@nvisy/sdk 0.13.0 → 0.15.0

package/dist/{index-HUG77R_t.d.ts → index-BCjrTe_H.d.ts}

@@ -3719,7 +3719,7 @@ interface paths {
         };
       };
       responses: {
-        /** @description A connection sync run (import or export). */
+        /** @description A connection sync (import or export). */
         202: {
           headers: {
             [name: string]: unknown;
@@ -3944,7 +3944,7 @@ interface paths {
       };
       requestBody?: never;
       responses: {
-        /** @description A connection sync run (import or export). */
+        /** @description A connection sync (import or export). */
         200: {
           headers: {
             [name: string]: unknown;
@@ -4037,7 +4037,7 @@ interface paths {
       };
       requestBody?: never;
       responses: {
-        /** @description A connection sync run (import or export). */
+        /** @description A connection sync (import or export). */
         200: {
           headers: {
             [name: string]: unknown;
@@ -6134,30 +6134,27 @@ interface paths {
         /**
          * @description What detection found in one document.
          *
-         *     The body group plus per-container-part groups (each tagged
-         *     by modality) plus a snapshot of the recognition [`Scope`] the
-         *     entities were scored against.
+         *     The body group plus per-container-part groups (each tagged by
+         *     modality) plus the recognition [`AuditContext`] the entities
+         *     were scored against.
          *
-         *     The scope snapshot travels with the entities so anonymize
-         *     can rebuild an orchestrator against exactly the vocabulary
-         *     analyze used. Anything a policy predicate compares against
-         *     (label catalog, document-level classification labels,
-         *     asserted languages / jurisdictions) is here.
+         *     The context travels with the entities so anonymize can rebuild
+         *     an orchestrator against exactly the vocabulary analyze used.
+         *     Anything a policy predicate compares against beyond the label
+         *     catalog (asserted languages, jurisdictions, document tags) is
+         *     here; labels are re-derived from the policy set on each
+         *     anonymize call.
          *
-         *     `correlation_id` on the persisted scope is always `None`; the
-         *     anonymize call supplies a fresh id from the passed
-         *     [`Document`] so anonymize-side tracing spans are distinct
-         *     from the analyze-side ones.
-         *
-         *     [`Document`]: nvisy_schema::file::Document
-         *     [`Scope`]: elide::recognition::Scope
+         *     No [`Default`] — a well-formed audit must carry a real
+         *     [`AuditContext`] with a real correlation id. Callers building
+         *     an audit outside the analyze path construct it explicitly.
          */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["AnalyzedDocument"];
+            "application/json": components["schemas"]["Audit"];
           };
         };
         /**
@@ -6435,9 +6432,9 @@ interface paths {
       /**
        * @description Request payload for creating a new workspace policy.
        *
-       *     The `definition` is a structured policy the redaction engine consumes;
-       *     its `name` and `description` drive the stored columns unless overridden
-       *     here.
+       *     The body comes from a template or an inline definition (see [`PolicyBody`]).
+       *     The body's `name` and `description` drive the stored columns unless
+       *     overridden here.
        */
       requestBody: {
         content: {
@@ -7303,64 +7300,10 @@ interface components {
      *     audit trail and activity tracking.
      */
     ActivityType: "workspace:created" | "workspace:updated" | "workspace:deleted" | "workspace:exported" | "workspace:imported" | "member:deleted" | "member:updated" | "invite:created" | "invite:accepted" | "invite:declined" | "invite:canceled" | "connection:created" | "connection:updated" | "connection:deleted" | "connection:synced" | "webhook:created" | "webhook:updated" | "webhook:deleted" | "webhook:triggered" | "file:created" | "file:updated" | "file:deleted" | "file:verified" | "custom";
-    /**
-     * @description What detection found in one document.
-     *
-     *     The body group plus per-container-part groups (each tagged
-     *     by modality) plus a snapshot of the recognition [`Scope`] the
-     *     entities were scored against.
-     *
-     *     The scope snapshot travels with the entities so anonymize
-     *     can rebuild an orchestrator against exactly the vocabulary
-     *     analyze used. Anything a policy predicate compares against
-     *     (label catalog, document-level classification labels,
-     *     asserted languages / jurisdictions) is here.
-     *
-     *     `correlation_id` on the persisted scope is always `None`; the
-     *     anonymize call supplies a fresh id from the passed
-     *     [`Document`] so anonymize-side tracing spans are distinct
-     *     from the analyze-side ones.
-     *
-     *     [`Document`]: nvisy_schema::file::Document
-     *     [`Scope`]: elide::recognition::Scope
-     */
-    AnalyzedDocument: {
-      /**
-       * @description The body group.
-       *
-       *     `None` when no body pipeline produced entities (pre-analyze,
-       *     or the codec resolved the doc to a modality with no
-       *     pipeline).
-       */
-      body?: components["schemas"]["RecognizedGroup"];
-      /**
-       * @description One entry per container part the orchestrator surfaced.
-       *
-       *     Keyed by the container-private part id (e.g. a DOCX zip
-       *     entry name like `"word/media/image1.png"`); each value
-       *     carries that part's modality + entities.
-       */
-      parts?: {
-        [key: string]: components["schemas"]["RecognizedGroup"];
-      };
-      /**
-       * @description Recognition scope snapshot.
-       *
-       *     The resolved label catalog + asserted languages,
-       *     countries, and document labels. Held so
-       *     [`Engine::anonymize_document`] can compile against the same
-       *     vocabulary analyze used without the caller re-passing an
-       *     `AnalyzerParams`.
-       *
-       *     Required on the wire. A missing scope on an incoming
-       *     [`AnalyzedDocument`] would default to an empty catalog and
-       *     silently underfire every `TagOneOf` policy predicate;
-       *     rejecting at deserialize time surfaces the shape mismatch
-       *     at load, not at apply.
-       *
-       *     [`Engine::anonymize_document`]: super::Engine::anonymize_document
-       */
-      scope: components["schemas"]["Scope"];
+    /** @description Anthropic API credentials. */
+    AnthropicCredentials: {
+      /** @description Anthropic API key. */
+      apiKey: string;
     };
     /** @description API token response structure. */
     ApiToken: {
@@ -7480,23 +7423,29 @@ interface components {
      */
     ArtifactType: "input" | "output" | "intermediate";
     /**
-     * @description Author-supplied rationale for a redaction: the policy it enforces and
-     *     a reason.
+     * @description Author-supplied rationale for a redaction: a policy name and an optional
+     *     description.
      *
      *     Where the matched selection rule answers *which rule fired*, an
      *     `Attribution` answers *under what authority* — a compliance clause, an
      *     internal policy, a data-handling rule. A policy author attaches it to a
-     *     selection rule (the anonymizer's `because`); the anonymizer records it on
-     *     the entity's [`Redaction`] event so an audit can trace a change back to
-     *     the policy that demanded it.
+     *     selection rule (`Rule::because` in `elide-redaction`); the anonymizer
+     *     records it on the entity's [`Redaction`] event so an audit can trace a
+     *     change back to the policy that demanded it.
+     *
+     *     The `name` is the author's label for that policy (`"gdpr-art-17"`,
+     *     `"hipaa-safe-harbor"`, `"PII removal"`); an optional `description` adds
+     *     human context. Any stable machine identity a policy layer needs (a rule
+     *     UUID, a jurisdiction) is that layer's concern — it can encode it in the
+     *     name or carry it separately.
      *
      *     [`Redaction`]: crate::entity::provenance::EventKind::Redaction
      */
     Attribution: {
-      /** @description Stable policy / rule identifier (e.g. `"gdpr-art-17"`, `"pci-dss-3.4"`). */
-      policy_id: string;
-      /** @description Human-readable reason (e.g. `"right to erasure"`), when given. */
-      reason?: string;
+      /** @description Human-readable description (e.g. `"right to erasure"`), when given. */
+      description?: string;
+      /** @description The policy's name (e.g. `"gdpr-art-17"`, `"hipaa-safe-harbor"`). */
+      name: string;
     };
     /**
      * @description Per-call payload a recognizer inspects for the [`Audio`] modality.
@@ -7601,12 +7550,17 @@ interface components {
       /** @description The elide entity, as recognition produced it. */
       entity: components["schemas"]["AudioEntity"];
       /**
-       * @description Reviewer-supplied override.
+       * @description Reviewer-supplied redaction override.
        *
-       *     `None` means "use the policy's decision"; `Some(action)`
-       *     overrides it for this specific entity at apply time.
+       *     `None` means "use the matching policy rule's decision";
+       *     `Some(...)` overrides that rule for this specific entity
+       *     at apply time. Reviewer overrides take precedence over
+       *     every policy rule and inherit the authority of the
+       *     [`Review::policy_id`] they name — the audit event's
+       *     attribution stamps that policy so the trail names the
+       *     authority under which the override fired.
        */
-      reviewerOverride?: components["schemas"]["ModalityRedactions"];
+      review?: components["schemas"]["Review"];
     };
     /**
      * @description One thing that happened to an entity, with its effect on confidence.
@@ -7844,6 +7798,117 @@ interface components {
        */
       waveform: components["schemas"]["Waveform"];
     };
+    /**
+     * @description What detection found in one document.
+     *
+     *     The body group plus per-container-part groups (each tagged by
+     *     modality) plus the recognition [`AuditContext`] the entities
+     *     were scored against.
+     *
+     *     The context travels with the entities so anonymize can rebuild
+     *     an orchestrator against exactly the vocabulary analyze used.
+     *     Anything a policy predicate compares against beyond the label
+     *     catalog (asserted languages, jurisdictions, document tags) is
+     *     here; labels are re-derived from the policy set on each
+     *     anonymize call.
+     *
+     *     No [`Default`] — a well-formed audit must carry a real
+     *     [`AuditContext`] with a real correlation id. Callers building
+     *     an audit outside the analyze path construct it explicitly.
+     */
+    Audit: {
+      /**
+       * @description The body group.
+       *
+       *     `None` when no body pipeline produced entities (pre-analyze,
+       *     or the codec resolved the doc to a modality with no
+       *     pipeline).
+       */
+      body?: components["schemas"]["EntityGroup"];
+      /**
+       * @description Recognition context.
+       *
+       *     The asserted languages, countries, document tags, and the
+       *     analyze-side correlation id. Held so
+       *     [`Engine::anonymize`] can compile against the same
+       *     vocabulary analyze used without the caller re-passing an
+       *     `AnalyzerParams`.
+       *
+       *     Required on the wire — a missing context on an incoming
+       *     [`Audit`] rejects at deserialize time so the shape
+       *     mismatch surfaces at load, not at apply.
+       *
+       *     [`Engine::anonymize`]: super::Engine::anonymize
+       */
+      context: components["schemas"]["AuditContext"];
+      /**
+       * @description One entry per container part the orchestrator surfaced.
+       *
+       *     Keyed by the container-private part id (e.g. a DOCX zip
+       *     entry name like `"word/media/image1.png"`); each value
+       *     carries that part's modality + entities.
+       */
+      parts?: {
+        [key: string]: components["schemas"]["EntityGroup"];
+      };
+    };
+    /**
+     * @description Recognition-side facts that travel from analyze to anonymize.
+     *
+     *     Mirrors elide's [`Scope`] shape one-for-one: direct fields
+     *     for `languages` and `countries` (typed, elide-native), a
+     *     [`metadata`] sub-struct for free-form classification strings
+     *     (`tags`, `purpose`, `audience`), and the analyze-time
+     *     [`correlation_id`]. The label catalog is not on here —
+     *     labels are policy-owned, and anonymize re-derives them from
+     *     the policy set it was handed.
+     *
+     *     No [`Default`] — `correlation_id` has no meaningful default
+     *     (a nil UUID would silently collapse unrelated audits under
+     *     one bucket in downstream trace aggregators), so callers
+     *     supply one explicitly. Everything else defaults to empty.
+     *
+     *     [`Scope`]: elide::recognition::Scope
+     *     [`metadata`]: Self::metadata
+     *     [`correlation_id`]: Self::correlation_id
+     */
+    AuditContext: {
+      /**
+       * Format: uuid
+       * @description Analyze-time correlation id.
+       *
+       *     Threaded into every tracing span on the recognition path;
+       *     carried over so the anonymize path can link its own spans
+       *     to the same request. The anonymize call supplies a fresh
+       *     id from the passed [`Document`] as the anonymize-side
+       *     correlation id — this one stays as the analyze-side
+       *     pointer.
+       *
+       *     Required on the wire.
