@nvisy/sdk 0.45.0 → 0.46.0

package/dist/{index-kr36ZsdV.d.ts → index-uEHkixjD.d.ts}

@@ -117,7 +117,13 @@ interface paths {
         path?: never;
         cookie?: never;
       };
-      /** @description Request payload to update an account. */
+      /**
+       * @description Request payload to update an account's profile.
+       *
+       *     Credentials are not profile fields — a password and any linked providers are
+       *     managed through the account's identities (see the identity endpoints), never
+       *     here.
+       */
       requestBody: {
         content: {
           "application/json": components["schemas"]["UpdateAccount"];
@@ -468,6 +474,408 @@ interface paths {
     patch?: never;
     trace?: never;
   };
+  "/account/identities/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List sign-in methods
+     * @description Returns the authenticated account's identities: its password and any linked providers.
+     */
+    get: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path?: never;
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description The account's sign-in methods. */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["AccountIdentities"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/account/identities/password/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    /**
+     * Set or change password
+     * @description Sets or changes the account's password. Changing an existing password requires the current password; setting a first password on an account that has none requires a step-up re-authentication proof.
+     */
+    put: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path?: never;
+        cookie?: never;
+      };
+      /**
+       * @description A password set or change.
+       *
+       *     When the account already has a password, `current_password` is required and
+       *     verified before the change is applied, so a hijacked session or CSRF cannot
+       *     silently reset it (and lock out the real owner). When the account has no
+       *     password yet (an SSO-only account setting its first one), there is nothing to
+       *     re-authenticate against, so a fresh step-up `reauth_proof` is required instead
+       *     — a live session alone must not mint a durable new credential.
+       */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["SetPassword"];
+        };
+      };
+      responses: {
+        /** @description Password set. */
+        204: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content?: never;
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+      };
+    };
+    post?: never;
+    /**
+     * Remove password
+     * @description Removes the account's password, leaving it able to sign in only through its linked providers. Refused if the password is the account's only sign-in method.
+     */
+    delete: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path?: never;
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description Password removed. */
+        204: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content?: never;
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        409: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/account/identities/{provider}/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    /**
+     * Link a provider
+     * @description Begins linking the given OpenID Connect provider to the authenticated account and returns the provider authorize URL. Requires a step-up re-authentication proof (`reauthProof`, from the reauth endpoint). On consent, the callback attaches the verified provider identity to the caller's account.
+     */
+    post: {
+      parameters: {
+        query?: {
+          /**
+           * @description A step-up re-authentication proof. Required to start a *link* (adding a
+           *     provider is a credential-adding action, so a live session alone is not
+           *     enough); ignored for sign-in and reauth.
+           */
+          reauthProof?: string;
+          /**
+           * @description Frontend URL to return to once done. Carried through the flow and used to
+           *     build the callback's redirect.
+           */
+          redirectUri?: string;
+        };
+        header?: never;
+        path: {
+          /** @description The identity provider to act on. */
+          provider: components["schemas"]["IdentityProvider"];
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description The response to a successful sign-in start: where to send the user. */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["OidcStartResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        503: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    /**
+     * Unlink a provider
+     * @description Removes a linked OIDC provider from the account. Refused if the provider is the account's only sign-in method.
+     */
+    delete: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          /** @description The identity provider to act on. */
+          provider: components["schemas"]["IdentityProvider"];
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description Provider unlinked. */
+        204: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content?: never;
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        409: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   "/workspaces/": {
     parameters: {
       query?: never;
@@ -2644,7 +3052,118 @@ interface paths {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ConnectionVerification"];
+            "application/json": components["schemas"]["ConnectionVerification"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/connections/{connectionId}/picker-token/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    /**
+     * Mint picker token
+     * @description Returns a short-lived provider access token for a browser file picker (file services with a token-based picker only). The refresh token is never returned.
+     */
+    post: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /**
+         * @description A short-lived provider OAuth access token for a browser file picker.
+         *
+         *     Carries only the access token and its expiry — never the refresh token, which
+         *     stays server-side. The token is minted from the connection's stored
+         *     credentials and is short-lived (the provider's access-token lifetime), so the
+         *     browser holds a narrow, expiring credential rather than a durable one.
+         */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["PickerToken"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
           };
         };
         /**
@@ -9217,6 +9736,105 @@ interface paths {
     patch?: never;
     trace?: never;
   };
+  "/auth/{provider}/reauth/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * Start OIDC step-up re-authentication
+     * @description Begins a step-up re-authentication with a provider already linked to the authenticated account, and returns the provider authorize URL. On consent, the callback mints a short-lived, single-use proof required to add a credential (set a first password, or link a new provider).
+     */
+    get: {
+      parameters: {
+        query?: {
+          /**
+           * @description A step-up re-authentication proof. Required to start a *link* (adding a
+           *     provider is a credential-adding action, so a live session alone is not
+           *     enough); ignored for sign-in and reauth.
+           */
+          reauthProof?: string;
+          /**
+           * @description Frontend URL to return to once done. Carried through the flow and used to
+           *     build the callback's redirect.
+           */
+          redirectUri?: string;
+        };
+        header?: never;
+        path: {
+          /** @description The identity provider to act on. */
+          provider: components["schemas"]["IdentityProvider"];
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description The response to a successful sign-in start: where to send the user. */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["OidcStartResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        503: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   "/auth/login/": {
     parameters: {
       query?: never;
@@ -9453,6 +10071,90 @@ interface paths {
     patch?: never;
     trace?: never;
   };
+  "/auth/{provider}/start/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * Start OIDC sign-in
+     * @description Begins an OpenID Connect sign-in with the given provider and returns the provider authorize URL to redirect the user to. On consent, the provider redirects to the callback, which signs the user in.
