@nvisy/sdk 0.26.0 → 0.28.0

package/dist/{index-Zd5G8h44.d.ts → index-CEbvQONt.d.ts}

@@ -4578,7 +4578,7 @@ interface paths {
          *     here; labels are re-derived from the policy set on each
          *     anonymize call.
          *
-         *     No [`Default`] — a well-formed audit must carry a real
+         *     No [`Default`]: a well-formed audit must carry a real
          *     [`AuditContext`] with a real correlation id. Callers building
          *     an audit outside the analyze path construct it explicitly.
          */
@@ -5226,7 +5226,9 @@ interface paths {
       /**
        * @description Request payload for updating an existing workspace policy.
        *
-       *     Replacing the `definition` replaces the whole policy body.
+       *     Replacing the `definition` replaces the whole policy body. The policy's
+       *     template origin is server-owned and preserved across updates — it is not
+       *     settable here.
        */
       requestBody: {
         content: {
@@ -8113,29 +8115,51 @@ interface components {
       token: string;
     };
     /**
-     * @description Author-supplied rationale for a redaction: a policy name and an optional
-     *     description.
+     * @description Author-supplied rationale for a redaction: *under what authority* it was made.
      *
      *     Where the matched selection rule answers *which rule fired*, an
-     *     `Attribution` answers *under what authority* — a compliance clause, an
+     *     `Attribution` answers *why the policy demanded it* — a compliance clause, an
      *     internal policy, a data-handling rule. A policy author attaches it to a
-     *     selection rule (`Rule::because` in `elide-redaction`); the anonymizer
-     *     records it on the entity's [`Redaction`] event so an audit can trace a
-     *     change back to the policy that demanded it.
-     *
-     *     The `name` is the author's label for that policy (`"gdpr-art-17"`,
-     *     `"hipaa-safe-harbor"`, `"PII removal"`); an optional `description` adds
-     *     human context. Any stable machine identity a policy layer needs (a rule
-     *     UUID, a jurisdiction) is that layer's concern — it can encode it in the
-     *     name or carry it separately.
+     *     selection rule (`Rule::because` in `elide-redaction`); the anonymizer records
+     *     it on the entity's [`Redaction`] event so an audit can trace a change back to
+     *     the policy that demanded it.
+     *
+     *     The rationale takes one of two [`kind`](Attribution::kind)s, by how much
+     *     structure the author has ([`AttributionKind::Freeform`] /
+     *     [`AttributionKind::Cited`]). Orthogonal to that, an attribution may carry a
+     *     [`source_id`](Attribution::source_id): an opaque, caller-owned [`Uuid`] the
+     *     policy layer uses to link back to a source record (a rule, a request, a
+     *     document). elide-core stores and hashes it verbatim; it never resolves or
+     *     validates it.
      *
      *     [`Redaction`]: crate::entity::audit::AuditKind::Redaction
      */
     Attribution: {
+      /** @description The shape of the rationale: a freeform label or a formal citation. */
+      kind: components["schemas"]["AttributionKind"];
+      /**
+       * Format: uuid
+       * @description Opaque, caller-owned link to a source record, when given.
+       */
+      source_id?: string;
+    };
+    /** @description The shape of an [`Attribution`]'s rationale. */
+    AttributionKind: {
       /** @description Human-readable description (e.g. `"right to erasure"`), when given. */
       description?: string;
+      /** @constant */
+      kind: "freeform";
       /** @description The policy's name (e.g. `"gdpr-art-17"`, `"hipaa-safe-harbor"`). */
       name: string;
+    } | {
+      /** @description The authority cited (e.g. `"GDPR"`, `"HIPAA"`, `"internal-policy"`). */
+      authority: string;
+      /** @description The citation within that authority (e.g. `"Art. 17(1)"`, `"§164.514"`). */
+      citation: string;
+      /** @constant */
+      kind: "cited";
+      /** @description Why the citation applies here (e.g. `"data subject requested erasure"`). */
+      rationale: string;
     };
     /**
      * @description One node in an entity's audit DAG: a thing that happened, with its
@@ -8468,7 +8492,7 @@ interface components {
        *     `Some(...)` overrides that rule for this specific entity
        *     at apply time. Reviewer overrides take precedence over
        *     every policy rule and inherit the authority of the
-       *     [`Review::policy_id`] they name — the audit event's
+       *     [`Review::policy_id`] they name: the audit event's
        *     attribution stamps that policy so the trail names the
        *     authority under which the override fired.
        */
@@ -8561,7 +8585,7 @@ interface components {
      *     here; labels are re-derived from the policy set on each
      *     anonymize call.
      *
-     *     No [`Default`] — a well-formed audit must carry a real
+     *     No [`Default`]: a well-formed audit must carry a real
      *     [`AuditContext`] with a real correlation id. Callers building
      *     an audit outside the analyze path construct it explicitly.
      */
@@ -8583,7 +8607,7 @@ interface components {
        *     vocabulary analyze used without the caller re-passing an
        *     `AnalyzerParams`.
        *
-       *     Required on the wire — a missing context on an incoming
+       *     Required on the wire: a missing context on an incoming
        *     [`Audit`] rejects at deserialize time so the shape
        *     mismatch surfaces at load, not at apply.
        *
@@ -8608,11 +8632,11 @@ interface components {
      *     for `languages` and `countries` (typed, elide-native), a
      *     [`metadata`] sub-struct for free-form classification strings
      *     (`tags`, `purpose`, `audience`), and the analyze-time
-     *     [`correlation_id`]. The label catalog is not on here —
+     *     [`correlation_id`]. The label catalog is not on here -
      *     labels are policy-owned, and anonymize re-derives them from
      *     the policy set it was handed.
      *
-     *     No [`Default`] — `correlation_id` has no meaningful default
+     *     No [`Default`]: `correlation_id` has no meaningful default
      *     (a nil UUID would silently collapse unrelated audits under
      *     one bucket in downstream trace aggregators), so callers
      *     supply one explicitly. Everything else defaults to empty.
@@ -8630,12 +8654,12 @@ interface components {
        *     carried over so the anonymize path can link its own spans
        *     to the same request. The anonymize call supplies a fresh
        *     id from the passed [`Document`] as the anonymize-side
-       *     correlation id — this one stays as the analyze-side
+       *     correlation id: this one stays as the analyze-side
        *     pointer.
        *
        *     Required on the wire.
        *
-       *     [`Document`]: nvisy_schema::file::Document
+       *     [`Document`]: elide_wire::file::Document
        */
       correlationId: string;
       /**
@@ -8660,15 +8684,15 @@ interface components {
       /**
        * @description OCR mode the analyze call decoded with. Recorded so the
        *     anonymize call re-decodes the same document under the same
-       *     codec configuration — otherwise entity offsets stored in
+       *     codec configuration: otherwise entity offsets stored in
        *     the audit wouldn't line up against a differently-rendered
-       *     second decode. Defaults to [`OcrMode::Auto`] (the codec's
+       *     second decode. Defaults to [`RasterMode::Auto`] (the codec's
        *     built-in behaviour) when omitted.
        * @default {
        *       "kind": "auto"
        *     }
        */
-      ocrMode: components["schemas"]["OcrMode"];
+      rasterMode: components["schemas"]["RasterMode"];
     };
     /**
      * @description A 32-byte BLAKE3 digest.
@@ -8788,11 +8812,11 @@ interface components {
      *     Three forms, deserialized untagged so callers can pick the
      *     terser one for the case at hand:
      *
-     *     - **Plain string** (`"90 or older"`) — English-only shorthand.
