not empty a table anything references, so re-copying a parent means
+     * re-copying its children too. Present so a caller can say how many
+     * before offering the action; only computed for tables that are behind,
+     * and `null` for the rest.
+     *
+     */
+    resync_empties?: Array<string> | null;
+    /**
+     * How far this table has got. Only `caught_up` has arrived —
+     * `finished_copy` means the first pass is done and the changes since
+     * have not been applied yet, so a table sitting there is still behind.
+     *
+     */
+    state: 'waiting_to_start' | 'copying' | 'finished_copy' | 'catching_up' | 'caught_up';
+    /**
+     * Table name
+     */
+    table: string;
+  }>;
+};
 /**
  * ManualToolInvocationSMSCallResponse
  */
@@ -2031,7 +2081,7 @@ type SystemTemplateConfig = {
     [key: string]: unknown;
   } | null;
   /**
-   * System template identifier — the same string the UI stores when a user selects a system template (e.g. `ai_agents/healthcare/contact_message_categorizer`).
+   * System template identifier — the same string the UI stores when a user selects a system template (e.g. `ai_agents/contact_message_categorizer`).
    */
   path: string;
 };
@@ -2112,6 +2162,49 @@ type AiAgentInvokeRequest = {
     [key: string]: unknown;
   };
 };
+/**
+ * AdvancedMigrationResponse
+ *
+ * An advanced migration — SQL a person wrote by hand for one datalake, run by the same migrator that applies the platform's own generated changes. Once it has run it can no longer be edited or deleted.
+ */
+type AdvancedMigrationResponse = {
+  /**
+   * SHA-256 drift fingerprint over authored fields (server-computed)
+   */
+  readonly checksum?: string;
+  /**
+   * The datalake this migration belongs to. Taken from the URL, not the body.
+   */
+  readonly datalake_id?: string;
+  /**
+   * The SQL that reverses `up_statement`, used when rolling the datalake back.
+   */
+  down_statement: string;
+  /**
+   * Advanced migration ID
+   */
+  readonly id?: string;
+  /**
+   * Created at
+   */
+  readonly inserted_at?: string;
+  /**
+   * Identifier for the migration, unique within the datalake. Must start with a capital letter and contain only letters, numbers and underscores — for example `RenameMemoToNote`.
+   */
+  name: string;
+  /**
+   * The SQL to run. Anything the platform will not generate for itself belongs here — renaming a column, changing its type, dropping one, adding an index.
+   */
+  up_statement: string;
+  /**
+   * Updated at
+   */
+  readonly updated_at?: string;
+  /**
+   * Execution order, assigned by the platform from a sequence. Migrations run lowest-first.
+   */
+  readonly version?: number;
+};
 /**
  * ManualUploadCallResponse
  *
@@ -2145,9 +2238,9 @@ type WorkflowRunListResponse = {
  */
 type MinimalAiAgentResponse = {
   /**
-   * Data access level
+   * Which lake the agent reads. `tokenized` means the agent's context is read from the tokenized copy, so it never sees a real identifier. It is enforced, not advisory: an agent set to `tokenized` in an environment with no tokenized lake fails its enrichment step rather than falling back to raw.
    */
-  data_access: 'regulated' | 'unregulated';
+  data_access: 'raw' | 'tokenized';
   /**
    * Agent description
    */
@@ -2225,7 +2318,11 @@ type GenericTableColumnResponse = {
    * Column name
    */
   name: string;
-  privacy_requirement?: 'none' | 'tokenize' | 'redact_only';
+  privacy_requirement?: 'none' | 'redact' | 'tokenize';
+  /**
+   * What the column holds, as opposed to how it is stored. Nullable.
+   */
+  semantic_kind?: 'string' | 'text' | 'email' | 'phone' | 'date' | 'json' | 'image' | 'pdf' | 'attachment';
   /**
    * Display title
    */
@@ -2233,7 +2330,7 @@ type GenericTableColumnResponse = {
   /**
    * Column data type
    */
-  type: 'string' | 'integer' | 'float' | 'boolean' | 'date' | 'datetime' | 'time' | 'jsonb';
+  type: 'string' | 'integer' | 'float' | 'boolean' | 'date' | 'datetime' | 'time' | 'decimal' | 'jsonb';
 };
 /**
  * DatasetSearchResponse
@@ -2403,9 +2500,9 @@ type DataSourceRequest = {
  */
 type ExecuteSqlRequest = {
   /**
-   * Which datalake schema to query: `unregulated` (tokenized) or `regulated` (raw)
+   * Which lake to query: `raw`, `tokenized` or `redacted`
    */
-  mode: 'regulated' | 'unregulated';
+  mode: 'raw' | 'tokenized' | 'redacted';
   /**
    * 1-based page number
    */
@@ -2425,6 +2522,20 @@ type ExecuteSqlRequest = {
 type ToolManualUploadRequest = ManualUploadRequest & {
   tool_body_type: 'manual_upload';
 };
+/**
+ * ResyncTableRequest
+ *
+ * Which table to empty in the copy and copy again from the start
+ */
+type ResyncTableRequest = {
+  /**
+   * A table this copy carries, or one the original can send. Any other name is
+   * refused — that gate is what stands between a typo and an emptied table.
+   * Read `GET .../tables` for the list.
+   *
+   */
+  table: string;
+};
 /**
  * ActionManualUploadCallResponse
  */
@@ -2438,29 +2549,10 @@ type ActionManualUploadCallResponse = ManualUploadCallResponse & {
  */
 type DatalakeResponse = {
   /**
-   * URL-friendly slug. Server-computed from `name`; read-only on the wire — clients do not author this field.