+     */
+    get: {
+      parameters: {
+        query?: {
+          /**
+           * @description A step-up re-authentication proof. Required to start a *link* (adding a
+           *     provider is a credential-adding action, so a live session alone is not
+           *     enough); ignored for sign-in and reauth.
+           */
+          reauthProof?: string;
+          /**
+           * @description Frontend URL to return to once done. Carried through the flow and used to
+           *     build the callback's redirect.
+           */
+          redirectUri?: string;
+        };
+        header?: never;
+        path: {
+          /** @description The identity provider to act on. */
+          provider: components["schemas"]["IdentityProvider"];
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description The response to a successful sign-in start: where to send the user. */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["OidcStartResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        503: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   "/health/": {
     parameters: {
       query?: never;
@@ -9634,6 +10336,33 @@ interface components {
       /** @description Public handle of the account. */
       username: components["schemas"]["Handle"];
     };
+    /** @description The account's sign-in methods. */
+    AccountIdentities: {
+      /** @description Every identity the account can sign in with. */
+      identities: components["schemas"]["AccountIdentity"][];
+    };
+    /**
+     * @description One of an account's sign-in methods, for the identities listing.
+     *
+     *     Never exposes the credential itself (a password hash or a provider subject),
+     *     only which methods exist and metadata about them.
+     */
+    AccountIdentity: {
+      /**
+       * Format: date-time
+       * @description When the identity was created (the password set, or the provider linked).
+       */
+      createdAt: string;
+      /** @description The authentication method: `password` or an OIDC provider. */
+      provider: components["schemas"]["IdentityProvider"];
+      /** @description The email the provider asserted at link time, for a linked provider. */
+      providerEmail?: string;
+      /**
+       * Format: date-time
+       * @description When the identity was last updated.
+       */
+      updatedAt: string;
+    };
     /**
      * @description Path parameters for account operations.
      *
@@ -10044,15 +10773,20 @@ interface components {
        *     `word/document.xml` text belongs to the document part
        *     itself, not to a nested one.
        *
-       *     For text specifically, a caller holding raw file bytes
-       *     rather than a decoded offset — a reviewer selecting rendered
-       *     text, say — leaves [`TextLocation::range`] empty and fills
-       *     [`TextLocation::source`] instead, which the engine
-       *     reverse-resolves. The other three have no such alternative:
-       *     their coordinates are the only way in.
+       *     Text carries either coordinate kind of [`TextCoord`]: a
+       *     [`Decoded`] span for a caller with an offset into the
+       *     decoded stream, or a [`Source`] one for a caller holding
+       *     only raw file bytes — a reviewer selecting rendered text,
+       *     say — which the engine reverse-resolves. Source-only is its
+       *     own kind rather than a decoded span left empty, so such a
+       *     selection is representable as itself.
+       *
+       *     The other three media have no such alternative: their
+       *     coordinates are the only way in.
        *
-       *     [`TextLocation::range`]: elide::modality::text::TextLocation::range
-       *     [`TextLocation::source`]: elide::modality::text::TextLocation::source
+       *     [`TextCoord`]: elide::modality::text::TextCoord
+       *     [`Decoded`]: elide::modality::text::TextCoord::Decoded
+       *     [`Source`]: elide::modality::text::TextCoord::Source
        */
       location: components["schemas"]["AudioLocation"];
       /**
@@ -10064,9 +10798,9 @@ interface components {
        *
        *     Nested media needs this: the report holds an embedded image
        *     as its own part, and an addition to one has nowhere to go
-       *     without naming it. Text usually does not — where a span came
-       *     from is already in `TextLocation::source`, which carries the
-       *     part alongside the raw range.
+       *     without naming it. Text usually does not — a source
+       *     reference already names the part it came from, alongside the
+       *     raw range.
        *
        *     `None` is an error when the request carried several
        *     documents, since there is then no sole document to mean.
@@ -11380,6 +12114,48 @@ interface components {
        */
       limit?: number;
     };
+    /**
+     * @description How to detect one caller-authored label.
+     *
+     *     Names a label the same policy declares in [`custom`]. A matcher
+     *     for a shipped built-in is rejected: elide already detects those,
+     *     and two definitions for one label would race in reconciliation.
+     *
+     *     [`custom`]: super::PolicyDefinition::custom
+     */
+    CustomMatcher: {
+      /**
+       * Format: float
+       * @description Score stamped on every match. Defaults to `0.6`.
+       *
+       *     Reconciliation keeps the higher-confidence entity when two
+       *     detections overlap, so this is what decides whether a
+       *     custom match beats a built-in one covering the same span.
+       * @default 0.6000000238418579
+       */
+      confidence?: number;
+      /**
+       * @description The label this detects, which the policy must declare in
+       *     [`custom`](super::PolicyDefinition::custom).
+       */
+      label: components["schemas"]["LabelRef"];
+      /**
+       * @description Human-readable name, recorded in the audit as the
+       *     recognizer that found the entity, so a trail distinguishes
+       *     a caller's matcher from a shipped pattern.
+       */
+      name: string;
+    } & ({
+      /** @constant */
+      kind: "pattern";
+      /** @description The expression, in `regex` crate syntax. */
+      pattern: string;
+    } | {
+      /** @constant */
+      kind: "terms";
+      /** @description The literals to scan for. */
+      terms: string[];
+    });
     /**
      * @description The coarseness a [`GeneralizeDate`] reduces a date/timestamp to.