-     *     - **Localized map** (`{"en": "90 or older", "fr": "90 ou plus"}`)
-     *       — one entry per language the deployment ships; missing
-     *       locales fall back to English at render time.
-     *     - **Format template** (`{"format": "{n} or older"}`) — the
+     *     - **Plain string** (`"90 or older"`): English-only shorthand.
+     *     - **Localized map** (`{"en": "90 or older", "fr": "90 ou plus"}`):
+     *       one entry per language the deployment ships; missing locales
+     *       fall back to English at render time.
+     *     - **Format template** (`{"format": "{n} or older"}`): the
      *       engine substitutes `{n}` for the threshold, so a ceiling of
      *       `90` renders `"90 or older"` without the caller repeating the
      *       number. Same rendering in every language.
@@ -9177,12 +9201,12 @@ interface components {
       template: components["schemas"]["PolicyTemplate"];
     } | {
       /**
-       * @description The structured policy body.
+       * @description The client-authored policy body.
        *
        *     Boxed to keep the enum small: an inline body is much larger than a
        *     template id, and most requests use a template.
        */
-      definition: components["schemas"]["PolicyDefinition"];
+      definition: components["schemas"]["PolicyDraft"];
       /** @constant */
       source: "inline";
     });
@@ -9322,7 +9346,7 @@ interface components {
      *
      *     Tagged by `modality` (snake_case) so deserialization picks the
      *     right variant and the entity vec inside is statically typed
-     *     per modality — apply-time we hand each variant back to elide
+     *     per modality: apply-time we hand each variant back to elide
      *     as a `Vec<Entity<M>>` for the appropriate `M`.
      *
      *     [`Audit`]: crate::Audit
@@ -9476,35 +9500,12 @@ interface components {
        */
       serviceAccountPath: string;
     };
-    /**
-     * @description The GDPR Article 9 template config — treatment axis fused
-     *     with sensitive-scope axis. Carried directly by
-     *     [`crate::PolicyTemplate::GdprArticle9`].
-     */
-    GdprArticle9: {
-      /**
-       * @description Which sensitive-data labels to cover. Defaults to
-       *     [`GdprSensitiveScope::Article9`] (nine Article 9(1)
-       *     categories only). Pick
-       *     [`GdprSensitiveScope::Article9WithReidHardening`] to add
-       *     Recital 26 quasi-identifiers, or
-       *     [`GdprSensitiveScope::Article9And10`] to also cover
-       *     Article 10 criminal-justice data.
-       * @default article9
-       */
-      scope: components["schemas"]["GdprSensitiveScope"];
-      /**
-       * @description Which operator to apply to matches. See
-       *     [`GdprArticle9Treatment`] for the tradeoff.
-       */
-      treatment: components["schemas"]["GdprArticle9Treatment"];
-    };
     /**
      * @description Which operator to apply to Article 9 special-category entities.
      *
-     *     - [`Erase`](Self::Erase) — the default no-lawful-basis posture.
+     *     - [`Erase`](Self::Erase): the default no-lawful-basis posture.
      *       Every match is removed.
-     *     - [`Pseudonymize`](Self::Pseudonymize) — identity-preserving
+     *     - [`Pseudonymize`](Self::Pseudonymize): identity-preserving
      *       surrogate. Suitable when an Article 9(2) carve-out
      *       (explicit consent, employment law, public-health public
      *       interest, ...) authorizes retention and downstream
@@ -9514,20 +9515,27 @@ interface components {
      */
     GdprArticle9Treatment: "erase" | "pseudonymize";
     /**
-     * @description Which sensitive-data labels the template's group covers.
+     * @description Which sensitive-data labels the template's scope covers.
      *
      *     Three tiers, each strictly widening the previous one so a
      *     caller upgrading through the tiers never loses coverage:
      *
-     *     - [`Article9`](Self::Article9) — the nine Article 9(1)
+     *     - [`Article9`](Self::Article9): the nine Article 9(1)
      *       special categories only. The default.
-     *     - [`Article9WithReidHardening`](Self::Article9WithReidHardening) —
-     *       Article 9 plus `date_of_birth` and `postal_code`. The two
-     *       quasi-identifiers Recital 26 highlights as re-identification
-     *       vectors when combined with special-category data. Non-
-     *       binding guidance, but reflects supervisory-authority
-     *       expectations on pseudonymization robustness.
-     *     - [`Article9And10`](Self::Article9And10) — Article 9 + Recital
+     *     - [`Article9WithReidHardening`](Self::Article9WithReidHardening) -
+     *       Article 9 plus the quasi-identifiers that carry the most join
+     *       risk against public datasets: `date_of_birth`, `postal_code`,
+     *       and `gender` (the combination that re-identifies most of a
+     *       population on its own), widened with `age`, `city`,
+     *       `nationality`, `citizenship`, and `occupation`.
+     *
+     *       A product-defined tier, not a complete answer to Recital 26:
+     *       the Recital sets a reasonableness test over "all the means
+     *       reasonably likely to be used" to re-identify, judged against
+     *       the caller's own data and adversary, so no fixed label list
+     *       can satisfy it. Callers whose threat model reaches wider
+     *       extend the policy after building it.
+     *     - [`Article9And10`](Self::Article9And10): Article 9 + Recital
      *       26 hardening + Article 10's criminal-justice labels
      *       (`criminal_record`, `criminal_charge`, `judicial_narrative`).
      *       Article 10 governs "personal data relating to criminal
@@ -9564,7 +9572,7 @@ interface components {
      *     The regulation names "account numbers" without enumerating
      *     them; HHS OCR's 2012 guidance doesn't narrow it either. In
      *     practice, covered entities and de-ID vendors treat bank
-     *     accounts, IBANs, and payment cards as the core §(J) set —
+     *     accounts, IBANs, and payment cards as the core §(J) set -
      *     [`Standard`](Self::Standard). Cryptocurrency wallet addresses
      *     are the newer case: they identify a specific holder's account
      *     by function, and the §(R) catch-all pulls in "any other unique
@@ -9586,46 +9594,25 @@ interface components {
      *
      *     The tradeoff is analytic yield vs. downstream constraint:
      *
-     *     - [`SafeHarbor`](Self::SafeHarbor) — strips all eighteen
+     *     - [`SafeHarbor`](Self::SafeHarbor): strips all eighteen
      *       identifier categories. No Data Use Agreement or statistician
      *       required, but dates, coarse geography, and ages ≥ 90 all
      *       disappear or collapse.
-     *     - [`LimitedDataSet`](Self::LimitedDataSet) — narrower
+     *     - [`LimitedDataSet`](Self::LimitedDataSet): narrower
      *       subtraction (§164.514(e)(2)) that keeps dates, town/city,
      *       state, ZIP, and ages verbatim. Suitable for research and
      *       public-health handoffs *only when* a Data Use Agreement
      *       governs the recipient's use.
-     *     - [`ExpertDetermination`](Self::ExpertDetermination) —
+     *     - [`ExpertDetermination`](Self::ExpertDetermination) -
      *       starting scaffold for §164.514(b)(1). Same label set as
      *       Safe Harbor with pseudonymization as the default terminal
      *       (identity-preserving across mentions). **Does not certify
-     *       de-identification** — a qualified statistician must
+     *       de-identification**: a qualified statistician must
      *       document that re-identification risk is "very small" under
      *       the applicable methodology before the output can be treated
      *       as de-identified.
