@nvisy/sdk 0.43.0 → 0.45.0

package/dist/{index-DiwyTpoq.d.ts → index-kr36ZsdV.d.ts}

@@ -2700,6 +2700,112 @@ interface paths {
     patch?: never;
     trace?: never;
   };
+  "/workspaces/{workspaceSlug}/connections/oauth/{provider}/start/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    /**
+     * Start cloud file OAuth
+     * @description Begins the OAuth authorization for a cloud file-service connection and returns the provider authorize URL to redirect the user to. On the user's consent, the provider redirects to the callback, which creates the connection.
+     */
+    post: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+          /** @description The cloud file provider to connect. */
+          provider: components["schemas"]["Provider"];
+        };
+        cookie?: never;
+      };
+      /** @description Request payload for starting a cloud file-service OAuth authorization. */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["StartFileServiceOAuth"];
+        };
+      };
+      responses: {
+        /** @description The response to a successful authorization start: where to send the user. */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["OAuthStartResponse"];
+          };
+        };
+        /** @description Failed to parse the request body as JSON */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+      };
+    };
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   "/workspaces/{workspaceSlug}/chat/sessions/": {
     parameters: {
       query?: never;
@@ -3301,7 +3407,111 @@ interface paths {
     put?: never;
     /**
      * Sync connection
-     * @description Imports an object from or exports a file to the connection. Returns the created sync; poll it for completion.
+     * @description Runs the object-store connection's configured direction: imports every new object, or exports every redacted output not yet exported. File services use the picker import and per-file export instead. Returns the created sync; poll it for completion.
+     */
+    post: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description A connection sync (import or export). */
+        202: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ConnectionSync"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/connections/{connectionId}/import/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    /**
+     * Import selected files
+     * @description Imports the files selected in the provider's picker (file services only). Already-imported files are skipped. Returns the created sync; poll it for completion.
      */
     post: {
       parameters: {
@@ -3316,17 +3526,12 @@ interface paths {
         cookie?: never;
       };
       /**
-       * @description Request payload to trigger a connection sync.
-       *
-       *     The direction is determined by the connection's configured `sync_mode`.
-       *     - Import connections need no body: the sync fetches every not-yet-imported
-       *       object under the connection's root path.
-       *     - Export connections push one workspace file (`file_id`) to one object
-       *       `key`; both are required for export and ignored for import.
+       * @description Request payload to import a caller-selected set of files from a file-service
+       *     connection (the provider picker returns id + name per file).
        */
       requestBody: {
         content: {
-          "application/json": components["schemas"]["SyncConnection"];
+          "application/json": components["schemas"]["ImportFiles"];
         };
       };
       responses: {
@@ -3399,6 +3604,167 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        409: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+      };
+    };
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/connections/{connectionId}/export/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    /**
+     * Export files to connection
+     * @description Exports the selected workspace files to the connection, each as a new provider file. Returns the created sync; poll it for completion.
+     */
+    post: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
+        };
+        cookie?: never;
+      };
+      /**
+       * @description Request payload to export a caller-selected set of workspace files to a
+       *     connection. Each is written as a new provider file, never overwriting a
+       *     source. Mirrors [`ImportFiles`] on the export side.
+       */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["ExportFiles"];
+        };
+      };
+      responses: {
+        /** @description A connection sync (import or export). */
+        202: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ConnectionSync"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        409: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
         /** @description Expected request with `Content-Type: application/json` */
         415: {
           headers: {
@@ -4345,7 +4711,7 @@ interface paths {
     };
     /**
      * Download file
-     * @description Downloads a file by ID. Returns the file content as a binary stream.
+     * @description Downloads a file by ID. Returns the file content as a binary stream. The required permission depends on the file's kind: an original file (or an intermediate, which carries the original's content) needs DownloadOriginalFiles, a redacted output needs DownloadRedactedFiles, and an audit blob needs DownloadAudit.
      */
     get: {
       parameters: {
@@ -6778,6 +7144,67 @@ interface paths {
     patch?: never;
     trace?: never;
   };
+  "/catalog/connectors/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List connectors
+     * @description Returns which connector families and providers this deployment can create: each OAuth file-service provider is available only when its app is configured on the server, while object-store and inference connections carry their own credentials and are always available. Use it to render the connect UI without probing.
+     */
+    get: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path?: never;
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /**
+         * @description Which connector families and providers this deployment can create.
+         *
+         *     Lets a client render the connect UI without probing: a file-service provider
+         *     is only offered when the host has configured its OAuth app, whereas
+         *     object-store and inference connections carry their own credentials and are
+         *     always available.
+         */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ConnectorCatalog"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   "/api-tokens/": {
     parameters: {
       query?: never;
@@ -9452,11 +9879,6 @@ interface components {
      *     audit trail and activity tracking.
