@nvisy/sdk 0.12.0 → 0.14.0

package/dist/{index-DJSrXmm0.d.ts → index-DTr3_MW7.d.ts}

@@ -299,61 +299,7 @@ interface paths {
       path?: never;
       cookie?: never;
     };
-    /**
-     * Get account avatar
-     * @description Returns the account's avatar image (WebP). 404 when unset.
-     */
-    get: {
-      parameters: {
-        query?: never;
-        header?: never;
-        path: {
-          /** @description Public handle of the account. */
-          username: components["schemas"]["Handle"];
-        };
-        cookie?: never;
-      };
-      requestBody?: never;
-      responses: {
-        /** @description no content */
-        200: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content?: never;
-        };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        401: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
-          };
-        };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        404: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
-          };
-        };
-      };
-    };
+    get?: never;
     /**
      * Upload account avatar
      * @description Uploads and normalizes the account's avatar. Only the account itself may set it.
@@ -916,6 +862,128 @@ interface paths {
     };
     trace?: never;
   };
+  "/notifications/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List notifications
+     * @description Returns all notifications for the authenticated account and marks them as read.
+     */
+    get: {
+      parameters: {
+        query?: {
+          /**
+           * @description Cursor pointing to the last item of the previous page.
+           *     Obtain this from the `nextCursor` field in the response.
+           */
+          after?: string;
+          /** @description The maximum number of records to return (1-100, default: 20). */
+          limit?: number;
+        };
+        header?: never;
+        path?: never;
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /**
+         * @description Generic paginated response wrapper.
+         *
+         *     Provides a consistent structure for all paginated API responses with
+         *     cursor-based pagination support. When `next_cursor` is present, there
+         *     are more items to fetch.
+         */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["NotificationPage"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/notifications/unread/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * Get unread notifications count
+     * @description Returns the number of unread notifications for the authenticated account.
+     */
+    get: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path?: never;
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description Response type for unread notifications status. */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["UnreadStatus"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   "/workspaces/": {
     parameters: {
       query?: never;
@@ -1327,76 +1395,7 @@ interface paths {
       path?: never;
       cookie?: never;
     };
-    /**
-     * Get workspace avatar
-     * @description Returns the workspace's avatar image (WebP). 404 when unset.
-     */
-    get: {
-      parameters: {
-        query?: never;
-        header?: never;
-        path: {
-          /** @description URL-safe workspace identifier. */
-          workspaceSlug: string;
-        };
-        cookie?: never;
-      };
-      requestBody?: never;
-      responses: {
-        /** @description no content */
-        200: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content?: never;
-        };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        401: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
-          };
-        };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        403: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
-          };
-        };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        404: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
-          };
-        };
-      };
-    };
+    get?: never;
     /**
      * Upload workspace avatar
      * @description Uploads and normalizes the workspace's avatar. Requires UpdateWorkspace.
@@ -1815,7 +1814,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/connections/": {
+  "/workspaces/{workspaceSlug}/members/": {
     parameters: {
       query?: never;
       header?: never;
@@ -1823,24 +1822,27 @@ interface paths {
       cookie?: never;
     };
     /**
-     * List connections
-     * @description Returns all configured connections for the workspace. Only metadata is returned; encrypted credentials are never exposed.
+     * List members
+     * @description Returns a paginated list of workspace members with their roles and status.
      */
     get: {
       parameters: {
         query?: {
+          /** @description Filter by 2FA status. */
+          has2fa?: boolean;
+          /** @description Sort order (asc or desc). */
+          order?: components["schemas"]["SortOrder"];
+          /** @description Filter by workspace role. */
+          role?: components["schemas"]["WorkspaceRole"];
+          /** @description Sort by field. */
+          sortBy?: components["schemas"]["MemberSortField"];
           /**
-           * @description Cursor pointing to the last item of the previous page.
-           *     Obtain this from the `nextCursor` field in the response.
-           */
-          after?: string;
-          /** @description The maximum number of records to return (1-100, default: 20). */
-          limit?: number;
-          /**
-           * @description Filter by provider (`s3`, `azure`, `gcs`). Repeatable; a connection
-           *     matches if it uses any of the given providers. Empty means no filter.
+           * @description Cursor pointing to the last item of the previous page.
+           *     Obtain this from the `nextCursor` field in the response.
            */
-          provider?: string[];
+          after?: string;
+          /** @description The maximum number of records to return (1-100, default: 20). */
+          limit?: number;
         };
         header?: never;
         path: {
@@ -1863,7 +1865,7 @@ interface paths {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ConnectionPage"];
+            "application/json": components["schemas"]["MemberPage"];
           };
         };
         /**
@@ -1896,12 +1898,43 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
       };
     };
     put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/members/leave/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
     /**
-     * Create connection
-     * @description Creates a new provider connection for the workspace. Connection data is encrypted and stored securely. The response includes connection metadata but never exposes the encrypted credentials.
+     * Leave workspace
+     * @description Allows a member to voluntarily leave a workspace.
      */
     post: {
       parameters: {
@@ -1913,26 +1946,14 @@ interface paths {
         };
         cookie?: never;
       };
-      /** @description Request payload for creating a new workspace connection. */
-      requestBody: {
-        content: {
-          "application/json": components["schemas"]["CreateConnection"];
-        };
-      };
+      requestBody?: never;
       responses: {
-        /**
-         * @description Response type for a workspace connection.
-         *
-         *     Note: The encrypted connection data is never exposed in API responses.
-         *     Only metadata about the connection is returned.
-         */
-        201: {
+        /** @description no content */
+        200: {
           headers: {
             [name: string]: unknown;
           };
-          content: {
-            "application/json": components["schemas"]["Connection"];
-          };
+          content?: never;
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -1971,7 +1992,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        403: {
+        404: {
           headers: {
             [name: string]: unknown;
           };
@@ -1979,24 +2000,6 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /** @description Expected request with `Content-Type: application/json` */
-        415: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
-        /** @description Failed to deserialize the JSON body into the target type */
-        422: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
       };
     };
     delete?: never;
@@ -2005,7 +2008,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/connections/{connectionId}/": {
+  "/workspaces/{workspaceSlug}/members/{username}/": {
     parameters: {
       query?: never;
       header?: never;
@@ -2013,8 +2016,8 @@ interface paths {
       cookie?: never;
     };
     /**
-     * Get connection
-     * @description Returns connection metadata without encrypted credentials.
+     * Get member
+     * @description Returns detailed information about a specific workspace member.
      */
     get: {
       parameters: {
@@ -2023,25 +2026,20 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the connection. */
-          connectionId: components["schemas"]["ConnectionId"];
+          /** @description Public handle of the member's account. */
+          username: components["schemas"]["Handle"];
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /**
-         * @description Response type for a workspace connection.
-         *
-         *     Note: The encrypted connection data is never exposed in API responses.
-         *     Only metadata about the connection is returned.
-         */
+        /** @description Represents a workspace member. */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["Connection"];
+            "application/json": components["schemas"]["Member"];
           };
         };
         /**
@@ -2094,8 +2092,8 @@ interface paths {
     put?: never;
     post?: never;
     /**
-     * Delete connection
-     * @description Soft-deletes the connection from the workspace.
+     * Remove member
+     * @description Permanently removes a member from the workspace. Cannot remove owners or yourself.
      */
     delete: {
       parameters: {
@@ -2104,20 +2102,35 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the connection. */
-          connectionId: components["schemas"]["ConnectionId"];
+          /** @description Public handle of the member's account. */
+          username: components["schemas"]["Handle"];
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
         /** @description no content */
-        204: {
+        200: {
           headers: {
             [name: string]: unknown;
           };
           content?: never;
         };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
         /**
          * @description HTTP error response representation with security-conscious design.
          *
@@ -2168,8 +2181,8 @@ interface paths {
     options?: never;
     head?: never;
     /**
-     * Update connection
-     * @description Updates connection name or encrypted data.
+     * Update member role
+     * @description Updates a workspace member's role. Cannot update your own role or demote owners.
      */
     patch: {
       parameters: {
@@ -2178,30 +2191,25 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the connection. */
-          connectionId: components["schemas"]["ConnectionId"];
+          /** @description Public handle of the member's account. */
+          username: components["schemas"]["Handle"];
         };
         cookie?: never;
       };
-      /** @description Request payload for updating an existing workspace connection. */
+      /** @description Request to update a member's role. */
       requestBody: {
         content: {
-          "application/json": components["schemas"]["UpdateConnection"];
+          "application/json": components["schemas"]["UpdateMember"];
         };
       };
       responses: {
-        /**
-         * @description Response type for a workspace connection.
-         *
-         *     Note: The encrypted connection data is never exposed in API responses.
-         *     Only metadata about the connection is returned.
-         */
+        /** @description Represents a workspace member. */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["Connection"];
+            "application/json": components["schemas"]["Member"];
           };
         };
         /**
@@ -2286,40 +2294,56 @@ interface paths {
     };
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/connections/{connectionId}/verify/": {
+  "/workspaces/{workspaceSlug}/invites/": {
     parameters: {
       query?: never;
       header?: never;
       path?: never;
       cookie?: never;
     };
-    get?: never;
-    put?: never;
     /**
-     * Verify connection
-     * @description Checks whether the connection's backing store is reachable with its stored credentials.
+     * List invitations
+     * @description Returns a paginated list of workspace invitations with their current status.
      */
-    post: {
+    get: {
       parameters: {
-        query?: never;
+        query?: {
+          /** @description Sort order (asc or desc). */
+          order?: components["schemas"]["SortOrder"];
+          /** @description Filter by invited role. */
+          role?: components["schemas"]["WorkspaceRole"];
+          /** @description Sort by field. */
+          sortBy?: components["schemas"]["InviteSortField"];
+          /**
+           * @description Cursor pointing to the last item of the previous page.
+           *     Obtain this from the `nextCursor` field in the response.
+           */
+          after?: string;
+          /** @description The maximum number of records to return (1-100, default: 20). */
+          limit?: number;
+        };
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the connection. */
-          connectionId: components["schemas"]["ConnectionId"];
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /** @description Result of a connection reachability check. */
+        /**
+         * @description Generic paginated response wrapper.
+         *
+         *     Provides a consistent structure for all paginated API responses with
+         *     cursor-based pagination support. When `next_cursor` is present, there
+         *     are more items to fetch.
+         */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ConnectionVerification"];
+            "application/json": components["schemas"]["InvitePage"];
           };
         };
         /**
@@ -2352,6 +2376,45 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
+      };
+    };
+    put?: never;
+    /**
+     * Send invitation
+     * @description Invites an existing platform user to the workspace and delivers an in-app notification. No email is sent by this server. The response is identical whether or not the address belongs to a known account, so it cannot be used to determine whether an account exists.
+     */
+    post: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+        };
+        cookie?: never;
+      };
+      /** @description Request payload for creating a new workspace invite. */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["CreateInvite"];
+        };
+      };
+      responses: {
+        /**
+         * @description Acknowledgement returned after sending a workspace invitation.
+         *
+         *     The response is deliberately uniform: it carries no invite identifier or
+         *     status, so it is identical whether or not the address belonged to a known
+         *     account and cannot be used to probe for account existence.
+         */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["InviteSent"];
+          };
+        };
         /**
          * @description HTTP error response representation with security-conscious design.
          *
@@ -2359,7 +2422,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        400: {
           headers: {
             [name: string]: unknown;
           };
@@ -2367,68 +2430,6 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-      };
-    };
-    delete?: never;
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/workspaces/{workspaceSlug}/syncs/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
-    /**
-     * List workspace syncs
-     * @description Returns all sync runs across the workspace's connections, most recent first, with optional status and provider filters.
-     */
-    get: {
-      parameters: {
-        query?: {
-          /**
-           * @description Cursor pointing to the last item of the previous page.
-           *     Obtain this from the `nextCursor` field in the response.
-           */
-          after?: string;
-          /** @description The maximum number of records to return (1-100, default: 20). */
-          limit?: number;
-          /**
-           * @description Filter by connection provider (`s3`, `azure`, `gcs`). Repeatable; a sync
-           *     matches if its connection uses any of the given providers. Empty means no
-           *     provider filter.
-           */
-          provider?: string[];
-          /** @description Filter by sync status. */
-          status?: components["schemas"]["SyncStatus"];
-        };
-        header?: never;
-        path: {
-          /** @description URL-safe workspace identifier. */
-          workspaceSlug: string;
-        };
-        cookie?: never;
-      };
-      requestBody?: never;
-      responses: {
-        /**
-         * @description Generic paginated response wrapper.
-         *
-         *     Provides a consistent structure for all paginated API responses with
-         *     cursor-based pagination support. When `next_cursor` is present, there
-         *     are more items to fetch.
-         */
-        200: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ConnectionSyncPage"];
-          };
-        };
         /**
          * @description HTTP error response representation with security-conscious design.
          *
@@ -2466,7 +2467,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        409: {
           headers: {
             [name: string]: unknown;
           };
@@ -2474,17 +2475,33 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
       };
     };
-    put?: never;
-    post?: never;
     delete?: never;
     options?: never;
     head?: never;
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/connections/{connectionId}/sync/": {
+  "/workspaces/{workspaceSlug}/invites/code/": {
     parameters: {
       query?: never;
       header?: never;
@@ -2494,8 +2511,8 @@ interface paths {
     get?: never;
     put?: never;
     /**
-     * Sync connection
-     * @description Imports an object from or exports a file to the connection. Returns the created sync; poll it for completion.
+     * Generate invite code
+     * @description Creates a shareable invite code that can be used by anyone to join the workspace.
      */
     post: {
       parameters: {
@@ -2504,33 +2521,23 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the connection. */
-          connectionId: components["schemas"]["ConnectionId"];
         };
         cookie?: never;
       };
-      /**
-       * @description Request payload to trigger a connection sync.
-       *
-       *     The direction is determined by the connection's configured `sync_mode`.