      */
     HipaaDeidMethod: "safe_harbor" | "limited_data_set" | "expert_determination";
-    /**
-     * @description The HIPAA §164.514 template config — method axis fused with
-     *     account-identifier axis. Carried directly by
-     *     [`crate::PolicyTemplate::HipaaDeidentification`].
-     */
-    HipaaDeidentification: {
-      /**
-       * @description Which §(J) account-identifier labels to remove. Defaults
-       *     to [`HipaaAccountNumbers::Standard`] (bank account +
-       *     IBAN + payment card). Pick
-       *     [`HipaaAccountNumbers::Extended`] to add crypto wallet
-       *     addresses under the §(R) catch-all reading.
-       * @default standard
-       */
-      accounts: components["schemas"]["HipaaAccountNumbers"];
-      /**
-       * @description Which §164.514 method to apply. See [`HipaaDeidMethod`]
-       *     for the tradeoff.
-       */
-      method: components["schemas"]["HipaaDeidMethod"];
-    };
     /**
      * @description One node in an entity's audit DAG: a thing that happened, with its
      *     effect on confidence and its tamper-evident links.
@@ -9955,7 +9942,7 @@ interface components {
        *     `Some(...)` overrides that rule for this specific entity
        *     at apply time. Reviewer overrides take precedence over
        *     every policy rule and inherit the authority of the
-       *     [`Review::policy_id`] they name — the audit event's
+       *     [`Review::policy_id`] they name: the audit event's
        *     attribution stamps that policy so the trail names the
        *     authority under which the override fired.
        */
@@ -10258,64 +10245,6 @@ interface components {
       /** @description Label the entry matches on. */
       label: components["schemas"]["LabelRef"];
     };
-    /**
-     * @description Named cluster of [`LabelRef`]s a policy's rules can reference
-     *     by name via [`Predicate::LabelInGroup`].
-     *
-     *     Groups live on the [`PolicyDefinition`] that declares them
-     *     and are visible only to that policy's own rules. Templates
-     *     ship one group per canonical label list (`"hipaa_18"`,
-     *     `"gdpr_article_9"`, `"pci_chd"`, `"pci_sad"`), and every
-     *     rule that targets that list references the group by name
-     *     instead of respelling the labels. When elide adds a new label
-     *     to a category, extending the group covers every rule that
-     *     referenced it — no rule edit.
-     *
-     *     **Compilation**: at request time the engine synthesises a
-     *     `group:<policy_id>:<name>` tag on every label listed in the
-     *     group, then rewrites [`Predicate::LabelInGroup { group }`]
-     *     into [`Predicate::TagOneOf { tags: ["group:<policy_id>:<name>"] }`].
-     *     That routes through the same `Anonymizer::with_tag` fast
-     *     path as any authored tag — no new engine machinery, no
-     *     per-request walk over group membership. Scoping the tag by
-     *     `policy_id` keeps two policies that both declare `hipaa_18`
-     *     with different labelsets from stepping on each other.
-     *
-     *     **Unknown group names error at request validation**, not at
-     *     apply time. A typo doesn't silently underfire.
-     *
-     *     [`PolicyDefinition`]: super::PolicyDefinition
-     *     [`Predicate::LabelInGroup`]: super::predicate::Predicate::LabelInGroup
-     *     [`Predicate::LabelInGroup { group }`]: super::predicate::Predicate::LabelInGroup
-     *     [`Predicate::TagOneOf { tags: ["group:<policy_id>:<name>"] }`]: super::predicate::Predicate::TagOneOf
-     */
-    LabelGroup: {
-      /** @description Optional description for reviewers. */
-      description?: string;
-      /**
-       * @description Labels this group covers, by ref.
-       *
-       *     A label that doesn't appear in the request's compiled
-       *     [`LabelCatalog`] is silently skipped at tag-synthesis time
-       *     — a group can safely list labels the current build
-       *     doesn't emit (e.g. modality-gated ones); rules keyed off
-       *     the group still fire on whatever labels *are* present.
-       *
-       *     [`LabelCatalog`]: elide_core::entity::LabelCatalog
-       */
-      labels: components["schemas"]["LabelRef"][];
-      /**
-       * @description Stable name a [`Predicate::LabelInGroup`] references.
-       *
-       *     Free-form; a policy layer picks the vocabulary. Recommend
-       *     snake_case identifiers (`hipaa_18`, `gdpr_article_9`) —
-       *     they compile to `group:hipaa_18` tags on the catalog and
-       *     read cleanly in audit provenance.
-       *
-       *     [`Predicate::LabelInGroup`]: super::predicate::Predicate::LabelInGroup
-       */
-      name: string;
-    };
     /**
      * @description A label's human-facing text in one language: a display name and an
      *     optional fuller description.
@@ -10351,20 +10280,54 @@ interface components {
      */
     LabelRef: string;
     /**
-     * @description Per-policy label-catalog selection.
+     * @description A named set of labels a [`PolicyDefinition`] detects.
      *
-     *     Picks builtins by name + adds inline custom schemas.
+     *     Scopes live on the policy that declares them and are visible
+     *     only to that policy's own rules. Two policies that both declare
+     *     `hipaa_18` with different labelsets stay independent: nothing is
+     *     stamped onto the shared label catalog, so there is no request-
+     *     wide namespace one policy could use to reach into another's.
+     *
+     *     Templates ship one scope per canonical label list
+     *     (`"hipaa_safe_harbor"`, `"gdpr_article_9"`, `"ccpa_personal_information"`).
+     *     A policy may declare several: the union is what it detects, and
+     *     a rule can target one by name.
+     *
+     *     **Unknown scope names error at request validation**, not at
+     *     apply time. A typo doesn't silently underfire.
+     *
+     *     [`PolicyDefinition`]: super::PolicyDefinition
      */
-    Labels: {
+    LabelScope: {
       /**
-       * @description Builtin label names to enable.
+       * @description Why this set exists: the authority that defines it.
        *
-       *     E.g. `"email_address"`, `"phone_number"`. Unknown names
-       *     log a warning and are skipped.
+       *     A scope usually maps to one regulatory category (HIPAA's
+       *     eighteen identifiers, GDPR Article 9(1)'s nine special
+       *     categories), so this is where that mapping is recorded as
+       *     data rather than prose.
        */
-      builtins?: components["schemas"]["LabelRef"][];
-      /** @description Custom labels defined inline by the caller. */
-      custom?: components["schemas"]["Label"][];
+      attribution?: components["schemas"]["AttributionKind"];
+      /** @description Optional description for reviewers. */
+      description?: string;
+      /**
+       * @description The labels this scope covers, by ref.
+       *
+       *     A label the current build doesn't emit (a modality-gated
+       *     one, say) is simply never detected; rules keyed off the
+       *     scope still fire on whatever labels *are* present.
+       */
+      labels: components["schemas"]["LabelRef"][];
+      /**
+       * @description Stable name a [`Predicate::LabelInScope`] references.
+       *
+       *     Free-form; a policy layer picks the vocabulary. Recommend
+       *     snake_case identifiers (`hipaa_safe_harbor`,
+       *     `gdpr_article_9`): they read cleanly in audit provenance.
+       *
+       *     [`Predicate::LabelInScope`]: crate::Predicate::LabelInScope
+       */
+      name: string;
     };
     /**
      * @description Single language detection result.
