@nvisy/sdk 0.33.0 → 0.35.0

package/dist/{index-0_K3HaXB.d.ts → index-BPKkfko3.d.ts}

@@ -1227,23 +1227,30 @@ interface paths {
     };
     /**
      * List workspace activities
-     * @description Returns the workspace's activity log, most recent first, cursor-paginated. Optional filters: `type` (repeatable, e.g. `file.created`), `actor` (an account id), and a `from`/`to` day range (each bound narrows only when given; the feed is otherwise all-time).
+     * @description Returns the workspace's activity log, most recent first, cursor-paginated. Optional filters: `type` (repeatable, e.g. `file.created`), `actor` (a username), and a `from`/`to` day range (each bound narrows only when given; the feed is otherwise all-time).
      */
     get: {
       parameters: {
         query?: {
-          /** @description Keep only activities performed by this account. Omit for any actor. */
-          actor?: string;
+          /** @description Username of the account whose activities to keep. Omit for any actor. */
+          actor?: components["schemas"]["Handle"];
           /**
-           * @description Cursor pointing to the last item of the previous page.
-           *     Obtain this from the `nextCursor` field in the response.
+           * @description Keep only these activity types (e.g. `file.created`). Repeat the `type`
+           *     parameter for several; omit for no type constraint.
            */
-          after?: string;
+          type?: components["schemas"]["ActivityType"][];
           /**
            * @description First day of the range (inclusive), `YYYY-MM-DD`. Defaults so the range
            *     spans the last `DEFAULT_WINDOW_DAYS` days through `to`.
            */
           from?: string;
+          /** @description Last day of the range (inclusive), `YYYY-MM-DD`. Defaults to today (UTC). */
+          to?: string;
+          /**
+           * @description Cursor pointing to the last item of the previous page.
+           *     Obtain this from the `nextCursor` field in the response.
+           */
+          after?: string;
           /**
            * @description Whether to include the total item count in the response's `total` field.
            *     Defaults to `false`, since counting is an extra query; set it to `true`
@@ -1252,14 +1259,6 @@ interface paths {
           includeCount?: boolean;
           /** @description The maximum number of records to return (1-100, default: 20). */
           limit?: number;
-          /** @description Last day of the range (inclusive), `YYYY-MM-DD`. Defaults to today (UTC). */
-          to?: string;
-          /**
-           * @description Keep only these activity types (e.g. `file.created`). Repeat the `type`
-           *     parameter for several; omit for no type constraint. The field is `types`
-           *     since `type` is a reserved word.
-           */
-          type?: components["schemas"]["ActivityType"][];
         };
         header?: never;
         path: {
@@ -1339,10 +1338,13 @@ interface paths {
     get: {
       parameters: {
         query?: {
-          /** @description Keep only activities performed by this account. Omit for any actor. */
-          actor?: string;
-          /** @description Output format; defaults to `csv`. */
-          format?: components["schemas"]["ExportFormat"];
+          /** @description Username of the account whose activities to keep. Omit for any actor. */
+          actor?: components["schemas"]["Handle"];
+          /**
+           * @description Keep only these activity types (e.g. `file.created`). Repeat the `type`
+           *     parameter for several; omit for no type constraint.
+           */
+          type?: components["schemas"]["ActivityType"][];
           /**
            * @description First day of the range (inclusive), `YYYY-MM-DD`. Defaults so the range
            *     spans the last `DEFAULT_WINDOW_DAYS` days through `to`.
@@ -1350,12 +1352,8 @@ interface paths {
           from?: string;
           /** @description Last day of the range (inclusive), `YYYY-MM-DD`. Defaults to today (UTC). */
           to?: string;
-          /**
-           * @description Keep only these activity types (e.g. `file.created`). Repeat the `type`
-           *     parameter for several; omit for no type constraint. The field is `types`
-           *     since `type` is a reserved word.
-           */
-          type?: components["schemas"]["ActivityType"][];
+          /** @description Output format; defaults to `csv`. */
+          format?: components["schemas"]["ExportFormat"];
         };
         header?: never;
         path: {
@@ -1576,7 +1574,7 @@ interface paths {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["RunTimeSeries"];
+            "application/json": components["schemas"]["DetectionTimeSeries"];
           };
         };
         /**
@@ -4739,7 +4737,7 @@ interface paths {
     };
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/pipelines/runs/": {
+  "/workspaces/{workspaceSlug}/pipelines/detections/": {
     parameters: {
       query?: never;
       header?: never;
@@ -4747,8 +4745,8 @@ interface paths {
       cookie?: never;
     };
     /**
-     * List workspace runs
-     * @description Returns all pipeline runs across the workspace, most recent first, with optional status, file, pipeline, trigger-account, and trigger-type filters.
+     * List workspace detections
+     * @description Returns all detections across the workspace, most recent first, with optional status, file, pipeline, trigger-account, and trigger-type filters.
      */
     get: {
       parameters: {
@@ -4766,15 +4764,15 @@ interface paths {
           includeCount?: boolean;
           /** @description The maximum number of records to return (1-100, default: 20). */
           limit?: number;
-          /** @description Filter by the source file the run analyzes. */
+          /** @description Filter by the source file the detection analyzes. */
           fileId?: string;
           /** @description Filter by the owning pipeline. */
           pipelineId?: string;
-          /** @description Filter by run status. */
-          status?: components["schemas"]["PipelineRunStatus"];
-          /** @description Filter by how the run was initiated (user vs system). */
+          /** @description Filter by detection status. */
+          status?: components["schemas"]["DetectionStatus"];
+          /** @description Filter by how the detection was initiated (user vs system). */
           triggerType?: components["schemas"]["PipelineTriggerType"];
-          /** @description Filter by the account that triggered the run. */
+          /** @description Filter by the account that triggered the detection. */
           triggeredBy?: string;
         };
         header?: never;
@@ -4798,7 +4796,7 @@ interface paths {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["PipelineRunPage"];
+            "application/json": components["schemas"]["DetectionPage"];
           };
         };
         /**
@@ -4856,7 +4854,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/pipelines/{pipelineSlug}/runs/": {
+  "/workspaces/{workspaceSlug}/pipelines/{pipelineSlug}/detections/": {
     parameters: {
       query?: never;
       header?: never;
@@ -4864,8 +4862,8 @@ interface paths {
       cookie?: never;
     };
     /**
-     * List pipeline runs
-     * @description Returns runs for a specific pipeline, most recent first, with optional status, file, trigger-account, and trigger-type filters.
+     * List pipeline detections
+     * @description Returns detections for a specific pipeline, most recent first, with optional status, file, trigger-account, and trigger-type filters.
      */
     get: {
       parameters: {
@@ -4883,13 +4881,13 @@ interface paths {
           includeCount?: boolean;
           /** @description The maximum number of records to return (1-100, default: 20). */
           limit?: number;
-          /** @description Filter by the source file the run analyzes. */
+          /** @description Filter by the source file the detection analyzes. */
           fileId?: string;
-          /** @description Filter by run status. */
-          status?: components["schemas"]["PipelineRunStatus"];
-          /** @description Filter by how the run was initiated (user vs system). */
+          /** @description Filter by detection status. */
+          status?: components["schemas"]["DetectionStatus"];
+          /** @description Filter by how the detection was initiated (user vs system). */
           triggerType?: components["schemas"]["PipelineTriggerType"];
-          /** @description Filter by the account that triggered the run. */
+          /** @description Filter by the account that triggered the detection. */
           triggeredBy?: string;
         };
         header?: never;
@@ -4915,7 +4913,7 @@ interface paths {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["PipelineRunPage"];
+            "application/json": components["schemas"]["DetectionPage"];
           };
         };
         /**
@@ -4967,8 +4965,8 @@ interface paths {
     };
     put?: never;
     /**
-     * Start a run (detect)
-     * @description Starts detection for a file and returns 202 with the run in the `running` state; the analysis runs in the background. Watch the run's status via the SSE stream at `.../runs/{runId}/events` (or re-read the run) and fetch the findings from `.../runs/{runId}/detections/` once it reaches `analyzed`. A repeated Idempotency-Key returns the existing run.
+     * Start a detection
+     * @description Starts analysis for a file and returns 202 with the detection in the `executing` state; the analysis runs in the background. Watch the detection's status via the SSE stream at `.../detections/{detectionId}/events` (or re-read the detection) and fetch the findings from `.../detections/{detectionId}/analysis/` once it reaches `complete`. A repeated Idempotency-Key returns the existing detection.
      */
     post: {
       parameters: {
@@ -4983,43 +4981,47 @@ interface paths {
         cookie?: never;
       };
       /**
-       * @description Request payload to start a run (detect) over a file.
+       * @description Request payload to start a detection over a file.
        *
-       *     Analyzes the file with the pipeline's configuration and returns the run,
-       *     which holds the findings for review before redaction.
+       *     Analyzes the file with the pipeline's configuration and returns the
+       *     detection, which holds the findings for review before redaction.
        */
       requestBody: {
         content: {
-          "application/json": components["schemas"]["CreatePipelineRun"];
+          "application/json": components["schemas"]["CreateDetection"];
         };
       };
       responses: {
         /**
-         * @description Response type for a pipeline run.
+         * @description Response type for a detection.
          *
-         *     A run is addressed by its own opaque id; the owning pipeline and workspace
-         *     slugs are carried for context.
+         *     A detection is addressed by its own opaque id; the owning pipeline and
+         *     workspace slugs are carried for context. Redacted outputs are not here — a
+         *     detection produces many redactions, each fetched from its `redactions`
+         *     endpoint.
          */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["PipelineRun"];
+            "application/json": components["schemas"]["Detection"];
           };
         };
         /**
-         * @description Response type for a pipeline run.
+         * @description Response type for a detection.
          *
-         *     A run is addressed by its own opaque id; the owning pipeline and workspace
-         *     slugs are carried for context.
+         *     A detection is addressed by its own opaque id; the owning pipeline and
+         *     workspace slugs are carried for context. Redacted outputs are not here — a
+         *     detection produces many redactions, each fetched from its `redactions`
+         *     endpoint.
          */
         202: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["PipelineRun"];
+            "application/json": components["schemas"]["Detection"];
           };
         };
         /**
@@ -5123,7 +5125,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/runs/{runId}/": {
+  "/workspaces/{workspaceSlug}/detections/{detectionId}/": {
     parameters: {
       query?: never;
       header?: never;
@@ -5131,8 +5133,8 @@ interface paths {
       cookie?: never;
     };
     /**
-     * Get pipeline run
-     * @description Returns the run and its status for review.
+     * Get detection
+     * @description Returns the detection and its status for review.
      */
     get: {
       parameters: {
@@ -5141,25 +5143,27 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the run. */
-          runId: components["schemas"]["RunId"];
+          /** @description Opaque identifier of the detection. */
+          detectionId: components["schemas"]["DetectionId"];
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
         /**
-         * @description Response type for a pipeline run.
+         * @description Response type for a detection.
          *
-         *     A run is addressed by its own opaque id; the owning pipeline and workspace
-         *     slugs are carried for context.
+         *     A detection is addressed by its own opaque id; the owning pipeline and
+         *     workspace slugs are carried for context. Redacted outputs are not here — a
+         *     detection produces many redactions, each fetched from its `redactions`
+         *     endpoint.
          */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["PipelineRun"];
+            "application/json": components["schemas"]["Detection"];
           };
         };
         /**
@@ -5217,7 +5221,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/runs/{runId}/events": {
+  "/workspaces/{workspaceSlug}/detections/{detectionId}/events/": {
     parameters: {
       query?: never;
       header?: never;
@@ -5225,8 +5229,8 @@ interface paths {
       cookie?: never;
     };
     /**
-     * Stream pipeline run status
-     * @description Opens a Server-Sent Events stream of the run's status changes. Emits the current status immediately, then each transition, and ends once the run settles (analyzed, failed, or cancelled). Each event's `data` is a `RunStatusEvent` (see the response schema). Authenticate with a Bearer token via a `fetch`-based client; the native `EventSource` cannot send an `Authorization` header.
+     * Stream detection status
+     * @description Opens a Server-Sent Events stream of the detection's status changes. Emits the current status immediately, then each transition, and ends once the detection settles (complete or failed). Each event's `data` is a `DetectionStatusEvent` (see the response schema). Authenticate with a Bearer token via a `fetch`-based client; the native `EventSource` cannot send an `Authorization` header.
      */
     get: {
       parameters: {
@@ -5235,8 +5239,8 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the run. */
-          runId: components["schemas"]["RunId"];
+          /** @description Opaque identifier of the detection. */
+          detectionId: components["schemas"]["DetectionId"];
         };
         cookie?: never;
       };
@@ -5248,7 +5252,7 @@ interface paths {
             [name: string]: unknown;
           };
           content: {
-            "text/event-stream": components["schemas"]["RunStatusEvent"];
+            "text/event-stream": components["schemas"]["DetectionStatusEvent"];
           };
         };
         /**
@@ -5306,18 +5310,111 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/runs/{runId}/redactions/": {
+  "/workspaces/{workspaceSlug}/detections/{detectionId}/redactions/": {
     parameters: {
       query?: never;
       header?: never;
       path?: never;
       cookie?: never;
     };
-    get?: never;
+    /**
+     * List detection redactions
+     * @description Returns a detection's redactions, most recent first, cursor-paginated. Each redaction is one redact pass with its own reviewer edits, output document, and review audit.
+     */
+    get: {
+      parameters: {
+        query?: {
+          /**
+           * @description Cursor pointing to the last item of the previous page.
+           *     Obtain this from the `nextCursor` field in the response.
+           */
+          after?: string;
+          /**
+           * @description Whether to include the total item count in the response's `total` field.
+           *     Defaults to `false`, since counting is an extra query; set it to `true`
+           *     only when the count is actually needed.
+           */
+          includeCount?: boolean;
+          /** @description The maximum number of records to return (1-100, default: 20). */
+          limit?: number;
+        };
+        header?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+          /** @description Opaque identifier of the detection. */
+          detectionId: components["schemas"]["DetectionId"];
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /**
+         * @description Generic paginated response wrapper.
+         *
+         *     Provides a consistent structure for all paginated API responses with
+         *     cursor-based pagination support. When `next_cursor` is present, there
+         *     are more items to fetch.
+         */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["RedactionResultPage"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
     put?: never;
     /**
-     * Redact a run
-     * @description Applies the pipeline's policies to the run's stored analysis, stores the redacted file, and completes the run.
+     * Redact a detection
+     * @description Applies the pipeline's policies to the detection's stored analysis — with any reviewer `edits` layered on first (suppress a false positive, retag a detection, or add one the analysis missed) — and produces a new redaction: a redacted document plus a review audit recording what was redacted. A detection can be redacted more than once. An edit targeting a detection not in the analysis, or a set that contradicts itself, is rejected (400).
      */
     post: {
       parameters: {
@@ -5326,25 +5423,58 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the run. */
-          runId: components["schemas"]["RunId"];
+          /** @description Opaque identifier of the detection. */
+          detectionId: components["schemas"]["DetectionId"];
         };
         cookie?: never;
       };
-      requestBody?: never;
+      /**
+       * @description Request payload to redact a detection.
+       *
+       *     The reviewer's edits layer over the detection's analysis before redaction:
+       *     suppress a false positive, retag a detection, or add one the analysis missed.
+       *     Omit `edits` to redact with the policy decisions exactly as detected. Each
+       *     redact request produces a new redaction.
+       */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["RedactDetection"];
+        };
+      };
       responses: {
         /**
-         * @description Response type for a pipeline run.
+         * @description Response type for a redaction.
          *
-         *     A run is addressed by its own opaque id; the owning pipeline and workspace
-         *     slugs are carried for context.
+         *     A redaction is one redact pass over a detection, produced with a specific set
+         *     of reviewer edits. It owns the redacted output document (downloadable through
+         *     the normal file endpoints) and a review audit recording what was redacted and
+         *     why (fetched from the redaction's `review` endpoint).
+         *
+         *     Named `RedactionResult` rather than `Redaction` because the engine's audit
+         *     schema already carries a `Redaction` (an audit event), and the two must not
+         *     collide in the generated OpenAPI.
          */
-        200: {
+        201: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["RedactionResult"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        400: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["PipelineRun"];
+            "application/json": components["schemas"]["ErrorResponse"];
           };
         };
         /**
@@ -5407,6 +5537,24 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
       };
     };
     delete?: never;
@@ -5415,7 +5563,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/runs/{runId}/detections/": {
+  "/workspaces/{workspaceSlug}/detections/{detectionId}/analysis/": {
     parameters: {
       query?: never;
       header?: never;
@@ -5423,8 +5571,8 @@ interface paths {
       cookie?: never;
     };
     /**
-     * Get run detections
-     * @description Returns the run's detected findings (the analyzed document) for review.
+     * Get detection findings
+     * @description Returns the detection's detected findings (the analyzed document) for review.
      */
     get: {
       parameters: {
@@ -5433,8 +5581,8 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the run. */
-          runId: components["schemas"]["RunId"];
+          /** @description Opaque identifier of the detection. */
+          detectionId: components["schemas"]["DetectionId"];
         };
         cookie?: never;
       };
@@ -5443,20 +5591,36 @@ interface paths {
         /**
          * @description What detection found in one document.
          *
-         *     The body group plus per-container-part groups (each tagged by
-         *     modality) plus the recognition [`AuditContext`] the entities
-         *     were scored against.
+         *     Wraps elide's [`Report`] with the things elide does not model:
+         *     the recognition [`DocumentContext`] the entities were scored
+         *     against, how the document decoded, and what the pass cost.
+         *
+         *     Reviewer edits are not here. They are the caller's own input,
+         *     applied to the report before anonymize
+         *     ([`EditSet::apply`](crate::entity::EditSet::apply)), so an audit
+         *     carries what analysis found *as amended* rather than the
+         *     amendments themselves.
+         *
+         *     # Serialization
+         *
+         *     [`Serialize`] but deliberately **not** `Deserialize`: a
+         *     serialized report tags entity groups by modality *name*, so
+         *     rebuilding one needs the registry [`Engine`] holds. Read an
+         *     audit back with [`Engine::deserialize_audit`].
+         *
+         *     # Schema
          *
-         *     The context travels with the entities so anonymize can rebuild
-         *     an orchestrator against exactly the vocabulary analyze used.
-         *     Anything a policy predicate compares against beyond the label
-         *     catalog (asserted languages, jurisdictions, document tags) is
-         *     here; labels are re-derived from the policy set on each
-         *     anonymize call.
+         *     Generate under the **serialize** contract
+         *     ([`SchemaSettings::for_serialize`]). `usage` is
+         *     `skip_serializing_if`, and only that contract marks it optional
+         *     — `schema_for!` defaults to deserialize and declares it
+         *     required, so a generated client would reject responses this
+         *     crate really emits.
          *
-         *     No [`Default`]: a well-formed audit must carry a real
-         *     [`AuditContext`] with a real correlation id. Callers building
-         *     an audit outside the analyze path construct it explicitly.
+         *     [`Engine`]: super::Engine
+         *     [`Engine::deserialize_audit`]: super::Engine::deserialize_audit
+         *     [`Report`]: elide::Report
+         *     [`SchemaSettings::for_serialize`]: schemars::generate::SchemaSettings::for_serialize
          */
         200: {
           headers: {
@@ -5536,7 +5700,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/runs/{runId}/audit": {
+  "/workspaces/{workspaceSlug}/detections/{detectionId}/audit/": {
     parameters: {
       query?: never;
       header?: never;
@@ -5544,8 +5708,8 @@ interface paths {
       cookie?: never;
     };
     /**
-     * Download run audit
-     * @description Downloads the run's audit as a file. `format` is `csv` (default) — a zip of entities.csv, provenance.csv, and reviews.csv — or `json`, a pretty-printed JSON file.
+     * Download detection audit
+     * @description Downloads the detection's audit as a file. `format` is `csv` (default) — a zip of entities.csv, provenance.csv, and reviews.csv — or `json`, a pretty-printed JSON file.
      */
     get: {
       parameters: {
@@ -5557,14 +5721,14 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the run. */
-          runId: components["schemas"]["RunId"];
+          /** @description Opaque identifier of the detection. */
+          detectionId: components["schemas"]["DetectionId"];
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /** @description The run's exported audit. */
+        /** @description The detection's exported audit. */
         200: {
           headers: {
             [name: string]: unknown;
@@ -5644,7 +5808,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/policies/": {
+  "/workspaces/{workspaceSlug}/redactions/{redactionId}/review": {
     parameters: {
       query?: never;
       header?: never;
@@ -5652,48 +5816,63 @@ interface paths {
       cookie?: never;
     };
     /**
-     * List policies
-     * @description Returns all policies for the workspace.
+     * Get redaction review
+     * @description Returns the redaction's review audit: the detection analysis with the reviewer's edits applied and the per-entity redaction outcome recorded.
      */
     get: {
       parameters: {
-        query?: {
-          /**
-           * @description Cursor pointing to the last item of the previous page.
-           *     Obtain this from the `nextCursor` field in the response.
-           */
-          after?: string;
-          /**
-           * @description Whether to include the total item count in the response's `total` field.
-           *     Defaults to `false`, since counting is an extra query; set it to `true`
-           *     only when the count is actually needed.
-           */
-          includeCount?: boolean;
-          /** @description The maximum number of records to return (1-100, default: 20). */
-          limit?: number;
-        };
+        query?: never;
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
+          /** @description Opaque identifier of the redaction. */
+          redactionId: components["schemas"]["RedactionId"];
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
         /**
-         * @description Generic paginated response wrapper.
+         * @description What detection found in one document.
          *
-         *     Provides a consistent structure for all paginated API responses with
-         *     cursor-based pagination support. When `next_cursor` is present, there
-         *     are more items to fetch.
+         *     Wraps elide's [`Report`] with the things elide does not model:
+         *     the recognition [`DocumentContext`] the entities were scored
+         *     against, how the document decoded, and what the pass cost.
+         *
+         *     Reviewer edits are not here. They are the caller's own input,
+         *     applied to the report before anonymize
+         *     ([`EditSet::apply`](crate::entity::EditSet::apply)), so an audit
+         *     carries what analysis found *as amended* rather than the
+         *     amendments themselves.
+         *
+         *     # Serialization
+         *
+         *     [`Serialize`] but deliberately **not** `Deserialize`: a
+         *     serialized report tags entity groups by modality *name*, so
+         *     rebuilding one needs the registry [`Engine`] holds. Read an
+         *     audit back with [`Engine::deserialize_audit`].
+         *
+         *     # Schema
+         *
+         *     Generate under the **serialize** contract
+         *     ([`SchemaSettings::for_serialize`]). `usage` is
+         *     `skip_serializing_if`, and only that contract marks it optional
+         *     — `schema_for!` defaults to deserialize and declares it
+         *     required, so a generated client would reject responses this
+         *     crate really emits.
+         *
+         *     [`Engine`]: super::Engine
+         *     [`Engine::deserialize_audit`]: super::Engine::deserialize_audit
+         *     [`Report`]: elide::Report
+         *     [`SchemaSettings::for_serialize`]: schemars::generate::SchemaSettings::for_serialize
          */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["PolicySummaryPage"];
+            "application/json": components["schemas"]["Audit"];
           };
         };
         /**
@@ -5726,45 +5905,6 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-      };
-    };
-    put?: never;
-    /**
-     * Create policy
-     * @description Creates a structured redaction policy for the workspace.
-     */
-    post: {
-      parameters: {
-        query?: never;
-        header?: never;
-        path: {
-          /** @description URL-safe workspace identifier. */
-          workspaceSlug: string;
-        };
-        cookie?: never;
-      };
-      /**
-       * @description Request payload for creating a new workspace policy.
-       *
-       *     The body comes from a template or an inline definition (see [`PolicyBody`]).
-       *     The body's `name` and `description` drive the stored columns unless
-       *     overridden here.
-       */
-      requestBody: {
-        content: {
-          "application/json": components["schemas"]["CreatePolicy"];
-        };
-      };
-      responses: {
-        /** @description Response type for a workspace policy. */
-        201: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["Policy"];
-          };
-        };
         /**
          * @description HTTP error response representation with security-conscious design.