+       *
+       *     [`Document`]: nvisy_schema::file::Document
+       */
+      correlationId: string;
+      /**
+       * @description Caller-asserted jurisdictions.
+       *
+       *     Recorded from `AnalyzerParams.scope.countries`.
+       */
+      countries?: components["schemas"]["CountryCode"][];
+      /**
+       * @description Caller-asserted languages for the analysis.
+       *
+       *     Recorded from `AnalyzerParams.scope.languages` at analyze
+       *     time; anonymize re-uses them verbatim.
+       * @default []
+       */
+      languages: components["schemas"]["Languages"];
+      /**
+       * @description Free-form request context: document tags, request purpose,
+       *     output audience. See elide's [`ScopeMetadata`].
+       */
+      metadata?: components["schemas"]["ScopeMetadata"];
+    };
     /** @description Response returned after successful authentication (login/signup). */
     AuthToken: {
       /** @description The JWT API token for authentication. */
@@ -7923,6 +7988,32 @@ interface components {
       /** @description Minimum corner (top-left, conventionally). */
       min: components["schemas"]["Point"];
     };
+    /**
+     * @description Text a [`TextRedaction::Clamp`] emits for out-of-range values.
+     *
+     *     Three forms, deserialized untagged so callers can pick the
+     *     terser one for the case at hand:
+     *
+     *     - **Plain string** (`"90 or older"`) — English-only shorthand.
+     *     - **Localized map** (`{"en": "90 or older", "fr": "90 ou plus"}`)
+     *       — one entry per language the deployment ships; missing
+     *       locales fall back to English at render time.
+     *     - **Format template** (`{"format": "{n} or older"}`) — the
+     *       engine substitutes `{n}` for the threshold, so a ceiling of
+     *       `90` renders `"90 or older"` without the caller repeating the
+     *       number. Same rendering in every language.
+     *
+     *     Round-trips through serde as whichever form the caller wrote.
+     */
+    ClampBucket: string | {
+      /**
+       * @description The template string. `{n}` is substituted; other text
+       *     is literal.
+       */
+      format: string;
+    } | {
+      [key: string]: string;
+    };
     /**
      * @description Color as 8-bit RGB.
      *
@@ -7996,25 +8087,16 @@ interface components {
       createdAt: string;
       /** @description Account that created this connection. */
       createdBy: components["schemas"]["AccountRef"];
-      /** @description How an import reconciles files whose source object was deleted. */
-      deletionPolicy: components["schemas"]["SyncDeletionPolicy"];
       /** @description Human-readable connection display name. */
       displayName: string;
       /** @description Opaque identifier of the connection. */
       id: components["schemas"]["ConnectionId"];
-      /** @description Whether the connection is enabled for syncing. */
+      /** @description Whether the connection is enabled. */
       isActive: boolean;
-      /**
-       * Format: date-time
-       * @description When the connection last synced successfully, if ever.
-       */
-      lastSynced?: string;
-      /** @description Object store provider (`s3`, `azure`, `gcs`). */
+      /** @description Provider identifier (`s3`, `azure`, `gcs`, `openai`, `ollama`, ...). */
       provider: string;
-      /** @description Cron expression for scheduled imports, if configured. */
-      scheduleCron?: string;
-      /** @description Whether the connection imports data in or exports data out. */
-      syncMode: components["schemas"]["SyncMode"];
+      /** @description Sync configuration; present only for sync-capable connections. */
+      sync?: components["schemas"]["SyncSchedule"];
       /**
        * Format: date-time
        * @description When the connection was last updated.
@@ -8024,39 +8106,12 @@ interface components {
       workspaceSlug: components["schemas"]["Handle"];
     };
     /**
-     * @description A fully-typed object-store connection configuration.
+     * @description A fully-typed connection configuration for any capability.
      *
-     *     The `provider` tag selects the variant and thereby the credential shape, so
-     *     an S3 connection cannot carry Azure credentials. Each variant carries a
-     *     shared optional `root_path` and a nested `credentials` object, giving a wire
-     *     shape like
-     *     `{ "provider": "s3", "rootPath": "in/", "credentials": { "bucket": "b", "accessKeyId": "..." } }`.
-     *
-     *     Secrets are masked in [`Debug`]; serialization exists only to persist the
-     *     config encrypted at rest, never to return it in API responses.
+     *     Untagged: the two inner enums have disjoint `provider` values, so serde
+     *     resolves the variant from the flat payload without an outer discriminator.
      */
-    ConnectionConfig: {
-      /** @description S3 credentials. */
-      credentials: components["schemas"]["S3Credentials"];
-      /** @constant */
-      provider: "s3";
-      /** @description Optional root prefix within the bucket; keys resolve relative to it. */
-      rootPath?: string;
-    } | {
-      /** @description Azure credentials. */
-      credentials: components["schemas"]["AzureCredentials"];
-      /** @constant */
-      provider: "azure";
-      /** @description Optional root prefix within the container; keys resolve relative to it. */
-      rootPath?: string;
-    } | {
-      /** @description GCS credentials. */
-      credentials: components["schemas"]["GcsCredentials"];
-      /** @constant */
-      provider: "gcs";
-      /** @description Optional root prefix within the bucket; keys resolve relative to it. */
-      rootPath?: string;
-    };
+    ConnectionConfig: components["schemas"]["StorageConfig"] | components["schemas"]["LlmConfig"];
     /** @description Opaque conn identifier (conn_<uuid>). */
     ConnectionId: string;
     /**
@@ -8089,7 +8144,7 @@ interface components {
       /** @description Opaque identifier of the connection. */
       connectionId: components["schemas"]["ConnectionId"];
     };
-    /** @description A connection sync run (import or export). */
+    /** @description A connection sync (import or export). */
     ConnectionSync: {
       /**
        * Format: int32
@@ -8197,30 +8252,23 @@ interface components {
     /** @description Request payload for creating a new workspace connection. */
     CreateConnection: {
       /**
-       * @description Typed provider configuration (provider tag + its credentials + optional
-       *     root path), encrypted at rest. The `provider` tag selects which
-       *     credential shape is required.
+       * @description Typed provider configuration (provider tag + its credentials), encrypted
+       *     at rest. The `provider` tag selects which credential shape is required and
+       *     which capability the connection has.
        */
       config: components["schemas"]["ConnectionConfig"];
-      /**
-       * @description How an import reconciles files whose source object was deleted.
-       * @default ignore
-       */
-      deletionPolicy: components["schemas"]["SyncDeletionPolicy"];
       /** @description Human-readable connection display name. */
       displayName: string;
       /**
-       * @description Whether the connection is enabled for syncing. Omit to default to active;
-       *     set `false` to create it disabled.
+       * @description Whether the connection is enabled. Omit to default to active; set `false`
+       *     to create it disabled.
        */
       isActive?: boolean;
-      /** @description Cron expression for scheduled imports; omit for manual-only. */
-      scheduleCron?: string;
       /**
-       * @description Whether the connection imports data in or exports data out.
-       * @default import
+       * @description Sync configuration. Applies only to sync-capable providers (object
+       *     stores); rejected for others. Omit for manual-only defaults.
        */
-      syncMode: components["schemas"]["SyncMode"];
+      sync?: components["schemas"]["SyncScheduleInput"];
     };
     /** @description Request payload for creating a new workspace invite. */
     CreateInvite: {
@@ -8276,20 +8324,33 @@ interface components {
     /**
      * @description Request payload for creating a new workspace policy.
      *
-     *     The `definition` is a structured policy the redaction engine consumes;
-     *     its `name` and `description` drive the stored columns unless overridden
-     *     here.
+     *     The body comes from a template or an inline definition (see [`PolicyBody`]).
+     *     The body's `name` and `description` drive the stored columns unless
+     *     overridden here.
      */
     CreatePolicy: {
-      /** @description The structured policy body consumed by the engine. */
-      definition: components["schemas"]["PolicyDefinition"];
       /** @description Optional description override. Defaults to the policy's own description. */
       description?: string;
       /** @description Optional display name override. Defaults to the policy's own name. */
       displayName?: string;
       /** @description URL slug, unique within the workspace and immutable after creation. */
       slug: components["schemas"]["Handle"];
-    };
+    } & ({
+      /** @constant */
+      source: "template";
+      /** @description The built-in policy template to seed from. */
+      template: components["schemas"]["PolicyTemplate"];
+    } | {
+      /**
+       * @description The structured policy body.
+       *
+       *     Boxed to keep the enum small: an inline body is much larger than a
+       *     template id, and most requests use a template.
+       */
+      definition: components["schemas"]["PolicyDefinition"];
+      /** @constant */
+      source: "inline";
+    });
     /** @description Request payload for creating a new workspace webhook. */
     CreateWebhook: {
       /** @description Detailed description of the webhook's purpose (max 500 characters). */
@@ -8496,6 +8557,24 @@ interface components {
        */
       validator?: string;
     };
+    /**
+     * @description The coarseness a [`GeneralizeDate`] reduces a date/timestamp to.
+     *
+     *     Every rendering is an ISO-8601 form, so the output is locale-independent
+     *     by construction — no localized month names or week markers to configure.
+     */
+    DateGranularity: "year" | "year_month" | "hour";
+    /**
+     * @description Which written date convention a [`GeneralizeDate`] accepts on *input*.
+     *
+     *     This governs only how the entity value is *parsed*; the output mirrors
+     *     each value's own convention (see [`GeneralizeDate::render`]). The choice
+     *     is explicit, never inferred from the entity's language: `03/04/1987` is
+     *     a real date under both conventions (March 4 vs. April 3), so a wrong
+     *     guess would silently emit a plausible-but-wrong month. The policy
+     *     author, who knows the corpus's convention, sets it.
+     */
+    DateStyle: "iso" | "us";
     /**
      * @description Pixel dimensions of an image or any 2-D canvas.
      *
@@ -8563,6 +8642,36 @@ interface components {
      *     mentions, not a global key.
      */
     EntityCoRef: string;
+    /**
+     * @description A modality-tagged group of recognised entities.
+     *
+     *     The unit [`Audit`] stores in `body` and in every `parts`
+     *     entry.
+     *
+     *     Tagged by `modality` (snake_case) so deserialization picks the
+     *     right variant and the entity vec inside is statically typed
+     *     per modality — apply-time we hand each variant back to elide
+     *     as a `Vec<Entity<M>>` for the appropriate `M`.
+     *
+     *     [`Audit`]: crate::Audit
+     */
+    EntityGroup: {
+      entities: components["schemas"]["TextEntityRecord"][];
+      /** @constant */
+      modality: "text";
+    } | {
+      entities: components["schemas"]["TabularEntityRecord"][];
+      /** @constant */
+      modality: "tabular";
+    } | {
+      entities: components["schemas"]["ImageEntityRecord"][];
+      /** @constant */
+      modality: "image";
+    } | {
+      entities: components["schemas"]["AudioEntityRecord"][];
+      /** @constant */
+      modality: "audio";
+    };
     /**
      * @description HTTP error response representation with security-conscious design.
      *
@@ -8688,6 +8797,20 @@ interface components {
        */
       serviceAccountPath: string;
     };
+    /**
+     * @description Which operator to apply to Article 9 special-category entities.
+     *
+     *     - [`Erase`](Self::Erase) — the default no-lawful-basis posture.
+     *       Every match is removed.
+     *     - [`Pseudonymize`](Self::Pseudonymize) — identity-preserving
+     *       surrogate. Suitable when an Article 9(2) carve-out
+     *       (explicit consent, employment law, public-health public
+     *       interest, ...) authorizes retention and downstream
+     *       analytics need per-entity coreference across mentions. The
+     *       9(2) basis itself remains the caller's out-of-band
+     *       obligation to establish and document.
+     */
+    GdprArticle9Treatment: "erase" | "pseudonymize";
     /** @description Request to generate a shareable invite code for a workspace. */
     GenerateInviteCode: {
       /** @description When the invite code expires. */
@@ -8697,14 +8820,6 @@ interface components {
     };
     /** @description Lowercase, dash-separated identifier used in URLs and as account handles. */
     Handle: string;
-    /**
-     * @description SHA-2 variant for the [`TextRedaction::Hash`] operator.
-     *
-     *     Wire mirror of elide's `Sha2Algorithm`; the runtime `From`
-     *     conversion is on the engine side so this crate stays free
-     *     of the elide-redaction dep.
