@nvisy/sdk 0.47.0 → 0.49.0

package/dist/{index-B-oR9rqQ.d.ts → index-CNUnM9QG.d.ts}

@@ -474,7 +474,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/account/identities/": {
+  "/workspaces/": {
     parameters: {
       query?: never;
       header?: never;
@@ -482,25 +482,45 @@ interface paths {
       cookie?: never;
     };
     /**
-     * List sign-in methods
-     * @description Returns the authenticated account's identities: its password and any linked providers.
+     * List workspaces
+     * @description Returns all workspaces the authenticated user is a member of.
      */
     get: {
       parameters: {
-        query?: never;
+        query?: {
+          /**
+           * @description Cursor pointing to the last item of the previous page.
+           *     Obtain this from the `nextCursor` field in the response.
+           */
+          after?: string;
+          /**
+           * @description Whether to include the total item count in the response's `total` field.
+           *     Defaults to `false`, since counting is an extra query; set it to `true`
+           *     only when the count is actually needed.
+           */
+          includeCount?: boolean;
+          /** @description The maximum number of records to return (1-100, default: 20). */
+          limit?: number;
+        };
         header?: never;
         path?: never;
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /** @description The account's sign-in methods. */
+        /**
+         * @description Generic paginated response wrapper.
+         *
+         *     Provides a consistent structure for all paginated API responses with
+         *     cursor-based pagination support. When `next_cursor` is present, there
+         *     are more items to fetch.
+         */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["AccountIdentities"];
+            "application/json": components["schemas"]["WorkspacePage"];
           };
         };
         /**
@@ -521,26 +541,11 @@ interface paths {
       };
     };
     put?: never;
-    post?: never;
-    delete?: never;
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/account/identities/password/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
-    get?: never;
     /**
-     * Set or change password
-     * @description Sets or changes the account's password. Changing an existing password requires the current password; setting a first password on an account that has none requires a step-up re-authentication proof.
+     * Create workspace
+     * @description Creates a new workspace. The creator is automatically added as an owner.
      */
-    put: {
+    post: {
       parameters: {
         query?: never;
         header?: never;
@@ -548,27 +553,25 @@ interface paths {
         cookie?: never;
       };
       /**
-       * @description A password set or change.
+       * @description Request payload for creating a new workspace.
        *
-       *     When the account already has a password, `current_password` is required and
-       *     verified before the change is applied, so a hijacked session or CSRF cannot
-       *     silently reset it (and lock out the real owner). When the account has no
-       *     password yet (an SSO-only account setting its first one), there is nothing to
-       *     re-authenticate against, so a fresh step-up `reauth_proof` is required instead
-       *     — a live session alone must not mint a durable new credential.
+       *     Creates a new workspace with the specified configuration. The creator is
+       *     automatically added as an owner of the workspace.
        */
       requestBody: {
         content: {
-          "application/json": components["schemas"]["SetPassword"];
+          "application/json": components["schemas"]["CreateWorkspace"];
         };
       };
       responses: {
-        /** @description Password set. */
-        204: {
+        /** @description Workspace response. */
+        201: {
           headers: {
             [name: string]: unknown;
           };
-          content?: never;
+          content: {
+            "application/json": components["schemas"]["Workspace"];
+          };
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -620,26 +623,43 @@ interface paths {
         };
       };
     };
-    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
     /**
-     * Remove password
-     * @description Removes the account's password, leaving it able to sign in only through its linked providers. Refused if the password is the account's only sign-in method.
+     * Get workspace
+     * @description Returns details for a specific workspace.
      */
-    delete: {
+    get: {
       parameters: {
         query?: never;
         header?: never;
-        path?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+        };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /** @description Password removed. */
-        204: {
+        /** @description Workspace response. */
+        200: {
           headers: {
             [name: string]: unknown;
           };
-          content?: never;
+          content: {
+            "application/json": components["schemas"]["Workspace"];
+          };
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -663,7 +683,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        403: {
           headers: {
             [name: string]: unknown;
           };
@@ -678,7 +698,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        409: {
+        404: {
           headers: {
             [name: string]: unknown;
           };
@@ -688,56 +708,30 @@ interface paths {
         };
       };
     };
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/account/identities/{provider}/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
-    get?: never;
     put?: never;
+    post?: never;
     /**
-     * Link a provider
-     * @description Begins linking the given OpenID Connect provider to the authenticated account and returns the provider authorize URL. Requires a step-up re-authentication proof (`reauthProof`, from the reauth endpoint). On consent, the callback attaches the verified provider identity to the caller's account.
+     * Delete workspace
+     * @description Soft-deletes a workspace. Data is retained for potential recovery.
      */
-    post: {
+    delete: {
       parameters: {
-        query?: {
-          /**
-           * @description A step-up re-authentication proof. Required to start a *link* (adding a
-           *     provider is a credential-adding action, so a live session alone is not
-           *     enough); ignored for sign-in and reauth.
-           */
-          reauthProof?: string;
-          /**
-           * @description Frontend URL to return to once done. Carried through the flow and used to
-           *     build the callback's redirect.
-           */
-          redirectUri?: string;
-        };
+        query?: never;
         header?: never;
         path: {
-          /** @description The identity provider to act on. */
-          provider: components["schemas"]["IdentityProvider"];
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /** @description The response to a successful sign-in start: where to send the user. */
+        /** @description no content */
         200: {
           headers: {
             [name: string]: unknown;
           };
-          content: {
-            "application/json": components["schemas"]["OidcStartResponse"];
-          };
+          content?: never;
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -761,7 +755,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        403: {
           headers: {
             [name: string]: unknown;
           };
@@ -776,7 +770,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        503: {
+        404: {
           headers: {
             [name: string]: unknown;
           };
@@ -786,28 +780,42 @@ interface paths {
         };
       };
     };
+    options?: never;
+    head?: never;
     /**
-     * Unlink a provider
-     * @description Removes a linked OIDC provider from the account. Refused if the provider is the account's only sign-in method.
+     * Update workspace
+     * @description Updates an existing workspace's configuration. Only provided fields are updated.
      */
-    delete: {
+    patch: {
       parameters: {
         query?: never;
         header?: never;
         path: {
-          /** @description The identity provider to act on. */
-          provider: components["schemas"]["IdentityProvider"];
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
         };
         cookie?: never;
       };
-      requestBody?: never;
+      /**
+       * @description Request payload to update an existing workspace.
+       *
+       *     All fields are optional; only provided fields will be updated. The slug is
+       *     immutable and set at creation, so it cannot be changed here.
+       */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["UpdateWorkspace"];
+        };
+      };
       responses: {
-        /** @description Provider unlinked. */
-        204: {
+        /** @description Workspace response. */
+        200: {
           headers: {
             [name: string]: unknown;
           };
-          content?: never;
+          content: {
+            "application/json": components["schemas"]["Workspace"];
+          };
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -846,7 +854,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        403: {
           headers: {
             [name: string]: unknown;
           };
@@ -854,76 +862,63 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        409: {
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ErrorResponse"];
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
           };
         };
       };
     };
-    options?: never;
-    head?: never;
-    patch?: never;
     trace?: never;
   };
-  "/workspaces/": {
+  "/workspaces/{workspaceSlug}/avatar/": {
     parameters: {
       query?: never;
       header?: never;
       path?: never;
       cookie?: never;
     };
+    get?: never;
     /**
-     * List workspaces
-     * @description Returns all workspaces the authenticated user is a member of.
+     * Upload workspace avatar
+     * @description Uploads and normalizes the workspace's avatar. Requires UpdateWorkspace.
      */
-    get: {
+    put: {
       parameters: {
-        query?: {
-          /**
-           * @description Cursor pointing to the last item of the previous page.
-           *     Obtain this from the `nextCursor` field in the response.
-           */
-          after?: string;
-          /**
-           * @description Whether to include the total item count in the response's `total` field.
-           *     Defaults to `false`, since counting is an extra query; set it to `true`
-           *     only when the count is actually needed.
-           */
-          includeCount?: boolean;
-          /** @description The maximum number of records to return (1-100, default: 20). */
-          limit?: number;
-        };
+        query?: never;
         header?: never;
-        path?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+        };
         cookie?: never;
       };
-      requestBody?: never;
+      /** @description multipart form data */
+      requestBody: {
+        content: {
+          "multipart/form-data": unknown[];
+        };
+      };
       responses: {
-        /**
-         * @description Generic paginated response wrapper.
-         *
-         *     Provides a consistent structure for all paginated API responses with
-         *     cursor-based pagination support. When `next_cursor` is present, there
-         *     are more items to fetch.
-         */
+        /** @description no content */
         200: {
           headers: {
             [name: string]: unknown;
           };
-          content: {
-            "application/json": components["schemas"]["WorkspacePage"];
-          };
+          content?: never;
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -932,7 +927,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        401: {
+        400: {
           headers: {
             [name: string]: unknown;
           };
@@ -940,41 +935,6 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-      };
-    };
-    put?: never;
-    /**
-     * Create workspace
-     * @description Creates a new workspace. The creator is automatically added as an owner.
-     */
-    post: {
-      parameters: {
-        query?: never;
-        header?: never;
-        path?: never;
-        cookie?: never;
-      };
-      /**
-       * @description Request payload for creating a new workspace.
-       *
-       *     Creates a new workspace with the specified configuration. The creator is
-       *     automatically added as an owner of the workspace.
-       */
-      requestBody: {
-        content: {
-          "application/json": components["schemas"]["CreateWorkspace"];
-        };
-      };
-      responses: {
-        /** @description Workspace response. */
-        201: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["Workspace"];
-          };
-        };
         /**
          * @description HTTP error response representation with security-conscious design.
          *
@@ -982,7 +942,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        400: {
+        401: {
           headers: {
             [name: string]: unknown;
           };
@@ -997,7 +957,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        401: {
+        403: {
           headers: {
             [name: string]: unknown;
           };
@@ -1005,44 +965,29 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /** @description Expected request with `Content-Type: application/json` */
-        415: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
-        /** @description Failed to deserialize the JSON body into the target type */
-        422: {
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "text/plain": string;
+            "application/json": components["schemas"]["ErrorResponse"];
           };
         };
       };
     };
-    delete?: never;
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/workspaces/{workspaceSlug}/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
+    post?: never;
     /**
-     * Get workspace
-     * @description Returns details for a specific workspace.
+     * Delete workspace avatar
+     * @description Removes the workspace's avatar. Requires UpdateWorkspace.
      */
-    get: {
+    delete: {
       parameters: {
         query?: never;
         header?: never;
@@ -1054,14 +999,12 @@ interface paths {
       };
       requestBody?: never;
       responses: {
-        /** @description Workspace response. */
-        200: {
+        /** @description no content */
+        204: {
           headers: {
             [name: string]: unknown;
           };
-          content: {
-            "application/json": components["schemas"]["Workspace"];
-          };
+          content?: never;
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -1110,13 +1053,23 @@ interface paths {
         };
       };
     };
-    put?: never;
-    post?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/notifications/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
     /**
-     * Delete workspace
-     * @description Soft-deletes a workspace. Data is retained for potential recovery.
+     * Get notification settings
+     * @description Returns the notification settings for the authenticated user in a workspace.
      */
-    delete: {
+    get: {
       parameters: {
         query?: never;
         header?: never;
@@ -1128,26 +1081,13 @@ interface paths {
       };
       requestBody?: never;
       responses: {
-        /** @description no content */
+        /** @description Response for notification settings within a workspace. */
         200: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content?: never;
-        };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        401: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ErrorResponse"];
+            "application/json": components["schemas"]["NotificationSettings"];
           };
         };
         /**
@@ -1157,7 +1097,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        403: {
+        401: {
           headers: {
             [name: string]: unknown;
           };
@@ -1182,11 +1122,14 @@ interface paths {
         };
       };
     };
+    put?: never;
+    post?: never;
+    delete?: never;
     options?: never;
     head?: never;
     /**
-     * Update workspace
-     * @description Updates an existing workspace's configuration. Only provided fields are updated.
+     * Update notification settings
+     * @description Updates the notification settings for the authenticated user in a workspace.
      */
     patch: {
       parameters: {
@@ -1198,25 +1141,20 @@ interface paths {
         };
         cookie?: never;
       };
-      /**
-       * @description Request payload to update an existing workspace.
-       *
-       *     All fields are optional; only provided fields will be updated. The slug is
-       *     immutable and set at creation, so it cannot be changed here.
-       */
+      /** @description Request payload for updating notification settings. */
       requestBody: {
         content: {
-          "application/json": components["schemas"]["UpdateWorkspace"];
+          "application/json": components["schemas"]["UpdateNotificationSettings"];
         };
       };
       responses: {
-        /** @description Workspace response. */
+        /** @description Response for notification settings within a workspace. */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["Workspace"];
+            "application/json": components["schemas"]["NotificationSettings"];
           };
         };
         /**
@@ -1256,7 +1194,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        403: {
+        404: {
           headers: {
             [name: string]: unknown;
           };
@@ -1286,21 +1224,48 @@ interface paths {
     };
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/avatar/": {
+  "/workspaces/{workspaceSlug}/activities/": {
     parameters: {
       query?: never;
       header?: never;
       path?: never;
       cookie?: never;
     };
-    get?: never;
     /**
-     * Upload workspace avatar
-     * @description Uploads and normalizes the workspace's avatar. Requires UpdateWorkspace.
+     * List workspace activities
+     * @description Returns the workspace's activity log, most recent first, cursor-paginated. Optional filters: `type` (repeatable, e.g. `file.created`), `actor` (a username), and a `from`/`to` day range (each bound narrows only when given; the feed is otherwise all-time).
      */
-    put: {
+    get: {
       parameters: {
-        query?: never;
+        query?: {
+          /** @description Username of the account whose activities to keep. Omit for any actor. */
+          actor?: components["schemas"]["Handle"];
+          /**
+           * @description Keep only these activity types (e.g. `file.created`). Repeat the `type`
+           *     parameter for several; omit for no type constraint.
+           */
+          type?: components["schemas"]["ActivityType"][];
+          /**
+           * @description First day of the range (inclusive), `YYYY-MM-DD`. Defaults so the range
+           *     spans the last `DEFAULT_WINDOW_DAYS` days through `to`.
+           */
+          from?: string;
+          /** @description Last day of the range (inclusive), `YYYY-MM-DD`. Defaults to today (UTC). */
+          to?: string;
+          /**
+           * @description Cursor pointing to the last item of the previous page.
+           *     Obtain this from the `nextCursor` field in the response.
+           */
+          after?: string;
+          /**
+           * @description Whether to include the total item count in the response's `total` field.
+           *     Defaults to `false`, since counting is an extra query; set it to `true`
+           *     only when the count is actually needed.
+           */
+          includeCount?: boolean;
+          /** @description The maximum number of records to return (1-100, default: 20). */
+          limit?: number;
+        };
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
@@ -1308,33 +1273,21 @@ interface paths {
         };
         cookie?: never;
       };
-      /** @description multipart form data */
-      requestBody: {
-        content: {
-          "multipart/form-data": unknown[];
-        };
-      };
+      requestBody?: never;
       responses: {
-        /** @description no content */
-        200: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content?: never;
-        };
         /**
-         * @description HTTP error response representation with security-conscious design.
+         * @description Generic paginated response wrapper.
          *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
+         *     Provides a consistent structure for all paginated API responses with
+         *     cursor-based pagination support. When `next_cursor` is present, there
+         *     are more items to fetch.
          */
-        400: {
+        200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ErrorResponse"];
+            "application/json": components["schemas"]["ActivityPage"];
           };
         };
         /**
@@ -1367,31 +1320,47 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        404: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
-          };
-        };
       };
     };
+    put?: never;
     post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/activities/export": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
     /**
-     * Delete workspace avatar
-     * @description Removes the workspace's avatar. Requires UpdateWorkspace.
+     * Export workspace activities
+     * @description Exports a workspace's activity log over a date window as a downloadable file. The window is `from`/`to` (inclusive, YYYY-MM-DD); it defaults to the last 30 days and is capped at 366 days. The same `type` (repeatable) and `actor` filters as the feed apply. `format` is `csv` (default) or `json`. Each activity is a flat row: timestamp, the type split into object/action, the actor, and the acted-on object's id and label, oldest first. At most 100,000 rows are returned (the oldest in the window); a truncated export sets the `X-Export-Truncated` response header.
      */
-    delete: {
+    get: {
       parameters: {
-        query?: never;
+        query?: {
+          /** @description Username of the account whose activities to keep. Omit for any actor. */
+          actor?: components["schemas"]["Handle"];
+          /**
+           * @description Keep only these activity types (e.g. `file.created`). Repeat the `type`
+           *     parameter for several; omit for no type constraint.
+           */
+          type?: components["schemas"]["ActivityType"][];
+          /**
+           * @description First day of the range (inclusive), `YYYY-MM-DD`. Defaults so the range
+           *     spans the last `DEFAULT_WINDOW_DAYS` days through `to`.
+           */
+          from?: string;
+          /** @description Last day of the range (inclusive), `YYYY-MM-DD`. Defaults to today (UTC). */
+          to?: string;
+          /** @description Output format; defaults to `csv`. */
+          format?: components["schemas"]["ExportFormat"];
+        };
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
@@ -1401,12 +1370,30 @@ interface paths {
       };
       requestBody?: never;
       responses: {
-        /** @description no content */
-        204: {
+        /** @description The exported activity log. */
+        200: {
           headers: {
             [name: string]: unknown;
           };
-          content?: never;
+          content: {
+            "text/csv": unknown;
+            "application/json": unknown;
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -1455,12 +1442,15 @@ interface paths {
         };
       };
     };
+    put?: never;
+    post?: never;
+    delete?: never;
     options?: never;
     head?: never;
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/notifications/": {
+  "/workspaces/{workspaceSlug}/analytics/": {
     parameters: {
       query?: never;
       header?: never;
@@ -1468,8 +1458,8 @@ interface paths {
       cookie?: never;
     };
     /**
-     * Get notification settings
-     * @description Returns the notification settings for the authenticated user in a workspace.