          *
@@ -5772,7 +5912,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        400: {
+        404: {
           headers: {
             [name: string]: unknown;
           };
@@ -5787,7 +5927,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        401: {
+        409: {
           headers: {
             [name: string]: unknown;
           };
@@ -5795,19 +5935,180 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        403: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
+      };
+    };
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/policies/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List policies
+     * @description Returns all policies for the workspace.
+     */
+    get: {
+      parameters: {
+        query?: {
+          /**
+           * @description Cursor pointing to the last item of the previous page.
+           *     Obtain this from the `nextCursor` field in the response.
+           */
+          after?: string;
+          /**
+           * @description Whether to include the total item count in the response's `total` field.
+           *     Defaults to `false`, since counting is an extra query; set it to `true`
+           *     only when the count is actually needed.
+           */
+          includeCount?: boolean;
+          /** @description The maximum number of records to return (1-100, default: 20). */
+          limit?: number;
+        };
+        header?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /**
+         * @description Generic paginated response wrapper.
+         *
+         *     Provides a consistent structure for all paginated API responses with
+         *     cursor-based pagination support. When `next_cursor` is present, there
+         *     are more items to fetch.
+         */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["PolicySummaryPage"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    put?: never;
+    /**
+     * Create policy
+     * @description Creates a structured redaction policy for the workspace.
+     */
+    post: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+        };
+        cookie?: never;
+      };
+      /**
+       * @description Request payload for creating a new workspace policy.
+       *
+       *     The body comes from a template or an inline definition (see [`PolicyBody`]).
+       *     The body's `name` and `description` drive the stored columns unless
+       *     overridden here.
+       */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["CreatePolicy"];
+        };
+      };
+      responses: {
+        /** @description Response type for a workspace policy. */
+        201: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["Policy"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
           };
         };
         /** @description Expected request with `Content-Type: application/json` */
@@ -8712,79 +9013,31 @@ interface components {
       workspaceSlug: components["schemas"]["Handle"];
     };
     /**
-     * @description Query parameters for the activity export: the type/actor filter, a bounded date
-     *     window (defaulted and capped, since the export materializes rows), and the
-     *     output `format`. See [`DateWindow`] for the range defaults and bounds.
+     * @description The export-only query parameter: the output format. Kept separate from the
+     *     shared filter and window so each is extracted on its own (see
+     *     [`ActivityFilterQuery`] for why flattening is avoided).
      */
-    ActivityExportQuery: {
-      /**
-       * Format: uuid
-       * @description Keep only activities performed by this account. Omit for any actor.
-       */
-      actor?: string;
+    ActivityExportOptions: {
       /** @description Output format; defaults to `csv`. */
       format?: components["schemas"]["ExportFormat"];
-      /**
-       * Format: date
-       * @description First day of the range (inclusive), `YYYY-MM-DD`. Defaults so the range
-       *     spans the last `DEFAULT_WINDOW_DAYS` days through `to`.
-       */
-      from?: string;
-      /**
-       * Format: date
-       * @description Last day of the range (inclusive), `YYYY-MM-DD`. Defaults to today (UTC).
-       */
-      to?: string;
-      /**
-       * @description Keep only these activity types (e.g. `file.created`). Repeat the `type`
-       *     parameter for several; omit for no type constraint. The field is `types`
-       *     since `type` is a reserved word.
-       */
-      type?: components["schemas"]["ActivityType"][];
     };
     /**
-     * @description Query parameters for the activity feed: the type/actor filter, an optional date
-     *     window (narrows only when given — the feed is otherwise all-time), and cursor
-     *     pagination.
+     * @description The activity-specific filter parameters: which activity types to keep and
+     *     whose activities to keep.
+     *
+     *     This is its own query struct so an endpoint composes it alongside the shared
+     *     [`CursorPagination`](crate::handler::request::CursorPagination) and
+     *     [`DateWindow`] as separate query extractors, rather than `#[serde(flatten)]`ing
+     *     them into one struct: the query extractor (`serde_html_form`) mis-handles
+     *     flattened sub-structs — a flattened pagination struct fails to deserialize even
+     *     a bare `?limit=` — so each concern is extracted on its own.
      */
-    ActivityListQuery: {
-      /**
-       * Format: uuid
-       * @description Keep only activities performed by this account. Omit for any actor.
-       */
-      actor?: string;
-      /**
-       * @description Cursor pointing to the last item of the previous page.
-       *     Obtain this from the `nextCursor` field in the response.
-       */
-      after?: string;
-      /**
-       * Format: date
-       * @description First day of the range (inclusive), `YYYY-MM-DD`. Defaults so the range
-       *     spans the last `DEFAULT_WINDOW_DAYS` days through `to`.
-       */
-      from?: string;
-      /**
-       * @description Whether to include the total item count in the response's `total` field.
-       *     Defaults to `false`, since counting is an extra query; set it to `true`
-       *     only when the count is actually needed.
-       * @default false
-       */
-      includeCount?: boolean;
-      /**
-       * Format: uint32
-       * @description The maximum number of records to return (1-100, default: 20).
-       */
-      limit?: number;
-      /**
-       * Format: date
-       * @description Last day of the range (inclusive), `YYYY-MM-DD`. Defaults to today (UTC).
-       */
-      to?: string;
+    ActivityFilterQuery: {
+      /** @description Username of the account whose activities to keep. Omit for any actor. */
+      actor?: components["schemas"]["Handle"];
       /**
        * @description Keep only these activity types (e.g. `file.created`). Repeat the `type`
-       *     parameter for several; omit for no type constraint. The field is `types`
-       *     since `type` is a reserved word.
+       *     parameter for several; omit for no type constraint.
        */
       type?: components["schemas"]["ActivityType"][];
     };
@@ -8916,21 +9169,21 @@ interface components {
       /** @constant */
       type: "pipeline.deleted";
     } | {
-      data: components["schemas"]["PipelineRunActivityParams"];
+      data: components["schemas"]["DetectionActivityParams"];
       /** @constant */
-      type: "pipeline.run.started";
+      type: "pipeline.detection.started";
     } | {
-      data: components["schemas"]["PipelineRunActivityParams"];
+      data: components["schemas"]["DetectionActivityParams"];
       /** @constant */
-      type: "pipeline.run.analyzed";
+      type: "pipeline.detection.completed";
     } | {
-      data: components["schemas"]["PipelineRunActivityParams"];
+      data: components["schemas"]["DetectionActivityParams"];
       /** @constant */
-      type: "pipeline.run.completed";
+      type: "pipeline.detection.failed";
     } | {
-      data: components["schemas"]["PipelineRunActivityParams"];
+      data: components["schemas"]["RedactionActivityParams"];
       /** @constant */
-      type: "pipeline.run.failed";
+      type: "pipeline.redaction.created";
     } | {
       data: components["schemas"]["PolicyActivityParams"];
       /** @constant */
@@ -8951,7 +9204,7 @@ interface components {
      *     to categorize different types of activities that occur within workspaces for comprehensive
      *     audit trail and activity tracking.
      */
-    ActivityType: "workspace.created" | "workspace.updated" | "workspace.deleted" | "member.added" | "member.updated" | "member.deleted" | "invite.created" | "invite.accepted" | "invite.declined" | "invite.canceled" | "connection.created" | "connection.updated" | "connection.deleted" | "connection.sync.started" | "connection.sync.completed" | "connection.sync.failed" | "webhook.created" | "webhook.updated" | "webhook.deleted" | "file.created" | "file.updated" | "file.deleted" | "pipeline.created" | "pipeline.updated" | "pipeline.deleted" | "pipeline.run.started" | "pipeline.run.analyzed" | "pipeline.run.completed" | "pipeline.run.failed" | "policy.created" | "policy.updated" | "policy.deleted";
+    ActivityType: "workspace.created" | "workspace.updated" | "workspace.deleted" | "member.added" | "member.updated" | "member.deleted" | "invite.created" | "invite.accepted" | "invite.declined" | "invite.canceled" | "connection.created" | "connection.updated" | "connection.deleted" | "connection.sync.started" | "connection.sync.completed" | "connection.sync.failed" | "webhook.created" | "webhook.updated" | "webhook.deleted" | "file.created" | "file.updated" | "file.deleted" | "pipeline.created" | "pipeline.updated" | "pipeline.deleted" | "pipeline.detection.started" | "pipeline.detection.completed" | "pipeline.detection.failed" | "pipeline.redaction.created" | "policy.created" | "policy.updated" | "policy.deleted";
     /** @description Anthropic API credentials. */
     AnthropicCredentials: {
       /** @description Anthropic API key. */
@@ -9050,42 +9303,50 @@ interface components {
      *     it on the entity's [`Redaction`] event so an audit can trace a change back to
      *     the policy that demanded it.
      *
-     *     The rationale takes one of two [`kind`](Attribution::kind)s, by how much
-     *     structure the author has ([`AttributionKind::Freeform`] /
-     *     [`AttributionKind::Cited`]). Orthogonal to that, an attribution may carry a
-     *     [`source_id`](Attribution::source_id): an opaque, caller-owned [`Uuid`] the
-     *     policy layer uses to link back to a source record (a rule, a request, a
-     *     document). elide-core stores and hashes it verbatim; it never resolves or
-     *     validates it.
+     *     The rationale takes one of two shapes, by how much structure the author has:
+     *     a [`Freeform`](Attribution::Freeform) label or a formal
+     *     [`Cited`](Attribution::Cited) authority. Start one with
+     *     [`Attribution::freeform`] / [`Attribution::cited`], refine it with the
+     *     shape's `with_*` builder, and let it convert into an `Attribution`:
+     *
+     *     ```
+     *     # use elide_core::entity::audit::Attribution;
+     *     let attribution: Attribution =
+     *         Attribution::freeform("gdpr-art-17")
+     *             .with_description("right to erasure")
+     *             .into();
+     *     ```
      *
      *     [`Redaction`]: crate::entity::audit::AuditKind::Redaction
      */
-    Attribution: {
-      /** @description The shape of the rationale: a freeform label or a formal citation. */
-      kind: components["schemas"]["AttributionKind"];
-      /**
-       * Format: uuid
-       * @description Opaque, caller-owned link to a source record, when given.
-       */
-      source_id?: string;
-    };
-    /** @description The shape of an [`Attribution`]'s rationale. */
-    AttributionKind: {
-      /** @description Human-readable description (e.g. `"right to erasure"`), when given. */
-      description?: string;
+    Attribution: ({
       /** @constant */
       kind: "freeform";
-      /** @description The policy's name (e.g. `"gdpr-art-17"`, `"hipaa-safe-harbor"`). */
-      name: string;
-    } | {
-      /** @description The authority cited (e.g. `"GDPR"`, `"HIPAA"`, `"internal-policy"`). */
-      authority: string;
-      /** @description The citation within that authority (e.g. `"Art. 17(1)"`, `"§164.514"`). */
-      citation: string;
+    } & components["schemas"]["FreeformAttribution"]) | ({
       /** @constant */
       kind: "cited";
-      /** @description Why the citation applies here (e.g. `"data subject requested erasure"`). */
-      rationale: string;
+    } & components["schemas"]["CitedAttribution"]);
+    /**
+     * @description A detection recognition missed.
+     *
+     *     Recorded on the report with human provenance, so it is never
+     *     mistaken for an automatic hit, then redacted under the policy set
+     *     like any other entity: an added label the policy does not cover
+     *     is left alone.
+     *
+     *     Carries no entity id — the entity does not exist yet, and the
+     *     engine mints one when the edit is applied, so a client cannot
+     *     collide with a real detection or shadow an existing entity.
+     */
+    AudioAdd: {
+      /** @description Who made it, when the caller said. */
+      actor?: string;
+      /** @description What the reviewer says this is. */
+      label: components["schemas"]["LabelRef"];
+      /** @description Where it sits in the document. */
+      location: components["schemas"]["AudioLocation"];
+      /** @description The rationale, when one was given. */
+      reason?: string;
     };
     /**
      * @description One node in an entity's audit DAG: a thing that happened, with its
@@ -9162,115 +9423,70 @@ interface components {
      * @description Kind of an [`AuditEvent`], carrying its event-specific detail and the
      *     rationale for why it happened.
      *
-     *     `#[non_exhaustive]`: new event kinds (verification, annotation, …)
-     *     can be added compatibly. The recognition kinds ([`Pattern`],
-     *     [`Model`]) carry the matched [`Location`]; the rest carry their own
-     *     data.
-     *
+     *     A thin tagged union: each variant wraps one payload struct (e.g.
+     *     [`Redaction`], [`Selection`], [`Manual`]) that owns that kind's fields, its
+     *     docs, and how it folds into the audit hash. Match on a variant to reach its
+     *     payload:
+     *
+     *     ```
+     *     # use elide_core::entity::audit::AuditKind;
+     *     # use elide_core::modality::text::Text;
+     *     # fn show(kind: &AuditKind<Text>) {
+     *     if let AuditKind::Redaction(redaction) = kind {
+     *         let _ = &redaction.operator;
+     *     }
+     *     # }
+     *     ```
+     *
+     *     `#[non_exhaustive]`: new event kinds (verification, annotation, …) can be
+     *     added compatibly. The recognition kinds ([`Pattern`], [`Model`]) carry the
+     *     matched [`Location`]; the rest carry their own data.
+     *
+     *     [`AuditEvent`]: super::AuditEvent
      *     [`Pattern`]: AuditKind::Pattern
      *     [`Model`]: AuditKind::Model
      *     [`Location`]: Modality::Location
      */
     AudioAuditKind: {
+      detail: components["schemas"]["AudioPattern"];
       /** @constant */
       kind: "pattern";
-      /** @description Where the recognizer matched. */
-      location: components["schemas"]["AudioLocation"];
-      /** @description Pattern detail. */
-      pattern: components["schemas"]["PatternEvent"];
     } | {
+      detail: components["schemas"]["AudioModel"];
       /** @constant */
       kind: "model";
-      /** @description Where the recognizer matched. */
-      location: components["schemas"]["AudioLocation"];
-      /** @description Model detail. */
-      model: components["schemas"]["ModelEvent"];
     } | {
+      detail: components["schemas"]["Deduplication"];
       /** @constant */
       kind: "deduplication";
-      /** @description Name of the fusion strategy that combined them. */
-      strategy: string;
     } | {
-      /** @description The loser's confidence at resolution time. */
-      competing_confidence: components["schemas"]["Confidence"];
-      /** @description The label of the detection that lost arbitration. */
-      competing_label: components["schemas"]["LabelRef"];
+      detail: components["schemas"]["Conflict"];
       /** @constant */
       kind: "conflict";
-      /** @description Name of the conflict policy that chose the winner. */
-      resolved_by: string;
     } | {
-      /** @description The competing detection's confidence. */
-      competing_confidence: components["schemas"]["Confidence"];
-      /** @description The label of the competing detection. */
-      competing_label: components["schemas"]["LabelRef"];
-      /** @description Name of the policy that flagged the contest. */
-      flagged_by: string;
+      detail: components["schemas"]["Contested"];
       /** @constant */
       kind: "contested";
     } | {
-      /**
-       * Format: double
-       * @description Multiplier applied.
-       */
-      factor: number;
+      detail: components["schemas"]["Calibration"];
       /** @constant */
       kind: "calibration";
     } | {
-      /**
-       * @description The located [`Hint`] the keyword fired from, when the match came
-       *     from an out-of-band hint (a column header, a key) rather than
-       *     the in-text word window. `None` for an in-text-window match.
-       *
-       *     [`Hint`]: crate::modality::Hint
-       */
-      hint?: components["schemas"]["AudioHint"];
-      /** @description Keyword that fired the boost. */
-      keyword: string;
+      detail: components["schemas"]["AudioRefinement"];
       /** @constant */
       kind: "refinement";
-      /**
-       * @description Where the boosting keyword sits in the medium. For a hint match
-       *     this mirrors the hint's own location; for an in-text-window match
-       *     it is the keyword resolved through the modality's [`locate`] (a
-       *     pixel box for image, a time span for audio, the byte range for
-       *     text/tabular). `None` when the keyword's stream range could not be
-       *     placed, symmetric with a match the recognizer itself drops.
-       *
-       *     [`locate`]: crate::modality::TextRecognizable::locate
-       */
-      location?: components["schemas"]["AudioLocation"];
     } | {
-      /**
-       * @description The author-supplied policy rationale, when the operator carried an
-       *     [`Attribution`]; `None` otherwise.
-       */
-      attribution?: components["schemas"]["Attribution"];
-      /** @description Identifier of the key needed to reverse it, if reversible. */
-      key_id?: string;
+      detail: components["schemas"]["Redaction"];
       /** @constant */
       kind: "redaction";
-      /** @description How much the output leaks about the original. */
-      leak_profile: components["schemas"]["LeakProfile"];
-      /**
-       * @description Which selection rule chose this operator: the automatic "why"
-       *     (matched a label, a tag, a predicate, or the fallback).
-       */
-      matched_by: components["schemas"]["RuleMatch"];
-      /** @description Which operator (name + version) ran. */
-      operator: components["schemas"]["OperatorId"];
-      /**
-       * @description BLAKE3 digest of the original text the operator hid, when the
-       *     redaction layer recorded it. Proves *what* was redacted without
-       *     storing the plaintext; `None` when the operator did not capture it.
-       */
-      span_hash?: components["schemas"]["AuditHash"];
-      /**
-       * Format: uint32
-       * @description Byte length of the original text the operator hid, paired with
-       *     [`span_hash`](Self::Redaction::span_hash). `None` when not captured.
-       */
-      span_length?: number;
+    } | {
+      detail: components["schemas"]["Selection"];
+      /** @constant */
+      kind: "selection";
+    } | {
+      detail: components["schemas"]["AudioManual"];
+      /** @constant */
+      kind: "manual";
     };
     /**
      * @description Full audit trail of an [`Entity`]: every [`AuditEvent`] in its life, as a
@@ -9327,6 +9543,23 @@ interface components {
       /** @description Original filename, when known. */
       filename?: string;
     };
+    /**
+     * @description One change to an analyzed document.
+     *
+     *     `Add` carries no id because the entity does not exist yet; the
+     *     engine mints one when the edit is applied, so a client cannot
+     *     collide with a real detection or shadow an existing entity.
+     */
+    AudioEdit: ({
+      /** @constant */
+      op: "add";
+    } & components["schemas"]["AudioAdd"]) | ({
+      /** @constant */
+      op: "retag";
+    } & components["schemas"]["AudioRetag"]) | ({
+      /** @constant */
+      op: "suppress";
+    } & components["schemas"]["Suppress"]);
     /**
      * @description Detected piece of sensitive information within some medium.
      *
@@ -9355,7 +9588,12 @@ interface components {
     AudioEntity: {
       /**
        * @description Tamper-evident audit trail: every contributing detection, the fusion
-       *     event if any, and the redaction that hid it, as a hash-linked DAG.
+       *     event if any, and the redaction that hid it, as a hash-linked DAG. It is
+       *     also the single source of truth for whether a reviewer
+       *     [suppressed](Self::is_suppressed) the entity — a suppression is a
+       *     [`Manual`] event on this trail, not a separate flag.
+       *
+       *     [`Manual`]: crate::entity::audit::AuditKind::Manual
        */
       audit: components["schemas"]["AudioAuditLog"];
       /** @description Effective confidence in `0.0..=1.0` (fused, if applicable). */
@@ -9400,30 +9638,6 @@ interface components {
        */
       recognized_range?: components["schemas"]["Range_of_uint"];
     };
-    /**
-     * @description One recognized entity plus the optional reviewer override.
-     *
-     *     The bound mirrors elide's [`Entity<M>`]: serialization needs
-     *     `M::Location` and `M::Data` (de)serializable, and JsonSchema
-     *     derivation needs them schema-able. All four modalities elide
-     *     ships satisfy these under the `serde` + `schema` features.
-     */
-    AudioEntityRecord: {
-      /** @description The elide entity, as recognition produced it. */
-      entity: components["schemas"]["AudioEntity"];
-      /**
-       * @description Reviewer-supplied redaction override.
-       *
-       *     `None` means "use the matching policy rule's decision";
-       *     `Some(...)` overrides that rule for this specific entity
-       *     at apply time. Reviewer overrides take precedence over
-       *     every policy rule and inherit the authority of the
-       *     [`Review::policy_id`] they name: the audit event's
-       *     attribution stamps that policy so the trail names the
-       *     authority under which the override fired.
-       */
-      review?: components["schemas"]["Review"];
-    };
     /**
      * @description Located, typed piece of context a recognizer may treat as in-context
      *     for a nearby value.
@@ -9464,6 +9678,54 @@ interface components {
       /** @description Diarization label of the speaker, when a diarizer assigned one. */
       speaker_id?: string;
     };
+    /**
+     * @description A human override, outside automatic detection: an entity a reviewer added by
+     *     hand, or a detected one they marked to ignore. Its provenance is a person's
+     *     decision, not a recognizer's — so the trail records *why* (an
+     *     [`Attribution`], when supplied). *Who* made the override is the event's
+     *     [`source`], not a payload field.
+     *
+     *     [`source`]: super::AuditEvent::source
+     */
+    AudioManual: {
+      /**
+       * @description The reviewer's rationale, when supplied (e.g. a freeform
+       *     `"false positive"`, or a cited authority). `None` for an unexplained
+       *     override.
+       */
+      attribution?: components["schemas"]["Attribution"];
+      /**
+       * @description Which human decision this records: including a missed entity, or
+       *     suppressing a detected one. This is the authority on whether the entity
+       *     is redacted — [`AuditLog::is_suppressed`] reads it, so there is no
+       *     separate flag to keep in sync.
+       *
+       *     [`AuditLog::is_suppressed`]: crate::entity::audit::AuditLog::is_suppressed
+       */
+      intent: components["schemas"]["ManualIntent"];
+      /** @description Where the override applies, in modality-native coordinates. */
+      location: components["schemas"]["AudioLocation"];
+    };
+    /**
+     * @description Detail of a model/NER recognition: a model matched at `location`, with its
+     *     metadata in `model`.
+     */
+    AudioModel: {
+      /** @description Where the recognizer matched. */
+      location: components["schemas"]["AudioLocation"];
+      /** @description Model metadata (name, version, contextual flag). */
+      model: components["schemas"]["ModelEvent"];
+    };
+    /**
+     * @description Detail of a pattern/dictionary recognition: a recognizer matched at
+     *     `location`, with the pattern metadata in `pattern`.
+     */
+    AudioPattern: {
+      /** @description Where the recognizer matched. */
+      location: components["schemas"]["AudioLocation"];
+      /** @description Pattern metadata (name, regex, validator, contextual flag). */
+      pattern: components["schemas"]["PatternEvent"];
+    };
     /** @description Operator spec a `redact` audio rule carries. */
     AudioRedaction: {
       /** @constant */
@@ -9497,140 +9759,133 @@ interface components {
        */
       waveform?: components["schemas"]["Waveform"];
     };
-    /**
-     * @description What detection found in one document.
-     *
-     *     The body group plus per-container-part groups (each tagged by
-     *     modality) plus the recognition [`AuditContext`] the entities
-     *     were scored against.
-     *
-     *     The context travels with the entities so anonymize can rebuild
-     *     an orchestrator against exactly the vocabulary analyze used.
-     *     Anything a policy predicate compares against beyond the label
-     *     catalog (asserted languages, jurisdictions, document tags) is
-     *     here; labels are re-derived from the policy set on each
-     *     anonymize call.
-     *
-     *     No [`Default`]: a well-formed audit must carry a real
-     *     [`AuditContext`] with a real correlation id. Callers building
-     *     an audit outside the analyze path construct it explicitly.
-     */
-    Audit: {
+    /** @description A context keyword near the entity lifted its confidence. */
+    AudioRefinement: {
       /**
-       * @description The body group.
+       * @description The located [`Hint`] the keyword fired from, when the match came from an
+       *     out-of-band hint (a column header, a key) rather than the in-text word
+       *     window. `None` for an in-text-window match.
        *
-       *     `None` when no body pipeline produced entities (pre-analyze,
-       *     or the codec resolved the doc to a modality with no
-       *     pipeline).