-     */
-    HashAlgorithm: "sha256" | "sha512";
     /** @description Response body for `GET /health/`. */
     Health: {
       /** @description Per-component health checks. */
@@ -8716,6 +8831,30 @@ interface components {
     };
     /** @description Operational status of a service component. */
     HealthStatus: "healthy" | "degraded" | "unhealthy";
+    /**
+     * @description Which HIPAA §164.514 de-identification method to apply.
+     *
+     *     The tradeoff is analytic yield vs. downstream constraint:
+     *
+     *     - [`SafeHarbor`](Self::SafeHarbor) — strips all eighteen
+     *       identifier categories. No Data Use Agreement or statistician
+     *       required, but dates, coarse geography, and ages ≥ 90 all
+     *       disappear or collapse.
+     *     - [`LimitedDataSet`](Self::LimitedDataSet) — narrower
+     *       subtraction (§164.514(e)(2)) that keeps dates, town/city,
+     *       state, ZIP, and ages verbatim. Suitable for research and
+     *       public-health handoffs *only when* a Data Use Agreement
+     *       governs the recipient's use.
+     *     - [`ExpertDetermination`](Self::ExpertDetermination) —
+     *       starting scaffold for §164.514(b)(1). Same label set as
+     *       Safe Harbor with pseudonymization as the default terminal
+     *       (identity-preserving across mentions). **Does not certify
+     *       de-identification** — a qualified statistician must
+     *       document that re-identification risk is "very small" under
+     *       the applicable methodology before the output can be treated
+     *       as de-identified.
+     */
+    HipaaDeidMethod: "safe_harbor" | "limited_data_set" | "expert_determination";
     /**
      * @description Per-call payload a recognizer inspects for the [`Image`] modality.
      *
@@ -8817,12 +8956,17 @@ interface components {
       /** @description The elide entity, as recognition produced it. */
       entity: components["schemas"]["ImageEntity"];
       /**
-       * @description Reviewer-supplied override.
+       * @description Reviewer-supplied redaction override.
        *
-       *     `None` means "use the policy's decision"; `Some(action)`
-       *     overrides it for this specific entity at apply time.
+       *     `None` means "use the matching policy rule's decision";
+       *     `Some(...)` overrides that rule for this specific entity
+       *     at apply time. Reviewer overrides take precedence over
+       *     every policy rule and inherit the authority of the
+       *     [`Review::policy_id`] they name — the audit event's
+       *     attribution stamps that policy so the trail names the
+       *     authority under which the override fired.
        */
-      reviewerOverride?: components["schemas"]["ModalityRedactions"];
+      review?: components["schemas"]["Review"];
     };
     /**
      * @description One thing that happened to an entity, with its effect on confidence.
@@ -9207,76 +9351,163 @@ interface components {
      */
     InviteStatus: "pending" | "accepted" | "declined" | "canceled" | "expired" | "revoked";
     /**
-     * @description Kind of sensitive information: a name, an optional description, and
-     *     zero or more tags.
-     *
-     *     Names are conventionally `SCREAMING_SNAKE_CASE` (`"PHONE_NUMBER"`),
-     *     matching Presidio, but this is convention, not enforcement. The
-     *     taxonomy is open: a [`Label`] can be minted for any name a recognizer
-     *     or configuration needs.
+     * @description Kind of sensitive information: a stable [`id`], per-language
+     *     [`LabelLocale`]s, and zero or more tags.
      *
      *     # Identity
      *
-     *     Labels are identified by [`name`]; selectors match by name. Note that
-     *     derived equality is *structural*: two labels with the same name but
-     *     different descriptions or tags are not `==`. Code that wants
-     *     name-only equality should compare [`name`] explicitly.
+     *     Labels are identified by [`id`] — a stable lowercase `snake_case`
+     *     string (`"phone_number"`), never localized, and the catalog key that a
+     *     [`LabelRef`] resolves through. Selectors match by id. Derived equality
+     *     is *structural*: two labels with the same id but different
+     *     localizations or tags are not `==`; compare [`id`] for identity.
+     *
+     *     # Localization
+     *
+     *     The display name and description are localized per [`LanguageTag`].
+     *     English (`"en"`) is required at construction and is the fallback when a
+     *     requested locale is absent, so [`localization`] always returns some
+     *     text — NER and LLM read the analysis language's name and description to
+     *     prompt the model, keyed by the stable id.
      *
      *     # Tags
      *
-     *     [`tags`] is a free-form list of short identifiers policy selectors
-     *     can match against. Built-in labels carry category tags
-     *     (`personal_identity`, `contact_info`, `financial`, …) plus
-     *     cross-cutting tags where applicable (`pii`, `phi`, `pci`). Custom
-     *     labels can ship with zero tags.
+     *     [`tags`] is a free-form list of short identifiers policy selectors can
+     *     match against. Built-in labels carry category tags (`personal_identity`,
+     *     `contact_info`, `financial`, …) plus cross-cutting tags where applicable
+     *     (`pii`, `phi`, `pci`). Custom labels can ship with zero tags.
      *
-     *     [`name`]: Label::name
+     *     [`id`]: Label::id
+     *     [`localization`]: Label::localization
      *     [`tags`]: Label::tags
      */
     Label: {
-      description?: string;
-      name: string;
+      id: string;
+      localizations: components["schemas"]["LocalizedText"];
       tags: string[];
     };
     /**
-     * @description Registry of [`Label`]s, keyed by name.
-     *
-     *     Holds the authoritative definitions (names + descriptions) for a run.
-     *     A [`LabelRef`] carried on a detection or entity is resolved back to
-     *     its full [`Label`] with [`get`].
+     * @description One entry inside a [`TableRule`]: the label to match plus the
+     *     per-modality operators to run.
      *
-     *     [`get`]: LabelCatalog::get
+     *     Kept as a named struct rather than a `(LabelRef, ModalityRedactions)`
+     *     tuple so the wire JSON reads `{"label": "email", "action": {…}}`
+     *     instead of a positional pair.
      */
-    LabelCatalog: {
-      [key: string]: components["schemas"]["Label"];
+    LabelEntry: {
+      /** @description Per-modality operators to run for matching entities. */
+      action: components["schemas"]["ModalityRedactions"];
+      /** @description Label the entry matches on. */
+      label: components["schemas"]["LabelRef"];
     };
     /**
-     * @description Per-request label-catalog selection.
+     * @description Named cluster of [`LabelRef`]s a policy's rules can reference
+     *     by name via [`Predicate::LabelInGroup`].
      *
-     *     Picks builtins by name + adds inline custom schemas.
+     *     Groups live on the [`PolicyDefinition`] that declares them
+     *     and are visible only to that policy's own rules. Templates
+     *     ship one group per canonical label list (`"hipaa_18"`,
+     *     `"gdpr_article_9"`, `"pci_chd"`, `"pci_sad"`), and every
+     *     rule that targets that list references the group by name
+     *     instead of respelling the labels. When elide adds a new label
+     *     to a category, extending the group covers every rule that
+     *     referenced it — no rule edit.
+     *
+     *     **Compilation**: at request time the engine synthesises a
+     *     `group:<policy_id>:<name>` tag on every label listed in the
+     *     group, then rewrites [`Predicate::LabelInGroup { group }`]
+     *     into [`Predicate::TagOneOf { tags: ["group:<policy_id>:<name>"] }`].
+     *     That routes through the same `Anonymizer::with_tag` fast
+     *     path as any authored tag — no new engine machinery, no
+     *     per-request walk over group membership. Scoping the tag by
+     *     `policy_id` keeps two policies that both declare `hipaa_18`
+     *     with different labelsets from stepping on each other.
+     *
+     *     **Unknown group names error at request validation**, not at
+     *     apply time. A typo doesn't silently underfire.
+     *
+     *     [`PolicyDefinition`]: super::PolicyDefinition
+     *     [`Predicate::LabelInGroup`]: super::predicate::Predicate::LabelInGroup
+     *     [`Predicate::LabelInGroup { group }`]: super::predicate::Predicate::LabelInGroup
+     *     [`Predicate::TagOneOf { tags: ["group:<policy_id>:<name>"] }`]: super::predicate::Predicate::TagOneOf
      */
-    LabelCatalogParams: {
+    LabelGroup: {
+      /** @description Optional description for reviewers. */
+      description?: string;
       /**
-       * @description Builtin label names to enable.
+       * @description Labels this group covers, by ref.
        *
-       *     E.g. `"email_address"`, `"phone_number"`. Unknown names
-       *     log a warning and are skipped.
+       *     A label that doesn't appear in the request's compiled
+       *     [`LabelCatalog`] is silently skipped at tag-synthesis time
+       *     — a group can safely list labels the current build
+       *     doesn't emit (e.g. modality-gated ones); rules keyed off
+       *     the group still fire on whatever labels *are* present.
+       *
+       *     [`LabelCatalog`]: elide_core::entity::LabelCatalog
        */
-      builtins?: string[];
-      /** @description Custom labels defined inline by the caller. */
-      custom?: components["schemas"]["Label"][];
+      labels: components["schemas"]["LabelRef"][];
+      /**
+       * @description Stable name a [`Predicate::LabelInGroup`] references.
+       *
+       *     Free-form; a policy layer picks the vocabulary. Recommend
+       *     snake_case identifiers (`hipaa_18`, `gdpr_article_9`) —
+       *     they compile to `group:hipaa_18` tags on the catalog and
+       *     read cleanly in audit provenance.
+       *
+       *     [`Predicate::LabelInGroup`]: super::predicate::Predicate::LabelInGroup
+       */
+      name: string;
+    };
+    /**
+     * @description A label's human-facing text in one language: a display name and an
+     *     optional fuller description.
+     *
+     *     The `name` is a short, natural-language phrase (`"phone number"`) — the
+     *     label a zero-shot NER model like GLiNER matches on, and the primary
+     *     text an LLM prompt shows. The `description` is optional extra guidance
+     *     for backends that consume it (GLiNER-2.0's bi-encoder, an LLM); leave
+     *     it `None` when the name alone is clear.
+     */
+    LabelLocale: {
+      /**
+       * @description Optional fuller description, for description-capable backends
+       *     (GLiNER-2.0, LLM). `None` when the name suffices.
+       */
+      description?: string;
+      /**
+       * @description Short natural-language display name (e.g. `"phone number"`). What a
+       *     zero-shot NER model matches on and an LLM prompt surfaces.
+       */
+      name: string;
     };
     /**
-     * @description Lightweight reference to a [`Label`], carrying only its name.
+     * @description Lightweight reference to a [`Label`], carrying only its id.
      *
      *     This is what detections and entities hold: cloning is cheap (short
-     *     names inline into the [`HipStr`]), and the full [`Label`], with its
-     *     description, is resolved on demand from a [`LabelCatalog`].
+     *     ids inline into the [`HipStr`]), and the full [`Label`], with its
+     *     localized names and descriptions, is resolved on demand from a
+     *     [`LabelCatalog`].
      *
      *     [`Label`]: crate::entity::Label
      *     [`LabelCatalog`]: crate::entity::LabelCatalog
      */
     LabelRef: string;
+    /**
+     * @description Per-policy label-catalog selection.
+     *
+     *     Picks builtins by name + adds inline custom schemas.
+     */
+    Labels: {
+      /**
+       * @description Builtin label names to enable.
+       *
+       *     E.g. `"email_address"`, `"phone_number"`. Unknown names
+       *     log a warning and are skipped.
+       */
+      builtins?: components["schemas"]["LabelRef"][];
+      /** @description Custom labels defined inline by the caller. */
+      custom?: components["schemas"]["Label"][];
+    };
     /**
      * @description Single language detection result.
      *
@@ -9396,12 +9627,68 @@ interface components {
       /** @description Sort by field. */
       sortBy?: components["schemas"]["MemberSortField"];
     };
-    /** @description Request payload for login. */
-    Login: {
-      /** @description Email address or username of the account. */
-      identifier: string;
-      /** @description Password of the account. */
-      password: string;
+    /**
+     * @description A fully-typed LLM inference connection configuration.
+     *
+     *     The `provider` tag selects the variant and thereby the credential shape, so
+     *     an OpenAI connection cannot carry Anthropic credentials. Serialization exists
+     *     only to persist the config encrypted at rest, never to return it in API
+     *     responses.
