@nvisy/sdk 0.48.0 → 0.49.0

package/dist/{index-BtQASJ4U.d.ts → index-CNUnM9QG.d.ts}

@@ -474,7 +474,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/account/identities/": {
+  "/workspaces/": {
     parameters: {
       query?: never;
       header?: never;
@@ -482,25 +482,45 @@ interface paths {
       cookie?: never;
     };
     /**
-     * List sign-in methods
-     * @description Returns the authenticated account's identities: its password and any linked providers.
+     * List workspaces
+     * @description Returns all workspaces the authenticated user is a member of.
      */
     get: {
       parameters: {
-        query?: never;
+        query?: {
+          /**
+           * @description Cursor pointing to the last item of the previous page.
+           *     Obtain this from the `nextCursor` field in the response.
+           */
+          after?: string;
+          /**
+           * @description Whether to include the total item count in the response's `total` field.
+           *     Defaults to `false`, since counting is an extra query; set it to `true`
+           *     only when the count is actually needed.
+           */
+          includeCount?: boolean;
+          /** @description The maximum number of records to return (1-100, default: 20). */
+          limit?: number;
+        };
         header?: never;
         path?: never;
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /** @description The account's sign-in methods. */
+        /**
+         * @description Generic paginated response wrapper.
+         *
+         *     Provides a consistent structure for all paginated API responses with
+         *     cursor-based pagination support. When `next_cursor` is present, there
+         *     are more items to fetch.
+         */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["AccountIdentities"];
+            "application/json": components["schemas"]["WorkspacePage"];
           };
         };
         /**
@@ -521,26 +541,11 @@ interface paths {
       };
     };
     put?: never;
-    post?: never;
-    delete?: never;
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/account/identities/password/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
-    get?: never;
     /**
-     * Set or change password
-     * @description Sets or changes the account's password. Changing an existing password requires the current password; setting a first password on an account that has none requires a step-up re-authentication proof.
+     * Create workspace
+     * @description Creates a new workspace. The creator is automatically added as an owner.
      */
-    put: {
+    post: {
       parameters: {
         query?: never;
         header?: never;
@@ -548,27 +553,25 @@ interface paths {
         cookie?: never;
       };
       /**
-       * @description A password set or change.
+       * @description Request payload for creating a new workspace.
        *
-       *     When the account already has a password, `current_password` is required and
-       *     verified before the change is applied, so a hijacked session or CSRF cannot
-       *     silently reset it (and lock out the real owner). When the account has no
-       *     password yet (an SSO-only account setting its first one), there is nothing to
-       *     re-authenticate against, so a fresh step-up `reauth_proof` is required instead
-       *     — a live session alone must not mint a durable new credential.
+       *     Creates a new workspace with the specified configuration. The creator is
+       *     automatically added as an owner of the workspace.
        */
       requestBody: {
         content: {
-          "application/json": components["schemas"]["SetPassword"];
+          "application/json": components["schemas"]["CreateWorkspace"];
         };
       };
       responses: {
-        /** @description Password set. */
-        204: {
+        /** @description Workspace response. */
+        201: {
           headers: {
             [name: string]: unknown;
           };
-          content?: never;
+          content: {
+            "application/json": components["schemas"]["Workspace"];
+          };
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -620,26 +623,43 @@ interface paths {
         };
       };
     };
-    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
     /**
-     * Remove password
-     * @description Removes the account's password, leaving it able to sign in only through its linked providers. Refused if the password is the account's only sign-in method.
+     * Get workspace
+     * @description Returns details for a specific workspace.
      */
-    delete: {
+    get: {
       parameters: {
         query?: never;
         header?: never;
-        path?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+        };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /** @description Password removed. */
-        204: {
+        /** @description Workspace response. */
+        200: {
           headers: {
             [name: string]: unknown;
           };
-          content?: never;
+          content: {
+            "application/json": components["schemas"]["Workspace"];
+          };
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -663,7 +683,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        403: {
           headers: {
             [name: string]: unknown;
           };
@@ -678,7 +698,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        409: {
+        404: {
           headers: {
             [name: string]: unknown;
           };
@@ -688,56 +708,30 @@ interface paths {
         };
       };
     };
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/account/identities/{provider}/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
-    get?: never;
     put?: never;
+    post?: never;
     /**
-     * Link a provider
-     * @description Begins linking the given OpenID Connect provider to the authenticated account and returns the provider authorize URL. Requires a step-up re-authentication proof (`reauthProof`, from the reauth endpoint). On consent, the callback attaches the verified provider identity to the caller's account.
+     * Delete workspace
+     * @description Soft-deletes a workspace. Data is retained for potential recovery.
      */
-    post: {
+    delete: {
       parameters: {
-        query?: {
-          /**
-           * @description A step-up re-authentication proof. Required to start a *link* (adding a
-           *     provider is a credential-adding action, so a live session alone is not
-           *     enough); ignored for sign-in and reauth.
-           */
-          reauthProof?: string;
-          /**
-           * @description Frontend URL to return to once done. Carried through the flow and used to
-           *     build the callback's redirect.