+     * Workspace analytics
+     * @description Returns aggregate analytics for a workspace: stored-file totals with a per-kind breakdown, detection health (status mix, error rate, and durations), and inference token usage (workspace totals plus a per-model breakdown). Breakdowns list every kind/status, zero-filled, in a stable order.
      */
     get: {
       parameters: {
@@ -1483,13 +1473,16 @@ interface paths {
       };
       requestBody?: never;
       responses: {
-        /** @description Response for notification settings within a workspace. */
+        /**
+         * @description Aggregate analytics for a workspace: what it stores, how its detections fare, and
+         *     the inference tokens they spent.
+         */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["NotificationSettings"];
+            "application/json": components["schemas"]["WorkspaceAnalytics"];
           };
         };
         /**
@@ -1507,6 +1500,21 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
         /**
          * @description HTTP error response representation with security-conscious design.
          *
@@ -1529,13 +1537,31 @@ interface paths {
     delete?: never;
     options?: never;
     head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/analytics/detections/timeseries/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
     /**
-     * Update notification settings
-     * @description Updates the notification settings for the authenticated user in a workspace.
+     * Workspace detection time series
+     * @description Returns a workspace's daily detection activity over a date window: detections per day, plus each day's error rate and durations. Every day in the window is present (quiet days report detections: 0), so the series plots as a continuous line or a contribution-style calendar. The window is `from`/`to` (inclusive, YYYY-MM-DD); it defaults to the last 30 days and is capped at 366 days.
      */
-    patch: {
+    get: {
       parameters: {
-        query?: never;
+        query?: {
+          /**
+           * @description First day of the range (inclusive), `YYYY-MM-DD`. Defaults so the range
+           *     spans the last `DEFAULT_WINDOW_DAYS` days through `to`.
+           */
+          from?: string;
+          /** @description Last day of the range (inclusive), `YYYY-MM-DD`. Defaults to today (UTC). */
+          to?: string;
+        };
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
@@ -1543,20 +1569,19 @@ interface paths {
         };
         cookie?: never;
       };
-      /** @description Request payload for updating notification settings. */
-      requestBody: {
-        content: {
-          "application/json": components["schemas"]["UpdateNotificationSettings"];
-        };
-      };
+      requestBody?: never;
       responses: {
-        /** @description Response for notification settings within a workspace. */
+        /**
+         * @description A workspace's daily detection activity over a window: one point per day, dense
+         *     (quiet days included with `detections: 0`), ready to plot as a continuous
+         *     series.
+         */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["NotificationSettings"];
+            "application/json": components["schemas"]["DetectionTimeSeries"];
           };
         };
         /**
@@ -1596,7 +1621,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        403: {
           headers: {
             [name: string]: unknown;
           };
@@ -1604,29 +1629,32 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /** @description Expected request with `Content-Type: application/json` */
-        415: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
-        /** @description Failed to deserialize the JSON body into the target type */
-        422: {
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "text/plain": string;
+            "application/json": components["schemas"]["ErrorResponse"];
           };
         };
       };
     };
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/activities/": {
+  "/workspaces/{workspaceSlug}/members/": {
     parameters: {
       query?: never;
       header?: never;
@@ -1634,26 +1662,20 @@ interface paths {
       cookie?: never;
     };
     /**
-     * List workspace activities
-     * @description Returns the workspace's activity log, most recent first, cursor-paginated. Optional filters: `type` (repeatable, e.g. `file.created`), `actor` (a username), and a `from`/`to` day range (each bound narrows only when given; the feed is otherwise all-time).
+     * List members
+     * @description Returns a paginated list of workspace members with their roles and status.
      */
     get: {
       parameters: {
         query?: {
-          /** @description Username of the account whose activities to keep. Omit for any actor. */
-          actor?: components["schemas"]["Handle"];
-          /**
-           * @description Keep only these activity types (e.g. `file.created`). Repeat the `type`
-           *     parameter for several; omit for no type constraint.
-           */
-          type?: components["schemas"]["ActivityType"][];
-          /**
-           * @description First day of the range (inclusive), `YYYY-MM-DD`. Defaults so the range
-           *     spans the last `DEFAULT_WINDOW_DAYS` days through `to`.
-           */
-          from?: string;
-          /** @description Last day of the range (inclusive), `YYYY-MM-DD`. Defaults to today (UTC). */
-          to?: string;
+          /** @description Filter by 2FA status. */
+          has2fa?: boolean;
+          /** @description Sort order (asc or desc). */
+          order?: components["schemas"]["SortOrder"];
+          /** @description Filter by workspace role. */
+          role?: components["schemas"]["WorkspaceRole"];
+          /** @description Sort by field. */
+          sortBy?: components["schemas"]["MemberSortField"];
           /**
            * @description Cursor pointing to the last item of the previous page.
            *     Obtain this from the `nextCursor` field in the response.
@@ -1689,7 +1711,7 @@ interface paths {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ActivityPage"];
+            "application/json": components["schemas"]["MemberPage"];
           };
         };
         /**
@@ -1722,6 +1744,21 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
       };
     };
     put?: never;
@@ -1732,37 +1769,22 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/activities/export": {
+  "/workspaces/{workspaceSlug}/members/leave/": {
     parameters: {
       query?: never;
       header?: never;
       path?: never;
       cookie?: never;
     };
+    get?: never;
+    put?: never;
     /**
-     * Export workspace activities
-     * @description Exports a workspace's activity log over a date window as a downloadable file. The window is `from`/`to` (inclusive, YYYY-MM-DD); it defaults to the last 30 days and is capped at 366 days. The same `type` (repeatable) and `actor` filters as the feed apply. `format` is `csv` (default) or `json`. Each activity is a flat row: timestamp, the type split into object/action, the actor, and the acted-on object's id and label, oldest first. At most 100,000 rows are returned (the oldest in the window); a truncated export sets the `X-Export-Truncated` response header.
+     * Leave workspace
+     * @description Allows a member to voluntarily leave a workspace.
      */
-    get: {
+    post: {
       parameters: {
-        query?: {
-          /** @description Username of the account whose activities to keep. Omit for any actor. */
-          actor?: components["schemas"]["Handle"];
-          /**
-           * @description Keep only these activity types (e.g. `file.created`). Repeat the `type`
-           *     parameter for several; omit for no type constraint.
-           */
-          type?: components["schemas"]["ActivityType"][];
-          /**
-           * @description First day of the range (inclusive), `YYYY-MM-DD`. Defaults so the range
-           *     spans the last `DEFAULT_WINDOW_DAYS` days through `to`.
-           */
-          from?: string;
-          /** @description Last day of the range (inclusive), `YYYY-MM-DD`. Defaults to today (UTC). */
-          to?: string;
-          /** @description Output format; defaults to `csv`. */
-          format?: components["schemas"]["ExportFormat"];
-        };
+        query?: never;
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
@@ -1772,15 +1794,12 @@ interface paths {
       };
       requestBody?: never;
       responses: {
-        /** @description The exported activity log. */
+        /** @description no content */
         200: {
           headers: {
             [name: string]: unknown;
           };
-          content: {
-            "text/csv": unknown;
-            "application/json": unknown;
-          };
+          content?: never;
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -1812,21 +1831,6 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        403: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
-          };
-        };
         /**
          * @description HTTP error response representation with security-conscious design.
          *
@@ -1844,15 +1848,13 @@ interface paths {
         };
       };
     };
-    put?: never;
-    post?: never;
     delete?: never;
     options?: never;
     head?: never;
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/analytics/": {
+  "/workspaces/{workspaceSlug}/members/{username}/": {
     parameters: {
       query?: never;
       header?: never;
@@ -1860,8 +1862,8 @@ interface paths {
       cookie?: never;
     };
     /**
-     * Workspace analytics
-     * @description Returns aggregate analytics for a workspace: stored-file totals with a per-kind breakdown, detection health (status mix, error rate, and durations), and inference token usage (workspace totals plus a per-model breakdown). Breakdowns list every kind/status, zero-filled, in a stable order.
+     * Get member
+     * @description Returns detailed information about a specific workspace member.
      */
     get: {
       parameters: {
@@ -1870,21 +1872,20 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
+          /** @description Public handle of the member's account. */
+          username: components["schemas"]["Handle"];
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /**
-         * @description Aggregate analytics for a workspace: what it stores, how its detections fare, and
-         *     the inference tokens they spent.
-         */
+        /** @description Represents a workspace member. */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["WorkspaceAnalytics"];
+            "application/json": components["schemas"]["Member"];
           };
         };
         /**
@@ -1936,55 +1937,30 @@ interface paths {
     };
     put?: never;
     post?: never;
-    delete?: never;
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/workspaces/{workspaceSlug}/analytics/detections/timeseries/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
     /**
-     * Workspace detection time series
-     * @description Returns a workspace's daily detection activity over a date window: detections per day, plus each day's error rate and durations. Every day in the window is present (quiet days report detections: 0), so the series plots as a continuous line or a contribution-style calendar. The window is `from`/`to` (inclusive, YYYY-MM-DD); it defaults to the last 30 days and is capped at 366 days.
+     * Remove member
+     * @description Permanently removes a member from the workspace. Cannot remove owners or yourself.
      */
-    get: {
+    delete: {
       parameters: {
-        query?: {
-          /**
-           * @description First day of the range (inclusive), `YYYY-MM-DD`. Defaults so the range
-           *     spans the last `DEFAULT_WINDOW_DAYS` days through `to`.
-           */
-          from?: string;
-          /** @description Last day of the range (inclusive), `YYYY-MM-DD`. Defaults to today (UTC). */
-          to?: string;
-        };
+        query?: never;
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
+          /** @description Public handle of the member's account. */
+          username: components["schemas"]["Handle"];
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /**
-         * @description A workspace's daily detection activity over a window: one point per day, dense
-         *     (quiet days included with `detections: 0`), ready to plot as a continuous
-         *     series.
-         */
+        /** @description no content */
         200: {
           headers: {
             [name: string]: unknown;
           };
-          content: {
-            "application/json": components["schemas"]["DetectionTimeSeries"];
-          };
+          content?: never;
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -2048,72 +2024,53 @@ interface paths {
         };
       };
     };
-    put?: never;
-    post?: never;
-    delete?: never;
     options?: never;
     head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/workspaces/{workspaceSlug}/members/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
     /**
-     * List members
-     * @description Returns a paginated list of workspace members with their roles and status.
+     * Update member role
+     * @description Updates a workspace member's role. Cannot update your own role or demote owners.
      */
-    get: {
+    patch: {
       parameters: {
-        query?: {
-          /** @description Filter by 2FA status. */
-          has2fa?: boolean;
-          /** @description Sort order (asc or desc). */
-          order?: components["schemas"]["SortOrder"];
-          /** @description Filter by workspace role. */
-          role?: components["schemas"]["WorkspaceRole"];
-          /** @description Sort by field. */
-          sortBy?: components["schemas"]["MemberSortField"];
-          /**
-           * @description Cursor pointing to the last item of the previous page.
-           *     Obtain this from the `nextCursor` field in the response.
-           */
-          after?: string;
-          /**
-           * @description Whether to include the total item count in the response's `total` field.
-           *     Defaults to `false`, since counting is an extra query; set it to `true`
-           *     only when the count is actually needed.
-           */
-          includeCount?: boolean;
-          /** @description The maximum number of records to return (1-100, default: 20). */
-          limit?: number;
-        };
+        query?: never;
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
+          /** @description Public handle of the member's account. */
+          username: components["schemas"]["Handle"];
         };
         cookie?: never;
       };
-      requestBody?: never;
+      /** @description Request to update a member's role. */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["UpdateMember"];
+        };
+      };
       responses: {
+        /** @description Represents a workspace member. */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["Member"];
+          };
+        };
         /**
-         * @description Generic paginated response wrapper.
+         * @description HTTP error response representation with security-conscious design.
          *
-         *     Provides a consistent structure for all paginated API responses with
-         *     cursor-based pagination support. When `next_cursor` is present, there
-         *     are more items to fetch.
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
          */
-        200: {
+        400: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["MemberPage"];
+            "application/json": components["schemas"]["ErrorResponse"];
           };
         };
         /**
@@ -2161,32 +2118,61 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
       };
     };
-    put?: never;
-    post?: never;
-    delete?: never;
-    options?: never;
-    head?: never;
-    patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/members/leave/": {
+  "/workspaces/{workspaceSlug}/connections/": {
     parameters: {
       query?: never;
       header?: never;
       path?: never;
       cookie?: never;
     };
-    get?: never;
-    put?: never;
     /**
-     * Leave workspace
-     * @description Allows a member to voluntarily leave a workspace.
+     * List connections
+     * @description Returns all configured connections for the workspace. Only metadata is returned; encrypted credentials are never exposed.
      */
-    post: {
+    get: {
       parameters: {
-        query?: never;
+        query?: {
+          /**
+           * @description Cursor pointing to the last item of the previous page.
+           *     Obtain this from the `nextCursor` field in the response.
+           */
+          after?: string;
+          /**
+           * @description Whether to include the total item count in the response's `total` field.
+           *     Defaults to `false`, since counting is an extra query; set it to `true`
+           *     only when the count is actually needed.
+           */
+          includeCount?: boolean;
+          /** @description The maximum number of records to return (1-100, default: 20). */
+          limit?: number;
+          /**
+           * @description Filter by provider (`s3`, `azure`, `gcs`). Repeatable; a connection
+           *     matches if it uses any of the given providers. Empty means no filter.
+           */
+          provider?: string[];
+        };
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
@@ -2196,26 +2182,19 @@ interface paths {
       };
       requestBody?: never;
       responses: {
-        /** @description no content */
-        200: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content?: never;
-        };
         /**
-         * @description HTTP error response representation with security-conscious design.
+         * @description Generic paginated response wrapper.
          *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
+         *     Provides a consistent structure for all paginated API responses with
+         *     cursor-based pagination support. When `next_cursor` is present, there
+         *     are more items to fetch.
          */
-        400: {
+        200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ErrorResponse"];
+            "application/json": components["schemas"]["ConnectionPage"];
           };
         };
         /**
@@ -2240,7 +2219,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        403: {
           headers: {
             [name: string]: unknown;
           };
@@ -2250,44 +2229,40 @@ interface paths {
         };
       };
     };
-    delete?: never;
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/workspaces/{workspaceSlug}/members/{username}/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
+    put?: never;
     /**
-     * Get member
-     * @description Returns detailed information about a specific workspace member.
+     * Create connection
+     * @description Creates a new provider connection for the workspace. Connection data is encrypted and stored securely. The response includes connection metadata but never exposes the encrypted credentials.
      */
-    get: {
+    post: {
       parameters: {
         query?: never;
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Public handle of the member's account. */
-          username: components["schemas"]["Handle"];
         };
         cookie?: never;
       };
-      requestBody?: never;
+      /** @description Request payload for creating a new workspace connection. */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["CreateConnection"];
+        };
+      };
       responses: {
-        /** @description Represents a workspace member. */
-        200: {
+        /**
+         * @description Response type for a workspace connection.
+         *
+         *     Note: The encrypted connection data is never exposed in API responses.
+         *     Only metadata about the connection is returned.
+         */
+        201: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["Member"];
+            "application/json": components["schemas"]["Connection"];
           };
         };
         /**
@@ -2297,7 +2272,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        401: {
+        400: {
           headers: {
             [name: string]: unknown;
           };
@@ -2312,7 +2287,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        403: {
+        401: {
           headers: {
             [name: string]: unknown;
           };
@@ -2327,7 +2302,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        403: {
           headers: {
             [name: string]: unknown;
           };
@@ -2335,34 +2310,70 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-      };
-    };
-    put?: never;
-    post?: never;
-    /**
-     * Remove member
-     * @description Permanently removes a member from the workspace. Cannot remove owners or yourself.
-     */
-    delete: {
-      parameters: {
-        query?: never;
-        header?: never;
-        path: {
-          /** @description URL-safe workspace identifier. */
-          workspaceSlug: string;
-          /** @description Public handle of the member's account. */
-          username: components["schemas"]["Handle"];
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+      };
+    };
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/connections/{connectionId}/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * Get connection
+     * @description Returns connection metadata without encrypted credentials.
+     */
+    get: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /** @description no content */
+        /**
+         * @description Response type for a workspace connection.
+         *
+         *     Note: The encrypted connection data is never exposed in API responses.
+         *     Only metadata about the connection is returned.
+         */
         200: {
           headers: {
             [name: string]: unknown;
           };
-          content?: never;
+          content: {
+            "application/json": components["schemas"]["Connection"];
+          };
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -2371,7 +2382,37 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        400: {
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
           headers: {
             [name: string]: unknown;
           };
@@ -2379,6 +2420,35 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
+      };
+    };
+    put?: never;
+    post?: never;
+    /**
+     * Delete connection
+     * @description Soft-deletes the connection from the workspace.
+     */
+    delete: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description no content */
+        204: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content?: never;
+        };
         /**
          * @description HTTP error response representation with security-conscious design.