+     */
+    LlmConfig: {
+      /** @description Override the API base URL (for Azure OpenAI or a proxy). Optional. */
+      baseUrl?: string;
+      /** @description OpenAI credentials. */
+      credentials: components["schemas"]["OpenAiCredentials"];
+      /** @description Default model to use when a request does not specify one. Optional. */
+      defaultModel?: string;
+      /** @constant */
+      provider: "openai";
+    } | {
+      /** @description Base URL of the Ollama server (e.g. `http://localhost:11434`). */
+      baseUrl: string;
+      /** @description Default model to use when a request does not specify one. Optional. */
+      defaultModel?: string;
+      /** @constant */
+      provider: "ollama";
+    } | {
+      /** @description Override the API base URL. Optional. */
+      baseUrl?: string;
+      /** @description Anthropic credentials. */
+      credentials: components["schemas"]["AnthropicCredentials"];
+      /** @description Default model to use when a request does not specify one. Optional. */
+      defaultModel?: string;
+      /** @constant */
+      provider: "anthropic";
+    };
+    /**
+     * @description A value localized per [`LanguageTag`], with an English-first fallback.
+     *
+     *     The reusable mechanism behind any text that varies by language: a
+     *     [`Label`]'s display name and description, a redaction operator's bucket
+     *     label, and so on. English (`"en"`) is the conventional anchor —
+     *     constructors seed it, and [`resolve`] falls back to it (then to any
+     *     entry) when a requested locale is absent, so a caller that supplied
+     *     English always gets *some* value.
+     *
+     *     Generic over the stored value `T`, so it carries a bare `HipStr`
+     *     (a bucket label) or a richer struct (a label's name-plus-description)
+     *     equally. It is a thin wrapper over a `HashMap<LanguageTag, T>`; the
+     *     added value is the fallback policy in [`resolve`], kept in one place
+     *     rather than reimplemented at each use site.
+     *
+     *     [`Label`]: crate::entity::Label
+     *     [`resolve`]: LocalizedText::resolve
+     */
+    LocalizedText: {
+      [key: string]: components["schemas"]["LabelLocale"];
+    };
+    /** @description Request payload for login. */
+    Login: {
+      /** @description Email address or username of the account. */
+      identifier: string;
+      /** @description Password of the account. */
+      password: string;
       /**
        * @description Whether to remember this device for extended session. Defaults to false.
        * @default false
@@ -9567,6 +9854,11 @@ interface components {
       /** @description Whether to send email notifications. */
       notifyViaEmail: boolean;
     };
+    /** @description OpenAI API credentials. */
+    OpenAiCredentials: {
+      /** @description OpenAI API key. */
+      apiKey: string;
+    };
     /**
      * @description Identifies a redaction operator, for the redaction audit a higher
      *     layer assembles.
@@ -9637,6 +9929,54 @@ interface components {
        */
       customDictionaries?: components["schemas"]["CustomDictionary"][];
     };
+    /**
+     * @description Which PCI DSS subsection this template addresses.
+     *
+     *     - [`PanRender`](Self::PanRender) — §3.5.1 render posture for
+     *       stored Primary Account Numbers. Carries a [`PciPanRender`]
+     *       picking between the shipped render approaches.
+     *     - [`SavErase`](Self::SavErase) — §3.3.1 prohibition on
+     *       storing Sensitive Authentication Data (CVV/CVC, track data,
+     *       PIN blocks) after authorization. No options — SAV has one
+     *       posture: erase.
+     */
+    PciDssPart: {
+      /** @constant */
+      part: "pan_render";
+      /**
+       * @description Which of the §3.5.1-permitted render approaches to
+       *     apply.
+       */
+      render: components["schemas"]["PciPanRender"];
+    } | {
+      /** @constant */
+      part: "sav_erase";
+    };
+    /**
+     * @description Which PCI DSS §3.5.1-permitted render approach to apply to
+     *     stored PAN.
+     *
+     *     The truncation / hash split is a real operational decision,
+     *     not a style knob:
+     *
+     *     - Truncation is irreversible with no key material to protect;
+     *       destroys uniqueness (two PANs sharing the retained digits
+     *       collapse to the same string), so unsuitable when downstream
+     *       joins or dedup need per-row identity across a PAN column.
+     *     - HMAC preserves 1:1 uniqueness (same PAN → same digest),
+     *       enabling joins, dedup, and fraud-scoring on the digest. But
+     *       the tenant owns a key the engine reads via
+     *       [`Engine::with_key_provider`]; a leaked key permits offline
+     *       PAN enumeration against the shipped digests.
+     *
+     *     The two axes inside truncation and inside HMAC are narrower.
+     *
+     *     Callers wanting more than one dispatched from one policy
+     *     compose multiple templates.
+     *
+     *     [`Engine::with_key_provider`]: https://docs.rs/nvisy-engine/latest/nvisy_engine/struct.Engine.html
+     */
+    PciPanRender: "truncate" | "truncate_last_four" | "hmac_sha256" | "hmac_sha512";
     /** @description Pipeline response. */
     Pipeline: {
       /** @description Artifacts produced by pipeline runs. */
@@ -9684,16 +10024,19 @@ interface components {
     /**
      * @description A pipeline's detection + governance intent.
      *
-     *     Holds what a pipeline author decides — which recognizers to run, the entity
-     *     labels, the default scope, and the policies to apply. Infrastructure config
-     *     (enrichment backends, deduplication calibration) is server-wide and lives in
-     *     the engine config, not here. Stored as JSON in the pipeline's `definition`
-     *     column but validated against this schema at the API boundary.
+     *     Holds what a pipeline author decides — which recognizers to run, the default
+     *     scope, and the policies to apply. Infrastructure config (enrichment backends,
+     *     deduplication calibration) is server-wide and lives in the engine config, not
+     *     here. Stored as JSON in the pipeline's `definition` column but validated
+     *     against this schema at the API boundary.
+     *
+     *     The label catalog is not part of this: the policies own the label vocabulary,
+     *     and the engine derives the detection catalog from them at run time.
      *
      *     The split:
      *
-     *     - `recognizers` / `deduplication` / `label_catalog` — the detection intent,
-     *       merged with the server-wide engine defaults into an `AnalyzerParams`.
+     *     - `recognizers` / `deduplication` — the detection intent, merged with the
+     *       server-wide engine defaults into an `AnalyzerParams`.
      *     - `default_scope` — optional pipeline-wide scope a document may override.
      *     - `policy_slugs` — references to the workspace's policies, resolved at run
      *       time.
@@ -9711,14 +10054,6 @@ interface components {
        *     the document must assert its own.
        */
       defaultScope?: components["schemas"]["ScopeParams"];
-      /**
-       * @description Entity-label catalog: which entity types the recognizers emit.
-       *
-       *     Reusable across the pipeline's documents, so it lives here rather than in
-       *     per-document scope.
-       * @default {}
-       */
-      labelCatalog: components["schemas"]["LabelCatalogParams"];
       /**
        * @description Slugs of workspace policies applied at redaction.
        *
@@ -9931,27 +10266,40 @@ interface components {
        *     fallback per policy" at the type level.
        */
       fallback?: components["schemas"]["ModalityRedactions"];
+      /**
+       * @description Named clusters of [`LabelRef`]s this policy's rules may
+       *     reference by name via [`Predicate::LabelInGroup`]. Scoped
+       *     to this policy — a rule can only name a group its own
+       *     policy declared; unknown references error at request
+       *     validation. Two policies that both declare `hipaa_18` with
+       *     different labelsets stay independent.
+       *
+       *     [`LabelRef`]: elide_core::entity::LabelRef
+       *     [`Predicate::LabelInGroup`]: predicate::Predicate::LabelInGroup
+       */
+      groups?: components["schemas"]["LabelGroup"][];
       /**
        * Format: uuid
        * @description Stable identifier. UUIDv7 recommended (time-ordered);
        *     customer-supplied so re-submissions carry the same id.
        *     Engine stamps this into the redaction event's
-       *     [`Attribution::policy_id`] so reviewers can find this
-       *     policy from any redaction it drove.
+       *     [`Attribution::name`] so reviewers can find this policy
+       *     from any redaction it drove.
        *
-       *     [`Attribution::policy_id`]: elide_core::entity::provenance::Attribution::policy_id
+       *     [`Attribution::name`]: elide_core::entity::provenance::Attribution::name
        */
       id: string;
       /**
-       * @description Vocabulary the policy operates over. Engine unions every
-       *     submitted policy's `labels` into a per-request
+       * @description Vocabulary the policy operates over: builtins picked by
+       *     name plus caller-authored custom label schemas. Engine
+       *     unions every submitted policy's `labels` into a per-request
        *     [`LabelCatalog`] used to drive recognizer dispatch and
        *     tag-based [`Predicate::TagOneOf`] matching.
        *
        *     [`LabelCatalog`]: elide_core::entity::LabelCatalog
        *     [`Predicate::TagOneOf`]: predicate::Predicate::TagOneOf
        */
-      labels?: components["schemas"]["Label"][];
+      labels?: components["schemas"]["Labels"];
       /** @description Human-readable name. Display-only. Does not key anything. */
       name: string;
       /** @description Lifecycle rules for content under this policy. */
@@ -9978,41 +10326,16 @@ interface components {
       policySlug: string;
     };
     /**
-     * @description One rule inside a [`PolicyDefinition`]. Identity is the UUID; `name` /
-     *     `description` are display-only.
+     * @description One rule inside a [`PolicyDefinition`]. Identity is the UUID;
+     *     `name` / `description` are display-only.
+     *
+     *     Untagged on the wire: distinguished by the presence of
+     *     `predicate` (predicated) vs. `operators` (table). Existing
+     *     JSON keeps working.
      *
      *     [`PolicyDefinition`]: super::PolicyDefinition
      */
-    PolicyRule: {
-      /**
-       * @description Per-modality redaction operators applied when the
-       *     predicate matches. Modalities the rule doesn't cover fall
-       *     through to the policy fallback (or the next policy in the
-       *     chain).
-       */
-      action: components["schemas"]["ModalityRedactions"];
-      /** @description Optional description for reviewers. */
-      description?: string;
-      /**
-       * Format: uuid
-       * @description Stable identifier. UUIDv7 recommended (time-ordered);
-       *     customer-supplied so re-submissions carry the same id.
-       *     Engine stamps this into the redaction event's
-       *     [`Attribution::reason`] so reviewers can trace back which
-       *     rule fired.
-       *
-       *     [`Attribution::reason`]: elide_core::entity::provenance::Attribution::reason
-       */
-      id: string;
-      /** @description Human-readable name. Display-only. Does not key anything. */
-      name: string;
-      /**
-       * @description Entity-level predicate that decides whether the rule fires
-       *     on a given recognised entity. Composable; see
-       *     [`Predicate`] for the full grammar.
-       */
-      predicate: components["schemas"]["Predicate"];
-    };
+    PolicyRule: components["schemas"]["PredicatedRule"] | components["schemas"]["TableRule"];
     /**
      * @description Lightweight policy view for lists.
      *
@@ -10060,6 +10383,45 @@ interface components {
        */
       total?: number;
     };
+    /**
+     * @description A regulatory posture this crate ships a [`Template`] for.
+     *
+     *     Serialises as an internally-tagged object under `kind`,
+     *     matching the house pattern for option-bearing enums
+     *     (`Predicate`, `TextRedaction`, `AnyRedaction`). A caller
+     *     wire-picks a template as
+     *     `{"kind": "hipaa_safe_harbor"}` or, for variants with
+     *     operator options,
+     *     `{"kind": "pci_dss_pan", "render": "hmac_sha256"}`.
+     */
+    PolicyTemplate: {
+      /** @constant */
+      kind: "hipaa_deidentification";
+      /**
+       * @description Which §164.514 method to apply. See [`HipaaDeidMethod`]
+       *     for the tradeoff.
+       */
+      method: components["schemas"]["HipaaDeidMethod"];
+    } | {
+      /** @constant */
+      kind: "gdpr_article9";
+      /**
+       * @description Which operator to apply to Article 9 matches. See
+       *     [`GdprArticle9Treatment`] for the tradeoff.
+       */
+      treatment: components["schemas"]["GdprArticle9Treatment"];
+    } | {
+      /** @constant */
+      kind: "pci_dss";
+      /**
+       * @description Which DSS subsection this template addresses. See
+       *     [`PciDssPart`] for the shipped subsections.
+       */
+      part: components["schemas"]["PciDssPart"];
+    } | {
+      /** @constant */
+      kind: "ccpa";
+    };
     /**
      * @description Closed polygon, given by its ordered vertices.
      *
@@ -10085,12 +10447,21 @@ interface components {
       /** @constant */
       kind: "labelOneOf";
       /** @description Allowed labels. */
-      labels: string[];
+      labels: components["schemas"]["LabelRef"][];
     } | {
       /** @constant */
       kind: "tagOneOf";
       /** @description Allowed tags. */
       tags: string[];
+    } | {
+      /**
+       * @description Name of the [`LabelGroup`] to match against.