-           */
-          redirectUri?: string;
-        };
+        query?: never;
         header?: never;
         path: {
-          /** @description The identity provider to act on. */
-          provider: components["schemas"]["IdentityProvider"];
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /** @description The response to a successful sign-in start: where to send the user. */
+        /** @description no content */
         200: {
           headers: {
             [name: string]: unknown;
           };
-          content: {
-            "application/json": components["schemas"]["OidcStartResponse"];
-          };
+          content?: never;
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -761,7 +755,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        403: {
           headers: {
             [name: string]: unknown;
           };
@@ -776,7 +770,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        503: {
+        404: {
           headers: {
             [name: string]: unknown;
           };
@@ -786,28 +780,42 @@ interface paths {
         };
       };
     };
+    options?: never;
+    head?: never;
     /**
-     * Unlink a provider
-     * @description Removes a linked OIDC provider from the account. Refused if the provider is the account's only sign-in method.
+     * Update workspace
+     * @description Updates an existing workspace's configuration. Only provided fields are updated.
      */
-    delete: {
+    patch: {
       parameters: {
         query?: never;
         header?: never;
         path: {
-          /** @description The identity provider to act on. */
-          provider: components["schemas"]["IdentityProvider"];
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
         };
         cookie?: never;
       };
-      requestBody?: never;
+      /**
+       * @description Request payload to update an existing workspace.
+       *
+       *     All fields are optional; only provided fields will be updated. The slug is
+       *     immutable and set at creation, so it cannot be changed here.
+       */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["UpdateWorkspace"];
+        };
+      };
       responses: {
-        /** @description Provider unlinked. */
-        204: {
+        /** @description Workspace response. */
+        200: {
           headers: {
             [name: string]: unknown;
           };
-          content?: never;
+          content: {
+            "application/json": components["schemas"]["Workspace"];
+          };
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -846,7 +854,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        403: {
           headers: {
             [name: string]: unknown;
           };
@@ -854,76 +862,63 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        409: {
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ErrorResponse"];
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
           };
         };
       };
     };
-    options?: never;
-    head?: never;
-    patch?: never;
     trace?: never;
   };
-  "/workspaces/": {
+  "/workspaces/{workspaceSlug}/avatar/": {
     parameters: {
       query?: never;
       header?: never;
       path?: never;
       cookie?: never;
     };
+    get?: never;
     /**
-     * List workspaces
-     * @description Returns all workspaces the authenticated user is a member of.
+     * Upload workspace avatar
+     * @description Uploads and normalizes the workspace's avatar. Requires UpdateWorkspace.
      */
-    get: {
+    put: {
       parameters: {
-        query?: {
-          /**
-           * @description Cursor pointing to the last item of the previous page.
-           *     Obtain this from the `nextCursor` field in the response.
-           */
-          after?: string;
-          /**
-           * @description Whether to include the total item count in the response's `total` field.
-           *     Defaults to `false`, since counting is an extra query; set it to `true`
-           *     only when the count is actually needed.
-           */
-          includeCount?: boolean;
-          /** @description The maximum number of records to return (1-100, default: 20). */
-          limit?: number;
-        };
+        query?: never;
         header?: never;
-        path?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+        };
         cookie?: never;
       };
-      requestBody?: never;
+      /** @description multipart form data */
+      requestBody: {
+        content: {
+          "multipart/form-data": unknown[];
+        };
+      };
       responses: {
-        /**
-         * @description Generic paginated response wrapper.
-         *
-         *     Provides a consistent structure for all paginated API responses with
-         *     cursor-based pagination support. When `next_cursor` is present, there
-         *     are more items to fetch.
-         */
+        /** @description no content */
         200: {
           headers: {
             [name: string]: unknown;
           };
-          content: {
-            "application/json": components["schemas"]["WorkspacePage"];
-          };
+          content?: never;
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -932,7 +927,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        401: {
+        400: {
           headers: {
             [name: string]: unknown;
           };
@@ -940,41 +935,6 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-      };
-    };
-    put?: never;
-    /**
-     * Create workspace
-     * @description Creates a new workspace. The creator is automatically added as an owner.
-     */
-    post: {
-      parameters: {
-        query?: never;
-        header?: never;
-        path?: never;
-        cookie?: never;
-      };
-      /**
-       * @description Request payload for creating a new workspace.
-       *
-       *     Creates a new workspace with the specified configuration. The creator is
-       *     automatically added as an owner of the workspace.
-       */
-      requestBody: {
-        content: {
-          "application/json": components["schemas"]["CreateWorkspace"];
-        };
-      };
-      responses: {
-        /** @description Workspace response. */
-        201: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["Workspace"];
-          };
-        };
         /**
          * @description HTTP error response representation with security-conscious design.
          *
@@ -982,7 +942,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        400: {
+        401: {
           headers: {
             [name: string]: unknown;
           };
@@ -997,7 +957,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        401: {
+        403: {
           headers: {
             [name: string]: unknown;
           };
@@ -1005,44 +965,29 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /** @description Expected request with `Content-Type: application/json` */
-        415: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
-        /** @description Failed to deserialize the JSON body into the target type */
-        422: {
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "text/plain": string;
+            "application/json": components["schemas"]["ErrorResponse"];
           };
         };
       };
     };
-    delete?: never;
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/workspaces/{workspaceSlug}/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
+    post?: never;
     /**
-     * Get workspace
-     * @description Returns details for a specific workspace.
+     * Delete workspace avatar
+     * @description Removes the workspace's avatar. Requires UpdateWorkspace.
      */
-    get: {
+    delete: {
       parameters: {
         query?: never;
         header?: never;
@@ -1054,14 +999,12 @@ interface paths {
       };
       requestBody?: never;
       responses: {
-        /** @description Workspace response. */
-        200: {
+        /** @description no content */
+        204: {
           headers: {
             [name: string]: unknown;
           };
-          content: {
-            "application/json": components["schemas"]["Workspace"];
-          };
+          content?: never;
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -1110,13 +1053,23 @@ interface paths {
         };
       };
     };
-    put?: never;
-    post?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/notifications/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
     /**
-     * Delete workspace
-     * @description Soft-deletes a workspace. Data is retained for potential recovery.