-   */
-  readonly slug?: string;
-  /**
-   * Unregulated reader auth method
-   */
-  unregulated_db_reader_auth_method: 'password' | 'iam_role';
-  /**
-   * Regulated reader DB host
-   */
-  regulated_data_db_reader_host: string;
-  /**
-   * Regulated reader DB name
+   * SHA-256 drift fingerprint over authored fields (server-computed)
    */
-  regulated_data_db_reader_name: string;
-  regulated_cloud_storage: ({
-    cloud_storage_type: 'aws';
-  } & DatalakeCloudStorageAwsResponse) | ({
-    cloud_storage_type: 'r2';
-  } & DatalakeCloudStorageR2Response) | ({
-    cloud_storage_type: 'custom';
-  } & DatalakeCloudStorageCustomResponse);
-  unregulated_cloud_storage: ({
+  readonly checksum?: string;
+  cloud_storage: ({
     cloud_storage_type: 'aws';
   } & DatalakeCloudStorageAwsResponse) | ({
     cloud_storage_type: 'r2';
@@ -2468,130 +2560,102 @@ type DatalakeResponse = {
     cloud_storage_type: 'custom';
   } & DatalakeCloudStorageCustomResponse);
   /**
-   * SHA-256 drift fingerprint over authored fields (server-computed)
-   */
-  readonly checksum?: string;
-  /**
-   * Regulated reader DB port
-   */
-  regulated_data_db_reader_port: number;
-  /**
-   * Unregulated writer DB schema name
-   */
-  unregulated_db_writer_schema: string;
-  /**
-   * Unregulated writer DB name
-   */
-  unregulated_db_writer_name: string;
-  /**
-   * Regulated reader DB schema name
-   */
-  regulated_data_db_reader_schema: string;
-  /**
-   * Unregulated writer DB host
-   */
-  unregulated_db_writer_host: string;
-  /**
-   * Regulated writer DB name
-   */
-  regulated_data_db_writer_name: string;
-  /**
-   * Unregulated reader DB name
+   * Reader auth method
    */
-  unregulated_db_reader_name: string;
+  db_reader_auth_method: 'password' | 'iam_role';
   /**
-   * Unregulated writer auth method
+   * Enable SSL for reader
    */
-  unregulated_db_writer_auth_method: 'password' | 'iam_role';
-  tenant?: TenantResponse;
+  db_reader_enable_ssl: boolean;
   /**
-   * Datalake ID
+   * Reader DB host
    */
-  readonly id?: string;
+  db_reader_host: string;
   /**
-   * Datalake name
+   * Reader DB name
    */
-  name: string;
+  db_reader_name: string;
   /**
-   * Datalake description
+   * Reader DB port
    */
-  description?: string | null;
-  /**
-   * Database connection pool size
-   */
-  pool_size: number | null;
+  db_reader_port: number;
   /**
-   * Last update timestamp
+   * Reader DB schema name
    */
-  readonly updated_at?: string;
+  db_reader_schema: string;
   /**
-   * Datalake setup status
+   * Writer auth method
    */
-  readonly status?: 'new' | 'processing' | 'ready';
+  db_writer_auth_method: 'password' | 'iam_role';
   /**
-   * Unregulated reader DB port
+   * Enable SSL for writer
    */
-  unregulated_db_reader_port: number;
+  db_writer_enable_ssl: boolean;
   /**
-   * Unregulated reader DB host
+   * Writer DB host
    */
-  unregulated_db_reader_host: string;
+  db_writer_host: string;
   /**
-   * Enable SSL for regulated reader
+   * Writer DB name
    */
-  regulated_data_db_reader_enable_ssl: boolean;
+  db_writer_name: string;
   /**
-   * Enable SSL for unregulated reader
+   * Writer DB port
    */
-  unregulated_db_reader_enable_ssl: boolean;
+  db_writer_port: number;
   /**
-   * Regulated writer DB port
+   * Writer DB schema name
    */
-  regulated_data_db_writer_port: number;
+  db_writer_schema: string;
   /**
-   * Unregulated writer DB port
+   * The tokenized and redacted lakes derived from this one
    */
-  unregulated_db_writer_port: number;
+  readonly derived_datalakes?: Array<DatalakeResponse>;
   /**
-   * Enable SSL for unregulated writer
+   * Datalake description
    */
-  unregulated_db_writer_enable_ssl: boolean;
+  description?: string | null;
   /**
-   * Unregulated reader DB schema name
+   * Datalake ID
    */
-  unregulated_db_reader_schema: string;
+  readonly id?: string;
   /**
-   * Enable SSL for regulated writer
+   * Creation timestamp
    */
-  regulated_data_db_writer_enable_ssl: boolean;
+  readonly inserted_at?: string;
   /**
-   * Regulated writer DB schema name
+   * Datalake name
    */
-  regulated_data_db_writer_schema: string;
+  name: string;
   /**
-   * Regulated writer auth method
+   * Database connection pool size
    */
-  regulated_data_db_writer_auth_method: 'password' | 'iam_role';
+  pool_size: number | null;
   /**
-   * Creation timestamp
+   * The raw datalake this one derives from. Required on a tokenized or redacted datalake, and always null on a raw one.
    */
-  readonly inserted_at?: string;
+  primary_datalake_id?: string | null;
   /**
-   * Regulated writer DB host
+   * URL-friendly slug. Server-computed from `name`; read-only on the wire — clients do not author this field.
    */
-  regulated_data_db_writer_host: string;
+  readonly slug?: string;
   /**
-   * Regulated reader auth method
+   * Datalake setup status
    */
-  regulated_data_db_reader_auth_method: 'password' | 'iam_role';
+  readonly status?: 'new' | 'processing' | 'ready';
+  tenant?: TenantResponse;
   /**
    * Datalake reporting timezone. Closed whitelist of 8 US timezones — general IANA values (including `UTC`) are rejected.
    */
   timezone: 'America/New_York' | 'America/Chicago' | 'America/Denver' | 'America/Los_Angeles' | 'America/Anchorage' | 'America/Adak' | 'Pacific/Honolulu' | 'America/Phoenix';
   /**
-   * Industry data domain. Each value carries a stability tier in the `x-stability` extension — `stable` domains hold their dataset shapes across releases; `experimental` domains may change without notice.
+   * What this lake holds. `raw` is the lake the platform writes; `tokenized` and `redacted` are derived, read-only, and filled by replication.
    */
-  data_domain: 'healthcare' | 'core_banking' | 'payments' | 'subscription' | 'service_commerce' | 'trading' | 'foundation';
+  type?: 'raw' | 'tokenized' | 'redacted';
+  /**
+   * Last update timestamp
+   */
+  readonly updated_at?: string;
 };
 /**
  * AlveraAPIError
@@ -2697,9 +2761,9 @@ type ToolSnsResponse = SnsResponse & {
  * `error_message`.