@@ -10777,33 +10740,6 @@ interface components {
       /** @description Whether to send email notifications. */
       notifyViaEmail: boolean;
     };
-    /**
-     * @description Policy for turning a document's pages into images for OCR.
-     *
-     *     A born-digital PDF has a selectable text layer and needs no OCR; a
-     *     scanned one is image-only and must be rendered to images first. [`Auto`]
-     *     is the right default — extract text, render only what lacks it — but the
-     *     text-layer parser that drives that decision is not in place yet, so today
-     *     only [`Force`] actually renders.
-     *
-     *     Serializes with an internal `kind` tag (`{"kind": "auto"}`,
-     *     `{"kind": "force", "dpi": 300}`, `{"kind": "never"}`).
-     *
-     *     [`Auto`]: OcrMode::Auto
-     *     [`Force`]: OcrMode::Force
-     */
-    OcrMode: {
-      /** @constant */
-      kind: "auto";
-    } | {
-      /** @description Resolution to render pages at; [`Dpi::OCR`] (300) is typical. */
-      dpi: components["schemas"]["Dpi"];
-      /** @constant */
-      kind: "force";
-    } | {
-      /** @constant */
-      kind: "never";
-    };
     /**
      * @description How a workspace's documents are turned into images for OCR during detection.
      *
@@ -10851,12 +10787,12 @@ interface components {
     /**
      * @description Which PCI DSS subsection this template addresses.
      *
-     *     - [`PanRender`](Self::PanRender) — §3.5.1 render posture for
+     *     - [`PanRender`](Self::PanRender): §3.5.1 render posture for
      *       stored Primary Account Numbers. Carries a [`PciPanRender`]
      *       picking between the shipped render approaches.
-     *     - [`SavErase`](Self::SavErase) — §3.3.1 prohibition on
+     *     - [`SavErase`](Self::SavErase): §3.3.1 prohibition on
      *       storing Sensitive Authentication Data (CVV/CVC, track data,
-     *       PIN blocks) after authorization. No options — SAV has one
+     *       PIN blocks) after authorization. No options: SAV has one
      *       posture: erase.
      */
     PciDssPart: {
@@ -10893,7 +10829,7 @@ interface components {
      *     Callers wanting more than one dispatched from one policy
      *     compose multiple templates.
      *
-     *     [`Engine::with_key_provider`]: https://docs.rs/nvisy-engine/latest/nvisy_engine/struct.Engine.html
+     *     [`Engine::with_key_provider`]: https://docs.rs/elide-pipeline/latest/elide_pipeline/struct.Engine.html
      */
     PciPanRender: "truncate" | "truncate_last_four" | "hmac_sha256" | "hmac_sha512";
     /** @description Pipeline response. */
@@ -11253,53 +11189,97 @@ interface components {
      *     Identity is the UUID; `name` is display-only.
      */
     PolicyDefinition: {
+      /**
+       * @description Caller-authored label schemas this policy introduces.
+       *
+       *     Only for labels elide does not ship. These join the
+       *     recognition vocabulary alongside [`scopes`], and a rule may
+       *     target them the same way.
+       *
+       *     [`scopes`]: Self::scopes
+       */
+      custom?: components["schemas"]["Label"][];
       /** @description Optional description for reviewers. */
       description?: string;
       /**
-       * @description Per-policy catch-all. Fires when no rule in this policy
-       *     matched. Presence halts the chain; absence falls through
+       * @description Per-policy catch-all, applied to any detected entity in
+       *     the policy's vocabulary that no rule claimed. Fires when no
+       *     rule in this policy matched. Presence halts the chain; absence falls through
        *     to the next policy. [`Option`] enforces "at most one
        *     fallback per policy" at the type level.
        */
       fallback?: components["schemas"]["ModalityRedactions"];
-      /**
-       * @description Named clusters of [`LabelRef`]s this policy's rules may
-       *     reference by name via [`Predicate::LabelInGroup`]. Scoped
-       *     to this policy — a rule can only name a group its own
-       *     policy declared; unknown references error at request
-       *     validation. Two policies that both declare `hipaa_18` with
-       *     different labelsets stay independent.
-       *
-       *     [`LabelRef`]: elide_core::entity::LabelRef
-       *     [`Predicate::LabelInGroup`]: predicate::Predicate::LabelInGroup
-       */
-      groups?: components["schemas"]["LabelGroup"][];
       /**
        * Format: uuid
        * @description Stable identifier. UUIDv7 recommended (time-ordered);
        *     customer-supplied so re-submissions carry the same id.
-       *     Engine stamps this into the redaction event's
-       *     [`Attribution::name`] so reviewers can find this policy
-       *     from any redaction it drove.
-       *
-       *     [`Attribution::name`]: elide_core::entity::audit::Attribution::name
        */
       id: string;
       /**
-       * @description Vocabulary the policy operates over: builtins picked by
-       *     name plus caller-authored custom label schemas. Engine
-       *     unions every submitted policy's `labels` into a per-request
-       *     [`LabelCatalog`] used to drive recognizer dispatch and
-       *     tag-based [`Predicate::TagOneOf`] matching.
+       * @description Human-readable name. Display-only. Does not key anything.
        *
-       *     [`LabelCatalog`]: elide_core::entity::LabelCatalog
-       *     [`Predicate::TagOneOf`]: predicate::Predicate::TagOneOf
+       *     Names the policy in a redaction event's [`Attribution`]
+       *     when a rule that fired carried no [`AttributionKind::Cited`]
+       *     attribution to render.
+       *
+       *     [`Attribution`]: elide_core::entity::audit::Attribution
+       *     [`AttributionKind::Cited`]: elide_core::entity::audit::AttributionKind::Cited
        */
-      labels?: components["schemas"]["Labels"];
-      /** @description Human-readable name. Display-only. Does not key anything. */
       name: string;
       /** @description Ordered rules. First match wins within this policy. */
       rules?: components["schemas"]["PolicyRule"][];
+      /**
+       * @description What this policy detects: one or more named, attributed
+       *     label sets.
+       *
+       *     The union of every scope, plus [`custom`], is the policy's
+       *     recognition vocabulary. A label no scope names is never
+       *     detected, so no rule can fire on it and the policy is inert
+       *     with respect to it.
+       *
+       *     Detecting more than the rules act on is deliberate: scope a
+       *     whole regulatory category, write rules for the labels
+       *     needing special treatment, and let [`fallback`] sweep the
+       *     rest.
+       *
+       *     [`custom`]: Self::custom
+       *     [`fallback`]: Self::fallback
+       */
+      scopes?: components["schemas"]["LabelScope"][];
+      /**
+       * @description The shipped template this policy was built from, when it
+       *     was.
+       *
+       *     Provenance, not fidelity: callers are expected to mutate a
+       *     template's policy before submitting, so this records where
+       *     the policy came from and says nothing about whether it
+       *     still matches. `None` means hand-authored.
+       */
+      template?: components["schemas"]["TemplateOrigin"];
+    };
+    /**
+     * @description A client-authored policy body: the parts of a policy definition a caller may
+     *     set, without the fields the server owns.
+     *
+     *     The engine's `PolicyDefinition` also carries an `id` and a `template` origin.
+     *     Both are server-owned — the `id` is minted at creation and the `template`
+     *     records which built-in a policy was seeded from (provenance). Neither is
+     *     representable here, so a client cannot mint ids or forge provenance; the
+     *     server stamps them in [`into_definition`](PolicyDraft::into_definition).