      */
     ActivityType: "workspace.created" | "workspace.updated" | "workspace.deleted" | "member.added" | "member.updated" | "member.deleted" | "invite.created" | "invite.accepted" | "invite.declined" | "invite.canceled" | "connection.created" | "connection.updated" | "connection.deleted" | "connection.sync.started" | "connection.sync.completed" | "connection.sync.failed" | "webhook.created" | "webhook.updated" | "webhook.deleted" | "file.created" | "file.updated" | "file.deleted" | "pipeline.created" | "pipeline.updated" | "pipeline.deleted" | "pipeline.detection.started" | "pipeline.detection.completed" | "pipeline.detection.failed" | "pipeline.redaction.created" | "policy.created" | "policy.updated" | "policy.deleted";
-    /** @description Anthropic API credentials. */
-    AnthropicCredentials: {
-      /** @description Anthropic API key. */
-      apiKey: string;
-    };
     /** @description API token response structure. */
     ApiToken: {
       /**
@@ -10226,6 +10648,20 @@ interface components {
       /** @description Handle of the authenticated account. */
       username: components["schemas"]["Handle"];
     };
+    /**
+     * @description Configuration for a provider reached with an API key (OpenAI, Anthropic).
+     *
+     *     The `api_key` is masked in [`Debug`], so neither this struct nor any config
+     *     that embeds it leaks the key.
+     */
+    AuthenticatedProvider: {
+      /** @description The provider API key. */
+      apiKey: string;
+      /** @description Override the API base URL (for a compatible endpoint or a proxy). Optional. */
+      baseUrl?: string;
+      /** @description Default model to use when a request does not specify one. Optional. */
+      defaultModel?: string;
+    };
     /**
      * @description Path parameters for a public avatar route: the owner id and the avatar's
      *     content-hash version.
@@ -10566,7 +11002,7 @@ interface components {
      *     Untagged: the two inner enums have disjoint `provider` values, so serde
      *     resolves the variant from the flat payload without an outer discriminator.
      */
-    ConnectionConfig: components["schemas"]["StorageConfig"] | components["schemas"]["LlmConfig"];
+    ConnectionConfig: components["schemas"]["StorageConfig"] | components["schemas"]["FileServiceConfig"] | components["schemas"]["LlmConfig"];
     /** @description Opaque conn identifier (conn_<uuid>). */
     ConnectionId: string;
     /**
@@ -10702,6 +11138,29 @@ interface components {
        */
       provider?: string[];
     };
+    /**
+     * @description Which connector families and providers this deployment can create.
+     *
+     *     Lets a client render the connect UI without probing: a file-service provider
+     *     is only offered when the host has configured its OAuth app, whereas
+     *     object-store and inference connections carry their own credentials and are
+     *     always available.
+     */
+    ConnectorCatalog: {
+      /** @description Availability of each OAuth file-service provider. */
+      fileServices: components["schemas"]["FileProviders"];
+      /**
+       * @description Whether inference connections can be created. Currently always `true`, for
+       *     the same reason as object stores.
+       */
+      inference: boolean;
+      /**
+       * @description Whether object-store connections can be created. Currently always `true` —
+       *     they carry their own credentials, so nothing gates them server-side — but
+       *     clients should read the field rather than assume it.
+       */
+      objectStores: boolean;
+    };
     /**
      * @description A competing detection of a different label over the same span was left
      *     *unresolved*: both entities survive, flagged for a human. Recorded on each
@@ -11365,6 +11824,18 @@ interface components {
       /** @description Validation error details for field-specific errors */
       validation?: components["schemas"]["ValidationErrorDetail"][];
     };
+    /**
+     * @description Request payload to export a caller-selected set of workspace files to a
+     *     connection. Each is written as a new provider file, never overwriting a
+     *     source. Mirrors [`ImportFiles`] on the export side.
+     */
+    ExportFiles: {
+      /**
+       * @description The workspace files to export, by id. Files already exported to the
+       *     connection are exported again (a fresh copy).
+       */
+      fileIds: string[];
+    };
     /** @description The file format an export is rendered as. */
     ExportFormat: "csv" | "json";
     /**
@@ -11462,6 +11933,39 @@ interface components {
        */
       total?: number;
     };
+    /**
+     * @description Per-provider availability for the OAuth file services. Each field is `true`
+     *     only when that provider's OAuth app is configured on the server.
+     */
+    FileProviders: {
+      /**
+       * @description Whether Box can be connected. (`box` is a Rust keyword, hence the field
+       *     name; the wire name is `box`.)
+       */
+      box: boolean;
+      /** @description Whether Dropbox can be connected. */
+      dropbox: boolean;
+      /** @description Whether Google Drive can be connected. */
+      googleDrive: boolean;
+      /** @description Whether OneDrive can be connected. */
+      oneDrive: boolean;
+    };
+    /**
+     * @description A fully-typed cloud file-service connection configuration: a provider and its
+     *     settings. Serialized (flat: `{ "provider": ..., "tokens": ..., "root": ... }`)
+     *     only to persist the config encrypted at rest, never returned in API responses.