+       *     [`Hint`]: crate::modality::Hint
        */
-      body?: components["schemas"]["EntityGroup"];
+      hint?: components["schemas"]["AudioHint"];
+      /** @description Keyword that fired the boost. */
+      keyword: string;
       /**
-       * @description Recognition context.
-       *
-       *     The asserted languages, countries, document tags, and the
-       *     analyze-side correlation id. Held so
-       *     [`Engine::anonymize`] can compile against the same
-       *     vocabulary analyze used without the caller re-passing an
-       *     `AnalyzerParams`.
+       * @description Where the boosting keyword sits in the medium. For a hint match this
+       *     mirrors the hint's own location; for an in-text-window match it is the
+       *     keyword resolved through the modality's [`locate`]. `None` when the
+       *     keyword's stream range could not be placed.
        *
-       *     Required on the wire: a missing context on an incoming
-       *     [`Audit`] rejects at deserialize time so the shape
-       *     mismatch surfaces at load, not at apply.
-       *
-       *     [`Engine::anonymize`]: super::Engine::anonymize
+       *     [`locate`]: crate::modality::TextRecognizable::locate
        */
-      context: components["schemas"]["AuditContext"];
+      location?: components["schemas"]["AudioLocation"];
+    };
+    /**
+     * @description Correct what an existing detection *is* or *covers*, then redact
+     *     it under the policy set as corrected.
+     *
+     *     A reviewer fixing recognition's mistake rather than overriding
+     *     its consequence. Retagging into a label the policy does not cover
+     *     leaves the entity alone, exactly as if it had been detected that
+     *     way — which is why it is auditable rather than a mutable field.
+     */
+    AudioRetag: {
+      /** @description Who made it, when the caller said. */
+      actor?: string;
       /**
-       * @description One entry per container part the orchestrator surfaced.
-       *
-       *     Keyed by the container-private part id (e.g. a DOCX zip
-       *     entry name like `"word/media/image1.png"`); each value
-       *     carries that part's modality + entities.
+       * Format: uuid
+       * @description The entity being corrected.
        */
-      parts?: {
-        [key: string]: components["schemas"]["EntityGroup"];
-      };
+      id: string;
+      /** @description The corrected label, when recognition got it wrong. */
+      label?: components["schemas"]["LabelRef"];
       /**
-       * @description What the analyze pass cost: one entry per recognizer and
-       *     enricher that ran, each self-identifying by the name the
-       *     deployment configured it under.
-       *
-       *     Empty when nothing model-backed ran, which is the common
-       *     case for a pattern-only pass. Recorded on analyze and not
-       *     re-derived at anonymize time, so a host that bills or rate
-       *     limits on model spend reads it straight off the returned
-       *     [`Audit`].
+       * @description The corrected location, when the span clipped the value or
+       *     ran past it.
        */
-      usage?: components["schemas"]["UsageReport"];
+      location?: components["schemas"]["AudioLocation"];
+      /** @description The rationale, when one was given. */
+      reason?: string;
     };
     /**
-     * @description Recognition-side facts that travel from analyze to anonymize.
+     * @description What detection found in one document.
+     *
+     *     Wraps elide's [`Report`] with the things elide does not model:
+     *     the recognition [`DocumentContext`] the entities were scored
+     *     against, how the document decoded, and what the pass cost.
+     *
+     *     Reviewer edits are not here. They are the caller's own input,
+     *     applied to the report before anonymize
+     *     ([`EditSet::apply`](crate::entity::EditSet::apply)), so an audit
+     *     carries what analysis found *as amended* rather than the
+     *     amendments themselves.
      *
-     *     Mirrors elide's [`Scope`] shape one-for-one: direct fields
-     *     for `languages` and `countries` (typed, elide-native), a
-     *     [`metadata`] sub-struct for free-form classification strings
-     *     (`tags`, `purpose`, `audience`), and the analyze-time
-     *     [`correlation_id`]. The label catalog is not on here -
-     *     labels are policy-owned, and anonymize re-derives them from
-     *     the policy set it was handed.
+     *     # Serialization
      *
-     *     No [`Default`]: `correlation_id` has no meaningful default
-     *     (a nil UUID would silently collapse unrelated audits under
-     *     one bucket in downstream trace aggregators), so callers
-     *     supply one explicitly. Everything else defaults to empty.
+     *     [`Serialize`] but deliberately **not** `Deserialize`: a
+     *     serialized report tags entity groups by modality *name*, so
+     *     rebuilding one needs the registry [`Engine`] holds. Read an
+     *     audit back with [`Engine::deserialize_audit`].
      *
-     *     [`Scope`]: elide::recognition::Scope
-     *     [`metadata`]: Self::metadata
-     *     [`correlation_id`]: Self::correlation_id
+     *     # Schema
+     *
+     *     Generate under the **serialize** contract
+     *     ([`SchemaSettings::for_serialize`]). `usage` is
+     *     `skip_serializing_if`, and only that contract marks it optional
+     *     — `schema_for!` defaults to deserialize and declares it
+     *     required, so a generated client would reject responses this
+     *     crate really emits.
+     *
+     *     [`Engine`]: super::Engine
+     *     [`Engine::deserialize_audit`]: super::Engine::deserialize_audit
+     *     [`Report`]: elide::Report
+     *     [`SchemaSettings::for_serialize`]: schemars::generate::SchemaSettings::for_serialize
      */
-    AuditContext: {
+    Audit: {
       /**
-       * Format: uuid
-       * @description Analyze-time correlation id.
+       * @description How this document was decoded when it was analyzed.
        *
-       *     Threaded into every tracing span on the recognition path;
-       *     carried over so the anonymize path can link its own spans
-       *     to the same request. The anonymize call supplies a fresh
-       *     id from the passed [`Document`] as the anonymize-side
-       *     correlation id: this one stays as the analyze-side
-       *     pointer.
-       *
-       *     Required on the wire.
-       *
-       *     [`Document`]: elide_wire::file::Document
+       *     Carried back so anonymize decodes identically: the entity
+       *     offsets below are stored against the first decode, and a
+       *     differently-rendered second one would not line up.
        */
-      correlationId: string;
+      codec: components["schemas"]["CodecParams"];
       /**
-       * @description Caller-asserted jurisdictions.
+       * @description What the caller asserted when this document was analyzed:
+       *     languages, jurisdictions, document tags.
        *
-       *     Recorded from `AnalyzerParams.scope.countries`.
-       */
-      countries?: components["schemas"]["CountryCode"][];
-      /**
-       * @description Caller-asserted languages for the analysis.
+       *     Carried back so [`Engine::anonymize`] compiles against the
+       *     same vocabulary analyze used, and re-decodes under the same
+       *     codec configuration, without the caller re-passing it.
        *
-       *     Recorded from `AnalyzerParams.scope.languages` at analyze
-       *     time; anonymize re-uses them verbatim.
-       * @default []
+       *     [`Engine::anonymize`]: super::Engine::anonymize
        */
-      languages?: components["schemas"]["Languages"];
+      context: components["schemas"]["DocumentContext"];
       /**
-       * @description Free-form request context: document tags, request purpose,
-       *     output audience. See elide's [`ScopeMetadata`].
+       * @description The detections: elide's own report, body and container
+       *     parts, each entity carrying its provenance chain.
+       *
+       *     Edit it through [`Report`]'s own API — [`include`],
+       *     [`suppress`], [`entities`] — for the decisions elide models.
+       *
+       *     [`Report`]: elide::Report
+       *     [`include`]: elide::Report::include
+       *     [`suppress`]: elide::Report::suppress
+       *     [`entities`]: elide::Report::entities
        */
-      metadata?: components["schemas"]["ScopeMetadata"];
+      report: components["schemas"]["Report"];
       /**
-       * @description OCR mode the analyze call decoded with. Recorded so the
-       *     anonymize call re-decodes the same document under the same
-       *     codec configuration: otherwise entity offsets stored in
-       *     the audit wouldn't line up against a differently-rendered
-       *     second decode. Defaults to [`RasterMode::Auto`] (the codec's
-       *     built-in behaviour) when omitted.
-       * @default {
-       *       "kind": "auto"
-       *     }
+       * @description What the analyze pass cost: one entry per recognizer and
+       *     enricher that ran, each self-identifying by the name the
+       *     deployment configured it under.
+       *
+       *     Carried here rather than read off the report: elide derives
+       *     usage during analysis and drops it when a report is rebuilt
+       *     from the wire, so a host that bills on model spend would
+       *     lose it on the round trip.
        */
-      rasterMode?: components["schemas"]["RasterMode"];
+      usage: components["schemas"]["UsageReport"];
     };
     /**
      * @description A 32-byte BLAKE3 digest.
@@ -9717,6 +9972,14 @@ interface components {
       /** @description Minimum corner (top-left, conventionally). */
       min: components["schemas"]["Point"];
     };
+    /** @description The entity's confidence was rescaled by a per-recognizer factor. */
+    Calibration: {
+      /**
+       * Format: double
+       * @description Multiplier applied.
+       */
+      factor: number;
+    };
     /**
      * @description The coarse group a [`Label`] belongs to, for organizing detected entities
      *     by kind (`financial`, `health`, `identity`, …).
@@ -9819,6 +10082,21 @@ interface components {
       /** @description The text delta. */
       delta: string;
     };
+    /**
+     * @description A [`Cited`](Attribution::Cited) rationale: a citable authority, the citation
+     *     within it, and an optional rationale for why it applies.
+     */
+    CitedAttribution: {
+      /** @description The authority cited (e.g. `"GDPR"`, `"HIPAA"`, `"internal-policy"`). */
+      authority: string;
+      /** @description The citation within that authority (e.g. `"Art. 17(1)"`, `"§164.514"`). */
+      citation: string;
+      /**
+       * @description Why the citation applies here (e.g. `"data subject requested erasure"`),
+       *     when given.
+       */
+      rationale?: string;
+    };
     /**
      * @description Text a [`TextRedaction::Clamp`] emits for out-of-range values.
      *
@@ -9845,6 +10123,24 @@ interface components {
     } | {
       [key: string]: string;
     };
+    /**
+     * @description How the codec decodes this document.
+     *
+     *     Defaults to the codec's own behaviour, so a caller with no
+     *     opinion passes [`CodecParams::default`].
+     */
+    CodecParams: {
+      /**
+       * @description How container formats carrying both a text layer and page
+       *     images treat OCR.
+       *
+       *     Defaults to [`RasterMode::Auto`], the codec's own behaviour.
+       * @default {
+       *       "kind": "auto"
+       *     }
+       */
+      rasterMode?: components["schemas"]["RasterMode"];
+    };
     /**
      * @description Color as 8-bit RGB.
      *
@@ -9904,6 +10200,18 @@ interface components {
      *     [`Confidence`]: crate::primitive::Confidence
      */
     ConfidenceThreshold: number;
+    /**
+     * @description A competing detection of a *different* label over the same span was resolved
+     *     against this (winning) entity — the loser is recorded, not dropped.
+     */
+    Conflict: {
+      /** @description The loser's confidence at resolution time. */
+      competing_confidence: components["schemas"]["Confidence"];
+      /** @description The label of the detection that lost arbitration. */
+      competing_label: components["schemas"]["LabelRef"];
+      /** @description Name of the conflict policy that chose the winner. */
+      resolved_by: string;
+    };
     /**
      * @description Response type for a workspace connection.
      *
@@ -10087,6 +10395,19 @@ interface components {
        */
       provider?: string[];
     };
+    /**
+     * @description A competing detection of a different label over the same span was left
+     *     *unresolved*: both entities survive, flagged for a human. Recorded on each
+     *     entity of the contested pair, naming the other.
+     */
+    Contested: {
+      /** @description The competing detection's confidence. */
+      competing_confidence: components["schemas"]["Confidence"];
+      /** @description The label of the competing detection. */
+      competing_label: components["schemas"]["LabelRef"];
+      /** @description Name of the policy that flagged the contest. */
+      flagged_by: string;
+    };
     /**
      * @description [ISO 3166-1] country, identified by its code.
      *
@@ -10136,6 +10457,26 @@ interface components {
        */
       sync?: components["schemas"]["SyncScheduleInput"];
     };
+    /**
+     * @description Request payload to start a detection over a file.
+     *
+     *     Analyzes the file with the pipeline's configuration and returns the
+     *     detection, which holds the findings for review before redaction.
+     */
+    CreateDetection: {
+      /**
+       * Format: uuid
+       * @description The file to analyze.
+       */
+      fileId: string;
+      /**
+       * @description Per-document scope (languages, jurisdictions, document labels).
+       *
+       *     Overrides the pipeline's `defaultScope` when present; absent falls back to
+       *     the pipeline default.
+       */
+      scope?: components["schemas"]["DocumentContext"];
+    };
     /** @description Request payload for creating a new workspace invite. */
     CreateInvite: {
       /** @description When the invitation expires. */
@@ -10177,26 +10518,6 @@ interface components {
        */
       status?: components["schemas"]["PipelineStatus"];
     };
-    /**
-     * @description Request payload to start a run (detect) over a file.
-     *
-     *     Analyzes the file with the pipeline's configuration and returns the run,
-     *     which holds the findings for review before redaction.
-     */
-    CreatePipelineRun: {
-      /**
-       * Format: uuid
-       * @description The file to analyze.
-       */
-      fileId: string;
-      /**
-       * @description Per-document scope (languages, jurisdictions, document labels).
-       *
-       *     Overrides the pipeline's `defaultScope` when present; absent falls back to
-       *     the pipeline default.
-       */
-      scope?: components["schemas"]["ScopeParams"];
-    };
     /**
      * @description Request payload for creating a new workspace policy.
      *
@@ -10329,42 +10650,327 @@ interface components {
        */
       to?: string;
     };
+    /** @description Several detections were fused into one entity. */
+    Deduplication: {
+      /** @description Name of the fusion strategy that combined them. */
+      strategy: string;
+    };
     /**
-     * @description Pixel dimensions of an image or any 2-D canvas.
-     *
-     *     Converts between normalized `0.0..=1.0` coordinates (what vision
-     *     models typically emit) and absolute pixel coordinates (what renderers
-     *     consume). See
-     *     [`UnitBoundingBox::denormalize`]
-     *     for the conversion.
+     * @description Response type for a detection.
      *
-     *     [`UnitBoundingBox::denormalize`]: super::UnitBoundingBox::denormalize
+     *     A detection is addressed by its own opaque id; the owning pipeline and
+     *     workspace slugs are carried for context. Redacted outputs are not here — a
+     *     detection produces many redactions, each fetched from its `redactions`
+     *     endpoint.
      */
-    Dimensions: {
+    Detection: {
       /**
-       * Format: uint32
-       * @description Height in pixels.
+       * Format: date-time
+       * @description When the detection completed analysis.
        */
-      height: number;
+      completedAt?: string;
+      /** @description Human-readable failure reason, present only when the detection `failed`. */
+      error?: string;
+      /** @description Opaque identifier of the detection. */
+      id: components["schemas"]["DetectionId"];
       /**
-       * Format: uint32
-       * @description Width in pixels.
+       * Format: uuid
+       * @description Source document this detection analyzes.
        */
-      width: number;
-    };
-    /**
-     * Format: uint16
-     * @description Dots-per-inch resolution for rasterizing vector content.
-     *
-     *     Used e.g. for rendering PDF pages to images for OCR.
-     *
-     *     PDF coordinates are in points (1 pt = 1/72 in), so
-     *     [`scale_factor`] gives the multiplier from points to
-     *     pixels at this resolution.
-     *
+      inputFileId: string;
+      /**
+       * @description Display name of the source document, for showing the detection without a
+       *     separate file lookup. `None` if the file was removed (e.g. by retention).
+       */
+      inputFileName?: string;
+      /** @description Non-encrypted metadata for filtering/display. */
+      metadata: components["schemas"]["DetectionMetadata"];
+      /** @description Handle of the pipeline this detection belongs to. */
+      pipelineSlug: components["schemas"]["Handle"];
+      /**
+       * Format: date-time
+       * @description When the detection started.
+       */
+      startedAt: string;
+      /**
+       * @description Current detection status.
+       *
+       *     The detections are available to fetch from the detection's `analysis`
+       *     endpoint once this reaches `complete`.
+       */
+      status: components["schemas"]["DetectionStatus"];
+      /** @description How the detection was triggered. */
+      triggerType: components["schemas"]["PipelineTriggerType"];
+      /** @description Account that triggered the detection. */
+      triggeredBy: components["schemas"]["AccountRef"];
+      /** @description Handle of the workspace this detection belongs to. */
+      workspaceSlug: components["schemas"]["Handle"];
+    };
+    /** @description Params of a detection activity (`pipeline.detection.*`). */
+    DetectionActivityParams: {
+      /** @description Id of the detection. */
+      detectionId: components["schemas"]["DetectionId"];
+      /** @description Slug of the owning pipeline. */
+      pipelineSlug: components["schemas"]["Handle"];
+    };
+    /** @description Pipeline-run health for a workspace. */
+    DetectionAnalytics: {
+      /**
+       * Format: int64
+       * @description Mean completed-run duration in milliseconds; omitted until a run completes.
+       */
+      avgDurationMs?: number;
+      /**
+       * @description Per-status breakdown, one entry per run status (zero-filled), in a stable
+       *     order.
+       */
+      byStatus: components["schemas"]["DetectionStatusEntry"][];
+      /**
+       * Format: double
+       * @description Failed / (completed + failed). Omitted when no run has reached a terminal
+       *     state (genuinely no signal, not zero).
+       */
+      errorRate?: number;
+      /**
+       * Format: int64
+       * @description 95th-percentile completed-run duration in milliseconds; omitted until a run
+       *     completes.
+       */
+      p95DurationMs?: number;
+      /**
+       * Format: int64
+       * @description Total number of runs.
+       */
+      total: number;
+    };
+    /** @description Params of a `pipeline.detection.completed` notification. */
+    DetectionCompletedParams: {
+      /** @description Id of the detection. */
+      detectionId: components["schemas"]["DetectionId"];
+      /** @description Display name of the analyzed file, if known. */
+      inputFileName?: string;
+      /** @description Slug of the owning pipeline. */
+      pipelineSlug: components["schemas"]["Handle"];
+    };
+    /** @description A single day of run activity. */
+    DetectionDayEntry: {
+      /**
+       * Format: int64
+       * @description Mean completed-run duration (milliseconds) this day; omitted if none completed.
+       */
+      avgDurationMs?: number;
+      /**
+       * Format: date
+       * @description The day (`YYYY-MM-DD`, UTC).
+       */
+      date: string;
+      /**
+       * Format: double
+       * @description Failed / (completed + failed) for this day; omitted when no run reached a
+       *     terminal state that day.
+       */
+      errorRate?: number;
+      /**
+       * Format: int64
+       * @description Input/prompt tokens spent by this day's runs; omitted when none used a model.
+       */
+      inputTokens?: number;
+      /**
+       * Format: int64
+       * @description Output/completion tokens spent this day; omitted when none used a model.
+       */
+      outputTokens?: number;
+      /**
+       * Format: int64
+       * @description 95th-percentile completed-run duration (milliseconds) this day; omitted if none.
+       */
+      p95DurationMs?: number;
+      /**
+       * Format: int64
+       * @description Runs started this day (`0` on a quiet day).
+       */
+      runs: number;
+      /**
+       * Format: int64
+       * @description Reported total tokens this day; omitted when none used a model.
+       */
+      totalTokens?: number;
+    };
+    /** @description Params of a `pipeline.detection.failed` notification. */
+    DetectionFailedParams: {
+      /** @description Id of the detection. */
+      detectionId: components["schemas"]["DetectionId"];
+      /** @description Failure reason, if available. */
+      error?: string;
+      /** @description Display name of the analyzed file, if known. */
+      inputFileName?: string;
+      /** @description Slug of the owning pipeline. */
+      pipelineSlug: components["schemas"]["Handle"];
+    };
+    /** @description Opaque detection identifier (detection_<uuid>). */
+    DetectionId: string;
+    /** @description Structured metadata for a detection. */
+    DetectionMetadata: {
+      /** @description Failure reason recorded when the detection failed. */
+      error?: string;
+      /** @description Free-form labels attached to the detection. */
+      tags?: string[];
+      /**
+       * @description The engine's full per-recognizer usage report (durations, per-model token
+       *     counts), stored opaquely for drill-down. Per-model token totals for
+       *     aggregation live in the `workspace_detection_usage` table; this keeps the
+       *     detail. Absent when the detection produced no usage.
+       */
+      usage?: unknown;
+    };
+    /**
+     * @description Generic paginated response wrapper.
+     *
+     *     Provides a consistent structure for all paginated API responses with
+     *     cursor-based pagination support. When `next_cursor` is present, there
+     *     are more items to fetch.
+     */
+    DetectionPage: {
+      /** @description Items in this page. */
+      items: components["schemas"]["Detection"][];
+      /** @description Cursor to fetch the next page. Present only when more items exist. */
+      nextCursor?: string;
+      /**
+       * Format: int64
+       * @description Total count of items matching the query (if requested).
+       */
+      total?: number;
+    };
+    /** @description Path parameters for detection operations. */
+    DetectionPathParams: {
+      /** @description Opaque identifier of the detection. */
+      detectionId: components["schemas"]["DetectionId"];
+    };
+    /**
+     * @description The execution status of a detection (one analysis pass of a file).
+     *
+     *     Corresponds to the `DETECTION_STATUS` PostgreSQL enum. A detection is
+     *     `Pending` (enqueued, no worker yet), then `Executing` (a worker is actively
+     *     analyzing), then settles into `Complete` (analysis done, ready to redact) or
+     *     `Failed`. Redaction is a separate, repeatable action over a complete
+     *     detection and does not change this status.
+     */
+    DetectionStatus: "pending" | "executing" | "complete" | "failed";
+    /** @description One status's share of a workspace's runs. */
+    DetectionStatusEntry: {
+      /**
+       * Format: int64
+       * @description Number of runs in this status.
+       */
+      count: number;
+      /** @description The run status. */
+      status: components["schemas"]["DetectionStatus"];
+    };
+    /**
+     * @description A detection's status change, broadcast on the core-NATS subject
+     *     [`detection_subject`].
+     *
+     *     Fan-out to any watching SSE connections; the detection row in Postgres remains
+     *     the source of truth, so a missed broadcast is recoverable by re-reading it.
+     */
+    DetectionStatusEvent: {
+      /**
+       * Format: uuid
+       * @description The detection whose status changed.
+       */
+      detectionId: string;
+      /** @description The detection's new status. */
+      status: components["schemas"]["DetectionStatus"];
+    };
+    /**
+     * @description A workspace's daily run activity over a window: one point per day, dense
+     *     (quiet days included with `runs: 0`), ready to plot as a continuous series.
+     */
+    DetectionTimeSeries: {
+      /** @description One entry per day in the requested window, oldest first. */
+      points: components["schemas"]["DetectionDayEntry"][];
+    };
+    /**
+     * @description Pixel dimensions of an image or any 2-D canvas.
+     *
+     *     Converts between normalized `0.0..=1.0` coordinates (what vision
+     *     models typically emit) and absolute pixel coordinates (what renderers
+     *     consume). See
+     *     [`UnitBoundingBox::denormalize`]
+     *     for the conversion.
+     *
+     *     [`UnitBoundingBox::denormalize`]: super::UnitBoundingBox::denormalize
+     */
+    Dimensions: {
+      /**
+       * Format: uint32
+       * @description Height in pixels.
+       */
+      height: number;
+      /**
+       * Format: uint32
+       * @description Width in pixels.
+       */
+      width: number;
+    };
+    /**
+     * @description What a caller asserts about the document being processed.
+     *
+     *     Everything defaults to empty, so a caller asserting nothing
+     *     passes [`DocumentContext::default`] and lets the recognizers use
+     *     their own defaults.
+     */
+    DocumentContext: {
+      /**
+       * @description Jurisdictions the caller asserts apply.
+       *
+       *     Read by policy predicates that vary by jurisdiction, so a
+       *     rule can act on a document from one country and not another.