+     */
+    PolicyDraft: {
+      /** @description Caller-authored custom label schemas this policy introduces. */
+      custom?: components["schemas"]["Label"][];
+      /** @description Optional description for reviewers. */
+      description?: string;
+      /** @description Per-policy catch-all, fired when no rule matched. */
+      fallback?: components["schemas"]["ModalityRedactions"];
+      /** @description Human-readable name. Display-only. */
+      name: string;
+      /** @description Ordered rules. First match wins within this policy. */
+      rules?: components["schemas"]["PolicyRule"][];
+      /** @description What this policy detects: named, attributed label sets. */
+      scopes?: components["schemas"]["LabelScope"][];
     };
     /**
      * @description Path parameters for policy operations.
@@ -11321,16 +11301,30 @@ interface components {
      *     [`PolicyDefinition`]: super::PolicyDefinition
      */
     PolicyRule: {
+      /**
+       * @description Why this rule exists: the authority it answers to.
+       *
+       *     The engine renders it into the redaction event's
+       *     [`Attribution`], so a reviewer sees the provision rather
+       *     than a bare UUID. `None` falls back to recording the
+       *     policy and rule ids alone.
+       *
+       *     Optional so ad-hoc and hand-authored rules stay cheap to
+       *     write; the shipped templates set it on every rule.
+       *
+       *     [`Attribution`]: elide_core::entity::audit::Attribution
+       */
+      attribution?: components["schemas"]["AttributionKind"];
       /** @description Optional description for reviewers. */
       description?: string;
       /**
        * Format: uuid
        * @description Stable identifier. UUIDv7 recommended. Engine stamps it
-       *     into the redaction event's [`Attribution::description`] so
+       *     into the redaction event's [`Attribution::source_id`] so
        *     reviewers can trace which rule fired. Every attachment a
        *     [`RuleDispatch::Table`] expands into shares this UUID.
        *
-       *     [`Attribution::description`]: elide_core::entity::audit::Attribution::description
+       *     [`Attribution::source_id`]: elide_core::entity::audit::Attribution::source_id
        */
       id: string;
       /** @description Human-readable name. Display-only. */
@@ -11343,7 +11337,7 @@ interface components {
        *     policy in the chain).
        *
        *     Boxed to keep [`RuleDispatch`]'s stack footprint
-       *     small — [`ModalityRedactions`] carries four optional
+       *     small: [`ModalityRedactions`] carries four optional
        *     per-modality operator enums and dominates the variant
        *     size. `Table`'s `Vec<LabelEntry>` already heap-allocates
        *     its entries, so boxing here keeps the two variants
@@ -11422,13 +11416,43 @@ interface components {
      *     operator options,
      *     `{"kind": "pci_dss_pan", "render": "hmac_sha256"}`.
      */
-    PolicyTemplate: ({
+    PolicyTemplate: {
+      /**
+       * @description Which §(J) account-identifier labels to remove. Defaults
+       *     to [`HipaaAccountNumbers::Standard`] (bank account +
+       *     IBAN + payment card). Pick
+       *     [`HipaaAccountNumbers::Extended`] to add crypto wallet
+       *     addresses under the §(R) catch-all reading.
+       * @default standard
+       */
+      accounts: components["schemas"]["HipaaAccountNumbers"];
       /** @constant */
       kind: "hipaa_deidentification";
-    } & components["schemas"]["HipaaDeidentification"]) | ({
+      /**
+       * @description Which §164.514 method to apply. See [`HipaaDeidMethod`]
+       *     for the tradeoff.
+       */
+      method: components["schemas"]["HipaaDeidMethod"];
+    } | {
       /** @constant */
       kind: "gdpr_article9";
-    } & components["schemas"]["GdprArticle9"]) | {
+      /**
+       * @description Which sensitive-data labels to cover. Defaults to
+       *     [`GdprSensitiveScope::Article9`] (nine Article 9(1)
+       *     categories only). Pick
+       *     [`GdprSensitiveScope::Article9WithReidHardening`] to add
+       *     the quasi-identifier set, or
+       *     [`GdprSensitiveScope::Article9And10`] to also cover
+       *     Article 10 criminal-justice data.
+       * @default article9
+       */
+      scope: components["schemas"]["GdprSensitiveScope"];
+      /**
+       * @description Which operator to apply to matches. See
+       *     [`GdprArticle9Treatment`] for the tradeoff.
+       */
+      treatment: components["schemas"]["GdprArticle9Treatment"];
+    } | {
       /** @constant */
       kind: "pci_dss";
       /**
@@ -11439,9 +11463,6 @@ interface components {
     } | {
       /** @constant */
       kind: "ccpa";
-    } | {
-      /** @constant */
-      kind: "soc2_secrets";
     };
     /**
      * @description Closed polygon, given by its ordered vertices.
@@ -11475,14 +11496,14 @@ interface components {
       /** @description Allowed tags. */
       tags: string[];
     } | {
+      /** @constant */
+      kind: "labelInScope";
       /**
-       * @description Name of the [`LabelGroup`] to match against.
+       * @description Name of the [`LabelScope`] to match against.
        *
-       *     [`LabelGroup`]: super::LabelGroup
+       *     [`LabelScope`]: super::LabelScope
        */
-      group: string;
-      /** @constant */
-      kind: "labelInGroup";
+      scope: string;
     } | {
       /** @description Cluster id to match. */
       coref: string;
@@ -11529,6 +11550,33 @@ interface components {
       /** Format: uint */
       start: number;
     };
+    /**
+     * @description Policy for rendering a document's pages to images.
+     *
+     *     [`Auto`] is the default: use the text layer where it exists (redact by
+     *     deleting glyphs) and render only where it is absent. [`Always`] renders
+     *     every page regardless of the text layer, for documents whose text is
+     *     missing, garbled, or a watermark. [`Never`] relies on the text layer only.
+     *
+     *     Serializes with an internal `kind` tag (`{"kind": "auto"}`,
+     *     `{"kind": "always", "dpi": 300}`, `{"kind": "never"}`).
+     *
+     *     [`Auto`]: RasterMode::Auto
+     *     [`Always`]: RasterMode::Always
+     *     [`Never`]: RasterMode::Never
+     */
+    RasterMode: {
+      /** @constant */
+      kind: "auto";
+    } | {
+      /** @description Resolution to render pages at; [`Dpi::OCR`] (300) is typical. */
+      dpi: components["schemas"]["Dpi"];
+      /** @constant */
+      kind: "always";
+    } | {
+      /** @constant */
+      kind: "never";
+    };
     /** @description The engine's registered recognizers, grouped by kind. */
     RecognizerCatalog: {
       /** @description LLM recognizers. */
@@ -11547,20 +11595,28 @@ interface components {
      *
      *     Owned rather than borrowing from the engine so callers can
      *     carry the value past the borrow that produced it. Cloning is
-     *     cheap — [`HipStr`] shares the backing string via an `Arc`
+     *     cheap: [`HipStr`] shares the backing string via an `Arc`
      *     header.
      */
     RegisteredRecognizer: {
       /** @description Optional human-readable description. */
       description?: string;
       /**
-       * @description Recognizer name — the identifier a request's allowlist
+       * @description Recognizer name: the identifier a request's allowlist
        *     picks by.
        */
       name: string;
       /**
        * @description Provider slug. NER: `"bento"`, `"mock"`. LLM: `"openai"`,
        *     `"anthropic"`, `"gemini"`, `"ollama"`, `"mock"`.