  *
  * UserSearch carries no `data_access_mode` of its own — the capability check
- * runs at query time via `Platform.RegulatedDatalakeRepo.prepare_query/3`,
- * which reads the ambient session and raises 403 when the ceiling is
- * insufficient. ExOpenApiUtils derives `UserSearchRequest` (writeable subset)
+ * runs where the lake's connection is acquired, via
+ * `Platform.Datalakes.authorize_lake_access!/1`, which reads the ambient
+ * session and raises 403 when the ceiling is insufficient. ExOpenApiUtils derives `UserSearchRequest` (writeable subset)
  * and `UserSearchResponse` (full readable shape) from this declaration via
  * the readOnly/writeOnly markers on each property.
  * Request
@@ -2924,9 +2988,9 @@ type ManualToolInvocationRestCallResponse = RestCallResponse & {
 type SessionResponse = {
   api_key?: ApiKeyResponse;
   /**
-   * Capability ceiling for the session. `:regulated` permits PHI/PII reads; `:unregulated` is tokenized/redacted. Set at creation time from membership role (researcher locked to `:unregulated`); cannot be widened post-creation.
+   * Capability ceiling for the session — the most sensitive lake it may read. `:raw` reaches the raw lake, which holds real PHI/PII values; `:tokenized` and `:redacted` name derived lakes, which hold none. Set at creation time from the membership role: a researcher is capped at `:tokenized` and can never reach the raw lake, while an admin or member is capped at `:raw`. Cannot be widened post-creation.
    */
-  data_access_mode: 'regulated' | 'unregulated';
+  data_access_mode: 'raw' | 'tokenized' | 'redacted';
   /**
    * Expiration timestamp (null for non-expiring M2M sessions)
    */
@@ -2947,6 +3011,18 @@ type SessionResponse = {
   readonly type: 'user' | 'api';
   user?: UserResponse;
 };
+/**
+ * AdvancedMigrationListResponse
+ *
+ * Paginated list of advanced migrations
+ */
+type AdvancedMigrationListResponse = {
+  /**
+   * List of advanced migrations
+   */
+  data: Array<AdvancedMigrationResponse>;
+  meta: PaginationMeta;
+};
 /**
  * ActionStatusUpdaterCloudWatchQueryRequest
  */
@@ -3208,11 +3284,16 @@ type DatalakeMigrateResponse = {
    */
   enqueued_at: string;
   /**
-   * Oban job ID for tracking
+   * Oban job ID for tracking. This datalake's own job — the first of the batch. The derived lakes are migrated by their own jobs, which are not reported here.
    */
   job_id: number;
   /**
-   * Job status (always 'enqueued' at creation)
+   * Always the literal `enqueued` — a constant in the response body, not a
+   * reading of the job's state. A repeat call while a job for this datalake
+   * is still incomplete is deduplicated onto the existing job, so `job_id`
+   * and `enqueued_at` can describe an earlier request while this field
+   * still reads `enqueued`. Poll `GET /datalakes/:id` for real progress.
+   *
    */
   status: 'enqueued';
 };
@@ -3275,14 +3356,14 @@ type SqlDatabaseResponse = {
 /**
  * MDMVerifyResponse
  *
- * Result of MDM subject identity verification
+ * Result of MDM identity verification
  */
 type MdmVerifyResponse = {
-  status: 'verified';
   /**
-   * The verified subject ID
+   * The verified legal entity id
    */
-  subject_id: string;
+  legal_entity_id: string;
+  status: 'verified';
   /**
    * Timestamp of verification
    */
@@ -3294,11 +3375,11 @@ type MdmVerifyResponse = {
   errors: {
     [key: string]: Array<string>;
   };
-  status: 'not_verified';
   /**
-   * The subject ID that failed verification
+   * The legal entity id that failed verification
    */
-  subject_id: string;
+  legal_entity_id: string;
+  status: 'not_verified';
   /**
    * Timestamp of verification attempt
    */
@@ -3518,6 +3599,10 @@ type WorkflowLogResponse = {
    */
   id?: string;
   inserted_at?: string;
+  /**
+   * The legal entity this run is about (cross-database id)
+   */
+  legal_entity_id?: string | null;
   /**
    * Execution mode
    */
@@ -3531,14 +3616,6 @@ type WorkflowLogResponse = {
    * Execution status
    */
   status: 'filtered' | 'pending' | 'executing' | 'completed' | 'failed' | 'partial';
-  /**
-   * Resolved subject ID (cross-DB)
-   */
-  subject_id?: string | null;
-  /**
-   * Subject type (e.g. patient, member)
-   */
-  subject_type?: string | null;
   /**
    * Tenant ID
    */
@@ -3603,9 +3680,9 @@ type ToolSqsResponse = SqsResponse & {
  */
 type ApiKeyResponse = {
   /**
-   * Capability ceiling baked into the key. Sessions derived from this key inherit this value. `:regulated` permits PHI/PII reads; `:unregulated` is tokenized/redacted. Cannot be widened post-creation — revoke + re-mint instead.
+   * Capability ceiling baked into the key — the most sensitive lake a session derived from it may read. `:raw` reaches the raw lake, which holds real PHI/PII values; `:tokenized` and `:redacted` name derived lakes, which hold none. Sessions derived from this key inherit this value. Cannot be widened post-creation — revoke + re-mint instead.
    */
-  data_access_mode: 'regulated' | 'unregulated';
+  data_access_mode: 'raw' | 'tokenized' | 'redacted';
   /**
    * API key ID
    */
@@ -3689,10 +3766,6 @@ type DataActivationClientResponse = {
    * True for platform-created default DACs. Cannot be deleted.
    */
   readonly is_default?: boolean;
-  /**
-   * Which context dimensions the DAC loops over per invocation
-   */
-  loop_over?: Array<'services' | 'locations' | 'providers'>;
   /**
    * DAC name
    */
@@ -3816,7 +3889,7 @@ type ActionRestCallResponse = RestCallResponse & {
  */
 type IngestFileRequest = {
   /**
-   * Optional business attributes merged into each row extracted from the uploaded file. For a document upload (image/PDF) the extracted row is just `{r2_key, content_type}`; these attrs ride alongside it (e.g. account_holder_number) so the interop contract can resolve the subject. File-derived keys (`r2_key`, `content_type`) always win over `data`.