          *
@@ -2429,8 +2499,8 @@ interface paths {
     options?: never;
     head?: never;
     /**
-     * Update member role
-     * @description Updates a workspace member's role. Cannot update your own role or demote owners.
+     * Update connection
+     * @description Updates connection name or encrypted data.
      */
     patch: {
       parameters: {
@@ -2439,25 +2509,30 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Public handle of the member's account. */
-          username: components["schemas"]["Handle"];
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
         };
         cookie?: never;
       };
-      /** @description Request to update a member's role. */
+      /** @description Request payload for updating an existing workspace connection. */
       requestBody: {
         content: {
-          "application/json": components["schemas"]["UpdateMember"];
+          "application/json": components["schemas"]["UpdateConnection"];
         };
       };
       responses: {
-        /** @description Represents a workspace member. */
+        /**
+         * @description Response type for a workspace connection.
+         *
+         *     Note: The encrypted connection data is never exposed in API responses.
+         *     Only metadata about the connection is returned.
+         */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["Member"];
+            "application/json": components["schemas"]["Connection"];
           };
         };
         /**
@@ -2542,61 +2617,40 @@ interface paths {
     };
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/connections/": {
+  "/workspaces/{workspaceSlug}/connections/{connectionId}/verify/": {
     parameters: {
       query?: never;
       header?: never;
       path?: never;
       cookie?: never;
     };
+    get?: never;
+    put?: never;
     /**
-     * List connections
-     * @description Returns all configured connections for the workspace. Only metadata is returned; encrypted credentials are never exposed.
+     * Verify connection
+     * @description Checks whether the connection's backing store is reachable with its stored credentials.
      */
-    get: {
+    post: {
       parameters: {
-        query?: {
-          /**
-           * @description Cursor pointing to the last item of the previous page.
-           *     Obtain this from the `nextCursor` field in the response.
-           */
-          after?: string;
-          /**
-           * @description Whether to include the total item count in the response's `total` field.
-           *     Defaults to `false`, since counting is an extra query; set it to `true`
-           *     only when the count is actually needed.
-           */
-          includeCount?: boolean;
-          /** @description The maximum number of records to return (1-100, default: 20). */
-          limit?: number;
-          /**
-           * @description Filter by provider (`s3`, `azure`, `gcs`). Repeatable; a connection
-           *     matches if it uses any of the given providers. Empty means no filter.
-           */
-          provider?: string[];
-        };
+        query?: never;
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /**
-         * @description Generic paginated response wrapper.
-         *
-         *     Provides a consistent structure for all paginated API responses with
-         *     cursor-based pagination support. When `next_cursor` is present, there
-         *     are more items to fetch.
-         */
+        /** @description Result of a connection reachability check. */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ConnectionPage"];
+            "application/json": components["schemas"]["ConnectionVerification"];
           };
         };
         /**
@@ -2629,12 +2683,41 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
       };
     };
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/connections/{connectionId}/picker-token/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
     put?: never;
     /**
-     * Create connection
-     * @description Creates a new provider connection for the workspace. Connection data is encrypted and stored securely. The response includes connection metadata but never exposes the encrypted credentials.
+     * Mint picker token
+     * @description Returns a short-lived provider access token for a browser file picker (file services with a token-based picker only). The refresh token is never returned. An optional body `{ resource }` names the resource the picker requested (used by the OneDrive picker, which requires a SharePoint-audience token); providers whose picker takes a single token ignore it. The OneDrive picker is available only for work or school (OneDrive for Business) accounts.
      */
     post: {
       parameters: {
@@ -2643,28 +2726,39 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
         };
         cookie?: never;
       };
-      /** @description Request payload for creating a new workspace connection. */
+      /**
+       * @description Body for minting a browser file-picker token.
+       *
+       *     The OneDrive v8 picker requests a token per resource (it names the resource in
+       *     each `authenticate` command); the caller passes that `resource` so the server
+       *     mints a token scoped to exactly it. Ignored by providers whose picker takes a
+       *     single provider token (Google Drive, Box); omit it for those.
+       */
       requestBody: {
         content: {
-          "application/json": components["schemas"]["CreateConnection"];
+          "application/json": components["schemas"]["PickerTokenRequest"];
         };
       };
       responses: {
         /**
-         * @description Response type for a workspace connection.
+         * @description A short-lived provider OAuth access token for a browser file picker.
          *
-         *     Note: The encrypted connection data is never exposed in API responses.
-         *     Only metadata about the connection is returned.
+         *     Carries only the access token and its expiry — never the refresh token, which
+         *     stays server-side. The token is minted from the connection's stored
+         *     credentials and is short-lived (the provider's access-token lifetime), so the
+         *     browser holds a narrow, expiring credential rather than a durable one.
          */
-        201: {
+        200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["Connection"];
+            "application/json": components["schemas"]["PickerToken"];
           };
         };
         /**
@@ -2712,22 +2806,19 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /** @description Expected request with `Content-Type: application/json` */
-        415: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
-        /** @description Failed to deserialize the JSON body into the target type */
-        422: {
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "text/plain": string;
+            "application/json": components["schemas"]["ErrorResponse"];
           };
         };
       };
@@ -2738,7 +2829,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/connections/{connectionId}/": {
+  "/workspaces/{workspaceSlug}/providers/": {
     parameters: {
       query?: never;
       header?: never;
@@ -2746,35 +2837,232 @@ interface paths {
       cookie?: never;
     };
     /**
-     * Get connection
-     * @description Returns connection metadata without encrypted credentials.
+     * List providers
+     * @description Returns all configured inference providers for the workspace. Only metadata is returned; encrypted credentials are never exposed.
      */
     get: {
+      parameters: {
+        query?: {
+          /**
+           * @description Cursor pointing to the last item of the previous page.
+           *     Obtain this from the `nextCursor` field in the response.
+           */
+          after?: string;
+          /**
+           * @description Whether to include the total item count in the response's `total` field.
+           *     Defaults to `false`, since counting is an extra query; set it to `true`
+           *     only when the count is actually needed.
+           */
+          includeCount?: boolean;
+          /** @description The maximum number of records to return (1-100, default: 20). */
+          limit?: number;
+          /**
+           * @description Filter by provider (`openai`, `ollama`, `anthropic`). Repeatable; a
+           *     provider matches if it uses any of the given providers. Empty means no
+           *     filter.
+           */
+          provider?: string[];
+        };
+        header?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /**
+         * @description Generic paginated response wrapper.
+         *
+         *     Provides a consistent structure for all paginated API responses with
+         *     cursor-based pagination support. When `next_cursor` is present, there
+         *     are more items to fetch.
+         */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ProviderPage"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    put?: never;
+    /**
+     * Create provider
+     * @description Creates a new inference provider for the workspace. Provider data is encrypted and stored securely. The response includes provider metadata but never exposes the encrypted credentials.
+     */
+    post: {
       parameters: {
         query?: never;
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the connection. */
-          connectionId: components["schemas"]["ConnectionId"];
+        };
+        cookie?: never;
+      };
+      /** @description Request payload for creating a new workspace provider. */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["CreateProvider"];
+        };
+      };
+      responses: {
+        /**
+         * @description Response type for a workspace inference provider.
+         *
+         *     Note: The encrypted provider data is never exposed in API responses. Only
+         *     metadata about the provider is returned.
+         */
+        201: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["Provider"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+      };
+    };
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/providers/{providerId}/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * Get provider
+     * @description Returns provider metadata without encrypted credentials.
+     */
+    get: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+          /** @description Opaque identifier of the provider. */
+          providerId: components["schemas"]["ProviderId"];
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
         /**
-         * @description Response type for a workspace connection.
+         * @description Response type for a workspace inference provider.
          *
-         *     Note: The encrypted connection data is never exposed in API responses.
-         *     Only metadata about the connection is returned.
+         *     Note: The encrypted provider data is never exposed in API responses. Only
+         *     metadata about the provider is returned.
          */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["Connection"];
+            "application/json": components["schemas"]["Provider"];
           };
         };
         /**
@@ -2827,8 +3115,8 @@ interface paths {
     put?: never;
     post?: never;
     /**
-     * Delete connection
-     * @description Soft-deletes the connection from the workspace.
+     * Delete provider
+     * @description Soft-deletes the provider from the workspace.
      */
     delete: {
       parameters: {
@@ -2837,8 +3125,8 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the connection. */
-          connectionId: components["schemas"]["ConnectionId"];
+          /** @description Opaque identifier of the provider. */
+          providerId: components["schemas"]["ProviderId"];
         };
         cookie?: never;
       };
@@ -2901,8 +3189,8 @@ interface paths {
     options?: never;
     head?: never;
     /**
-     * Update connection
-     * @description Updates connection name or encrypted data.
+     * Update provider
+     * @description Updates provider name or encrypted data.
      */
     patch: {
       parameters: {
@@ -2911,30 +3199,30 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the connection. */
-          connectionId: components["schemas"]["ConnectionId"];
+          /** @description Opaque identifier of the provider. */
+          providerId: components["schemas"]["ProviderId"];
         };
         cookie?: never;
       };
-      /** @description Request payload for updating an existing workspace connection. */
+      /** @description Request payload for updating an existing workspace provider. */
       requestBody: {
         content: {
-          "application/json": components["schemas"]["UpdateConnection"];
+          "application/json": components["schemas"]["UpdateProvider"];
         };
       };
       responses: {
         /**
-         * @description Response type for a workspace connection.
+         * @description Response type for a workspace inference provider.
          *
-         *     Note: The encrypted connection data is never exposed in API responses.
-         *     Only metadata about the connection is returned.
+         *     Note: The encrypted provider data is never exposed in API responses. Only
+         *     metadata about the provider is returned.
          */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["Connection"];
+            "application/json": components["schemas"]["Provider"];
           };
         };
         /**
@@ -3019,7 +3307,7 @@ interface paths {
     };
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/connections/{connectionId}/verify/": {
+  "/workspaces/{workspaceSlug}/providers/{providerId}/verify/": {
     parameters: {
       query?: never;
       header?: never;
@@ -3029,8 +3317,8 @@ interface paths {
     get?: never;
     put?: never;
     /**
-     * Verify connection
-     * @description Checks whether the connection's backing store is reachable with its stored credentials.
+     * Verify provider
+     * @description Checks whether the provider is reachable with its stored credentials.
      */
     post: {
       parameters: {
@@ -3039,8 +3327,8 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the connection. */
-          connectionId: components["schemas"]["ConnectionId"];
+          /** @description Opaque identifier of the provider. */
+          providerId: components["schemas"]["ProviderId"];
         };
         cookie?: never;
       };
@@ -3108,7 +3396,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/connections/{connectionId}/picker-token/": {
+  "/workspaces/{workspaceSlug}/connections/oauth/{provider}/start/": {
     parameters: {
       query?: never;
       header?: never;
@@ -3118,8 +3406,8 @@ interface paths {
     get?: never;
     put?: never;
     /**
-     * Mint picker token
-     * @description Returns a short-lived provider access token for a browser file picker (file services with a token-based picker only). The refresh token is never returned.
+     * Start cloud file OAuth
+     * @description Begins the OAuth authorization for a cloud file-service connection and returns the provider authorize URL to redirect the user to. On the user's consent, the provider redirects to the callback, which creates the connection.
      */
     post: {
       parameters: {
@@ -3128,42 +3416,34 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the connection. */
-          connectionId: components["schemas"]["ConnectionId"];
+          /** @description The cloud file provider to connect. */
+          provider: components["schemas"]["FileServiceProvider"];
         };
         cookie?: never;
       };
-      requestBody?: never;
+      /** @description Request payload for starting a cloud file-service OAuth authorization. */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["StartFileServiceOAuth"];
+        };
+      };
       responses: {
-        /**
-         * @description A short-lived provider OAuth access token for a browser file picker.
-         *
-         *     Carries only the access token and its expiry — never the refresh token, which
-         *     stays server-side. The token is minted from the connection's stored
-         *     credentials and is short-lived (the provider's access-token lifetime), so the
-         *     browser holds a narrow, expiring credential rather than a durable one.
-         */
+        /** @description The response to a successful authorization start: where to send the user. */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["PickerToken"];
+            "application/json": components["schemas"]["OAuthStartResponse"];
           };
         };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
+        /** @description Failed to parse the request body as JSON */
         400: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ErrorResponse"];
+            "text/plain": string;
           };
         };
         /**
@@ -3196,111 +3476,8 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        404: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
-          };
-        };
-      };
-    };
-    delete?: never;
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/workspaces/{workspaceSlug}/connections/oauth/{provider}/start/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
-    get?: never;
-    put?: never;
-    /**
-     * Start cloud file OAuth
-     * @description Begins the OAuth authorization for a cloud file-service connection and returns the provider authorize URL to redirect the user to. On the user's consent, the provider redirects to the callback, which creates the connection.
-     */
-    post: {
-      parameters: {
-        query?: never;
-        header?: never;
-        path: {
-          /** @description URL-safe workspace identifier. */
-          workspaceSlug: string;
-          /** @description The cloud file provider to connect. */
-          provider: components["schemas"]["Provider"];
-        };
-        cookie?: never;
-      };
-      /** @description Request payload for starting a cloud file-service OAuth authorization. */
-      requestBody: {
-        content: {
-          "application/json": components["schemas"]["StartFileServiceOAuth"];
-        };
-      };
-      responses: {
-        /** @description The response to a successful authorization start: where to send the user. */
-        200: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["OAuthStartResponse"];
-          };
-        };
-        /** @description Failed to parse the request body as JSON */
-        400: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        401: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
-          };
-        };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        403: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
-          };
-        };
-        /** @description Expected request with `Content-Type: application/json` */
-        415: {
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
           headers: {
             [name: string]: unknown;
           };
@@ -9647,22 +9824,539 @@ interface paths {
         };
       };
       responses: {
-        /** @description Result of a webhook delivery attempt. */
+        /** @description Result of a webhook delivery attempt. */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["WebhookResult"];
+          };
+        };
+        /** @description Failed to parse the request body as JSON */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+      };
+    };
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/account/identities/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List sign-in methods
+     * @description Returns the authenticated account's identities: its password and any linked providers.
+     */
+    get: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path?: never;
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description The account's sign-in methods. */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["AccountIdentities"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/account/identities/password/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    /**
+     * Set or change password
+     * @description Sets or changes the account's password. Changing an existing password requires the current password; setting a first password on an account that has none requires a step-up re-authentication proof.
+     */
+    put: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path?: never;
+        cookie?: never;
+      };
+      /**
+       * @description A password set or change.
+       *
+       *     When the account already has a password, `current_password` is required and
+       *     verified before the change is applied, so a hijacked session or CSRF cannot
+       *     silently reset it (and lock out the real owner). When the account has no
+       *     password yet (an SSO-only account setting its first one), there is nothing to
+       *     re-authenticate against, so a fresh step-up `reauth_proof` is required instead
+       *     — a live session alone must not mint a durable new credential.
+       */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["SetPassword"];
+        };
+      };
+      responses: {
+        /** @description Password set. */
+        204: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content?: never;
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+      };
+    };
+    post?: never;
+    /**
+     * Remove password
+     * @description Removes the account's password, leaving it able to sign in only through its linked providers. Refused if the password is the account's only sign-in method.
+     */
+    delete: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path?: never;
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description Password removed. */
+        204: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content?: never;
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        409: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/account/identities/{provider}/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    /**
+     * Link a provider
+     * @description Begins linking the given OpenID Connect provider to the authenticated account and returns the provider authorize URL. Requires a step-up re-authentication proof (`reauthProof`, from the reauth endpoint). On consent, the callback attaches the verified provider identity to the caller's account.
+     */
+    post: {
+      parameters: {
+        query?: {
+          /**
+           * @description A step-up re-authentication proof. Required to start a *link* (adding a
+           *     provider is a credential-adding action, so a live session alone is not
+           *     enough); ignored for sign-in and reauth.
+           */
+          reauthProof?: string;
+          /**
+           * @description Frontend URL to return to once done. Carried through the flow and used to
+           *     build the callback's redirect.
+           */
+          redirectUri?: string;
+        };
+        header?: never;
+        path: {
+          /** @description The identity provider to act on. */
+          provider: components["schemas"]["IdentityProvider"];
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description The response to a successful sign-in start: where to send the user. */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["OidcStartResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        503: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    /**
+     * Unlink a provider
+     * @description Removes a linked OIDC provider from the account. Refused if the provider is the account's only sign-in method.
+     */
+    delete: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          /** @description The identity provider to act on. */
+          provider: components["schemas"]["IdentityProvider"];
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description Provider unlinked. */
+        204: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content?: never;
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        409: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/auth/{provider}/reauth/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * Start OIDC step-up re-authentication
+     * @description Begins a step-up re-authentication with a provider already linked to the authenticated account, and returns the provider authorize URL. On consent, the callback mints a short-lived, single-use proof required to add a credential (set a first password, or link a new provider).
+     */
+    get: {
+      parameters: {
+        query?: {
+          /**
+           * @description A step-up re-authentication proof. Required to start a *link* (adding a
+           *     provider is a credential-adding action, so a live session alone is not
+           *     enough); ignored for sign-in and reauth.
+           */
+          reauthProof?: string;
+          /**
+           * @description Frontend URL to return to once done. Carried through the flow and used to
+           *     build the callback's redirect.