-       *     - Import connections need no body: the sync fetches every not-yet-imported
-       *       object under the connection's root path.
-       *     - Export connections push one workspace file (`file_id`) to one object
-       *       `key`; both are required for export and ignored for import.
-       */
+      /** @description Request to generate a shareable invite code for a workspace. */
       requestBody: {
         content: {
-          "application/json": components["schemas"]["SyncConnection"];
+          "application/json": components["schemas"]["GenerateInviteCode"];
         };
       };
       responses: {
-        /** @description A connection sync run (import or export). */
-        202: {
+        /** @description Response containing a generated shareable invite code. */
+        201: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ConnectionSync"];
+            "application/json": components["schemas"]["InviteCode"];
           };
         };
         /**
@@ -2578,21 +2585,6 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        404: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
-          };
-        };
         /** @description Expected request with `Content-Type: application/json` */
         415: {
           headers: {
@@ -2619,52 +2611,53 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/connections/{connectionId}/syncs/": {
+  "/workspaces/{workspaceSlug}/invites/{inviteId}/": {
     parameters: {
       query?: never;
       header?: never;
       path?: never;
       cookie?: never;
     };
+    get?: never;
+    put?: never;
     /**
-     * List connection syncs
-     * @description Returns the connection's sync history, most recent first.
+     * Reply to invitation
+     * @description Accepts or declines a workspace invitation. On accept the user becomes a member and the new membership is returned; on decline no membership is created.
      */
-    get: {
+    post: {
       parameters: {
-        query?: {
-          /**
-           * @description Cursor pointing to the last item of the previous page.
-           *     Obtain this from the `nextCursor` field in the response.
-           */
-          after?: string;
-          /** @description The maximum number of records to return (1-100, default: 20). */
-          limit?: number;
-        };
+        query?: never;
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the connection. */
-          connectionId: components["schemas"]["ConnectionId"];
+          /** @description Unique identifier of the invite. */
+          inviteId: string;
         };
         cookie?: never;
       };
-      requestBody?: never;
+      /** @description Request to respond to a workspace invitation. */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["ReplyInvite"];
+        };
+      };
       responses: {
-        /**
-         * @description Generic paginated response wrapper.
-         *
-         *     Provides a consistent structure for all paginated API responses with
-         *     cursor-based pagination support. When `next_cursor` is present, there
-         *     are more items to fetch.
-         */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ConnectionSyncPage"];
+            "application/json": components["schemas"]["Member"] | null;
+          };
+        };
+        /** @description Represents a workspace member. */
+        201: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["Member"];
           };
         };
         /**
@@ -2674,7 +2667,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        401: {
+        400: {
           headers: {
             [name: string]: unknown;
           };
@@ -2689,7 +2682,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        403: {
+        401: {
           headers: {
             [name: string]: unknown;
           };
@@ -2712,52 +2705,6 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-      };
-    };
-    put?: never;
-    post?: never;
-    delete?: never;
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/workspaces/{workspaceSlug}/connections/{connectionId}/syncs/{syncId}/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
-    /**
-     * Get connection sync
-     * @description Returns a single sync run for the connection.
-     */
-    get: {
-      parameters: {
-        query?: never;
-        header?: never;
-        path: {
-          /** @description URL-safe workspace identifier. */
-          workspaceSlug: string;
-          /** @description Opaque identifier of the connection. */
-          connectionId: components["schemas"]["ConnectionId"];
-          /** @description Unique identifier of the sync run. */
-          syncId: string;
-        };
-        cookie?: never;
-      };
-      requestBody?: never;
-      responses: {
-        /** @description A connection sync run (import or export). */
-        200: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ConnectionSync"];
-          };
-        };
         /**
          * @description HTTP error response representation with security-conscious design.
          *
@@ -2765,7 +2712,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        401: {
+        409: {
           headers: {
             [name: string]: unknown;
           };
@@ -2773,83 +2720,50 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        403: {
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ErrorResponse"];
+            "text/plain": string;
           };
         };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        404: {
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ErrorResponse"];
+            "text/plain": string;
           };
         };
       };
     };
-    put?: never;
-    post?: never;
-    delete?: never;
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/workspaces/{workspaceSlug}/connections/{connectionId}/syncs/{syncId}/cancel/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
-    get?: never;
-    put?: never;
     /**
-     * Cancel connection sync
-     * @description Cancels an in-progress sync run. A run that already finished returns 409.
+     * Cancel invitation
+     * @description Permanently cancels a pending invitation. The invitee will no longer be able to accept it.
      */
-    post: {
+    delete: {
       parameters: {
         query?: never;
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the connection. */
-          connectionId: components["schemas"]["ConnectionId"];
-          /** @description Unique identifier of the sync run. */
-          syncId: string;
+          /** @description Unique identifier of the invite. */
+          inviteId: string;
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /** @description A connection sync run (import or export). */
+        /** @description no content */
         200: {
           headers: {
             [name: string]: unknown;
           };
-          content: {
-            "application/json": components["schemas"]["ConnectionSync"];
-          };
+          content?: never;
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -2896,30 +2810,14 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        409: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
-          };
-        };
       };
     };
-    delete?: never;
     options?: never;
     head?: never;
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/invites/": {
+  "/invites/code/{inviteCode}/": {
     parameters: {
       query?: never;
       header?: never;
@@ -2927,48 +2825,33 @@ interface paths {
       cookie?: never;
     };
     /**
-     * List invitations
-     * @description Returns a paginated list of workspace invitations with their current status.
-     */
-    get: {
-      parameters: {
-        query?: {
-          /** @description Sort order (asc or desc). */
-          order?: components["schemas"]["SortOrder"];
-          /** @description Filter by invited role. */
-          role?: components["schemas"]["WorkspaceRole"];
-          /** @description Sort by field. */
-          sortBy?: components["schemas"]["InviteSortField"];
-          /**
-           * @description Cursor pointing to the last item of the previous page.
-           *     Obtain this from the `nextCursor` field in the response.
-           */
-          after?: string;
-          /** @description The maximum number of records to return (1-100, default: 20). */
-          limit?: number;
-        };
+     * Preview invite
+     * @description Returns workspace information for an invite code, allowing users to preview the workspace before joining. Does not require authentication.
+     */
+    get: {
+      parameters: {
+        query?: never;
         header?: never;
         path: {
-          /** @description URL-safe workspace identifier. */
-          workspaceSlug: string;
+          /** @description The invite code to use for joining the workspace. */
+          inviteCode: string;
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
         /**
-         * @description Generic paginated response wrapper.
+         * @description Preview of an invite with workspace details for display before joining.
          *
-         *     Provides a consistent structure for all paginated API responses with
-         *     cursor-based pagination support. When `next_cursor` is present, there
-         *     are more items to fetch.
+         *     This is a public-facing response that shows workspace information
+         *     to help users decide whether to join via an invite code.
          */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["InvitePage"];
+            "application/json": components["schemas"]["InvitePreview"];
           };
         };
         /**
@@ -2978,7 +2861,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        401: {
+        400: {
           headers: {
             [name: string]: unknown;
           };
@@ -2993,7 +2876,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        403: {
+        404: {
           headers: {
             [name: string]: unknown;
           };
@@ -3005,39 +2888,40 @@ interface paths {
     };
     put?: never;
     /**
-     * Send invitation
-     * @description Invites an existing platform user to the workspace and delivers an in-app notification. No email is sent by this server. The response is identical whether or not the address belongs to a known account, so it cannot be used to determine whether an account exists.
+     * Reply to invite code
+     * @description Accepts or declines a workspace invite code. If accepted (the default when no body is provided), the user becomes a member with the role specified in the code. If declined, no action is taken.
      */
     post: {
       parameters: {
         query?: never;
         header?: never;
         path: {
-          /** @description URL-safe workspace identifier. */
-          workspaceSlug: string;
+          /** @description The invite code to use for joining the workspace. */
+          inviteCode: string;
         };
         cookie?: never;
       };
-      /** @description Request payload for creating a new workspace invite. */
       requestBody: {
         content: {
-          "application/json": components["schemas"]["CreateInvite"];
+          "application/json": components["schemas"]["ReplyInvite"] | null;
         };
       };
       responses: {
-        /**
-         * @description Acknowledgement returned after sending a workspace invitation.
-         *
-         *     The response is deliberately uniform: it carries no invite identifier or
-         *     status, so it is identical whether or not the address belonged to a known
-         *     account and cannot be used to probe for account existence.
-         */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["InviteSent"];
+            "application/json": components["schemas"]["Member"] | null;
+          };
+        };
+        /** @description Represents a workspace member. */
+        201: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["Member"];
           };
         };
         /**
@@ -3077,7 +2961,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        403: {
+        404: {
           headers: {
             [name: string]: unknown;
           };
@@ -3126,22 +3010,33 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/invites/code/": {
+  "/workspaces/{workspaceSlug}/connections/": {
     parameters: {
       query?: never;
       header?: never;
       path?: never;
       cookie?: never;
     };
-    get?: never;
-    put?: never;
     /**
-     * Generate invite code
-     * @description Creates a shareable invite code that can be used by anyone to join the workspace.
+     * List connections
+     * @description Returns all configured connections for the workspace. Only metadata is returned; encrypted credentials are never exposed.
      */
-    post: {
+    get: {
       parameters: {
-        query?: never;
+        query?: {
+          /**
+           * @description Cursor pointing to the last item of the previous page.
+           *     Obtain this from the `nextCursor` field in the response.
+           */
+          after?: string;
+          /** @description The maximum number of records to return (1-100, default: 20). */
+          limit?: number;
+          /**
+           * @description Filter by provider (`s3`, `azure`, `gcs`). Repeatable; a connection
+           *     matches if it uses any of the given providers. Empty means no filter.
+           */
+          provider?: string[];
+        };
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
@@ -3149,35 +3044,21 @@ interface paths {
         };
         cookie?: never;
       };
-      /** @description Request to generate a shareable invite code for a workspace. */
-      requestBody: {
-        content: {
-          "application/json": components["schemas"]["GenerateInviteCode"];
-        };
-      };
+      requestBody?: never;
       responses: {
-        /** @description Response containing a generated shareable invite code. */
-        201: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["InviteCode"];
-          };
-        };
         /**
-         * @description HTTP error response representation with security-conscious design.
+         * @description Generic paginated response wrapper.
          *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
+         *     Provides a consistent structure for all paginated API responses with
+         *     cursor-based pagination support. When `next_cursor` is present, there
+         *     are more items to fetch.
          */
-        400: {
+        200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ErrorResponse"];
+            "application/json": components["schemas"]["ConnectionPage"];
           };
         };
         /**
@@ -3210,44 +3091,12 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /** @description Expected request with `Content-Type: application/json` */
-        415: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
-        /** @description Failed to deserialize the JSON body into the target type */
-        422: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
       };
     };
-    delete?: never;
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/workspaces/{workspaceSlug}/invites/{inviteId}/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
-    get?: never;
     put?: never;
     /**
-     * Reply to invitation
-     * @description Accepts or declines a workspace invitation. On accept the user becomes a member and the new membership is returned; on decline no membership is created.
+     * Create connection
+     * @description Creates a new provider connection for the workspace. Connection data is encrypted and stored securely. The response includes connection metadata but never exposes the encrypted credentials.
      */
     post: {
       parameters: {
@@ -3256,48 +3105,28 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Unique identifier of the invite. */
-          inviteId: string;
         };
         cookie?: never;
       };
-      /** @description Request to respond to a workspace invitation. */
+      /** @description Request payload for creating a new workspace connection. */
       requestBody: {
         content: {
-          "application/json": components["schemas"]["ReplyInvite"];
+          "application/json": components["schemas"]["CreateConnection"];
         };
       };
       responses: {
-        200: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["Member"] | null;
-          };
-        };
-        /** @description Represents a workspace member. */
-        201: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["Member"];
-          };
-        };
         /**
-         * @description HTTP error response representation with security-conscious design.
+         * @description Response type for a workspace connection.
          *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
+         *     Note: The encrypted connection data is never exposed in API responses.
+         *     Only metadata about the connection is returned.
          */
-        400: {
+        201: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ErrorResponse"];
+            "application/json": components["schemas"]["Connection"];
           };
         };
         /**
@@ -3307,7 +3136,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        401: {
+        400: {
           headers: {
             [name: string]: unknown;
           };
@@ -3322,7 +3151,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        401: {
           headers: {
             [name: string]: unknown;
           };
@@ -3337,7 +3166,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        409: {
+        403: {
           headers: {
             [name: string]: unknown;
           };
@@ -3365,30 +3194,50 @@ interface paths {
         };
       };
     };
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/connections/{connectionId}/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
     /**
-     * Cancel invitation
-     * @description Permanently cancels a pending invitation. The invitee will no longer be able to accept it.
+     * Get connection
+     * @description Returns connection metadata without encrypted credentials.
      */
-    delete: {
+    get: {
       parameters: {
         query?: never;
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Unique identifier of the invite. */
-          inviteId: string;
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /** @description no content */
+        /**
+         * @description Response type for a workspace connection.
+         *
+         *     Note: The encrypted connection data is never exposed in API responses.
+         *     Only metadata about the connection is returned.
+         */
         200: {
           headers: {
             [name: string]: unknown;
           };
-          content?: never;
+          content: {
+            "application/json": components["schemas"]["Connection"];
+          };
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -3437,46 +3286,46 @@ interface paths {
         };
       };
     };
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/invites/code/{inviteCode}/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
+    put?: never;
+    post?: never;
     /**
-     * Preview invite
-     * @description Returns workspace information for an invite code, allowing users to preview the workspace before joining. Does not require authentication.
+     * Delete connection
+     * @description Soft-deletes the connection from the workspace.
      */
-    get: {
+    delete: {
       parameters: {
         query?: never;
         header?: never;
         path: {
-          /** @description The invite code to use for joining the workspace. */
-          inviteCode: string;
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
+        /** @description no content */
+        204: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content?: never;
+        };
         /**
-         * @description Preview of an invite with workspace details for display before joining.