      *
@@ -12111,6 +12887,26 @@ interface components {
      *       as de-identified.
      */
     HipaaDeidMethod: "safe_harbor" | "limited_data_set" | "expert_determination";
+    /**
+     * @description Path parameters for a provider-scoped identity operation: signing in with,
+     *     re-authenticating with, linking, or unlinking a provider. Named identically to
+     *     the stored [`IdentityProvider`], so the API and the account's identities name
+     *     each provider the same way.
+     */
+    IdentityPathParams: {
+      /** @description The identity provider to act on. */
+      provider: components["schemas"]["IdentityProvider"];
+    };
+    /**
+     * @description How an account authenticates.
+     *
+     *     Corresponds to the `IDENTITY_PROVIDER` PostgreSQL enum. [`Password`] is a
+     *     locally-held Argon2 secret; the rest are external OIDC providers keyed by the
+     *     provider's subject claim.
+     *
+     *     [`Password`]: Self::Password
+     */
+    IdentityProvider: "password" | "google" | "microsoft";
     /**
      * @description A detection recognition missed.
      *
@@ -12137,15 +12933,20 @@ interface components {
        *     `word/document.xml` text belongs to the document part
        *     itself, not to a nested one.
        *
-       *     For text specifically, a caller holding raw file bytes
-       *     rather than a decoded offset — a reviewer selecting rendered
-       *     text, say — leaves [`TextLocation::range`] empty and fills
-       *     [`TextLocation::source`] instead, which the engine
-       *     reverse-resolves. The other three have no such alternative:
-       *     their coordinates are the only way in.
+       *     Text carries either coordinate kind of [`TextCoord`]: a
+       *     [`Decoded`] span for a caller with an offset into the
+       *     decoded stream, or a [`Source`] one for a caller holding
+       *     only raw file bytes — a reviewer selecting rendered text,
+       *     say — which the engine reverse-resolves. Source-only is its
+       *     own kind rather than a decoded span left empty, so such a
+       *     selection is representable as itself.
+       *
+       *     The other three media have no such alternative: their
+       *     coordinates are the only way in.
        *
-       *     [`TextLocation::range`]: elide::modality::text::TextLocation::range
-       *     [`TextLocation::source`]: elide::modality::text::TextLocation::source
+       *     [`TextCoord`]: elide::modality::text::TextCoord
+       *     [`Decoded`]: elide::modality::text::TextCoord::Decoded
+       *     [`Source`]: elide::modality::text::TextCoord::Source
        */
       location: components["schemas"]["ImageLocation"];
       /**
@@ -12157,9 +12958,9 @@ interface components {
        *
        *     Nested media needs this: the report holds an embedded image
        *     as its own part, and an addition to one has nowhere to go
-       *     without naming it. Text usually does not — where a span came
-       *     from is already in `TextLocation::source`, which carries the
-       *     part alongside the raw range.
+       *     without naming it. Text usually does not — a source
+       *     reference already names the part it came from, alongside the
+       *     raw range.
        *
        *     `None` is an error when the request carried several
        *     documents, since there is then no sole document to mean.
@@ -13468,6 +14269,25 @@ interface components {
        */
       refresh_token?: string;
     };
+    /** @description Optional query parameters for starting a sign-in, link, or reauth. */
+    OidcStartQuery: {
+      /**
+       * @description A step-up re-authentication proof. Required to start a *link* (adding a
+       *     provider is a credential-adding action, so a live session alone is not
+       *     enough); ignored for sign-in and reauth.
+       */
+      reauthProof?: string;
+      /**
+       * @description Frontend URL to return to once done. Carried through the flow and used to
+       *     build the callback's redirect.
+       */
+      redirectUri?: string;
+    };
+    /** @description The response to a successful sign-in start: where to send the user. */
+    OidcStartResponse: {
+      /** @description The provider authorize URL the client should redirect the user to. */
+      authorizeUrl: string;
+    };
     /**
      * @description Identifies a redaction operator, for the redaction audit a higher
      *     layer assembles.
@@ -13484,20 +14304,6 @@ interface components {
       /** @description Operator's version at the time it was applied. */
       version: string;
     };
-    /**
-     * @description A re-authenticated password change: the new password plus the current one
-     *     that authorizes it.
-     *
-     *     Coupling the two in one struct makes the invariant explicit — a password
-     *     change always carries the current password, so a hijacked session or CSRF
-     *     cannot silently reset it (and lock out the real owner).
-     */
-    PasswordChange: {
-      /** @description The account's current password, verified before the change is applied. */
-      currentPassword: string;
-      /** @description The new password (will be hashed before storage). */
-      newPassword: string;
-    };
     /** @description Metadata of a pattern/dictionary recognition, carried by [`Pattern`]. */
     PatternEvent: {
       /**
@@ -13567,6 +14373,24 @@ interface components {
       /** @description The file's display name, as the picker reported it. */
       name: string;
     };
+    /**
+     * @description A short-lived provider OAuth access token for a browser file picker.
+     *
+     *     Carries only the access token and its expiry — never the refresh token, which
+     *     stays server-side. The token is minted from the connection's stored
+     *     credentials and is short-lived (the provider's access-token lifetime), so the
+     *     browser holds a narrow, expiring credential rather than a durable one.