+           */
+          redirectUri?: string;
+        };
+        header?: never;
+        path: {
+          /** @description The identity provider to act on. */
+          provider: components["schemas"]["IdentityProvider"];
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description The response to a successful sign-in start: where to send the user. */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["WebhookResult"];
-          };
-        };
-        /** @description Failed to parse the request body as JSON */
-        400: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
+            "application/json": components["schemas"]["OidcStartResponse"];
           };
         };
         /**
@@ -9687,7 +10381,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        403: {
+        404: {
           headers: {
             [name: string]: unknown;
           };
@@ -9702,7 +10396,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        503: {
           headers: {
             [name: string]: unknown;
           };
@@ -9710,74 +10404,65 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /** @description Expected request with `Content-Type: application/json` */
-        415: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
-        /** @description Failed to deserialize the JSON body into the target type */
-        422: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
       };
     };
+    put?: never;
+    post?: never;
     delete?: never;
     options?: never;
     head?: never;
     patch?: never;
     trace?: never;
   };
-  "/auth/{provider}/reauth/": {
+  "/auth/desktop/token/": {
     parameters: {
       query?: never;
       header?: never;
       path?: never;
       cookie?: never;
     };
+    get?: never;
+    put?: never;
     /**
-     * Start OIDC step-up re-authentication
-     * @description Begins a step-up re-authentication with a provider already linked to the authenticated account, and returns the provider authorize URL. On consent, the callback mints a short-lived, single-use proof required to add a credential (set a first password, or link a new provider).
+     * Mint a desktop app token
+     * @description Mints a long-lived native-app session token for the authenticated account, to be delivered to the desktop app via the given desktop deep-link. Requires an active browser session (the desktop login completes in the browser first). The `redirectUri` must be a configured desktop scheme.
      */
-    get: {
+    post: {
       parameters: {
-        query?: {
-          /**
-           * @description A step-up re-authentication proof. Required to start a *link* (adding a
-           *     provider is a credential-adding action, so a live session alone is not
-           *     enough); ignored for sign-in and reauth.
-           */
-          reauthProof?: string;
-          /**
-           * @description Frontend URL to return to once done. Carried through the flow and used to
-           *     build the callback's redirect.
-           */
-          redirectUri?: string;
-        };
+        query?: never;
         header?: never;
-        path: {
-          /** @description The identity provider to act on. */
-          provider: components["schemas"]["IdentityProvider"];
-        };
+        path?: never;
         cookie?: never;
       };
-      requestBody?: never;
+      /**
+       * @description Request payload to mint a native-app (desktop) session token.
+       *
+       *     Called by the frontend after a normal browser (cookie) login when the login
+       *     was initiated by the desktop app: it exchanges the just-established session for
+       *     a long-lived `app` token the frontend then hands to the app via the
+       *     `redirectUri` deep-link. The `redirectUri` must be a registered desktop scheme
+       *     (e.g. `nvisy://…`), so a token cannot be minted toward a web origin.
+       */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["DesktopTokenRequest"];
+        };
+      };
       responses: {
-        /** @description The response to a successful sign-in start: where to send the user. */
+        /**
+         * @description The result of minting a native-app (desktop) session token.
+         *
+         *     The frontend hands `apiToken` to the desktop app via the `redirectUri`
+         *     deep-link (`{redirectUri}?token={apiToken}`); the app stores it and sends it as
+         *     an `Authorization: Bearer` credential. Browser web sessions use cookies
+         *     instead and return no token.
+         */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["OidcStartResponse"];
+            "application/json": components["schemas"]["DesktopToken"];
           };
         };
         /**
@@ -9787,7 +10472,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        401: {
+        400: {
           headers: {
             [name: string]: unknown;
           };
@@ -9802,7 +10487,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        401: {
           headers: {
             [name: string]: unknown;
           };
@@ -9810,25 +10495,26 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        503: {
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ErrorResponse"];
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
           };
         };
       };
     };
-    put?: never;
-    post?: never;
     delete?: never;
     options?: never;
     head?: never;
@@ -10531,6 +11217,18 @@ interface components {
       data: components["schemas"]["ConnectionActivityParams"];
       /** @constant */
       type: "connection.sync.failed";
+    } | {
+      data: components["schemas"]["ProviderActivityParams"];
+      /** @constant */
+      type: "provider.created";
+    } | {
+      data: components["schemas"]["ProviderActivityParams"];
+      /** @constant */
+      type: "provider.updated";
+    } | {
+      data: components["schemas"]["ProviderActivityParams"];
+      /** @constant */
+      type: "provider.deleted";
     } | {
       data: components["schemas"]["WebhookActivityParams"];
       /** @constant */
@@ -10603,7 +11301,7 @@ interface components {
      *     to categorize different types of activities that occur within workspaces for comprehensive
      *     audit trail and activity tracking.
      */
-    ActivityType: "workspace.created" | "workspace.updated" | "workspace.deleted" | "member.added" | "member.updated" | "member.deleted" | "invite.created" | "invite.accepted" | "invite.declined" | "invite.canceled" | "connection.created" | "connection.updated" | "connection.deleted" | "connection.sync.started" | "connection.sync.completed" | "connection.sync.failed" | "webhook.created" | "webhook.updated" | "webhook.deleted" | "file.created" | "file.updated" | "file.deleted" | "pipeline.created" | "pipeline.updated" | "pipeline.deleted" | "pipeline.detection.started" | "pipeline.detection.completed" | "pipeline.detection.failed" | "pipeline.redaction.created" | "policy.created" | "policy.updated" | "policy.deleted";
+    ActivityType: "workspace.created" | "workspace.updated" | "workspace.deleted" | "member.added" | "member.updated" | "member.deleted" | "invite.created" | "invite.accepted" | "invite.declined" | "invite.canceled" | "connection.created" | "connection.updated" | "connection.deleted" | "connection.sync.started" | "connection.sync.completed" | "connection.sync.failed" | "provider.created" | "provider.updated" | "provider.deleted" | "webhook.created" | "webhook.updated" | "webhook.deleted" | "file.created" | "file.updated" | "file.deleted" | "pipeline.created" | "pipeline.updated" | "pipeline.deleted" | "pipeline.detection.started" | "pipeline.detection.completed" | "pipeline.detection.failed" | "pipeline.redaction.created" | "policy.created" | "policy.updated" | "policy.deleted";
     /** @description API token response structure. */
     ApiToken: {
       /**
@@ -10662,7 +11360,7 @@ interface components {
      *     This enumeration corresponds to the `API_TOKEN_TYPE` PostgreSQL enum and is used
      *     to categorize different types of authentication tokens based on the client type.
      */
-    ApiTokenType: "web" | "api" | "cli";
+    ApiTokenType: "web" | "api" | "app";
     /** @description API token with JWT token string (only returned on creation). */
     ApiTokenWithJWT: {
       /** @description Human-readable display name for the API token. */
@@ -11675,6 +12373,8 @@ interface components {
      *     Only metadata about the connection is returned.
      */
     Connection: {
+      /** @description Capability category of the connection (object store, file service). */
+      connectionType: components["schemas"]["ConnectionType"];
       /**
        * Format: date-time
        * @description When the connection was created.
@@ -11688,11 +12388,19 @@ interface components {
       id: components["schemas"]["ConnectionId"];
       /** @description Whether the connection is enabled. */
       isActive: boolean;
-      /** @description Provider identifier (`s3`, `azure`, `gcs`, `openai`, `ollama`, ...). */
+      /**
+       * Format: date-time
+       * @description When the connection last synced successfully, if ever. Independent of
+       *     `sync`: a connection with no schedule still records its on-demand syncs.
+       */
+      lastSyncedAt?: string;
+      /** @description Provider identifier (`s3`, `azure`, `gcs`, `google_drive`, `dropbox`, ...). */
       provider: string;
-      /** @description Capability category of the provider (object store, language model, ...). */
-      providerType: components["schemas"]["ProviderType"];
-      /** @description Sync configuration; present only for sync-capable connections. */
+      /**
+       * @description Scheduled-sync configuration; present only for connections that sync on a
+       *     timer. Its absence does not mean the connection cannot sync — a file
+       *     service and an unscheduled object store both transfer on demand.
+       */
       sync?: components["schemas"]["SyncSchedule"];
       /**
        * Format: date-time
@@ -11710,12 +12418,12 @@ interface components {
       connectionName: string;
     };
     /**
-     * @description A fully-typed connection configuration for any capability.
+     * @description A fully-typed transfer-connection configuration.
      *
      *     Untagged: the two inner enums have disjoint `provider` values, so serde
      *     resolves the variant from the flat payload without an outer discriminator.
      */
-    ConnectionConfig: components["schemas"]["StorageConfig"] | components["schemas"]["FileServiceConfig"] | components["schemas"]["LlmConfig"];
+    ConnectionConfig: components["schemas"]["StorageConfig"] | components["schemas"]["FileServiceConfig"];
     /** @description Opaque conn identifier (conn_<uuid>). */
     ConnectionId: string;
     /**
@@ -11835,6 +12543,17 @@ interface components {
        */
       syncId: string;
     };
+    /**
+     * @description The capability category of a transfer connection.
+     *
+     *     Corresponds to the `CONNECTION_TYPE` PostgreSQL enum. A stable, closed set:
+     *     the concrete provider (the `provider` column, e.g. `s3`) stays open and
+     *     extensible, while its capability is one of these types. Both categories are
+     *     transfer-capable — an object store is enumerable and syncs on a timer; a file
+     *     service transfers on demand. Inference services are a separate resource
+     *     (`workspace_providers`), not a connection.
+     */
+    ConnectionType: "object_store" | "file_service";
     /** @description Result of a connection reachability check. */
     ConnectionVerification: {
       /** @description Failure reason when not reachable; omitted on success. */
@@ -11931,8 +12650,8 @@ interface components {
        */
       isActive?: boolean;
       /**
-       * @description Sync configuration. Applies only to sync-capable providers (object
-       *     stores); rejected for others. Omit for manual-only defaults.
+       * @description Scheduled-sync configuration. Accepted only for schedulable providers
+       *     (object stores); rejected for others. Omit for on-demand only.
        */
       sync?: components["schemas"]["SyncScheduleInput"];
     };
@@ -12027,6 +12746,22 @@ interface components {
       /** @constant */
       source: "inline";
     });
+    /** @description Request payload for creating a new workspace provider. */
+    CreateProvider: {
+      /**
+       * @description Typed provider configuration (provider tag + its credentials), encrypted at
+       *     rest. The `provider` tag selects which credential shape is required and
+       *     which model type the provider has.
+       */
+      config: components["schemas"]["ProviderConfig"];
+      /** @description Human-readable provider display name. */
+      displayName: string;
+      /**
+       * @description Whether the provider is enabled. Omit to default to active; set `false` to
+       *     create it disabled.
+       */
+      isActive?: boolean;
+    };
     /** @description Request payload for creating a new workspace webhook. */
     CreateWebhook: {
       /** @description Detailed description of the webhook's purpose (max 500 characters). */
@@ -12227,6 +12962,36 @@ interface components {
        */
       skipped: string[];
     };
+    /**
+     * @description The result of minting a native-app (desktop) session token.
+     *
+     *     The frontend hands `apiToken` to the desktop app via the `redirectUri`
+     *     deep-link (`{redirectUri}?token={apiToken}`); the app stores it and sends it as
+     *     an `Authorization: Bearer` credential. Browser web sessions use cookies
+     *     instead and return no token.
+     */
+    DesktopToken: {
+      /** @description The signed `app` JWT to send as a Bearer token. */
+      apiToken: string;
+      /** @description The desktop deep-link the token should be delivered on, echoed back. */
+      redirectUri: string;
+    };
+    /**
+     * @description Request payload to mint a native-app (desktop) session token.
+     *
+     *     Called by the frontend after a normal browser (cookie) login when the login
+     *     was initiated by the desktop app: it exchanges the just-established session for
+     *     a long-lived `app` token the frontend then hands to the app via the
+     *     `redirectUri` deep-link. The `redirectUri` must be a registered desktop scheme
+     *     (e.g. `nvisy://…`), so a token cannot be minted toward a web origin.
+     */
+    DesktopTokenRequest: {
+      /**
+       * @description The desktop deep-link the app will receive the token on. Must match a
+       *     configured desktop redirect scheme.
+       */
+      redirectUri: string;
+    };
     /**
      * @description Response type for a detection.
      *
@@ -12712,7 +13477,7 @@ interface components {
      */
     FileServiceConfig: {
       /** @description Which provider backs this connection. */
-      provider: components["schemas"]["Provider"];
+      provider: components["schemas"]["FileServiceProvider"];
       /**
        * @description The folder (id or path) new exports are written into; `None` uses the
        *     account root.
@@ -12721,6 +13486,13 @@ interface components {
       /** @description The OAuth token set for this connection. */
       tokens: components["schemas"]["OAuthTokens"];
     };
+    /**
+     * @description A supported cloud file-service provider.
+     *
+     *     The serialized form (snake_case) is the `provider` tag stored on a connection
+     *     and used in the API, so every provider name lives in exactly one place.
+     */
+    FileServiceProvider: "google_drive" | "dropbox" | "one_drive" | "box";
     /**
      * @description A supported file extension.
      * @enum {string}
@@ -13426,6 +14198,16 @@ interface components {
       /** @description The files to import. Already-imported files are skipped. */
       files: components["schemas"]["PickedFile"][];
     };
+    /**
+     * @description A fully-typed inference connection configuration, across every inference kind.
+     *
+     *     Inference is a family: a language model for chat today, and other model kinds
+     *     (e.g. named-entity recognition) as they are added. Each kind owns its own
+     *     config with its own `provider` tag, and this enum is untagged, so the flat
+     *     payload's `provider` remains the sole discriminator — an inference kind is
+     *     added as a new variant with no change to the wire format or storage.
+     */
+    InferenceConfig: components["schemas"]["LlmConfig"];
     /**
      * @description Workspace invite with complete information.
      *
@@ -14217,12 +14999,12 @@ interface components {
     };
     /**
      * @description Path parameters for the OAuth start endpoint: which cloud file provider to
-     *     begin authorizing. The provider is the crate's [`Provider`], so the API and
+     *     begin authorizing. The provider is the crate's [`FileServiceProvider`], so the API and
      *     stored config name each provider identically.
      */
     OAuthStartPathParams: {
       /** @description The cloud file provider to connect. */
-      provider: components["schemas"]["Provider"];
+      provider: components["schemas"]["FileServiceProvider"];
     };
     /** @description The response to a successful authorization start: where to send the user. */
     OAuthStartResponse: {
@@ -14370,6 +15152,22 @@ interface components {
        */
       expiresAt?: number;
     };
+    /**
+     * @description Body for minting a browser file-picker token.
+     *
+     *     The OneDrive v8 picker requests a token per resource (it names the resource in
+     *     each `authenticate` command); the caller passes that `resource` so the server
+     *     mints a token scoped to exactly it. Ignored by providers whose picker takes a
+     *     single provider token (Google Drive, Box); omit it for those.
+     */
+    PickerTokenRequest: {
+      /**
+       * @description The resource the picker asked for (its `authenticate` command's
+       *     `resource`), e.g. `https://contoso-my.sharepoint.com`. Optional; when
+       *     absent the server uses the connection's default picker resource.
+       */
+      resource?: string;
+    };
     /** @description Pipeline response. */
     Pipeline: {
       /**
@@ -14951,22 +15749,105 @@ interface components {
       not: components["schemas"]["Predicate"];
     };
     /**
-     * @description A supported cloud file-service provider.
+     * @description Response type for a workspace inference provider.
      *
-     *     The serialized form (snake_case) is the `provider` tag stored on a connection
-     *     and used in the API, so every provider name lives in exactly one place.
+     *     Note: The encrypted provider data is never exposed in API responses. Only
+     *     metadata about the provider is returned.
+     */
+    Provider: {
+      /**
+       * Format: date-time
+       * @description When the provider was created.
+       */
+      createdAt: string;
+      /** @description Account that created this provider. */
+      createdBy: components["schemas"]["AccountRef"];
+      /** @description Human-readable provider display name. */
+      displayName: string;
+      /** @description Opaque identifier of the provider. */
+      id: components["schemas"]["ProviderId"];
+      /** @description Whether the provider is enabled. */
+      isActive: boolean;
+      /** @description Provider identifier (`openai`, `ollama`, `anthropic`, ...). */
+      provider: string;
+      /** @description Inference model type of the provider (llm, ner). */
+      providerType: components["schemas"]["ProviderType"];
+      /**
+       * Format: date-time
+       * @description When the provider was last updated.
+       */
+      updatedAt: string;
+      /** @description Handle of the workspace this provider belongs to. */
+      workspaceSlug: components["schemas"]["Handle"];
+    };
+    /** @description Params of a provider activity (`provider.*`). */
+    ProviderActivityParams: {
+      /** @description Id of the provider. */
+      providerId: components["schemas"]["ProviderId"];
+      /** @description Display name of the provider. */
+      providerName: string;
+    };
+    /**
+     * @description A fully-typed inference-provider configuration.
+     *
+     *     Untagged: the inner config's `provider` tag is the sole discriminator, so the
+     *     stored/wire form is flat. A new inference kind is added as a variant of
+     *     [`InferenceConfig`] with no change here.
+     */
+    ProviderConfig: components["schemas"]["InferenceConfig"];
+    /** @description Opaque prov identifier (prov_<uuid>). */
+    ProviderId: string;
+    /**
+     * @description Generic paginated response wrapper.
+     *
+     *     Provides a consistent structure for all paginated API responses with
+     *     cursor-based pagination support. When `next_cursor` is present, there
+     *     are more items to fetch.