+       */
+      countries?: components["schemas"]["CountryCode"][];
+      /**
+       * @description Languages the caller asserts the document is in.
+       *
+       *     Recognizers that take a language hint use it; the
+       *     language-detection enricher fills the gap when this is
+       *     empty.
+       * @default []
+       */
+      languages?: components["schemas"]["Languages"];
+      /**
+       * @description Free-form request context: document tags, request purpose,
+       *     output audience. See elide's [`ScopeMetadata`].
+       */
+      metadata?: components["schemas"]["ScopeMetadata"];
+    };
+    /**
+     * Format: uint16
+     * @description Dots-per-inch resolution for rasterizing vector content.
+     *
+     *     Used e.g. for rendering PDF pages to images for OCR.
+     *
+     *     PDF coordinates are in points (1 pt = 1/72 in), so
+     *     [`scale_factor`] gives the multiplier from points to
+     *     pixels at this resolution.
+     *
      *     [`scale_factor`]: Self::scale_factor
      */
     Dpi: number;
+    /**
+     * @description Reviewer edits for one document, one list per modality.
+     *
+     *     Empty by default: an audit nobody has reviewed carries none.
+     */
+    EditSet: {
+      /** @description Edits to audio entities. */
+      audio?: components["schemas"]["AudioEdit"][];
+      /** @description Edits to image entities. */
+      image?: components["schemas"]["ImageEdit"][];
+      /** @description Edits to tabular entities. */
+      tabular?: components["schemas"]["TabularEdit"][];
+      /** @description Edits to text entities. */
+      text?: components["schemas"]["TextEdit"][];
+    };
     /**
      * @description Coreference identifier shared by entities that denote the same
      *     real-world thing.
@@ -10380,36 +10986,6 @@ interface components {
      *     mentions, not a global key.
      */
     EntityCoRef: string;
-    /**
-     * @description A modality-tagged group of recognised entities.
-     *
-     *     The unit [`Audit`] stores in `body` and in every `parts`
-     *     entry.
-     *
-     *     Tagged by `modality` (snake_case) so deserialization picks the
-     *     right variant and the entity vec inside is statically typed
-     *     per modality: apply-time we hand each variant back to elide
-     *     as a `Vec<Entity<M>>` for the appropriate `M`.
-     *
-     *     [`Audit`]: crate::Audit
-     */
-    EntityGroup: {
-      entities: components["schemas"]["TextEntityRecord"][];
-      /** @constant */
-      modality: "text";
-    } | {
-      entities: components["schemas"]["TabularEntityRecord"][];
-      /** @constant */
-      modality: "tabular";
-    } | {
-      entities: components["schemas"]["ImageEntityRecord"][];
-      /** @constant */
-      modality: "image";
-    } | {
-      entities: components["schemas"]["AudioEntityRecord"][];
-      /** @constant */
-      modality: "audio";
-    };
     /**
      * @description HTTP error response representation with security-conscious design.
      *
@@ -10503,7 +11079,7 @@ interface components {
      *     version chain (lineage); import origin (connection and remote key) lives in
      *     the `workspace_file_imports` satellite.
      */
-    FileKind: "original" | "redacted" | "audit";
+    FileKind: "original" | "redacted" | "audit" | "review";
     /**
      * @description Generic paginated response wrapper.
      *
@@ -10527,6 +11103,16 @@ interface components {
      * @enum {string}
      */
     FormatToken: "csv" | "docx" | "htm" | "html" | "jpeg" | "jpg" | "json" | "log" | "pdf" | "png" | "rtf" | "tif" | "tiff" | "txt" | "wav" | "xlsx" | "xml";
+    /**
+     * @description A [`Freeform`](Attribution::Freeform) rationale: a policy label and an
+     *     optional human description, with no formal citation.
+     */
+    FreeformAttribution: {
+      /** @description Human-readable description (e.g. `"right to erasure"`), when given. */
+      description?: string;
+      /** @description The policy's name (e.g. `"gdpr-art-17"`, `"hipaa-safe-harbor"`). */
+      name: string;
+    };
     /**
      * @description Typed credentials for Google Cloud Storage.
      *
@@ -10657,6 +11243,28 @@ interface components {
      *       as de-identified.
      */
     HipaaDeidMethod: "safe_harbor" | "limited_data_set" | "expert_determination";
+    /**
+     * @description A detection recognition missed.
+     *
+     *     Recorded on the report with human provenance, so it is never
+     *     mistaken for an automatic hit, then redacted under the policy set
+     *     like any other entity: an added label the policy does not cover
+     *     is left alone.
+     *
+     *     Carries no entity id — the entity does not exist yet, and the
+     *     engine mints one when the edit is applied, so a client cannot
+     *     collide with a real detection or shadow an existing entity.
+     */
+    ImageAdd: {
+      /** @description Who made it, when the caller said. */
+      actor?: string;
+      /** @description What the reviewer says this is. */
+      label: components["schemas"]["LabelRef"];
+      /** @description Where it sits in the document. */
+      location: components["schemas"]["ImageLocation"];
+      /** @description The rationale, when one was given. */
+      reason?: string;
+    };
     /**
      * @description One node in an entity's audit DAG: a thing that happened, with its
      *     effect on confidence and its tamper-evident links.
@@ -10732,115 +11340,70 @@ interface components {
      * @description Kind of an [`AuditEvent`], carrying its event-specific detail and the
      *     rationale for why it happened.
      *
-     *     `#[non_exhaustive]`: new event kinds (verification, annotation, …)
-     *     can be added compatibly. The recognition kinds ([`Pattern`],
-     *     [`Model`]) carry the matched [`Location`]; the rest carry their own
-     *     data.
-     *
+     *     A thin tagged union: each variant wraps one payload struct (e.g.
+     *     [`Redaction`], [`Selection`], [`Manual`]) that owns that kind's fields, its
+     *     docs, and how it folds into the audit hash. Match on a variant to reach its
+     *     payload:
+     *
+     *     ```
+     *     # use elide_core::entity::audit::AuditKind;
+     *     # use elide_core::modality::text::Text;
+     *     # fn show(kind: &AuditKind<Text>) {
+     *     if let AuditKind::Redaction(redaction) = kind {
+     *         let _ = &redaction.operator;
+     *     }
+     *     # }
+     *     ```
+     *
+     *     `#[non_exhaustive]`: new event kinds (verification, annotation, …) can be
+     *     added compatibly. The recognition kinds ([`Pattern`], [`Model`]) carry the
+     *     matched [`Location`]; the rest carry their own data.
+     *
+     *     [`AuditEvent`]: super::AuditEvent
      *     [`Pattern`]: AuditKind::Pattern
      *     [`Model`]: AuditKind::Model
      *     [`Location`]: Modality::Location
      */
     ImageAuditKind: {
+      detail: components["schemas"]["ImagePattern"];
       /** @constant */
       kind: "pattern";
-      /** @description Where the recognizer matched. */
-      location: components["schemas"]["ImageLocation"];
-      /** @description Pattern detail. */
-      pattern: components["schemas"]["PatternEvent"];
     } | {
+      detail: components["schemas"]["ImageModel"];
       /** @constant */
       kind: "model";
-      /** @description Where the recognizer matched. */
-      location: components["schemas"]["ImageLocation"];
-      /** @description Model detail. */
-      model: components["schemas"]["ModelEvent"];
     } | {
+      detail: components["schemas"]["Deduplication"];
       /** @constant */
       kind: "deduplication";
-      /** @description Name of the fusion strategy that combined them. */
-      strategy: string;
     } | {
-      /** @description The loser's confidence at resolution time. */
-      competing_confidence: components["schemas"]["Confidence"];
-      /** @description The label of the detection that lost arbitration. */
-      competing_label: components["schemas"]["LabelRef"];
+      detail: components["schemas"]["Conflict"];
       /** @constant */
       kind: "conflict";
-      /** @description Name of the conflict policy that chose the winner. */
-      resolved_by: string;
-    } | {
-      /** @description The competing detection's confidence. */
-      competing_confidence: components["schemas"]["Confidence"];
-      /** @description The label of the competing detection. */
-      competing_label: components["schemas"]["LabelRef"];
-      /** @description Name of the policy that flagged the contest. */
-      flagged_by: string;
-      /** @constant */
-      kind: "contested";
-    } | {
-      /**
-       * Format: double
-       * @description Multiplier applied.
-       */
-      factor: number;
+    } | {
+      detail: components["schemas"]["Contested"];
+      /** @constant */
+      kind: "contested";
+    } | {
+      detail: components["schemas"]["Calibration"];
       /** @constant */
       kind: "calibration";
     } | {
-      /**
-       * @description The located [`Hint`] the keyword fired from, when the match came
-       *     from an out-of-band hint (a column header, a key) rather than
-       *     the in-text word window. `None` for an in-text-window match.
-       *
-       *     [`Hint`]: crate::modality::Hint
-       */
-      hint?: components["schemas"]["ImageHint"];
-      /** @description Keyword that fired the boost. */
-      keyword: string;
+      detail: components["schemas"]["ImageRefinement"];
       /** @constant */
       kind: "refinement";
-      /**
-       * @description Where the boosting keyword sits in the medium. For a hint match
-       *     this mirrors the hint's own location; for an in-text-window match
-       *     it is the keyword resolved through the modality's [`locate`] (a
-       *     pixel box for image, a time span for audio, the byte range for
-       *     text/tabular). `None` when the keyword's stream range could not be
-       *     placed, symmetric with a match the recognizer itself drops.
-       *
-       *     [`locate`]: crate::modality::TextRecognizable::locate
-       */
-      location?: components["schemas"]["ImageLocation"];
     } | {
-      /**
-       * @description The author-supplied policy rationale, when the operator carried an
-       *     [`Attribution`]; `None` otherwise.
-       */
-      attribution?: components["schemas"]["Attribution"];
-      /** @description Identifier of the key needed to reverse it, if reversible. */
-      key_id?: string;
+      detail: components["schemas"]["Redaction"];
       /** @constant */
       kind: "redaction";
-      /** @description How much the output leaks about the original. */
-      leak_profile: components["schemas"]["LeakProfile"];
-      /**
-       * @description Which selection rule chose this operator: the automatic "why"
-       *     (matched a label, a tag, a predicate, or the fallback).
-       */
-      matched_by: components["schemas"]["RuleMatch"];
-      /** @description Which operator (name + version) ran. */
-      operator: components["schemas"]["OperatorId"];
-      /**
-       * @description BLAKE3 digest of the original text the operator hid, when the
-       *     redaction layer recorded it. Proves *what* was redacted without
-       *     storing the plaintext; `None` when the operator did not capture it.
-       */
-      span_hash?: components["schemas"]["AuditHash"];
-      /**
-       * Format: uint32
-       * @description Byte length of the original text the operator hid, paired with
-       *     [`span_hash`](Self::Redaction::span_hash). `None` when not captured.
-       */
-      span_length?: number;
+    } | {
+      detail: components["schemas"]["Selection"];
+      /** @constant */
+      kind: "selection";
+    } | {
+      detail: components["schemas"]["ImageManual"];
+      /** @constant */
+      kind: "manual";
     };
     /**
      * @description Full audit trail of an [`Entity`]: every [`AuditEvent`] in its life, as a
@@ -10895,6 +11458,23 @@ interface components {
       /** @description Original filename, when known. */
       filename?: string;
     };
+    /**
+     * @description One change to an analyzed document.
+     *
+     *     `Add` carries no id because the entity does not exist yet; the
+     *     engine mints one when the edit is applied, so a client cannot
+     *     collide with a real detection or shadow an existing entity.
+     */
+    ImageEdit: ({
+      /** @constant */
+      op: "add";
+    } & components["schemas"]["ImageAdd"]) | ({
+      /** @constant */
+      op: "retag";
+    } & components["schemas"]["ImageRetag"]) | ({
+      /** @constant */
+      op: "suppress";
+    } & components["schemas"]["Suppress"]);
     /**
      * @description Detected piece of sensitive information within some medium.
      *
@@ -10923,7 +11503,12 @@ interface components {
     ImageEntity: {
       /**
        * @description Tamper-evident audit trail: every contributing detection, the fusion
-       *     event if any, and the redaction that hid it, as a hash-linked DAG.
+       *     event if any, and the redaction that hid it, as a hash-linked DAG. It is
+       *     also the single source of truth for whether a reviewer
+       *     [suppressed](Self::is_suppressed) the entity — a suppression is a
+       *     [`Manual`] event on this trail, not a separate flag.
+       *
+       *     [`Manual`]: crate::entity::audit::AuditKind::Manual
        */
       audit: components["schemas"]["ImageAuditLog"];
       /** @description Effective confidence in `0.0..=1.0` (fused, if applicable). */
@@ -10968,30 +11553,6 @@ interface components {
        */
       recognized_range?: components["schemas"]["Range_of_uint"];
     };
-    /**
-     * @description One recognized entity plus the optional reviewer override.
-     *
-     *     The bound mirrors elide's [`Entity<M>`]: serialization needs
-     *     `M::Location` and `M::Data` (de)serializable, and JsonSchema
-     *     derivation needs them schema-able. All four modalities elide
-     *     ships satisfy these under the `serde` + `schema` features.
-     */
-    ImageEntityRecord: {
-      /** @description The elide entity, as recognition produced it. */
-      entity: components["schemas"]["ImageEntity"];
-      /**
-       * @description Reviewer-supplied redaction override.
-       *
-       *     `None` means "use the matching policy rule's decision";
-       *     `Some(...)` overrides that rule for this specific entity
-       *     at apply time. Reviewer overrides take precedence over
-       *     every policy rule and inherit the authority of the
-       *     [`Review::policy_id`] they name: the audit event's
-       *     attribution stamps that policy so the trail names the
-       *     authority under which the override fired.
-       */
-      review?: components["schemas"]["Review"];
-    };
     /**
      * @description Located, typed piece of context a recognizer may treat as in-context
      *     for a nearby value.
@@ -11037,6 +11598,54 @@ interface components {
        */
       polygon?: components["schemas"]["Polygon"];
     };
+    /**
+     * @description A human override, outside automatic detection: an entity a reviewer added by
+     *     hand, or a detected one they marked to ignore. Its provenance is a person's
+     *     decision, not a recognizer's — so the trail records *why* (an
+     *     [`Attribution`], when supplied). *Who* made the override is the event's
+     *     [`source`], not a payload field.
+     *
+     *     [`source`]: super::AuditEvent::source
+     */
+    ImageManual: {
+      /**
+       * @description The reviewer's rationale, when supplied (e.g. a freeform
+       *     `"false positive"`, or a cited authority). `None` for an unexplained
+       *     override.
+       */
+      attribution?: components["schemas"]["Attribution"];
+      /**
+       * @description Which human decision this records: including a missed entity, or
+       *     suppressing a detected one. This is the authority on whether the entity
+       *     is redacted — [`AuditLog::is_suppressed`] reads it, so there is no
+       *     separate flag to keep in sync.
+       *
+       *     [`AuditLog::is_suppressed`]: crate::entity::audit::AuditLog::is_suppressed
+       */
+      intent: components["schemas"]["ManualIntent"];
+      /** @description Where the override applies, in modality-native coordinates. */
+      location: components["schemas"]["ImageLocation"];
+    };
+    /**
+     * @description Detail of a model/NER recognition: a model matched at `location`, with its
+     *     metadata in `model`.
+     */
+    ImageModel: {
+      /** @description Where the recognizer matched. */
+      location: components["schemas"]["ImageLocation"];
+      /** @description Model metadata (name, version, contextual flag). */
+      model: components["schemas"]["ModelEvent"];
+    };
+    /**
+     * @description Detail of a pattern/dictionary recognition: a recognizer matched at
+     *     `location`, with the pattern metadata in `pattern`.
+     */
+    ImagePattern: {
+      /** @description Where the recognizer matched. */
+      location: components["schemas"]["ImageLocation"];
+      /** @description Pattern metadata (name, regex, validator, contextual flag). */
+      pattern: components["schemas"]["PatternEvent"];
+    };
     /** @description Operator spec a `redact` image rule carries. */
     ImageRedaction: {
       /** @constant */
@@ -11077,6 +11686,55 @@ interface components {
       /** @constant */
       kind: "blackbox";
     };
+    /** @description A context keyword near the entity lifted its confidence. */
+    ImageRefinement: {
+      /**
+       * @description The located [`Hint`] the keyword fired from, when the match came from an
+       *     out-of-band hint (a column header, a key) rather than the in-text word
+       *     window. `None` for an in-text-window match.
+       *
+       *     [`Hint`]: crate::modality::Hint
+       */
+      hint?: components["schemas"]["ImageHint"];
+      /** @description Keyword that fired the boost. */
+      keyword: string;
+      /**
+       * @description Where the boosting keyword sits in the medium. For a hint match this
+       *     mirrors the hint's own location; for an in-text-window match it is the
+       *     keyword resolved through the modality's [`locate`]. `None` when the
+       *     keyword's stream range could not be placed.
+       *
+       *     [`locate`]: crate::modality::TextRecognizable::locate
+       */
+      location?: components["schemas"]["ImageLocation"];
+    };
+    /**
+     * @description Correct what an existing detection *is* or *covers*, then redact
+     *     it under the policy set as corrected.
+     *
+     *     A reviewer fixing recognition's mistake rather than overriding
+     *     its consequence. Retagging into a label the policy does not cover
+     *     leaves the entity alone, exactly as if it had been detected that
+     *     way — which is why it is auditable rather than a mutable field.
+     */
+    ImageRetag: {
+      /** @description Who made it, when the caller said. */
+      actor?: string;
+      /**
+       * Format: uuid
+       * @description The entity being corrected.
+       */
+      id: string;
+      /** @description The corrected label, when recognition got it wrong. */
+      label?: components["schemas"]["LabelRef"];
+      /**
+       * @description The corrected location, when the span clipped the value or
+       *     ran past it.
+       */
+      location?: components["schemas"]["ImageLocation"];
+      /** @description The rationale, when one was given. */
+      reason?: string;
+    };
     /**
      * @description Workspace invite with complete information.
      *
@@ -11354,7 +12012,7 @@ interface components {
        *     categories), so this is where that mapping is recorded as
        *     data rather than prose.
        */
-      attribution?: components["schemas"]["AttributionKind"];
+      attribution?: components["schemas"]["Attribution"];
       /** @description Optional description for reviewers. */
       description?: string;
       /**
@@ -11563,6 +12221,12 @@ interface components {
        */
       rememberMe?: boolean;
     };
+    /**
+     * @description Which human decision a [`Manual`] event records — the reviewer actions on a
+     *     finding: [`Flag`](ManualIntent::Flag) a miss, [`Suppress`](ManualIntent::Suppress)
+     *     a false positive, or [`Amend`](ManualIntent::Amend) an existing finding.
+     */
+    ManualIntent: "flag" | "suppress" | "amend";
     /** @description Response type for a mark-all-read action. */
     MarkedReadStatus: {
       /**
@@ -11661,7 +12325,7 @@ interface components {
      * @enum {string}
      */
     ModalityToken: "audio" | "image" | "tabular" | "text";
-    /** @description Detail of a model/NER recognition. */
+    /** @description Metadata of a model/NER recognition, carried by [`Model`]. */
     ModelEvent: {
       /** @description Whether contextual analysis adjusted the score for this match. */
       contextual: boolean;
@@ -11740,11 +12404,12 @@ interface components {
      * @description Defines the type of notification event sent to a user.
      *
      *     This enumeration corresponds to the `NOTIFICATION_EVENT` PostgreSQL enum and
-     *     is used for member, connection-sync, pipeline-run, and system notifications.
+     *     is used for member, connection-sync, detection, redaction, and system
+     *     notifications.
      *     The values mirror the [`WebhookEvent`](super::WebhookEvent) naming for the
      *     events the two channels share.
      */
-    NotificationEvent: "member.invited" | "member.joined" | "connection.sync.completed" | "connection.sync.failed" | "pipeline.run.analyzed" | "pipeline.run.completed" | "pipeline.run.failed";
+    NotificationEvent: "member.invited" | "member.joined" | "connection.sync.completed" | "connection.sync.failed" | "pipeline.detection.completed" | "pipeline.redaction.created" | "pipeline.detection.failed";
     /**
      * @description Generic paginated response wrapper.
      *
@@ -11801,17 +12466,17 @@ interface components {
       /** @constant */
       type: "connection.sync.failed";
     } | {
-      data: components["schemas"]["PipelineRunAnalyzedParams"];
+      data: components["schemas"]["DetectionCompletedParams"];
       /** @constant */
-      type: "pipeline.run.analyzed";
+      type: "pipeline.detection.completed";
     } | {
-      data: components["schemas"]["PipelineRunCompletedParams"];
+      data: components["schemas"]["RedactionCreatedParams"];
       /** @constant */
-      type: "pipeline.run.completed";
+      type: "pipeline.redaction.created";
     } | {
-      data: components["schemas"]["PipelineRunFailedParams"];
+      data: components["schemas"]["DetectionFailedParams"];
       /** @constant */
-      type: "pipeline.run.failed";
+      type: "pipeline.detection.failed";
     };
     /** @description Response for notification settings within a workspace. */
     NotificationSettings: {
@@ -11866,11 +12531,11 @@ interface components {
       /** @description The new password (will be hashed before storage). */
       newPassword: string;
     };
-    /** @description Detail of a pattern/dictionary recognition. */
+    /** @description Metadata of a pattern/dictionary recognition, carried by [`Pattern`]. */
     PatternEvent: {
       /**
-       * @description Whether contextual analysis (keyword co-occurrence) adjusted the
-       *     score for this match.
+       * @description Whether contextual analysis (keyword co-occurrence) adjusted the score
+       *     for this match.
        */
       contextual: boolean;
       /** @description Name of the pattern that matched (e.g. `"ssn"`, `"email"`). */
@@ -11987,7 +12652,7 @@ interface components {
        *     A document's own scope overrides this at detect time; absent here means
        *     the document must assert its own.
        */
-      defaultScope?: components["schemas"]["ScopeParams"];
+      defaultScope?: components["schemas"]["DocumentContext"];
       /**
        * @description Slugs of workspace policies applied at redaction.
        *
@@ -11996,166 +12661,40 @@ interface components {
        */
       policySlugs?: components["schemas"]["Handle"][];
     };
-    /** @description Query parameters for filtering pipelines. */
-    PipelineFilter: {
-      /** @description Search by pipeline name (trigram similarity). */
-      search?: string;
-      /** @description Filter by pipeline status. */
-      status?: components["schemas"]["PipelineStatus"];
-    };
-    /** @description Path parameters for pipeline operations. */
-    PipelinePathParams: {
-      /** @description URL slug of the pipeline, unique within its workspace. */
-      pipelineSlug: string;
-    };
-    /**
-     * @description Response type for a pipeline run.
-     *
-     *     A run is addressed by its own opaque id; the owning pipeline and workspace
-     *     slugs are carried for context.
-     */
-    PipelineRun: {
-      /**
-       * Format: date-time
-       * @description When the run completed.
-       */
-      completedAt?: string;
-      /** @description Human-readable failure reason, present only when the run `failed`. */
-      error?: string;
-      /** @description Opaque identifier of the run. */
-      id: components["schemas"]["RunId"];
-      /**
-       * Format: uuid
-       * @description Source document this run analyzes / redacts.
-       */
-      inputFileId: string;
-      /**
-       * @description Display name of the source document, for showing the run without a
-       *     separate file lookup. `None` if the file was removed (e.g. by retention).
-       */
-      inputFileName?: string;
-      /** @description Non-encrypted metadata for filtering/display. */
-      metadata: components["schemas"]["RunMetadata"];
-      /**
-       * Format: uuid
-       * @description Redacted document produced by the run, once it completes.
-       */
-      outputFileId?: string;
-      /** @description Display name of the redacted output, once the run completes. */
-      outputFileName?: string;
-      /** @description Handle of the pipeline this run belongs to. */
-      pipelineSlug: components["schemas"]["Handle"];
-      /**
-       * Format: date-time
-       * @description When the run started.
-       */
-      startedAt: string;
-      /**
-       * @description Current run status.