+     */
+    PickerToken: {
+      /** @description The provider OAuth access token to hand to the browser picker. */
+      accessToken: string;
+      /**
+       * Format: int64
+       * @description Unix seconds at which the access token expires, if the provider reports
+       *     it. `None` means the provider did not return an expiry.
+       */
+      expiresAt?: number;
+    };
     /** @description Pipeline response. */
     Pipeline: {
       /**
@@ -13814,6 +14638,21 @@ interface components {
        *     customer-supplied so re-submissions carry the same id.
        */
       id: string;
+      /**
+       * @description How to detect the labels [`custom`] introduces.
+       *
+       *     A custom label declares vocabulary and nothing more, so
+       *     without a matcher it is scoped, targeted by rules, and never
+       *     found. Each matcher names a label this policy declares;
+       *     naming a shipped built-in is rejected, since elide already
+       *     detects those.
+       *
+       *     Compiled per request, so a policy declaring none costs
+       *     nothing.
+       *
+       *     [`custom`]: Self::custom
+       */
+      matchers?: components["schemas"]["CustomMatcher"][];
       /**
        * @description Human-readable name. Display-only. Does not key anything.
        *
@@ -13873,6 +14712,11 @@ interface components {
       description?: string;
       /** @description Per-policy catch-all, fired when no rule matched. */
       fallback?: components["schemas"]["ModalityRedactions"];
+      /**
+       * @description How to detect the custom labels this policy introduces. A custom label
+       *     without a matcher is declared but never found.
+       */
+      matchers?: components["schemas"]["CustomMatcher"][];
       /** @description Human-readable name. Display-only. */
       name: string;
       /** @description Ordered rules. First match wins within this policy. */
@@ -14647,6 +15491,32 @@ interface components {
        */
       parentId?: string;
     };
+    /**
+     * @description A password set or change.
+     *
+     *     When the account already has a password, `current_password` is required and
+     *     verified before the change is applied, so a hijacked session or CSRF cannot
+     *     silently reset it (and lock out the real owner). When the account has no
+     *     password yet (an SSO-only account setting its first one), there is nothing to
+     *     re-authenticate against, so a fresh step-up `reauth_proof` is required instead
+     *     — a live session alone must not mint a durable new credential.
+     */
+    SetPassword: {
+      /**
+       * @description The account's current password. Required when the account already has a
+       *     password; omitted when setting a first password on an account that has
+       *     none (supply `reauth_proof` instead).
+       */
+      currentPassword?: string;
+      /** @description The new password (will be hashed before storage). */
+      newPassword: string;
+      /**
+       * @description A step-up re-authentication proof (from the OIDC reauth endpoint).
+       *     Required when *setting a first password* on an account that has none;
+       *     ignored when changing an existing password.
+       */
+      reauthProof?: string;
+    };
     /**
      * @description Which SHA-2 variant a hashing operator uses.
      *
@@ -14909,15 +15779,20 @@ interface components {
        *     `word/document.xml` text belongs to the document part
        *     itself, not to a nested one.
        *
-       *     For text specifically, a caller holding raw file bytes
-       *     rather than a decoded offset — a reviewer selecting rendered
-       *     text, say — leaves [`TextLocation::range`] empty and fills
-       *     [`TextLocation::source`] instead, which the engine
-       *     reverse-resolves. The other three have no such alternative:
-       *     their coordinates are the only way in.
+       *     Text carries either coordinate kind of [`TextCoord`]: a
+       *     [`Decoded`] span for a caller with an offset into the
+       *     decoded stream, or a [`Source`] one for a caller holding
+       *     only raw file bytes — a reviewer selecting rendered text,
+       *     say — which the engine reverse-resolves. Source-only is its
+       *     own kind rather than a decoded span left empty, so such a
+       *     selection is representable as itself.
+       *
+       *     The other three media have no such alternative: their
+       *     coordinates are the only way in.
        *
-       *     [`TextLocation::range`]: elide::modality::text::TextLocation::range
-       *     [`TextLocation::source`]: elide::modality::text::TextLocation::source
+       *     [`TextCoord`]: elide::modality::text::TextCoord
+       *     [`Decoded`]: elide::modality::text::TextCoord::Decoded
+       *     [`Source`]: elide::modality::text::TextCoord::Source
        */
       location: components["schemas"]["TabularLocation"];
       /**
@@ -14929,9 +15804,9 @@ interface components {
        *
        *     Nested media needs this: the report holds an embedded image
        *     as its own part, and an addition to one has nowhere to go
-       *     without naming it. Text usually does not — where a span came
-       *     from is already in `TextLocation::source`, which carries the
-       *     part alongside the raw range.
+       *     without naming it. Text usually does not — a source
+       *     reference already names the part it came from, alongside the
+       *     raw range.
        *
        *     `None` is an error when the request carried several
        *     documents, since there is then no sole document to mean.
@@ -15514,15 +16389,20 @@ interface components {
        *     `word/document.xml` text belongs to the document part
        *     itself, not to a nested one.
        *
-       *     For text specifically, a caller holding raw file bytes
-       *     rather than a decoded offset — a reviewer selecting rendered
-       *     text, say — leaves [`TextLocation::range`] empty and fills
-       *     [`TextLocation::source`] instead, which the engine
-       *     reverse-resolves. The other three have no such alternative:
-       *     their coordinates are the only way in.
+       *     Text carries either coordinate kind of [`TextCoord`]: a
+       *     [`Decoded`] span for a caller with an offset into the
+       *     decoded stream, or a [`Source`] one for a caller holding
+       *     only raw file bytes — a reviewer selecting rendered text,
+       *     say — which the engine reverse-resolves. Source-only is its
+       *     own kind rather than a decoded span left empty, so such a
+       *     selection is representable as itself.