+   * Optional business attributes merged into each row extracted from the uploaded file. For a document upload (image/PDF) the extracted row is just `{r2_key, content_type}`; these attrs ride alongside it (e.g. account_holder_number) so the interop contract can resolve the legal entity. File-derived keys (`r2_key`, `content_type`) always win over `data`.
    */
   data?: {
     [key: string]: unknown;
@@ -3916,10 +3989,6 @@ type GenericTableResponse = {
    * Table column definitions
    */
   readonly columns?: Array<GenericTableColumnResponse>;
-  /**
-   * Industry data domain. Each value carries a stability tier in the `x-stability` extension — `stable` domains hold their dataset shapes across releases; `experimental` domains may change without notice.
-   */
-  data_domain?: 'healthcare' | 'core_banking' | 'payments' | 'subscription' | 'service_commerce' | 'trading' | 'foundation';
   /**
    * Datalake ID
    */
@@ -4219,6 +4288,41 @@ type ToolTwilioResponse = TwilioResponse & {
 type ToolSftpResponse = SftpResponse & {
   tool_body_type: 'sftp';
 };
+/**
+ * ResyncTableResponse
+ *
+ * The repair was accepted and a fresh copy has started. It finishes later —
+ * poll `GET .../tables` and wait for the table to read `caught_up`.
+ *
+ */
+type ResyncTableResponse = {
+  /**
+   * Every table the repair emptied — the one asked for, plus anything that
+   * points at it, read from the catalog for this call. All of them are copied
+   * again by the same run. Returned in full because a caller that emptied nine
+   * tables should be told nine.
+   *
+   */
+  emptied: Array<string>;
+  /**
+   * Which copy was repaired
+   */
+  mode: 'tokenized' | 'redacted';
+  /**
+   * Always the literal `copying` — a constant written once the repair's last
+   * statement succeeded, not a reading of the copy. Nothing here queries the
+   * subscription. `copying` is *also* one of the real table states
+   * `GET .../tables` reports, and the two are unrelated: a table that has just
+   * been put back on the subscription usually reads `waiting_to_start` for a
+   * moment first. Poll `GET .../tables` for the state the copy is actually in.
+   *
+   */
+  status: 'copying';
+  /**
+   * The table asked for
+   */
+  table: string;
+};
 /**
  * GenericTableColumnRequest
  *
@@ -4237,7 +4341,11 @@ type GenericTableColumnRequest = {
    * Column name
    */
   name: string;
-  privacy_requirement?: 'none' | 'tokenize' | 'redact_only';
+  privacy_requirement?: 'none' | 'redact' | 'tokenize';
+  /**
+   * What the column holds, as opposed to how it is stored. Nullable.
+   */
+  semantic_kind?: 'string' | 'text' | 'email' | 'phone' | 'date' | 'json' | 'image' | 'pdf' | 'attachment';
   /**
    * Display title
    */
@@ -4245,7 +4353,7 @@ type GenericTableColumnRequest = {
   /**
    * Column data type
    */
-  type: 'string' | 'integer' | 'float' | 'boolean' | 'date' | 'datetime' | 'time' | 'jsonb';
+  type: 'string' | 'integer' | 'float' | 'boolean' | 'date' | 'datetime' | 'time' | 'decimal' | 'jsonb';
 };
 /**
  * CloudWatchQueryResponse
@@ -4277,9 +4385,9 @@ type AiAgentResponse = {
    */
   readonly checksum?: string;
   /**
-   * Data access level
+   * Which lake the agent reads. `tokenized` means the agent's context is read from the tokenized copy, so it never sees a real identifier. It is enforced, not advisory: an agent set to `tokenized` in an environment with no tokenized lake fails its enrichment step rather than falling back to raw.
    */
-  data_access: 'regulated' | 'unregulated';
+  data_access: 'raw' | 'tokenized';
   datalake?: DatalakeResponse;
   /**
    * Agent description
@@ -4390,7 +4498,7 @@ type AdminCreateTenantApiKeyRequest = {
   /**
    * Capability ceiling baked into the key — see ApiKey.data_access_mode.
    */
-  data_access_mode: 'regulated' | 'unregulated';
+  data_access_mode: 'raw' | 'tokenized' | 'redacted';
   /**
    * Human-readable name for the key.
    */
@@ -4519,34 +4627,7 @@ type ToolRestapiResponse = RestapiResponse & {
  * Datalake configuration. Secrets (DB passwords, credentials) are write-only — accepted on create but never returned in responses. Request
  */
 type DatalakeRequestWritable = {
-  /**
-   * Unregulated writer DB password
-   */
-  unregulated_db_writer_pass: string;
-  /**
-   * Unregulated reader auth method
-   */
-  unregulated_db_reader_auth_method: 'password' | 'iam_role';
-  /**
-   * Unregulated writer DB username
-   */
-  unregulated_db_writer_user: string;
-  /**
-   * Regulated reader DB host
-   */
-  regulated_data_db_reader_host: string;
-  /**
-   * Regulated reader DB name
-   */
-  regulated_data_db_reader_name: string;
-  regulated_cloud_storage: ({
-    cloud_storage_type: 'aws';
-  } & DatalakeCloudStorageAwsRequestWritable) | ({
-    cloud_storage_type: 'r2';
-  } & DatalakeCloudStorageR2RequestWritable) | ({
-    cloud_storage_type: 'custom';
-  } & DatalakeCloudStorageCustomRequestWritable);
-  unregulated_cloud_storage: ({
+  cloud_storage: ({
     cloud_storage_type: 'aws';
   } & DatalakeCloudStorageAwsRequestWritable) | ({
     cloud_storage_type: 'r2';
@@ -4554,133 +4635,93 @@ type DatalakeRequestWritable = {
     cloud_storage_type: 'custom';
   } & DatalakeCloudStorageCustomRequestWritable);
   /**
-   * Regulated reader DB password
-   */
-  regulated_data_db_reader_pass: string;
-  /**
-   * Regulated writer DB username
-   */
-  regulated_data_db_writer_user: string;
-  /**
-   * Regulated reader DB port
-   */
-  regulated_data_db_reader_port: number;
-  /**
-   * Unregulated writer DB schema name
-   */
-  unregulated_db_writer_schema: string;
-  /**
-   * Unregulated writer DB name
-   */
-  unregulated_db_writer_name: string;
-  /**
-   * Regulated reader DB schema name