+     */
+    FileServiceConfig: {
+      /** @description Which provider backs this connection. */
+      provider: components["schemas"]["Provider"];
+      /**
+       * @description The folder (id or path) new exports are written into; `None` uses the
+       *     account root.
+       */
+      root?: string;
+      /** @description The OAuth token set for this connection. */
+      tokens: components["schemas"]["OAuthTokens"];
+    };
     /**
      * @description A supported file extension.
      * @enum {string}
@@ -12134,6 +12638,14 @@ interface components {
       /** @description The rationale, when one was given. */
       reason?: string;
     };
+    /**
+     * @description Request payload to import a caller-selected set of files from a file-service
+     *     connection (the provider picker returns id + name per file).
+     */
+    ImportFiles: {
+      /** @description The files to import. Already-imported files are skipped. */
+      files: components["schemas"]["PickedFile"][];
+    };
     /**
      * @description Workspace invite with complete information.
      *
@@ -12608,36 +13120,21 @@ interface components {
      * @description A fully-typed LLM inference connection configuration.
      *
      *     The `provider` tag selects the variant and thereby the credential shape, so
-     *     an OpenAI connection cannot carry Anthropic credentials. Serialization exists
-     *     only to persist the config encrypted at rest, never to return it in API
-     *     responses.
+     *     an OpenAI connection cannot carry Anthropic credentials. The key-bearing
+     *     variants hold an [`AuthenticatedProvider`], which masks the key in `Debug`;
+     *     serialization exists only to persist the config encrypted at rest, never to
+     *     return it in API responses.
      */
-    LlmConfig: {
-      /** @description Override the API base URL (for Azure OpenAI or a proxy). Optional. */
-      baseUrl?: string;
-      /** @description OpenAI credentials. */
-      credentials: components["schemas"]["OpenAiCredentials"];
-      /** @description Default model to use when a request does not specify one. Optional. */
-      defaultModel?: string;
+    LlmConfig: ({
       /** @constant */
       provider: "openai";
-    } | {
-      /** @description Base URL of the Ollama server (e.g. `http://localhost:11434`). */
-      baseUrl: string;
-      /** @description Default model to use when a request does not specify one. Optional. */
-      defaultModel?: string;
+    } & components["schemas"]["AuthenticatedProvider"]) | ({
       /** @constant */
       provider: "ollama";
-    } | {
-      /** @description Override the API base URL. Optional. */
-      baseUrl?: string;
-      /** @description Anthropic credentials. */
-      credentials: components["schemas"]["AnthropicCredentials"];
-      /** @description Default model to use when a request does not specify one. Optional. */
-      defaultModel?: string;
+    } & components["schemas"]["UnauthenticatedProvider"]) | ({
       /** @constant */
       provider: "anthropic";
-    };
+    } & components["schemas"]["AuthenticatedProvider"]);
     /**
      * @description A value localized per [`LanguageTag`], with an English-first fallback.
      *
@@ -12938,10 +13435,38 @@ interface components {
       /** @description Whether to send email notifications. */
       notifyViaEmail: boolean;
     };
-    /** @description OpenAI API credentials. */
-    OpenAiCredentials: {
-      /** @description OpenAI API key. */
-      apiKey: string;
+    /**
+     * @description Path parameters for the OAuth start endpoint: which cloud file provider to
+     *     begin authorizing. The provider is the crate's [`Provider`], so the API and
+     *     stored config name each provider identically.
+     */
+    OAuthStartPathParams: {
+      /** @description The cloud file provider to connect. */
+      provider: components["schemas"]["Provider"];
+    };
+    /** @description The response to a successful authorization start: where to send the user. */
+    OAuthStartResponse: {
+      /** @description The provider authorize URL the client should redirect the user to. */
+      authorizeUrl: string;
+    };
+    /**
+     * @description A persisted OAuth token set. Stored encrypted with the rest of a
+     *     connection's config; never returned in API responses. The tokens are masked
+     *     in [`Debug`] so a connection config's derived `Debug` cannot leak them.
+     */
+    OAuthTokens: {
+      /** @description The current access token, sent as a bearer credential. */
+      access_token: string;
+      /**
+       * Format: int64
+       * @description Unix seconds at which the access token expires, if known.
+       */
+      expires_at?: number;
+      /**
+       * @description The refresh token, used to mint a new access token when it expires.
+       *     Providers may omit it on refresh, so it is retained across refreshes.