-       *
-       *     The detections are available to fetch from the run's `detections`
-       *     endpoint once this reaches `analyzed`.
-       */
-      status: components["schemas"]["PipelineRunStatus"];
-      /** @description How the run was triggered. */
-      triggerType: components["schemas"]["PipelineTriggerType"];
-      /** @description Account that triggered the run. */
-      triggeredBy: components["schemas"]["AccountRef"];
-      /** @description Handle of the workspace this run belongs to. */
-      workspaceSlug: components["schemas"]["Handle"];
-    };
-    /** @description Params of a pipeline-run activity (`pipeline.run.*`). */
-    PipelineRunActivityParams: {
-      /** @description Slug of the owning pipeline. */
-      pipelineSlug: components["schemas"]["Handle"];
-      /** @description Id of the run. */
-      runId: components["schemas"]["RunId"];
-    };
-    /** @description Params of a `pipeline.run.analyzed` notification. */
-    PipelineRunAnalyzedParams: {
-      /** @description Display name of the analyzed file, if known. */
-      inputFileName?: string;
-      /** @description Slug of the owning pipeline. */
-      pipelineSlug: components["schemas"]["Handle"];
-      /** @description Id of the run. */
-      runId: components["schemas"]["RunId"];
-    };
-    /** @description Params of a `pipeline.run.completed` notification. */
-    PipelineRunCompletedParams: {
-      /** @description Display name of the analyzed file, if known. */
-      inputFileName?: string;
-      /** @description Slug of the owning pipeline. */
-      pipelineSlug: components["schemas"]["Handle"];
-      /** @description Id of the run. */
-      runId: components["schemas"]["RunId"];
-    };
-    /** @description Params of a `pipeline.run.failed` notification. */
-    PipelineRunFailedParams: {
-      /** @description Failure reason, if available. */
-      error?: string;
-      /** @description Display name of the analyzed file, if known. */
-      inputFileName?: string;
-      /** @description Slug of the owning pipeline. */
-      pipelineSlug: components["schemas"]["Handle"];
-      /** @description Id of the run. */
-      runId: components["schemas"]["RunId"];
-    };
-    /**
-     * @description Generic paginated response wrapper.
-     *
-     *     Provides a consistent structure for all paginated API responses with
-     *     cursor-based pagination support. When `next_cursor` is present, there
-     *     are more items to fetch.
-     */
-    PipelineRunPage: {
-      /** @description Items in this page. */
-      items: components["schemas"]["PipelineRun"][];
-      /** @description Cursor to fetch the next page. Present only when more items exist. */
-      nextCursor?: string;
-      /**
-       * Format: int64
-       * @description Total count of items matching the query (if requested).
-       */
-      total?: number;
-    };
-    /** @description Path parameters for pipeline run operations. */
-    PipelineRunPathParams: {
-      /** @description Opaque identifier of the run. */
-      runId: components["schemas"]["RunId"];
-    };
-    /**
-     * @description Defines the execution status of a pipeline run.
-     *
-     *     This enumeration corresponds to the `PIPELINE_RUN_STATUS` PostgreSQL enum and is used
-     *     to track the current state of a pipeline execution.
-     *
-     *     The detect phase has two states: `Queued` (the run is enqueued but no worker
-     *     has begun) and `Analyzing` (a worker is actively analyzing). They settle into
-     *     `Analyzed` (detection done, awaiting review), then `Completed` after redaction.
-     */
-    PipelineRunStatus: "queued" | "analyzing" | "analyzed" | "completed" | "failed" | "cancelled";
     /**
-     * @description Query parameters for listing a single pipeline's runs.
+     * @description Query parameters for listing a single pipeline's detections.
      *
      *     The pipeline is fixed by the route, so it narrows only by status, file,
      *     trigger account, and trigger type.
      */
-    PipelineRunsQuery: {
+    PipelineDetectionsQuery: {
       /**
        * Format: uuid
-       * @description Filter by the source file the run analyzes.
+       * @description Filter by the source file the detection analyzes.
        */
       fileId?: string;
-      /** @description Filter by run status. */
-      status?: components["schemas"]["PipelineRunStatus"];
-      /** @description Filter by how the run was initiated (user vs system). */
+      /** @description Filter by detection status. */
+      status?: components["schemas"]["DetectionStatus"];
+      /** @description Filter by how the detection was initiated (user vs system). */
       triggerType?: components["schemas"]["PipelineTriggerType"];
       /**
        * Format: uuid
-       * @description Filter by the account that triggered the run.
+       * @description Filter by the account that triggered the detection.
        */
       triggeredBy?: string;
     };
+    /** @description Query parameters for filtering pipelines. */
+    PipelineFilter: {
+      /** @description Search by pipeline name (trigram similarity). */
+      search?: string;
+      /** @description Filter by pipeline status. */
+      status?: components["schemas"]["PipelineStatus"];
+    };
+    /** @description Path parameters for pipeline operations. */
+    PipelinePathParams: {
+      /** @description URL slug of the pipeline, unique within its workspace. */
+      pipelineSlug: string;
+    };
     /**
      * @description Defines the lifecycle status of a pipeline definition.
      *
@@ -12305,11 +12844,11 @@ interface components {
        * @description Human-readable name. Display-only. Does not key anything.
        *
        *     Names the policy in a redaction event's [`Attribution`]
-       *     when a rule that fired carried no [`AttributionKind::Cited`]
+       *     when a rule that fired carried no [`Attribution::Cited`]
        *     attribution to render.
        *
        *     [`Attribution`]: elide_core::entity::audit::Attribution
-       *     [`AttributionKind::Cited`]: elide_core::entity::audit::AttributionKind::Cited
+       *     [`Attribution::Cited`]: elide_core::entity::audit::Attribution::Cited
        */
       name: string;
       /** @description Ordered rules. First match wins within this policy. */
@@ -12391,26 +12930,29 @@ interface components {
        * @description Why this rule exists: the authority it answers to.
        *
        *     The engine renders it into the redaction event's
-       *     [`Attribution`], so a reviewer sees the provision rather
-       *     than a bare UUID. `None` falls back to recording the
-       *     policy and rule ids alone.
+       *     [`Attribution`] verbatim, so a reviewer sees the provision
+       *     the rule answers to. `None` falls back to a freeform
+       *     attribution under the enclosing policy's name and
+       *     description — the rule itself is not named in the trail.
        *
        *     Optional so ad-hoc and hand-authored rules stay cheap to
        *     write; the shipped templates set it on every rule.
        *
        *     [`Attribution`]: elide_core::entity::audit::Attribution
        */
-      attribution?: components["schemas"]["AttributionKind"];
+      attribution?: components["schemas"]["Attribution"];
       /** @description Optional description for reviewers. */
       description?: string;
       /**
        * Format: uuid
-       * @description Stable identifier. UUIDv7 recommended. Engine stamps it
-       *     into the redaction event's [`Attribution::source_id`] so
-       *     reviewers can trace which rule fired. Every attachment a
-       *     [`RuleDispatch::Table`] expands into shares this UUID.
+       * @description Stable identifier. UUIDv7 recommended. Every attachment a
+       *     [`RuleDispatch::Table`] expands into shares this UUID, so
+       *     one authored rule stays one rule however many labels it
+       *     dispatches over.
        *
-       *     [`Attribution::source_id`]: elide_core::entity::audit::Attribution::source_id
+       *     Not carried onto the audit trail: a redaction event names
+       *     the [`attribution`](Self::attribution) the rule declared, or
+       *     its policy's, rather than the rule's own id.
        */
       id: string;
       /** @description Human-readable name. Display-only. */
@@ -12496,7 +13038,7 @@ interface components {
      *
      *     Serialises as an internally-tagged object under `kind`,
      *     matching the house pattern for option-bearing enums
-     *     (`Predicate`, `TextRedaction`, `AnyRedaction`). A caller
+     *     (`Predicate`, `TextRedaction`). A caller
      *     wire-picks a template as
      *     `{"kind": "hipaa_safe_harbor"}` or, for variants with
      *     operator options,
@@ -12681,20 +13223,150 @@ interface components {
       ner: components["schemas"]["RegisteredRecognizer"][];
     };
     /**
-     * @description Identifies a recognizer (name + version).
+     * @description Identifies a recognizer (name + version).
+     *
+     *     Pairs a stable name with a free-form version string so the audit
+     *     trail records not just *which* recognizer fired but *which build* of
+     *     it: a rerun against an updated ruleset or model is then
+     *     distinguishable from the original. The version is opaque text (a
+     *     semver, a checkpoint hash, a ruleset date); the core attaches no
+     *     ordering or comparison semantics to it.
+     */
+    RecognizerId: {
+      /** @description Stable, human-readable recognizer name (e.g. `"us-ssn-pattern"`). */
+      name: string;
+      /** @description Recognizer's version at the time it ran. */
+      version: string;
+    };
+    /**
+     * @description Request payload to redact a detection.
+     *
+     *     The reviewer's edits layer over the detection's analysis before redaction:
+     *     suppress a false positive, retag a detection, or add one the analysis missed.
+     *     Omit `edits` to redact with the policy decisions exactly as detected. Each
+     *     redact request produces a new redaction.
+     */
+    RedactDetection: {
+      /**
+       * @description Reviewer edits to apply before redaction, grouped by modality. Omit to
+       *     redact with the policy decisions exactly as detected.
+       */
+      edits?: components["schemas"]["EditSet"];
+    };
+    /** @description An operator hid the entity. */
+    Redaction: {
+      /**
+       * @description The author-supplied policy rationale, when the operator carried an
+       *     [`Attribution`]; `None` otherwise.
+       */
+      attribution?: components["schemas"]["Attribution"];
+      /** @description Identifier of the key needed to reverse it, if reversible. */
+      key_id?: string;
+      /**
+       * @description How much the output leaks about the original, when the operator claimed a
+       *     profile; `None` when it made no claim.
+       */
+      leak_profile?: components["schemas"]["LeakProfile"];
+      /**
+       * @description Which selection rule chose this operator: the automatic "why" (matched a
+       *     label, a tag, a predicate, or the fallback).
+       */
+      matched_by: components["schemas"]["RuleMatch"];
+      /** @description Which operator (name + version) ran. */
+      operator: components["schemas"]["OperatorId"];
+      /**
+       * @description BLAKE3 digest of the original text the operator hid, when the redaction
+       *     layer recorded it. Proves *what* was redacted without storing the
+       *     plaintext; `None` when the operator did not capture it.
+       */
+      span_hash?: components["schemas"]["AuditHash"];
+      /**
+       * Format: uint32
+       * @description Byte length of the original text the operator hid, paired with
+       *     [`span_hash`](Self::span_hash). `None` when not captured.
+       */
+      span_length?: number;
+    };
+    /** @description Params of a redaction activity (`pipeline.redaction.*`). */
+    RedactionActivityParams: {
+      /** @description Slug of the owning pipeline. */
+      pipelineSlug: components["schemas"]["Handle"];
+      /** @description Id of the redaction. */
+      redactionId: components["schemas"]["RedactionId"];
+    };
+    /** @description Params of a `pipeline.redaction.created` notification. */
+    RedactionCreatedParams: {
+      /** @description Id of the detection the redaction was produced from. */
+      detectionId: components["schemas"]["DetectionId"];
+      /** @description Display name of the redacted file, if known. */
+      inputFileName?: string;
+      /** @description Slug of the owning pipeline. */
+      pipelineSlug: components["schemas"]["Handle"];
+      /** @description Id of the redaction. */
+      redactionId: components["schemas"]["RedactionId"];
+    };
+    /** @description Opaque redaction identifier (redaction_<uuid>). */
+    RedactionId: string;
+    /**
+     * @description Path parameters for a redaction.
+     *
+     *     The redaction id is globally unique, so a redaction is addressed by id alone
+     *     and resolved within the workspace by the query.
+     */
+    RedactionPathParams: {
+      /** @description Opaque identifier of the redaction. */
+      redactionId: components["schemas"]["RedactionId"];
+    };
+    /**
+     * @description Response type for a redaction.
      *
-     *     Pairs a stable name with a free-form version string so the audit
-     *     trail records not just *which* recognizer fired but *which build* of
-     *     it: a rerun against an updated ruleset or model is then
-     *     distinguishable from the original. The version is opaque text (a
-     *     semver, a checkpoint hash, a ruleset date); the core attaches no
-     *     ordering or comparison semantics to it.
+     *     A redaction is one redact pass over a detection, produced with a specific set
+     *     of reviewer edits. It owns the redacted output document (downloadable through
+     *     the normal file endpoints) and a review audit recording what was redacted and
+     *     why (fetched from the redaction's `review` endpoint).
+     *
+     *     Named `RedactionResult` rather than `Redaction` because the engine's audit
+     *     schema already carries a `Redaction` (an audit event), and the two must not
+     *     collide in the generated OpenAPI.
      */
-    RecognizerId: {
-      /** @description Stable, human-readable recognizer name (e.g. `"us-ssn-pattern"`). */
-      name: string;
-      /** @description Recognizer's version at the time it ran. */
-      version: string;
+    RedactionResult: {
+      /**
+       * Format: date-time
+       * @description When the redaction was created.
+       */
+      createdAt: string;
+      /** @description The detection this redaction was produced from. */
+      detectionId: components["schemas"]["DetectionId"];
+      /** @description Opaque identifier of the redaction. */
+      id: components["schemas"]["RedactionId"];
+      /**
+       * Format: uuid
+       * @description Redacted output document this redaction produced. `None` only if the file
+       *     was removed (e.g. by retention).
+       */
+      outputFileId?: string;
+      /** @description Account that requested the redaction. */
+      requestedBy: components["schemas"]["AccountRef"];
+      /** @description Handle of the workspace this redaction belongs to. */
+      workspaceSlug: components["schemas"]["Handle"];
+    };
+    /**
+     * @description Generic paginated response wrapper.
+     *
+     *     Provides a consistent structure for all paginated API responses with
+     *     cursor-based pagination support. When `next_cursor` is present, there
+     *     are more items to fetch.
+     */
+    RedactionResultPage: {
+      /** @description Items in this page. */
+      items: components["schemas"]["RedactionResult"][];
+      /** @description Cursor to fetch the next page. Present only when more items exist. */
+      nextCursor?: string;
+      /**
+       * Format: int64
+       * @description Total count of items matching the query (if requested).
+       */
+      total?: number;
     };
     /**
      * @description Public view of one recognizer in the engine's NER or LLM
@@ -12737,6 +13409,45 @@ interface components {
       /** @description Whether to accept or decline the invitation. */
       acceptInvite: boolean;
     };
+    Report: {
+      body: ({
+        entities: components["schemas"]["TextEntity"][];
+        /** @constant */
+        modality: "text";
+      } | {
+        entities: components["schemas"]["ImageEntity"][];
+        /** @constant */
+        modality: "image";
+      } | {
+        entities: components["schemas"]["AudioEntity"][];
+        /** @constant */
+        modality: "audio";
+      } | {
+        entities: components["schemas"]["TabularEntity"][];
+        /** @constant */
+        modality: "tabular";
+      }) | null;
+      parts: {
+        [key: string]: {
+          entities: components["schemas"]["TextEntity"][];
+          /** @constant */
+          modality: "text";
+        } | {
+          entities: components["schemas"]["ImageEntity"][];
+          /** @constant */
+          modality: "image";
+        } | {
+          entities: components["schemas"]["AudioEntity"][];
+          /** @constant */
+          modality: "audio";
+        } | {
+          entities: components["schemas"]["TabularEntity"][];
+          /** @constant */
+          modality: "tabular";
+        };
+      };
+      usage?: components["schemas"]["UsageReport"];
+    };
     /**
      * @description How long a class of data is retained.
      *
@@ -12799,38 +13510,6 @@ interface components {
        */
       redactedDocuments?: components["schemas"]["Retention"];
     };
-    /**
-     * @description A reviewer-supplied redaction override with the policy
-     *     authority it draws from.
-     *
-     *     The `policy_id` isn't just for audit: it also picks which
-     *     per-policy pseudonym vault and per-policy [`KeyProvider`] the
-     *     override's operator resolves against, so an override using
-     *     [`Pseudonymize`] or [`HmacHash`] stays consistent with the
-     *     authoring policy's other rules.
-     *
-     *     [`KeyProvider`]: elide::redaction::operators::KeyProvider
-     *     [`Pseudonymize`]: elide::redaction::operators::Pseudonymize
-     *     [`HmacHash`]: elide::redaction::operators::HmacHash
-     */
-    Review: {
-      /**
-       * @description The per-modality redaction operators to run for this
-       *     entity. Overrides whatever the policy set would have
-       *     picked for the same entity.
-       */
-      action: components["schemas"]["ModalityRedactions"];
-      /**
-       * Format: uuid
-       * @description The policy whose authority the reviewer exercises. Must
-       *     match the `id` of a [`PolicyDefinition`] submitted with
-       *     the anonymize request. The audit event stamps this UUID
-       *     as the attribution `name`.
-       *
-       *     [`PolicyDefinition`]: elide_governance::PolicyDefinition
-       */
-      policyId: string;
-    };
     /**
      * @description A serializable summary of *which selection rule* bound an operator to an
      *     entity — the automatic "why" behind a redaction.
@@ -12852,129 +13531,6 @@ interface components {
     } | {
       tag: string;
     } | "predicate" | "fallback";
-    /** @description Pipeline-run health for a workspace. */
-    RunAnalytics: {
-      /**
-       * Format: int64
-       * @description Mean completed-run duration in milliseconds; omitted until a run completes.
-       */
-      avgDurationMs?: number;
-      /**
-       * @description Per-status breakdown, one entry per run status (zero-filled), in a stable
-       *     order.
-       */
-      byStatus: components["schemas"]["RunStatusEntry"][];
-      /**
-       * Format: double
-       * @description Failed / (completed + failed). Omitted when no run has reached a terminal
-       *     state (genuinely no signal, not zero).
-       */
-      errorRate?: number;
-      /**
-       * Format: int64
-       * @description 95th-percentile completed-run duration in milliseconds; omitted until a run
-       *     completes.
-       */
-      p95DurationMs?: number;
-      /**
-       * Format: int64
-       * @description Total number of runs.
-       */
-      total: number;
-    };
-    /** @description A single day of run activity. */
-    RunDayEntry: {
-      /**
-       * Format: int64
-       * @description Mean completed-run duration (milliseconds) this day; omitted if none completed.
-       */
-      avgDurationMs?: number;
-      /**
-       * Format: date
-       * @description The day (`YYYY-MM-DD`, UTC).
-       */
-      date: string;
-      /**
-       * Format: double
-       * @description Failed / (completed + failed) for this day; omitted when no run reached a
-       *     terminal state that day.
-       */
-      errorRate?: number;
-      /**
-       * Format: int64
-       * @description Input/prompt tokens spent by this day's runs; omitted when none used a model.
-       */
-      inputTokens?: number;
-      /**
-       * Format: int64
-       * @description Output/completion tokens spent this day; omitted when none used a model.
-       */
-      outputTokens?: number;
-      /**
-       * Format: int64
-       * @description 95th-percentile completed-run duration (milliseconds) this day; omitted if none.
-       */
-      p95DurationMs?: number;
-      /**
-       * Format: int64
-       * @description Runs started this day (`0` on a quiet day).
-       */
-      runs: number;
-      /**
-       * Format: int64
-       * @description Reported total tokens this day; omitted when none used a model.
-       */
-      totalTokens?: number;
-    };
-    /** @description Opaque run identifier (run_<uuid>). */
-    RunId: string;
-    /** @description Structured metadata for a pipeline run. */
-    RunMetadata: {
-      /** @description Failure reason recorded when the run failed. */
-      error?: string;
-      /** @description Free-form labels attached to the run. */
-      tags?: string[];
-      /**
-       * @description The engine's full per-recognizer usage report (durations, per-model token
-       *     counts), stored opaquely for drill-down. Per-model token totals for
-       *     aggregation live in the `workspace_pipeline_run_usage` table; this keeps
-       *     the detail. Absent when the run produced no usage.
-       */
-      usage?: unknown;
-    };
-    /** @description One status's share of a workspace's runs. */
-    RunStatusEntry: {
-      /**
-       * Format: int64
-       * @description Number of runs in this status.
-       */
-      count: number;
-      /** @description The run status. */
-      status: components["schemas"]["PipelineRunStatus"];
-    };
-    /**
-     * @description A run's status change, broadcast on the core-NATS subject [`run_subject`].
-     *
-     *     Fan-out to any watching SSE connections; the run row in Postgres remains the
-     *     source of truth, so a missed broadcast is recoverable by re-reading the run.
-     */
-    RunStatusEvent: {
-      /**
-       * Format: uuid
-       * @description The run whose status changed.
-       */
-      runId: string;
-      /** @description The run's new status. */
-      status: components["schemas"]["PipelineRunStatus"];
-    };
-    /**
-     * @description A workspace's daily run activity over a window: one point per day, dense
-     *     (quiet days included with `runs: 0`), ready to plot as a continuous series.
-     */
-    RunTimeSeries: {
-      /** @description One entry per day in the requested window, oldest first. */
-      points: components["schemas"]["RunDayEntry"][];
-    };
     /**
      * @description Typed credentials for S3-compatible provider.
      *
@@ -13071,39 +13627,28 @@ interface components {
       tags?: string[];
     };
     /**
-     * @description Caller-asserted scope for one request.
-     *
-     *     A narrower wire projection of `elide::recognition::Scope`:
-     *     `languages` and `countries` (typed, elide-native), plus
-     *     elide's [`ScopeMetadata`] block for free-form classification
-     *     strings (`tags`, `purpose`, `audience`). The engine assembles
-     *     this plus a server-minted `correlation_id` and a policy-derived
-     *     label catalog into the orchestrator's `Scope` at compile time.
+     * @description An operator was *picked* to hide the entity — the redaction decision,
+     *     recorded before it is applied so it can be reviewed (and the entity edited)
+     *     first. The [`Redaction`] event that follows records the operator actually
+     *     run.
      */
-    ScopeParams: {
+    Selection: {
       /**
-       * @description Caller-asserted jurisdictions.
-       *
-       *     When non-empty, recognizers that carry per-rule country
-       *     scopes skip rules that match none of them. An empty list
-       *     means "any": rules that declare countries still run as a
-       *     permissive fallback so callers who don't assert a
-       *     jurisdiction don't lose detections.
+       * @description The author-supplied policy rationale, when the matched rule carried an
+       *     [`Attribution`]; `None` otherwise.
        */
-      countries?: components["schemas"]["CountryCode"][];
+      attribution?: components["schemas"]["Attribution"];
       /**
-       * @description Caller-asserted languages for the analysis.
-       *
-       *     Empty means the caller asserted none, leaving detection
-       *     (if a language enricher runs) to fill in.
-       * @default []
+       * @description Which selection rule chose this operator: the automatic "why" (matched a
+       *     label, a tag, a predicate, or the fallback).
        */
-      languages?: components["schemas"]["Languages"];
+      matched_by: components["schemas"]["RuleMatch"];
       /**
-       * @description Free-form request context: document tags, request purpose,
-       *     output audience. See elide's [`ScopeMetadata`].
+       * @description Identity (name + version) of the operator picked. Its *config* is not
+       *     recorded — it lives in the policy that will run it, so apply re-resolves
+       *     the configured operator rather than reading it here.
        */
-      metadata?: components["schemas"]["ScopeMetadata"];
+      operator: components["schemas"]["OperatorId"];
     };
     /** @description Request to send a message and stream the assistant's reply. */
     SendChatMessage: {
@@ -13247,6 +13792,24 @@ interface components {
        */
       totalBytes: number;
     };
+    /**
+     * @description Leave this entity alone: a reviewer calling it a false positive.
+     *
+     *     It keeps its place and its provenance; the redaction pass skips
+     *     it. Recorded as a `Manual` event, so *who* decided and *why* is
+     *     auditable rather than the detection silently disappearing.
+     */
+    Suppress: {
+      /** @description Who made it, when the caller said. */
+      actor?: string;
+      /**
+       * Format: uuid
+       * @description The entity to leave alone.