+         * @description HTTP error response representation with security-conscious design.
          *
-         *     This is a public-facing response that shows workspace information
-         *     to help users decide whether to join via an invite code.
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
          */
-        200: {
+        401: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["InvitePreview"];
+            "application/json": components["schemas"]["ErrorResponse"];
           };
         };
         /**
@@ -3486,7 +3335,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        400: {
+        403: {
           headers: {
             [name: string]: unknown;
           };
@@ -3511,42 +3360,43 @@ interface paths {
         };
       };
     };
-    put?: never;
+    options?: never;
+    head?: never;
     /**
-     * Reply to invite code
-     * @description Accepts or declines a workspace invite code. If accepted (the default when no body is provided), the user becomes a member with the role specified in the code. If declined, no action is taken.
+     * Update connection
+     * @description Updates connection name or encrypted data.
      */
-    post: {
+    patch: {
       parameters: {
         query?: never;
         header?: never;
         path: {
-          /** @description The invite code to use for joining the workspace. */
-          inviteCode: string;
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
         };
         cookie?: never;
       };
+      /** @description Request payload for updating an existing workspace connection. */
       requestBody: {
         content: {
-          "application/json": components["schemas"]["ReplyInvite"] | null;
+          "application/json": components["schemas"]["UpdateConnection"];
         };
       };
       responses: {
+        /**
+         * @description Response type for a workspace connection.
+         *
+         *     Note: The encrypted connection data is never exposed in API responses.
+         *     Only metadata about the connection is returned.
+         */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["Member"] | null;
-          };
-        };
-        /** @description Represents a workspace member. */
-        201: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["Member"];
+            "application/json": components["schemas"]["Connection"];
           };
         };
         /**
@@ -3586,7 +3436,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        403: {
           headers: {
             [name: string]: unknown;
           };
@@ -3601,7 +3451,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        409: {
+        404: {
           headers: {
             [name: string]: unknown;
           };
@@ -3629,13 +3479,98 @@ interface paths {
         };
       };
     };
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/connections/{connectionId}/verify/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    /**
+     * Verify connection
+     * @description Checks whether the connection's backing store is reachable with its stored credentials.
+     */
+    post: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description Result of a connection reachability check. */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ConnectionVerification"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
     delete?: never;
     options?: never;
     head?: never;
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/members/": {
+  "/workspaces/{workspaceSlug}/syncs/": {
     parameters: {
       query?: never;
       header?: never;
@@ -3643,20 +3578,12 @@ interface paths {
       cookie?: never;
     };
     /**
-     * List members
-     * @description Returns a paginated list of workspace members with their roles and status.
+     * List workspace syncs
+     * @description Returns all sync runs across the workspace's connections, most recent first, with optional status and provider filters.
      */
     get: {
       parameters: {
         query?: {
-          /** @description Filter by 2FA status. */
-          has2fa?: boolean;
-          /** @description Sort order (asc or desc). */
-          order?: components["schemas"]["SortOrder"];
-          /** @description Filter by workspace role. */
-          role?: components["schemas"]["WorkspaceRole"];
-          /** @description Sort by field. */
-          sortBy?: components["schemas"]["MemberSortField"];
           /**
            * @description Cursor pointing to the last item of the previous page.
            *     Obtain this from the `nextCursor` field in the response.
@@ -3664,6 +3591,14 @@ interface paths {
           after?: string;
           /** @description The maximum number of records to return (1-100, default: 20). */
           limit?: number;
+          /**
+           * @description Filter by connection provider (`s3`, `azure`, `gcs`). Repeatable; a sync
+           *     matches if its connection uses any of the given providers. Empty means no
+           *     provider filter.
+           */
+          provider?: string[];
+          /** @description Filter by sync status. */
+          status?: components["schemas"]["SyncStatus"];
         };
         header?: never;
         path: {
@@ -3686,7 +3621,7 @@ interface paths {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["MemberPage"];
+            "application/json": components["schemas"]["ConnectionSyncPage"];
           };
         };
         /**
@@ -3744,7 +3679,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/members/leave/": {
+  "/workspaces/{workspaceSlug}/connections/{connectionId}/sync/": {
     parameters: {
       query?: never;
       header?: never;
@@ -3754,8 +3689,8 @@ interface paths {
     get?: never;
     put?: never;
     /**
-     * Leave workspace
-     * @description Allows a member to voluntarily leave a workspace.
+     * Sync connection
+     * @description Imports an object from or exports a file to the connection. Returns the created sync; poll it for completion.
      */
     post: {
       parameters: {
@@ -3764,17 +3699,34 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
         };
         cookie?: never;
       };
-      requestBody?: never;
+      /**
+       * @description Request payload to trigger a connection sync.
+       *
+       *     The direction is determined by the connection's configured `sync_mode`.
+       *     - Import connections need no body: the sync fetches every not-yet-imported
+       *       object under the connection's root path.
+       *     - Export connections push one workspace file (`file_id`) to one object
+       *       `key`; both are required for export and ignored for import.
+       */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["SyncConnection"];
+        };
+      };
       responses: {
-        /** @description no content */
-        200: {
+        /** @description A connection sync run (import or export). */
+        202: {
           headers: {
             [name: string]: unknown;
           };
-          content?: never;
+          content: {
+            "application/json": components["schemas"]["ConnectionSync"];
+          };
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -3806,6 +3758,21 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
         /**
          * @description HTTP error response representation with security-conscious design.
          *
@@ -3821,6 +3788,24 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
       };
     };
     delete?: never;
@@ -3829,7 +3814,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/members/{username}/": {
+  "/workspaces/{workspaceSlug}/connections/{connectionId}/syncs/": {
     parameters: {
       query?: never;
       header?: never;
@@ -3837,30 +3822,44 @@ interface paths {
       cookie?: never;
     };
     /**
-     * Get member
-     * @description Returns detailed information about a specific workspace member.
+     * List connection syncs
+     * @description Returns the connection's sync history, most recent first.
      */
     get: {
       parameters: {
-        query?: never;
+        query?: {
+          /**
+           * @description Cursor pointing to the last item of the previous page.
+           *     Obtain this from the `nextCursor` field in the response.
+           */
+          after?: string;
+          /** @description The maximum number of records to return (1-100, default: 20). */
+          limit?: number;
+        };
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Public handle of the member's account. */
-          username: components["schemas"]["Handle"];
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /** @description Represents a workspace member. */
+        /**
+         * @description Generic paginated response wrapper.
+         *
+         *     Provides a consistent structure for all paginated API responses with
+         *     cursor-based pagination support. When `next_cursor` is present, there
+         *     are more items to fetch.
+         */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["Member"];
+            "application/json": components["schemas"]["ConnectionSyncPage"];
           };
         };
         /**
@@ -3910,46 +3909,48 @@ interface paths {
         };
       };
     };
-    put?: never;
-    post?: never;
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/connections/{connectionId}/syncs/{syncId}/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
     /**
-     * Remove member
-     * @description Permanently removes a member from the workspace. Cannot remove owners or yourself.
+     * Get connection sync
+     * @description Returns a single sync run for the connection.
      */
-    delete: {
+    get: {
       parameters: {
         query?: never;
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Public handle of the member's account. */
-          username: components["schemas"]["Handle"];
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
+          /** @description Unique identifier of the sync run. */
+          syncId: string;
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /** @description no content */
+        /** @description A connection sync run (import or export). */
         200: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content?: never;
-        };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        400: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ErrorResponse"];
+            "application/json": components["schemas"]["ConnectionSync"];
           };
         };
         /**
@@ -3999,38 +4000,50 @@ interface paths {
         };
       };
     };
+    put?: never;
+    post?: never;
+    delete?: never;
     options?: never;
     head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/connections/{connectionId}/syncs/{syncId}/cancel/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
     /**
-     * Update member role
-     * @description Updates a workspace member's role. Cannot update your own role or demote owners.
+     * Cancel connection sync
+     * @description Cancels an in-progress sync run. A run that already finished returns 409.
      */
-    patch: {
+    post: {
       parameters: {
         query?: never;
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Public handle of the member's account. */
-          username: components["schemas"]["Handle"];
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
+          /** @description Unique identifier of the sync run. */
+          syncId: string;
         };
         cookie?: never;
       };
-      /** @description Request to update a member's role. */
-      requestBody: {
-        content: {
-          "application/json": components["schemas"]["UpdateMember"];
-        };
-      };
+      requestBody?: never;
       responses: {
-        /** @description Represents a workspace member. */
+        /** @description A connection sync run (import or export). */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["Member"];
+            "application/json": components["schemas"]["ConnectionSync"];
           };
         };
         /**
@@ -4040,7 +4053,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        400: {
+        401: {
           headers: {
             [name: string]: unknown;
           };
@@ -4055,7 +4068,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        401: {
+        403: {
           headers: {
             [name: string]: unknown;
           };
@@ -4070,7 +4083,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        403: {
+        404: {
           headers: {
             [name: string]: unknown;
           };
@@ -4085,7 +4098,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        409: {
           headers: {
             [name: string]: unknown;
           };
@@ -4093,26 +4106,12 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /** @description Expected request with `Content-Type: application/json` */
-        415: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
-        /** @description Failed to deserialize the JSON body into the target type */
-        422: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
       };
     };
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
     trace?: never;
   };
   "/workspaces/{workspaceSlug}/webhooks/": {
@@ -6135,30 +6134,27 @@ interface paths {
         /**
          * @description What detection found in one document.
          *
-         *     The body group plus per-container-part groups (each tagged
-         *     by modality) plus a snapshot of the recognition [`Scope`] the
-         *     entities were scored against.
+         *     The body group plus per-container-part groups (each tagged by
+         *     modality) plus the recognition [`AuditContext`] the entities
+         *     were scored against.
          *
-         *     The scope snapshot travels with the entities so anonymize
-         *     can rebuild an orchestrator against exactly the vocabulary
-         *     analyze used. Anything a policy predicate compares against
-         *     (label catalog, document-level classification labels,
-         *     asserted languages / jurisdictions) is here.
+         *     The context travels with the entities so anonymize can rebuild
+         *     an orchestrator against exactly the vocabulary analyze used.
+         *     Anything a policy predicate compares against beyond the label
+         *     catalog (asserted languages, jurisdictions, document tags) is
+         *     here; labels are re-derived from the policy set on each
+         *     anonymize call.
          *
-         *     `correlation_id` on the persisted scope is always `None`; the
-         *     anonymize call supplies a fresh id from the passed
-         *     [`Document`] so anonymize-side tracing spans are distinct
-         *     from the analyze-side ones.
-         *
-         *     [`Document`]: nvisy_schema::file::Document
-         *     [`Scope`]: elide::recognition::Scope
+         *     No [`Default`] — a well-formed audit must carry a real
+         *     [`AuditContext`] with a real correlation id. Callers building
+         *     an audit outside the analyze path construct it explicitly.
          */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["AnalyzedDocument"];
+            "application/json": components["schemas"]["Audit"];
           };
         };
         /**
@@ -6436,9 +6432,9 @@ interface paths {
       /**
        * @description Request payload for creating a new workspace policy.
        *
-       *     The `definition` is a structured policy the redaction engine consumes;
-       *     its `name` and `description` drive the stored columns unless overridden
-       *     here.
+       *     The body comes from a template or an inline definition (see [`PolicyBody`]).
+       *     The body's `name` and `description` drive the stored columns unless
+       *     overridden here.
        */
       requestBody: {
         content: {
@@ -6801,47 +6797,55 @@ interface paths {
     };
     trace?: never;
   };
-  "/notifications/": {
+  "/auth/login/": {
     parameters: {
       query?: never;
       header?: never;
       path?: never;
       cookie?: never;
     };
+    get?: never;
+    put?: never;
     /**
-     * List notifications
-     * @description Returns all notifications for the authenticated account and marks them as read.
+     * Login
+     * @description Authenticates a user and returns an access token.
      */
-    get: {
+    post: {
       parameters: {
-        query?: {
-          /**
-           * @description Cursor pointing to the last item of the previous page.
-           *     Obtain this from the `nextCursor` field in the response.
-           */
-          after?: string;
-          /** @description The maximum number of records to return (1-100, default: 20). */
-          limit?: number;
-        };
+        query?: never;
         header?: never;
         path?: never;
         cookie?: never;
       };
-      requestBody?: never;
+      /** @description Request payload for login. */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["Login"];
+        };
+      };
       responses: {
+        /** @description Response returned after successful authentication (login/signup). */
+        201: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["AuthToken"];
+          };
+        };
         /**
-         * @description Generic paginated response wrapper.
+         * @description HTTP error response representation with security-conscious design.
          *
-         *     Provides a consistent structure for all paginated API responses with
-         *     cursor-based pagination support. When `next_cursor` is present, there
-         *     are more items to fetch.
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
          */
-        200: {
+        400: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["NotificationPage"];
+            "application/json": components["schemas"]["ErrorResponse"];
           };
         };
         /**
@@ -6859,71 +6863,33 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-      };
-    };
-    put?: never;
-    post?: never;
-    delete?: never;
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/notifications/unread/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
-    /**
-     * Get unread notifications count
-     * @description Returns the number of unread notifications for the authenticated account.
-     */
-    get: {
-      parameters: {
-        query?: never;
-        header?: never;
-        path?: never;
-        cookie?: never;
-      };
-      requestBody?: never;
-      responses: {
-        /** @description Response type for unread notifications status. */
-        200: {
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["UnreadStatus"];
+            "text/plain": string;
           };
         };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        401: {
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ErrorResponse"];
+            "text/plain": string;
           };
         };
       };
     };
-    put?: never;
-    post?: never;
     delete?: never;
     options?: never;
     head?: never;
     patch?: never;
     trace?: never;
   };
-  "/auth/login/": {
+  "/auth/signup/": {
     parameters: {
       query?: never;
       header?: never;
@@ -6933,8 +6899,8 @@ interface paths {
     get?: never;
     put?: never;
     /**
-     * Login
-     * @description Authenticates a user and returns an access token.