+       */
+      refresh_token?: string;
     };
     /**
      * @description Identifies a redaction operator, for the redaction audit a higher
@@ -13035,6 +13560,13 @@ interface components {
      *     [`Engine::with_key_provider`]: https://docs.rs/elide-pipeline/latest/elide_pipeline/struct.Engine.html
      */
     PciPanRender: "truncate" | "truncate_last_four" | "hmac_sha256" | "hmac_sha512";
+    /** @description One file the user selected in the provider's picker. */
+    PickedFile: {
+      /** @description The provider's file identifier (used to fetch the bytes). */
+      id: string;
+      /** @description The file's display name, as the picker reported it. */
+      name: string;
+    };
     /** @description Pipeline response. */
     Pipeline: {
       /**
@@ -13595,6 +14127,13 @@ interface components {
       /** @description Negated predicate. */
       not: components["schemas"]["Predicate"];
     };
+    /**
+     * @description A supported cloud file-service provider.
+     *
+     *     The serialized form (snake_case) is the `provider` tag stored on a connection
+     *     and used in the API, so every provider name lives in exactly one place.
+     */
+    Provider: "google_drive" | "dropbox" | "one_drive" | "box";
     /**
      * @description The capability category of a connection's provider.
      *
@@ -13604,7 +14143,7 @@ interface components {
      *     connection be found by what it can do — e.g. a workspace's language model —
      *     without decrypting its config.
      */
-    ProviderType: "object_store" | "language_model";
+    ProviderType: "object_store" | "language_model" | "file_service";
     /**
      * @description Public view of an account, returned when looking up someone other than the
      *     authenticated caller. Carries only the fields safe to share with a
@@ -14186,6 +14725,16 @@ interface components {
        */
       source: components["schemas"]["SourceRef"][];
     };
+    /** @description Request payload for starting a cloud file-service OAuth authorization. */
+    StartFileServiceOAuth: {
+      /** @description Human-readable name for the connection to be created on success. */
+      displayName: string;
+      /**
+       * @description Where to scope the sync: a folder id (Drive, OneDrive, Box) or a folder
+       *     path (Dropbox). Omit to use the account root.
+       */
+      root?: string;
+    };
     /** @description Storage totals across a workspace's live files. */
     StorageAnalytics: {
       /**
@@ -14271,24 +14820,6 @@ interface components {
       /** @description The rationale, when one was given. */
       reason?: string;
     };
-    /**
-     * @description Request payload to trigger a connection sync.
-     *
-     *     The direction is determined by the connection's configured `sync_mode`.
-     *     - Import connections need no body: the sync fetches every not-yet-imported
-     *       object under the connection's root path.
-     *     - Export connections push one workspace file (`file_id`) to one object
-     *       `key`; both are required for export and ignored for import.
-     */
-    SyncConnection: {
-      /**
-       * Format: uuid
-       * @description The workspace file to export (export connections only).
-       */
-      fileId?: string;
-      /** @description The destination object key for an export, relative to the root path. */
-      key?: string;
-    };
     /**
      * @description What an import does with a file whose source object no longer exists.
      *
@@ -15771,6 +16302,16 @@ interface components {
        */
       text: string;
     };
+    /**
+     * @description Configuration for a provider reached without an API key (Ollama), addressed
+     *     by a caller-supplied base URL. Carries no secret, so it derives [`Debug`].
+     */
+    UnauthenticatedProvider: {
+      /** @description Base URL of the server (e.g. `http://localhost:11434`). */
+      baseUrl: string;
+      /** @description Default model to use when a request does not specify one. Optional. */
+      defaultModel?: string;
+    };
     /**
      * @description An account's current unread-notification count, broadcast on the account's
      *     core-NATS unread subject.
@@ -16280,7 +16821,7 @@ interface components {
      *     This enumeration corresponds to the `WORKSPACE_ROLE` PostgreSQL enum and provides
      *     hierarchical access control for workspace members with clearly defined capabilities.