+   * Reader auth method
    */
-  regulated_data_db_reader_schema: string;
+  db_reader_auth_method: 'password' | 'iam_role';
   /**
-   * Regulated reader DB username
+   * Enable SSL for reader
    */
-  regulated_data_db_reader_user: string;
+  db_reader_enable_ssl: boolean;
   /**
-   * Unregulated writer DB host
+   * Reader DB host
    */
-  unregulated_db_writer_host: string;
+  db_reader_host: string;
   /**
-   * Regulated writer DB name
-   */
-  regulated_data_db_writer_name: string;
-  /**
-   * Unregulated reader DB name
-   */
-  unregulated_db_reader_name: string;
-  /**
-   * Unregulated writer auth method
-   */
-  unregulated_db_writer_auth_method: 'password' | 'iam_role';
-  /**
-   * Unregulated reader DB username
-   */
-  unregulated_db_reader_user: string;
-  /**
-   * Datalake name
-   */
-  name: string;
-  /**
-   * Datalake description
+   * Reader DB name
    */
-  description?: string | null;
+  db_reader_name: string;
   /**
-   * Database connection pool size
+   * Reader DB password
    */
-  pool_size: number | null;
+  db_reader_pass: string;
   /**
-   * Unregulated reader DB port
+   * Reader DB port
    */
-  unregulated_db_reader_port: number;
+  db_reader_port: number;
   /**
-   * Regulated writer DB password
+   * Reader DB schema name
    */
-  regulated_data_db_writer_pass: string;
+  db_reader_schema: string;
   /**
-   * Unregulated reader DB host
+   * Reader DB username
    */
-  unregulated_db_reader_host: string;
+  db_reader_user: string;
   /**
-   * Enable SSL for regulated reader
+   * Writer auth method
    */
-  regulated_data_db_reader_enable_ssl: boolean;
+  db_writer_auth_method: 'password' | 'iam_role';
   /**
-   * Enable SSL for unregulated reader
+   * Enable SSL for writer
    */
-  unregulated_db_reader_enable_ssl: boolean;
+  db_writer_enable_ssl: boolean;
   /**
-   * Unregulated reader DB password
+   * Writer DB host
    */
-  unregulated_db_reader_pass: string;
+  db_writer_host: string;
   /**
-   * Regulated writer DB port
+   * Writer DB name
    */
-  regulated_data_db_writer_port: number;
+  db_writer_name: string;
   /**
-   * Unregulated writer DB port
+   * Writer DB password
    */
-  unregulated_db_writer_port: number;
+  db_writer_pass: string;
   /**
-   * Enable SSL for unregulated writer
+   * Writer DB port
    */
-  unregulated_db_writer_enable_ssl: boolean;
+  db_writer_port: number;
   /**
-   * Unregulated reader DB schema name
+   * Writer DB schema name
    */
-  unregulated_db_reader_schema: string;
+  db_writer_schema: string;
   /**
-   * Enable SSL for regulated writer
+   * Writer DB username
    */
-  regulated_data_db_writer_enable_ssl: boolean;
+  db_writer_user: string;
   /**
-   * Regulated writer DB schema name
+   * Datalake description
    */
-  regulated_data_db_writer_schema: string;
+  description?: string | null;
   /**
-   * Regulated writer auth method
+   * Datalake name
    */
-  regulated_data_db_writer_auth_method: 'password' | 'iam_role';
+  name: string;
   /**
-   * Regulated writer DB host
+   * Database connection pool size
    */
-  regulated_data_db_writer_host: string;
+  pool_size: number | null;
   /**
-   * Regulated reader auth method
+   * The raw datalake this one derives from. Required on a tokenized or redacted datalake, and always null on a raw one.
    */
-  regulated_data_db_reader_auth_method: 'password' | 'iam_role';
+  primary_datalake_id?: string | null;
   /**
    * Datalake reporting timezone. Closed whitelist of 8 US timezones — general IANA values (including `UTC`) are rejected.
    */
   timezone: 'America/New_York' | 'America/Chicago' | 'America/Denver' | 'America/Los_Angeles' | 'America/Anchorage' | 'America/Adak' | 'Pacific/Honolulu' | 'America/Phoenix';
   /**
-   * Industry data domain. Each value carries a stability tier in the `x-stability` extension — `stable` domains hold their dataset shapes across releases; `experimental` domains may change without notice.
+   * What this lake holds. `raw` is the lake the platform writes; `tokenized` and `redacted` are derived, read-only, and filled by replication.
    */
-  data_domain: 'healthcare' | 'core_banking' | 'payments' | 'subscription' | 'service_commerce' | 'trading' | 'foundation';
+  type?: 'raw' | 'tokenized' | 'redacted';
 };
 /**
  * ToolRESTAPIRequest
@@ -4731,7 +4772,7 @@ type AgenticWorkflowRequestWritable = {
    */
   context_datasets?: Array<ContextDatasetRequestWritable>;
   /**
-   * Dataset type the workflow listens on (e.g. patient, appointment, generic_table)
+   * Dataset type the workflow listens on (e.g. legal_entity, document, generic_table)
    */
   dataset_type: string;
   decision_config?: ComplexTemplateConfigRequest;
@@ -4757,7 +4798,7 @@ type AgenticWorkflowRequestWritable = {
    */
   name: string;
   /**
-   * When true, skip MDM subject resolution
+   * When true, skip MDM resolution
    */
   skip_mdm_resolution?: boolean;
   /**
@@ -5006,7 +5047,7 @@ type ActionRequestWritable = {
    */
   id?: string;
   /**
-   * Liquid template producing the idempotency key; receives checksum, subject_id, workflow_id, action_id, decision_key
+   * Liquid template producing the idempotency key; receives checksum, legal_entity_id, legal_entity_id, workflow_id, action_id, decision_key
    */
   idempotency_template: string;
   /**
@@ -5080,9 +5121,9 @@ type WorkflowAiAgentRequestWritable = {
  */
 type AiAgentRequestWritable = {
   /**
-   * Data access level
+   * Which lake the agent reads. `tokenized` means the agent's context is read from the tokenized copy, so it never sees a real identifier. It is enforced, not advisory: an agent set to `tokenized` in an environment with no tokenized lake fails its enrichment step rather than falling back to raw.