+       *
+       *     [`LabelGroup`]: super::LabelGroup
+       */
+      group: string;
+      /** @constant */
+      kind: "labelInGroup";
     } | {
       /** @description Cluster id to match. */
       coref: string;
@@ -10112,6 +10483,31 @@ interface components {
       /** @description Negated predicate. */
       not: components["schemas"]["Predicate"];
     };
+    /** @description Predicate-gated rule: one predicate, one action. */
+    PredicatedRule: {
+      /**
+       * @description Per-modality redaction operators applied when the
+       *     predicate matches. Modalities the rule doesn't cover fall
+       *     through to the policy fallback (or the next policy in the
+       *     chain).
+       */
+      action: components["schemas"]["ModalityRedactions"];
+      /** @description Optional description for reviewers. */
+      description?: string;
+      /**
+       * Format: uuid
+       * @description Stable identifier. UUIDv7 recommended.
+       */
+      id: string;
+      /** @description Human-readable name. Display-only. */
+      name: string;
+      /**
+       * @description Entity-level predicate that decides whether the rule fires
+       *     on a given recognised entity. Composable; see
+       *     [`Predicate`] for the full grammar.
+       */
+      predicate: components["schemas"]["Predicate"];
+    };
     /**
      * @description How to pick recognizers out of a deployment-configured lineup.
      *
@@ -10150,38 +10546,6 @@ interface components {
       /** Format: uint */
       start: number;
     };
-    /**
-     * @description A modality-tagged group of recognized entities.
-     *
-     *     The unit [`AnalyzedDocument`] stores in `body` and in every
-     *     `parts` entry.
-     *
-     *     Tagged by `modality` (snake_case) so deserialization picks the
-     *     right variant and the entity vec inside is statically typed
-     *     per modality — apply-time we hand each variant back to elide
-     *     as a `Vec<Entity<M>>` for the appropriate `M`.
-     */
-    RecognizedGroup: {
-      /** @description Recognized entities, in source-coordinate order. */
-      entities: components["schemas"]["TextEntityRecord"][];
-      /** @constant */
-      modality: "text";
-    } | {
-      /** @description Recognized entities, in source-coordinate order. */
-      entities: components["schemas"]["TabularEntityRecord"][];
-      /** @constant */
-      modality: "tabular";
-    } | {
-      /** @description Recognized entities, in source-coordinate order. */
-      entities: components["schemas"]["ImageEntityRecord"][];
-      /** @constant */
-      modality: "image";
-    } | {
-      /** @description Recognized entities, in source-coordinate order. */
-      entities: components["schemas"]["AudioEntityRecord"][];
-      /** @constant */
-      modality: "audio";
-    };
     /**
      * @description Recognizer slots an analyzer can fill.
      *
@@ -10255,6 +10619,38 @@ interface components {
     };
     /** @description What class of data a retention policy applies to. */
     RetentionScope: "original_content" | "redacted_output" | "audit_logs";
+    /**
+     * @description A reviewer-supplied redaction override with the policy
+     *     authority it draws from.
+     *
+     *     The `policy_id` isn't just for audit — it also picks which
+     *     per-policy pseudonym vault and per-policy [`KeyProvider`] the
+     *     override's operator resolves against, so an override using
+     *     [`Pseudonymize`] or [`HmacHash`] stays consistent with the
+     *     authoring policy's other rules.
+     *
+     *     [`KeyProvider`]: elide::redaction::operators::KeyProvider
+     *     [`Pseudonymize`]: elide::redaction::operators::Pseudonymize
+     *     [`HmacHash`]: elide::redaction::operators::HmacHash
+     */
+    Review: {
+      /**
+       * @description The per-modality redaction operators to run for this
+       *     entity. Overrides whatever the policy set would have
+       *     picked for the same entity.
+       */
+      action: components["schemas"]["ModalityRedactions"];
+      /**
+       * Format: uuid
+       * @description The policy whose authority the reviewer exercises. Must
+       *     match the `id` of a [`PolicyDefinition`] submitted with
+       *     the anonymize request. The audit event stamps this UUID
+       *     as the attribution `name`.
+       *
+       *     [`PolicyDefinition`]: nvisy_schema::policy::PolicyDefinition
+       */
+      policyId: string;
+    };
     /**
      * @description A serializable summary of *which selection rule* bound an operator to an
      *     entity — the automatic "why" behind a redaction.
@@ -10322,7 +10718,7 @@ interface components {
      *     analyzer, which borrows it into a fresh [`RecognizerContext`] per
      *     payload. It holds only what the *caller* asserts about the analysis as a
      *     whole — languages, jurisdictions, document labels, the target catalog, a
-     *     correlation id — none of which depends on the medium, so one `Scope`
+     *     correlation id — none of which depends on the medium, so one [`Scope`]
      *     drives a text, image, or audio analysis alike.
      *
      *     Per-medium regions (caller-supplied inclusions and exclusions, which are
@@ -10332,40 +10728,42 @@ interface components {
      *
      *     [`RecognizerContext`]: super::RecognizerContext
      *     [`Annotations`]: super::annotation::Annotations
-     */
-    Scope: {
-      /**
-       * @description The entity types recognizers are asked to emit. A zero-shot NER
-       *     model requests exactly this set; an LLM prompt lists it as the
-       *     labels to find. Empty means "the recognizer's own default" — a
-       *     recognizer with its own configured label set keeps it; one without
-       *     emits whatever its backend natively produces.
-       * @default {}
-       */
-      catalog: components["schemas"]["LabelCatalog"];
-      /**
-       * Format: uuid
-       * @description Correlation UUID propagated through the tracing span for this
-       *     analysis.
-       * @default null
-       */
-      correlation_id: string;
-      /**
-       * @description Caller-asserted jurisdictions. When non-empty, recognizers that
-       *     carry per-rule country scopes skip rules that match none of them.
-       *     An empty list means "any": rules that declare countries still run
-       *     as a permissive fallback so callers who don't assert a jurisdiction
-       *     don't lose detections. A document spanning several jurisdictions
-       *     can assert all of them; a rule runs when any one matches.
+     *     Free-form, caller-asserted request context: the *document* it is about and
+     *     the *request* driving it.
+     *
+     *     Three axes of opaque classification strings elide neither ships nor
+     *     interprets — a downstream policy layer chooses what `"medical"` or
+     *     `"fraud_detection"` or `"auditor"` mean. They are read in two places: a
+     *     recognizer may bias its detection on them (the LLM prompt lists them so the
+     *     model attends to the right terms), and a scope-aware operator predicate may
+     *     branch on them at selection time (redact the same document differently per
+     *     [`audience`]).
+     *
+     *     - [`tags`] classify the *document* (`"medical"`, `"gdpr-request"`).
+     *     - [`purpose`] is why the request exists (`"fraud_detection"`).
+     *     - [`audience`] is who the redacted output is for (`"support_agent"`,
+     *       `"auditor"`) — the axis PCI-style "same document, two masks" branches on.
+     *
+     *     [`tags`]: Self::tags
+     *     [`purpose`]: Self::purpose
+     *     [`audience`]: Self::audience
+     */
+    ScopeMetadata: {
+      /**
+       * @description Who the redacted output is for (e.g. `"support_agent"`, `"auditor"`).
+       *     The axis a per-audience redaction branches on: one detected document,
+       *     selected differently per audience. May hold several.
        * @default []
        */
-      countries: components["schemas"]["CountryCode"][];
+      audience: string[];
       /**
-       * @description Caller-asserted languages for the analysis. Empty means the caller
-       *     asserted none, leaving detection (if an enricher runs) to fill in.
-       * @default []
+       * @description The caller-asserted business purpose driving this request (e.g.
+       *     `"fraud_detection"`, `"gdpr_erasure_request"`). A scope-aware operator
+       *     predicate may skip or swap a rule based on it; a recognizer may bias
+       *     detection on it. `None` when the caller asserts no purpose.
+       * @default null
        */
-      languages: components["schemas"]["Languages"];
+      purpose: string;
       /**
        * @description Document-level classification tags (e.g. `"medical"`,
        *     `"gdpr-request"`). Recognizers may use these to bias their behavior
@@ -10373,9 +10771,9 @@ interface components {
        *
        *     Named `tags`, not `labels`, to keep "label" reserved for the entity
        *     taxonomy ([`LabelRef`]/[`LabelCatalog`]): these classify the
-       *     *document*, whereas [`catalog`] names the entity *types* to emit.
+       *     *document*, whereas the scope's catalog names the entity *types* to
+       *     emit.
        *
-       *     [`catalog`]: Self::catalog
        *     [`LabelRef`]: crate::entity::LabelRef
        *     [`LabelCatalog`]: crate::entity::LabelCatalog
        * @default []
@@ -10385,10 +10783,12 @@ interface components {
     /**
      * @description Caller-asserted scope for one request.
      *
-     *     Mirrors the wire-visible knobs of `elide::recognition::Scope`.
-     *     The engine assembles this plus a server-minted
-     *     `correlation_id` into the orchestrator's `Scope` at compile
-     *     time.
+     *     A narrower wire projection of `elide::recognition::Scope`:
+     *     `languages` and `countries` (typed, elide-native), plus
+     *     elide's [`ScopeMetadata`] block for free-form classification
+     *     strings (`tags`, `purpose`, `audience`). The engine assembles
+     *     this plus a server-minted `correlation_id` and a policy-derived
+     *     label catalog into the orchestrator's `Scope` at compile time.
      */
     ScopeParams: {
       /**
@@ -10401,17 +10801,6 @@ interface components {
        *     jurisdiction don't lose detections.
        */
       countries?: components["schemas"]["CountryCode"][];
-      /**
-       * @description Per-request entity-label catalog.
-       *
-       *     Builtins selected by name + custom inline schemas. Drives
-       *     what recognizers are asked to emit and tag-based selector
-       *     matching in the anonymizer. Engine resolves this into the
-       *     assembled `elide::recognition::Scope`'s `catalog` field at
-       *     compile time.
-       * @default {}
-       */
-      labelCatalog: components["schemas"]["LabelCatalogParams"];
       /**
        * @description Caller-asserted languages for the analysis.
        *
@@ -10421,20 +10810,22 @@ interface components {
        */
       languages: components["schemas"]["Languages"];
       /**
-       * @description Document-level classification tags.
-       *
-       *     E.g. `"medical"`, `"gdpr-request"`. Recognizers may use
-       *     these to bias their behaviour for domain-specific terms;
-       *     those that don't ignore the field.
-       *
-       *     Distinct from [`label_catalog`]: tags classify the
-       *     *document*, whereas the catalog names the entity *types*
-       *     to emit.
-       *
-       *     [`label_catalog`]: ScopeParams::label_catalog
+       * @description Free-form request context: document tags, request purpose,
+       *     output audience. See elide's [`ScopeMetadata`].
        */
-      tags?: string[];
+      metadata?: components["schemas"]["ScopeMetadata"];
     };
+    /**
+     * @description Which SHA-2 variant a hashing operator uses.
+     *
+     *     Shared by [`Sha2Hash`] (unkeyed digest) and [`HmacHash`] (keyed HMAC):
+     *     both pick the same underlying width, so the choice lives in one enum
+     *     rather than one per operator.
+     *
+     *     [`Sha2Hash`]: super::Sha2Hash
+     *     [`HmacHash`]: super::HmacHash
+     */
+    Sha2Algorithm: "sha256" | "sha512";
     /** @description Request payload for signup. */
     Signup: {
       /** @description Optional display name of the account. */
@@ -10464,6 +10855,40 @@ interface components {
     };
     /** @description Sort order direction. */
     SortOrder: "asc" | "desc";
+    /**
+     * @description A fully-typed object-store connection configuration.
+     *
+     *     The `provider` tag selects the variant and thereby the credential shape, so
+     *     an S3 connection cannot carry Azure credentials. Each variant carries a
+     *     shared optional `root_path` and a nested `credentials` object, giving a wire
+     *     shape like
+     *     `{ "provider": "s3", "rootPath": "in/", "credentials": { "bucket": "b", "accessKeyId": "..." } }`.
+     *
+     *     Secrets are masked in [`Debug`]; serialization exists only to persist the
+     *     config encrypted at rest, never to return it in API responses.