+       *
+       *     Owned so the type deserializes from a runtime buffer: a
+       *     `&'static str` field would make the derive emit
+       *     `Deserialize<'static>` only, which compiles against string
+       *     literals but not against an owned `String` or a reader -
+       *     the shapes a host actually decodes from. Borrowing a
+       *     `&'static str` into a [`HipStr`] does not allocate, so
+       *     engine-side construction stays free.
        */
       provider: string;
     };
@@ -11641,7 +11697,7 @@ interface components {
      * @description A reviewer-supplied redaction override with the policy
      *     authority it draws from.
      *
-     *     The `policy_id` isn't just for audit — it also picks which
+     *     The `policy_id` isn't just for audit: it also picks which
      *     per-policy pseudonym vault and per-policy [`KeyProvider`] the
      *     override's operator resolves against, so an override using
      *     [`Pseudonymize`] or [`HmacHash`] stays consistent with the
@@ -11665,7 +11721,7 @@ interface components {
        *     the anonymize request. The audit event stamps this UUID
        *     as the attribution `name`.
        *
-       *     [`PolicyDefinition`]: nvisy_schema::policy::PolicyDefinition
+       *     [`PolicyDefinition`]: elide_governance::PolicyDefinition
        */
       policyId: string;
     };
@@ -12336,7 +12392,7 @@ interface components {
        *     `Some(...)` overrides that rule for this specific entity
        *     at apply time. Reviewer overrides take precedence over
        *     every policy rule and inherit the authority of the
-       *     [`Review::policy_id`] they name — the audit event's
+       *     [`Review::policy_id`] they name: the audit event's
        *     attribution stamps that policy so the trail names the
        *     authority under which the override fired.
        */
@@ -12429,6 +12485,39 @@ interface components {
       /** @constant */
       kind: "drop_column";
     };
+    /**
+     * @description The template a [`PolicyDefinition`] was built from.
+     *
+     *     Records **provenance, not fidelity**. Templates are plain data
+     *     and callers are expected to mutate the returned policy before
+     *     submitting it (swapping an operator, widening a scope), so this
+     *     says "built from `hipaa_deid_safe_harbor` v1.0.0" and nothing
+     *     about whether the policy still matches what that template
+     *     ships. A reviewer who needs that rebuilds the template and
+     *     diffs.
+     *
+     *     `None` on a policy means hand-authored, not "unknown template".
+     *
+     *     Both fields are needed: a policy built from v1 of a template
+     *     can differ materially from one built from v2 (a widened label
+     *     set, a changed operator), and an audit that records only the id
+     *     cannot tell the two apart.
+     *
+     *     [`PolicyDefinition`]: super::PolicyDefinition
+     */
+    TemplateOrigin: {
+      /**
+       * @description The template's machine key: `"hipaa_deid_safe_harbor"`,
+       *     `"pci_dss_pan_hmac_sha256"`. Stable across version bumps.
+       */
+      id: string;
+      /**
+       * @description The template's own semver version, distinct from the
+       *     crate's release version. A shipped template bumps this when
+       *     its labelset or operator dispatch changes.
+       */
+      version: string;
+    };
     /**
      * @description Fallback operator that runs when a declinable primary
      *     ([`TextRedaction::Clamp`], [`TextRedaction::GeneralizeDate`])
@@ -12442,7 +12531,7 @@ interface components {
      *     or `→ Mask` / `→ Keep` on the rare occasion those fit.
      *
      *     Absent from the primary's spec, elide's baked-in default is
-     *     [`Erase`] — a bare [`TextRedaction::Clamp`] without a `fallback`
+     *     [`Erase`]: a bare [`TextRedaction::Clamp`] without a `fallback`
      *     erases values that aren't numeric.
      *
      *     [`Erase`]: TerminalFallback::Erase
@@ -12812,7 +12901,7 @@ interface components {
        *     `Some(...)` overrides that rule for this specific entity
        *     at apply time. Reviewer overrides take precedence over
        *     every policy rule and inherit the authority of the
-       *     [`Review::policy_id`] they name — the audit event's
+       *     [`Review::policy_id`] they name: the audit event's
        *     attribution stamps that policy so the trail names the
        *     authority under which the override fired.
        */
@@ -13165,11 +13254,13 @@ interface components {
     /**
      * @description Request payload for updating an existing workspace policy.
      *
-     *     Replacing the `definition` replaces the whole policy body.
+     *     Replacing the `definition` replaces the whole policy body. The policy's
+     *     template origin is server-owned and preserved across updates — it is not
+     *     settable here.
      */
     UpdatePolicy: {
       /** @description New policy body (replaces the stored definition). */
-      definition?: components["schemas"]["PolicyDefinition"];
+      definition?: components["schemas"]["PolicyDraft"];
       /** @description Policy description. */
       description?: string;
       /** @description Human-readable policy display name. */
@@ -13546,6 +13637,7 @@ interface components {
 //#endregion
 //#region src/datatypes/account.d.ts
 type Schemas$19 = components["schemas"];
+type Handle = Schemas$19["Handle"];
 type Account = Schemas$19["Account"];
 type PublicAccount = Schemas$19["PublicAccount"];
 type UpdateAccount = Schemas$19["UpdateAccount"];
@@ -13581,10 +13673,11 @@ type Schemas$16 = components["schemas"];
 type EntityGroup = Schemas$16["EntityGroup"];
 type AuditContext = Schemas$16["AuditContext"];
 type EntityCoRef = Schemas$16["EntityCoRef"];
-type OcrMode = Schemas$16["OcrMode"];
+type RasterMode = Schemas$16["RasterMode"];
 type Dpi = Schemas$16["Dpi"];
 type Review = Schemas$16["Review"];
 type Attribution = Schemas$16["Attribution"];
+type AttributionKind = Schemas$16["AttributionKind"];
 type LeakProfile = Schemas$16["LeakProfile"];
 type RuleMatch = Schemas$16["RuleMatch"];
 type ModelEvent = Schemas$16["ModelEvent"];
@@ -13647,6 +13740,7 @@ type RegisteredRecognizer = Schemas$14["RegisteredRecognizer"];
 //#endregion