    */
-  data_access: 'regulated' | 'unregulated';
+  data_access: 'raw' | 'tokenized';
   /**
    * Agent description
    */
@@ -5246,10 +5287,6 @@ type GenericTableRequestWritable = {
    * Table column definitions
    */
   columns?: Array<GenericTableColumnRequest>;
-  /**
-   * Industry data domain. Each value carries a stability tier in the `x-stability` extension — `stable` domains hold their dataset shapes across releases; `experimental` domains may change without notice.
-   */
-  data_domain?: 'healthcare' | 'core_banking' | 'payments' | 'subscription' | 'service_commerce' | 'trading' | 'foundation';
   /**
    * Table description
    */
@@ -5616,7 +5653,7 @@ type InteroperabilityContractRequestWritable = {
    */
   name: string;
   /**
-   * Dataset this contract targets (e.g. "patient", "observation", "generic_table")
+   * Dataset this contract targets (e.g. "legal_entity", "beneficial_owner", "generic_table")
    */
   resource_type: string;
   /**
@@ -5676,7 +5713,7 @@ type ContextDatasetRequestWritable = {
    */
   position?: number;
   /**
-   * Liquid-templated SQL WHERE clause for filtering records at runtime. The context builder appends the MDM subject FK automatically.
+   * Liquid-templated SQL WHERE clause for filtering records at runtime. The context builder appends the legal entity FK automatically.
    */
   where_clause?: string | null;
 };
@@ -5918,10 +5955,6 @@ type DataActivationClientRequestWritable = {
    * IDs of interoperability contracts used to transform each fetched row
    */
   interoperability_contract_ids?: Array<string>;
-  /**
-   * Which context dimensions the DAC loops over per invocation
-   */
-  loop_over?: Array<'services' | 'locations' | 'providers'>;
   /**
    * DAC name
    */
@@ -6491,6 +6524,55 @@ type PlatformApiDatalakeControllerIndexData = {
   };
   url: '/api/v1/tenants/{tenant_slug}/datalakes';
 };
+type PlatformApiAdvancedMigrationControllerIndexData = {
+  body?: never;
+  path: {
+    /**
+     * Tenant slug
+     */
+    tenant_slug: string;
+    /**
+     * Datalake slug
+     */
+    datalake_slug: string;
+  };
+  query?: {
+    /**
+     * Page number (1-indexed). Defaults to 1 when omitted.
+     */
+    page?: number;
+    /**
+     * Items per page (1-100). Defaults to the resource's Flop default when omitted.
+     */
+    page_size?: number;
+    /**
+     * Fields to sort by, in order of precedence. Must appear in the resource schema's Flop `sortable:` list — unknown fields return 422.
+     */
+    order_by?: Array<string>;
+    /**
+     * Sort direction(s), pair-wise with `order_by`. `asc` or `desc`. Defaults to `asc` per unpaired `order_by` entry.
+     */
+    order_directions?: Array<'asc' | 'desc'>;
+    /**
+     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=%3D%3D&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). `op` is the symbol, percent-encoded — `%3D%3D` for `==`, `%3E%3D` for `>=` — not a word like `equal`; anything outside the enum above is a 422 before the request reaches Flop. Omit `op` entirely for equality. Unknown fields return 422 via Flop validation at the context layer.
+     */
+    filters?: Array<{
+      /**
+       * Filterable field name (must be in the resource's `filterable:`)
+       */
+      field: string;
+      /**
+       * Comparison operator. Defaults to `==` when omitted.
+       */
+      op?: '==' | '!=' | '<' | '<=' | '>' | '>=' | 'empty' | 'not_empty' | 'like' | 'ilike' | 'like_and' | 'like_or' | 'ilike_and' | 'ilike_or' | 'in' | 'not_in' | 'contains' | 'not_contains';
+      /**
+       * Filter value — shape depends on `field` and `op`.
+       */
+      value: unknown;
+    }>;
+  };
+  url: '/api/v1/tenants/{tenant_slug}/datalakes/{datalake_slug}/advanced-migrations';
+};
 type PlatformApiAiAgentControllerIndexData = {
   body?: never;
   path: {
@@ -6944,6 +7026,51 @@ type PlatformApiAgenticWorkflowOperationsControllerBatchLogsIndexData = {
   };
   url: '/api/v1/tenants/{tenant_slug}/datalakes/{datalake_slug}/agentic-workflows/{workflow_slug}/batch-logs';
 };
+type PlatformApiDatalakeControllerMetadataData = {
+  body?: never;
+  path: {
+    /**
+     * Tenant slug
+     */
+    tenant_slug: string;
+  };
+  query?: {
+    /**
+     * Page number (1-indexed). Defaults to 1 when omitted.
+     */
+    page?: number;
+    /**
+     * Items per page (1-100). Defaults to the resource's Flop default when omitted.
+     */
+    page_size?: number;
+    /**
+     * Fields to sort by, in order of precedence. Must appear in the resource schema's Flop `sortable:` list — unknown fields return 422.
+     */
+    order_by?: Array<string>;
+    /**
+     * Sort direction(s), pair-wise with `order_by`. `asc` or `desc`. Defaults to `asc` per unpaired `order_by` entry.
+     */
+    order_directions?: Array<'asc' | 'desc'>;
+    /**
+     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=%3D%3D&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). `op` is the symbol, percent-encoded — `%3D%3D` for `==`, `%3E%3D` for `>=` — not a word like `equal`; anything outside the enum above is a 422 before the request reaches Flop. Omit `op` entirely for equality. Unknown fields return 422 via Flop validation at the context layer.
+     */
+    filters?: Array<{
+      /**
+       * Filterable field name (must be in the resource's `filterable:`)
+       */
+      field: string;
+      /**
+       * Comparison operator. Defaults to `==` when omitted.
+       */
+      op?: '==' | '!=' | '<' | '<=' | '>' | '>=' | 'empty' | 'not_empty' | 'like' | 'ilike' | 'like_and' | 'like_or' | 'ilike_and' | 'ilike_or' | 'in' | 'not_in' | 'contains' | 'not_contains';
+      /**
+       * Filter value — shape depends on `field` and `op`.