+     * Signup
+     * @description Creates a new account and returns an access token.
      */
     post: {
       parameters: {
@@ -6943,10 +6909,10 @@ interface paths {
         path?: never;
         cookie?: never;
       };
-      /** @description Request payload for login. */
+      /** @description Request payload for signup. */
       requestBody: {
         content: {
-          "application/json": components["schemas"]["Login"];
+          "application/json": components["schemas"]["Signup"];
         };
       };
       responses: {
@@ -6981,7 +6947,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        401: {
+        409: {
           headers: {
             [name: string]: unknown;
           };
@@ -7015,7 +6981,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/auth/signup/": {
+  "/auth/logout/": {
     parameters: {
       query?: never;
       header?: never;
@@ -7025,8 +6991,8 @@ interface paths {
     get?: never;
     put?: never;
     /**
-     * Signup
-     * @description Creates a new account and returns an access token.
+     * Logout
+     * @description Invalidates the current access token.
      */
     post: {
       parameters: {
@@ -7035,21 +7001,14 @@ interface paths {
         path?: never;
         cookie?: never;
       };
-      /** @description Request payload for signup. */
-      requestBody: {
-        content: {
-          "application/json": components["schemas"]["Signup"];
-        };
-      };
+      requestBody?: never;
       responses: {
-        /** @description Response returned after successful authentication (login/signup). */
-        201: {
+        /** @description Logged out. */
+        200: {
           headers: {
             [name: string]: unknown;
           };
-          content: {
-            "application/json": components["schemas"]["AuthToken"];
-          };
+          content?: never;
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -7058,7 +7017,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        400: {
+        401: {
           headers: {
             [name: string]: unknown;
           };
@@ -7066,70 +7025,91 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        409: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
-          };
+      };
+    };
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/health/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * Health status
+     * @description Returns system health status. Unauthenticated requests use cache; authenticated requests perform real-time checks.
+     */
+    get: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          /** @description The API version string (e.g., "v1", "v2"). */
+          version: string;
         };
-        /** @description Expected request with `Content-Type: application/json` */
-        415: {
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description Response body for `GET /health/`. */
+        200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "text/plain": string;
+            "application/json": components["schemas"]["Health"];
           };
         };
-        /** @description Failed to deserialize the JSON body into the target type */
-        422: {
+        /** @description Response body for `GET /health/`. */
+        503: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "text/plain": string;
+            "application/json": components["schemas"]["Health"];
           };
         };
       };
     };
+    put?: never;
+    post?: never;
     delete?: never;
     options?: never;
     head?: never;
     patch?: never;
     trace?: never;
   };
-  "/auth/logout/": {
+  "/avatars/accounts/{id}/{version}/": {
     parameters: {
       query?: never;
       header?: never;
       path?: never;
       cookie?: never;
     };
-    get?: never;
-    put?: never;
     /**
-     * Logout
-     * @description Invalidates the current access token.
+     * Get avatar
+     * @description Returns the owner's avatar image (WebP), publicly. 404 when unset.
      */
-    post: {
+    get: {
       parameters: {
         query?: never;
         header?: never;
-        path?: never;
+        path: {
+          /** @description Opaque id of the avatar's owner. */
+          id: string;
+          /** @description Content-hash version segment identifying the exact stored object. */
+          version: string;
+        };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /** @description Logged out. */
+        /** @description no content */
         200: {
           headers: {
             [name: string]: unknown;
@@ -7143,7 +7123,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        401: {
+        404: {
           headers: {
             [name: string]: unknown;
           };
@@ -7153,13 +7133,15 @@ interface paths {
         };
       };
     };
+    put?: never;
+    post?: never;
     delete?: never;
     options?: never;
     head?: never;
     patch?: never;
     trace?: never;
   };
-  "/health/": {
+  "/avatars/workspaces/{id}/{version}/": {
     parameters: {
       query?: never;
       header?: never;
@@ -7167,37 +7149,43 @@ interface paths {
       cookie?: never;
     };
     /**
-     * Health status
-     * @description Returns system health status. Unauthenticated requests use cache; authenticated requests perform real-time checks.
+     * Get avatar
+     * @description Returns the owner's avatar image (WebP), publicly. 404 when unset.
      */
     get: {
       parameters: {
         query?: never;
         header?: never;
         path: {
-          /** @description The API version string (e.g., "v1", "v2"). */
+          /** @description Opaque id of the avatar's owner. */
+          id: string;
+          /** @description Content-hash version segment identifying the exact stored object. */
           version: string;
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /** @description Response body for `GET /health/`. */
+        /** @description no content */
         200: {
           headers: {
             [name: string]: unknown;
           };
-          content: {
-            "application/json": components["schemas"]["Health"];
-          };
+          content?: never;
         };
-        /** @description Response body for `GET /health/`. */
-        503: {
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["Health"];
+            "application/json": components["schemas"]["ErrorResponse"];
           };
         };
       };
@@ -7312,65 +7300,6 @@ interface components {
      *     audit trail and activity tracking.
      */
     ActivityType: "workspace:created" | "workspace:updated" | "workspace:deleted" | "workspace:exported" | "workspace:imported" | "member:deleted" | "member:updated" | "invite:created" | "invite:accepted" | "invite:declined" | "invite:canceled" | "connection:created" | "connection:updated" | "connection:deleted" | "connection:synced" | "webhook:created" | "webhook:updated" | "webhook:deleted" | "webhook:triggered" | "file:created" | "file:updated" | "file:deleted" | "file:verified" | "custom";
-    /**
-     * @description What detection found in one document.
-     *
-     *     The body group plus per-container-part groups (each tagged
-     *     by modality) plus a snapshot of the recognition [`Scope`] the
-     *     entities were scored against.
-     *
-     *     The scope snapshot travels with the entities so anonymize
-     *     can rebuild an orchestrator against exactly the vocabulary
-     *     analyze used. Anything a policy predicate compares against
-     *     (label catalog, document-level classification labels,
-     *     asserted languages / jurisdictions) is here.
-     *
-     *     `correlation_id` on the persisted scope is always `None`; the
-     *     anonymize call supplies a fresh id from the passed
-     *     [`Document`] so anonymize-side tracing spans are distinct
-     *     from the analyze-side ones.
-     *
-     *     [`Document`]: nvisy_schema::file::Document
-     *     [`Scope`]: elide::recognition::Scope
-     */
-    AnalyzedDocument: {
-      /**
-       * @description The body group.
-       *
-       *     `None` when no body pipeline produced entities (pre-analyze,
-       *     or the codec resolved the doc to a modality with no
-       *     pipeline).
-       */
-      body?: components["schemas"]["RecognizedGroup"];
-      /**
-       * @description One entry per container part the orchestrator surfaced.
-       *
-       *     Keyed by the container-private part id (e.g. a DOCX zip
-       *     entry name like `"word/media/image1.png"`); each value
-       *     carries that part's modality + entities.
-       */
-      parts?: {
-        [key: string]: components["schemas"]["RecognizedGroup"];
-      };
-      /**
-       * @description Recognition scope snapshot.
-       *
-       *     The resolved label catalog + asserted languages,
-       *     countries, and document labels. Held so
-       *     [`Engine::anonymize_document`] can compile against the same
-       *     vocabulary analyze used without the caller re-passing an
-       *     `AnalyzerParams`.
-       *
-       *     Required on the wire. A missing scope on an incoming
-       *     [`AnalyzedDocument`] would default to an empty catalog and
-       *     silently underfire every `TagOneOf` policy predicate;
-       *     rejecting at deserialize time surfaces the shape mismatch
-       *     at load, not at apply.
-       *
-       *     [`Engine::anonymize_document`]: super::Engine::anonymize_document
-       */
-      scope: components["schemas"]["Scope"];
-    };
     /** @description API token response structure. */
     ApiToken: {
       /**
@@ -7489,23 +7418,29 @@ interface components {
      */
     ArtifactType: "input" | "output" | "intermediate";
     /**
-     * @description Author-supplied rationale for a redaction: the policy it enforces and
-     *     a reason.
+     * @description Author-supplied rationale for a redaction: a policy name and an optional
+     *     description.
      *
      *     Where the matched selection rule answers *which rule fired*, an
      *     `Attribution` answers *under what authority* — a compliance clause, an
      *     internal policy, a data-handling rule. A policy author attaches it to a
-     *     selection rule (the anonymizer's `because`); the anonymizer records it on
-     *     the entity's [`Redaction`] event so an audit can trace a change back to
-     *     the policy that demanded it.
+     *     selection rule (`Rule::because` in `elide-redaction`); the anonymizer
+     *     records it on the entity's [`Redaction`] event so an audit can trace a
+     *     change back to the policy that demanded it.
+     *
+     *     The `name` is the author's label for that policy (`"gdpr-art-17"`,
+     *     `"hipaa-safe-harbor"`, `"PII removal"`); an optional `description` adds
+     *     human context. Any stable machine identity a policy layer needs (a rule
+     *     UUID, a jurisdiction) is that layer's concern — it can encode it in the
+     *     name or carry it separately.
      *
      *     [`Redaction`]: crate::entity::provenance::EventKind::Redaction
      */
     Attribution: {
-      /** @description Stable policy / rule identifier (e.g. `"gdpr-art-17"`, `"pci-dss-3.4"`). */
-      policy_id: string;
-      /** @description Human-readable reason (e.g. `"right to erasure"`), when given. */
-      reason?: string;
+      /** @description Human-readable description (e.g. `"right to erasure"`), when given. */
+      description?: string;
+      /** @description The policy's name (e.g. `"gdpr-art-17"`, `"hipaa-safe-harbor"`). */
+      name: string;
     };
     /**
      * @description Per-call payload a recognizer inspects for the [`Audio`] modality.
@@ -7610,12 +7545,17 @@ interface components {
       /** @description The elide entity, as recognition produced it. */
       entity: components["schemas"]["AudioEntity"];
       /**
-       * @description Reviewer-supplied override.
+       * @description Reviewer-supplied redaction override.
        *
-       *     `None` means "use the policy's decision"; `Some(action)`
-       *     overrides it for this specific entity at apply time.
+       *     `None` means "use the matching policy rule's decision";
+       *     `Some(...)` overrides that rule for this specific entity
+       *     at apply time. Reviewer overrides take precedence over
+       *     every policy rule and inherit the authority of the
+       *     [`Review::policy_id`] they name — the audit event's
+       *     attribution stamps that policy so the trail names the
+       *     authority under which the override fired.
        */
-      reviewerOverride?: components["schemas"]["ModalityRedactions"];
+      review?: components["schemas"]["Review"];
     };
     /**
      * @description One thing that happened to an entity, with its effect on confidence.
@@ -7853,6 +7793,117 @@ interface components {
        */
       waveform: components["schemas"]["Waveform"];
     };
+    /**
+     * @description What detection found in one document.
+     *
+     *     The body group plus per-container-part groups (each tagged by
+     *     modality) plus the recognition [`AuditContext`] the entities
+     *     were scored against.
+     *
+     *     The context travels with the entities so anonymize can rebuild
+     *     an orchestrator against exactly the vocabulary analyze used.
+     *     Anything a policy predicate compares against beyond the label
+     *     catalog (asserted languages, jurisdictions, document tags) is
+     *     here; labels are re-derived from the policy set on each
+     *     anonymize call.
+     *
+     *     No [`Default`] — a well-formed audit must carry a real
+     *     [`AuditContext`] with a real correlation id. Callers building
+     *     an audit outside the analyze path construct it explicitly.
+     */
+    Audit: {
+      /**
+       * @description The body group.
+       *
+       *     `None` when no body pipeline produced entities (pre-analyze,
+       *     or the codec resolved the doc to a modality with no
+       *     pipeline).
+       */
+      body?: components["schemas"]["EntityGroup"];
+      /**
+       * @description Recognition context.
+       *
+       *     The asserted languages, countries, document tags, and the
+       *     analyze-side correlation id. Held so
+       *     [`Engine::anonymize`] can compile against the same
+       *     vocabulary analyze used without the caller re-passing an
+       *     `AnalyzerParams`.
+       *
+       *     Required on the wire — a missing context on an incoming
+       *     [`Audit`] rejects at deserialize time so the shape
+       *     mismatch surfaces at load, not at apply.
+       *
+       *     [`Engine::anonymize`]: super::Engine::anonymize
+       */
+      context: components["schemas"]["AuditContext"];
+      /**
+       * @description One entry per container part the orchestrator surfaced.
+       *
+       *     Keyed by the container-private part id (e.g. a DOCX zip
+       *     entry name like `"word/media/image1.png"`); each value
+       *     carries that part's modality + entities.
+       */
+      parts?: {
+        [key: string]: components["schemas"]["EntityGroup"];
+      };
+    };
+    /**
+     * @description Recognition-side facts that travel from analyze to anonymize.
+     *
+     *     Mirrors elide's [`Scope`] shape one-for-one: direct fields
+     *     for `languages` and `countries` (typed, elide-native), a
+     *     [`metadata`] sub-struct for free-form classification strings
+     *     (`tags`, `purpose`, `audience`), and the analyze-time
+     *     [`correlation_id`]. The label catalog is not on here —
+     *     labels are policy-owned, and anonymize re-derives them from
+     *     the policy set it was handed.
+     *
+     *     No [`Default`] — `correlation_id` has no meaningful default
+     *     (a nil UUID would silently collapse unrelated audits under
+     *     one bucket in downstream trace aggregators), so callers
+     *     supply one explicitly. Everything else defaults to empty.
+     *
+     *     [`Scope`]: elide::recognition::Scope
+     *     [`metadata`]: Self::metadata
+     *     [`correlation_id`]: Self::correlation_id
+     */
+    AuditContext: {
+      /**
+       * Format: uuid
+       * @description Analyze-time correlation id.