        *
-       *     [`TextLocation::range`]: elide::modality::text::TextLocation::range
-       *     [`TextLocation::source`]: elide::modality::text::TextLocation::source
+       *     The other three media have no such alternative: their
+       *     coordinates are the only way in.
+       *
+       *     [`TextCoord`]: elide::modality::text::TextCoord
+       *     [`Decoded`]: elide::modality::text::TextCoord::Decoded
+       *     [`Source`]: elide::modality::text::TextCoord::Source
        */
       location: components["schemas"]["TextLocation"];
       /**
@@ -15534,9 +16414,9 @@ interface components {
        *
        *     Nested media needs this: the report holds an embedded image
        *     as its own part, and an addition to one has nowhere to go
-       *     without naming it. Text usually does not — where a span came
-       *     from is already in `TextLocation::source`, which carries the
-       *     part alongside the raw range.
+       *     without naming it. Text usually does not — a source
+       *     reference already names the part it came from, alongside the
+       *     raw range.
        *
        *     `None` is an error when the request carried several
        *     documents, since there is then no sole document to mean.
@@ -16335,7 +17215,13 @@ interface components {
        */
       unreadCount: number;
     };
-    /** @description Request payload to update an account. */
+    /**
+     * @description Request payload to update an account's profile.
+     *
+     *     Credentials are not profile fields — a password and any linked providers are
+     *     managed through the account's identities (see the identity endpoints), never
+     *     here.
+     */
     UpdateAccount: {
       /** @description New display name (2-32 characters). */
       displayName?: string;
@@ -16344,8 +17230,6 @@ interface components {
        * @description New email address (must be valid email format).
        */
       emailAddress?: string;
-      /** @description A re-authenticated password change, when changing the password. */
-      password?: components["schemas"]["PasswordChange"];
       /** @description New account handle. */
       username?: components["schemas"]["Handle"];
     };
@@ -16883,8 +17767,12 @@ type Handle = Schemas$23["Handle"];
 type Account = Schemas$23["Account"];
 type PublicAccount = Schemas$23["PublicAccount"];
 type UpdateAccount = Schemas$23["UpdateAccount"];
-type PasswordChange = Schemas$23["PasswordChange"];
 type AccountRef = Schemas$23["AccountRef"];
+type AccountIdentities = Schemas$23["AccountIdentities"];
+type AccountIdentity = Schemas$23["AccountIdentity"];
+type IdentityProvider = Schemas$23["IdentityProvider"];
+type SetPassword = Schemas$23["SetPassword"];
+type OidcStartResponse = Schemas$23["OidcStartResponse"];
 //#endregion
 //#region src/datatypes/activity.d.ts
 type Schemas$22 = components["schemas"];
@@ -17081,6 +17969,7 @@ type ConnectionVerification = Schemas$14["ConnectionVerification"];
 type ImportFiles = Schemas$14["ImportFiles"];
 type PickedFile = Schemas$14["PickedFile"];
 type ExportFiles = Schemas$14["ExportFiles"];
+type PickerToken = Schemas$14["PickerToken"];
 type SyncMode = Schemas$14["SyncMode"];
 type SyncStatus = Schemas$14["SyncStatus"];
 type SyncTriggerType = Schemas$14["SyncTriggerType"];
@@ -17216,6 +18105,7 @@ type PolicyDraft = Schemas$3["PolicyDraft"];
 type CreatePolicy = Schemas$3["CreatePolicy"];
 type UpdatePolicy = Schemas$3["UpdatePolicy"];
 type PolicyRule = Schemas$3["PolicyRule"];
+type CustomMatcher = Schemas$3["CustomMatcher"];
 type PolicyTemplate = Schemas$3["PolicyTemplate"];
 type TemplateOrigin = Schemas$3["TemplateOrigin"];
 type HipaaDeidMethod = Schemas$3["HipaaDeidMethod"];
@@ -17282,5 +18172,5 @@ type Retention = Schemas["Retention"];
 type RetentionSettings = Schemas["RetentionSettings"];
 type RetentionOverride = Schemas["RetentionOverride"];
 //#endregion