+     */
+    StorageConfig: {
+      /** @description S3 credentials. */
+      credentials: components["schemas"]["S3Credentials"];
+      /** @constant */
+      provider: "s3";
+      /** @description Optional root prefix within the bucket; keys resolve relative to it. */
+      rootPath?: string;
+    } | {
+      /** @description Azure credentials. */
+      credentials: components["schemas"]["AzureCredentials"];
+      /** @constant */
+      provider: "azure";
+      /** @description Optional root prefix within the container; keys resolve relative to it. */
+      rootPath?: string;
+    } | {
+      /** @description GCS credentials. */
+      credentials: components["schemas"]["GcsCredentials"];
+      /** @constant */
+      provider: "gcs";
+      /** @description Optional root prefix within the bucket; keys resolve relative to it. */
+      rootPath?: string;
+    };
     /**
      * @description Request payload to trigger a connection sync.
      *
@@ -10497,6 +10922,40 @@ interface components {
      *     the connection into the workspace; `Export` pushes workspace files out.
      */
     SyncMode: "import" | "export";
+    /** @description A connection's sync configuration, present only for sync-capable connections. */
+    SyncSchedule: {
+      /** @description How an import reconciles files whose source object was deleted. */
+      deletionPolicy: components["schemas"]["SyncDeletionPolicy"];
+      /**
+       * Format: date-time
+       * @description When the connection last synced successfully, if ever.
+       */
+      lastSynced?: string;
+      /** @description Cron expression for scheduled imports, if configured. */
+      scheduleCron?: string;
+      /** @description Whether the connection imports data in or exports data out. */
+      syncMode: components["schemas"]["SyncMode"];
+    };
+    /**
+     * @description Sync configuration for a sync-capable connection (object stores).
+     *
+     *     Only meaningful for connections whose provider supports syncing; omitted for
+     *     connections that do not (e.g. LLM inference).
+     */
+    SyncScheduleInput: {
+      /**
+       * @description How an import reconciles files whose source object was deleted.
+       * @default ignore
+       */
+      deletionPolicy: components["schemas"]["SyncDeletionPolicy"];
+      /** @description Cron expression for scheduled imports; omit for manual-only. */
+      scheduleCron?: string;
+      /**
+       * @description Whether the connection imports data in or exports data out.
+       * @default import
+       */
+      syncMode: components["schemas"]["SyncMode"];
+    };
     /**
      * @description Defines the execution status of a connection sync run.
      *
@@ -10511,6 +10970,42 @@ interface components {
      *     to track whether a run was manually triggered, scheduled, or triggered by a webhook.
      */
     SyncTriggerType: "manual" | "scheduled" | "webhook";
+    /**
+     * @description Per-label table rule: N labels, N actions, one shared identity.
+     *
+     *     Each entry compiles to an elide `Rule::label` attachment under
+     *     this rule's shared UUID / name / description — so the audit
+     *     trail records "rule X fired" without exposing the fan-out to
+     *     the reviewer. Meant for templates where a single policy intent
+     *     (e.g. "HIPAA Safe Harbor identifiers") routes different labels
+     *     to different operators.
+     */
+    TableRule: {
+      /** @description Optional description for reviewers. */
+      description?: string;
+      /**
+       * Format: uuid
+       * @description Stable identifier — shared by every entry the table
+       *     expands into. UUIDv7 recommended.
+       */
+      id: string;
+      /** @description Human-readable name. Display-only. */
+      name: string;
+      /**
+       * @description Per-label operator dispatch. Every entity whose label
+       *     matches a listed [`LabelRef`] attaches the paired
+       *     [`ModalityRedactions`]. Labels absent from the list are not
+       *     affected by this rule and fall through to the next rule or
+       *     the policy fallback.
+       *
+       *     A [`Vec`] rather than a map keeps the author-supplied
+       *     order — elide's anonymizer is first-match-wins, so wire
+       *     order determines which entry fires when two match the
+       *     same entity. Duplicate labels are the caller's bug; the
+       *     engine attaches every entry, and the first one wins.
+       */
+      operators: components["schemas"]["LabelEntry"][];
+    };
     /**
      * @description Detected piece of sensitive information within some medium.
      *
@@ -10596,12 +11091,17 @@ interface components {
       /** @description The elide entity, as recognition produced it. */
       entity: components["schemas"]["TabularEntity"];
       /**
-       * @description Reviewer-supplied override.
+       * @description Reviewer-supplied redaction override.
        *
-       *     `None` means "use the policy's decision"; `Some(action)`
-       *     overrides it for this specific entity at apply time.
+       *     `None` means "use the matching policy rule's decision";
+       *     `Some(...)` overrides that rule for this specific entity
+       *     at apply time. Reviewer overrides take precedence over
+       *     every policy rule and inherit the authority of the
+       *     [`Review::policy_id`] they name — the audit event's
+       *     attribution stamps that policy so the trail names the
+       *     authority under which the override fired.
        */
-      reviewerOverride?: components["schemas"]["ModalityRedactions"];
+      review?: components["schemas"]["Review"];
     };
     /**
      * @description One thing that happened to an entity, with its effect on confidence.
@@ -10853,6 +11353,57 @@ interface components {
       /** @constant */
       kind: "drop_column";
     };
+    /**
+     * @description Fallback operator that runs when a declinable primary
+     *     ([`TextRedaction::Clamp`], [`TextRedaction::GeneralizeDate`])
+     *     doesn't apply to the entity value.
+     *
+     *     The four operators that always apply and produce a deterministic
+     *     output without needing engine-side infrastructure (no key
+     *     provider, no vault). Enough to satisfy every regulatory
+     *     pattern I know: `Clamp/GeneralizeDate → Erase` (the safe
+     *     default), `→ Replace { template }` (an explicit placeholder),
+     *     or `→ Mask` / `→ Keep` on the rare occasion those fit.
+     *
+     *     Absent from the primary's spec, elide's baked-in default is
+     *     [`Erase`] — a bare [`TextRedaction::Clamp`] without a `fallback`
+     *     erases values that aren't numeric.
+     *
+     *     [`Erase`]: TerminalFallback::Erase
+     */
+    TerminalFallback: {
+      /** @constant */
+      kind: "erase";
+    } | {
+      /** @constant */
+      kind: "keep";
+    } | {
+      /** @constant */
+      kind: "replace";
+      /**
+       * @description Template string. Default `[{label}]`.
+       * @default [{label}]
+       */
+      template: string;
+    } | {
+      /**
+       * Format: uint
+       * @description Characters to leave unmasked at the start of the value.
+       */
+      keep_prefix?: number;
+      /**
+       * Format: uint
+       * @description Characters to leave unmasked at the end of the value.
+       */
+      keep_suffix?: number;
+      /** @constant */
+      kind: "mask";
+      /**
+       * @description The character that replaces masked positions.
+       * @default *
+       */
+      mask_char: string;
+    };
     /** @description Request payload for testing a webhook. */
     TestWebhook: {
       /**
@@ -10957,12 +11508,17 @@ interface components {
       /** @description The elide entity, as recognition produced it. */
       entity: components["schemas"]["TextEntity"];
       /**
-       * @description Reviewer-supplied override.
+       * @description Reviewer-supplied redaction override.
        *
-       *     `None` means "use the policy's decision"; `Some(action)`
-       *     overrides it for this specific entity at apply time.
+       *     `None` means "use the matching policy rule's decision";
+       *     `Some(...)` overrides that rule for this specific entity
+       *     at apply time. Reviewer overrides take precedence over
+       *     every policy rule and inherit the authority of the
+       *     [`Review::policy_id`] they name — the audit event's
+       *     attribution stamps that policy so the trail names the
+       *     authority under which the override fired.
        */
-      reviewerOverride?: components["schemas"]["ModalityRedactions"];
+      review?: components["schemas"]["Review"];
     };
     /**
      * @description One thing that happened to an entity, with its effect on confidence.
@@ -11214,7 +11770,7 @@ interface components {
        * @description SHA-256 (default) or SHA-512.
        * @default sha256
        */
-      algorithm: components["schemas"]["HashAlgorithm"];
+      algorithm: components["schemas"]["Sha2Algorithm"];
       /** @constant */
       kind: "hash";
       /** @description Salt prepended to the value before hashing. */
@@ -11250,6 +11806,75 @@ interface components {
     } | {
       /** @constant */
       kind: "encrypt";
+    } | {
+      /**
+       * @description HMAC-SHA-256 (default) or HMAC-SHA-512.
+       * @default sha256
+       */
+      algorithm: components["schemas"]["Sha2Algorithm"];
+      /** @constant */
+      kind: "hmac_hash";
+    } | {
+      /**
+       * Format: uint
+       * @description Characters to keep at the start of the value.
+       */
+      keep_prefix?: number;
+      /**
+       * Format: uint
+       * @description Characters to keep at the end of the value.
+       */
+      keep_suffix?: number;
+      /** @constant */
+      kind: "truncate";
+    } | {
+      /**
+       * Format: double
+       * @description Threshold at or above which values collapse to
+       *     `ceiling_bucket`. `None` disables the ceiling.
+       */
+      ceiling?: number;
+      /**
+       * @description Bucket label for values at or above `ceiling`. Required
+       *     when `ceiling` is set; ignored otherwise.
+       */
+      ceiling_bucket?: components["schemas"]["ClampBucket"];
+      /**
+       * @description Operator that runs when the entity value isn't a
+       *     finite number. `None` erases (elide's default).
+       */
+      fallback?: components["schemas"]["TerminalFallback"];
+      /**
+       * Format: double
+       * @description Threshold at or below which values collapse to
+       *     `floor_bucket`. `None` disables the floor.
+       */
+      floor?: number;
+      /**
+       * @description Bucket label for values at or below `floor`. Required
+       *     when `floor` is set; ignored otherwise.
+       */
+      floor_bucket?: components["schemas"]["ClampBucket"];
+      /** @constant */
+      kind: "clamp";
+    } | {
+      /**
+       * @description Operator that runs when the entity value isn't a
+       *     parseable date. `None` erases (elide's default).
+       */
+      fallback?: components["schemas"]["TerminalFallback"];
+      /**
+       * @description Coarseness of the output. Default `Year`.
+       * @default year
+       */
+      granularity: components["schemas"]["DateGranularity"];
+      /** @constant */
+      kind: "generalize_date";
+      /**
+       * @description Which input convention to accept. Default `Iso`.
+       * @default iso
+       */
+      style: components["schemas"]["DateStyle"];
     };
     /**
      * @description How the structural reconciler picks a winner across labels.
@@ -11339,23 +11964,18 @@ interface components {
        *     config (and, with it, the provider). Omit to leave it unchanged.
        */
       config?: components["schemas"]["ConnectionConfig"];
-      /** @description How an import reconciles files whose source object was deleted. */
-      deletionPolicy?: components["schemas"]["SyncDeletionPolicy"];
       /** @description Human-readable connection display name. */
       displayName?: string;
       /**
-       * @description Whether the connection is enabled for syncing. `false` disables it
-       *     (pausing scheduled syncs and rejecting manual ones); omit to leave
-       *     unchanged.
+       * @description Whether the connection is enabled. `false` disables it (pausing scheduled
+       *     syncs and rejecting manual ones); omit to leave unchanged.
        */
       isActive?: boolean;
       /**
-       * @description Cron expression for scheduled imports. Omit to leave unchanged; send
-       *     `null` to clear it (make the connection manual-only).
+       * @description Sync configuration. Applies only to sync-capable providers. Omit to leave
+       *     unchanged.
        */
-      scheduleCron?: string;
-      /** @description Whether the connection imports data in or exports data out. */
-      syncMode?: components["schemas"]["SyncMode"];
+      sync?: components["schemas"]["SyncScheduleInput"];
     };
     /** @description Request to update file metadata. */
     UpdateFile: {
@@ -11578,7 +12198,7 @@ interface components {
      *     This enumeration corresponds to the `WEBHOOK_EVENT` PostgreSQL enum and is used
      *     to configure which events a webhook should receive notifications for.