+       */
+      id: string;
+      /** @description The rationale, when one was given. */
+      reason?: string;
+    };
     /**
      * @description Request payload to trigger a connection sync.
      *
@@ -13328,6 +13891,28 @@ interface components {
      *     to track whether a run was manually triggered, scheduled, or triggered by a webhook.
      */
     SyncTriggerType: "manual" | "scheduled" | "webhook";
+    /**
+     * @description A detection recognition missed.
+     *
+     *     Recorded on the report with human provenance, so it is never
+     *     mistaken for an automatic hit, then redacted under the policy set
+     *     like any other entity: an added label the policy does not cover
+     *     is left alone.
+     *
+     *     Carries no entity id — the entity does not exist yet, and the
+     *     engine mints one when the edit is applied, so a client cannot
+     *     collide with a real detection or shadow an existing entity.
+     */
+    TabularAdd: {
+      /** @description Who made it, when the caller said. */
+      actor?: string;
+      /** @description What the reviewer says this is. */
+      label: components["schemas"]["LabelRef"];
+      /** @description Where it sits in the document. */
+      location: components["schemas"]["TabularLocation"];
+      /** @description The rationale, when one was given. */
+      reason?: string;
+    };
     /**
      * @description One node in an entity's audit DAG: a thing that happened, with its
      *     effect on confidence and its tamper-evident links.
@@ -13403,115 +13988,70 @@ interface components {
      * @description Kind of an [`AuditEvent`], carrying its event-specific detail and the
      *     rationale for why it happened.
      *
-     *     `#[non_exhaustive]`: new event kinds (verification, annotation, …)
-     *     can be added compatibly. The recognition kinds ([`Pattern`],
-     *     [`Model`]) carry the matched [`Location`]; the rest carry their own
-     *     data.
-     *
+     *     A thin tagged union: each variant wraps one payload struct (e.g.
+     *     [`Redaction`], [`Selection`], [`Manual`]) that owns that kind's fields, its
+     *     docs, and how it folds into the audit hash. Match on a variant to reach its
+     *     payload:
+     *
+     *     ```
+     *     # use elide_core::entity::audit::AuditKind;
+     *     # use elide_core::modality::text::Text;
+     *     # fn show(kind: &AuditKind<Text>) {
+     *     if let AuditKind::Redaction(redaction) = kind {
+     *         let _ = &redaction.operator;
+     *     }
+     *     # }
+     *     ```
+     *
+     *     `#[non_exhaustive]`: new event kinds (verification, annotation, …) can be
+     *     added compatibly. The recognition kinds ([`Pattern`], [`Model`]) carry the
+     *     matched [`Location`]; the rest carry their own data.
+     *
+     *     [`AuditEvent`]: super::AuditEvent
      *     [`Pattern`]: AuditKind::Pattern
      *     [`Model`]: AuditKind::Model
      *     [`Location`]: Modality::Location
      */
     TabularAuditKind: {
+      detail: components["schemas"]["TabularPattern"];
       /** @constant */
       kind: "pattern";
-      /** @description Where the recognizer matched. */
-      location: components["schemas"]["TabularLocation"];
-      /** @description Pattern detail. */
-      pattern: components["schemas"]["PatternEvent"];
     } | {
+      detail: components["schemas"]["TabularModel"];
       /** @constant */
       kind: "model";
-      /** @description Where the recognizer matched. */
-      location: components["schemas"]["TabularLocation"];
-      /** @description Model detail. */
-      model: components["schemas"]["ModelEvent"];
     } | {
+      detail: components["schemas"]["Deduplication"];
       /** @constant */
       kind: "deduplication";
-      /** @description Name of the fusion strategy that combined them. */
-      strategy: string;
     } | {
-      /** @description The loser's confidence at resolution time. */
-      competing_confidence: components["schemas"]["Confidence"];
-      /** @description The label of the detection that lost arbitration. */
-      competing_label: components["schemas"]["LabelRef"];
+      detail: components["schemas"]["Conflict"];
       /** @constant */
       kind: "conflict";
-      /** @description Name of the conflict policy that chose the winner. */
-      resolved_by: string;
     } | {
-      /** @description The competing detection's confidence. */
-      competing_confidence: components["schemas"]["Confidence"];
-      /** @description The label of the competing detection. */
-      competing_label: components["schemas"]["LabelRef"];
-      /** @description Name of the policy that flagged the contest. */
-      flagged_by: string;
+      detail: components["schemas"]["Contested"];
       /** @constant */
       kind: "contested";
     } | {
-      /**
-       * Format: double
-       * @description Multiplier applied.
-       */
-      factor: number;
+      detail: components["schemas"]["Calibration"];
       /** @constant */
       kind: "calibration";
     } | {
-      /**
-       * @description The located [`Hint`] the keyword fired from, when the match came
-       *     from an out-of-band hint (a column header, a key) rather than
-       *     the in-text word window. `None` for an in-text-window match.
-       *
-       *     [`Hint`]: crate::modality::Hint
-       */
-      hint?: components["schemas"]["TabularHint"];
-      /** @description Keyword that fired the boost. */
-      keyword: string;
+      detail: components["schemas"]["TabularRefinement"];
       /** @constant */
       kind: "refinement";
-      /**
-       * @description Where the boosting keyword sits in the medium. For a hint match
-       *     this mirrors the hint's own location; for an in-text-window match
-       *     it is the keyword resolved through the modality's [`locate`] (a
-       *     pixel box for image, a time span for audio, the byte range for
-       *     text/tabular). `None` when the keyword's stream range could not be
-       *     placed, symmetric with a match the recognizer itself drops.
-       *
-       *     [`locate`]: crate::modality::TextRecognizable::locate
-       */
-      location?: components["schemas"]["TabularLocation"];
     } | {
-      /**
-       * @description The author-supplied policy rationale, when the operator carried an
-       *     [`Attribution`]; `None` otherwise.
-       */
-      attribution?: components["schemas"]["Attribution"];
-      /** @description Identifier of the key needed to reverse it, if reversible. */
-      key_id?: string;
+      detail: components["schemas"]["Redaction"];
       /** @constant */
       kind: "redaction";
-      /** @description How much the output leaks about the original. */
-      leak_profile: components["schemas"]["LeakProfile"];
-      /**
-       * @description Which selection rule chose this operator: the automatic "why"
-       *     (matched a label, a tag, a predicate, or the fallback).
-       */
-      matched_by: components["schemas"]["RuleMatch"];
-      /** @description Which operator (name + version) ran. */
-      operator: components["schemas"]["OperatorId"];
-      /**
-       * @description BLAKE3 digest of the original text the operator hid, when the
-       *     redaction layer recorded it. Proves *what* was redacted without
-       *     storing the plaintext; `None` when the operator did not capture it.
-       */
-      span_hash?: components["schemas"]["AuditHash"];
-      /**
-       * Format: uint32
-       * @description Byte length of the original text the operator hid, paired with
-       *     [`span_hash`](Self::Redaction::span_hash). `None` when not captured.
-       */
-      span_length?: number;
+    } | {
+      detail: components["schemas"]["Selection"];
+      /** @constant */
+      kind: "selection";
+    } | {
+      detail: components["schemas"]["TabularManual"];
+      /** @constant */
+      kind: "manual";
     };
     /**
      * @description Full audit trail of an [`Entity`]: every [`AuditEvent`] in its life, as a
@@ -13550,6 +14090,23 @@ interface components {
      *     [`verify`]: Self::verify
      */
     TabularAuditLog: components["schemas"]["TabularAuditEvent"][];
+    /**
+     * @description One change to an analyzed document.
+     *
+     *     `Add` carries no id because the entity does not exist yet; the
+     *     engine mints one when the edit is applied, so a client cannot
+     *     collide with a real detection or shadow an existing entity.
+     */
+    TabularEdit: ({
+      /** @constant */
+      op: "add";
+    } & components["schemas"]["TabularAdd"]) | ({
+      /** @constant */
+      op: "retag";
+    } & components["schemas"]["TabularRetag"]) | ({
+      /** @constant */
+      op: "suppress";
+    } & components["schemas"]["Suppress"]);
     /**
      * @description Detected piece of sensitive information within some medium.
      *
@@ -13578,7 +14135,12 @@ interface components {
     TabularEntity: {
       /**
        * @description Tamper-evident audit trail: every contributing detection, the fusion
-       *     event if any, and the redaction that hid it, as a hash-linked DAG.
+       *     event if any, and the redaction that hid it, as a hash-linked DAG. It is
+       *     also the single source of truth for whether a reviewer
+       *     [suppressed](Self::is_suppressed) the entity — a suppression is a
+       *     [`Manual`] event on this trail, not a separate flag.
+       *
+       *     [`Manual`]: crate::entity::audit::AuditKind::Manual
        */
       audit: components["schemas"]["TabularAuditLog"];
       /** @description Effective confidence in `0.0..=1.0` (fused, if applicable). */
@@ -13623,30 +14185,6 @@ interface components {
        */
       recognized_range?: components["schemas"]["Range_of_uint"];
     };
-    /**
-     * @description One recognized entity plus the optional reviewer override.
-     *
-     *     The bound mirrors elide's [`Entity<M>`]: serialization needs
-     *     `M::Location` and `M::Data` (de)serializable, and JsonSchema
-     *     derivation needs them schema-able. All four modalities elide
-     *     ships satisfy these under the `serde` + `schema` features.
-     */
-    TabularEntityRecord: {
-      /** @description The elide entity, as recognition produced it. */
-      entity: components["schemas"]["TabularEntity"];
-      /**
-       * @description Reviewer-supplied redaction override.
-       *
-       *     `None` means "use the matching policy rule's decision";
-       *     `Some(...)` overrides that rule for this specific entity
-       *     at apply time. Reviewer overrides take precedence over
-       *     every policy rule and inherit the authority of the
-       *     [`Review::policy_id`] they name: the audit event's
-       *     attribution stamps that policy so the trail names the
-       *     authority under which the override fired.
-       */
-      review?: components["schemas"]["Review"];
-    };
     /**
      * @description Located, typed piece of context a recognizer may treat as in-context
      *     for a nearby value.
@@ -13717,6 +14255,54 @@ interface components {
        */
       start_offset?: number;
     };
+    /**
+     * @description A human override, outside automatic detection: an entity a reviewer added by
+     *     hand, or a detected one they marked to ignore. Its provenance is a person's
+     *     decision, not a recognizer's — so the trail records *why* (an
+     *     [`Attribution`], when supplied). *Who* made the override is the event's
+     *     [`source`], not a payload field.
+     *
+     *     [`source`]: super::AuditEvent::source
+     */
+    TabularManual: {
+      /**
+       * @description The reviewer's rationale, when supplied (e.g. a freeform
+       *     `"false positive"`, or a cited authority). `None` for an unexplained
+       *     override.
+       */
+      attribution?: components["schemas"]["Attribution"];
+      /**
+       * @description Which human decision this records: including a missed entity, or
+       *     suppressing a detected one. This is the authority on whether the entity
+       *     is redacted — [`AuditLog::is_suppressed`] reads it, so there is no
+       *     separate flag to keep in sync.
+       *
+       *     [`AuditLog::is_suppressed`]: crate::entity::audit::AuditLog::is_suppressed
+       */
+      intent: components["schemas"]["ManualIntent"];
+      /** @description Where the override applies, in modality-native coordinates. */
+      location: components["schemas"]["TabularLocation"];
+    };
+    /**
+     * @description Detail of a model/NER recognition: a model matched at `location`, with its
+     *     metadata in `model`.
+     */
+    TabularModel: {
+      /** @description Where the recognizer matched. */
+      location: components["schemas"]["TabularLocation"];
+      /** @description Model metadata (name, version, contextual flag). */
+      model: components["schemas"]["ModelEvent"];
+    };
+    /**
+     * @description Detail of a pattern/dictionary recognition: a recognizer matched at
+     *     `location`, with the pattern metadata in `pattern`.
+     */
+    TabularPattern: {
+      /** @description Where the recognizer matched. */
+      location: components["schemas"]["TabularLocation"];
+      /** @description Pattern metadata (name, regex, validator, contextual flag). */
+      pattern: components["schemas"]["PatternEvent"];
+    };
     /** @description Operator spec a `redact` tabular rule carries. */
     TabularRedaction: {
       /** @constant */
@@ -13734,6 +14320,55 @@ interface components {
       /** @constant */
       kind: "drop_column";
     };
+    /** @description A context keyword near the entity lifted its confidence. */
+    TabularRefinement: {
+      /**
+       * @description The located [`Hint`] the keyword fired from, when the match came from an
+       *     out-of-band hint (a column header, a key) rather than the in-text word
+       *     window. `None` for an in-text-window match.
+       *
+       *     [`Hint`]: crate::modality::Hint
+       */
+      hint?: components["schemas"]["TabularHint"];
+      /** @description Keyword that fired the boost. */
+      keyword: string;
+      /**
+       * @description Where the boosting keyword sits in the medium. For a hint match this
+       *     mirrors the hint's own location; for an in-text-window match it is the
+       *     keyword resolved through the modality's [`locate`]. `None` when the
+       *     keyword's stream range could not be placed.
+       *
+       *     [`locate`]: crate::modality::TextRecognizable::locate
+       */
+      location?: components["schemas"]["TabularLocation"];
+    };
+    /**
+     * @description Correct what an existing detection *is* or *covers*, then redact
+     *     it under the policy set as corrected.
+     *
+     *     A reviewer fixing recognition's mistake rather than overriding
+     *     its consequence. Retagging into a label the policy does not cover
+     *     leaves the entity alone, exactly as if it had been detected that
+     *     way — which is why it is auditable rather than a mutable field.
+     */
+    TabularRetag: {
+      /** @description Who made it, when the caller said. */
+      actor?: string;
+      /**
+       * Format: uuid
+       * @description The entity being corrected.
+       */
+      id: string;
+      /** @description The corrected label, when recognition got it wrong. */
+      label?: components["schemas"]["LabelRef"];
+      /**
+       * @description The corrected location, when the span clipped the value or
+       *     ran past it.
+       */
+      location?: components["schemas"]["TabularLocation"];
+      /** @description The rationale, when one was given. */
+      reason?: string;
+    };
     /**
      * @description The template a [`PolicyDefinition`] was built from.
      *
@@ -13826,6 +14461,28 @@ interface components {
        */
       payload?: unknown;
     };
+    /**
+     * @description A detection recognition missed.
+     *
+     *     Recorded on the report with human provenance, so it is never
+     *     mistaken for an automatic hit, then redacted under the policy set
+     *     like any other entity: an added label the policy does not cover
+     *     is left alone.
+     *
+     *     Carries no entity id — the entity does not exist yet, and the
+     *     engine mints one when the edit is applied, so a client cannot
+     *     collide with a real detection or shadow an existing entity.
+     */
+    TextAdd: {
+      /** @description Who made it, when the caller said. */
+      actor?: string;
+      /** @description What the reviewer says this is. */
+      label: components["schemas"]["LabelRef"];
+      /** @description Where it sits in the document. */
+      location: components["schemas"]["TextLocation"];
+      /** @description The rationale, when one was given. */
+      reason?: string;
+    };
     /**
      * @description One node in an entity's audit DAG: a thing that happened, with its
      *     effect on confidence and its tamper-evident links.
@@ -13901,115 +14558,70 @@ interface components {
      * @description Kind of an [`AuditEvent`], carrying its event-specific detail and the
      *     rationale for why it happened.
      *
-     *     `#[non_exhaustive]`: new event kinds (verification, annotation, …)
-     *     can be added compatibly. The recognition kinds ([`Pattern`],
-     *     [`Model`]) carry the matched [`Location`]; the rest carry their own
-     *     data.
-     *
+     *     A thin tagged union: each variant wraps one payload struct (e.g.
+     *     [`Redaction`], [`Selection`], [`Manual`]) that owns that kind's fields, its
+     *     docs, and how it folds into the audit hash. Match on a variant to reach its
+     *     payload:
+     *
+     *     ```
+     *     # use elide_core::entity::audit::AuditKind;
+     *     # use elide_core::modality::text::Text;
+     *     # fn show(kind: &AuditKind<Text>) {
+     *     if let AuditKind::Redaction(redaction) = kind {
+     *         let _ = &redaction.operator;
+     *     }
+     *     # }
+     *     ```
+     *
+     *     `#[non_exhaustive]`: new event kinds (verification, annotation, …) can be
+     *     added compatibly. The recognition kinds ([`Pattern`], [`Model`]) carry the
+     *     matched [`Location`]; the rest carry their own data.
+     *
+     *     [`AuditEvent`]: super::AuditEvent
      *     [`Pattern`]: AuditKind::Pattern
      *     [`Model`]: AuditKind::Model
      *     [`Location`]: Modality::Location
      */
     TextAuditKind: {
+      detail: components["schemas"]["TextPattern"];
       /** @constant */
       kind: "pattern";
-      /** @description Where the recognizer matched. */
-      location: components["schemas"]["TextLocation"];
-      /** @description Pattern detail. */
-      pattern: components["schemas"]["PatternEvent"];
     } | {
+      detail: components["schemas"]["TextModel"];
       /** @constant */
       kind: "model";
-      /** @description Where the recognizer matched. */
-      location: components["schemas"]["TextLocation"];
-      /** @description Model detail. */
-      model: components["schemas"]["ModelEvent"];
     } | {
+      detail: components["schemas"]["Deduplication"];
       /** @constant */
       kind: "deduplication";
-      /** @description Name of the fusion strategy that combined them. */
-      strategy: string;
     } | {
-      /** @description The loser's confidence at resolution time. */
-      competing_confidence: components["schemas"]["Confidence"];
-      /** @description The label of the detection that lost arbitration. */
-      competing_label: components["schemas"]["LabelRef"];
+      detail: components["schemas"]["Conflict"];
       /** @constant */
       kind: "conflict";
-      /** @description Name of the conflict policy that chose the winner. */
-      resolved_by: string;
     } | {
-      /** @description The competing detection's confidence. */
-      competing_confidence: components["schemas"]["Confidence"];
-      /** @description The label of the competing detection. */
-      competing_label: components["schemas"]["LabelRef"];
-      /** @description Name of the policy that flagged the contest. */
-      flagged_by: string;
+      detail: components["schemas"]["Contested"];
       /** @constant */
       kind: "contested";
     } | {
-      /**
-       * Format: double
-       * @description Multiplier applied.
-       */
-      factor: number;
+      detail: components["schemas"]["Calibration"];
       /** @constant */
       kind: "calibration";
     } | {
-      /**
-       * @description The located [`Hint`] the keyword fired from, when the match came
-       *     from an out-of-band hint (a column header, a key) rather than
-       *     the in-text word window. `None` for an in-text-window match.
-       *
-       *     [`Hint`]: crate::modality::Hint
-       */
-      hint?: components["schemas"]["TextHint"];
-      /** @description Keyword that fired the boost. */
-      keyword: string;
+      detail: components["schemas"]["TextRefinement"];
       /** @constant */
       kind: "refinement";
-      /**
-       * @description Where the boosting keyword sits in the medium. For a hint match
-       *     this mirrors the hint's own location; for an in-text-window match
-       *     it is the keyword resolved through the modality's [`locate`] (a
-       *     pixel box for image, a time span for audio, the byte range for
-       *     text/tabular). `None` when the keyword's stream range could not be
-       *     placed, symmetric with a match the recognizer itself drops.
-       *
-       *     [`locate`]: crate::modality::TextRecognizable::locate
-       */
-      location?: components["schemas"]["TextLocation"];
     } | {
-      /**
-       * @description The author-supplied policy rationale, when the operator carried an
-       *     [`Attribution`]; `None` otherwise.
-       */
-      attribution?: components["schemas"]["Attribution"];
-      /** @description Identifier of the key needed to reverse it, if reversible. */
-      key_id?: string;
+      detail: components["schemas"]["Redaction"];
       /** @constant */
       kind: "redaction";
-      /** @description How much the output leaks about the original. */
-      leak_profile: components["schemas"]["LeakProfile"];
-      /**
-       * @description Which selection rule chose this operator: the automatic "why"
-       *     (matched a label, a tag, a predicate, or the fallback).
-       */
-      matched_by: components["schemas"]["RuleMatch"];
-      /** @description Which operator (name + version) ran. */
-      operator: components["schemas"]["OperatorId"];
-      /**
-       * @description BLAKE3 digest of the original text the operator hid, when the
-       *     redaction layer recorded it. Proves *what* was redacted without
-       *     storing the plaintext; `None` when the operator did not capture it.
-       */
-      span_hash?: components["schemas"]["AuditHash"];
-      /**
-       * Format: uint32
-       * @description Byte length of the original text the operator hid, paired with
-       *     [`span_hash`](Self::Redaction::span_hash). `None` when not captured.
-       */
-      span_length?: number;
+    } | {
+      detail: components["schemas"]["Selection"];
+      /** @constant */
+      kind: "selection";
+    } | {
+      detail: components["schemas"]["TextManual"];
+      /** @constant */
+      kind: "manual";
     };
     /**
      * @description Full audit trail of an [`Entity`]: every [`AuditEvent`] in its life, as a
@@ -14059,6 +14671,23 @@ interface components {
      *     several recognizers.
      */
     TextData: string;
+    /**
+     * @description One change to an analyzed document.
+     *
+     *     `Add` carries no id because the entity does not exist yet; the
+     *     engine mints one when the edit is applied, so a client cannot
+     *     collide with a real detection or shadow an existing entity.
+     */
+    TextEdit: ({
+      /** @constant */
+      op: "add";
+    } & components["schemas"]["TextAdd"]) | ({
+      /** @constant */
+      op: "retag";
+    } & components["schemas"]["TextRetag"]) | ({
+      /** @constant */
+      op: "suppress";
+    } & components["schemas"]["Suppress"]);
     /**
      * @description Detected piece of sensitive information within some medium.
      *
@@ -14087,7 +14716,12 @@ interface components {
     TextEntity: {
       /**
        * @description Tamper-evident audit trail: every contributing detection, the fusion
-       *     event if any, and the redaction that hid it, as a hash-linked DAG.
+       *     event if any, and the redaction that hid it, as a hash-linked DAG. It is
+       *     also the single source of truth for whether a reviewer
+       *     [suppressed](Self::is_suppressed) the entity — a suppression is a
+       *     [`Manual`] event on this trail, not a separate flag.
+       *
+       *     [`Manual`]: crate::entity::audit::AuditKind::Manual
        */
       audit: components["schemas"]["TextAuditLog"];
       /** @description Effective confidence in `0.0..=1.0` (fused, if applicable). */
@@ -14132,30 +14766,6 @@ interface components {
        */
       recognized_range?: components["schemas"]["Range_of_uint"];
     };
-    /**
-     * @description One recognized entity plus the optional reviewer override.
-     *
-     *     The bound mirrors elide's [`Entity<M>`]: serialization needs
-     *     `M::Location` and `M::Data` (de)serializable, and JsonSchema
-     *     derivation needs them schema-able. All four modalities elide
-     *     ships satisfy these under the `serde` + `schema` features.
-     */
-    TextEntityRecord: {
-      /** @description The elide entity, as recognition produced it. */
-      entity: components["schemas"]["TextEntity"];
-      /**
-       * @description Reviewer-supplied redaction override.
-       *
-       *     `None` means "use the matching policy rule's decision";
-       *     `Some(...)` overrides that rule for this specific entity
-       *     at apply time. Reviewer overrides take precedence over
-       *     every policy rule and inherit the authority of the
-       *     [`Review::policy_id`] they name: the audit event's
-       *     attribution stamps that policy so the trail names the
-       *     authority under which the override fired.
-       */
-      review?: components["schemas"]["Review"];
-    };
     /**
      * @description Located, typed piece of context a recognizer may treat as in-context
      *     for a nearby value.
@@ -14205,6 +14815,54 @@ interface components {
        */
       source?: components["schemas"]["SourceRef"][];
     };
+    /**
+     * @description A human override, outside automatic detection: an entity a reviewer added by
+     *     hand, or a detected one they marked to ignore. Its provenance is a person's
+     *     decision, not a recognizer's — so the trail records *why* (an
+     *     [`Attribution`], when supplied). *Who* made the override is the event's
+     *     [`source`], not a payload field.