+       *
+       *     Threaded into every tracing span on the recognition path;
+       *     carried over so the anonymize path can link its own spans
+       *     to the same request. The anonymize call supplies a fresh
+       *     id from the passed [`Document`] as the anonymize-side
+       *     correlation id — this one stays as the analyze-side
+       *     pointer.
+       *
+       *     Required on the wire.
+       *
+       *     [`Document`]: nvisy_schema::file::Document
+       */
+      correlationId: string;
+      /**
+       * @description Caller-asserted jurisdictions.
+       *
+       *     Recorded from `AnalyzerParams.scope.countries`.
+       */
+      countries?: components["schemas"]["CountryCode"][];
+      /**
+       * @description Caller-asserted languages for the analysis.
+       *
+       *     Recorded from `AnalyzerParams.scope.languages` at analyze
+       *     time; anonymize re-uses them verbatim.
+       * @default []
+       */
+      languages: components["schemas"]["Languages"];
+      /**
+       * @description Free-form request context: document tags, request purpose,
+       *     output audience. See elide's [`ScopeMetadata`].
+       */
+      metadata?: components["schemas"]["ScopeMetadata"];
+    };
     /** @description Response returned after successful authentication (login/signup). */
     AuthToken: {
       /** @description The JWT API token for authentication. */
@@ -7870,6 +7921,22 @@ interface components {
       /** @description Handle of the authenticated account. */
       username: components["schemas"]["Handle"];
     };
+    /**
+     * @description Path parameters for a public avatar route: the owner id and the avatar's
+     *     content-hash version.
+     *
+     *     Each version is a distinct stored object, so an unknown version simply does
+     *     not resolve — the version needs no separate validation.
+     */
+    AvatarPathParams: {
+      /**
+       * Format: uuid
+       * @description Opaque id of the avatar's owner.
+       */
+      id: string;
+      /** @description Content-hash version segment identifying the exact stored object. */
+      version: string;
+    };
     /**
      * @description Typed credentials for Azure Blob Storage.
      *
@@ -7916,6 +7983,32 @@ interface components {
       /** @description Minimum corner (top-left, conventionally). */
       min: components["schemas"]["Point"];
     };
+    /**
+     * @description Text a [`TextRedaction::Clamp`] emits for out-of-range values.
+     *
+     *     Three forms, deserialized untagged so callers can pick the
+     *     terser one for the case at hand:
+     *
+     *     - **Plain string** (`"90 or older"`) — English-only shorthand.
+     *     - **Localized map** (`{"en": "90 or older", "fr": "90 ou plus"}`)
+     *       — one entry per language the deployment ships; missing
+     *       locales fall back to English at render time.
+     *     - **Format template** (`{"format": "{n} or older"}`) — the
+     *       engine substitutes `{n}` for the threshold, so a ceiling of
+     *       `90` renders `"90 or older"` without the caller repeating the
+     *       number. Same rendering in every language.
+     *
+     *     Round-trips through serde as whichever form the caller wrote.
+     */
+    ClampBucket: string | {
+      /**
+       * @description The template string. `{n}` is substituted; other text
+       *     is literal.
+       */
+      format: string;
+    } | {
+      [key: string]: string;
+    };
     /**
      * @description Color as 8-bit RGB.
      *
@@ -8269,20 +8362,33 @@ interface components {
     /**
      * @description Request payload for creating a new workspace policy.
      *
-     *     The `definition` is a structured policy the redaction engine consumes;
-     *     its `name` and `description` drive the stored columns unless overridden
-     *     here.
+     *     The body comes from a template or an inline definition (see [`PolicyBody`]).
+     *     The body's `name` and `description` drive the stored columns unless
+     *     overridden here.
      */
     CreatePolicy: {
-      /** @description The structured policy body consumed by the engine. */
-      definition: components["schemas"]["PolicyDefinition"];
       /** @description Optional description override. Defaults to the policy's own description. */
       description?: string;
       /** @description Optional display name override. Defaults to the policy's own name. */
       displayName?: string;
       /** @description URL slug, unique within the workspace and immutable after creation. */
       slug: components["schemas"]["Handle"];
-    };
+    } & ({
+      /** @constant */
+      source: "template";
+      /** @description The built-in policy template to seed from. */
+      template: components["schemas"]["PolicyTemplate"];
+    } | {
+      /**
+       * @description The structured policy body.
+       *
+       *     Boxed to keep the enum small: an inline body is much larger than a
+       *     template id, and most requests use a template.
+       */
+      definition: components["schemas"]["PolicyDefinition"];
+      /** @constant */
+      source: "inline";
+    });
     /** @description Request payload for creating a new workspace webhook. */
     CreateWebhook: {
       /** @description Detailed description of the webhook's purpose (max 500 characters). */
@@ -8489,6 +8595,24 @@ interface components {
        */
       validator?: string;
     };
+    /**
+     * @description The coarseness a [`GeneralizeDate`] reduces a date/timestamp to.
+     *
+     *     Every rendering is an ISO-8601 form, so the output is locale-independent
+     *     by construction — no localized month names or week markers to configure.
+     */
+    DateGranularity: "year" | "year_month" | "hour";
+    /**
+     * @description Which written date convention a [`GeneralizeDate`] accepts on *input*.
+     *
+     *     This governs only how the entity value is *parsed*; the output mirrors
+     *     each value's own convention (see [`GeneralizeDate::render`]). The choice
+     *     is explicit, never inferred from the entity's language: `03/04/1987` is
+     *     a real date under both conventions (March 4 vs. April 3), so a wrong
+     *     guess would silently emit a plausible-but-wrong month. The policy
+     *     author, who knows the corpus's convention, sets it.
+     */
+    DateStyle: "iso" | "us";
     /**
      * @description Pixel dimensions of an image or any 2-D canvas.
      *
@@ -8556,6 +8680,36 @@ interface components {
      *     mentions, not a global key.
      */
     EntityCoRef: string;
+    /**
+     * @description A modality-tagged group of recognised entities.
+     *
+     *     The unit [`Audit`] stores in `body` and in every `parts`
+     *     entry.
+     *
+     *     Tagged by `modality` (snake_case) so deserialization picks the
+     *     right variant and the entity vec inside is statically typed
+     *     per modality — apply-time we hand each variant back to elide
+     *     as a `Vec<Entity<M>>` for the appropriate `M`.
+     *
+     *     [`Audit`]: crate::Audit
+     */
+    EntityGroup: {
+      entities: components["schemas"]["TextEntityRecord"][];
+      /** @constant */
+      modality: "text";
+    } | {
+      entities: components["schemas"]["TabularEntityRecord"][];
+      /** @constant */
+      modality: "tabular";
+    } | {
+      entities: components["schemas"]["ImageEntityRecord"][];
+      /** @constant */
+      modality: "image";
+    } | {
+      entities: components["schemas"]["AudioEntityRecord"][];
+      /** @constant */
+      modality: "audio";
+    };
     /**
      * @description HTTP error response representation with security-conscious design.
      *
@@ -8690,14 +8844,6 @@ interface components {
     };
     /** @description Lowercase, dash-separated identifier used in URLs and as account handles. */
     Handle: string;
-    /**
-     * @description SHA-2 variant for the [`TextRedaction::Hash`] operator.
-     *
-     *     Wire mirror of elide's `Sha2Algorithm`; the runtime `From`
-     *     conversion is on the engine side so this crate stays free
-     *     of the elide-redaction dep.
-     */
-    HashAlgorithm: "sha256" | "sha512";
     /** @description Response body for `GET /health/`. */
     Health: {
       /** @description Per-component health checks. */
@@ -8810,12 +8956,17 @@ interface components {
       /** @description The elide entity, as recognition produced it. */
       entity: components["schemas"]["ImageEntity"];
       /**
-       * @description Reviewer-supplied override.
+       * @description Reviewer-supplied redaction override.
        *
-       *     `None` means "use the policy's decision"; `Some(action)`
-       *     overrides it for this specific entity at apply time.
+       *     `None` means "use the matching policy rule's decision";
+       *     `Some(...)` overrides that rule for this specific entity
+       *     at apply time. Reviewer overrides take precedence over
+       *     every policy rule and inherit the authority of the
+       *     [`Review::policy_id`] they name — the audit event's
+       *     attribution stamps that policy so the trail names the
+       *     authority under which the override fired.
        */
-      reviewerOverride?: components["schemas"]["ModalityRedactions"];
+      review?: components["schemas"]["Review"];
     };
     /**
      * @description One thing that happened to an entity, with its effect on confidence.
@@ -9200,76 +9351,163 @@ interface components {
      */
     InviteStatus: "pending" | "accepted" | "declined" | "canceled" | "expired" | "revoked";
     /**
-     * @description Kind of sensitive information: a name, an optional description, and
-     *     zero or more tags.
-     *
-     *     Names are conventionally `SCREAMING_SNAKE_CASE` (`"PHONE_NUMBER"`),
-     *     matching Presidio, but this is convention, not enforcement. The
-     *     taxonomy is open: a [`Label`] can be minted for any name a recognizer
-     *     or configuration needs.
+     * @description Kind of sensitive information: a stable [`id`], per-language
+     *     [`LabelLocale`]s, and zero or more tags.
      *
      *     # Identity
      *
-     *     Labels are identified by [`name`]; selectors match by name. Note that
-     *     derived equality is *structural*: two labels with the same name but
-     *     different descriptions or tags are not `==`. Code that wants
-     *     name-only equality should compare [`name`] explicitly.
+     *     Labels are identified by [`id`] — a stable lowercase `snake_case`
+     *     string (`"phone_number"`), never localized, and the catalog key that a
+     *     [`LabelRef`] resolves through. Selectors match by id. Derived equality
+     *     is *structural*: two labels with the same id but different
+     *     localizations or tags are not `==`; compare [`id`] for identity.
+     *
+     *     # Localization
+     *
+     *     The display name and description are localized per [`LanguageTag`].
+     *     English (`"en"`) is required at construction and is the fallback when a
+     *     requested locale is absent, so [`localization`] always returns some
+     *     text — NER and LLM read the analysis language's name and description to
+     *     prompt the model, keyed by the stable id.
+     *
+     *     # Tags
+     *
+     *     [`tags`] is a free-form list of short identifiers policy selectors can
+     *     match against. Built-in labels carry category tags (`personal_identity`,
+     *     `contact_info`, `financial`, …) plus cross-cutting tags where applicable
+     *     (`pii`, `phi`, `pci`). Custom labels can ship with zero tags.
+     *
+     *     [`id`]: Label::id
+     *     [`localization`]: Label::localization
+     *     [`tags`]: Label::tags
+     */
+    Label: {
+      id: string;
+      localizations: components["schemas"]["LocalizedText"];
+      tags: string[];
+    };
+    /**
+     * @description One entry inside a [`TableRule`]: the label to match plus the
+     *     per-modality operators to run.
+     *
+     *     Kept as a named struct rather than a `(LabelRef, ModalityRedactions)`
+     *     tuple so the wire JSON reads `{"label": "email", "action": {…}}`
+     *     instead of a positional pair.
+     */
+    LabelEntry: {
+      /** @description Per-modality operators to run for matching entities. */
+      action: components["schemas"]["ModalityRedactions"];
+      /** @description Label the entry matches on. */
+      label: components["schemas"]["LabelRef"];
+    };
+    /**
+     * @description Named cluster of [`LabelRef`]s a policy's rules can reference
+     *     by name via [`Predicate::LabelInGroup`].
+     *
+     *     Groups live on the [`PolicyDefinition`] that declares them
+     *     and are visible only to that policy's own rules. Templates
+     *     ship one group per canonical label list (`"hipaa_18"`,
+     *     `"gdpr_article_9"`, `"pci_chd"`, `"pci_sad"`), and every
+     *     rule that targets that list references the group by name
+     *     instead of respelling the labels. When elide adds a new label
+     *     to a category, extending the group covers every rule that
+     *     referenced it — no rule edit.
+     *
+     *     **Compilation**: at request time the engine synthesises a
+     *     `group:<policy_id>:<name>` tag on every label listed in the
+     *     group, then rewrites [`Predicate::LabelInGroup { group }`]
+     *     into [`Predicate::TagOneOf { tags: ["group:<policy_id>:<name>"] }`].
+     *     That routes through the same `Anonymizer::with_tag` fast
+     *     path as any authored tag — no new engine machinery, no
+     *     per-request walk over group membership. Scoping the tag by
+     *     `policy_id` keeps two policies that both declare `hipaa_18`
+     *     with different labelsets from stepping on each other.
      *
-     *     # Tags
+     *     **Unknown group names error at request validation**, not at
+     *     apply time. A typo doesn't silently underfire.
      *
-     *     [`tags`] is a free-form list of short identifiers policy selectors
-     *     can match against. Built-in labels carry category tags
-     *     (`personal_identity`, `contact_info`, `financial`, …) plus
-     *     cross-cutting tags where applicable (`pii`, `phi`, `pci`). Custom
-     *     labels can ship with zero tags.
+     *     [`PolicyDefinition`]: super::PolicyDefinition
+     *     [`Predicate::LabelInGroup`]: super::predicate::Predicate::LabelInGroup
+     *     [`Predicate::LabelInGroup { group }`]: super::predicate::Predicate::LabelInGroup
+     *     [`Predicate::TagOneOf { tags: ["group:<policy_id>:<name>"] }`]: super::predicate::Predicate::TagOneOf
+     */
+    LabelGroup: {
+      /** @description Optional description for reviewers. */
+      description?: string;
+      /**
+       * @description Labels this group covers, by ref.
+       *
+       *     A label that doesn't appear in the request's compiled
+       *     [`LabelCatalog`] is silently skipped at tag-synthesis time
+       *     — a group can safely list labels the current build
+       *     doesn't emit (e.g. modality-gated ones); rules keyed off
+       *     the group still fire on whatever labels *are* present.