      */
-    WebhookEvent: "file:created" | "file:updated" | "file:deleted" | "member:added" | "member:deleted" | "member:updated" | "connection:created" | "connection:updated" | "connection:deleted" | "connection:synced" | "connection:desynced";
+    WebhookEvent: "file:created" | "file:updated" | "file:deleted" | "member:added" | "member:deleted" | "member:updated" | "connection:created" | "connection:updated" | "connection:deleted" | "connection:sync.started" | "connection:sync.completed" | "connection:sync.failed" | "pipeline:created" | "pipeline:updated" | "pipeline:deleted" | "pipeline:run.started" | "pipeline:run.completed" | "pipeline:run.failed" | "policy:created" | "policy:updated" | "policy:deleted";
     /** @description Opaque whk identifier (whk_<uuid>). */
     WebhookId: string;
     /**
@@ -11712,133 +12332,193 @@ interface components {
 }
 //#endregion
 //#region src/datatypes/account.d.ts
-type Schemas$16 = components["schemas"];
-type Account = Schemas$16["Account"];
-type PublicAccount = Schemas$16["PublicAccount"];
-type UpdateAccount = Schemas$16["UpdateAccount"];
-type AccountRef = Schemas$16["AccountRef"];
+type Schemas$17 = components["schemas"];
+type Account = Schemas$17["Account"];
+type PublicAccount = Schemas$17["PublicAccount"];
+type UpdateAccount = Schemas$17["UpdateAccount"];
+type AccountRef = Schemas$17["AccountRef"];
 //#endregion
 //#region src/datatypes/activity.d.ts
-type Schemas$15 = components["schemas"];
-type Activity = Schemas$15["Activity"];
-type ActivityType = Schemas$15["ActivityType"];
-type ActivityPage = Schemas$15["ActivityPage"];
+type Schemas$16 = components["schemas"];
+type Activity = Schemas$16["Activity"];
+type ActivityType = Schemas$16["ActivityType"];
+type ActivityPage = Schemas$16["ActivityPage"];
 //#endregion
 //#region src/datatypes/api-token.d.ts
-type Schemas$14 = components["schemas"];
-type ApiToken = Schemas$14["ApiToken"];
-type ApiTokenWithJWT = Schemas$14["ApiTokenWithJWT"];
-type ApiTokenType = Schemas$14["ApiTokenType"];
-type CreateApiToken = Schemas$14["CreateApiToken"];
-type UpdateApiToken = Schemas$14["UpdateApiToken"];
-type TokenExpiration = Schemas$14["TokenExpiration"];
-type ApiTokenPage = Schemas$14["ApiTokenPage"];
+type Schemas$15 = components["schemas"];
+type ApiToken = Schemas$15["ApiToken"];
+type ApiTokenWithJWT = Schemas$15["ApiTokenWithJWT"];
+type ApiTokenType = Schemas$15["ApiTokenType"];
+type CreateApiToken = Schemas$15["CreateApiToken"];
+type UpdateApiToken = Schemas$15["UpdateApiToken"];
+type TokenExpiration = Schemas$15["TokenExpiration"];
+type ApiTokenPage = Schemas$15["ApiTokenPage"];
 //#endregion
 //#region src/datatypes/auth.d.ts
-type Schemas$13 = components["schemas"];
-type Login = Schemas$13["Login"];
-type Signup = Schemas$13["Signup"];
-type AuthToken = Schemas$13["AuthToken"];
+type Schemas$14 = components["schemas"];
+type Login = Schemas$14["Login"];
+type Signup = Schemas$14["Signup"];
+type AuthToken = Schemas$14["AuthToken"];
 //#endregion
 //#region src/datatypes/connection.d.ts
-type Schemas$12 = components["schemas"];
-type Connection = Schemas$12["Connection"];
-type CreateConnection = Schemas$12["CreateConnection"];
-type UpdateConnection = Schemas$12["UpdateConnection"];
-type ConnectionsQuery = Schemas$12["ConnectionsQuery"];
-type ConnectionPage = Schemas$12["ConnectionPage"];
-type SyncConnection = Schemas$12["SyncConnection"];
-type ConnectionSync = Schemas$12["ConnectionSync"];
-type ConnectionSyncPage = Schemas$12["ConnectionSyncPage"];
-type ConnectionVerification = Schemas$12["ConnectionVerification"];
-type SyncMode = Schemas$12["SyncMode"];
-type SyncStatus = Schemas$12["SyncStatus"];
-type SyncTriggerType = Schemas$12["SyncTriggerType"];
-type SyncDeletionPolicy = Schemas$12["SyncDeletionPolicy"];
-type ConnectionConfig = Schemas$12["ConnectionConfig"];
-type S3Credentials = Schemas$12["S3Credentials"];
-type AzureCredentials = Schemas$12["AzureCredentials"];
-type GcsCredentials = Schemas$12["GcsCredentials"];
+type Schemas$13 = components["schemas"];
+type Connection = Schemas$13["Connection"];
+type CreateConnection = Schemas$13["CreateConnection"];
+type UpdateConnection = Schemas$13["UpdateConnection"];
+type ConnectionsQuery = Schemas$13["ConnectionsQuery"];
+type ConnectionPage = Schemas$13["ConnectionPage"];
+type SyncConnection = Schemas$13["SyncConnection"];
+type ConnectionSync = Schemas$13["ConnectionSync"];
+type ConnectionSyncPage = Schemas$13["ConnectionSyncPage"];
+type ConnectionVerification = Schemas$13["ConnectionVerification"];
+type SyncMode = Schemas$13["SyncMode"];
+type SyncStatus = Schemas$13["SyncStatus"];
+type SyncTriggerType = Schemas$13["SyncTriggerType"];
+type SyncDeletionPolicy = Schemas$13["SyncDeletionPolicy"];
+type ConnectionConfig = Schemas$13["ConnectionConfig"];
+type StorageConfig = Schemas$13["StorageConfig"];
+type S3Credentials = Schemas$13["S3Credentials"];
+type AzureCredentials = Schemas$13["AzureCredentials"];
+type GcsCredentials = Schemas$13["GcsCredentials"];
+type LlmConfig = Schemas$13["LlmConfig"];
+type AnthropicCredentials = Schemas$13["AnthropicCredentials"];
+type OpenAiCredentials = Schemas$13["OpenAiCredentials"];
+type SyncSchedule = Schemas$13["SyncSchedule"];
+type SyncScheduleInput = Schemas$13["SyncScheduleInput"];
 //#endregion
 //#region src/datatypes/error.d.ts
-type Schemas$11 = components["schemas"];
-type ErrorResponse = Schemas$11["ErrorResponse"];
-type ValidationErrorDetail = Schemas$11["ValidationErrorDetail"];
+type Schemas$12 = components["schemas"];
+type ErrorResponse = Schemas$12["ErrorResponse"];
+type ValidationErrorDetail = Schemas$12["ValidationErrorDetail"];
 //#endregion
 //#region src/datatypes/file.d.ts
-type Schemas$10 = components["schemas"];
-type File = Schemas$10["File"];
-type UpdateFile = Schemas$10["UpdateFile"];
-type FileSource = Schemas$10["FileSource"];
-type FormatToken = Schemas$10["FormatToken"];
-type ModalityToken = Schemas$10["ModalityToken"];
-type ListFiles = Schemas$10["ListFiles"];
-type FilePage = Schemas$10["FilePage"];
+type Schemas$11 = components["schemas"];
+type File = Schemas$11["File"];
+type UpdateFile = Schemas$11["UpdateFile"];
+type FileSource = Schemas$11["FileSource"];
+type FormatToken = Schemas$11["FormatToken"];
+type ModalityToken = Schemas$11["ModalityToken"];
+type ListFiles = Schemas$11["ListFiles"];
+type FilePage = Schemas$11["FilePage"];
 //#endregion
 //#region src/datatypes/health.d.ts
-type Schemas$9 = components["schemas"];
-type Health = Schemas$9["Health"];
-type HealthStatus = Schemas$9["HealthStatus"];
-type ComponentHealth = Schemas$9["ComponentHealth"];
+type Schemas$10 = components["schemas"];
+type Health = Schemas$10["Health"];
+type HealthStatus = Schemas$10["HealthStatus"];
+type ComponentHealth = Schemas$10["ComponentHealth"];
 //#endregion
 //#region src/datatypes/invite.d.ts
-type Schemas$8 = components["schemas"];
-type Invite = Schemas$8["Invite"];
-type InviteSent = Schemas$8["InviteSent"];
-type CreateInvite = Schemas$8["CreateInvite"];
-type ReplyInvite = Schemas$8["ReplyInvite"];
-type GenerateInviteCode = Schemas$8["GenerateInviteCode"];
-type InviteCode = Schemas$8["InviteCode"];
-type InviteStatus = Schemas$8["InviteStatus"];
-type InviteExpiration = Schemas$8["InviteExpiration"];
-type ListInvites = Schemas$8["ListInvites"];
-type InviteSortField = Schemas$8["InviteSortField"];
-type SortOrder = Schemas$8["SortOrder"];
-type InvitePreview = Schemas$8["InvitePreview"];
-type InvitePage = Schemas$8["InvitePage"];
+type Schemas$9 = components["schemas"];
+type Invite = Schemas$9["Invite"];
+type InviteSent = Schemas$9["InviteSent"];
+type CreateInvite = Schemas$9["CreateInvite"];
+type ReplyInvite = Schemas$9["ReplyInvite"];
+type GenerateInviteCode = Schemas$9["GenerateInviteCode"];
+type InviteCode = Schemas$9["InviteCode"];
+type InviteStatus = Schemas$9["InviteStatus"];
+type InviteExpiration = Schemas$9["InviteExpiration"];
+type ListInvites = Schemas$9["ListInvites"];
+type InviteSortField = Schemas$9["InviteSortField"];
+type SortOrder = Schemas$9["SortOrder"];
+type InvitePreview = Schemas$9["InvitePreview"];
+type InvitePage = Schemas$9["InvitePage"];
 //#endregion
 //#region src/datatypes/member.d.ts
-type Schemas$7 = components["schemas"];
-type Member = Schemas$7["Member"];
-type UpdateMember = Schemas$7["UpdateMember"];
-type ListMembers = Schemas$7["ListMembers"];
-type MemberSortField = Schemas$7["MemberSortField"];
-type MemberPage = Schemas$7["MemberPage"];
+type Schemas$8 = components["schemas"];
+type Member = Schemas$8["Member"];
+type UpdateMember = Schemas$8["UpdateMember"];
+type ListMembers = Schemas$8["ListMembers"];
+type MemberSortField = Schemas$8["MemberSortField"];
+type MemberPage = Schemas$8["MemberPage"];
 //#endregion
 //#region src/datatypes/notification.d.ts
-type Schemas$6 = components["schemas"];
-type Notification = Schemas$6["Notification"];
-type NotificationEvent = Schemas$6["NotificationEvent"];
-type NotificationSettings = Schemas$6["NotificationSettings"];
-type UpdateNotificationSettings = Schemas$6["UpdateNotificationSettings"];
-type UnreadStatus = Schemas$6["UnreadStatus"];
-type NotificationPage = Schemas$6["NotificationPage"];
+type Schemas$7 = components["schemas"];
+type Notification = Schemas$7["Notification"];
+type NotificationEvent = Schemas$7["NotificationEvent"];
+type NotificationSettings = Schemas$7["NotificationSettings"];
+type UpdateNotificationSettings = Schemas$7["UpdateNotificationSettings"];
+type UnreadStatus = Schemas$7["UnreadStatus"];
+type NotificationPage = Schemas$7["NotificationPage"];
 //#endregion
 //#region src/datatypes/pagination.d.ts
-type Schemas$5 = components["schemas"];
-type CursorPagination = Schemas$5["CursorPagination"];
+type Schemas$6 = components["schemas"];
+type CursorPagination = Schemas$6["CursorPagination"];
 //#endregion
 //#region src/datatypes/pipeline.d.ts
-type Schemas$4 = components["schemas"];
-type Pipeline = Schemas$4["Pipeline"];
-type CreatePipeline = Schemas$4["CreatePipeline"];
-type UpdatePipeline = Schemas$4["UpdatePipeline"];
-type PipelineDefinition = Schemas$4["PipelineDefinition"];
-type PipelineFilter = Schemas$4["PipelineFilter"];
-type PipelineStatus = Schemas$4["PipelineStatus"];
-type PipelineTriggerType = Schemas$4["PipelineTriggerType"];
-type PipelineSummary = Schemas$4["PipelineSummary"];
-type PipelineSummaryPage = Schemas$4["PipelineSummaryPage"];