+     *
+     *     [`source`]: super::AuditEvent::source
+     */
+    TextManual: {
+      /**
+       * @description The reviewer's rationale, when supplied (e.g. a freeform
+       *     `"false positive"`, or a cited authority). `None` for an unexplained
+       *     override.
+       */
+      attribution?: components["schemas"]["Attribution"];
+      /**
+       * @description Which human decision this records: including a missed entity, or
+       *     suppressing a detected one. This is the authority on whether the entity
+       *     is redacted — [`AuditLog::is_suppressed`] reads it, so there is no
+       *     separate flag to keep in sync.
+       *
+       *     [`AuditLog::is_suppressed`]: crate::entity::audit::AuditLog::is_suppressed
+       */
+      intent: components["schemas"]["ManualIntent"];
+      /** @description Where the override applies, in modality-native coordinates. */
+      location: components["schemas"]["TextLocation"];
+    };
+    /**
+     * @description Detail of a model/NER recognition: a model matched at `location`, with its
+     *     metadata in `model`.
+     */
+    TextModel: {
+      /** @description Where the recognizer matched. */
+      location: components["schemas"]["TextLocation"];
+      /** @description Model metadata (name, version, contextual flag). */
+      model: components["schemas"]["ModelEvent"];
+    };
+    /**
+     * @description Detail of a pattern/dictionary recognition: a recognizer matched at
+     *     `location`, with the pattern metadata in `pattern`.
+     */
+    TextPattern: {
+      /** @description Where the recognizer matched. */
+      location: components["schemas"]["TextLocation"];
+      /** @description Pattern metadata (name, regex, validator, contextual flag). */
+      pattern: components["schemas"]["PatternEvent"];
+    };
     /** @description Operator spec a `redact` text rule carries. */
     TextRedaction: {
       /** @constant */
@@ -14351,6 +15009,55 @@ interface components {
        */
       style?: components["schemas"]["DateStyle"];
     };
+    /** @description A context keyword near the entity lifted its confidence. */
+    TextRefinement: {
+      /**
+       * @description The located [`Hint`] the keyword fired from, when the match came from an
+       *     out-of-band hint (a column header, a key) rather than the in-text word
+       *     window. `None` for an in-text-window match.
+       *
+       *     [`Hint`]: crate::modality::Hint
+       */
+      hint?: components["schemas"]["TextHint"];
+      /** @description Keyword that fired the boost. */
+      keyword: string;
+      /**
+       * @description Where the boosting keyword sits in the medium. For a hint match this
+       *     mirrors the hint's own location; for an in-text-window match it is the
+       *     keyword resolved through the modality's [`locate`]. `None` when the
+       *     keyword's stream range could not be placed.
+       *
+       *     [`locate`]: crate::modality::TextRecognizable::locate
+       */
+      location?: components["schemas"]["TextLocation"];
+    };
+    /**
+     * @description Correct what an existing detection *is* or *covers*, then redact
+     *     it under the policy set as corrected.
+     *
+     *     A reviewer fixing recognition's mistake rather than overriding
+     *     its consequence. Retagging into a label the policy does not cover
+     *     leaves the entity alone, exactly as if it had been detected that
+     *     way — which is why it is auditable rather than a mutable field.
+     */
+    TextRetag: {
+      /** @description Who made it, when the caller said. */
+      actor?: string;
+      /**
+       * Format: uuid
+       * @description The entity being corrected.
+       */
+      id: string;
+      /** @description The corrected label, when recognition got it wrong. */
+      label?: components["schemas"]["LabelRef"];
+      /**
+       * @description The corrected location, when the span clipped the value or
+       *     ran past it.
+       */
+      location?: components["schemas"]["TextLocation"];
+      /** @description The rationale, when one was given. */
+      reason?: string;
+    };
     /**
      * @description Half-open `[start, end)` stream interval, measured in microseconds.
      *
@@ -14773,7 +15480,7 @@ interface components {
      *     This enumeration corresponds to the `WEBHOOK_EVENT` PostgreSQL enum and is used
      *     to configure which events a webhook should receive notifications for.
      */
-    WebhookEvent: "file.created" | "file.updated" | "file.deleted" | "member.added" | "member.deleted" | "member.updated" | "connection.created" | "connection.updated" | "connection.deleted" | "connection.sync.started" | "connection.sync.completed" | "connection.sync.failed" | "pipeline.created" | "pipeline.updated" | "pipeline.deleted" | "pipeline.run.started" | "pipeline.run.analyzed" | "pipeline.run.completed" | "pipeline.run.failed" | "policy.created" | "policy.updated" | "policy.deleted";
+    WebhookEvent: "file.created" | "file.updated" | "file.deleted" | "member.added" | "member.deleted" | "member.updated" | "connection.created" | "connection.updated" | "connection.deleted" | "connection.sync.started" | "connection.sync.completed" | "connection.sync.failed" | "pipeline.created" | "pipeline.updated" | "pipeline.deleted" | "pipeline.detection.started" | "pipeline.detection.completed" | "pipeline.detection.failed" | "pipeline.redaction.created" | "policy.created" | "policy.updated" | "policy.deleted";
     /** @description Opaque whk identifier (whk_<uuid>). */
     WebhookId: string;
     /**
@@ -14857,13 +15564,39 @@ interface components {
      *     the inference tokens they spent.
      */
     WorkspaceAnalytics: {
-      /** @description Pipeline-run health: volume, status mix, and durations. */
-      runs: components["schemas"]["RunAnalytics"];
+      /** @description Detection health: volume, status mix, and durations. */
+      detections: components["schemas"]["DetectionAnalytics"];
       /** @description Stored-file totals and their per-kind breakdown. */
       storage: components["schemas"]["StorageAnalytics"];
       /** @description Inference token usage: workspace totals and a per-model breakdown. */
       usage: components["schemas"]["UsageAnalytics"];
     };
+    /**
+     * @description Query parameters for listing detections across a workspace.
+     *
+     *     Every field is an optional filter; unset fields impose no constraint.
+     */
+    WorkspaceDetectionsQuery: {
+      /**
+       * Format: uuid
+       * @description Filter by the source file the detection analyzes.
+       */
+      fileId?: string;
+      /**
+       * Format: uuid
+       * @description Filter by the owning pipeline.
+       */
+      pipelineId?: string;
+      /** @description Filter by detection status. */
+      status?: components["schemas"]["DetectionStatus"];
+      /** @description Filter by how the detection was initiated (user vs system). */
+      triggerType?: components["schemas"]["PipelineTriggerType"];
+      /**
+       * Format: uuid
+       * @description Filter by the account that triggered the detection.
+       */
+      triggeredBy?: string;
+    };
     /** @description Path parameters for file operations within a workspace context. */
     WorkspaceFilePathParams: {
       /**
@@ -14897,32 +15630,6 @@ interface components {
      *     hierarchical access control for workspace members with clearly defined capabilities.
      */
     WorkspaceRole: "owner" | "admin" | "member" | "guest";
-    /**
-     * @description Query parameters for listing runs across a workspace.
-     *
-     *     Every field is an optional filter; unset fields impose no constraint.
-     */
-    WorkspaceRunsQuery: {
-      /**
-       * Format: uuid
-       * @description Filter by the source file the run analyzes.
-       */
-      fileId?: string;
-      /**
-       * Format: uuid
-       * @description Filter by the owning pipeline.
-       */
-      pipelineId?: string;
-      /** @description Filter by run status. */
-      status?: components["schemas"]["PipelineRunStatus"];
-      /** @description Filter by how the run was initiated (user vs system). */
-      triggerType?: components["schemas"]["PipelineTriggerType"];
-      /**
-       * Format: uuid
-       * @description Filter by the account that triggered the run.
-       */
-      triggeredBy?: string;
-    };
     /** @description Typed workspace settings, the JSON stored in the `workspaces.settings` column. */
     WorkspaceSettings: {
       /**
@@ -14985,15 +15692,16 @@ type Schemas$21 = components["schemas"];
 type Activity = Schemas$21["Activity"];
 type ActivityPage = Schemas$21["ActivityPage"];
 type ActivityType = Schemas$21["ActivityType"];
-type ActivityListQuery = Schemas$21["ActivityListQuery"];
-type ActivityExportQuery = Schemas$21["ActivityExportQuery"];
+type ActivityFilterQuery = Schemas$21["ActivityFilterQuery"];
+type ActivityExportOptions = Schemas$21["ActivityExportOptions"];
 type ActivityPayload = Schemas$21["ActivityPayload"];
 type WorkspaceActivityParams = Schemas$21["WorkspaceActivityParams"];
 type MemberActivityParams = Schemas$21["MemberActivityParams"];
 type InviteActivityParams = Schemas$21["InviteActivityParams"];
 type ConnectionActivityParams = Schemas$21["ConnectionActivityParams"];
 type PipelineActivityParams = Schemas$21["PipelineActivityParams"];
-type PipelineRunActivityParams = Schemas$21["PipelineRunActivityParams"];
+type DetectionActivityParams = Schemas$21["DetectionActivityParams"];
+type RedactionActivityParams = Schemas$21["RedactionActivityParams"];
 type PolicyActivityParams = Schemas$21["PolicyActivityParams"];
 type FileActivityParams = Schemas$21["FileActivityParams"];
 type WebhookActivityParams = Schemas$21["WebhookActivityParams"];
@@ -15003,8 +15711,8 @@ type Schemas$20 = components["schemas"];
 type WorkspaceAnalytics = Schemas$20["WorkspaceAnalytics"];
 type StorageAnalytics = Schemas$20["StorageAnalytics"];
 type StorageKindEntry = Schemas$20["StorageKindEntry"];
-type RunAnalytics = Schemas$20["RunAnalytics"];
-type RunStatusEntry = Schemas$20["RunStatusEntry"];
+type DetectionAnalytics = Schemas$20["DetectionAnalytics"];
+type DetectionStatusEntry = Schemas$20["DetectionStatusEntry"];
 type UsageAnalytics = Schemas$20["UsageAnalytics"];
 type ModelUsage = Schemas$20["ModelUsage"];
 type ModelUsageEntry = Schemas$20["ModelUsageEntry"];
@@ -15013,8 +15721,8 @@ type UsageReport = Schemas$20["UsageReport"];
 type TokenCounts = Schemas$20["TokenCounts"];
 type ProviderType = Schemas$20["ProviderType"];
 type RecognizerId = Schemas$20["RecognizerId"];
-type RunTimeSeries = Schemas$20["RunTimeSeries"];
-type RunDayEntry = Schemas$20["RunDayEntry"];
+type DetectionTimeSeries = Schemas$20["DetectionTimeSeries"];
+type DetectionDayEntry = Schemas$20["DetectionDayEntry"];
 //#endregion
 //#region src/datatypes/api-token.d.ts
 type Schemas$19 = components["schemas"];
@@ -15028,18 +15736,29 @@ type ApiTokenPage = Schemas$19["ApiTokenPage"];
 //#endregion
 //#region src/datatypes/audit.d.ts
 type Schemas$18 = components["schemas"];
-type EntityGroup = Schemas$18["EntityGroup"];
-type AuditContext = Schemas$18["AuditContext"];
+type Audit = Schemas$18["Audit"];
+type DocumentContext = Schemas$18["DocumentContext"];
+type CodecParams = Schemas$18["CodecParams"];
 type EntityCoRef = Schemas$18["EntityCoRef"];
+type Report = Schemas$18["Report"];
+type EditSet = Schemas$18["EditSet"];
 type RasterMode = Schemas$18["RasterMode"];
 type Dpi = Schemas$18["Dpi"];
-type Review = Schemas$18["Review"];
-type Attribution = Schemas$18["Attribution"];
-type AttributionKind = Schemas$18["AttributionKind"];
+type Redaction = Schemas$18["Redaction"];
+type Selection = Schemas$18["Selection"];
+type Suppress = Schemas$18["Suppress"];
+type ManualIntent = Schemas$18["ManualIntent"];
 type LeakProfile = Schemas$18["LeakProfile"];
 type RuleMatch = Schemas$18["RuleMatch"];
+type Attribution = Schemas$18["Attribution"];
+type CitedAttribution = Schemas$18["CitedAttribution"];
+type FreeformAttribution = Schemas$18["FreeformAttribution"];
 type ModelEvent = Schemas$18["ModelEvent"];
 type PatternEvent = Schemas$18["PatternEvent"];
+type Conflict = Schemas$18["Conflict"];
+type Contested = Schemas$18["Contested"];
+type Deduplication = Schemas$18["Deduplication"];
+type Calibration = Schemas$18["Calibration"];
 type OperatorId = Schemas$18["OperatorId"];
 type AuditHash = Schemas$18["AuditHash"];
 type Category = Schemas$18["Category"];
@@ -15052,36 +15771,60 @@ type Polygon = Schemas$18["Polygon"];
 type Dimensions = Schemas$18["Dimensions"];
 type TimeSpan = Schemas$18["TimeSpan"];
 type TextEntity = Schemas$18["TextEntity"];
-type TextEntityRecord = Schemas$18["TextEntityRecord"];
 type TextAuditEvent = Schemas$18["TextAuditEvent"];
 type TextAuditKind = Schemas$18["TextAuditKind"];
+type TextAuditLog = Schemas$18["TextAuditLog"];
 type TextHint = Schemas$18["TextHint"];
 type TextLocation = Schemas$18["TextLocation"];
-type TextAuditLog = Schemas$18["TextAuditLog"];
 type TextData = Schemas$18["TextData"];
+type TextModel = Schemas$18["TextModel"];
+type TextPattern = Schemas$18["TextPattern"];
+type TextManual = Schemas$18["TextManual"];
+type TextEdit = Schemas$18["TextEdit"];
+type TextAdd = Schemas$18["TextAdd"];
+type TextRefinement = Schemas$18["TextRefinement"];
+type TextRetag = Schemas$18["TextRetag"];
 type ImageEntity = Schemas$18["ImageEntity"];
-type ImageEntityRecord = Schemas$18["ImageEntityRecord"];
 type ImageAuditEvent = Schemas$18["ImageAuditEvent"];
 type ImageAuditKind = Schemas$18["ImageAuditKind"];
+type ImageAuditLog = Schemas$18["ImageAuditLog"];
 type ImageHint = Schemas$18["ImageHint"];
 type ImageLocation = Schemas$18["ImageLocation"];
-type ImageAuditLog = Schemas$18["ImageAuditLog"];
 type ImageData = Schemas$18["ImageData"];
+type ImageModel = Schemas$18["ImageModel"];
+type ImagePattern = Schemas$18["ImagePattern"];
+type ImageManual = Schemas$18["ImageManual"];
+type ImageEdit = Schemas$18["ImageEdit"];
+type ImageAdd = Schemas$18["ImageAdd"];
+type ImageRefinement = Schemas$18["ImageRefinement"];
+type ImageRetag = Schemas$18["ImageRetag"];
 type AudioEntity = Schemas$18["AudioEntity"];
-type AudioEntityRecord = Schemas$18["AudioEntityRecord"];
 type AudioAuditEvent = Schemas$18["AudioAuditEvent"];
 type AudioAuditKind = Schemas$18["AudioAuditKind"];
+type AudioAuditLog = Schemas$18["AudioAuditLog"];
 type AudioHint = Schemas$18["AudioHint"];
 type AudioLocation = Schemas$18["AudioLocation"];
-type AudioAuditLog = Schemas$18["AudioAuditLog"];
 type AudioData = Schemas$18["AudioData"];
+type AudioModel = Schemas$18["AudioModel"];
+type AudioPattern = Schemas$18["AudioPattern"];
+type AudioManual = Schemas$18["AudioManual"];
+type AudioEdit = Schemas$18["AudioEdit"];
+type AudioAdd = Schemas$18["AudioAdd"];
+type AudioRefinement = Schemas$18["AudioRefinement"];
+type AudioRetag = Schemas$18["AudioRetag"];
 type TabularEntity = Schemas$18["TabularEntity"];
-type TabularEntityRecord = Schemas$18["TabularEntityRecord"];
 type TabularAuditEvent = Schemas$18["TabularAuditEvent"];
 type TabularAuditKind = Schemas$18["TabularAuditKind"];
+type TabularAuditLog = Schemas$18["TabularAuditLog"];
 type TabularHint = Schemas$18["TabularHint"];
 type TabularLocation = Schemas$18["TabularLocation"];
-type TabularAuditLog = Schemas$18["TabularAuditLog"];
+type TabularModel = Schemas$18["TabularModel"];
+type TabularPattern = Schemas$18["TabularPattern"];
+type TabularManual = Schemas$18["TabularManual"];
+type TabularEdit = Schemas$18["TabularEdit"];
+type TabularAdd = Schemas$18["TabularAdd"];
+type TabularRefinement = Schemas$18["TabularRefinement"];
+type TabularRetag = Schemas$18["TabularRetag"];
 //#endregion
 //#region src/datatypes/auth.d.ts
 type Schemas$17 = components["schemas"];
@@ -15134,147 +15877,150 @@ type OpenAiCredentials = Schemas$14["OpenAiCredentials"];
 type SyncSchedule = Schemas$14["SyncSchedule"];
 type SyncScheduleInput = Schemas$14["SyncScheduleInput"];
 //#endregion
-//#region src/datatypes/error.d.ts
+//#region src/datatypes/detection.d.ts
 type Schemas$13 = components["schemas"];
-type ErrorResponse = Schemas$13["ErrorResponse"];
-type ValidationErrorDetail = Schemas$13["ValidationErrorDetail"];
+type DetectionId = Schemas$13["DetectionId"];
+type Detection = Schemas$13["Detection"];
+type DetectionMetadata = Schemas$13["DetectionMetadata"];
+type CreateDetection = Schemas$13["CreateDetection"];
+type DetectionStatus = Schemas$13["DetectionStatus"];
+type DetectionPage = Schemas$13["DetectionPage"];
+type WorkspaceDetectionsQuery = Schemas$13["WorkspaceDetectionsQuery"];
+type PipelineDetectionsQuery = Schemas$13["PipelineDetectionsQuery"];
+type DetectionStatusEvent = Schemas$13["DetectionStatusEvent"];
+type RedactionId = Schemas$13["RedactionId"];
+type RedactDetection = Schemas$13["RedactDetection"];
+type RedactionResult = Schemas$13["RedactionResult"];
+type RedactionResultPage = Schemas$13["RedactionResultPage"];
 //#endregion
-//#region src/datatypes/export.d.ts
+//#region src/datatypes/error.d.ts
 type Schemas$12 = components["schemas"];
-type ExportFormat = Schemas$12["ExportFormat"];
-type ExportQuery = Schemas$12["ExportQuery"];
-type DateWindow = Schemas$12["DateWindow"];
+type ErrorResponse = Schemas$12["ErrorResponse"];
+type ValidationErrorDetail = Schemas$12["ValidationErrorDetail"];
 //#endregion
-//#region src/datatypes/file.d.ts
+//#region src/datatypes/export.d.ts
 type Schemas$11 = components["schemas"];
-type File = Schemas$11["File"];
-type UpdateFile = Schemas$11["UpdateFile"];
-type FileKind = Schemas$11["FileKind"];
-type FormatToken = Schemas$11["FormatToken"];
-type ModalityToken = Schemas$11["ModalityToken"];
-type ListFiles = Schemas$11["ListFiles"];
-type FilePage = Schemas$11["FilePage"];
+type ExportFormat = Schemas$11["ExportFormat"];
+type ExportQuery = Schemas$11["ExportQuery"];
+type DateWindow = Schemas$11["DateWindow"];
 //#endregion
-//#region src/datatypes/health.d.ts
+//#region src/datatypes/file.d.ts
 type Schemas$10 = components["schemas"];
-type Health = Schemas$10["Health"];
-type HealthStatus = Schemas$10["HealthStatus"];
-type ComponentHealth = Schemas$10["ComponentHealth"];
+type File = Schemas$10["File"];
+type UpdateFile = Schemas$10["UpdateFile"];
+type FileKind = Schemas$10["FileKind"];
+type FormatToken = Schemas$10["FormatToken"];
+type ModalityToken = Schemas$10["ModalityToken"];
+type ListFiles = Schemas$10["ListFiles"];
+type FilePage = Schemas$10["FilePage"];
 //#endregion
-//#region src/datatypes/invite.d.ts
+//#region src/datatypes/health.d.ts
 type Schemas$9 = components["schemas"];
-type Invite = Schemas$9["Invite"];
-type InviteSent = Schemas$9["InviteSent"];
-type CreateInvite = Schemas$9["CreateInvite"];
-type ReplyInvite = Schemas$9["ReplyInvite"];
-type GenerateInviteCode = Schemas$9["GenerateInviteCode"];
-type InviteCode = Schemas$9["InviteCode"];
-type InviteStatus = Schemas$9["InviteStatus"];
-type InviteExpiration = Schemas$9["InviteExpiration"];
-type ListInvites = Schemas$9["ListInvites"];
-type InviteSortField = Schemas$9["InviteSortField"];
-type SortOrder = Schemas$9["SortOrder"];
-type InvitePreview = Schemas$9["InvitePreview"];
-type InvitePage = Schemas$9["InvitePage"];
+type Health = Schemas$9["Health"];
+type HealthStatus = Schemas$9["HealthStatus"];
+type ComponentHealth = Schemas$9["ComponentHealth"];
 //#endregion
-//#region src/datatypes/member.d.ts
+//#region src/datatypes/invite.d.ts
 type Schemas$8 = components["schemas"];
-type Member = Schemas$8["Member"];
-type UpdateMember = Schemas$8["UpdateMember"];
-type ListMembers = Schemas$8["ListMembers"];
-type MemberSortField = Schemas$8["MemberSortField"];
-type MemberPage = Schemas$8["MemberPage"];
+type Invite = Schemas$8["Invite"];
+type InviteSent = Schemas$8["InviteSent"];
+type CreateInvite = Schemas$8["CreateInvite"];
+type ReplyInvite = Schemas$8["ReplyInvite"];
+type GenerateInviteCode = Schemas$8["GenerateInviteCode"];
+type InviteCode = Schemas$8["InviteCode"];
+type InviteStatus = Schemas$8["InviteStatus"];
+type InviteExpiration = Schemas$8["InviteExpiration"];
+type ListInvites = Schemas$8["ListInvites"];
+type InviteSortField = Schemas$8["InviteSortField"];
+type SortOrder = Schemas$8["SortOrder"];
+type InvitePreview = Schemas$8["InvitePreview"];
+type InvitePage = Schemas$8["InvitePage"];
 //#endregion
-//#region src/datatypes/notification.d.ts