+     */
+    ProviderPage: {
+      /** @description Items in this page. */
+      items: components["schemas"]["Provider"][];
+      /** @description Cursor to fetch the next page. Present only when more items exist. */
+      nextCursor?: string;
+      /**
+       * Format: int64
+       * @description Total count of items matching the query (if requested).
+       */
+      total?: number;
+    };
+    /**
+     * @description Path parameters for provider operations.
+     *
+     *     The workspace is resolved separately from the `{workspaceSlug}` segment by the
+     *     [`WorkspaceContext`] extractor.
+     *
+     *     [`WorkspaceContext`]: crate::extract::WorkspaceContext
      */
-    Provider: "google_drive" | "dropbox" | "one_drive" | "box";
+    ProviderPathParams: {
+      /** @description Opaque identifier of the provider. */
+      providerId: components["schemas"]["ProviderId"];
+    };
     /**
-     * @description The capability category of a connection's provider.
+     * @description The inference model type backing a workspace provider.
      *
-     *     Corresponds to the `PROVIDER_TYPE` PostgreSQL enum. A stable, closed set:
-     *     the concrete provider (the `provider` column, e.g. `s3` or `anthropic`) stays
-     *     open and extensible, while its capability is one of these types. Lets a
-     *     connection be found by what it can do — e.g. a workspace's language model —
-     *     without decrypting its config.
+     *     Corresponds to the `PROVIDER_TYPE` PostgreSQL enum. A workspace provider is an
+     *     inference service the platform calls; this says which kind of model it is — a
+     *     language model for chat, or a named-entity-recognition model for extraction.
+     *     The concrete vendor (the `provider` column, e.g. `openai`) is orthogonal and
+     *     stays open; this type is a stable, closed set used to find a workspace's
+     *     provider of a given type without decrypting its config.
      */
-    ProviderType: "object_store" | "language_model" | "file_service";
+    ProviderType: "llm" | "ner";
+    /** @description Query parameters for listing providers. */
+    ProvidersQuery: {
+      /**
+       * @description Filter by provider (`openai`, `ollama`, `anthropic`). Repeatable; a
+       *     provider matches if it uses any of the given providers. Empty means no
+       *     filter.
+       * @default []
+       */
+      provider?: string[];
+    };
     /**
      * @description Public view of an account, returned when looking up someone other than the
      *     authenticated caller. Carries only the fields safe to share with a
@@ -15670,11 +16551,16 @@ interface components {
       reason?: string;
     };
     /**
-     * @description What an import does with a file whose source object no longer exists.
+     * @description What a whole-listing import does with a file whose source object no longer
+     *     exists.
      *
-     *     Corresponds to the `SYNC_DELETION_POLICY` PostgreSQL enum. Deletion is opt-in
-     *     per connection: the default `Ignore` keeps imports strictly additive so a
-     *     transient listing error or a misconfigured root path can never remove files.
+     *     Corresponds to the `SYNC_DELETION_POLICY` PostgreSQL enum. Only whole-listing
+     *     import reconciles deletions (it compares the full source listing against what
+     *     was imported), so this applies to object-store import alone; picker-driven
+     *     file-service import transfers only the files the user selected and never
+     *     reconciles. Deletion is opt-in per connection: the default `Ignore` keeps
+     *     imports strictly additive so a transient listing error or a misconfigured
+     *     root path can never remove files.
      */
     SyncDeletionPolicy: "ignore" | "delete";
     /**
@@ -15682,27 +16568,34 @@ interface components {
      *
      *     Corresponds to the `SYNC_MODE` PostgreSQL enum: `Import` fetches objects from
      *     the connection into the workspace; `Export` pushes workspace files out.
+     *
+     *     A scheduled `Import` is an object-store concept: it enumerates the source and
+     *     pulls the whole listing on a timer. A file service is not enumerated on a
+     *     timer — its import is picker-driven and request-time — so only `Export` is
+     *     scheduled for a file service.
      */
     SyncMode: "import" | "export";
-    /** @description A connection's sync configuration, present only for sync-capable connections. */
+    /**
+     * @description A connection's scheduled-sync configuration (its cron config), present only
+     *     for connections that sync on a timer. A connection can transfer on demand
+     *     without this — it is purely the schedule, not a capability marker. When the
+     *     connection last synced is on [`Connection`] itself, since a connection with no
+     *     schedule still syncs.
+     */
     SyncSchedule: {
       /** @description How an import reconciles files whose source object was deleted. */
       deletionPolicy: components["schemas"]["SyncDeletionPolicy"];
-      /**
-       * Format: date-time
-       * @description When the connection last synced successfully, if ever.
-       */
-      lastSynced?: string;
       /** @description Cron expression for scheduled imports, if configured. */
       scheduleCron?: string;
       /** @description Whether the connection imports data in or exports data out. */
       syncMode: components["schemas"]["SyncMode"];
     };
     /**
-     * @description Sync configuration for a sync-capable connection (object stores).
+     * @description Scheduled-sync configuration for a schedulable connection.
      *
-     *     Only meaningful for connections whose provider supports syncing; omitted for
-     *     connections that do not (e.g. LLM inference).
+     *     Accepted only for providers that can sync on a timer (object stores); rejected
+     *     for others — a file service transfers on demand (picker import, per-file
+     *     export), and an LLM does not transfer at all. Omit for on-demand only.
      */
     SyncScheduleInput: {
       /**
@@ -15728,10 +16621,12 @@ interface components {
     /**
      * @description Defines how a connection sync run was initiated.
      *
-     *     This enumeration corresponds to the `SYNC_TRIGGER_TYPE` PostgreSQL enum and is used
-     *     to track whether a run was manually triggered, scheduled, or triggered by a webhook.
+     *     Corresponds to the `SYNC_TRIGGER_TYPE` PostgreSQL enum. The axis is who
+     *     initiated the run: the connection's own schedule, or anything else — a user,
+     *     the SDK, an external automation (Zapier and the like). The latter is
+     *     `OnDemand`, which covers every non-scheduled trigger, not only a human click.
      */
-    SyncTriggerType: "manual" | "scheduled" | "webhook";
+    SyncTriggerType: "on_demand" | "scheduled";
     /**
      * @description A detection recognition missed.
      *
@@ -17232,8 +18127,8 @@ interface components {
        */
       isActive?: boolean;
       /**
-       * @description Sync configuration. Applies only to sync-capable providers. Omit to leave
-       *     unchanged.
+       * @description Scheduled-sync configuration. Accepted only for schedulable providers
+       *     (object stores); rejected for others. Omit to leave unchanged.
        */
       sync?: components["schemas"]["SyncScheduleInput"];
     };
@@ -17294,6 +18189,18 @@ interface components {
       /** @description Human-readable policy display name. */
       displayName?: string;
     };
+    /** @description Request payload for updating an existing workspace provider. */
+    UpdateProvider: {
+      /**
+       * @description Typed provider configuration. If provided, fully replaces the stored config
+       *     (and, with it, the provider). Omit to leave it unchanged.
+       */
+      config?: components["schemas"]["ProviderConfig"];
+      /** @description Human-readable provider display name. */
+      displayName?: string;
+      /** @description Whether the provider is enabled. Omit to leave unchanged. */
+      isActive?: boolean;
+    };
     /** @description Request payload for updating an existing workspace webhook. */
     UpdateWebhook: {
       /** @description Updated description of the webhook's purpose (max 500 characters). */
@@ -17529,7 +18436,7 @@ interface components {
      *     This enumeration corresponds to the `WEBHOOK_EVENT` PostgreSQL enum and is used
      *     to configure which events a webhook should receive notifications for.
      */
-    WebhookEvent: "file.created" | "file.updated" | "file.deleted" | "member.added" | "member.deleted" | "member.updated" | "connection.created" | "connection.updated" | "connection.deleted" | "connection.sync.started" | "connection.sync.completed" | "connection.sync.failed" | "pipeline.created" | "pipeline.updated" | "pipeline.deleted" | "pipeline.detection.started" | "pipeline.detection.completed" | "pipeline.detection.failed" | "pipeline.redaction.created" | "policy.created" | "policy.updated" | "policy.deleted";
+    WebhookEvent: "file.created" | "file.updated" | "file.deleted" | "member.added" | "member.deleted" | "member.updated" | "connection.created" | "connection.updated" | "connection.deleted" | "connection.sync.started" | "connection.sync.completed" | "connection.sync.failed" | "provider.created" | "provider.updated" | "provider.deleted" | "pipeline.created" | "pipeline.updated" | "pipeline.deleted" | "pipeline.detection.started" | "pipeline.detection.completed" | "pipeline.detection.failed" | "pipeline.redaction.created" | "policy.created" | "policy.updated" | "policy.deleted";
     /** @description Opaque whk identifier (whk_<uuid>). */
     WebhookId: string;
     /**
@@ -17741,378 +18648,393 @@ interface components {
 }
 //#endregion
 //#region src/datatypes/account.d.ts
-type Schemas$23 = components["schemas"];
-type Handle = Schemas$23["Handle"];
-type Account = Schemas$23["Account"];
-type PublicAccount = Schemas$23["PublicAccount"];
-type UpdateAccount = Schemas$23["UpdateAccount"];
-type AccountRef = Schemas$23["AccountRef"];
-type AccountIdentities = Schemas$23["AccountIdentities"];
-type AccountIdentity = Schemas$23["AccountIdentity"];
-type IdentityProvider = Schemas$23["IdentityProvider"];
-type SetPassword = Schemas$23["SetPassword"];
-type OidcStartResponse = Schemas$23["OidcStartResponse"];
+type Schemas$24 = components["schemas"];
+type Handle = Schemas$24["Handle"];
+type Account = Schemas$24["Account"];
+type PublicAccount = Schemas$24["PublicAccount"];
+type UpdateAccount = Schemas$24["UpdateAccount"];
+type AccountRef = Schemas$24["AccountRef"];
+type AccountIdentities = Schemas$24["AccountIdentities"];
+type AccountIdentity = Schemas$24["AccountIdentity"];
+type IdentityProvider = Schemas$24["IdentityProvider"];
+type SetPassword = Schemas$24["SetPassword"];
+type OidcStartResponse = Schemas$24["OidcStartResponse"];
 //#endregion
 //#region src/datatypes/activity.d.ts
-type Schemas$22 = components["schemas"];
-type Activity = Schemas$22["Activity"];
-type ActivityPage = Schemas$22["ActivityPage"];
-type ActivityType = Schemas$22["ActivityType"];
-type ActivityFilterQuery = Schemas$22["ActivityFilterQuery"];
-type ActivityExportOptions = Schemas$22["ActivityExportOptions"];
-type ActivityPayload = Schemas$22["ActivityPayload"];
-type WorkspaceActivityParams = Schemas$22["WorkspaceActivityParams"];
-type MemberActivityParams = Schemas$22["MemberActivityParams"];
-type InviteActivityParams = Schemas$22["InviteActivityParams"];
-type ConnectionActivityParams = Schemas$22["ConnectionActivityParams"];
-type PipelineActivityParams = Schemas$22["PipelineActivityParams"];
-type DetectionActivityParams = Schemas$22["DetectionActivityParams"];
-type RedactionActivityParams = Schemas$22["RedactionActivityParams"];
-type PolicyActivityParams = Schemas$22["PolicyActivityParams"];
-type FileActivityParams = Schemas$22["FileActivityParams"];
-type WebhookActivityParams = Schemas$22["WebhookActivityParams"];
+type Schemas$23 = components["schemas"];
+type Activity = Schemas$23["Activity"];
+type ActivityPage = Schemas$23["ActivityPage"];
+type ActivityType = Schemas$23["ActivityType"];
+type ActivityFilterQuery = Schemas$23["ActivityFilterQuery"];
+type ActivityExportOptions = Schemas$23["ActivityExportOptions"];
+type ActivityPayload = Schemas$23["ActivityPayload"];
+type WorkspaceActivityParams = Schemas$23["WorkspaceActivityParams"];
+type MemberActivityParams = Schemas$23["MemberActivityParams"];
+type InviteActivityParams = Schemas$23["InviteActivityParams"];
+type ConnectionActivityParams = Schemas$23["ConnectionActivityParams"];
+type PipelineActivityParams = Schemas$23["PipelineActivityParams"];
+type DetectionActivityParams = Schemas$23["DetectionActivityParams"];
+type RedactionActivityParams = Schemas$23["RedactionActivityParams"];
+type PolicyActivityParams = Schemas$23["PolicyActivityParams"];
+type FileActivityParams = Schemas$23["FileActivityParams"];
+type WebhookActivityParams = Schemas$23["WebhookActivityParams"];
 //#endregion
 //#region src/datatypes/analytics.d.ts
-type Schemas$21 = components["schemas"];
-type WorkspaceAnalytics = Schemas$21["WorkspaceAnalytics"];
-type StorageAnalytics = Schemas$21["StorageAnalytics"];
-type StorageKindEntry = Schemas$21["StorageKindEntry"];
-type DetectionAnalytics = Schemas$21["DetectionAnalytics"];
-type DetectionStatusEntry = Schemas$21["DetectionStatusEntry"];
-type UsageAnalytics = Schemas$21["UsageAnalytics"];
-type ModelUsage = Schemas$21["ModelUsage"];
-type ModelUsageEntry = Schemas$21["ModelUsageEntry"];
-type Usage = Schemas$21["Usage"];
-type UsageReport = Schemas$21["UsageReport"];
-type TokenCounts = Schemas$21["TokenCounts"];
-type ProviderType = Schemas$21["ProviderType"];
-type RecognizerId = Schemas$21["RecognizerId"];
-type DetectionTimeSeries = Schemas$21["DetectionTimeSeries"];
-type DetectionDayEntry = Schemas$21["DetectionDayEntry"];
+type Schemas$22 = components["schemas"];
+type WorkspaceAnalytics = Schemas$22["WorkspaceAnalytics"];
+type StorageAnalytics = Schemas$22["StorageAnalytics"];
+type StorageKindEntry = Schemas$22["StorageKindEntry"];
+type DetectionAnalytics = Schemas$22["DetectionAnalytics"];
+type DetectionStatusEntry = Schemas$22["DetectionStatusEntry"];
+type UsageAnalytics = Schemas$22["UsageAnalytics"];
+type ModelUsage = Schemas$22["ModelUsage"];
+type ModelUsageEntry = Schemas$22["ModelUsageEntry"];
+type Usage = Schemas$22["Usage"];
+type UsageReport = Schemas$22["UsageReport"];
+type TokenCounts = Schemas$22["TokenCounts"];
+type RecognizerId = Schemas$22["RecognizerId"];
+type DetectionTimeSeries = Schemas$22["DetectionTimeSeries"];
+type DetectionDayEntry = Schemas$22["DetectionDayEntry"];