+     * Get notification settings
+     * @description Returns the notification settings for the authenticated user in a workspace.
      */
-    delete: {
+    get: {
       parameters: {
         query?: never;
         header?: never;
@@ -1128,26 +1081,13 @@ interface paths {
       };
       requestBody?: never;
       responses: {
-        /** @description no content */
+        /** @description Response for notification settings within a workspace. */
         200: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content?: never;
-        };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        401: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ErrorResponse"];
+            "application/json": components["schemas"]["NotificationSettings"];
           };
         };
         /**
@@ -1157,7 +1097,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        403: {
+        401: {
           headers: {
             [name: string]: unknown;
           };
@@ -1182,11 +1122,14 @@ interface paths {
         };
       };
     };
+    put?: never;
+    post?: never;
+    delete?: never;
     options?: never;
     head?: never;
     /**
-     * Update workspace
-     * @description Updates an existing workspace's configuration. Only provided fields are updated.
+     * Update notification settings
+     * @description Updates the notification settings for the authenticated user in a workspace.
      */
     patch: {
       parameters: {
@@ -1198,25 +1141,20 @@ interface paths {
         };
         cookie?: never;
       };
-      /**
-       * @description Request payload to update an existing workspace.
-       *
-       *     All fields are optional; only provided fields will be updated. The slug is
-       *     immutable and set at creation, so it cannot be changed here.
-       */
+      /** @description Request payload for updating notification settings. */
       requestBody: {
         content: {
-          "application/json": components["schemas"]["UpdateWorkspace"];
+          "application/json": components["schemas"]["UpdateNotificationSettings"];
         };
       };
       responses: {
-        /** @description Workspace response. */
+        /** @description Response for notification settings within a workspace. */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["Workspace"];
+            "application/json": components["schemas"]["NotificationSettings"];
           };
         };
         /**
@@ -1256,7 +1194,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        403: {
+        404: {
           headers: {
             [name: string]: unknown;
           };
@@ -1286,21 +1224,48 @@ interface paths {
     };
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/avatar/": {
+  "/workspaces/{workspaceSlug}/activities/": {
     parameters: {
       query?: never;
       header?: never;
       path?: never;
       cookie?: never;
     };
-    get?: never;
     /**
-     * Upload workspace avatar
-     * @description Uploads and normalizes the workspace's avatar. Requires UpdateWorkspace.
+     * List workspace activities
+     * @description Returns the workspace's activity log, most recent first, cursor-paginated. Optional filters: `type` (repeatable, e.g. `file.created`), `actor` (a username), and a `from`/`to` day range (each bound narrows only when given; the feed is otherwise all-time).
      */
-    put: {
+    get: {
       parameters: {
-        query?: never;
+        query?: {
+          /** @description Username of the account whose activities to keep. Omit for any actor. */
+          actor?: components["schemas"]["Handle"];
+          /**
+           * @description Keep only these activity types (e.g. `file.created`). Repeat the `type`
+           *     parameter for several; omit for no type constraint.
+           */
+          type?: components["schemas"]["ActivityType"][];
+          /**
+           * @description First day of the range (inclusive), `YYYY-MM-DD`. Defaults so the range
+           *     spans the last `DEFAULT_WINDOW_DAYS` days through `to`.
+           */
+          from?: string;
+          /** @description Last day of the range (inclusive), `YYYY-MM-DD`. Defaults to today (UTC). */
+          to?: string;
+          /**
+           * @description Cursor pointing to the last item of the previous page.
+           *     Obtain this from the `nextCursor` field in the response.
+           */
+          after?: string;
+          /**
+           * @description Whether to include the total item count in the response's `total` field.
+           *     Defaults to `false`, since counting is an extra query; set it to `true`
+           *     only when the count is actually needed.
+           */
+          includeCount?: boolean;
+          /** @description The maximum number of records to return (1-100, default: 20). */
+          limit?: number;
+        };
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
@@ -1308,33 +1273,21 @@ interface paths {
         };
         cookie?: never;
       };
-      /** @description multipart form data */
-      requestBody: {
-        content: {
-          "multipart/form-data": unknown[];
-        };
-      };
+      requestBody?: never;
       responses: {
-        /** @description no content */
-        200: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content?: never;
-        };
         /**
-         * @description HTTP error response representation with security-conscious design.
+         * @description Generic paginated response wrapper.
          *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
+         *     Provides a consistent structure for all paginated API responses with
+         *     cursor-based pagination support. When `next_cursor` is present, there
+         *     are more items to fetch.
          */
-        400: {
+        200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ErrorResponse"];
+            "application/json": components["schemas"]["ActivityPage"];
           };
         };
         /**
@@ -1367,31 +1320,47 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        404: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
-          };
-        };
       };
     };
+    put?: never;
     post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/activities/export": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
     /**
-     * Delete workspace avatar
-     * @description Removes the workspace's avatar. Requires UpdateWorkspace.