      */
-    WorkspaceRole: "owner" | "admin" | "member" | "guest";
+    WorkspaceRole: "owner" | "admin" | "editor" | "reviewer";
     /** @description Typed workspace settings, the JSON stored in the `workspaces.settings` column. */
     WorkspaceSettings: {
       /**
@@ -16512,6 +17053,9 @@ type LabelCatalog = Schemas$16["LabelCatalog"];
 /** The engine's registered recognizers, grouped into NER and LLM. */
 type RecognizerCatalog = Schemas$16["RecognizerCatalog"];
 type RegisteredRecognizer = Schemas$16["RegisteredRecognizer"];
+/** Which connector families and providers this deployment can create. */
+type ConnectorCatalog = Schemas$16["ConnectorCatalog"];
+type FileProviders = Schemas$16["FileProviders"];
 //#endregion
 //#region src/datatypes/chat.d.ts
 type Schemas$15 = components["schemas"];
@@ -16531,10 +17075,12 @@ type CreateConnection = Schemas$14["CreateConnection"];
 type UpdateConnection = Schemas$14["UpdateConnection"];
 type ConnectionsQuery = Schemas$14["ConnectionsQuery"];
 type ConnectionPage = Schemas$14["ConnectionPage"];
-type SyncConnection = Schemas$14["SyncConnection"];
 type ConnectionSync = Schemas$14["ConnectionSync"];
 type ConnectionSyncPage = Schemas$14["ConnectionSyncPage"];
 type ConnectionVerification = Schemas$14["ConnectionVerification"];
+type ImportFiles = Schemas$14["ImportFiles"];
+type PickedFile = Schemas$14["PickedFile"];
+type ExportFiles = Schemas$14["ExportFiles"];
 type SyncMode = Schemas$14["SyncMode"];
 type SyncStatus = Schemas$14["SyncStatus"];
 type SyncTriggerType = Schemas$14["SyncTriggerType"];
@@ -16545,8 +17091,13 @@ type S3Credentials = Schemas$14["S3Credentials"];
 type AzureCredentials = Schemas$14["AzureCredentials"];
 type GcsCredentials = Schemas$14["GcsCredentials"];
 type LlmConfig = Schemas$14["LlmConfig"];
-type AnthropicCredentials = Schemas$14["AnthropicCredentials"];
-type OpenAiCredentials = Schemas$14["OpenAiCredentials"];
+type AuthenticatedProvider = Schemas$14["AuthenticatedProvider"];
+type UnauthenticatedProvider = Schemas$14["UnauthenticatedProvider"];
+type Provider = Schemas$14["Provider"];
+type FileServiceConfig = Schemas$14["FileServiceConfig"];
+type OAuthTokens = Schemas$14["OAuthTokens"];
+type StartFileServiceOAuth = Schemas$14["StartFileServiceOAuth"];
+type OAuthStartResponse = Schemas$14["OAuthStartResponse"];
 type SyncSchedule = Schemas$14["SyncSchedule"];
 type SyncScheduleInput = Schemas$14["SyncScheduleInput"];
 //#endregion
@@ -16731,5 +17282,5 @@ type Retention = Schemas["Retention"];
 type RetentionSettings = Schemas["RetentionSettings"];
 type RetentionOverride = Schemas["RetentionOverride"];
 //#endregion
-export { PolicyRule as $, Layout as $i, SyncStatus as $n, ImageEntity as $r, ReplyInvite as $t, Color as A, ActivityExportOptions as Aa, TabularLocation as Ai, RedactionResultPage as An, Audit as Ar, NotificationPage as At, Label as B, PipelineActivityParams as Ba, TextCoord as Bi, ConnectionVerification as Bn, Deduplication as Br, MemberSortField as Bt, Language as C, StorageKindEntry as Ca, TabularAdd as Ci, DetectionPage as Cn, AudioHint as Cr, DetectionCompletedParams as Ct, ScopeMetadata as D, UsageReport as Da, TabularEdit as Di, RedactDetection as Dn, AudioPattern as Dr, MemberJoinedParams as Dt, Languages as E, UsageAnalytics as Ea, TabularAuditLog as Ei, PipelineDetectionsQuery as En, AudioModel as Er, MemberInvitedParams as Et, GdprArticle9Treatment as F, ConnectionActivityParams as Fa, TabularRetag as Fi, ConnectionConfig as Fn, CitedAttribution as Fr, UnreadStatus as Ft, LanguageTag as G, Account as Ga, TextLocation as Gi, OpenAiCredentials as Gn, EntityCoRef as Gr, InviteCode as Gt, LabelLocale as H, RedactionActivityParams as Ha, TextEdit as Hi, CreateConnection as Hn, DocumentContext as Hr, CreateInvite as Ht, GdprSensitiveScope as I, DetectionActivityParams as Ia, TextAdd as Ii, ConnectionId as In, CodecParams as Ir, UpdateNotificationSettings as It, PciDssPart as J, PasswordChange as Ja, TextPattern as Ji, SyncConnection as Jn, ImageAuditEvent as Jr, InvitePreview as