+       */
+      value: unknown;
+    }>;
+  };
+  url: '/api/v1/tenants/{tenant_slug}/datalakes/metadata';
+};
 type PlatformApiDataActivationClientControllerIndexData = {
   body?: never;
   path: {
@@ -7375,7 +7502,6 @@ type DataSourceRequestWritable = DataSourceRequest;
 interface CreateGenericTableRequest {
   title: string;
   description?: string;
-  data_domain?: 'healthcare' | 'core_banking' | 'payments' | 'subscription' | 'service_commerce' | 'trading' | null;
   columns: GenericTableColumnRequest[];
 }
 interface TemplateConfig {
@@ -7400,7 +7526,7 @@ interface CreateAiAgentRequest {
   name: string;
   model: string;
   tool_id: string;
-  data_access: 'regulated' | 'unregulated';
+  data_access: 'raw' | 'tokenized';
   temperature: number;
   max_tokens: number;
   enabled: boolean;
@@ -7554,7 +7680,7 @@ interface DatasetSearchOptions {
    * Defaults to the session's `data_access_mode`. The session's capability
    * ceiling still applies — escalating beyond it returns 403.
    */
-  dataAccessMode?: 'regulated' | 'unregulated';
+  dataAccessMode?: 'raw' | 'tokenized' | 'redacted';
   /**
    * Outer SQL-chunk pagination. Defaults page=1, page_size=1000 (max 1000).
    * Pages cached IDs from `search_results`; the cap is dictated by
@@ -7598,6 +7724,11 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
+    delete: () => Promise<{
+      data: unknown;
+      request: Request;
+      response: Response;
+    }>;
   };
   admin: {
     signUp: (body: SignUpRequestWritable) => Promise<{
@@ -7703,10 +7834,7 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    metadata: (tenantSlug: string, query?: {
-      page?: number;
-      page_size?: number;
-    }) => Promise<{
+    metadata: (tenantSlug: string, query?: PlatformApiDatalakeControllerMetadataData["query"]) => Promise<{
       data: string;
       request: Request;
       response: Response;
@@ -7726,6 +7854,21 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
+    provisionTokenization: (tenantSlug: string, datalakeSlug: string) => Promise<{
+      data: DatalakeResponse;
+      request: Request;
+      response: Response;
+    }>;
+    derivedLakeTables: (tenantSlug: string, datalakeSlug: string, mode: "tokenized" | "redacted") => Promise<{
+      data: DerivedLakeTablesResponse;
+      request: Request;
+      response: Response;
+    }>;
+    resyncTable: (tenantSlug: string, datalakeSlug: string, mode: "tokenized" | "redacted", body: ResyncTableRequest) => Promise<{
+      data: ResyncTableResponse;
+      request: Request;
+      response: Response;
+    }>;
     createUploadLink: (tenantSlug: string, datalakeSlug: string, body: UploadLinkRequest) => Promise<{
       data: UploadLinkResponse;
       request: Request;
@@ -7754,6 +7897,51 @@ declare function _buildApi(myClient: Client): {
       data: ExecuteSqlResponse | string;
     }>;
   };
+  advancedMigrations: {
+    list: (tenantSlug: string, datalakeSlug: string, query?: PlatformApiAdvancedMigrationControllerIndexData["query"]) => Promise<{
+      data: AdvancedMigrationListResponse;
+      request: Request;
+      response: Response;
+    }>;
+    get: (tenantSlug: string, datalakeSlug: string, id: string) => Promise<{
+      data: AdvancedMigrationResponse;
+      request: Request;
+      response: Response;
+    }>;
+    create: (tenantSlug: string, datalakeSlug: string, body: AdvancedMigrationRequest) => Promise<{
+      data: AdvancedMigrationResponse;
+      request: Request;
+      response: Response;
+    }>;
+    update: (tenantSlug: string, datalakeSlug: string, id: string, body: AdvancedMigrationRequest) => Promise<{
+      data: AdvancedMigrationResponse;
+      request: Request;
+      response: Response;
+    }>;
+    delete: (tenantSlug: string, datalakeSlug: string, id: string) => Promise<{
+      data: void;
+      request: Request;
+      response: Response;
+    }>;
+    checksum: (tenantSlug: string, datalakeSlug: string, body: AdvancedMigrationRequest) => Promise<{
+      data: ChecksumResponse;
+      request: Request;
+      response: Response;
+    }>;
+    metadata: (tenantSlug: string, datalakeSlug: string, query?: {
+      page?: number;
+      page_size?: number;
+    }) => Promise<{
+      data: string;
+      request: Request;
+      response: Response;
+    }>;
+    metadataDetails: (tenantSlug: string, datalakeSlug: string, id: string) => Promise<{
+      data: string;
+      request: Request;
+      response: Response;
+    }>;
+  };
   dataSources: {
     list: (tenantSlug: string, datalakeSlug: string, query?: PlatformApiDataSourceControllerIndexData["query"]) => Promise<{
       data: DataSourceListResponse;
@@ -7958,7 +8146,7 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    metadataDetails: (tenantSlug: string, datalakeSlug: string, filename: string, intent: "ai_agent" | "blueprint_datasource" | "blueprint_workflow" | "workflow_filter" | "workflow_decision" | "data_activation_interoperability" | "data_activation_tool_calls" | "status_poller") => Promise<{
+    metadataDetails: (tenantSlug: string, datalakeSlug: string, filename: string, intent: "ai_agent" | "workflow_filter" | "workflow_decision" | "data_activation_interoperability" | "data_activation_tool_calls" | "status_poller") => Promise<{
       data: string;
       request: Request;
       response: Response;
@@ -8290,9 +8478,7 @@ declare function _buildApi(myClient: Client): {
         request: Request;
         response: Response;
       }>;
-      get: (tenantSlug: string, datalakeSlug: string, workflowSlug: string, id: string, opts?: {
-        dataAccessMode?: "regulated" | "unregulated";
-      }) => Promise<{
+      get: (tenantSlug: string, datalakeSlug: string, workflowSlug: string, id: string) => Promise<{
         data: WorkflowLogResponse;