-export { PolicyRule as $, WorkspaceActivityParams as $a, TextHint as $i, StartFileServiceOAuth as $n, EditSet as $r, ReplyInvite as $t, Color as A, RecognizerId as Aa, SourceSpan as Ai, RedactionResultPage as An, AudioEdit as Ar, NotificationPage as At, Label as B, ActivityFilterQuery as Ba, TabularManual as Bi, ConnectionVerification as Bn, AuditHash as Br, MemberSortField as Bt, Language as C, DetectionAnalytics as Ca, RangeOfUint as Ci, DetectionPage as Cn, Signup as Cr, DetectionCompletedParams as Ct, ScopeMetadata as D, ModelUsage as Da, RuleMatch as Di, RedactDetection as Dn, AudioAuditKind as Dr, MemberJoinedParams as Dt, Languages as E, DetectionTimeSeries as Ea, Report as Ei, PipelineDetectionsQuery as En, AudioAuditEvent as Er, MemberInvitedParams as Et, GdprArticle9Treatment as F, UsageAnalytics as Fa, TabularAuditLog as Fi, ConnectionConfig as Fn, AudioModel as Fr, UnreadStatus as Ft, LanguageTag as G, DetectionActivityParams as Ga, TextAdd as Gi, GcsCredentials as Gn, CodecParams as Gr, InviteCode as Gt, LabelLocale as H, ActivityPayload as Ha, TabularPattern as Hi, CreateConnection as Hn, Calibration as Hr, CreateInvite as Ht, GdprSensitiveScope as I, UsageReport as Ia, TabularEdit as Ii, ConnectionId as In, AudioPattern as Ir, UpdateNotificationSettings as It, PciDssPart as J, MemberActivityParams as Ja, TextAuditLog as Ji, OAuthStartResponse as Jn, DecodedSpan as Jr, InvitePreview as Jt, LocalizedText as K, FileActivityParams as Ka, TextAuditEvent as Ki, ImportFiles as Kn, Conflict as Kr, InviteExpiration as Kt, HipaaAccountNumbers as L, WorkspaceAnalytics as La, TabularEntity as Li, ConnectionPage as Ln, AudioRefinement as Lr, ListMembers as Lt, CreatePolicy as M, StorageKindEntry as Ma, TabularAdd as Mi, AuthenticatedProvider as Mn, AudioHint as Mr, NotificationSettings as Mt, DateGranularity as N, TokenCounts as Na, TabularAuditEvent as Ni, AzureCredentials as Nn, AudioLocation as Nr, RedactionCreatedParams as Nt, AudioRedaction as O, ModelUsageEntry as Oa, Selection as Oi, RedactionId as On, AudioAuditLog as Or, Notification as Ot, DateStyle as P, Usage as Pa, TabularAuditKind as Pi, Connection as Pn, AudioManual as Pr, UnreadCountEvent as Pt, PolicyDraft as Q, WebhookActivityParams as Qa, TextEntity as Qi, S3Credentials as Qn, Dpi as Qr, ListInvites as Qt, HipaaDeidMethod as R, Activity as Ra, TabularHint as Ri, ConnectionSync as Rn, AudioRetag as Rr, Member as Rt, CountryCode as S, UpdateApiToken as Sa, Polygon as Si, DetectionMetadata as Sn, Login as Sr, ConnectionSyncFailedParams as St, LanguageSpan as T, DetectionStatusEntry as Ta, Redaction as Ti, DetectionStatusEvent as Tn, AudioAdd as Tr, MarkedReadStatus as Tt, LabelRef as U, ActivityType as Ua, TabularRefinement as Ui, ExportFiles as Un, Category as Ur, GenerateInviteCode as Ut, LabelEntry as V, ActivityPage as Va, TabularModel as Vi, ConnectionsQuery as Vn, BoundingBox as Vr, UpdateMember as Vt, LabelScope as W, ConnectionActivityParams as Wa, TabularRetag as Wi, FileServiceConfig as Wn, CitedAttribution as Wr, Invite as Wt, Policy as X, PolicyActivityParams as Xa, TextData as Xi, PickedFile as Xn, Dimensions as Xr, InviteSortField as Xt, PciPanRender as Y, PipelineActivityParams as Ya, TextCoord as Yi, OAuthTokens as Yn, Deduplication as Yr, InviteSent as Yt, PolicyDefinition as Z, RedactionActivityParams as Za, TextEdit as Zi, Provider as Zn, DocumentContext as Zr, InviteStatus as Zt, WebhookId as _, ApiTokenPage as _a, ManualIntent as _i, ErrorResponse as _n, FileProviders as _r, PipelineSummaryPage as _t, RetentionSettings as a, TextRetag as aa, ImageAuditLog as ai, DeletedFiles as an, UpdateAccount as ao, SyncStatus as ar, TabularRedaction as at, WebhookStatus as b, CreateApiToken as ba, PatternEvent as bi, Detection as bn, RegisteredRecognizer as br, CursorPagination as bt, WorkspacePage as c, Layout as ca, ImageEntity as ci, FileKind as cn, UpdateConnection as cr, TextRedaction as ct, CreateWebhook as d, Token as da, ImageManual as di, ListFiles as dn, ChatSession as dr, CreatePipeline as dt, TextLocation as ea, EntityCoRef as ei, SortOrder as en, Account as eo, StorageConfig as er, PolicySummary as et, TestWebhook as f, Tokens as fa, ImageModel as fi, ModalityToken as fn, ChatSessionPage as fr, Pipeline as ft, WebhookEvent as g, ApiToken as ga, LeakProfile as gi, ExportQuery as gn, ConnectorCatalog as gr, PipelineSummary as gt, WebhookCreated as h, Transcription as ha, ImageRetag as hi, ExportFormat as hn, SendChatMessage as hr, PipelineStatus as ht, RetentionOverride as i, TextRefinement as ia, ImageAuditKind as ii, DeleteFiles as in, PublicAccount as io, SyncScheduleInput as ir, Sha2Algorithm as it, ConfidenceThreshold as j, StorageAnalytics as ja, Suppress as ji, WorkspaceDetectionsQuery as jn, AudioEntity as jr, NotificationPayload as jt, ClampBucket as k, ProviderType as ka, SourceRef as ki, RedactionResult as kn, AudioData as kr, NotificationEvent as kt, WorkspaceRole as l, LayoutBlock as la, ImageHint as