+     * Export workspace activities
+     * @description Exports a workspace's activity log over a date window as a downloadable file. The window is `from`/`to` (inclusive, YYYY-MM-DD); it defaults to the last 30 days and is capped at 366 days. The same `type` (repeatable) and `actor` filters as the feed apply. `format` is `csv` (default) or `json`. Each activity is a flat row: timestamp, the type split into object/action, the actor, and the acted-on object's id and label, oldest first. At most 100,000 rows are returned (the oldest in the window); a truncated export sets the `X-Export-Truncated` response header.
      */
-    delete: {
+    get: {
       parameters: {
-        query?: never;
+        query?: {
+          /** @description Username of the account whose activities to keep. Omit for any actor. */
+          actor?: components["schemas"]["Handle"];
+          /**
+           * @description Keep only these activity types (e.g. `file.created`). Repeat the `type`
+           *     parameter for several; omit for no type constraint.
+           */
+          type?: components["schemas"]["ActivityType"][];
+          /**
+           * @description First day of the range (inclusive), `YYYY-MM-DD`. Defaults so the range
+           *     spans the last `DEFAULT_WINDOW_DAYS` days through `to`.
+           */
+          from?: string;
+          /** @description Last day of the range (inclusive), `YYYY-MM-DD`. Defaults to today (UTC). */
+          to?: string;
+          /** @description Output format; defaults to `csv`. */
+          format?: components["schemas"]["ExportFormat"];
+        };
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
@@ -1401,12 +1370,30 @@ interface paths {
       };
       requestBody?: never;
       responses: {
-        /** @description no content */
-        204: {
+        /** @description The exported activity log. */
+        200: {
           headers: {
             [name: string]: unknown;
           };
-          content?: never;
+          content: {
+            "text/csv": unknown;
+            "application/json": unknown;
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -1455,12 +1442,15 @@ interface paths {
         };
       };
     };
+    put?: never;
+    post?: never;
+    delete?: never;
     options?: never;
     head?: never;
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/notifications/": {
+  "/workspaces/{workspaceSlug}/analytics/": {
     parameters: {
       query?: never;
       header?: never;
@@ -1468,8 +1458,8 @@ interface paths {
       cookie?: never;
     };
     /**
-     * Get notification settings
-     * @description Returns the notification settings for the authenticated user in a workspace.
+     * Workspace analytics
+     * @description Returns aggregate analytics for a workspace: stored-file totals with a per-kind breakdown, detection health (status mix, error rate, and durations), and inference token usage (workspace totals plus a per-model breakdown). Breakdowns list every kind/status, zero-filled, in a stable order.
      */
     get: {
       parameters: {
@@ -1483,13 +1473,16 @@ interface paths {
       };
       requestBody?: never;
       responses: {
-        /** @description Response for notification settings within a workspace. */
+        /**
+         * @description Aggregate analytics for a workspace: what it stores, how its detections fare, and
+         *     the inference tokens they spent.
+         */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["NotificationSettings"];
+            "application/json": components["schemas"]["WorkspaceAnalytics"];
           };
         };
         /**
@@ -1507,6 +1500,21 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
         /**
          * @description HTTP error response representation with security-conscious design.
          *
@@ -1529,13 +1537,31 @@ interface paths {
     delete?: never;
     options?: never;
     head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/analytics/detections/timeseries/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
     /**
-     * Update notification settings
-     * @description Updates the notification settings for the authenticated user in a workspace.
+     * Workspace detection time series
+     * @description Returns a workspace's daily detection activity over a date window: detections per day, plus each day's error rate and durations. Every day in the window is present (quiet days report detections: 0), so the series plots as a continuous line or a contribution-style calendar. The window is `from`/`to` (inclusive, YYYY-MM-DD); it defaults to the last 30 days and is capped at 366 days.
      */
-    patch: {
+    get: {
       parameters: {
-        query?: never;
+        query?: {
+          /**
+           * @description First day of the range (inclusive), `YYYY-MM-DD`. Defaults so the range
+           *     spans the last `DEFAULT_WINDOW_DAYS` days through `to`.
+           */
+          from?: string;
+          /** @description Last day of the range (inclusive), `YYYY-MM-DD`. Defaults to today (UTC). */
+          to?: string;
+        };
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
@@ -1543,20 +1569,19 @@ interface paths {
         };
         cookie?: never;
       };
-      /** @description Request payload for updating notification settings. */
-      requestBody: {
-        content: {
-          "application/json": components["schemas"]["UpdateNotificationSettings"];
-        };
-      };
+      requestBody?: never;
       responses: {
-        /** @description Response for notification settings within a workspace. */
+        /**
+         * @description A workspace's daily detection activity over a window: one point per day, dense
+         *     (quiet days included with `detections: 0`), ready to plot as a continuous
+         *     series.
+         */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["NotificationSettings"];
+            "application/json": components["schemas"]["DetectionTimeSeries"];
           };
         };
         /**
@@ -1596,7 +1621,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        403: {
           headers: {
             [name: string]: unknown;
           };
@@ -1604,29 +1629,32 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /** @description Expected request with `Content-Type: application/json` */
-        415: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
-        /** @description Failed to deserialize the JSON body into the target type */
-        422: {
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "text/plain": string;
+            "application/json": components["schemas"]["ErrorResponse"];
           };
         };
       };
     };
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/activities/": {
+  "/workspaces/{workspaceSlug}/members/": {
     parameters: {
       query?: never;
       header?: never;
@@ -1634,26 +1662,20 @@ interface paths {
       cookie?: never;
     };
     /**
-     * List workspace activities
-     * @description Returns the workspace's activity log, most recent first, cursor-paginated. Optional filters: `type` (repeatable, e.g. `file.created`), `actor` (a username), and a `from`/`to` day range (each bound narrows only when given; the feed is otherwise all-time).