         request: Request;
         response: Response;
@@ -8329,5 +8515,5 @@ declare function _buildApi(myClient: Client): {
 //#region src/index.d.ts
 declare function isEnvironmentName(name: string): name is EnvironmentName;
 //#endregion
-export { type ActionStatusUpdaterCloudWatchQueryRequest, type ActionStatusUpdaterResponse, type ActionStatusUpdaterRestCallRequest, ActionType, type AgenticWorkflowListResponse, type AgenticWorkflowRequestWritable, type AgenticWorkflowResponse, type AiAgentResponse, type AlveraApiError, type AlveraClient, type ApiConfig, type ApiDebugConfig, type BatchLogListResponse, type BatchLogResponse, type ConnectedAppListResponse, type ConnectedAppRequestWritable, type ConnectedAppResponse, type CreateActionStatusUpdaterRequest, type CreateAiAgentRequest, type CreateGenericTableRequest, type CreateSessionParams, DEFAULT_ENVIRONMENT, type DataActivationClientListResponse, type DataActivationClientLogListResponse, type DataActivationClientLogResponse, type DataActivationClientRequestWritable, type DataActivationClientResponse, type DataSourceRequest, type DataSourceRequestWritable, type DataSourceResponse, type DatalakeRequestWritable, type DatalakeResponse, type DatasetMetadataOptions, type DatasetSearchOptions, type DatasetSearchResponse, type DownloadUrlResponse, ENVIRONMENTS, type EnvironmentName, type ErrorResponse, type ExecuteActionRequest, type ExecuteActionResponse, type ExecuteSqlMeta, type ExecuteSqlRequest, type ExecuteSqlResponse, type GenericTableColumnRequest, type GenericTableColumnResponse, type GenericTableResponse, type IngestFileRequest, type IngestRequest, type InteroperabilityContractAiAgentRequestWritable, type InteroperabilityContractListResponse, type InteroperabilityContractRequestWritable, type InteroperabilityContractResponse, type InteroperabilityRunRequest, type InteroperabilityRunResponse, type MdmVerifyRequest, type MdmVerifyResponse, type PaginationMeta, type PlatformApi, type ResolvePageRequest, type RunManuallyRequestWritable, type RunManuallyResponse, type RunWorkflowRequest, type RunWorkflowResponse, type SessionResponse, type SessionResult, type SyncRoutesResponse, type TemplateConfig, type TenantListResponse, type TenantResponse, type TextToSqlRequest, type TextToSqlResponse, ToolIntent, type ToolRequest, type ToolRequestWritable, type ToolResponse, type ToolTwilioRequest, type ToolTwilioRequestWritable, type ToolTwilioResponse, type TwilioRequest, type TwilioRequestWritable, type TwilioResponse, type UpdatePageRequest, type UploadLinkRequest, type UploadLinkResponse, type WorkflowAiAgentRequestWritable, type WorkflowLogListResponse, type WorkflowLogResponse, type WorkflowRunListResponse, type WorkflowRunResponse, createBootstrapSession, createIsolatedPlatformApi, createPlatformApi, createSession, isEnvironmentName, revokeSession };
+export { type ActionStatusUpdaterCloudWatchQueryRequest, type ActionStatusUpdaterRequestWritable, type ActionStatusUpdaterResponse, type ActionStatusUpdaterRestCallRequest, ActionType, type AdvancedMigrationListResponse, type AdvancedMigrationRequest, type AdvancedMigrationResponse, type AgenticWorkflowListResponse, type AgenticWorkflowRequestWritable, type AgenticWorkflowResponse, type AiAgentRequestWritable, type AiAgentResponse, type AlveraApiError, type AlveraClient, type ApiConfig, type ApiDebugConfig, type BatchLogListResponse, type BatchLogResponse, type ConnectedAppListResponse, type ConnectedAppRequestWritable, type ConnectedAppResponse, type CreateActionStatusUpdaterRequest, type CreateAiAgentRequest, type CreateGenericTableRequest, type CreateSessionParams, DEFAULT_ENVIRONMENT, type DataActivationClientListResponse, type DataActivationClientLogListResponse, type DataActivationClientLogResponse, type DataActivationClientRequestWritable, type DataActivationClientResponse, type DataSourceRequest, type DataSourceRequestWritable, type DataSourceResponse, type DatalakeRequestWritable, type DatalakeResponse, type DatasetMetadataOptions, type DatasetSearchOptions, type DatasetSearchResponse, type DerivedLakeTablesResponse, type DownloadUrlResponse, ENVIRONMENTS, type EnvironmentName, type ErrorResponse, type ExecuteActionRequest, type ExecuteActionResponse, type ExecuteSqlMeta, type ExecuteSqlRequest, type ExecuteSqlResponse, type GenericTableColumnRequest, type GenericTableColumnResponse, type GenericTableResponse, type IngestFileRequest, type IngestRequest, type InteroperabilityContractAiAgentRequestWritable, type InteroperabilityContractListResponse, type InteroperabilityContractRequestWritable, type InteroperabilityContractResponse, type InteroperabilityRunRequest, type InteroperabilityRunResponse, type MdmVerifyRequest, type MdmVerifyResponse, type PaginationMeta, type PlatformApi, type ResolvePageRequest, type ResyncTableRequest, type ResyncTableResponse, type RunManuallyRequestWritable, type RunManuallyResponse, type RunWorkflowRequest, type RunWorkflowResponse, type SessionResponse, type SessionResult, type SyncRoutesResponse, type TemplateConfig, type TenantListResponse, type TenantResponse, type TextToSqlRequest, type TextToSqlResponse, ToolIntent, type ToolListResponse, type ToolRequest, type ToolRequestWritable, type ToolResponse, type ToolTwilioRequest, type ToolTwilioRequestWritable, type ToolTwilioResponse, type TwilioRequest, type TwilioRequestWritable, type TwilioResponse, type UpdatePageRequest, type UploadLinkRequest, type UploadLinkResponse, type WorkflowAiAgentRequestWritable, type WorkflowLogListResponse, type WorkflowLogResponse, type WorkflowRunListResponse, type WorkflowRunResponse, createBootstrapSession, createIsolatedPlatformApi, createPlatformApi, createSession, isEnvironmentName, revokeSession };
 //# sourceMappingURL=index.d.mts.map