li, FilePage as ln, ChatMessage as lr, UpdatePolicy as lt, Webhook as m, TranscriptWord as ma, ImageRefinement as mi, DateWindow as mn, CreateChatSession as mr, PipelineFilter as mt, RasterPolicy as n, TextModel as na, ImageAdd as ni, Health as nn, Handle as no, SyncMode as nr, PolicyTemplate as nt, UpdateWorkspace as o, TimeSpan as oa, ImageData as oi, File as on, paths as oo, SyncTriggerType as or, TemplateOrigin as ot, UpdateWebhook as p, TranscriptSegment as pa, ImagePattern as pi, UpdateFile as pn, ChatToken as pr, PipelineDefinition as pt, ModalityRedactions as q, InviteActivityParams as qa, TextAuditKind as qi, LlmConfig as qn, Contested as qr, InvitePage as qt, Retention as r, TextPattern as ra, ImageAuditEvent as ri, HealthStatus as rn, PasswordChange as ro, SyncSchedule as rr, Predicate as rt, Workspace as s, ArtifactSet as sa, ImageEdit as si, FileHash as sn, UnauthenticatedProvider as sr, TerminalFallback as st, CreateWorkspace as t, TextManual as ta, FreeformAttribution as ti, ComponentHealth as tn, AccountRef as to, SyncDeletionPolicy as tr, PolicySummaryPage as tt, WorkspaceSettings as u, LayoutWord as ua, ImageLocation as ui, FormatToken as un, ChatRole as ur, Waveform as ut, WebhookPage as v, ApiTokenType as va, ModelEvent as vi, ValidationErrorDetail as vn, LabelCatalog as vr, PipelineTriggerType as vt, LanguageProvenance as w, DetectionDayEntry as wa, RasterMode as wi, DetectionStatus as wn, Attribution as wr, DetectionFailedParams as wt, Confidence as x, TokenExpiration as xa, Point as xi, DetectionId as xn, AuthToken as xr, ConnectionSyncCompletedParams as xt, WebhookResult as y, ApiTokenWithJWT as ya, OperatorId as yi, CreateDetection as yn, RecognizerCatalog as yr, UpdatePipeline as yt, ImageRedaction as z, ActivityExportOptions as za, TabularLocation as zi, ConnectionSyncPage as zn, Audit as zr, MemberPage as zt };
-//# sourceMappingURL=index-kr36ZsdV.d.ts.map
+export { PolicyDraft as $, RedactionActivityParams as $a, TextEdit as $i, Provider as $n, DocumentContext as $r, ListInvites as $t, Color as A, ModelUsageEntry as Aa, Selection as Ai, RedactionResult as An, AudioAuditLog as Ar, NotificationEvent as At, ImageRedaction as B, Activity as Ba, TabularHint as Bi, ConnectionSyncPage as Bn, AudioRetag as Br, MemberPage as Bt, Language as C, TokenExpiration as Ca, Point as Ci, DetectionMetadata as Cn, AuthToken as Cr, ConnectionSyncFailedParams as Ct, ScopeMetadata as D, DetectionStatusEntry as Da, Redaction as Di, PipelineDetectionsQuery as Dn, AudioAdd as Dr, MemberInvitedParams as Dt, Languages as E, DetectionDayEntry as Ea, RasterMode as Ei, DetectionStatusEvent as En, Attribution as Er, MarkedReadStatus as Et, DateStyle as F, TokenCounts as Fa, TabularAuditEvent as Fi, Connection as Fn, AudioLocation as Fr, UnreadCountEvent as Ft, LabelScope as G, ActivityType as Ga, TabularRefinement as Gi, FileServiceConfig as Gn, Category as Gr, Invite as Gt, LabelEntry as H, ActivityFilterQuery as Ha, TabularManual as Hi, ConnectionsQuery as Hn, AuditHash as Hr, UpdateMember as Ht, GdprArticle9Treatment as I, Usage as Ia, TabularAuditKind as Ii, ConnectionConfig as In, AudioManual as Ir, UnreadStatus as It, ModalityRedactions as J, FileActivityParams as Ja, TextAuditEvent as Ji, LlmConfig as Jn, Conflict as Jr, InvitePage as Jt, LanguageTag as K, ConnectionActivityParams as Ka, TabularRetag as Ki, GcsCredentials as Kn, CitedAttribution as Kr, InviteCode as Kt, GdprSensitiveScope as L, UsageAnalytics as La, TabularAuditLog as Li, ConnectionId as Ln, AudioModel as Lr, UpdateNotificationSettings as Lt, CreatePolicy as M, RecognizerId as Ma, SourceSpan as Mi, WorkspaceDetectionsQuery as Mn, AudioEdit as Mr, NotificationPayload as Mt, CustomMatcher as N, StorageAnalytics as Na, Suppress as Ni, AuthenticatedProvider as Nn, AudioEntity as Nr, NotificationSettings as Nt, AudioRedaction as O, DetectionTimeSeries as Oa, Report as Oi, RedactDetection as On, AudioAuditEvent as Or, MemberJoinedParams as Ot, DateGranularity as P, StorageKindEntry as Pa, TabularAdd as Pi, AzureCredentials as Pn, AudioHint as Pr, RedactionCreatedParams as Pt, PolicyDefinition as Q, PolicyActivityParams as Qa, TextData as Qi, PickerToken as Qn, Dimensions as Qr, InviteStatus as Qt, HipaaAccountNumbers as R, UsageReport as Ra, TabularEdit as Ri, ConnectionPage as Rn, AudioPattern as Rr, ListMembers as Rt, CountryCode as S, CreateApiToken as Sa, PatternEvent as Si, DetectionId as Sn, RegisteredRecognizer as