+       *
+       *     [`LabelCatalog`]: elide_core::entity::LabelCatalog
+       */
+      labels: components["schemas"]["LabelRef"][];
+      /**
+       * @description Stable name a [`Predicate::LabelInGroup`] references.
+       *
+       *     Free-form; a policy layer picks the vocabulary. Recommend
+       *     snake_case identifiers (`hipaa_18`, `gdpr_article_9`) —
+       *     they compile to `group:hipaa_18` tags on the catalog and
+       *     read cleanly in audit provenance.
+       *
+       *     [`Predicate::LabelInGroup`]: super::predicate::Predicate::LabelInGroup
+       */
+      name: string;
+    };
+    /**
+     * @description A label's human-facing text in one language: a display name and an
+     *     optional fuller description.
      *
-     *     [`name`]: Label::name
-     *     [`tags`]: Label::tags
+     *     The `name` is a short, natural-language phrase (`"phone number"`) — the
+     *     label a zero-shot NER model like GLiNER matches on, and the primary
+     *     text an LLM prompt shows. The `description` is optional extra guidance
+     *     for backends that consume it (GLiNER-2.0's bi-encoder, an LLM); leave
+     *     it `None` when the name alone is clear.
      */
-    Label: {
+    LabelLocale: {
+      /**
+       * @description Optional fuller description, for description-capable backends
+       *     (GLiNER-2.0, LLM). `None` when the name suffices.
+       */
       description?: string;
+      /**
+       * @description Short natural-language display name (e.g. `"phone number"`). What a
+       *     zero-shot NER model matches on and an LLM prompt surfaces.
+       */
       name: string;
-      tags: string[];
     };
     /**
-     * @description Registry of [`Label`]s, keyed by name.
+     * @description Lightweight reference to a [`Label`], carrying only its id.
      *
-     *     Holds the authoritative definitions (names + descriptions) for a run.
-     *     A [`LabelRef`] carried on a detection or entity is resolved back to
-     *     its full [`Label`] with [`get`].
+     *     This is what detections and entities hold: cloning is cheap (short
+     *     ids inline into the [`HipStr`]), and the full [`Label`], with its
+     *     localized names and descriptions, is resolved on demand from a
+     *     [`LabelCatalog`].
      *
-     *     [`get`]: LabelCatalog::get
+     *     [`Label`]: crate::entity::Label
+     *     [`LabelCatalog`]: crate::entity::LabelCatalog
      */
-    LabelCatalog: {
-      [key: string]: components["schemas"]["Label"];
-    };
+    LabelRef: string;
     /**
-     * @description Per-request label-catalog selection.
+     * @description Per-policy label-catalog selection.
      *
      *     Picks builtins by name + adds inline custom schemas.
      */
-    LabelCatalogParams: {
+    Labels: {
       /**
        * @description Builtin label names to enable.
        *
        *     E.g. `"email_address"`, `"phone_number"`. Unknown names
        *     log a warning and are skipped.
        */
-      builtins?: string[];
+      builtins?: components["schemas"]["LabelRef"][];
       /** @description Custom labels defined inline by the caller. */
       custom?: components["schemas"]["Label"][];
     };
-    /**
-     * @description Lightweight reference to a [`Label`], carrying only its name.
-     *
-     *     This is what detections and entities hold: cloning is cheap (short
-     *     names inline into the [`HipStr`]), and the full [`Label`], with its
-     *     description, is resolved on demand from a [`LabelCatalog`].
-     *
-     *     [`Label`]: crate::entity::Label
-     *     [`LabelCatalog`]: crate::entity::LabelCatalog
-     */
-    LabelRef: string;
     /**
      * @description Single language detection result.
      *
@@ -9389,6 +9627,28 @@ interface components {
       /** @description Sort by field. */
       sortBy?: components["schemas"]["MemberSortField"];
     };
+    /**
+     * @description A value localized per [`LanguageTag`], with an English-first fallback.
+     *
+     *     The reusable mechanism behind any text that varies by language: a
+     *     [`Label`]'s display name and description, a redaction operator's bucket
+     *     label, and so on. English (`"en"`) is the conventional anchor —
+     *     constructors seed it, and [`resolve`] falls back to it (then to any
+     *     entry) when a requested locale is absent, so a caller that supplied
+     *     English always gets *some* value.
+     *
+     *     Generic over the stored value `T`, so it carries a bare `HipStr`
+     *     (a bucket label) or a richer struct (a label's name-plus-description)
+     *     equally. It is a thin wrapper over a `HashMap<LanguageTag, T>`; the
+     *     added value is the fallback policy in [`resolve`], kept in one place
+     *     rather than reimplemented at each use site.
+     *
+     *     [`Label`]: crate::entity::Label
+     *     [`resolve`]: LocalizedText::resolve
+     */
+    LocalizedText: {
+      [key: string]: components["schemas"]["LabelLocale"];
+    };
     /** @description Request payload for login. */
     Login: {
       /** @description Email address or username of the account. */
@@ -9677,16 +9937,19 @@ interface components {
     /**
      * @description A pipeline's detection + governance intent.
      *
-     *     Holds what a pipeline author decides — which recognizers to run, the entity
-     *     labels, the default scope, and the policies to apply. Infrastructure config
-     *     (enrichment backends, deduplication calibration) is server-wide and lives in
-     *     the engine config, not here. Stored as JSON in the pipeline's `definition`
-     *     column but validated against this schema at the API boundary.
+     *     Holds what a pipeline author decides — which recognizers to run, the default
+     *     scope, and the policies to apply. Infrastructure config (enrichment backends,
+     *     deduplication calibration) is server-wide and lives in the engine config, not
+     *     here. Stored as JSON in the pipeline's `definition` column but validated
+     *     against this schema at the API boundary.
+     *
+     *     The label catalog is not part of this: the policies own the label vocabulary,
+     *     and the engine derives the detection catalog from them at run time.
      *
      *     The split:
      *
-     *     - `recognizers` / `deduplication` / `label_catalog` — the detection intent,
-     *       merged with the server-wide engine defaults into an `AnalyzerParams`.
+     *     - `recognizers` / `deduplication` — the detection intent, merged with the
+     *       server-wide engine defaults into an `AnalyzerParams`.
      *     - `default_scope` — optional pipeline-wide scope a document may override.
      *     - `policy_slugs` — references to the workspace's policies, resolved at run
      *       time.
@@ -9704,14 +9967,6 @@ interface components {
        *     the document must assert its own.
        */
       defaultScope?: components["schemas"]["ScopeParams"];
-      /**
-       * @description Entity-label catalog: which entity types the recognizers emit.
-       *
-       *     Reusable across the pipeline's documents, so it lives here rather than in
-       *     per-document scope.
-       * @default {}
-       */
-      labelCatalog: components["schemas"]["LabelCatalogParams"];
       /**
        * @description Slugs of workspace policies applied at redaction.
        *
@@ -9924,27 +10179,40 @@ interface components {
        *     fallback per policy" at the type level.
        */
       fallback?: components["schemas"]["ModalityRedactions"];
+      /**
+       * @description Named clusters of [`LabelRef`]s this policy's rules may
+       *     reference by name via [`Predicate::LabelInGroup`]. Scoped
+       *     to this policy — a rule can only name a group its own
+       *     policy declared; unknown references error at request
+       *     validation. Two policies that both declare `hipaa_18` with
+       *     different labelsets stay independent.
+       *
+       *     [`LabelRef`]: elide_core::entity::LabelRef
+       *     [`Predicate::LabelInGroup`]: predicate::Predicate::LabelInGroup
+       */
+      groups?: components["schemas"]["LabelGroup"][];
       /**
        * Format: uuid
        * @description Stable identifier. UUIDv7 recommended (time-ordered);
        *     customer-supplied so re-submissions carry the same id.
        *     Engine stamps this into the redaction event's
-       *     [`Attribution::policy_id`] so reviewers can find this
-       *     policy from any redaction it drove.
+       *     [`Attribution::name`] so reviewers can find this policy
+       *     from any redaction it drove.
        *
-       *     [`Attribution::policy_id`]: elide_core::entity::provenance::Attribution::policy_id
+       *     [`Attribution::name`]: elide_core::entity::provenance::Attribution::name
        */
       id: string;
       /**
-       * @description Vocabulary the policy operates over. Engine unions every
-       *     submitted policy's `labels` into a per-request
+       * @description Vocabulary the policy operates over: builtins picked by
+       *     name plus caller-authored custom label schemas. Engine
+       *     unions every submitted policy's `labels` into a per-request
        *     [`LabelCatalog`] used to drive recognizer dispatch and
        *     tag-based [`Predicate::TagOneOf`] matching.
        *
        *     [`LabelCatalog`]: elide_core::entity::LabelCatalog
        *     [`Predicate::TagOneOf`]: predicate::Predicate::TagOneOf
        */
-      labels?: components["schemas"]["Label"][];
+      labels?: components["schemas"]["Labels"];
       /** @description Human-readable name. Display-only. Does not key anything. */
       name: string;
       /** @description Lifecycle rules for content under this policy. */
@@ -9971,41 +10239,16 @@ interface components {
       policySlug: string;
     };
     /**
-     * @description One rule inside a [`PolicyDefinition`]. Identity is the UUID; `name` /
-     *     `description` are display-only.
+     * @description One rule inside a [`PolicyDefinition`]. Identity is the UUID;
+     *     `name` / `description` are display-only.
+     *
+     *     Untagged on the wire: distinguished by the presence of
+     *     `predicate` (predicated) vs. `operators` (table). Existing
+     *     JSON keeps working.
      *
      *     [`PolicyDefinition`]: super::PolicyDefinition
      */
-    PolicyRule: {
-      /**
-       * @description Per-modality redaction operators applied when the
-       *     predicate matches. Modalities the rule doesn't cover fall
-       *     through to the policy fallback (or the next policy in the
-       *     chain).
-       */
-      action: components["schemas"]["ModalityRedactions"];
-      /** @description Optional description for reviewers. */
-      description?: string;
-      /**
-       * Format: uuid
-       * @description Stable identifier. UUIDv7 recommended (time-ordered);
-       *     customer-supplied so re-submissions carry the same id.
-       *     Engine stamps this into the redaction event's
-       *     [`Attribution::reason`] so reviewers can trace back which
-       *     rule fired.
-       *
-       *     [`Attribution::reason`]: elide_core::entity::provenance::Attribution::reason
-       */
-      id: string;
-      /** @description Human-readable name. Display-only. Does not key anything. */
-      name: string;
-      /**
-       * @description Entity-level predicate that decides whether the rule fires
-       *     on a given recognised entity. Composable; see
-       *     [`Predicate`] for the full grammar.
-       */
-      predicate: components["schemas"]["Predicate"];
-    };
+    PolicyRule: components["schemas"]["PredicatedRule"] | components["schemas"]["TableRule"];
     /**
      * @description Lightweight policy view for lists.
      *
@@ -10053,6 +10296,17 @@ interface components {
        */
       total?: number;
     };
+    /**
+     * @description A regulatory posture this crate ships a [`Template`] for.
+     *
+     *     Serialises as a snake_case string matching the produced
+     *     template's [`Template::id`] (`"hipaa_safe_harbor"`,
+     *     `"gdpr_article_9"`, ...) so a wire caller can round-trip
+     *     `template: "hipaa_safe_harbor"` through JSON directly into
+     *     a variant. Iterate every variant via `PolicyTemplate::iter()`
+     *     (from [`strum::IntoEnumIterator`]).
+     */
+    PolicyTemplate: "hipaa_safe_harbor" | "gdpr_article9" | "pci_dss_pan_truncate" | "pci_dss_pan_hmac" | "ccpa";
     /**
      * @description Closed polygon, given by its ordered vertices.
      *
@@ -10078,12 +10332,21 @@ interface components {
       /** @constant */
       kind: "labelOneOf";
       /** @description Allowed labels. */
-      labels: string[];
+      labels: components["schemas"]["LabelRef"][];
     } | {
       /** @constant */
       kind: "tagOneOf";
       /** @description Allowed tags. */
       tags: string[];
+    } | {
+      /**
+       * @description Name of the [`LabelGroup`] to match against.
+       *
+       *     [`LabelGroup`]: super::LabelGroup
+       */
+      group: string;
+      /** @constant */
+      kind: "labelInGroup";
     } | {
       /** @description Cluster id to match. */
       coref: string;
@@ -10105,6 +10368,31 @@ interface components {
       /** @description Negated predicate. */
       not: components["schemas"]["Predicate"];
     };
+    /** @description Predicate-gated rule: one predicate, one action. */
+    PredicatedRule: {
+      /**
+       * @description Per-modality redaction operators applied when the
+       *     predicate matches. Modalities the rule doesn't cover fall
+       *     through to the policy fallback (or the next policy in the
+       *     chain).
+       */
+      action: components["schemas"]["ModalityRedactions"];
+      /** @description Optional description for reviewers. */
+      description?: string;
+      /**
+       * Format: uuid
+       * @description Stable identifier. UUIDv7 recommended.
+       */
+      id: string;
+      /** @description Human-readable name. Display-only. */
+      name: string;
+      /**
+       * @description Entity-level predicate that decides whether the rule fires
+       *     on a given recognised entity. Composable; see
+       *     [`Predicate`] for the full grammar.
+       */
+      predicate: components["schemas"]["Predicate"];
+    };
     /**
      * @description How to pick recognizers out of a deployment-configured lineup.
      *
@@ -10143,38 +10431,6 @@ interface components {
       /** Format: uint */
       start: number;
     };
-    /**
-     * @description A modality-tagged group of recognized entities.
-     *
-     *     The unit [`AnalyzedDocument`] stores in `body` and in every
-     *     `parts` entry.
-     *
-     *     Tagged by `modality` (snake_case) so deserialization picks the
-     *     right variant and the entity vec inside is statically typed
-     *     per modality — apply-time we hand each variant back to elide
-     *     as a `Vec<Entity<M>>` for the appropriate `M`.