+//#region src/datatypes/member.d.ts
 type Schemas$7 = components["schemas"];
-type Notification = Schemas$7["Notification"];
-type NotificationEvent = Schemas$7["NotificationEvent"];
-type NotificationSettings = Schemas$7["NotificationSettings"];
-type UpdateNotificationSettings = Schemas$7["UpdateNotificationSettings"];
-type UnreadStatus = Schemas$7["UnreadStatus"];
-type NotificationPage = Schemas$7["NotificationPage"];
-type MarkedReadStatus = Schemas$7["MarkedReadStatus"];
-type UnreadCountEvent = Schemas$7["UnreadCountEvent"];
-type NotificationPayload = Schemas$7["NotificationPayload"];
-type MemberInvitedParams = Schemas$7["MemberInvitedParams"];
-type MemberJoinedParams = Schemas$7["MemberJoinedParams"];
-type ConnectionSyncCompletedParams = Schemas$7["ConnectionSyncCompletedParams"];
-type ConnectionSyncFailedParams = Schemas$7["ConnectionSyncFailedParams"];
-type PipelineRunAnalyzedParams = Schemas$7["PipelineRunAnalyzedParams"];
-type PipelineRunCompletedParams = Schemas$7["PipelineRunCompletedParams"];
-type PipelineRunFailedParams = Schemas$7["PipelineRunFailedParams"];
+type Member = Schemas$7["Member"];
+type UpdateMember = Schemas$7["UpdateMember"];
+type ListMembers = Schemas$7["ListMembers"];
+type MemberSortField = Schemas$7["MemberSortField"];
+type MemberPage = Schemas$7["MemberPage"];
 //#endregion
-//#region src/datatypes/pagination.d.ts
+//#region src/datatypes/notification.d.ts
 type Schemas$6 = components["schemas"];
-type CursorPagination = Schemas$6["CursorPagination"];
+type Notification = Schemas$6["Notification"];
+type NotificationEvent = Schemas$6["NotificationEvent"];
+type NotificationSettings = Schemas$6["NotificationSettings"];
+type UpdateNotificationSettings = Schemas$6["UpdateNotificationSettings"];
+type UnreadStatus = Schemas$6["UnreadStatus"];
+type NotificationPage = Schemas$6["NotificationPage"];
+type MarkedReadStatus = Schemas$6["MarkedReadStatus"];
+type UnreadCountEvent = Schemas$6["UnreadCountEvent"];
+type NotificationPayload = Schemas$6["NotificationPayload"];
+type MemberInvitedParams = Schemas$6["MemberInvitedParams"];
+type MemberJoinedParams = Schemas$6["MemberJoinedParams"];
+type ConnectionSyncCompletedParams = Schemas$6["ConnectionSyncCompletedParams"];
+type ConnectionSyncFailedParams = Schemas$6["ConnectionSyncFailedParams"];
+type DetectionCompletedParams = Schemas$6["DetectionCompletedParams"];
+type DetectionFailedParams = Schemas$6["DetectionFailedParams"];
+type RedactionCreatedParams = Schemas$6["RedactionCreatedParams"];
 //#endregion
-//#region src/datatypes/pipeline.d.ts
+//#region src/datatypes/pagination.d.ts
 type Schemas$5 = components["schemas"];
-type Pipeline = Schemas$5["Pipeline"];
-type CreatePipeline = Schemas$5["CreatePipeline"];
-type UpdatePipeline = Schemas$5["UpdatePipeline"];
-type PipelineDefinition = Schemas$5["PipelineDefinition"];
-type PipelineFilter = Schemas$5["PipelineFilter"];
-type PipelineStatus = Schemas$5["PipelineStatus"];
-type PipelineTriggerType = Schemas$5["PipelineTriggerType"];
-type PipelineSummary = Schemas$5["PipelineSummary"];
-type PipelineSummaryPage = Schemas$5["PipelineSummaryPage"];
+type CursorPagination = Schemas$5["CursorPagination"];
 //#endregion
-//#region src/datatypes/policy.d.ts
+//#region src/datatypes/pipeline.d.ts
 type Schemas$4 = components["schemas"];
-type Policy = Schemas$4["Policy"];
-type PolicySummary = Schemas$4["PolicySummary"];
-type PolicySummaryPage = Schemas$4["PolicySummaryPage"];
-type PolicyDefinition = Schemas$4["PolicyDefinition"];
-type PolicyDraft = Schemas$4["PolicyDraft"];
-type CreatePolicy = Schemas$4["CreatePolicy"];
-type UpdatePolicy = Schemas$4["UpdatePolicy"];
-type PolicyRule = Schemas$4["PolicyRule"];
-type PolicyTemplate = Schemas$4["PolicyTemplate"];
-type TemplateOrigin = Schemas$4["TemplateOrigin"];
-type HipaaDeidMethod = Schemas$4["HipaaDeidMethod"];
-type HipaaAccountNumbers = Schemas$4["HipaaAccountNumbers"];
-type GdprArticle9Treatment = Schemas$4["GdprArticle9Treatment"];
-type GdprSensitiveScope = Schemas$4["GdprSensitiveScope"];
-type PciDssPart = Schemas$4["PciDssPart"];
-type PciPanRender = Schemas$4["PciPanRender"];
-type Predicate = Schemas$4["Predicate"];
-type ModalityRedactions = Schemas$4["ModalityRedactions"];
-type TextRedaction = Schemas$4["TextRedaction"];
-type ImageRedaction = Schemas$4["ImageRedaction"];
-type AudioRedaction = Schemas$4["AudioRedaction"];
-type TabularRedaction = Schemas$4["TabularRedaction"];
-type LabelScope = Schemas$4["LabelScope"];
-type LabelEntry = Schemas$4["LabelEntry"];
-type LabelLocale = Schemas$4["LabelLocale"];
-type Label = Schemas$4["Label"];
-type LabelRef = Schemas$4["LabelRef"];
-type LocalizedText = Schemas$4["LocalizedText"];
-type Color = Schemas$4["Color"];
-type Waveform = Schemas$4["Waveform"];
-type ClampBucket = Schemas$4["ClampBucket"];
-type ConfidenceThreshold = Schemas$4["ConfidenceThreshold"];
-type DateStyle = Schemas$4["DateStyle"];
-type DateGranularity = Schemas$4["DateGranularity"];
-type LanguageTag = Schemas$4["LanguageTag"];
-type Sha2Algorithm = Schemas$4["Sha2Algorithm"];
-type TerminalFallback = Schemas$4["TerminalFallback"];
+type Pipeline = Schemas$4["Pipeline"];
+type CreatePipeline = Schemas$4["CreatePipeline"];
+type UpdatePipeline = Schemas$4["UpdatePipeline"];
+type PipelineDefinition = Schemas$4["PipelineDefinition"];
+type PipelineFilter = Schemas$4["PipelineFilter"];
+type PipelineStatus = Schemas$4["PipelineStatus"];
+type PipelineTriggerType = Schemas$4["PipelineTriggerType"];
+type PipelineSummary = Schemas$4["PipelineSummary"];
+type PipelineSummaryPage = Schemas$4["PipelineSummaryPage"];
 //#endregion
-//#region src/datatypes/run.d.ts
+//#region src/datatypes/policy.d.ts
 type Schemas$3 = components["schemas"];
-type RunId = Schemas$3["RunId"];
-type PipelineRun = Schemas$3["PipelineRun"];
-type RunMetadata = Schemas$3["RunMetadata"];
-type CreatePipelineRun = Schemas$3["CreatePipelineRun"];
-type PipelineRunStatus = Schemas$3["PipelineRunStatus"];
-type PipelineRunPage = Schemas$3["PipelineRunPage"];
-type PipelineRunsQuery = Schemas$3["PipelineRunsQuery"];
-type RunStatusEvent = Schemas$3["RunStatusEvent"];
-type Audit = Schemas$3["Audit"];
+type Policy = Schemas$3["Policy"];
+type PolicySummary = Schemas$3["PolicySummary"];
+type PolicySummaryPage = Schemas$3["PolicySummaryPage"];
+type PolicyDefinition = Schemas$3["PolicyDefinition"];
+type PolicyDraft = Schemas$3["PolicyDraft"];
+type CreatePolicy = Schemas$3["CreatePolicy"];
+type UpdatePolicy = Schemas$3["UpdatePolicy"];
+type PolicyRule = Schemas$3["PolicyRule"];
+type PolicyTemplate = Schemas$3["PolicyTemplate"];
+type TemplateOrigin = Schemas$3["TemplateOrigin"];
+type HipaaDeidMethod = Schemas$3["HipaaDeidMethod"];
+type HipaaAccountNumbers = Schemas$3["HipaaAccountNumbers"];
+type GdprArticle9Treatment = Schemas$3["GdprArticle9Treatment"];
+type GdprSensitiveScope = Schemas$3["GdprSensitiveScope"];
+type PciDssPart = Schemas$3["PciDssPart"];
+type PciPanRender = Schemas$3["PciPanRender"];
+type Predicate = Schemas$3["Predicate"];
+type ModalityRedactions = Schemas$3["ModalityRedactions"];
+type TextRedaction = Schemas$3["TextRedaction"];
+type ImageRedaction = Schemas$3["ImageRedaction"];
+type AudioRedaction = Schemas$3["AudioRedaction"];
+type TabularRedaction = Schemas$3["TabularRedaction"];
+type LabelScope = Schemas$3["LabelScope"];
+type LabelEntry = Schemas$3["LabelEntry"];
+type LabelLocale = Schemas$3["LabelLocale"];
+type Label = Schemas$3["Label"];
+type LabelRef = Schemas$3["LabelRef"];
+type LocalizedText = Schemas$3["LocalizedText"];
+type Color = Schemas$3["Color"];
+type Waveform = Schemas$3["Waveform"];
+type ClampBucket = Schemas$3["ClampBucket"];
+type ConfidenceThreshold = Schemas$3["ConfidenceThreshold"];
+type DateStyle = Schemas$3["DateStyle"];
+type DateGranularity = Schemas$3["DateGranularity"];
+type LanguageTag = Schemas$3["LanguageTag"];
+type Sha2Algorithm = Schemas$3["Sha2Algorithm"];
+type TerminalFallback = Schemas$3["TerminalFallback"];
 //#endregion
 //#region src/datatypes/scope.d.ts
 type Schemas$2 = components["schemas"];
-type ScopeParams = Schemas$2["ScopeParams"];
 type ScopeMetadata = Schemas$2["ScopeMetadata"];
 type CountryCode = Schemas$2["CountryCode"];
 type Language = Schemas$2["Language"];
@@ -15309,5 +16055,5 @@ type Retention = Schemas["Retention"];
 type RetentionSettings = Schemas["RetentionSettings"];
 type RetentionOverride = Schemas["RetentionOverride"];
 //#endregion
-export { LabelRef as $, ChatSessionPage as $n, TextAuditEvent as $r, GenerateInviteCode as $t, CreatePipelineRun as A, Activity as Ai, ConnectionId as An, ImageData as Ar, CursorPagination as At, Color as B, PipelineActivityParams as Bi, S3Credentials as Bn, Polygon as Br, NotificationSettings as Bt, Language as C, StorageAnalytics as Ci, ExportQuery as Cn, Dimensions as Cr, PipelineDefinition as Ct, ScopeMetadata as D, UsageAnalytics as Di, AzureCredentials as Dn, ImageAuditEvent as Dr, PipelineSummaryPage as Dt, Languages as E, Usage as Ei, AnthropicCredentials as En, EntityGroup as Er, PipelineSummary as Et, RunId as F, ActivityType as Fi, ConnectionsQuery as Fn, LeakProfile as Fr, MemberJoinedParams as Ft, GdprArticle9Treatment as G, Account as Gi, SyncSchedule as Gn, SourceRef as Gr, UnreadStatus as Gt, CreatePolicy as H, PolicyActivityParams as Hi, SyncConnection as Hn, RasterMode as Hr, PipelineRunCompletedParams as Ht, RunMetadata as I, ConnectionActivityParams as Ii, CreateConnection as In, ModelEvent as Ir, Notification as It, HipaaDeidMethod as J, PasswordChange as Ji, SyncTriggerType as Jn, TabularAuditLog as Jr, Member as Jt, GdprSensitiveScope as K, AccountRef as Ki, SyncScheduleInput as Kn, TabularAuditEvent as Kr, UpdateNotificationSettings as Kt, RunStatusEvent as L, FileActivityParams as Li, GcsCredentials as Ln, OperatorId as Lr, NotificationEvent as Lt, PipelineRunPage as M, ActivityListQuery as Mi, ConnectionSync as Mn, ImageEntityRecord as Mr, ConnectionSyncFailedParams as Mt, PipelineRunStatus as N, ActivityPage as Ni, ConnectionSyncPage as Nn, ImageHint as Nr, MarkedReadStatus as Nt, ScopeParams as O, UsageReport as Oi, Connection as On, ImageAuditKind as Or, PipelineTriggerType as Ot, PipelineRunsQuery as P, ActivityPayload as Pi, ConnectionVerification as Pn, ImageLocation as Pr, MemberInvitedParams as Pt, LabelLocale as Q, ChatSession as Qn, TabularLocation as Qr, CreateInvite as Qt, AudioRedaction as R, InviteActivityParams as Ri, LlmConfig as Rn, PatternEvent as Rr, NotificationPage as Rt, CountryCode as S, RunTimeSeries as Si, ExportFormat as Sn, Category as Sr, Pipeline as St, LanguageSpan as T, TokenCounts as Ti, ValidationErrorDetail as Tn, EntityCoRef as Tr, PipelineStatus as Tt, DateGranularity as U, WebhookActivityParams as Ui, SyncDeletionPolicy as Un, Review as Ur, PipelineRunFailedParams as Ut, ConfidenceThreshold as V, PipelineRunActivityParams as Vi, StorageConfig as Vn, RangeOfUint as Vr, PipelineRunAnalyzedParams as Vt, DateStyle as W, WorkspaceActivityParams as Wi, SyncMode as Wn, RuleMatch as Wr, UnreadCountEvent as Wt, Label as X, UpdateAccount as Xi, ChatMessage as Xn, TabularEntityRecord as Xr, MemberSortField as Xt, ImageRedaction as Y, PublicAccount as Yi, UpdateConnection as Yn, TabularEntity as Yr, MemberPage as Yt, LabelEntry as Z, paths as Zi, ChatRole as Zn, TabularHint as Zr, UpdateMember as Zt, WebhookId as _, ProviderType as _i, FormatToken as _n, AudioHint as _r, TerminalFallback as _t, RetentionSettings as a, TextHint as ai, InviteSent as an, RegisteredRecognizer as ar, PciPanRender as at, WebhookStatus as b, RunDayEntry as bi, UpdateFile as bn, AuditHash as br, Waveform as bt, WorkspacePage as c, ApiToken as ci, ListInvites as cn, Signup as cr, PolicyDraft as ct, CreateWebhook as d, ApiTokenWithJWT as di, ComponentHealth as dn, AudioAuditEvent as dr, PolicySummaryPage as dt, TextAuditKind as ei, Invite as en, ChatToken as er, LabelScope as et, TestWebhook as f, CreateApiToken as fi, Health as fn, AudioAuditKind as fr, PolicyTemplate as ft, WebhookEvent as g, ModelUsageEntry as gi, FilePage as gn, AudioEntityRecord as gr, TemplateOrigin as gt, WebhookCreated as h, ModelUsage as hi, FileKind as hn, AudioEntity as hr, TabularRedaction as ht, RetentionOverride as i, TextEntityRecord as ii, InvitePreview as in, RecognizerCatalog as ir, PciDssPart as it, PipelineRun as j, ActivityExportQuery as ji, ConnectionPage as jn, ImageEntity as jr, ConnectionSyncCompletedParams as jt, Audit as k, WorkspaceAnalytics as ki, ConnectionConfig as kn, ImageAuditLog as kr, UpdatePipeline as kt, WorkspaceRole as l, ApiTokenPage as li, ReplyInvite as ln, Attribution as lr, PolicyRule as lt, Webhook as m, UpdateApiToken as mi, File as mn, AudioData as mr, Sha2Algorithm as mt, OcrPolicy as n, TextData as ni, InviteExpiration as nn, SendChatMessage as nr, LocalizedText as nt, UpdateWorkspace as o, TextLocation as oi, InviteSortField as on, AuthToken as or, Policy as ot, UpdateWebhook as p, TokenExpiration as pi, HealthStatus as pn, AudioAuditLog as pr, Predicate as pt, HipaaAccountNumbers as q, Handle as qi, SyncStatus as qn, TabularAuditKind as qr, ListMembers as qt, Retention as r, TextEntity as ri, InvitePage as rn, LabelCatalog as rr, ModalityRedactions as rt, Workspace as s, TimeSpan as si, InviteStatus as sn, Login as sr, PolicyDefinition as st, CreateWorkspace as t, TextAuditLog as ti, InviteCode as tn, CreateChatSession as tr, LanguageTag as tt, WorkspaceSettings as u, ApiTokenType as ui, SortOrder as un, AttributionKind as ur, PolicySummary as ut, WebhookPage as v, RecognizerId as vi, ListFiles as vn, AudioLocation as vr, TextRedaction as vt, LanguageProvenance as w, StorageKindEntry as wi, ErrorResponse as wn, Dpi as wr, PipelineFilter as wt, Confidence as x, RunStatusEntry as xi, DateWindow as xn, BoundingBox as xr, CreatePipeline as xt, WebhookResult as y, RunAnalytics as yi, ModalityToken as yn, AuditContext as yr, UpdatePolicy as yt, ClampBucket as z, MemberActivityParams as zi, OpenAiCredentials as zn, Point as zr, NotificationPayload as zt };
-//# sourceMappingURL=index-0_K3HaXB.d.ts.map
+export { PolicyRule as $, DetectionAnalytics as $i, ChatMessage as $n, ImageModel as $r, ReplyInvite as $t, Color as A, Account as Aa, TabularRetag as Ai, AzureCredentials as An, Calibration as Ar, NotificationPage as At, Label as B, TextManual as Bi, GcsCredentials as Bn, EditSet as Br, MemberSortField as Bt, Language as C, InviteActivityParams as Ca, TabularEntity as Ci, PipelineDetectionsQuery as Cn, AudioModel as Cr, DetectionCompletedParams as Ct, ScopeMetadata as D, RedactionActivityParams as Da, TabularModel as Di, RedactionResultPage as Dn, Audit as Dr, MemberJoinedParams as Dt, Languages as E, PolicyActivityParams as Ea, TabularManual as Ei, RedactionResult as En, AudioRetag as Er, MemberInvitedParams as Et, GdprArticle9Treatment as F, UpdateAccount as Fa, TextData as Fi, ConnectionSync as Fn, Contested as Fr, UnreadStatus as Ft, LanguageTag as G, TimeSpan as Gi, SyncConnection as Gn, ImageAuditKind as Gr, InviteCode as Gt, LabelLocale as H, TextPattern as Hi, OpenAiCredentials as Hn, FreeformAttribution as Hr, CreateInvite as Ht, GdprSensitiveScope as I, paths as Ia, TextEdit as Ii, ConnectionSyncPage as In, Deduplication as Ir, UpdateNotificationSettings as It, PciDssPart as J, ApiTokenType as Ji, SyncSchedule as Jn, ImageEdit as Jr, InvitePreview as Jt, LocalizedText as K, ApiToken as Ki, SyncDeletionPolicy as Kn, ImageAuditLog as Kr, InviteExpiration as Kt, HipaaAccountNumbers as L, TextEntity as Li, ConnectionVerification as Ln, Dimensions as Lr, ListMembers as Lt, CreatePolicy as M, Handle as Ma, TextAuditEvent as Mi, ConnectionConfig as Mn, CitedAttribution as Mr, NotificationSettings as Mt, DateGranularity as N, PasswordChange as Na, TextAuditKind as Ni, ConnectionId as Nn, CodecParams as Nr, RedactionCreatedParams as Nt, AudioRedaction as O, WebhookActivityParams as Oa, TabularPattern as Oi, WorkspaceDetectionsQuery as On, AuditHash as Or, Notification as Ot, DateStyle as P, PublicAccount as Pa, TextAuditLog as Pi, ConnectionPage as Pn, Conflict as Pr, UnreadCountEvent as Pt, PolicyDraft as Q, UpdateApiToken as Qi, UpdateConnection as Qn, ImageManual as Qr, ListInvites as Qt, HipaaDeidMethod as R, TextHint as Ri, ConnectionsQuery as Rn, DocumentContext as Rr, Member as Rt, CountryCode as S, FileActivityParams as Sa, TabularEdit as Si, DetectionStatusEvent as Sn, AudioManual as Sr, ConnectionSyncFailedParams as St, LanguageSpan as T, PipelineActivityParams as Ta, TabularLocation as Ti, RedactionId as Tn, AudioRefinement as Tr, MarkedReadStatus as Tt, LabelRef as U, TextRefinement as Ui, S3Credentials as Un, ImageAdd as Ur, GenerateInviteCode as Ut, LabelEntry as V, TextModel as Vi, LlmConfig as Vn, EntityCoRef as Vr, UpdateMember as Vt, LabelScope as W, TextRetag as Wi, StorageConfig as Wn, ImageAuditEvent as Wr, Invite as Wt, Policy as X, CreateApiToken as Xi, SyncStatus as Xn, ImageHint as Xr, InviteSortField as Xt, PciPanRender as Y, ApiTokenWithJWT as Yi, SyncScheduleInput as Yn, ImageEntity as Yr, InviteSent as Yt, PolicyDefinition as Z, TokenExpiration as Zi, SyncTriggerType as Zn, ImageLocation as Zr, InviteStatus as Zt, WebhookId as _, ActivityPage as _a, Suppress as _i, Detection as _n, AudioData as _r, PipelineSummaryPage as _t, RetentionSettings as a, ProviderType as aa, ModelEvent as ai, FileKind as an, SendChatMessage as ar, TabularRedaction as at, WebhookStatus as b, ConnectionActivityParams as ba, TabularAuditKind as bi, DetectionPage as bn, AudioHint as br, CursorPagination as bt, WorkspacePage as c, StorageKindEntry as ca, Point as ci, ListFiles as cn, RegisteredRecognizer as cr, TextRedaction as ct, CreateWebhook as d, UsageAnalytics as da, RasterMode as di, DateWindow as dn, Signup as dr, CreatePipeline as dt, DetectionDayEntry as ea, ImagePattern as ei, SortOrder as en, ChatRole as er, PolicySummary as et, TestWebhook as f, UsageReport as fa, Redaction as fi, ExportFormat as fn, Attribution as fr, Pipeline as ft, WebhookEvent as g, ActivityFilterQuery as ga, SourceRef as gi, CreateDetection as gn, AudioAuditLog as gr, PipelineSummary as gt, WebhookCreated as h, ActivityExportOptions as ha, Selection as hi, ValidationErrorDetail as hn, AudioAuditKind as hr, PipelineStatus as ht, RetentionOverride as i, ModelUsageEntry as ia, ManualIntent as ii, File as in, CreateChatSession as ir, Sha2Algorithm as it, ConfidenceThreshold as j, AccountRef as ja, TextAdd as ji, Connection as jn, Category as jr, NotificationPayload as jt, ClampBucket as k, WorkspaceActivityParams as ka, TabularRefinement as ki, AnthropicCredentials as kn, BoundingBox as kr, NotificationEvent as kt, WorkspaceRole as l, TokenCounts as la, Polygon as li, ModalityToken as ln, AuthToken as lr, UpdatePolicy as lt, Webhook as m, Activity as ma, RuleMatch as mi, ErrorResponse as mn, AudioAuditEvent as mr, PipelineFilter as mt, OcrPolicy as n, DetectionTimeSeries as na, ImageRetag as ni, Health as nn, ChatSessionPage as nr, PolicyTemplate as nt, UpdateWorkspace as o, RecognizerId as oa, OperatorId as oi, FilePage as on, LabelCatalog as or, TemplateOrigin as ot, UpdateWebhook as p, WorkspaceAnalytics as pa, Report as pi, ExportQuery as pn, AudioAdd as pr, PipelineDefinition as pt, ModalityRedactions as q, ApiTokenPage as qi, SyncMode as qn, ImageData as qr, InvitePage as qt, Retention as r, ModelUsage as ra, LeakProfile as ri, HealthStatus as rn, ChatToken as rr, Predicate as rt, Workspace as s, StorageAnalytics as sa, PatternEvent as si, FormatToken as sn, RecognizerCatalog as sr, TerminalFallback as st, CreateWorkspace as t, DetectionStatusEntry as ta, ImageRefinement as ti, ComponentHealth as tn, ChatSession as tr, PolicySummaryPage as tt, WorkspaceSettings as u, Usage as ua, RangeOfUint as ui, UpdateFile as un, Login as ur, Waveform as ut, WebhookPage as v, ActivityPayload as va, TabularAdd as vi, DetectionId as vn, AudioEdit as vr, PipelineTriggerType as vt, LanguageProvenance as w, MemberActivityParams as wa, TabularHint as wi, RedactDetection as wn, AudioPattern as wr, DetectionFailedParams as wt, Confidence as x, DetectionActivityParams as xa, TabularAuditLog as xi, DetectionStatus as xn, AudioLocation as xr, ConnectionSyncCompletedParams as xt, WebhookResult as y, ActivityType as ya, TabularAuditEvent as yi, DetectionMetadata as yn, AudioEntity as yr, UpdatePipeline as yt, ImageRedaction as z, TextLocation as zi, CreateConnection as zn, Dpi as zr, MemberPage as zt };
+//# sourceMappingURL=index-BPKkfko3.d.ts.map