Sr, ConnectionSyncCompletedParams as St, LanguageSpan as T, DetectionAnalytics as Ta, RangeOfUint as Ti, DetectionStatus as Tn, Signup as Tr, DetectionFailedParams as Tt, LabelLocale as U, ActivityPage as Ua, TabularModel as Ui, CreateConnection as Un, BoundingBox as Ur, CreateInvite as Ut, Label as V, ActivityExportOptions as Va, TabularLocation as Vi, ConnectionVerification as Vn, Audit as Vr, MemberSortField as Vt, LabelRef as W, ActivityPayload as Wa, TabularPattern as Wi, ExportFiles as Wn, Calibration as Wr, GenerateInviteCode as Wt, PciPanRender as X, MemberActivityParams as Xa, TextAuditLog as Xi, OAuthTokens as Xn, DecodedSpan as Xr, InviteSent as Xt, PciDssPart as Y, InviteActivityParams as Ya, TextAuditKind as Yi, OAuthStartResponse as Yn, Contested as Yr, InvitePreview as Yt, Policy as Z, PipelineActivityParams as Za, TextCoord as Zi, PickedFile as Zn, Deduplication as Zr, InviteSortField as Zt, WebhookId as _, Transcription as _a, ImageRetag as _i, ExportQuery as _n, SendChatMessage as _r, PipelineSummary as _t, RetentionSettings as a, TextPattern as aa, ImageAuditEvent as ai, DeleteFiles as an, AccountRef as ao, SyncSchedule as ar, Sha2Algorithm as at, WebhookStatus as b, ApiTokenType as ba, ModelEvent as bi, CreateDetection as bn, LabelCatalog as br, UpdatePipeline as bt, WorkspacePage as c, TimeSpan as ca, ImageData as ci, FileHash as cn, OidcStartResponse as co, SyncTriggerType as cr, TerminalFallback as ct, CreateWebhook as d, LayoutBlock as da, ImageHint as di, FormatToken as dn, UpdateAccount as do, ChatMessage as dr, Waveform as dt, TextEntity as ea, Dpi as ei, ReplyInvite as en, WebhookActivityParams as eo, S3Credentials as er, PolicyRule as et, TestWebhook as f, LayoutWord as fa, ImageLocation as fi, ListFiles as fn, paths as fo, ChatRole as fr, CreatePipeline as ft, WebhookEvent as g, TranscriptWord as ga, ImageRefinement as gi, ExportFormat as gn, CreateChatSession as gr, PipelineStatus as gt, WebhookCreated as h, TranscriptSegment as ha, ImagePattern as hi, DateWindow as hn, ChatToken as hr, PipelineFilter as ht, RetentionOverride as i, TextModel as ia, ImageAdd as ii, HealthStatus as in, AccountIdentity as io, SyncMode as ir, Predicate as it, ConfidenceThreshold as j, ProviderType as ja, SourceRef as ji, RedactionResultPage as jn, AudioData as jr, NotificationPage as jt, ClampBucket as k, ModelUsage as ka, RuleMatch as ki, RedactionId as kn, AudioAuditKind as kr, Notification as kt, WorkspaceRole as l, ArtifactSet as la, ImageEdit as li, FileKind as ln, PublicAccount as lo, UnauthenticatedProvider as lr, TextRedaction as lt, Webhook as m, Tokens as ma, ImageModel as mi, UpdateFile as mn, ChatSessionPage as mr, PipelineDefinition as mt, RasterPolicy as n, TextLocation as na, EntityCoRef as ni, ComponentHealth as nn, Account as no, StorageConfig as nr, PolicySummaryPage as nt, UpdateWorkspace as o, TextRefinement as oa, ImageAuditKind as oi, DeletedFiles as on, Handle as oo, SyncScheduleInput as or, TabularRedaction as ot, UpdateWebhook as p, Token as pa, ImageManual as pi, ModalityToken as pn, ChatSession as pr, Pipeline as pt, LocalizedText as q, DetectionActivityParams as qa, TextAdd as qi, ImportFiles as qn, CodecParams as qr, InviteExpiration as qt, Retention as r, TextManual as ra, FreeformAttribution as ri, Health as rn, AccountIdentities as ro, SyncDeletionPolicy as rr, PolicyTemplate as rt, Workspace as s, TextRetag as sa, ImageAuditLog as si, File as sn, IdentityProvider as so, SyncStatus as sr, TemplateOrigin as st, CreateWorkspace as t, TextHint as ta, EditSet as ti, SortOrder as tn, WorkspaceActivityParams as to, StartFileServiceOAuth as tr, PolicySummary as tt, WorkspaceSettings as u, Layout as ua, ImageEntity as ui, FilePage as un, SetPassword as uo, UpdateConnection as ur, UpdatePolicy as ut, WebhookPage as v, ApiToken as va, LeakProfile as vi, ErrorResponse as vn, ConnectorCatalog as vr, PipelineSummaryPage as vt, LanguageProvenance as w, UpdateApiToken as wa, Polygon as wi, DetectionPage as wn, Login as wr, DetectionCompletedParams as wt, Confidence as x, ApiTokenWithJWT as xa, OperatorId as xi, Detection as xn, RecognizerCatalog as xr, CursorPagination as xt, WebhookResult as y, ApiTokenPage as ya, ManualIntent as yi, ValidationErrorDetail as yn, FileProviders as yr, PipelineTriggerType as yt, HipaaDeidMethod as z, WorkspaceAnalytics as za, TabularEntity as zi, ConnectionSync as zn, AudioRefinement as zr, Member as zt };
+//# sourceMappingURL=index-uEHkixjD.d.ts.map