+     * List members
+     * @description Returns a paginated list of workspace members with their roles and status.
      */
     get: {
       parameters: {
         query?: {
-          /** @description Username of the account whose activities to keep. Omit for any actor. */
-          actor?: components["schemas"]["Handle"];
-          /**
-           * @description Keep only these activity types (e.g. `file.created`). Repeat the `type`
-           *     parameter for several; omit for no type constraint.
-           */
-          type?: components["schemas"]["ActivityType"][];
-          /**
-           * @description First day of the range (inclusive), `YYYY-MM-DD`. Defaults so the range
-           *     spans the last `DEFAULT_WINDOW_DAYS` days through `to`.
-           */
-          from?: string;
-          /** @description Last day of the range (inclusive), `YYYY-MM-DD`. Defaults to today (UTC). */
-          to?: string;
+          /** @description Filter by 2FA status. */
+          has2fa?: boolean;
+          /** @description Sort order (asc or desc). */
+          order?: components["schemas"]["SortOrder"];
+          /** @description Filter by workspace role. */
+          role?: components["schemas"]["WorkspaceRole"];
+          /** @description Sort by field. */
+          sortBy?: components["schemas"]["MemberSortField"];
           /**
            * @description Cursor pointing to the last item of the previous page.
            *     Obtain this from the `nextCursor` field in the response.
@@ -1689,7 +1711,7 @@ interface paths {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ActivityPage"];
+            "application/json": components["schemas"]["MemberPage"];
           };
         };
         /**
@@ -1722,6 +1744,21 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
       };
     };
     put?: never;
@@ -1732,37 +1769,22 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/activities/export": {
+  "/workspaces/{workspaceSlug}/members/leave/": {
     parameters: {
       query?: never;
       header?: never;
       path?: never;
       cookie?: never;
     };
+    get?: never;
+    put?: never;
     /**
-     * Export workspace activities
-     * @description Exports a workspace's activity log over a date window as a downloadable file. The window is `from`/`to` (inclusive, YYYY-MM-DD); it defaults to the last 30 days and is capped at 366 days. The same `type` (repeatable) and `actor` filters as the feed apply. `format` is `csv` (default) or `json`. Each activity is a flat row: timestamp, the type split into object/action, the actor, and the acted-on object's id and label, oldest first. At most 100,000 rows are returned (the oldest in the window); a truncated export sets the `X-Export-Truncated` response header.
+     * Leave workspace
+     * @description Allows a member to voluntarily leave a workspace.
      */
-    get: {
+    post: {
       parameters: {
-        query?: {
-          /** @description Username of the account whose activities to keep. Omit for any actor. */
-          actor?: components["schemas"]["Handle"];
-          /**
-           * @description Keep only these activity types (e.g. `file.created`). Repeat the `type`
-           *     parameter for several; omit for no type constraint.
-           */
-          type?: components["schemas"]["ActivityType"][];
-          /**
-           * @description First day of the range (inclusive), `YYYY-MM-DD`. Defaults so the range
-           *     spans the last `DEFAULT_WINDOW_DAYS` days through `to`.
-           */
-          from?: string;
-          /** @description Last day of the range (inclusive), `YYYY-MM-DD`. Defaults to today (UTC). */
-          to?: string;
-          /** @description Output format; defaults to `csv`. */
-          format?: components["schemas"]["ExportFormat"];
-        };
+        query?: never;
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
@@ -1772,15 +1794,12 @@ interface paths {
       };
       requestBody?: never;
       responses: {
-        /** @description The exported activity log. */
+        /** @description no content */
         200: {
           headers: {
             [name: string]: unknown;
           };
-          content: {
-            "text/csv": unknown;
-            "application/json": unknown;
-          };
+          content?: never;
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -1812,21 +1831,6 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        403: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
-          };
-        };
         /**
          * @description HTTP error response representation with security-conscious design.
          *
@@ -1844,15 +1848,13 @@ interface paths {
         };
       };
     };
-    put?: never;
-    post?: never;
     delete?: never;
     options?: never;
     head?: never;
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/analytics/": {
+  "/workspaces/{workspaceSlug}/members/{username}/": {
     parameters: {
       query?: never;
       header?: never;
@@ -1860,8 +1862,8 @@ interface paths {
       cookie?: never;
     };
     /**
-     * Workspace analytics
-     * @description Returns aggregate analytics for a workspace: stored-file totals with a per-kind breakdown, detection health (status mix, error rate, and durations), and inference token usage (workspace totals plus a per-model breakdown). Breakdowns list every kind/status, zero-filled, in a stable order.
+     * Get member
+     * @description Returns detailed information about a specific workspace member.
      */
     get: {
       parameters: {
@@ -1870,21 +1872,20 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
+          /** @description Public handle of the member's account. */
+          username: components["schemas"]["Handle"];
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /**
-         * @description Aggregate analytics for a workspace: what it stores, how its detections fare, and
-         *     the inference tokens they spent.
-         */
+        /** @description Represents a workspace member. */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["WorkspaceAnalytics"];
+            "application/json": components["schemas"]["Member"];
           };
         };
         /**
@@ -1936,55 +1937,30 @@ interface paths {
     };
     put?: never;
     post?: never;
-    delete?: never;
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/workspaces/{workspaceSlug}/analytics/detections/timeseries/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
     /**
-     * Workspace detection time series
-     * @description Returns a workspace's daily detection activity over a date window: detections per day, plus each day's error rate and durations. Every day in the window is present (quiet days report detections: 0), so the series plots as a continuous line or a contribution-style calendar. The window is `from`/`to` (inclusive, YYYY-MM-DD); it defaults to the last 30 days and is capped at 366 days.