 //#region src/datatypes/connection.d.ts
 type Schemas$13 = components["schemas"];
+type ConnectionId = Schemas$13["ConnectionId"];
 type Connection = Schemas$13["Connection"];
 type CreateConnection = Schemas$13["CreateConnection"];
 type UpdateConnection = Schemas$13["UpdateConnection"];
@@ -13759,14 +13853,14 @@ type Policy = Schemas$4["Policy"];
 type PolicySummary = Schemas$4["PolicySummary"];
 type PolicySummaryPage = Schemas$4["PolicySummaryPage"];
 type PolicyDefinition = Schemas$4["PolicyDefinition"];
+type PolicyDraft = Schemas$4["PolicyDraft"];
 type CreatePolicy = Schemas$4["CreatePolicy"];
 type UpdatePolicy = Schemas$4["UpdatePolicy"];
 type PolicyRule = Schemas$4["PolicyRule"];
 type PolicyTemplate = Schemas$4["PolicyTemplate"];
-type HipaaDeidentification = Schemas$4["HipaaDeidentification"];
+type TemplateOrigin = Schemas$4["TemplateOrigin"];
 type HipaaDeidMethod = Schemas$4["HipaaDeidMethod"];
 type HipaaAccountNumbers = Schemas$4["HipaaAccountNumbers"];
-type GdprArticle9 = Schemas$4["GdprArticle9"];
 type GdprArticle9Treatment = Schemas$4["GdprArticle9Treatment"];
 type GdprSensitiveScope = Schemas$4["GdprSensitiveScope"];
 type PciDssPart = Schemas$4["PciDssPart"];
@@ -13777,11 +13871,11 @@ type TextRedaction = Schemas$4["TextRedaction"];
 type ImageRedaction = Schemas$4["ImageRedaction"];
 type AudioRedaction = Schemas$4["AudioRedaction"];
 type TabularRedaction = Schemas$4["TabularRedaction"];
-type Labels = Schemas$4["Labels"];
-type LabelGroup = Schemas$4["LabelGroup"];
+type LabelScope = Schemas$4["LabelScope"];
 type LabelEntry = Schemas$4["LabelEntry"];
 type LabelLocale = Schemas$4["LabelLocale"];
 type Label = Schemas$4["Label"];
+type LabelRef = Schemas$4["LabelRef"];
 type LocalizedText = Schemas$4["LocalizedText"];
 type Color = Schemas$4["Color"];
 type Waveform = Schemas$4["Waveform"];
@@ -13795,6 +13889,7 @@ type TerminalFallback = Schemas$4["TerminalFallback"];
 //#endregion
 //#region src/datatypes/run.d.ts
 type Schemas$3 = components["schemas"];
+type RunId = Schemas$3["RunId"];
 type PipelineRun = Schemas$3["PipelineRun"];
 type RunMetadata = Schemas$3["RunMetadata"];
 type CreatePipelineRun = Schemas$3["CreatePipelineRun"];
@@ -13817,6 +13912,7 @@ type Confidence = Schemas$2["Confidence"];
 //#endregion
 //#region src/datatypes/webhook.d.ts
 type Schemas$1 = components["schemas"];
+type WebhookId = Schemas$1["WebhookId"];
 type Webhook = Schemas$1["Webhook"];
 type WebhookCreated = Schemas$1["WebhookCreated"];
 type CreateWebhook = Schemas$1["CreateWebhook"];
@@ -13840,5 +13936,5 @@ type Retention = Schemas["Retention"];
 type RetentionSettings = Schemas["RetentionSettings"];
 type RetentionOverride = Schemas["RetentionOverride"];
 //#endregion
-export { LabelLocale as $, AudioAuditEvent as $n, CreateApiToken as $r, GenerateInviteCode as $t, PipelineRun as A, ConnectionVerification as An, RangeOfUint as Ar, ConnectionSyncFailedParams as At, CreatePolicy as B, SyncMode as Bn, TextAuditEvent as Br, PipelineRunCompletedParams as Bt, LanguageProvenance as C, AnthropicCredentials as Cn, LeakProfile as Cr, PipelineStatus as Ct, ScopeParams as D, ConnectionPage as Dn, PatternEvent as Dr, UpdatePipeline as Dt, ScopeMetadata as E, ConnectionConfig as En, OperatorId as Er, PipelineTriggerType as Et, RunStatusEvent as F, OpenAiCredentials as Fn, TabularAuditLog as Fr, NotificationEvent as Ft, GdprSensitiveScope as G, UpdateConnection as Gn, TextEntityRecord as Gr, UnreadStatus as Gt, DateStyle as H, SyncScheduleInput as Hn, TextAuditLog as Hr, SystemAnnouncementParams as Ht, AudioRedaction as I, S3Credentials as In, TabularEntity as Ir, NotificationPage as It, HipaaDeidentification as J, RegisteredRecognizer as Jn, TimeSpan as Jr, Member as Jt, HipaaAccountNumbers as K, LabelCatalog as Kn, TextHint as Kr, UpdateNotificationSettings as Kt, ClampBucket as L, StorageConfig as Ln, TabularEntityRecord as Lr, NotificationPayload as Lt, PipelineRunStatus as M, CreateConnection as Mn, RuleMatch as Mr, MemberInvitedParams as Mt, PipelineRunsQuery as N, GcsCredentials as Nn, TabularAuditEvent as Nr, MemberJoinedParams as Nt, Audit as O, ConnectionSync as On, Point as Or, CursorPagination as Ot, RunMetadata as P, LlmConfig as Pn, TabularAuditKind as Pr, Notification as Pt, LabelGroup as Q, Attribution as Qn, ApiTokenWithJWT as Qr, CreateInvite as Qt, Color as R, SyncConnection as Rn, TabularHint as Rr, NotificationSettings as Rt, Language as S, ValidationErrorDetail as Sn, ImageLocation as Sr, PipelineFilter as St, Languages as T, Connection as Tn, OcrMode as Tr, PipelineSummaryPage as Tt, GdprArticle9 as U, SyncStatus as Un, TextData as Ur, SystemReportParams as Ut, DateGranularity as V, SyncSchedule as Vn, TextAuditKind as Vr, PipelineRunFailedParams as Vt, GdprArticle9Treatment as W, SyncTriggerType as Wn, TextEntity as Wr, UnreadCountEvent as Wt, Label as X, Login as Xn, ApiTokenPage as Xr, MemberSortField as Xt, ImageRedaction as Y, AuthToken as Yn, ApiToken as Yr, MemberPage as Yt, LabelEntry as Z, Signup as Zn, ApiTokenType as Zr, UpdateMember as Zt, WebhookPage as _, UpdateAccount as _i, FormatToken as _n, ImageAuditLog as _r, UpdatePolicy as _t, RetentionSettings as a, ConnectionActivityParams as ai, InviteSent as an, AudioHint as ar, PciPanRender as at, Confidence as b, UpdateFile as bn, ImageEntityRecord as br, Pipeline as bt, WorkspacePage as c, MemberActivityParams as ci, ListInvites as cn, AuditHash as cr, PolicyRule as ct, CreateWebhook as d, PolicyActivityParams as di, ComponentHealth as dn, Dimensions as dr, PolicyTemplate as dt, TokenExpiration as ei, Invite as en, AudioAuditKind as er, Labels as et, TestWebhook as f, WebhookActivityParams as fi, Health as fn, Dpi as fr, Predicate as ft, WebhookEvent as g, PublicAccount as gi, FilePage as gn, ImageAuditKind as gr, TextRedaction as gt, WebhookCreated as h, AccountRef as hi, FileKind as hn, ImageAuditEvent as hr, TerminalFallback as ht, RetentionOverride as i, ActivityPayload as ii, InvitePreview as in, AudioEntityRecord as ir, PciDssPart as it, PipelineRunPage as j, ConnectionsQuery as jn, Review as jr, MarkedReadStatus as jt, CreatePipelineRun as k, ConnectionSyncPage as kn, Polygon as kr, ConnectionSyncCompletedParams as kt, WorkspaceRole as l, PipelineActivityParams as li, ReplyInvite as ln, BoundingBox as lr, PolicySummary as lt, Webhook as m, Account as mi, File as mn, EntityGroup as