 //#endregion
 //#region src/datatypes/api-token.d.ts
-type Schemas$20 = components["schemas"];
-type ApiToken = Schemas$20["ApiToken"];
-type ApiTokenWithJWT = Schemas$20["ApiTokenWithJWT"];
-type ApiTokenType = Schemas$20["ApiTokenType"];
-type CreateApiToken = Schemas$20["CreateApiToken"];
-type UpdateApiToken = Schemas$20["UpdateApiToken"];
-type TokenExpiration = Schemas$20["TokenExpiration"];
-type ApiTokenPage = Schemas$20["ApiTokenPage"];
+type Schemas$21 = components["schemas"];
+type ApiToken = Schemas$21["ApiToken"];
+type ApiTokenWithJWT = Schemas$21["ApiTokenWithJWT"];
+type ApiTokenType = Schemas$21["ApiTokenType"];
+type CreateApiToken = Schemas$21["CreateApiToken"];
+type UpdateApiToken = Schemas$21["UpdateApiToken"];
+type TokenExpiration = Schemas$21["TokenExpiration"];
+type ApiTokenPage = Schemas$21["ApiTokenPage"];
 //#endregion
 //#region src/datatypes/artifact.d.ts
-type Schemas$19 = components["schemas"];
-type ArtifactSet = Schemas$19["ArtifactSet"];
-type Layout = Schemas$19["Layout"];
-type LayoutBlock = Schemas$19["LayoutBlock"];
-type LayoutWord = Schemas$19["LayoutWord"];
-type Transcription = Schemas$19["Transcription"];
-type TranscriptSegment = Schemas$19["TranscriptSegment"];
-type TranscriptWord = Schemas$19["TranscriptWord"];
-type Tokens = Schemas$19["Tokens"];
-type Token = Schemas$19["Token"];
+type Schemas$20 = components["schemas"];
+type ArtifactSet = Schemas$20["ArtifactSet"];
+type Layout = Schemas$20["Layout"];
+type LayoutBlock = Schemas$20["LayoutBlock"];
+type LayoutWord = Schemas$20["LayoutWord"];
+type Transcription = Schemas$20["Transcription"];
+type TranscriptSegment = Schemas$20["TranscriptSegment"];
+type TranscriptWord = Schemas$20["TranscriptWord"];
+type Tokens = Schemas$20["Tokens"];
+type Token = Schemas$20["Token"];
 //#endregion
 //#region src/datatypes/audit.d.ts
-type Schemas$18 = components["schemas"];
-type Audit = Schemas$18["Audit"];
-type DocumentContext = Schemas$18["DocumentContext"];
-type CodecParams = Schemas$18["CodecParams"];
-type EntityCoRef = Schemas$18["EntityCoRef"];
-type Report = Schemas$18["Report"];
-type EditSet = Schemas$18["EditSet"];
-type RasterMode = Schemas$18["RasterMode"];
-type Dpi = Schemas$18["Dpi"];
-type Redaction = Schemas$18["Redaction"];
-type Selection = Schemas$18["Selection"];
-type Suppress = Schemas$18["Suppress"];
-type ManualIntent = Schemas$18["ManualIntent"];
-type LeakProfile = Schemas$18["LeakProfile"];
-type RuleMatch = Schemas$18["RuleMatch"];
-type Attribution = Schemas$18["Attribution"];
-type CitedAttribution = Schemas$18["CitedAttribution"];
-type FreeformAttribution = Schemas$18["FreeformAttribution"];
-type ModelEvent = Schemas$18["ModelEvent"];
-type PatternEvent = Schemas$18["PatternEvent"];
-type Conflict = Schemas$18["Conflict"];
-type Contested = Schemas$18["Contested"];
-type Deduplication = Schemas$18["Deduplication"];
-type Calibration = Schemas$18["Calibration"];
-type OperatorId = Schemas$18["OperatorId"];
-type AuditHash = Schemas$18["AuditHash"];
-type Category = Schemas$18["Category"];
+type Schemas$19 = components["schemas"];
+type Audit = Schemas$19["Audit"];
+type DocumentContext = Schemas$19["DocumentContext"];
+type CodecParams = Schemas$19["CodecParams"];
+type EntityCoRef = Schemas$19["EntityCoRef"];
+type Report = Schemas$19["Report"];
+type EditSet = Schemas$19["EditSet"];
+type RasterMode = Schemas$19["RasterMode"];
+type Dpi = Schemas$19["Dpi"];
+type Redaction = Schemas$19["Redaction"];
+type Selection = Schemas$19["Selection"];
+type Suppress = Schemas$19["Suppress"];
+type ManualIntent = Schemas$19["ManualIntent"];
+type LeakProfile = Schemas$19["LeakProfile"];
+type RuleMatch = Schemas$19["RuleMatch"];
+type Attribution = Schemas$19["Attribution"];
+type CitedAttribution = Schemas$19["CitedAttribution"];
+type FreeformAttribution = Schemas$19["FreeformAttribution"];
+type ModelEvent = Schemas$19["ModelEvent"];
+type PatternEvent = Schemas$19["PatternEvent"];
+type Conflict = Schemas$19["Conflict"];
+type Contested = Schemas$19["Contested"];
+type Deduplication = Schemas$19["Deduplication"];
+type Calibration = Schemas$19["Calibration"];
+type OperatorId = Schemas$19["OperatorId"];
+type AuditHash = Schemas$19["AuditHash"];
+type Category = Schemas$19["Category"];
 /** Half-open `[start, end)` index range. Generated name; a plain uint range. */
-type RangeOfUint = Schemas$18["Range_of_uint"];
-type SourceRef = Schemas$18["SourceRef"];
-type BoundingBox = Schemas$18["BoundingBox"];
-type Point = Schemas$18["Point"];
-type Polygon = Schemas$18["Polygon"];
-type Dimensions = Schemas$18["Dimensions"];
-type TimeSpan = Schemas$18["TimeSpan"];
-type TextEntity = Schemas$18["TextEntity"];
-type TextAuditEvent = Schemas$18["TextAuditEvent"];
-type TextAuditKind = Schemas$18["TextAuditKind"];
-type TextAuditLog = Schemas$18["TextAuditLog"];
-type TextHint = Schemas$18["TextHint"];
-type TextLocation = Schemas$18["TextLocation"];
-type TextCoord = Schemas$18["TextCoord"];
-type DecodedSpan = Schemas$18["DecodedSpan"];
-type SourceSpan = Schemas$18["SourceSpan"];
-type TextData = Schemas$18["TextData"];
-type TextModel = Schemas$18["TextModel"];
-type TextPattern = Schemas$18["TextPattern"];
-type TextManual = Schemas$18["TextManual"];
-type TextEdit = Schemas$18["TextEdit"];
-type TextAdd = Schemas$18["TextAdd"];
-type TextRefinement = Schemas$18["TextRefinement"];
-type TextRetag = Schemas$18["TextRetag"];
-type ImageEntity = Schemas$18["ImageEntity"];
-type ImageAuditEvent = Schemas$18["ImageAuditEvent"];
-type ImageAuditKind = Schemas$18["ImageAuditKind"];
-type ImageAuditLog = Schemas$18["ImageAuditLog"];
-type ImageHint = Schemas$18["ImageHint"];
-type ImageLocation = Schemas$18["ImageLocation"];
-type ImageData = Schemas$18["ImageData"];
-type ImageModel = Schemas$18["ImageModel"];
-type ImagePattern = Schemas$18["ImagePattern"];
-type ImageManual = Schemas$18["ImageManual"];
-type ImageEdit = Schemas$18["ImageEdit"];
-type ImageAdd = Schemas$18["ImageAdd"];
-type ImageRefinement = Schemas$18["ImageRefinement"];
-type ImageRetag = Schemas$18["ImageRetag"];
-type AudioEntity = Schemas$18["AudioEntity"];
-type AudioAuditEvent = Schemas$18["AudioAuditEvent"];
-type AudioAuditKind = Schemas$18["AudioAuditKind"];
-type AudioAuditLog = Schemas$18["AudioAuditLog"];
-type AudioHint = Schemas$18["AudioHint"];
-type AudioLocation = Schemas$18["AudioLocation"];
-type AudioData = Schemas$18["AudioData"];
-type AudioModel = Schemas$18["AudioModel"];
-type AudioPattern = Schemas$18["AudioPattern"];
-type AudioManual = Schemas$18["AudioManual"];
-type AudioEdit = Schemas$18["AudioEdit"];
-type AudioAdd = Schemas$18["AudioAdd"];
-type AudioRefinement = Schemas$18["AudioRefinement"];
-type AudioRetag = Schemas$18["AudioRetag"];
-type TabularEntity = Schemas$18["TabularEntity"];
-type TabularAuditEvent = Schemas$18["TabularAuditEvent"];
-type TabularAuditKind = Schemas$18["TabularAuditKind"];
-type TabularAuditLog = Schemas$18["TabularAuditLog"];
-type TabularHint = Schemas$18["TabularHint"];
-type TabularLocation = Schemas$18["TabularLocation"];
-type TabularModel = Schemas$18["TabularModel"];
-type TabularPattern = Schemas$18["TabularPattern"];
-type TabularManual = Schemas$18["TabularManual"];
-type TabularEdit = Schemas$18["TabularEdit"];
-type TabularAdd = Schemas$18["TabularAdd"];
-type TabularRefinement = Schemas$18["TabularRefinement"];
-type TabularRetag = Schemas$18["TabularRetag"];
+type RangeOfUint = Schemas$19["Range_of_uint"];
+type SourceRef = Schemas$19["SourceRef"];
+type BoundingBox = Schemas$19["BoundingBox"];
+type Point = Schemas$19["Point"];
+type Polygon = Schemas$19["Polygon"];
+type Dimensions = Schemas$19["Dimensions"];
+type TimeSpan = Schemas$19["TimeSpan"];
+type TextEntity = Schemas$19["TextEntity"];
+type TextAuditEvent = Schemas$19["TextAuditEvent"];
+type TextAuditKind = Schemas$19["TextAuditKind"];
+type TextAuditLog = Schemas$19["TextAuditLog"];
+type TextHint = Schemas$19["TextHint"];
+type TextLocation = Schemas$19["TextLocation"];
+type TextCoord = Schemas$19["TextCoord"];
+type DecodedSpan = Schemas$19["DecodedSpan"];
+type SourceSpan = Schemas$19["SourceSpan"];
+type TextData = Schemas$19["TextData"];
+type TextModel = Schemas$19["TextModel"];
+type TextPattern = Schemas$19["TextPattern"];
+type TextManual = Schemas$19["TextManual"];
+type TextEdit = Schemas$19["TextEdit"];
+type TextAdd = Schemas$19["TextAdd"];
+type TextRefinement = Schemas$19["TextRefinement"];
+type TextRetag = Schemas$19["TextRetag"];
+type ImageEntity = Schemas$19["ImageEntity"];
+type ImageAuditEvent = Schemas$19["ImageAuditEvent"];
+type ImageAuditKind = Schemas$19["ImageAuditKind"];
+type ImageAuditLog = Schemas$19["ImageAuditLog"];
+type ImageHint = Schemas$19["ImageHint"];
+type ImageLocation = Schemas$19["ImageLocation"];
+type ImageData = Schemas$19["ImageData"];
+type ImageModel = Schemas$19["ImageModel"];
+type ImagePattern = Schemas$19["ImagePattern"];
+type ImageManual = Schemas$19["ImageManual"];
+type ImageEdit = Schemas$19["ImageEdit"];
+type ImageAdd = Schemas$19["ImageAdd"];
+type ImageRefinement = Schemas$19["ImageRefinement"];
+type ImageRetag = Schemas$19["ImageRetag"];
+type AudioEntity = Schemas$19["AudioEntity"];
+type AudioAuditEvent = Schemas$19["AudioAuditEvent"];
+type AudioAuditKind = Schemas$19["AudioAuditKind"];
+type AudioAuditLog = Schemas$19["AudioAuditLog"];
+type AudioHint = Schemas$19["AudioHint"];
+type AudioLocation = Schemas$19["AudioLocation"];
+type AudioData = Schemas$19["AudioData"];
+type AudioModel = Schemas$19["AudioModel"];
+type AudioPattern = Schemas$19["AudioPattern"];
+type AudioManual = Schemas$19["AudioManual"];
+type AudioEdit = Schemas$19["AudioEdit"];
+type AudioAdd = Schemas$19["AudioAdd"];
+type AudioRefinement = Schemas$19["AudioRefinement"];
+type AudioRetag = Schemas$19["AudioRetag"];
+type TabularEntity = Schemas$19["TabularEntity"];
+type TabularAuditEvent = Schemas$19["TabularAuditEvent"];
+type TabularAuditKind = Schemas$19["TabularAuditKind"];
+type TabularAuditLog = Schemas$19["TabularAuditLog"];
+type TabularHint = Schemas$19["TabularHint"];
+type TabularLocation = Schemas$19["TabularLocation"];
+type TabularModel = Schemas$19["TabularModel"];
+type TabularPattern = Schemas$19["TabularPattern"];
+type TabularManual = Schemas$19["TabularManual"];
+type TabularEdit = Schemas$19["TabularEdit"];
+type TabularAdd = Schemas$19["TabularAdd"];
+type TabularRefinement = Schemas$19["TabularRefinement"];
+type TabularRetag = Schemas$19["TabularRetag"];
 //#endregion
 //#region src/datatypes/auth.d.ts
-type Schemas$17 = components["schemas"];
-type Login = Schemas$17["Login"];
-type Signup = Schemas$17["Signup"];
+type Schemas$18 = components["schemas"];
+type Login = Schemas$18["Login"];
+type Signup = Schemas$18["Signup"];
+type DesktopTokenRequest = Schemas$18["DesktopTokenRequest"];
+type DesktopToken = Schemas$18["DesktopToken"];
 //#endregion
 //#region src/datatypes/catalog.d.ts
-type Schemas$16 = components["schemas"];
+type Schemas$17 = components["schemas"];
 /** Registry of the deployment's built-in labels, keyed by id. */
-type LabelCatalog = Schemas$16["LabelCatalog"];
+type LabelCatalog = Schemas$17["LabelCatalog"];
 /** The engine's registered recognizers, grouped into NER and LLM. */
-type RecognizerCatalog = Schemas$16["RecognizerCatalog"];
-type RegisteredRecognizer = Schemas$16["RegisteredRecognizer"];
+type RecognizerCatalog = Schemas$17["RecognizerCatalog"];
+type RegisteredRecognizer = Schemas$17["RegisteredRecognizer"];
 /** Which connector families and providers this deployment can create. */
-type ConnectorCatalog = Schemas$16["ConnectorCatalog"];
-type FileProviders = Schemas$16["FileProviders"];
+type ConnectorCatalog = Schemas$17["ConnectorCatalog"];
+type FileProviders = Schemas$17["FileProviders"];
 //#endregion
 //#region src/datatypes/chat.d.ts
-type Schemas$15 = components["schemas"];
-type ChatSession = Schemas$15["ChatSession"];
-type ChatSessionPage = Schemas$15["ChatSessionPage"];
-type CreateChatSession = Schemas$15["CreateChatSession"];
-type ChatMessage = Schemas$15["ChatMessage"];
-type ChatRole = Schemas$15["ChatRole"];
-type SendChatMessage = Schemas$15["SendChatMessage"];
-type ChatToken = Schemas$15["ChatToken"];
+type Schemas$16 = components["schemas"];
+type ChatSession = Schemas$16["ChatSession"];
+type ChatSessionPage = Schemas$16["ChatSessionPage"];
+type CreateChatSession = Schemas$16["CreateChatSession"];
+type ChatMessage = Schemas$16["ChatMessage"];
+type ChatRole = Schemas$16["ChatRole"];
+type SendChatMessage = Schemas$16["SendChatMessage"];
+type ChatToken = Schemas$16["ChatToken"];
 //#endregion
 //#region src/datatypes/connection.d.ts
-type Schemas$14 = components["schemas"];
-type ConnectionId = Schemas$14["ConnectionId"];
-type Connection = Schemas$14["Connection"];
-type CreateConnection = Schemas$14["CreateConnection"];
-type UpdateConnection = Schemas$14["UpdateConnection"];
-type ConnectionsQuery = Schemas$14["ConnectionsQuery"];
-type ConnectionPage = Schemas$14["ConnectionPage"];
-type ConnectionSync = Schemas$14["ConnectionSync"];
-type ConnectionSyncPage = Schemas$14["ConnectionSyncPage"];
-type ConnectionVerification = Schemas$14["ConnectionVerification"];
-type ImportFiles = Schemas$14["ImportFiles"];
-type PickedFile = Schemas$14["PickedFile"];
-type ExportFiles = Schemas$14["ExportFiles"];
-type PickerToken = Schemas$14["PickerToken"];
-type SyncMode = Schemas$14["SyncMode"];
-type SyncStatus = Schemas$14["SyncStatus"];
-type SyncTriggerType = Schemas$14["SyncTriggerType"];
-type SyncDeletionPolicy = Schemas$14["SyncDeletionPolicy"];
-type ConnectionConfig = Schemas$14["ConnectionConfig"];
-type StorageConfig = Schemas$14["StorageConfig"];
-type S3Credentials = Schemas$14["S3Credentials"];
-type AzureCredentials = Schemas$14["AzureCredentials"];
-type GcsCredentials = Schemas$14["GcsCredentials"];
-type LlmConfig = Schemas$14["LlmConfig"];
-type AuthenticatedProvider = Schemas$14["AuthenticatedProvider"];
-type UnauthenticatedProvider = Schemas$14["UnauthenticatedProvider"];
-type Provider = Schemas$14["Provider"];
-type FileServiceConfig = Schemas$14["FileServiceConfig"];
-type OAuthTokens = Schemas$14["OAuthTokens"];
-type StartFileServiceOAuth = Schemas$14["StartFileServiceOAuth"];
-type OAuthStartResponse = Schemas$14["OAuthStartResponse"];
-type SyncSchedule = Schemas$14["SyncSchedule"];
-type SyncScheduleInput = Schemas$14["SyncScheduleInput"];
+type Schemas$15 = components["schemas"];
+type ConnectionId = Schemas$15["ConnectionId"];
+type Connection = Schemas$15["Connection"];
+type ConnectionType = Schemas$15["ConnectionType"];
+type CreateConnection = Schemas$15["CreateConnection"];
+type UpdateConnection = Schemas$15["UpdateConnection"];
+type ConnectionsQuery = Schemas$15["ConnectionsQuery"];
+type ConnectionPage = Schemas$15["ConnectionPage"];