+     * Remove member
+     * @description Permanently removes a member from the workspace. Cannot remove owners or yourself.
      */
-    get: {
+    delete: {
       parameters: {
-        query?: {
-          /**
-           * @description First day of the range (inclusive), `YYYY-MM-DD`. Defaults so the range
-           *     spans the last `DEFAULT_WINDOW_DAYS` days through `to`.
-           */
-          from?: string;
-          /** @description Last day of the range (inclusive), `YYYY-MM-DD`. Defaults to today (UTC). */
-          to?: string;
-        };
+        query?: never;
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
+          /** @description Public handle of the member's account. */
+          username: components["schemas"]["Handle"];
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /**
-         * @description A workspace's daily detection activity over a window: one point per day, dense
-         *     (quiet days included with `detections: 0`), ready to plot as a continuous
-         *     series.
-         */
+        /** @description no content */
         200: {
           headers: {
             [name: string]: unknown;
           };
-          content: {
-            "application/json": components["schemas"]["DetectionTimeSeries"];
-          };
+          content?: never;
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -2048,72 +2024,53 @@ interface paths {
         };
       };
     };
-    put?: never;
-    post?: never;
-    delete?: never;
     options?: never;
     head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/workspaces/{workspaceSlug}/members/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
     /**
-     * List members
-     * @description Returns a paginated list of workspace members with their roles and status.
+     * Update member role
+     * @description Updates a workspace member's role. Cannot update your own role or demote owners.
      */
-    get: {
+    patch: {
       parameters: {
-        query?: {
-          /** @description Filter by 2FA status. */
-          has2fa?: boolean;
-          /** @description Sort order (asc or desc). */
-          order?: components["schemas"]["SortOrder"];
-          /** @description Filter by workspace role. */
-          role?: components["schemas"]["WorkspaceRole"];
-          /** @description Sort by field. */
-          sortBy?: components["schemas"]["MemberSortField"];
-          /**
-           * @description Cursor pointing to the last item of the previous page.
-           *     Obtain this from the `nextCursor` field in the response.
-           */
-          after?: string;
-          /**
-           * @description Whether to include the total item count in the response's `total` field.
-           *     Defaults to `false`, since counting is an extra query; set it to `true`
-           *     only when the count is actually needed.
-           */
-          includeCount?: boolean;
-          /** @description The maximum number of records to return (1-100, default: 20). */
-          limit?: number;
-        };
+        query?: never;
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
+          /** @description Public handle of the member's account. */
+          username: components["schemas"]["Handle"];
         };
         cookie?: never;
       };
-      requestBody?: never;
+      /** @description Request to update a member's role. */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["UpdateMember"];
+        };
+      };
       responses: {
+        /** @description Represents a workspace member. */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["Member"];
+          };
+        };
         /**
-         * @description Generic paginated response wrapper.
+         * @description HTTP error response representation with security-conscious design.
          *
-         *     Provides a consistent structure for all paginated API responses with
-         *     cursor-based pagination support. When `next_cursor` is present, there
-         *     are more items to fetch.
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
          */
-        200: {
+        400: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["MemberPage"];
+            "application/json": components["schemas"]["ErrorResponse"];
           };
         };
         /**
@@ -2161,32 +2118,61 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
       };
     };
-    put?: never;
-    post?: never;
-    delete?: never;
-    options?: never;
-    head?: never;
-    patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/members/leave/": {
+  "/workspaces/{workspaceSlug}/connections/": {
     parameters: {
       query?: never;
       header?: never;
       path?: never;
       cookie?: never;
     };
-    get?: never;
-    put?: never;
     /**
-     * Leave workspace
-     * @description Allows a member to voluntarily leave a workspace.
+     * List connections
+     * @description Returns all configured connections for the workspace. Only metadata is returned; encrypted credentials are never exposed.
      */
-    post: {
+    get: {
       parameters: {
-        query?: never;
+        query?: {
+          /**
+           * @description Cursor pointing to the last item of the previous page.
+           *     Obtain this from the `nextCursor` field in the response.
+           */
+          after?: string;
+          /**
+           * @description Whether to include the total item count in the response's `total` field.
+           *     Defaults to `false`, since counting is an extra query; set it to `true`
+           *     only when the count is actually needed.
+           */
+          includeCount?: boolean;
+          /** @description The maximum number of records to return (1-100, default: 20). */
+          limit?: number;
+          /**
+           * @description Filter by provider (`s3`, `azure`, `gcs`). Repeatable; a connection
+           *     matches if it uses any of the given providers. Empty means no filter.
+           */
+          provider?: string[];
+        };
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
@@ -2196,26 +2182,19 @@ interface paths {
       };
       requestBody?: never;
       responses: {
-        /** @description no content */
-        200: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content?: never;
-        };
         /**
-         * @description HTTP error response representation with security-conscious design.
+         * @description Generic paginated response wrapper.
          *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
+         *     Provides a consistent structure for all paginated API responses with
+         *     cursor-based pagination support. When `next_cursor` is present, there
+         *     are more items to fetch.