Jt, LocalizedText as K, AccountRef as Ka, TextManual as Ki, S3Credentials as Kn, FreeformAttribution as Kr, InviteExpiration as Kt, HipaaAccountNumbers as L, FileActivityParams as La, TextAuditEvent as Li, ConnectionPage as Ln, Conflict as Lr, ListMembers as Lt, CreatePolicy as M, ActivityPage as Ma, TabularModel as Mi, AnthropicCredentials as Mn, BoundingBox as Mr, NotificationSettings as Mt, DateGranularity as N, ActivityPayload as Na, TabularPattern as Ni, AzureCredentials as Nn, Calibration as Nr, RedactionCreatedParams as Nt, AudioRedaction as O, WorkspaceAnalytics as Oa, TabularEntity as Oi, RedactionId as On, AudioRefinement as Or, Notification as Ot, DateStyle as P, ActivityType as Pa, TabularRefinement as Pi, Connection as Pn, Category as Pr, UnreadCountEvent as Pt, PolicyDraft as Q, ArtifactSet as Qi, SyncScheduleInput as Qn, ImageEdit as Qr, ListInvites as Qt, HipaaDeidMethod as R, InviteActivityParams as Ra, TextAuditKind as Ri, ConnectionSync as Rn, Contested as Rr, Member as Rt, CountryCode as S, StorageAnalytics as Sa, Suppress as Si, DetectionMetadata as Sn, AudioEntity as Sr, ConnectionSyncFailedParams as St, LanguageSpan as T, Usage as Ta, TabularAuditKind as Ti, DetectionStatusEvent as Tn, AudioManual as Tr, MarkedReadStatus as Tt, LabelRef as U, WebhookActivityParams as Ua, TextEntity as Ui, GcsCredentials as Un, Dpi as Ur, GenerateInviteCode as Ut, LabelEntry as V, PolicyActivityParams as Va, TextData as Vi, ConnectionsQuery as Vn, Dimensions as Vr, UpdateMember as Vt, LabelScope as W, WorkspaceActivityParams as Wa, TextHint as Wi, LlmConfig as Wn, EditSet as Wr, Invite as Wt, Policy as X, UpdateAccount as Xa, TextRetag as Xi, SyncMode as Xn, ImageAuditLog as Xr, InviteSortField as Xt, PciPanRender as Y, PublicAccount as Ya, TextRefinement as Yi, SyncDeletionPolicy as Yn, ImageAuditKind as Yr, InviteSent as Yt, PolicyDefinition as Z, paths as Za, TimeSpan as Zi, SyncSchedule as Zn, ImageData as Zr, InviteStatus as Zt, WebhookId as _, DetectionTimeSeries as _a, Report as _i, ErrorResponse as _n, AudioAuditEvent as _r, PipelineSummaryPage as _t, RetentionSettings as a, TranscriptWord as aa, ImageRefinement as ai, DeletedFiles as an, ChatSessionPage as ar, TabularRedaction as at, WebhookStatus as b, ProviderType as ba, SourceRef as bi, Detection as bn, AudioData as br, CursorPagination as bt, WorkspacePage as c, ApiTokenPage as ca, ManualIntent as ci, FileKind as cn, SendChatMessage as cr, TextRedaction as ct, CreateWebhook as d, CreateApiToken as da, PatternEvent as di, ListFiles as dn, RegisteredRecognizer as dr, CreatePipeline as dt, LayoutBlock as ea, ImageHint as ei, SortOrder as en, SyncTriggerType as er, PolicySummary as et, TestWebhook as f, TokenExpiration as fa, Point as fi, ModalityToken as fn, AuthToken as fr, Pipeline as ft, WebhookEvent as g, DetectionStatusEntry as ga, Redaction as gi, ExportQuery as gn, AudioAdd as gr, PipelineSummary as gt, WebhookCreated as h, DetectionDayEntry as ha, RasterMode as hi, ExportFormat as hn, Attribution as hr, PipelineStatus as ht, RetentionOverride as i, TranscriptSegment as ia, ImagePattern as ii, DeleteFiles as in, ChatSession as ir, Sha2Algorithm as it, ConfidenceThreshold as j, ActivityFilterQuery as ja, TabularManual as ji, WorkspaceDetectionsQuery as jn, AuditHash as jr, NotificationPayload as jt, ClampBucket as k, Activity as ka, TabularHint as ki, RedactionResult as kn, AudioRetag as kr, NotificationEvent as kt, WorkspaceRole as l, ApiTokenType as la, ModelEvent as li, FilePage as ln, LabelCatalog as lr, UpdatePolicy as lt, Webhook as m, DetectionAnalytics as ma, RangeOfUint as mi, DateWindow as mn, Signup as mr, PipelineFilter as mt, RasterPolicy as n, Token as na, ImageManual as ni, Health as nn, ChatMessage as nr, PolicyTemplate as nt, UpdateWorkspace as o, Transcription as oa, ImageRetag as oi, File as on, ChatToken as or, TemplateOrigin as ot, UpdateWebhook as p, UpdateApiToken as pa, Polygon as pi, UpdateFile as pn, Login as pr, PipelineDefinition as pt, ModalityRedactions as q, Handle as qa, TextModel as qi, StorageConfig