-     */
-    RecognizedGroup: {
-      /** @description Recognized entities, in source-coordinate order. */
-      entities: components["schemas"]["TextEntityRecord"][];
-      /** @constant */
-      modality: "text";
-    } | {
-      /** @description Recognized entities, in source-coordinate order. */
-      entities: components["schemas"]["TabularEntityRecord"][];
-      /** @constant */
-      modality: "tabular";
-    } | {
-      /** @description Recognized entities, in source-coordinate order. */
-      entities: components["schemas"]["ImageEntityRecord"][];
-      /** @constant */
-      modality: "image";
-    } | {
-      /** @description Recognized entities, in source-coordinate order. */
-      entities: components["schemas"]["AudioEntityRecord"][];
-      /** @constant */
-      modality: "audio";
-    };
     /**
      * @description Recognizer slots an analyzer can fill.
      *
@@ -10248,6 +10504,38 @@ interface components {
     };
     /** @description What class of data a retention policy applies to. */
     RetentionScope: "original_content" | "redacted_output" | "audit_logs";
+    /**
+     * @description A reviewer-supplied redaction override with the policy
+     *     authority it draws from.
+     *
+     *     The `policy_id` isn't just for audit — it also picks which
+     *     per-policy pseudonym vault and per-policy [`KeyProvider`] the
+     *     override's operator resolves against, so an override using
+     *     [`Pseudonymize`] or [`HmacHash`] stays consistent with the
+     *     authoring policy's other rules.
+     *
+     *     [`KeyProvider`]: elide::redaction::operators::KeyProvider
+     *     [`Pseudonymize`]: elide::redaction::operators::Pseudonymize
+     *     [`HmacHash`]: elide::redaction::operators::HmacHash
+     */
+    Review: {
+      /**
+       * @description The per-modality redaction operators to run for this
+       *     entity. Overrides whatever the policy set would have
+       *     picked for the same entity.
+       */
+      action: components["schemas"]["ModalityRedactions"];
+      /**
+       * Format: uuid
+       * @description The policy whose authority the reviewer exercises. Must
+       *     match the `id` of a [`PolicyDefinition`] submitted with
+       *     the anonymize request. The audit event stamps this UUID
+       *     as the attribution `name`.
+       *
+       *     [`PolicyDefinition`]: nvisy_schema::policy::PolicyDefinition
+       */
+      policyId: string;
+    };
     /**
      * @description A serializable summary of *which selection rule* bound an operator to an
      *     entity — the automatic "why" behind a redaction.
@@ -10315,7 +10603,7 @@ interface components {
      *     analyzer, which borrows it into a fresh [`RecognizerContext`] per
      *     payload. It holds only what the *caller* asserts about the analysis as a
      *     whole — languages, jurisdictions, document labels, the target catalog, a
-     *     correlation id — none of which depends on the medium, so one `Scope`
+     *     correlation id — none of which depends on the medium, so one [`Scope`]
      *     drives a text, image, or audio analysis alike.
      *
      *     Per-medium regions (caller-supplied inclusions and exclusions, which are
@@ -10325,40 +10613,42 @@ interface components {
      *
      *     [`RecognizerContext`]: super::RecognizerContext
      *     [`Annotations`]: super::annotation::Annotations
-     */
-    Scope: {
-      /**
-       * @description The entity types recognizers are asked to emit. A zero-shot NER
-       *     model requests exactly this set; an LLM prompt lists it as the
-       *     labels to find. Empty means "the recognizer's own default" — a
-       *     recognizer with its own configured label set keeps it; one without
-       *     emits whatever its backend natively produces.
-       * @default {}
-       */
-      catalog: components["schemas"]["LabelCatalog"];
-      /**
-       * Format: uuid
-       * @description Correlation UUID propagated through the tracing span for this
-       *     analysis.
-       * @default null
-       */
-      correlation_id: string;
-      /**
-       * @description Caller-asserted jurisdictions. When non-empty, recognizers that
-       *     carry per-rule country scopes skip rules that match none of them.
-       *     An empty list means "any": rules that declare countries still run
-       *     as a permissive fallback so callers who don't assert a jurisdiction
-       *     don't lose detections. A document spanning several jurisdictions
-       *     can assert all of them; a rule runs when any one matches.
+     *     Free-form, caller-asserted request context: the *document* it is about and
+     *     the *request* driving it.
+     *
+     *     Three axes of opaque classification strings elide neither ships nor
+     *     interprets — a downstream policy layer chooses what `"medical"` or
+     *     `"fraud_detection"` or `"auditor"` mean. They are read in two places: a
+     *     recognizer may bias its detection on them (the LLM prompt lists them so the
+     *     model attends to the right terms), and a scope-aware operator predicate may
+     *     branch on them at selection time (redact the same document differently per
+     *     [`audience`]).
+     *
+     *     - [`tags`] classify the *document* (`"medical"`, `"gdpr-request"`).
+     *     - [`purpose`] is why the request exists (`"fraud_detection"`).
+     *     - [`audience`] is who the redacted output is for (`"support_agent"`,
+     *       `"auditor"`) — the axis PCI-style "same document, two masks" branches on.
+     *
+     *     [`tags`]: Self::tags
+     *     [`purpose`]: Self::purpose
+     *     [`audience`]: Self::audience
+     */
+    ScopeMetadata: {
+      /**
+       * @description Who the redacted output is for (e.g. `"support_agent"`, `"auditor"`).
+       *     The axis a per-audience redaction branches on: one detected document,
+       *     selected differently per audience. May hold several.
        * @default []
        */
-      countries: components["schemas"]["CountryCode"][];
+      audience: string[];
       /**
-       * @description Caller-asserted languages for the analysis. Empty means the caller
-       *     asserted none, leaving detection (if an enricher runs) to fill in.
-       * @default []
+       * @description The caller-asserted business purpose driving this request (e.g.
+       *     `"fraud_detection"`, `"gdpr_erasure_request"`). A scope-aware operator
+       *     predicate may skip or swap a rule based on it; a recognizer may bias
+       *     detection on it. `None` when the caller asserts no purpose.
+       * @default null
        */
-      languages: components["schemas"]["Languages"];
+      purpose: string;
       /**
        * @description Document-level classification tags (e.g. `"medical"`,
        *     `"gdpr-request"`). Recognizers may use these to bias their behavior
@@ -10366,9 +10656,9 @@ interface components {
        *
        *     Named `tags`, not `labels`, to keep "label" reserved for the entity
        *     taxonomy ([`LabelRef`]/[`LabelCatalog`]): these classify the
-       *     *document*, whereas [`catalog`] names the entity *types* to emit.
+       *     *document*, whereas the scope's catalog names the entity *types* to
+       *     emit.
        *
-       *     [`catalog`]: Self::catalog
        *     [`LabelRef`]: crate::entity::LabelRef
        *     [`LabelCatalog`]: crate::entity::LabelCatalog
        * @default []
@@ -10378,10 +10668,12 @@ interface components {
     /**
      * @description Caller-asserted scope for one request.
      *
-     *     Mirrors the wire-visible knobs of `elide::recognition::Scope`.
-     *     The engine assembles this plus a server-minted
-     *     `correlation_id` into the orchestrator's `Scope` at compile
-     *     time.
+     *     A narrower wire projection of `elide::recognition::Scope`:
+     *     `languages` and `countries` (typed, elide-native), plus
+     *     elide's [`ScopeMetadata`] block for free-form classification
+     *     strings (`tags`, `purpose`, `audience`). The engine assembles
+     *     this plus a server-minted `correlation_id` and a policy-derived
+     *     label catalog into the orchestrator's `Scope` at compile time.
      */
     ScopeParams: {
       /**
@@ -10394,17 +10686,6 @@ interface components {
        *     jurisdiction don't lose detections.
        */
       countries?: components["schemas"]["CountryCode"][];
-      /**
-       * @description Per-request entity-label catalog.
-       *
-       *     Builtins selected by name + custom inline schemas. Drives
-       *     what recognizers are asked to emit and tag-based selector
-       *     matching in the anonymizer. Engine resolves this into the
-       *     assembled `elide::recognition::Scope`'s `catalog` field at
-       *     compile time.
-       * @default {}
-       */
-      labelCatalog: components["schemas"]["LabelCatalogParams"];
       /**
        * @description Caller-asserted languages for the analysis.
        *
@@ -10414,20 +10695,22 @@ interface components {
        */
       languages: components["schemas"]["Languages"];
       /**
-       * @description Document-level classification tags.
-       *
-       *     E.g. `"medical"`, `"gdpr-request"`. Recognizers may use
-       *     these to bias their behaviour for domain-specific terms;
-       *     those that don't ignore the field.
-       *
-       *     Distinct from [`label_catalog`]: tags classify the
-       *     *document*, whereas the catalog names the entity *types*
-       *     to emit.
-       *
-       *     [`label_catalog`]: ScopeParams::label_catalog
+       * @description Free-form request context: document tags, request purpose,
+       *     output audience. See elide's [`ScopeMetadata`].
        */
-      tags?: string[];
+      metadata?: components["schemas"]["ScopeMetadata"];
     };
+    /**
+     * @description Which SHA-2 variant a hashing operator uses.
+     *
+     *     Shared by [`Sha2Hash`] (unkeyed digest) and [`HmacHash`] (keyed HMAC):
+     *     both pick the same underlying width, so the choice lives in one enum
+     *     rather than one per operator.
+     *
+     *     [`Sha2Hash`]: super::Sha2Hash
+     *     [`HmacHash`]: super::HmacHash
+     */
+    Sha2Algorithm: "sha256" | "sha512";
     /** @description Request payload for signup. */
     Signup: {
       /** @description Optional display name of the account. */
@@ -10504,6 +10787,42 @@ interface components {
      *     to track whether a run was manually triggered, scheduled, or triggered by a webhook.
      */
     SyncTriggerType: "manual" | "scheduled" | "webhook";
+    /**
+     * @description Per-label table rule: N labels, N actions, one shared identity.
+     *
+     *     Each entry compiles to an elide `Rule::label` attachment under
+     *     this rule's shared UUID / name / description — so the audit
+     *     trail records "rule X fired" without exposing the fan-out to
+     *     the reviewer. Meant for templates where a single policy intent
+     *     (e.g. "HIPAA Safe Harbor identifiers") routes different labels
+     *     to different operators.
+     */
+    TableRule: {
+      /** @description Optional description for reviewers. */
+      description?: string;
+      /**
+       * Format: uuid
+       * @description Stable identifier — shared by every entry the table
+       *     expands into. UUIDv7 recommended.
+       */
+      id: string;
+      /** @description Human-readable name. Display-only. */
+      name: string;
+      /**
+       * @description Per-label operator dispatch. Every entity whose label
+       *     matches a listed [`LabelRef`] attaches the paired
+       *     [`ModalityRedactions`]. Labels absent from the list are not
+       *     affected by this rule and fall through to the next rule or
+       *     the policy fallback.
+       *
+       *     A [`Vec`] rather than a map keeps the author-supplied
+       *     order — elide's anonymizer is first-match-wins, so wire
+       *     order determines which entry fires when two match the
+       *     same entity. Duplicate labels are the caller's bug; the
+       *     engine attaches every entry, and the first one wins.
+       */
+      operators: components["schemas"]["LabelEntry"][];
+    };
     /**
      * @description Detected piece of sensitive information within some medium.
      *
@@ -10589,12 +10908,17 @@ interface components {
       /** @description The elide entity, as recognition produced it. */
       entity: components["schemas"]["TabularEntity"];
       /**
-       * @description Reviewer-supplied override.
+       * @description Reviewer-supplied redaction override.
        *
-       *     `None` means "use the policy's decision"; `Some(action)`
-       *     overrides it for this specific entity at apply time.
+       *     `None` means "use the matching policy rule's decision";
+       *     `Some(...)` overrides that rule for this specific entity
+       *     at apply time. Reviewer overrides take precedence over
+       *     every policy rule and inherit the authority of the
+       *     [`Review::policy_id`] they name — the audit event's
+       *     attribution stamps that policy so the trail names the
+       *     authority under which the override fired.
        */
-      reviewerOverride?: components["schemas"]["ModalityRedactions"];
+      review?: components["schemas"]["Review"];
     };
     /**
      * @description One thing that happened to an entity, with its effect on confidence.
@@ -10846,6 +11170,57 @@ interface components {
       /** @constant */
       kind: "drop_column";
     };
+    /**
+     * @description Fallback operator that runs when a declinable primary
+     *     ([`TextRedaction::Clamp`], [`TextRedaction::GeneralizeDate`])
+     *     doesn't apply to the entity value.
+     *
+     *     The four operators that always apply and produce a deterministic
+     *     output without needing engine-side infrastructure (no key
+     *     provider, no vault). Enough to satisfy every regulatory
+     *     pattern I know: `Clamp/GeneralizeDate → Erase` (the safe
+     *     default), `→ Replace { template }` (an explicit placeholder),
+     *     or `→ Mask` / `→ Keep` on the rare occasion those fit.
+     *
+     *     Absent from the primary's spec, elide's baked-in default is
+     *     [`Erase`] — a bare [`TextRedaction::Clamp`] without a `fallback`
+     *     erases values that aren't numeric.
+     *
+     *     [`Erase`]: TerminalFallback::Erase
+     */
+    TerminalFallback: {
+      /** @constant */
+      kind: "erase";
+    } | {
+      /** @constant */
+      kind: "keep";
+    } | {
+      /** @constant */
+      kind: "replace";
+      /**
+       * @description Template string. Default `[{label}]`.
+       * @default [{label}]
+       */
+      template: string;
+    } | {
+      /**
+       * Format: uint
+       * @description Characters to leave unmasked at the start of the value.
+       */
+      keep_prefix?: number;
+      /**
+       * Format: uint
+       * @description Characters to leave unmasked at the end of the value.
+       */
+      keep_suffix?: number;
+      /** @constant */
+      kind: "mask";
+      /**
+       * @description The character that replaces masked positions.