          */
-        400: {
+        200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ErrorResponse"];
+            "application/json": components["schemas"]["ConnectionPage"];
           };
         };
         /**
@@ -2240,7 +2219,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        403: {
           headers: {
             [name: string]: unknown;
           };
@@ -2250,44 +2229,40 @@ interface paths {
         };
       };
     };
-    delete?: never;
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/workspaces/{workspaceSlug}/members/{username}/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
+    put?: never;
     /**
-     * Get member
-     * @description Returns detailed information about a specific workspace member.
+     * Create connection
+     * @description Creates a new provider connection for the workspace. Connection data is encrypted and stored securely. The response includes connection metadata but never exposes the encrypted credentials.
      */
-    get: {
+    post: {
       parameters: {
         query?: never;
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Public handle of the member's account. */
-          username: components["schemas"]["Handle"];
         };
         cookie?: never;
       };
-      requestBody?: never;
+      /** @description Request payload for creating a new workspace connection. */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["CreateConnection"];
+        };
+      };
       responses: {
-        /** @description Represents a workspace member. */
-        200: {
+        /**
+         * @description Response type for a workspace connection.
+         *
+         *     Note: The encrypted connection data is never exposed in API responses.
+         *     Only metadata about the connection is returned.
+         */
+        201: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["Member"];
+            "application/json": components["schemas"]["Connection"];
           };
         };
         /**
@@ -2297,7 +2272,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        401: {
+        400: {
           headers: {
             [name: string]: unknown;
           };
@@ -2312,7 +2287,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        403: {
+        401: {
           headers: {
             [name: string]: unknown;
           };
@@ -2327,7 +2302,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        403: {
           headers: {
             [name: string]: unknown;
           };
@@ -2335,34 +2310,70 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-      };
-    };
-    put?: never;
-    post?: never;
-    /**
-     * Remove member
-     * @description Permanently removes a member from the workspace. Cannot remove owners or yourself.
-     */
-    delete: {
-      parameters: {
-        query?: never;
-        header?: never;
-        path: {
-          /** @description URL-safe workspace identifier. */
-          workspaceSlug: string;
-          /** @description Public handle of the member's account. */
-          username: components["schemas"]["Handle"];
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+      };
+    };
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/connections/{connectionId}/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * Get connection
+     * @description Returns connection metadata without encrypted credentials.
+     */
+    get: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /** @description no content */
+        /**
+         * @description Response type for a workspace connection.
+         *
+         *     Note: The encrypted connection data is never exposed in API responses.
+         *     Only metadata about the connection is returned.
+         */
         200: {
           headers: {
             [name: string]: unknown;
           };
-          content?: never;
+          content: {
+            "application/json": components["schemas"]["Connection"];
+          };
         };
         /**
          * @description HTTP error response representation with security-conscious design.
@@ -2371,7 +2382,37 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        400: {
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
           headers: {
             [name: string]: unknown;
           };
@@ -2379,6 +2420,35 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
+      };
+    };
+    put?: never;
+    post?: never;
+    /**
+     * Delete connection
+     * @description Soft-deletes the connection from the workspace.
+     */
+    delete: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description no content */
+        204: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content?: never;
+        };
         /**
          * @description HTTP error response representation with security-conscious design.
          *
@@ -2429,8 +2499,8 @@ interface paths {
     options?: never;
     head?: never;
     /**
-     * Update member role
-     * @description Updates a workspace member's role. Cannot update your own role or demote owners.
+     * Update connection
+     * @description Updates connection name or encrypted data.
      */
     patch: {
       parameters: {
@@ -2439,25 +2509,30 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Public handle of the member's account. */
-          username: components["schemas"]["Handle"];
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
         };
         cookie?: never;
       };
-      /** @description Request to update a member's role. */
+      /** @description Request payload for updating an existing workspace connection. */
       requestBody: {
         content: {
-          "application/json": components["schemas"]["UpdateMember"];
+          "application/json": components["schemas"]["UpdateConnection"];
         };
       };
       responses: {
-        /** @description Represents a workspace member. */
+        /**
+         * @description Response type for a workspace connection.
+         *
+         *     Note: The encrypted connection data is never exposed in API responses.
+         *     Only metadata about the connection is returned.
+         */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["Member"];
+            "application/json": components["schemas"]["Connection"];
           };
         };
         /**
@@ -2542,61 +2617,40 @@ interface paths {
     };
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/connections/": {
+  "/workspaces/{workspaceSlug}/connections/{connectionId}/verify/": {
     parameters: {
       query?: never;
       header?: never;
       path?: never;
       cookie?: never;
     };
+    get?: never;
+    put?: never;
     /**
-     * List connections
-     * @description Returns all configured connections for the workspace. Only metadata is returned; encrypted credentials are never exposed.
+     * Verify connection
+     * @description Checks whether the connection's backing store is reachable with its stored credentials.
      */
-    get: {
+    post: {
       parameters: {
-        query?: {
-          /**
-           * @description Cursor pointing to the last item of the previous page.
-           *     Obtain this from the `nextCursor` field in the response.
-           */
-          after?: string;
-          /**
-           * @description Whether to include the total item count in the response's `total` field.
-           *     Defaults to `false`, since counting is an extra query; set it to `true`
-           *     only when the count is actually needed.
-           */
-          includeCount?: boolean;
-          /** @description The maximum number of records to return (1-100, default: 20). */
-          limit?: number;
-          /**
-           * @description Filter by provider (`s3`, `azure`, `gcs`). Repeatable; a connection
-           *     matches if it uses any of the given providers. Empty means no filter.