as qn, ImageAdd as qr, InvitePage as qt, Retention as r, Tokens as ra, ImageModel as ri, HealthStatus as rn, ChatRole as rr, Predicate as rt, Workspace as s, ApiToken as sa, LeakProfile as si, FileHash as sn, CreateChatSession as sr, TerminalFallback as st, CreateWorkspace as t, LayoutWord as ta, ImageLocation as ti, ComponentHealth as tn, UpdateConnection as tr, PolicySummaryPage as tt, WorkspaceSettings as u, ApiTokenWithJWT as ua, OperatorId as ui, FormatToken as un, RecognizerCatalog as ur, Waveform as ut, WebhookPage as v, ModelUsage as va, RuleMatch as vi, ValidationErrorDetail as vn, AudioAuditKind as vr, PipelineTriggerType as vt, LanguageProvenance as w, TokenCounts as wa, TabularAuditEvent as wi, DetectionStatus as wn, AudioLocation as wr, DetectionFailedParams as wt, Confidence as x, RecognizerId as xa, SourceSpan as xi, DetectionId as xn, AudioEdit as xr, ConnectionSyncCompletedParams as xt, WebhookResult as y, ModelUsageEntry as ya, Selection as yi, CreateDetection as yn, AudioAuditLog as yr, UpdatePipeline as yt, ImageRedaction as z, MemberActivityParams as za, TextAuditLog as zi, ConnectionSyncPage as zn, DecodedSpan as zr, MemberPage as zt };
-//# sourceMappingURL=index-DiwyTpoq.d.ts.map
+export { PolicyRule as $, WorkspaceActivityParams as $a, TextHint as $i, StartFileServiceOAuth as $n, EditSet as $r, ReplyInvite as $t, Color as A, RecognizerId as Aa, SourceSpan as Ai, RedactionResultPage as An, AudioEdit as Ar, NotificationPage as At, Label as B, ActivityFilterQuery as Ba, TabularManual as Bi, ConnectionVerification as Bn, AuditHash as Br, MemberSortField as Bt, Language as C, DetectionAnalytics as Ca, RangeOfUint as Ci, DetectionPage as Cn, Signup as Cr, DetectionCompletedParams as Ct, ScopeMetadata as D, ModelUsage as Da, RuleMatch as Di, RedactDetection as Dn, AudioAuditKind as Dr, MemberJoinedParams as Dt, Languages as E, DetectionTimeSeries as Ea, Report as Ei, PipelineDetectionsQuery as En, AudioAuditEvent as Er, MemberInvitedParams as Et, GdprArticle9Treatment as F, UsageAnalytics as Fa, TabularAuditLog as Fi, ConnectionConfig as Fn, AudioModel as Fr, UnreadStatus as Ft, LanguageTag as G, DetectionActivityParams as Ga, TextAdd as Gi, GcsCredentials as Gn, CodecParams as Gr, InviteCode as Gt, LabelLocale as H, ActivityPayload as Ha, TabularPattern as Hi, CreateConnection as Hn, Calibration as Hr, CreateInvite as Ht, GdprSensitiveScope as I, UsageReport as Ia, TabularEdit as Ii, ConnectionId as In, AudioPattern as Ir, UpdateNotificationSettings as It, PciDssPart as J, MemberActivityParams as Ja, TextAuditLog as Ji, OAuthStartResponse as Jn, DecodedSpan as Jr, InvitePreview as Jt, LocalizedText as K, FileActivityParams as Ka, TextAuditEvent as Ki, ImportFiles as Kn, Conflict as Kr, InviteExpiration as Kt, HipaaAccountNumbers as L, WorkspaceAnalytics as La, TabularEntity as Li, ConnectionPage as Ln, AudioRefinement as Lr, ListMembers as Lt, CreatePolicy as M, StorageKindEntry as Ma, TabularAdd as Mi, AuthenticatedProvider as Mn, AudioHint as Mr, NotificationSettings as Mt, DateGranularity as N, TokenCounts as Na, TabularAuditEvent as Ni, AzureCredentials as Nn, AudioLocation as Nr, RedactionCreatedParams as Nt, AudioRedaction as O, ModelUsageEntry as Oa, Selection as Oi, RedactionId as On, AudioAuditLog as Or, Notification as Ot, DateStyle as P, Usage as Pa, TabularAuditKind as Pi, Connection as Pn, AudioManual as Pr, UnreadCountEvent as Pt, PolicyDraft as Q, WebhookActivityParams as Qa, TextEntity as Qi, S3Credentials as Qn, Dpi as Qr, ListInvites as Qt, HipaaDeidMethod as R, Activity as Ra, TabularHint as Ri, ConnectionSync as Rn, AudioRetag as Rr, Member as Rt, CountryCode as S, UpdateApiToken as Sa, Polygon as Si, DetectionMetadata as Sn, Login as Sr, ConnectionSyncFailedParams as St, LanguageSpan as T, DetectionStatusEntry as Ta, Redaction as Ti, DetectionStatusEvent as Tn, AudioAdd as Tr, MarkedReadStatus as Tt, LabelRef as U, ActivityType as Ua, TabularRefinement as Ui, ExportFiles as Un, Category as Ur, GenerateInviteCode as Ut, LabelEntry as V, ActivityPage