+       * @default *
+       */
+      mask_char: string;
+    };
     /** @description Request payload for testing a webhook. */
     TestWebhook: {
       /**
@@ -10950,12 +11325,17 @@ interface components {
       /** @description The elide entity, as recognition produced it. */
       entity: components["schemas"]["TextEntity"];
       /**
-       * @description Reviewer-supplied override.
+       * @description Reviewer-supplied redaction override.
        *
-       *     `None` means "use the policy's decision"; `Some(action)`
-       *     overrides it for this specific entity at apply time.
+       *     `None` means "use the matching policy rule's decision";
+       *     `Some(...)` overrides that rule for this specific entity
+       *     at apply time. Reviewer overrides take precedence over
+       *     every policy rule and inherit the authority of the
+       *     [`Review::policy_id`] they name — the audit event's
+       *     attribution stamps that policy so the trail names the
+       *     authority under which the override fired.
        */
-      reviewerOverride?: components["schemas"]["ModalityRedactions"];
+      review?: components["schemas"]["Review"];
     };
     /**
      * @description One thing that happened to an entity, with its effect on confidence.
@@ -11207,7 +11587,7 @@ interface components {
        * @description SHA-256 (default) or SHA-512.
        * @default sha256
        */
-      algorithm: components["schemas"]["HashAlgorithm"];
+      algorithm: components["schemas"]["Sha2Algorithm"];
       /** @constant */
       kind: "hash";
       /** @description Salt prepended to the value before hashing. */
@@ -11243,6 +11623,75 @@ interface components {
     } | {
       /** @constant */
       kind: "encrypt";
+    } | {
+      /**
+       * @description HMAC-SHA-256 (default) or HMAC-SHA-512.
+       * @default sha256
+       */
+      algorithm: components["schemas"]["Sha2Algorithm"];
+      /** @constant */
+      kind: "hmac_hash";
+    } | {
+      /**
+       * Format: uint
+       * @description Characters to keep at the start of the value.
+       */
+      keep_prefix?: number;
+      /**
+       * Format: uint
+       * @description Characters to keep at the end of the value.
+       */
+      keep_suffix?: number;
+      /** @constant */
+      kind: "truncate";
+    } | {
+      /**
+       * Format: double
+       * @description Threshold at or above which values collapse to
+       *     `ceiling_bucket`. `None` disables the ceiling.
+       */
+      ceiling?: number;
+      /**
+       * @description Bucket label for values at or above `ceiling`. Required
+       *     when `ceiling` is set; ignored otherwise.
+       */
+      ceiling_bucket?: components["schemas"]["ClampBucket"];
+      /**
+       * @description Operator that runs when the entity value isn't a
+       *     finite number. `None` erases (elide's default).
+       */
+      fallback?: components["schemas"]["TerminalFallback"];
+      /**
+       * Format: double
+       * @description Threshold at or below which values collapse to
+       *     `floor_bucket`. `None` disables the floor.
+       */
+      floor?: number;
+      /**
+       * @description Bucket label for values at or below `floor`. Required
+       *     when `floor` is set; ignored otherwise.
+       */
+      floor_bucket?: components["schemas"]["ClampBucket"];
+      /** @constant */
+      kind: "clamp";
+    } | {
+      /**
+       * @description Operator that runs when the entity value isn't a
+       *     parseable date. `None` erases (elide's default).
+       */
+      fallback?: components["schemas"]["TerminalFallback"];
+      /**
+       * @description Coarseness of the output. Default `Year`.
+       * @default year
+       */
+      granularity: components["schemas"]["DateGranularity"];
+      /** @constant */
+      kind: "generalize_date";
+      /**
+       * @description Which input convention to accept. Default `Iso`.
+       * @default iso
+       */
+      style: components["schemas"]["DateStyle"];
     };
     /**
      * @description How the structural reconciler picks a winner across labels.
@@ -11571,7 +12020,7 @@ interface components {
      *     This enumeration corresponds to the `WEBHOOK_EVENT` PostgreSQL enum and is used
      *     to configure which events a webhook should receive notifications for.
      */
-    WebhookEvent: "file:created" | "file:updated" | "file:deleted" | "member:added" | "member:deleted" | "member:updated" | "connection:created" | "connection:updated" | "connection:deleted" | "connection:synced" | "connection:desynced";
+    WebhookEvent: "file:created" | "file:updated" | "file:deleted" | "member:added" | "member:deleted" | "member:updated" | "connection:created" | "connection:updated" | "connection:deleted" | "connection:sync.started" | "connection:sync.completed" | "connection:sync.failed" | "pipeline:created" | "pipeline:updated" | "pipeline:deleted" | "pipeline:run.started" | "pipeline:run.completed" | "pipeline:run.failed" | "policy:created" | "policy:updated" | "policy:deleted";
     /** @description Opaque whk identifier (whk_<uuid>). */
     WebhookId: string;
     /**
@@ -11832,6 +12281,34 @@ type PolicyDefinition = Schemas$3["PolicyDefinition"];
 type CreatePolicy = Schemas$3["CreatePolicy"];
 type UpdatePolicy = Schemas$3["UpdatePolicy"];
 type PolicyRule = Schemas$3["PolicyRule"];
+type PolicyTemplate = Schemas$3["PolicyTemplate"];
+type PredicatedRule = Schemas$3["PredicatedRule"];
+type TableRule = Schemas$3["TableRule"];
+type Predicate = Schemas$3["Predicate"];
+type DocumentPredicate = Schemas$3["DocumentPredicate"];
+type ModalityRedactions = Schemas$3["ModalityRedactions"];
+type TextRedaction = Schemas$3["TextRedaction"];
+type ImageRedaction = Schemas$3["ImageRedaction"];
+type AudioRedaction = Schemas$3["AudioRedaction"];
+type TabularRedaction = Schemas$3["TabularRedaction"];
+type RetentionPolicy = Schemas$3["RetentionPolicy"];
+type Retention = Schemas$3["Retention"];
+type RetentionScope = Schemas$3["RetentionScope"];
+type Labels = Schemas$3["Labels"];
+type LabelGroup = Schemas$3["LabelGroup"];
+type LabelEntry = Schemas$3["LabelEntry"];
+type LabelLocale = Schemas$3["LabelLocale"];
+type Label = Schemas$3["Label"];
+type LocalizedText = Schemas$3["LocalizedText"];
+type Color = Schemas$3["Color"];
+type Waveform = Schemas$3["Waveform"];
+type ClampBucket = Schemas$3["ClampBucket"];
+type ConfidenceThreshold = Schemas$3["ConfidenceThreshold"];
+type DateStyle = Schemas$3["DateStyle"];
+type DateGranularity = Schemas$3["DateGranularity"];
+type LanguageTag = Schemas$3["LanguageTag"];
+type Sha2Algorithm = Schemas$3["Sha2Algorithm"];
+type TerminalFallback = Schemas$3["TerminalFallback"];
 //#endregion
 //#region src/datatypes/run.d.ts
 type Schemas$2 = components["schemas"];
@@ -11839,7 +12316,7 @@ type PipelineRun = Schemas$2["PipelineRun"];
 type CreatePipelineRun = Schemas$2["CreatePipelineRun"];
 type PipelineRunStatus = Schemas$2["PipelineRunStatus"];
 type PipelineRunPage = Schemas$2["PipelineRunPage"];
-type AnalyzedDocument = Schemas$2["AnalyzedDocument"];
+type Audit = Schemas$2["Audit"];
 type Artifact = Schemas$2["Artifact"];
 //#endregion
 //#region src/datatypes/webhook.d.ts
@@ -11862,5 +12339,5 @@ type UpdateWorkspace = Schemas["UpdateWorkspace"];
 type WorkspaceRole = Schemas["WorkspaceRole"];
 type WorkspacePage = Schemas["WorkspacePage"];
 //#endregion
-export { InviteExpiration as $, UpdateAccount as $t, PipelineDefinition as A, S3Credentials as At, NotificationPage as B, ApiToken as Bt, PolicyDefinition as C, ConnectionPage as Ct, UpdatePolicy as D, ConnectionsQuery as Dt, PolicySummaryPage as E, ConnectionVerification as Et, PipelineTriggerType as F, SyncTriggerType as Ft, Member as G, TokenExpiration as Gt, UnreadStatus as H, ApiTokenType as Ht, UpdatePipeline as I, UpdateConnection as It, UpdateMember as J, ActivityPage as Jt, MemberPage as K, UpdateApiToken as Kt, CursorPagination as L, AuthToken as Lt, PipelineStatus as M, SyncDeletionPolicy as Mt, PipelineSummary as N, SyncMode as Nt, CreatePipeline as O, CreateConnection as Ot, PipelineSummaryPage as P, SyncStatus as Pt, InviteCode as Q, PublicAccount as Qt, Notification as R, Login as Rt, Policy as S, ConnectionConfig as St, PolicySummary as T, ConnectionSyncPage as Tt, UpdateNotificationSettings as U, ApiTokenWithJWT as Ut, NotificationSettings as V, ApiTokenPage as Vt, ListMembers as W, CreateApiToken as Wt, GenerateInviteCode as X, Account as Xt, CreateInvite as Y, ActivityType as Yt, Invite as Z, AccountRef as Zt, CreatePipelineRun as _, UpdateFile as _t, WorkspaceRole as a, ListInvites as at, PipelineRunStatus as b, AzureCredentials as bt, UpdateWebhook as c, ComponentHealth as ct, WebhookEvent as d, File as dt, paths as en, InvitePage as et, WebhookPage as f, FilePage as ft, Artifact as g, ModalityToken as gt, AnalyzedDocument as h, ListFiles as ht, WorkspacePage as i, InviteStatus as it, PipelineFilter as j, SyncConnection as jt, Pipeline as k, GcsCredentials as kt, Webhook as l, Health as lt, WebhookStatus as m, FormatToken as mt, UpdateWorkspace as n, InviteSent as nt, CreateWebhook as o, ReplyInvite as ot, WebhookResult as p, FileSource as pt, MemberSortField as q, Activity as qt, Workspace as r, InviteSortField as rt, TestWebhook as s, SortOrder as st, CreateWorkspace as t, InvitePreview as tt, WebhookCreated as u, HealthStatus as ut, PipelineRun as v, ErrorResponse as vt, PolicyRule as w, ConnectionSync as wt, CreatePolicy as x, Connection as xt, PipelineRunPage as y, ValidationErrorDetail as yt, NotificationEvent as z, Signup as zt };
-//# sourceMappingURL=index-DJSrXmm0.d.ts.map
+export { TextRedaction as $, ConnectionSyncPage as $t, Label as A, InviteSent as At, PolicyRule as B, FilePage as Bt, Color as C, ActivityType as Cn, CreateInvite as Ct, DateStyle as D, UpdateAccount as Dn, InviteExpiration as Dt, DateGranularity as E, PublicAccount as En, InviteCode as Et, LanguageTag as F, SortOrder as Ft, PredicatedRule as G, UpdateFile as Gt, PolicySummaryPage as H, FormatToken as Ht, LocalizedText as I, ComponentHealth as It, RetentionScope as J, AzureCredentials as Jt, Retention as K, ErrorResponse as Kt, ModalityRedactions as L, Health as Lt, LabelGroup as M, InviteStatus as Mt, LabelLocale as N, ListInvites as Nt, DocumentPredicate as O, paths as On, InvitePage as Ot, Labels as P, ReplyInvite as Pt, TerminalFallback as Q, ConnectionSync as Qt, Policy as R, HealthStatus as Rt, ClampBucket as S, ActivityPage as Sn, UpdateMember as St, CreatePolicy as T, AccountRef as Tn, Invite as Tt, PolicyTemplate as U, ListFiles as Ut, PolicySummary as V, FileSource as Vt, Predicate as W, ModalityToken as Wt, TableRule as X, ConnectionConfig as Xt, Sha2Algorithm as Y, Connection as Yt, TabularRedaction as Z, ConnectionPage as Zt, CreatePipelineRun as _, ApiTokenWithJWT as _n, UpdateNotificationSettings as _t, WorkspaceRole as a, SyncConnection as an, PipelineFilter as at, PipelineRunStatus as b, UpdateApiToken as bn, MemberPage as bt, UpdateWebhook as c, SyncStatus as cn, PipelineSummaryPage as ct, WebhookEvent as d, AuthToken as dn, CursorPagination as dt, ConnectionVerification as en, UpdatePolicy as et, WebhookPage as f, Login as fn, Notification as ft, Audit as g, ApiTokenType as gn, UnreadStatus as gt, Artifact as h, ApiTokenPage as hn, NotificationSettings as ht, WorkspacePage as i, S3Credentials as in, PipelineDefinition as it, LabelEntry as j, InviteSortField as jt, ImageRedaction as k, InvitePreview as kt, Webhook as l, SyncTriggerType as ln, PipelineTriggerType as lt, WebhookStatus as m, ApiToken as mn, NotificationPage as mt, UpdateWorkspace as n, CreateConnection as nn, CreatePipeline as nt, CreateWebhook as o, SyncDeletionPolicy as on, PipelineStatus as ot, WebhookResult as p, Signup as pn, NotificationEvent as pt, RetentionPolicy as q, ValidationErrorDetail as qt, Workspace as r, GcsCredentials as rn, Pipeline as rt, TestWebhook as s, SyncMode as sn, PipelineSummary as st, CreateWorkspace as t, ConnectionsQuery as tn, Waveform as tt, WebhookCreated as u, UpdateConnection as un, UpdatePipeline as ut, PipelineRun as v, CreateApiToken as vn, ListMembers as vt, ConfidenceThreshold as w, Account as wn, GenerateInviteCode as wt, AudioRedaction as x, Activity as xn, MemberSortField as xt, PipelineRunPage as y, TokenExpiration as yn, Member as yt, PolicyDefinition as z, File as zt };
+//# sourceMappingURL=index-DTr3_MW7.d.ts.map