+type ConnectionSync = Schemas$15["ConnectionSync"];
+type ConnectionSyncPage = Schemas$15["ConnectionSyncPage"];
+type ConnectionVerification = Schemas$15["ConnectionVerification"];
+type ImportFiles = Schemas$15["ImportFiles"];
+type PickedFile = Schemas$15["PickedFile"];
+type ExportFiles = Schemas$15["ExportFiles"];
+type PickerTokenRequest = Schemas$15["PickerTokenRequest"];
+type PickerToken = Schemas$15["PickerToken"];
+type SyncMode = Schemas$15["SyncMode"];
+type SyncStatus = Schemas$15["SyncStatus"];
+type SyncTriggerType = Schemas$15["SyncTriggerType"];
+type SyncDeletionPolicy = Schemas$15["SyncDeletionPolicy"];
+type ConnectionConfig = Schemas$15["ConnectionConfig"];
+type StorageConfig = Schemas$15["StorageConfig"];
+type S3Credentials = Schemas$15["S3Credentials"];
+type AzureCredentials = Schemas$15["AzureCredentials"];
+type GcsCredentials = Schemas$15["GcsCredentials"];
+type LlmConfig = Schemas$15["LlmConfig"];
+type AuthenticatedProvider = Schemas$15["AuthenticatedProvider"];
+type UnauthenticatedProvider = Schemas$15["UnauthenticatedProvider"];
+type FileServiceProvider = Schemas$15["FileServiceProvider"];
+type FileServiceConfig = Schemas$15["FileServiceConfig"];
+type OAuthTokens = Schemas$15["OAuthTokens"];
+type StartFileServiceOAuth = Schemas$15["StartFileServiceOAuth"];
+type OAuthStartResponse = Schemas$15["OAuthStartResponse"];
+type SyncSchedule = Schemas$15["SyncSchedule"];
+type SyncScheduleInput = Schemas$15["SyncScheduleInput"];
 //#endregion
 //#region src/datatypes/detection.d.ts
-type Schemas$13 = components["schemas"];
-type DetectionId = Schemas$13["DetectionId"];
-type Detection = Schemas$13["Detection"];
-type DetectionMetadata = Schemas$13["DetectionMetadata"];
-type CreateDetection = Schemas$13["CreateDetection"];
-type DetectionStatus = Schemas$13["DetectionStatus"];
-type DetectionPage = Schemas$13["DetectionPage"];
-type WorkspaceDetectionsQuery = Schemas$13["WorkspaceDetectionsQuery"];
-type PipelineDetectionsQuery = Schemas$13["PipelineDetectionsQuery"];
-type DetectionStatusEvent = Schemas$13["DetectionStatusEvent"];
-type RedactionId = Schemas$13["RedactionId"];
-type RedactDetection = Schemas$13["RedactDetection"];
-type RedactionResult = Schemas$13["RedactionResult"];
-type RedactionResultPage = Schemas$13["RedactionResultPage"];
+type Schemas$14 = components["schemas"];
+type DetectionId = Schemas$14["DetectionId"];
+type Detection = Schemas$14["Detection"];
+type DetectionMetadata = Schemas$14["DetectionMetadata"];
+type CreateDetection = Schemas$14["CreateDetection"];
+type DetectionStatus = Schemas$14["DetectionStatus"];
+type DetectionPage = Schemas$14["DetectionPage"];
+type WorkspaceDetectionsQuery = Schemas$14["WorkspaceDetectionsQuery"];
+type PipelineDetectionsQuery = Schemas$14["PipelineDetectionsQuery"];
+type DetectionStatusEvent = Schemas$14["DetectionStatusEvent"];
+type RedactionId = Schemas$14["RedactionId"];
+type RedactDetection = Schemas$14["RedactDetection"];
+type RedactionResult = Schemas$14["RedactionResult"];
+type RedactionResultPage = Schemas$14["RedactionResultPage"];
 //#endregion
 //#region src/datatypes/error.d.ts
-type Schemas$12 = components["schemas"];
-type ErrorResponse = Schemas$12["ErrorResponse"];
-type ValidationErrorDetail = Schemas$12["ValidationErrorDetail"];
+type Schemas$13 = components["schemas"];
+type ErrorResponse = Schemas$13["ErrorResponse"];
+type ValidationErrorDetail = Schemas$13["ValidationErrorDetail"];
 //#endregion
 //#region src/datatypes/export.d.ts
-type Schemas$11 = components["schemas"];
-type ExportFormat = Schemas$11["ExportFormat"];
-type ExportQuery = Schemas$11["ExportQuery"];
-type DateWindow = Schemas$11["DateWindow"];
+type Schemas$12 = components["schemas"];
+type ExportFormat = Schemas$12["ExportFormat"];
+type ExportQuery = Schemas$12["ExportQuery"];
+type DateWindow = Schemas$12["DateWindow"];
 //#endregion
 //#region src/datatypes/file.d.ts
-type Schemas$10 = components["schemas"];
-type File = Schemas$10["File"];
-type UpdateFile = Schemas$10["UpdateFile"];
-type FileKind = Schemas$10["FileKind"];
-type FileHash = Schemas$10["FileHash"];
-type FormatToken = Schemas$10["FormatToken"];
-type ModalityToken = Schemas$10["ModalityToken"];
-type ListFiles = Schemas$10["ListFiles"];
-type FilePage = Schemas$10["FilePage"];
-type DeleteFiles = Schemas$10["DeleteFiles"];
-type DeletedFiles = Schemas$10["DeletedFiles"];
+type Schemas$11 = components["schemas"];
+type File = Schemas$11["File"];
+type UpdateFile = Schemas$11["UpdateFile"];
+type FileKind = Schemas$11["FileKind"];
+type FileHash = Schemas$11["FileHash"];
+type FormatToken = Schemas$11["FormatToken"];
+type ModalityToken = Schemas$11["ModalityToken"];
+type ListFiles = Schemas$11["ListFiles"];
+type FilePage = Schemas$11["FilePage"];
+type DeleteFiles = Schemas$11["DeleteFiles"];
+type DeletedFiles = Schemas$11["DeletedFiles"];
 //#endregion
 //#region src/datatypes/health.d.ts
-type Schemas$9 = components["schemas"];
-type Health = Schemas$9["Health"];
-type HealthStatus = Schemas$9["HealthStatus"];
-type ComponentHealth = Schemas$9["ComponentHealth"];
+type Schemas$10 = components["schemas"];
+type Health = Schemas$10["Health"];
+type HealthStatus = Schemas$10["HealthStatus"];
+type ComponentHealth = Schemas$10["ComponentHealth"];
 //#endregion
 //#region src/datatypes/invite.d.ts
-type Schemas$8 = components["schemas"];
-type Invite = Schemas$8["Invite"];
-type InviteSent = Schemas$8["InviteSent"];
-type CreateInvite = Schemas$8["CreateInvite"];
-type ReplyInvite = Schemas$8["ReplyInvite"];
-type GenerateInviteCode = Schemas$8["GenerateInviteCode"];
-type InviteCode = Schemas$8["InviteCode"];
-type InviteStatus = Schemas$8["InviteStatus"];
-type InviteExpiration = Schemas$8["InviteExpiration"];
-type ListInvites = Schemas$8["ListInvites"];
-type InviteSortField = Schemas$8["InviteSortField"];
-type SortOrder = Schemas$8["SortOrder"];
-type InvitePreview = Schemas$8["InvitePreview"];
-type InvitePage = Schemas$8["InvitePage"];
+type Schemas$9 = components["schemas"];
+type Invite = Schemas$9["Invite"];
+type InviteSent = Schemas$9["InviteSent"];
+type CreateInvite = Schemas$9["CreateInvite"];
+type ReplyInvite = Schemas$9["ReplyInvite"];
+type GenerateInviteCode = Schemas$9["GenerateInviteCode"];
+type InviteCode = Schemas$9["InviteCode"];
+type InviteStatus = Schemas$9["InviteStatus"];
+type InviteExpiration = Schemas$9["InviteExpiration"];
+type ListInvites = Schemas$9["ListInvites"];
+type InviteSortField = Schemas$9["InviteSortField"];
+type SortOrder = Schemas$9["SortOrder"];
+type InvitePreview = Schemas$9["InvitePreview"];
+type InvitePage = Schemas$9["InvitePage"];
 //#endregion
 //#region src/datatypes/member.d.ts
-type Schemas$7 = components["schemas"];
-type Member = Schemas$7["Member"];
-type UpdateMember = Schemas$7["UpdateMember"];
-type ListMembers = Schemas$7["ListMembers"];
-type MemberSortField = Schemas$7["MemberSortField"];
-type MemberPage = Schemas$7["MemberPage"];
+type Schemas$8 = components["schemas"];
+type Member = Schemas$8["Member"];
+type UpdateMember = Schemas$8["UpdateMember"];
+type ListMembers = Schemas$8["ListMembers"];
+type MemberSortField = Schemas$8["MemberSortField"];
+type MemberPage = Schemas$8["MemberPage"];
 //#endregion
 //#region src/datatypes/notification.d.ts
-type Schemas$6 = components["schemas"];
-type Notification = Schemas$6["Notification"];
-type NotificationEvent = Schemas$6["NotificationEvent"];
-type NotificationSettings = Schemas$6["NotificationSettings"];
-type UpdateNotificationSettings = Schemas$6["UpdateNotificationSettings"];
-type UnreadStatus = Schemas$6["UnreadStatus"];
-type NotificationPage = Schemas$6["NotificationPage"];
-type MarkedReadStatus = Schemas$6["MarkedReadStatus"];
-type UnreadCountEvent = Schemas$6["UnreadCountEvent"];
-type NotificationPayload = Schemas$6["NotificationPayload"];
-type MemberInvitedParams = Schemas$6["MemberInvitedParams"];
-type MemberJoinedParams = Schemas$6["MemberJoinedParams"];
-type ConnectionSyncCompletedParams = Schemas$6["ConnectionSyncCompletedParams"];
-type ConnectionSyncFailedParams = Schemas$6["ConnectionSyncFailedParams"];
-type DetectionCompletedParams = Schemas$6["DetectionCompletedParams"];
-type DetectionFailedParams = Schemas$6["DetectionFailedParams"];
-type RedactionCreatedParams = Schemas$6["RedactionCreatedParams"];
+type Schemas$7 = components["schemas"];
+type Notification = Schemas$7["Notification"];
+type NotificationEvent = Schemas$7["NotificationEvent"];
+type NotificationSettings = Schemas$7["NotificationSettings"];
+type UpdateNotificationSettings = Schemas$7["UpdateNotificationSettings"];
+type UnreadStatus = Schemas$7["UnreadStatus"];
+type NotificationPage = Schemas$7["NotificationPage"];
+type MarkedReadStatus = Schemas$7["MarkedReadStatus"];
+type UnreadCountEvent = Schemas$7["UnreadCountEvent"];
+type NotificationPayload = Schemas$7["NotificationPayload"];
+type MemberInvitedParams = Schemas$7["MemberInvitedParams"];
+type MemberJoinedParams = Schemas$7["MemberJoinedParams"];
+type ConnectionSyncCompletedParams = Schemas$7["ConnectionSyncCompletedParams"];
+type ConnectionSyncFailedParams = Schemas$7["ConnectionSyncFailedParams"];
+type DetectionCompletedParams = Schemas$7["DetectionCompletedParams"];
+type DetectionFailedParams = Schemas$7["DetectionFailedParams"];
+type RedactionCreatedParams = Schemas$7["RedactionCreatedParams"];
 //#endregion
 //#region src/datatypes/pagination.d.ts
-type Schemas$5 = components["schemas"];
-type CursorPagination = Schemas$5["CursorPagination"];
+type Schemas$6 = components["schemas"];
+type CursorPagination = Schemas$6["CursorPagination"];
 //#endregion
 //#region src/datatypes/pipeline.d.ts
-type Schemas$4 = components["schemas"];
-type Pipeline = Schemas$4["Pipeline"];
-type CreatePipeline = Schemas$4["CreatePipeline"];
-type UpdatePipeline = Schemas$4["UpdatePipeline"];
-type PipelineDefinition = Schemas$4["PipelineDefinition"];
-type PipelineFilter = Schemas$4["PipelineFilter"];
-type PipelineStatus = Schemas$4["PipelineStatus"];
-type PipelineTriggerType = Schemas$4["PipelineTriggerType"];
-type PipelineSummary = Schemas$4["PipelineSummary"];
-type PipelineSummaryPage = Schemas$4["PipelineSummaryPage"];
+type Schemas$5 = components["schemas"];
+type Pipeline = Schemas$5["Pipeline"];
+type CreatePipeline = Schemas$5["CreatePipeline"];
+type UpdatePipeline = Schemas$5["UpdatePipeline"];
+type PipelineDefinition = Schemas$5["PipelineDefinition"];
+type PipelineFilter = Schemas$5["PipelineFilter"];
+type PipelineStatus = Schemas$5["PipelineStatus"];
+type PipelineTriggerType = Schemas$5["PipelineTriggerType"];
+type PipelineSummary = Schemas$5["PipelineSummary"];
+type PipelineSummaryPage = Schemas$5["PipelineSummaryPage"];
 //#endregion
 //#region src/datatypes/policy.d.ts
+type Schemas$4 = components["schemas"];
+type Policy = Schemas$4["Policy"];
+type PolicySummary = Schemas$4["PolicySummary"];
+type PolicySummaryPage = Schemas$4["PolicySummaryPage"];
+type PolicyDefinition = Schemas$4["PolicyDefinition"];
+type PolicyDraft = Schemas$4["PolicyDraft"];
+type CreatePolicy = Schemas$4["CreatePolicy"];
+type UpdatePolicy = Schemas$4["UpdatePolicy"];
+type PolicyRule = Schemas$4["PolicyRule"];
+type CustomMatcher = Schemas$4["CustomMatcher"];
+type PolicyTemplate = Schemas$4["PolicyTemplate"];
+type TemplateOrigin = Schemas$4["TemplateOrigin"];
+type HipaaDeidMethod = Schemas$4["HipaaDeidMethod"];
+type HipaaAccountNumbers = Schemas$4["HipaaAccountNumbers"];
+type GdprArticle9Treatment = Schemas$4["GdprArticle9Treatment"];
+type GdprSensitiveScope = Schemas$4["GdprSensitiveScope"];
+type PciDssPart = Schemas$4["PciDssPart"];
+type PciPanRender = Schemas$4["PciPanRender"];
+type Predicate = Schemas$4["Predicate"];
+type ModalityRedactions = Schemas$4["ModalityRedactions"];
+type TextRedaction = Schemas$4["TextRedaction"];
+type ImageRedaction = Schemas$4["ImageRedaction"];
+type AudioRedaction = Schemas$4["AudioRedaction"];
+type TabularRedaction = Schemas$4["TabularRedaction"];
+type LabelScope = Schemas$4["LabelScope"];
+type LabelEntry = Schemas$4["LabelEntry"];
+type LabelLocale = Schemas$4["LabelLocale"];
+type Label = Schemas$4["Label"];
+type LabelRef = Schemas$4["LabelRef"];
+type LocalizedText = Schemas$4["LocalizedText"];
+type Color = Schemas$4["Color"];
+type Waveform = Schemas$4["Waveform"];
+type ClampBucket = Schemas$4["ClampBucket"];
+type ConfidenceThreshold = Schemas$4["ConfidenceThreshold"];
+type DateStyle = Schemas$4["DateStyle"];
+type DateGranularity = Schemas$4["DateGranularity"];
+type LanguageTag = Schemas$4["LanguageTag"];
+type Sha2Algorithm = Schemas$4["Sha2Algorithm"];
+type TerminalFallback = Schemas$4["TerminalFallback"];
+//#endregion
+//#region src/datatypes/provider.d.ts
 type Schemas$3 = components["schemas"];
-type Policy = Schemas$3["Policy"];
-type PolicySummary = Schemas$3["PolicySummary"];
-type PolicySummaryPage = Schemas$3["PolicySummaryPage"];
-type PolicyDefinition = Schemas$3["PolicyDefinition"];
-type PolicyDraft = Schemas$3["PolicyDraft"];
-type CreatePolicy = Schemas$3["CreatePolicy"];
-type UpdatePolicy = Schemas$3["UpdatePolicy"];
-type PolicyRule = Schemas$3["PolicyRule"];
-type CustomMatcher = Schemas$3["CustomMatcher"];
-type PolicyTemplate = Schemas$3["PolicyTemplate"];
-type TemplateOrigin = Schemas$3["TemplateOrigin"];
-type HipaaDeidMethod = Schemas$3["HipaaDeidMethod"];
-type HipaaAccountNumbers = Schemas$3["HipaaAccountNumbers"];
-type GdprArticle9Treatment = Schemas$3["GdprArticle9Treatment"];
-type GdprSensitiveScope = Schemas$3["GdprSensitiveScope"];
-type PciDssPart = Schemas$3["PciDssPart"];
-type PciPanRender = Schemas$3["PciPanRender"];
-type Predicate = Schemas$3["Predicate"];
-type ModalityRedactions = Schemas$3["ModalityRedactions"];
-type TextRedaction = Schemas$3["TextRedaction"];
-type ImageRedaction = Schemas$3["ImageRedaction"];
-type AudioRedaction = Schemas$3["AudioRedaction"];
-type TabularRedaction = Schemas$3["TabularRedaction"];
-type LabelScope = Schemas$3["LabelScope"];
-type LabelEntry = Schemas$3["LabelEntry"];
-type LabelLocale = Schemas$3["LabelLocale"];
-type Label = Schemas$3["Label"];
-type LabelRef = Schemas$3["LabelRef"];
-type LocalizedText = Schemas$3["LocalizedText"];
-type Color = Schemas$3["Color"];
-type Waveform = Schemas$3["Waveform"];
-type ClampBucket = Schemas$3["ClampBucket"];
-type ConfidenceThreshold = Schemas$3["ConfidenceThreshold"];
-type DateStyle = Schemas$3["DateStyle"];
-type DateGranularity = Schemas$3["DateGranularity"];
-type LanguageTag = Schemas$3["LanguageTag"];
-type Sha2Algorithm = Schemas$3["Sha2Algorithm"];
-type TerminalFallback = Schemas$3["TerminalFallback"];
+type ProviderId = Schemas$3["ProviderId"];
+type Provider = Schemas$3["Provider"];
+type CreateProvider = Schemas$3["CreateProvider"];