mr, TabularRedaction as mt, OcrPolicy as n, Activity as ni, InviteExpiration as nn, AudioData as nr, LocalizedText as nt, UpdateWorkspace as o, FileActivityParams as oi, InviteSortField as on, AudioLocation as or, Policy as ot, UpdateWebhook as p, WorkspaceActivityParams as pi, HealthStatus as pn, EntityCoRef as pr, Sha2Algorithm as pt, HipaaDeidMethod as q, RecognizerCatalog as qn, TextLocation as qr, ListMembers as qt, Retention as r, ActivityPage as ri, InvitePage as rn, AudioEntity as rr, ModalityRedactions as rt, Workspace as s, InviteActivityParams as si, InviteStatus as sn, AuditContext as sr, PolicyDefinition as st, CreateWorkspace as t, UpdateApiToken as ti, InviteCode as tn, AudioAuditLog as tr, LanguageTag as tt, WorkspaceSettings as u, PipelineRunActivityParams as ui, SortOrder as un, Category as ur, PolicySummaryPage as ut, WebhookResult as v, paths as vi, ListFiles as vn, ImageData as vr, Waveform as vt, LanguageSpan as w, AzureCredentials as wn, ModelEvent as wr, PipelineSummary as wt, CountryCode as x, ErrorResponse as xn, ImageHint as xr, PipelineDefinition as xt, WebhookStatus as y, ModalityToken as yn, ImageEntity as yr, CreatePipeline as yt, ConfidenceThreshold as z, SyncDeletionPolicy as zn, TabularLocation as zr, PipelineRunAnalyzedParams as zt };
-//# sourceMappingURL=index-Zd5G8h44.d.ts.map
+export { LabelRef as $, Login as $n, ApiToken as $r, UpdateMember as $t, CreatePipelineRun as A, ConnectionPage as An, PatternEvent as Ar, CursorPagination as At, Color as B, StorageConfig as Bn, TabularEntity as Br, NotificationSettings as Bt, Language as C, paths as Ci, ErrorResponse as Cn, ImageEntity as Cr, PipelineDefinition as Ct, ScopeMetadata as D, Connection as Dn, LeakProfile as Dr, PipelineSummaryPage as Dt, Languages as E, AzureCredentials as En, ImageLocation as Er, PipelineSummary as Et, RunId as F, CreateConnection as Fn, Review as Fr, MemberJoinedParams as Ft, GdprArticle9Treatment as G, SyncScheduleInput as Gn, TextAuditKind as Gr, SystemReportParams as Gt, CreatePolicy as H, SyncDeletionPolicy as Hn, TabularHint as Hr, PipelineRunCompletedParams as Ht, RunMetadata as I, GcsCredentials as In, RuleMatch as Ir, Notification as It, HipaaDeidMethod as J, UpdateConnection as Jn, TextEntity as Jr, UpdateNotificationSettings as Jt, GdprSensitiveScope as K, SyncStatus as Kn, TextAuditLog as Kr, UnreadCountEvent as Kt, RunStatusEvent as L, LlmConfig as Ln, TabularAuditEvent as Lr, NotificationEvent as Lt, PipelineRunPage as M, ConnectionSyncPage as Mn, Polygon as Mr, ConnectionSyncFailedParams as Mt, PipelineRunStatus as N, ConnectionVerification as Nn, RangeOfUint as Nr, MarkedReadStatus as Nt, ScopeParams as O, ConnectionConfig as On, ModelEvent as Or, PipelineTriggerType as Ot, PipelineRunsQuery as P, ConnectionsQuery as Pn, RasterMode as Pr, MemberInvitedParams as Pt, LabelLocale as Q, AuthToken as Qn, TimeSpan as Qr, MemberSortField as Qt, AudioRedaction as R, OpenAiCredentials as Rn, TabularAuditKind as Rr, NotificationPage as Rt, CountryCode as S, UpdateAccount as Si, UpdateFile as Sn, ImageData as Sr, Pipeline as St, LanguageSpan as T, AnthropicCredentials as Tn, ImageHint as Tr, PipelineStatus as Tt, DateGranularity as U, SyncMode as Un, TabularLocation as Ur, PipelineRunFailedParams as Ut, ConfidenceThreshold as V, SyncConnection as Vn, TabularEntityRecord as Vr, PipelineRunAnalyzedParams as Vt, DateStyle as W, SyncSchedule as Wn, TextAuditEvent as Wr, SystemAnnouncementParams as Wt, Label as X, RecognizerCatalog as Xn, TextHint as Xr, Member as Xt, ImageRedaction as Y, LabelCatalog as Yn, TextEntityRecord as Yr, ListMembers as Yt, LabelEntry as Z, RegisteredRecognizer as Zn, TextLocation as Zr, MemberPage as Zt, WebhookId as _, WorkspaceActivityParams as _i, FileKind as _n, EntityCoRef as _r, TerminalFallback as _t, RetentionSettings as a, UpdateApiToken as ai, InvitePage as an, AudioAuditLog as ar, PciPanRender as at, WebhookStatus as b, Handle as bi, ListFiles as bn, ImageAuditKind as br, Waveform as bt, WorkspacePage as c, ActivityPayload as ci, InviteSortField as cn, AudioEntityRecord as cr, PolicyDraft as ct, CreateWebhook as d, InviteActivityParams as di, ReplyInvite as dn, AuditContext as dr, PolicySummaryPage as dt, ApiTokenPage as ei, CreateInvite as en, Signup as er, LabelScope as et, TestWebhook as f, MemberActivityParams as fi, SortOrder as fn, AuditHash as fr, PolicyTemplate as ft, WebhookEvent as g, WebhookActivityParams as gi, File as gn, Dpi as gr, TemplateOrigin as gt, WebhookCreated as h, PolicyActivityParams as hi, HealthStatus as hn, Dimensions as hr, TabularRedaction as ht, RetentionOverride as i, TokenExpiration as ii, InviteExpiration as in, AudioAuditKind as ir, PciDssPart as it, PipelineRun as j, ConnectionSync as jn, Point as jr, ConnectionSyncCompletedParams as jt, Audit as k, ConnectionId as kn, OperatorId as kr, UpdatePipeline as kt, WorkspaceRole as l, ConnectionActivityParams as li, InviteStatus as ln, AudioHint as lr, PolicyRule as lt, Webhook as m, PipelineRunActivityParams as mi, Health as mn, Category as mr, Sha2Algorithm as mt, OcrPolicy as n, ApiTokenWithJWT as ni, Invite as nn, AttributionKind as nr, LocalizedText as nt, UpdateWorkspace as o, Activity as oi, InvitePreview as on, AudioData as or, Policy as ot, UpdateWebhook as p, PipelineActivityParams as pi, ComponentHealth as pn, BoundingBox as pr, Predicate as pt, HipaaAccountNumbers as q, SyncTriggerType as qn, TextData as qr, UnreadStatus as qt, Retention as r, CreateApiToken as ri, InviteCode as rn, AudioAuditEvent as rr, ModalityRedactions as rt, Workspace as s, ActivityPage as si, InviteSent as sn, AudioEntity as sr, PolicyDefinition as st, CreateWorkspace as t, ApiTokenType as ti, GenerateInviteCode as tn, Attribution as tr, LanguageTag as tt, WorkspaceSettings as u, FileActivityParams as ui, ListInvites as un, AudioLocation as ur, PolicySummary as ut, WebhookPage as v, Account as vi, FilePage as vn, EntityGroup as vr, TextRedaction as vt, LanguageProvenance as w, ValidationErrorDetail as wn, ImageEntityRecord as wr, PipelineFilter as wt, Confidence as x, PublicAccount as xi, ModalityToken as xn, ImageAuditLog as xr, CreatePipeline as xt, WebhookResult as y, AccountRef as yi, FormatToken as yn, ImageAuditEvent as yr, UpdatePolicy as yt, ClampBucket as z, S3Credentials as zn, TabularAuditLog as zr, NotificationPayload as zt };
+//# sourceMappingURL=index-CEbvQONt.d.ts.map