+type Schemas$5 = components["schemas"];
+type Pipeline = Schemas$5["Pipeline"];
+type CreatePipeline = Schemas$5["CreatePipeline"];
+type UpdatePipeline = Schemas$5["UpdatePipeline"];
+type PipelineDefinition = Schemas$5["PipelineDefinition"];
+type PipelineFilter = Schemas$5["PipelineFilter"];
+type PipelineStatus = Schemas$5["PipelineStatus"];
+type PipelineTriggerType = Schemas$5["PipelineTriggerType"];
+type PipelineSummary = Schemas$5["PipelineSummary"];
+type PipelineSummaryPage = Schemas$5["PipelineSummaryPage"];
 //#endregion
 //#region src/datatypes/policy.d.ts
+type Schemas$4 = components["schemas"];
+type Policy = Schemas$4["Policy"];
+type PolicySummary = Schemas$4["PolicySummary"];
+type PolicySummaryPage = Schemas$4["PolicySummaryPage"];
+type PolicyDefinition = Schemas$4["PolicyDefinition"];
+type CreatePolicy = Schemas$4["CreatePolicy"];
+type UpdatePolicy = Schemas$4["UpdatePolicy"];
+type PolicyRule = Schemas$4["PolicyRule"];
+type PolicyTemplate = Schemas$4["PolicyTemplate"];
+type HipaaDeidMethod = Schemas$4["HipaaDeidMethod"];
+type GdprArticle9Treatment = Schemas$4["GdprArticle9Treatment"];
+type PciDssPart = Schemas$4["PciDssPart"];
+type PciPanRender = Schemas$4["PciPanRender"];
+type PredicatedRule = Schemas$4["PredicatedRule"];
+type TableRule = Schemas$4["TableRule"];
+type Predicate = Schemas$4["Predicate"];
+type DocumentPredicate = Schemas$4["DocumentPredicate"];
+type ModalityRedactions = Schemas$4["ModalityRedactions"];
+type TextRedaction = Schemas$4["TextRedaction"];
+type ImageRedaction = Schemas$4["ImageRedaction"];
+type AudioRedaction = Schemas$4["AudioRedaction"];
+type TabularRedaction = Schemas$4["TabularRedaction"];
+type RetentionPolicy = Schemas$4["RetentionPolicy"];
+type Retention = Schemas$4["Retention"];
+type RetentionScope = Schemas$4["RetentionScope"];
+type Labels = Schemas$4["Labels"];
+type LabelGroup = Schemas$4["LabelGroup"];
+type LabelEntry = Schemas$4["LabelEntry"];
+type LabelLocale = Schemas$4["LabelLocale"];
+type Label = Schemas$4["Label"];
+type LocalizedText = Schemas$4["LocalizedText"];
+type Color = Schemas$4["Color"];
+type Waveform = Schemas$4["Waveform"];
+type ClampBucket = Schemas$4["ClampBucket"];
+type ConfidenceThreshold = Schemas$4["ConfidenceThreshold"];
+type DateStyle = Schemas$4["DateStyle"];
+type DateGranularity = Schemas$4["DateGranularity"];
+type LanguageTag = Schemas$4["LanguageTag"];
+type Sha2Algorithm = Schemas$4["Sha2Algorithm"];
+type TerminalFallback = Schemas$4["TerminalFallback"];
+//#endregion
+//#region src/datatypes/recognizer.d.ts
 type Schemas$3 = components["schemas"];
-type Policy = Schemas$3["Policy"];
-type PolicySummary = Schemas$3["PolicySummary"];
-type PolicySummaryPage = Schemas$3["PolicySummaryPage"];
-type PolicyDefinition = Schemas$3["PolicyDefinition"];
-type CreatePolicy = Schemas$3["CreatePolicy"];
-type UpdatePolicy = Schemas$3["UpdatePolicy"];
-type PolicyRule = Schemas$3["PolicyRule"];
+type RecognizerParams = Schemas$3["RecognizerParams"];
+type PatternRecognizerParams = Schemas$3["PatternRecognizerParams"];
+type ProviderSelection = Schemas$3["ProviderSelection"];
+type CustomPatternRule = Schemas$3["CustomPatternRule"];
+type CustomPatternVariant = Schemas$3["CustomPatternVariant"];
+type CustomPatternContext = Schemas$3["CustomPatternContext"];
+type CustomDictionary = Schemas$3["CustomDictionary"];
+type CustomDictionaryTerm = Schemas$3["CustomDictionaryTerm"];
+type PipelineDeduplication = Schemas$3["PipelineDeduplication"];
+type MergingStrategyParams = Schemas$3["MergingStrategyParams"];
+type TiebreakerParams = Schemas$3["TiebreakerParams"];
+type ScopeParams = Schemas$3["ScopeParams"];
+type ScopeMetadata = Schemas$3["ScopeMetadata"];
+type CountryCode = Schemas$3["CountryCode"];
+type Language = Schemas$3["Language"];
+type Languages = Schemas$3["Languages"];
+type LanguageSpan = Schemas$3["LanguageSpan"];
+type LanguageProvenance = Schemas$3["LanguageProvenance"];
+type Confidence = Schemas$3["Confidence"];
 //#endregion
 //#region src/datatypes/run.d.ts
 type Schemas$2 = components["schemas"];
@@ -11846,7 +12526,7 @@ type PipelineRun = Schemas$2["PipelineRun"];
 type CreatePipelineRun = Schemas$2["CreatePipelineRun"];
 type PipelineRunStatus = Schemas$2["PipelineRunStatus"];
 type PipelineRunPage = Schemas$2["PipelineRunPage"];
-type AnalyzedDocument = Schemas$2["AnalyzedDocument"];
+type Audit = Schemas$2["Audit"];
 type Artifact = Schemas$2["Artifact"];
 //#endregion
 //#region src/datatypes/webhook.d.ts
@@ -11869,5 +12549,5 @@ type UpdateWorkspace = Schemas["UpdateWorkspace"];
 type WorkspaceRole = Schemas["WorkspaceRole"];
 type WorkspacePage = Schemas["WorkspacePage"];
 //#endregion
-export { InviteExpiration as $, UpdateAccount as $t, PipelineDefinition as A, S3Credentials as At, NotificationPage as B, ApiToken as Bt, PolicyDefinition as C, ConnectionPage as Ct, UpdatePolicy as D, ConnectionsQuery as Dt, PolicySummaryPage as E, ConnectionVerification as Et, PipelineTriggerType as F, SyncTriggerType as Ft, Member as G, TokenExpiration as Gt, UnreadStatus as H, ApiTokenType as Ht, UpdatePipeline as I, UpdateConnection as It, UpdateMember as J, ActivityPage as Jt, MemberPage as K, UpdateApiToken as Kt, CursorPagination as L, AuthToken as Lt, PipelineStatus as M, SyncDeletionPolicy as Mt, PipelineSummary as N, SyncMode as Nt, CreatePipeline as O, CreateConnection as Ot, PipelineSummaryPage as P, SyncStatus as Pt, InviteCode as Q, PublicAccount as Qt, Notification as R, Login as Rt, Policy as S, ConnectionConfig as St, PolicySummary as T, ConnectionSyncPage as Tt, UpdateNotificationSettings as U, ApiTokenWithJWT as Ut, NotificationSettings as V, ApiTokenPage as Vt, ListMembers as W, CreateApiToken as Wt, GenerateInviteCode as X, Account as Xt, CreateInvite as Y, ActivityType as Yt, Invite as Z, AccountRef as Zt, CreatePipelineRun as _, UpdateFile as _t, WorkspaceRole as a, ListInvites as at, PipelineRunStatus as b, AzureCredentials as bt, UpdateWebhook as c, ComponentHealth as ct, WebhookEvent as d, File as dt, paths as en, InvitePage as et, WebhookPage as f, FilePage as ft, Artifact as g, ModalityToken as gt, AnalyzedDocument as h, ListFiles as ht, WorkspacePage as i, InviteStatus as it, PipelineFilter as j, SyncConnection as jt, Pipeline as k, GcsCredentials as kt, Webhook as l, Health as lt, WebhookStatus as m, FormatToken as mt, UpdateWorkspace as n, InviteSent as nt, CreateWebhook as o, ReplyInvite as ot, WebhookResult as p, FileSource as pt, MemberSortField as q, Activity as qt, Workspace as r, InviteSortField as rt, TestWebhook as s, SortOrder as st, CreateWorkspace as t, InvitePreview as tt, WebhookCreated as u, HealthStatus as ut, PipelineRun as v, ErrorResponse as vt, PolicyRule as w, ConnectionSync as wt, CreatePolicy as x, Connection as xt, PipelineRunPage as y, ValidationErrorDetail as yt, NotificationEvent as z, Signup as zt };
-//# sourceMappingURL=index-HUG77R_t.d.ts.map
+export { LabelGroup as $, Account as $n, InviteSent as $t, LanguageSpan as A, S3Credentials as An, PipelineSummary as At, AudioRedaction as B, AuthToken as Bn, UpdateNotificationSettings as Bt, CustomDictionary as C, ConnectionSyncPage as Cn, UpdatePolicy as Ct, CustomPatternVariant as D, GcsCredentials as Dn, PipelineDefinition as Dt, CustomPatternRule as E, CreateConnection as En, Pipeline as Et, ProviderSelection as F, SyncSchedule as Fn, Notification as Ft, DateGranularity as G, ApiTokenType as Gn, UpdateMember as Gt, Color as H, Signup as Hn, Member as Ht, RecognizerParams as I, SyncScheduleInput as In, NotificationEvent as It, GdprArticle9Treatment as J, TokenExpiration as Jn, Invite as Jt, DateStyle as K, ApiTokenWithJWT as Kn, CreateInvite as Kt, ScopeMetadata as L, SyncStatus as Ln, NotificationPage as Lt, MergingStrategyParams as M, SyncConnection as Mn, PipelineTriggerType as Mt, PatternRecognizerParams as N, SyncDeletionPolicy as Nn, UpdatePipeline as Nt, Language as O, LlmConfig as On, PipelineFilter as Ot, PipelineDeduplication as P, SyncMode as Pn, CursorPagination as Pt, LabelEntry as Q, ActivityType as Qn, InvitePreview as Qt, ScopeParams as R, SyncTriggerType as Rn, NotificationSettings as Rt, CountryCode as S, ConnectionSync as Sn, TextRedaction as St, CustomPatternContext as T, ConnectionsQuery as Tn, CreatePipeline as Tt, ConfidenceThreshold as U, ApiToken as Un, MemberPage as Ut, ClampBucket as V, Login as Vn, ListMembers as Vt, CreatePolicy as W, ApiTokenPage as Wn, MemberSortField as Wt, ImageRedaction as X, Activity as Xn, InviteExpiration as Xt, HipaaDeidMethod as Y, UpdateApiToken as Yn, InviteCode as Yt, Label as Z, ActivityPage as Zn, InvitePage as Zt, CreatePipelineRun as _, AnthropicCredentials as _n, RetentionScope as _t, WorkspaceRole as a, ComponentHealth as an, PciDssPart as at, PipelineRunStatus as b, ConnectionConfig as bn, TabularRedaction as bt, UpdateWebhook as c, File as cn, PolicyDefinition as ct, WebhookEvent as d, FormatToken as dn, PolicySummaryPage as dt, InviteSortField as en, AccountRef as er, LabelLocale as et, WebhookPage as f, ListFiles as fn, PolicyTemplate as ft, Audit as g, ValidationErrorDetail as gn, RetentionPolicy as gt, Artifact as h, ErrorResponse as hn, Retention as ht, WorkspacePage as i, SortOrder as in, ModalityRedactions as it, Languages as j, StorageConfig as jn, PipelineSummaryPage as jt, LanguageProvenance as k, OpenAiCredentials as kn, PipelineStatus as kt, Webhook as l, FilePage as ln, PolicyRule as lt, WebhookStatus as m, UpdateFile as mn, PredicatedRule as mt, UpdateWorkspace as n, ListInvites as nn, UpdateAccount as nr, LanguageTag as nt, CreateWebhook as o, Health as on, PciPanRender as ot, WebhookResult as p, ModalityToken as pn, Predicate as pt, DocumentPredicate as q, CreateApiToken as qn, GenerateInviteCode as qt, Workspace as r, ReplyInvite as rn, paths as rr, LocalizedText as rt, TestWebhook as s, HealthStatus as sn, Policy as st, CreateWorkspace as t, InviteStatus as tn, PublicAccount as tr, Labels as tt, WebhookCreated as u, FileSource as un, PolicySummary as ut, PipelineRun as v, AzureCredentials as vn, Sha2Algorithm as vt, CustomDictionaryTerm as w, ConnectionVerification as wn, Waveform as wt, Confidence as x, ConnectionPage as xn, TerminalFallback as xt, PipelineRunPage as y, Connection as yn, TableRule as yt, TiebreakerParams as z, UpdateConnection as zn, UnreadStatus as zt };
+//# sourceMappingURL=index-BCjrTe_H.d.ts.map