+type UpdateProvider = Schemas$3["UpdateProvider"];
+type ProvidersQuery = Schemas$3["ProvidersQuery"];
+type ProviderPage = Schemas$3["ProviderPage"];
+type ProviderType = Schemas$3["ProviderType"];
+type ProviderConfig = Schemas$3["ProviderConfig"];
+type InferenceConfig = Schemas$3["InferenceConfig"];
 //#endregion
 //#region src/datatypes/scope.d.ts
 type Schemas$2 = components["schemas"];
@@ -18150,5 +19072,5 @@ type Retention = Schemas["Retention"];
 type RetentionSettings = Schemas["RetentionSettings"];
 type RetentionOverride = Schemas["RetentionOverride"];
 //#endregion
-export { PolicyDraft as $, WebhookActivityParams as $a, TextEntity as $i, Provider as $n, Dpi as $r, ListInvites as $t, Color as A, ProviderType as Aa, SourceRef as Ai, RedactionResult as An, AudioData as Ar, NotificationEvent as At, ImageRedaction as B, ActivityExportOptions as Ba, TabularLocation as Bi, ConnectionSyncPage as Bn, Audit as Br, MemberPage as Bt, Language as C, UpdateApiToken as Ca, Polygon as Ci, DetectionMetadata as Cn, Login as Cr, ConnectionSyncFailedParams as Ct, ScopeMetadata as D, DetectionTimeSeries as Da, Report as Di, PipelineDetectionsQuery as Dn, AudioAuditEvent as Dr, MemberInvitedParams as Dt, Languages as E, DetectionStatusEntry as Ea, Redaction as Ei, DetectionStatusEvent as En, AudioAdd as Er, MarkedReadStatus as Et, DateStyle as F, Usage as Fa, TabularAuditKind as Fi, Connection as Fn, AudioManual as Fr, UnreadCountEvent as Ft, LabelScope as G, ConnectionActivityParams as Ga, TabularRetag as Gi, FileServiceConfig as Gn, CitedAttribution as Gr, Invite as Gt, LabelEntry as H, ActivityPage as Ha, TabularModel as Hi, ConnectionsQuery as Hn, BoundingBox as Hr, UpdateMember as Ht, GdprArticle9Treatment as I, UsageAnalytics as Ia, TabularAuditLog as Ii, ConnectionConfig as In, AudioModel as Ir, UnreadStatus as It, ModalityRedactions as J, InviteActivityParams as Ja, TextAuditKind as Ji, LlmConfig as Jn, Contested as Jr, InvitePage as Jt, LanguageTag as K, DetectionActivityParams as Ka, TextAdd as Ki, GcsCredentials as Kn, CodecParams as Kr, InviteCode as Kt, GdprSensitiveScope as L, UsageReport as La, TabularEdit as Li, ConnectionId as Ln, AudioPattern as Lr, UpdateNotificationSettings as Lt, CreatePolicy as M, StorageAnalytics as Ma, Suppress as Mi, WorkspaceDetectionsQuery as Mn, AudioEntity as Mr, NotificationPayload as Mt, CustomMatcher as N, StorageKindEntry as Na, TabularAdd as Ni, AuthenticatedProvider as Nn, AudioHint as Nr, NotificationSettings as Nt, AudioRedaction as O, ModelUsage as Oa, RuleMatch as Oi, RedactDetection as On, AudioAuditKind as Or, MemberJoinedParams as Ot, DateGranularity as P, TokenCounts as Pa, TabularAuditEvent as Pi, AzureCredentials as Pn, AudioLocation as Pr, RedactionCreatedParams as Pt, PolicyDefinition as Q, RedactionActivityParams as Qa, TextEdit as Qi, PickerToken as Qn, DocumentContext as Qr, InviteStatus as Qt, HipaaAccountNumbers as R, WorkspaceAnalytics as Ra, TabularEntity as Ri, ConnectionPage as Rn, AudioRefinement as Rr, ListMembers as Rt, CountryCode as S, TokenExpiration as Sa, Point as Si, DetectionId as Sn, RegisteredRecognizer as Sr, ConnectionSyncCompletedParams as St, LanguageSpan as T, DetectionDayEntry as Ta, RasterMode as Ti, DetectionStatus as Tn, Attribution as Tr, DetectionFailedParams as Tt, LabelLocale as U, ActivityPayload as Ua, TabularPattern as Ui, CreateConnection as Un, Calibration as Ur, CreateInvite as Ut, Label as V, ActivityFilterQuery as Va, TabularManual as Vi, ConnectionVerification as Vn, AuditHash as Vr, MemberSortField as Vt, LabelRef as W, ActivityType as Wa, TabularRefinement as Wi, ExportFiles as Wn, Category as Wr, GenerateInviteCode as Wt, PciPanRender as X, PipelineActivityParams as Xa, TextCoord as Xi, OAuthTokens as Xn, Deduplication as Xr, InviteSent as Xt, PciDssPart as Y, MemberActivityParams as Ya, TextAuditLog as Yi, OAuthStartResponse as Yn, DecodedSpan as Yr, InvitePreview as Yt, Policy as Z, PolicyActivityParams as Za, TextData as Zi, PickedFile as Zn, Dimensions as Zr, InviteSortField as Zt, WebhookId as _, ApiToken as _a, LeakProfile as _i, ExportQuery as _n, SendChatMessage as _r, PipelineSummary as _t, RetentionSettings as a, TextRefinement as aa, ImageAuditKind as ai, DeleteFiles as an, Handle as ao, SyncSchedule as ar, Sha2Algorithm as at, WebhookStatus as b, ApiTokenWithJWT as ba, OperatorId as bi, CreateDetection as bn, LabelCatalog as br, UpdatePipeline as bt, WorkspacePage as c, ArtifactSet as ca, ImageEdit as ci, FileHash as cn, PublicAccount as co, SyncTriggerType as cr, TerminalFallback as ct, CreateWebhook as d, LayoutWord as da, ImageLocation as di, FormatToken as dn, paths as do, ChatMessage as dr, Waveform as dt, TextHint as ea, EditSet as ei, ReplyInvite as en, WorkspaceActivityParams as eo, S3Credentials as er, PolicyRule as et, TestWebhook as f, Token as fa, ImageManual as fi, ListFiles as fn, ChatRole as fr, CreatePipeline as ft, WebhookEvent as g, Transcription as ga, ImageRetag as gi, ExportFormat as gn, CreateChatSession as gr, PipelineStatus as gt, WebhookCreated as h, TranscriptWord as ha, ImageRefinement as hi, DateWindow as hn, ChatToken as hr, PipelineFilter as ht, RetentionOverride as i, TextPattern as ia, ImageAuditEvent as ii, HealthStatus as in, AccountRef as io, SyncMode as ir, Predicate as it, ConfidenceThreshold as j, RecognizerId as ja, SourceSpan as ji, RedactionResultPage as jn, AudioEdit as jr, NotificationPage as jt, ClampBucket as k, ModelUsageEntry as ka, Selection as ki, RedactionId as kn, AudioAuditLog as kr, Notification as kt, WorkspaceRole as l, Layout as la, ImageEntity as li, FileKind as ln, SetPassword as lo, UnauthenticatedProvider as lr, TextRedaction as lt, Webhook as m, TranscriptSegment as ma, ImagePattern as mi, UpdateFile as mn, ChatSessionPage as mr, PipelineDefinition as mt, RasterPolicy as n, TextManual as na, FreeformAttribution as ni, ComponentHealth as nn, AccountIdentities as no, StorageConfig as nr, PolicySummaryPage as nt, UpdateWorkspace as o, TextRetag as oa, ImageAuditLog as oi, DeletedFiles as on, IdentityProvider as oo, SyncScheduleInput as or, TabularRedaction as ot, UpdateWebhook as p, Tokens as pa, ImageModel as pi, ModalityToken as pn, ChatSession as pr, Pipeline as pt, LocalizedText as q, FileActivityParams as qa, TextAuditEvent as qi, ImportFiles as qn, Conflict as qr, InviteExpiration as qt, Retention as r, TextModel as ra, ImageAdd as ri, Health as rn, AccountIdentity as ro, SyncDeletionPolicy as rr, PolicyTemplate as rt, Workspace as s, TimeSpan as sa, ImageData as si, File as sn, OidcStartResponse as so, SyncStatus as sr, TemplateOrigin as st, CreateWorkspace as t, TextLocation as ta, EntityCoRef as ti, SortOrder as tn, Account as to, StartFileServiceOAuth as tr, PolicySummary as tt, WorkspaceSettings as u, LayoutBlock as ua, ImageHint as ui, FilePage as un, UpdateAccount as uo, UpdateConnection as ur, UpdatePolicy as ut, WebhookPage as v, ApiTokenPage as va, ManualIntent as vi, ErrorResponse as vn, ConnectorCatalog as vr, PipelineSummaryPage as vt, LanguageProvenance as w, DetectionAnalytics as wa, RangeOfUint as wi, DetectionPage as wn, Signup as wr, DetectionCompletedParams as wt, Confidence as x, CreateApiToken as xa, PatternEvent as xi, Detection as xn, RecognizerCatalog as xr, CursorPagination as xt, WebhookResult as y, ApiTokenType as ya, ModelEvent as yi, ValidationErrorDetail as yn, FileProviders as yr, PipelineTriggerType as yt, HipaaDeidMethod as z, Activity as za, TabularHint as zi, ConnectionSync as zn, AudioRetag as zr, Member as zt };
-//# sourceMappingURL=index-B-oR9rqQ.d.ts.map
+export { LabelRef as $, ActivityFilterQuery as $a, TabularLocation as $i, CreateConnection as $n, Audit as $r, GenerateInviteCode as $t, Provider as A, ApiToken as Aa, LeakProfile as Ai, Detection as An, FileProviders as Ar, CursorPagination as At, ConfidenceThreshold as B, DetectionTimeSeries as Ba, Report as Bi, RedactionResultPage as Bn, AudioAuditEvent as Br, NotificationPage as Bt, Language as C, LayoutBlock as Ca, ImageHint as Ci, UpdateFile as Cn, paths as Co, ChatRole as Cr, PipelineDefinition as Ct, ScopeMetadata as D, TranscriptSegment as Da, ImagePattern as Di, ErrorResponse as Dn, CreateChatSession as Dr, PipelineSummaryPage as Dt, Languages as E, Tokens as Ea, ImageModel as Ei, ExportQuery as En, ChatToken as Er, PipelineSummary as Et, ProvidersQuery as F, TokenExpiration as Fa, Point as Fi, DetectionStatusEvent as Fn, DesktopTokenRequest as Fr, MarkedReadStatus as Ft, GdprArticle9Treatment as G, StorageKindEntry as Ga, Suppress as Gi, ConnectionConfig as Gn, AudioEntity as Gr, UnreadStatus as Gt, CustomMatcher as H, ModelUsageEntry as Ha, Selection as Hi, AuthenticatedProvider as Hn, AudioAuditLog as Hr, NotificationSettings as Ht, UpdateProvider as I, UpdateApiToken as Ia, Polygon as Ii, PipelineDetectionsQuery as In, Login as Ir, MemberInvitedParams as It, HipaaDeidMethod as J, UsageAnalytics as Ja, TabularAuditKind as Ji, ConnectionSync as Jn, AudioManual as Jr, Member as Jt, GdprSensitiveScope as K, TokenCounts as Ka, TabularAdd as Ki, ConnectionId as Kn, AudioHint as Kr, UpdateNotificationSettings as Kt, AudioRedaction as L, DetectionAnalytics as La, RangeOfUint as Li, RedactDetection as Ln, Signup as Lr, MemberJoinedParams as Lt, ProviderId as M, ApiTokenType as Ma, ModelEvent as Mi, DetectionMetadata as Mn, RecognizerCatalog as Mr, ConnectionSyncFailedParams as Mt, ProviderPage as N, ApiTokenWithJWT as Na, OperatorId as Ni, DetectionPage as Nn, RegisteredRecognizer as Nr, DetectionCompletedParams as Nt, CreateProvider as O, TranscriptWord as Oa, ImageRefinement as Oi, ValidationErrorDetail as On, SendChatMessage as Or, PipelineTriggerType as Ot, ProviderType as P, CreateApiToken as Pa, PatternEvent as Pi, DetectionStatus as Pn, DesktopToken as Pr, DetectionFailedParams as Pt, LabelLocale as Q, ActivityExportOptions as Qa, TabularHint as Qi, ConnectionsQuery as Qn, AudioRetag as Qr, CreateInvite as Qt, ClampBucket as R, DetectionDayEntry as Ra, RasterMode as Ri, RedactionId as Rn, Attribution as Rr, Notification as Rt, CountryCode as S, Layout as Sa, ImageEntity as Si, ModalityToken as Sn, UpdateAccount as So, ChatMessage as Sr, Pipeline as St, LanguageSpan as T, Token as Ta, ImageManual as Ti, ExportFormat as Tn, ChatSessionPage as Tr, PipelineStatus as Tt, DateGranularity as U, RecognizerId as Ua, SourceRef as Ui, AzureCredentials as Un, AudioData as Ur, RedactionCreatedParams as Ut, CreatePolicy as V, ModelUsage as Va, RuleMatch as Vi, WorkspaceDetectionsQuery as Vn, AudioAuditKind as Vr, NotificationPayload as Vt, DateStyle as W, StorageAnalytics as Wa, SourceSpan as Wi, Connection as Wn, AudioEdit as Wr, UnreadCountEvent as Wt, Label as X, WorkspaceAnalytics as Xa, TabularEdit as Xi, ConnectionType as Xn, AudioPattern as Xr, MemberSortField as Xt, ImageRedaction as Y, UsageReport as Ya, TabularAuditLog as Yi, ConnectionSyncPage as Yn, AudioModel as Yr, MemberPage as Yt, LabelEntry as Z, Activity as Za, TabularEntity as Zi, ConnectionVerification as Zn, AudioRefinement as Zr, UpdateMember as Zt, WebhookId as _, TextPattern as _a, ImageAuditEvent as _i, FileHash as _n, Handle as _o, SyncScheduleInput as _r, TerminalFallback as _t, RetentionSettings as a, TextAdd as aa, CodecParams as ai, InviteSent as an, FileActivityParams as ao, LlmConfig as ar, PciPanRender as at, WebhookStatus as b, TimeSpan as ba, ImageData as bi, FormatToken as bn, PublicAccount as bo, UnauthenticatedProvider as br, Waveform as bt, WorkspacePage as c, TextAuditLog as ca, DecodedSpan as ci, ListInvites as cn, PipelineActivityParams as co, PickedFile as cr, PolicyDraft as ct, CreateWebhook as d, TextEdit as da, DocumentContext as di, ComponentHealth as dn, WebhookActivityParams as do, S3Credentials as dr, PolicySummaryPage as dt, TabularManual as ea, AuditHash as ei, Invite as en, ActivityPage as eo, ExportFiles as er, LabelScope as et, TestWebhook as f, TextEntity as fa, Dpi as fi, Health as fn, WorkspaceActivityParams as fo, StartFileServiceOAuth as fr, PolicyTemplate as ft, WebhookEvent as g, TextModel as ga, ImageAdd as gi, File as gn, AccountRef as go, SyncSchedule as gr, TemplateOrigin as gt, WebhookCreated as h, TextManual as ha, FreeformAttribution as hi, DeletedFiles as hn, AccountIdentity as ho, SyncMode as hr, TabularRedaction as ht, RetentionOverride as i, TabularRetag as ia, CitedAttribution as ii, InvitePreview as in, DetectionActivityParams as io, ImportFiles as ir, PciDssPart as it, ProviderConfig as j, ApiTokenPage as ja, ManualIntent as ji, DetectionId as jn, LabelCatalog as jr, ConnectionSyncCompletedParams as jt, InferenceConfig as k, Transcription as ka, ImageRetag as ki, CreateDetection as kn, ConnectorCatalog as kr, UpdatePipeline as kt, WorkspaceRole as l, TextCoord as la, Deduplication as li, ReplyInvite as ln, PolicyActivityParams as lo, PickerToken as lr, PolicyRule as lt, Webhook as m, TextLocation as ma, EntityCoRef as mi, DeleteFiles as mn, AccountIdentities as mo, SyncDeletionPolicy as mr, Sha2Algorithm as mt, RasterPolicy as n, TabularPattern as na, Calibration as ni, InviteExpiration as nn, ActivityType as no, FileServiceProvider as nr, LocalizedText as nt, UpdateWorkspace as o, TextAuditEvent as oa, Conflict as oi, InviteSortField as on, InviteActivityParams as oo, OAuthStartResponse as or, Policy as ot, UpdateWebhook as p, TextHint as pa, EditSet as pi, HealthStatus as pn, Account as po, StorageConfig as pr, Predicate as pt, HipaaAccountNumbers as q, Usage as qa, TabularAuditEvent as qi, ConnectionPage as qn, AudioLocation as qr, ListMembers as qt, Retention as r, TabularRefinement as ra, Category as ri, InvitePage as rn, ConnectionActivityParams as ro, GcsCredentials as rr, ModalityRedactions as rt, Workspace as s, TextAuditKind as sa, Contested as si, InviteStatus as sn, MemberActivityParams as so, OAuthTokens as sr, PolicyDefinition as st, CreateWorkspace as t, TabularModel as ta, BoundingBox as ti, InviteCode as tn, ActivityPayload as to, FileServiceConfig as tr, LanguageTag as tt, WorkspaceSettings as u, TextData as ua, Dimensions as ui, SortOrder as un, RedactionActivityParams as uo, PickerTokenRequest as ur, PolicySummary as ut, WebhookPage as v, TextRefinement as va, ImageAuditKind as vi, FileKind as vn, IdentityProvider as vo, SyncStatus as vr, TextRedaction as vt, LanguageProvenance as w, LayoutWord as wa, ImageLocation as wi, DateWindow as wn, ChatSession as wr, PipelineFilter as wt, Confidence as x, ArtifactSet as xa, ImageEdit as xi, ListFiles as xn, SetPassword as xo, UpdateConnection as xr, CreatePipeline as xt, WebhookResult as y, TextRetag as ya, ImageAuditLog as yi, FilePage as yn, OidcStartResponse as yo, SyncTriggerType as yr, UpdatePolicy as yt, Color as z, DetectionStatusEntry as za, Redaction as zi, RedactionResult as zn, AudioAdd as zr, NotificationEvent as zt };
+//# sourceMappingURL=index-CNUnM9QG.d.ts.map