as Va, TabularModel as Vi, ConnectionsQuery as Vn, BoundingBox as Vr, UpdateMember as Vt, LabelScope as W, ConnectionActivityParams as Wa, TabularRetag as Wi, FileServiceConfig as Wn, CitedAttribution as Wr, Invite as Wt, Policy as X, PolicyActivityParams as Xa, TextData as Xi, PickedFile as Xn, Dimensions as Xr, InviteSortField as Xt, PciPanRender as Y, PipelineActivityParams as Ya, TextCoord as Yi, OAuthTokens as Yn, Deduplication as Yr, InviteSent as Yt, PolicyDefinition as Z, RedactionActivityParams as Za, TextEdit as Zi, Provider as Zn, DocumentContext as Zr, InviteStatus as Zt, WebhookId as _, ApiTokenPage as _a, ManualIntent as _i, ErrorResponse as _n, FileProviders as _r, PipelineSummaryPage as _t, RetentionSettings as a, TextRetag as aa, ImageAuditLog as ai, DeletedFiles as an, UpdateAccount as ao, SyncStatus as ar, TabularRedaction as at, WebhookStatus as b, CreateApiToken as ba, PatternEvent as bi, Detection as bn, RegisteredRecognizer as br, CursorPagination as bt, WorkspacePage as c, Layout as ca, ImageEntity as ci, FileKind as cn, UpdateConnection as cr, TextRedaction as ct, CreateWebhook as d, Token as da, ImageManual as di, ListFiles as dn, ChatSession as dr, CreatePipeline as dt, TextLocation as ea, EntityCoRef as ei, SortOrder as en, Account as eo, StorageConfig as er, PolicySummary as et, TestWebhook as f, Tokens as fa, ImageModel as fi, ModalityToken as fn, ChatSessionPage as fr, Pipeline as ft, WebhookEvent as g, ApiToken as ga, LeakProfile as gi, ExportQuery as gn, ConnectorCatalog as gr, PipelineSummary as gt, WebhookCreated as h, Transcription as ha, ImageRetag as hi, ExportFormat as hn, SendChatMessage as hr, PipelineStatus as ht, RetentionOverride as i, TextRefinement as ia, ImageAuditKind as ii, DeleteFiles as in, PublicAccount as io, SyncScheduleInput as ir, Sha2Algorithm as it, ConfidenceThreshold as j, StorageAnalytics as ja, Suppress as ji, WorkspaceDetectionsQuery as jn, AudioEntity as jr, NotificationPayload as jt, ClampBucket as k, ProviderType as ka, SourceRef as ki, RedactionResult as kn, AudioData as kr, NotificationEvent as kt, WorkspaceRole as l, LayoutBlock as la, ImageHint as li, FilePage as ln, ChatMessage as lr, UpdatePolicy as lt, Webhook as m, TranscriptWord as ma, ImageRefinement as mi, DateWindow as mn, CreateChatSession as mr, PipelineFilter as mt, RasterPolicy as n, TextModel as na, ImageAdd as ni, Health as nn, Handle as no, SyncMode as nr, PolicyTemplate as nt, UpdateWorkspace as o, TimeSpan as oa, ImageData as oi, File as on, paths as oo, SyncTriggerType as or, TemplateOrigin as ot, UpdateWebhook as p, TranscriptSegment as pa, ImagePattern as pi, UpdateFile as pn, ChatToken as pr, PipelineDefinition as pt, ModalityRedactions as q, InviteActivityParams as qa, TextAuditKind as qi, LlmConfig as qn, Contested as qr, InvitePage as qt, Retention as r, TextPattern as ra, ImageAuditEvent as ri, HealthStatus as rn, PasswordChange as ro, SyncSchedule as rr, Predicate as rt, Workspace as s, ArtifactSet as sa, ImageEdit as si, FileHash as sn, UnauthenticatedProvider as sr, TerminalFallback as st, CreateWorkspace as t, TextManual as ta, FreeformAttribution as ti, ComponentHealth as tn, AccountRef as to, SyncDeletionPolicy as tr, PolicySummaryPage as tt, WorkspaceSettings as u, LayoutWord as ua, ImageLocation as ui, FormatToken as un, ChatRole as ur, Waveform as ut, WebhookPage as v, ApiTokenType as va, ModelEvent as vi, ValidationErrorDetail as vn, LabelCatalog as vr, PipelineTriggerType as vt, LanguageProvenance as w, DetectionDayEntry as wa, RasterMode as wi, DetectionStatus as wn, Attribution as wr, DetectionFailedParams as wt, Confidence as x, TokenExpiration as xa, Point as xi, DetectionId as xn, AuthToken as xr, ConnectionSyncCompletedParams as xt, WebhookResult as y, ApiTokenWithJWT as ya, OperatorId as yi, CreateDetection as yn, RecognizerCatalog as yr, UpdatePipeline as yt, ImageRedaction as z, ActivityExportOptions as za, TabularLocation as zi, ConnectionSyncPage as zn, Audit as zr, MemberPage as zt };
+//# sourceMappingURL=index-kr36ZsdV.d.ts.map