-           */
-          provider?: string[];
-        };
+        query?: never;
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /**
-         * @description Generic paginated response wrapper.
-         *
-         *     Provides a consistent structure for all paginated API responses with
-         *     cursor-based pagination support. When `next_cursor` is present, there
-         *     are more items to fetch.
-         */
+        /** @description Result of a connection reachability check. */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ConnectionPage"];
+            "application/json": components["schemas"]["ConnectionVerification"];
           };
         };
         /**
@@ -2629,12 +2683,41 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
       };
     };
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/connections/{connectionId}/picker-token/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
     put?: never;
     /**
-     * Create connection
-     * @description Creates a new provider connection for the workspace. Connection data is encrypted and stored securely. The response includes connection metadata but never exposes the encrypted credentials.
+     * Mint picker token
+     * @description Returns a short-lived provider access token for a browser file picker (file services with a token-based picker only). The refresh token is never returned. An optional body `{ resource }` names the resource the picker requested (used by the OneDrive picker, which requires a SharePoint-audience token); providers whose picker takes a single token ignore it. The OneDrive picker is available only for work or school (OneDrive for Business) accounts.
      */
     post: {
       parameters: {
@@ -2643,28 +2726,39 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
+          /** @description Opaque identifier of the connection. */
+          connectionId: components["schemas"]["ConnectionId"];
         };
         cookie?: never;
       };
-      /** @description Request payload for creating a new workspace connection. */
+      /**
+       * @description Body for minting a browser file-picker token.
+       *
+       *     The OneDrive v8 picker requests a token per resource (it names the resource in
+       *     each `authenticate` command); the caller passes that `resource` so the server
+       *     mints a token scoped to exactly it. Ignored by providers whose picker takes a
+       *     single provider token (Google Drive, Box); omit it for those.
+       */
       requestBody: {
         content: {
-          "application/json": components["schemas"]["CreateConnection"];
+          "application/json": components["schemas"]["PickerTokenRequest"];
         };
       };
       responses: {
         /**
-         * @description Response type for a workspace connection.
+         * @description A short-lived provider OAuth access token for a browser file picker.
          *
-         *     Note: The encrypted connection data is never exposed in API responses.
-         *     Only metadata about the connection is returned.
+         *     Carries only the access token and its expiry — never the refresh token, which
+         *     stays server-side. The token is minted from the connection's stored
+         *     credentials and is short-lived (the provider's access-token lifetime), so the
+         *     browser holds a narrow, expiring credential rather than a durable one.
          */
-        201: {
+        200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["Connection"];
+            "application/json": components["schemas"]["PickerToken"];
           };
         };
         /**
@@ -2712,22 +2806,19 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /** @description Expected request with `Content-Type: application/json` */
-        415: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
-        /** @description Failed to deserialize the JSON body into the target type */
-        422: {
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "text/plain": string;
+            "application/json": components["schemas"]["ErrorResponse"];
           };
         };
       };
@@ -2738,7 +2829,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/connections/{connectionId}/": {
+  "/workspaces/{workspaceSlug}/providers/": {
     parameters: {
       query?: never;
       header?: never;
@@ -2746,35 +2837,232 @@ interface paths {
       cookie?: never;
     };
     /**
-     * Get connection
-     * @description Returns connection metadata without encrypted credentials.
+     * List providers
+     * @description Returns all configured inference providers for the workspace. Only metadata is returned; encrypted credentials are never exposed.
      */
     get: {
+      parameters: {
+        query?: {
+          /**
+           * @description Cursor pointing to the last item of the previous page.
+           *     Obtain this from the `nextCursor` field in the response.
+           */
+          after?: string;
+          /**
+           * @description Whether to include the total item count in the response's `total` field.
+           *     Defaults to `false`, since counting is an extra query; set it to `true`
+           *     only when the count is actually needed.
+           */
+          includeCount?: boolean;
+          /** @description The maximum number of records to return (1-100, default: 20). */
+          limit?: number;
+          /**
+           * @description Filter by provider (`openai`, `ollama`, `anthropic`). Repeatable; a
+           *     provider matches if it uses any of the given providers. Empty means no
+           *     filter.
+           */
+          provider?: string[];
+        };
+        header?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /**
+         * @description Generic paginated response wrapper.
+         *
+         *     Provides a consistent structure for all paginated API responses with
+         *     cursor-based pagination support. When `next_cursor` is present, there
+         *     are more items to fetch.
+         */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ProviderPage"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    put?: never;
+    /**
+     * Create provider
+     * @description Creates a new inference provider for the workspace. Provider data is encrypted and stored securely. The response includes provider metadata but never exposes the encrypted credentials.
+     */
+    post: {
       parameters: {
         query?: never;
         header?: never;
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the connection. */
-          connectionId: components["schemas"]["ConnectionId"];
+        };
+        cookie?: never;
+      };
+      /** @description Request payload for creating a new workspace provider. */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["CreateProvider"];
+        };
+      };
+      responses: {
+        /**
+         * @description Response type for a workspace inference provider.
+         *
+         *     Note: The encrypted provider data is never exposed in API responses. Only
+         *     metadata about the provider is returned.
+         */
+        201: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["Provider"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+      };
+    };
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/providers/{providerId}/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * Get provider
+     * @description Returns provider metadata without encrypted credentials.
+     */
+    get: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+          /** @description Opaque identifier of the provider. */
+          providerId: components["schemas"]["ProviderId"];
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
         /**
-         * @description Response type for a workspace connection.
+         * @description Response type for a workspace inference provider.
          *
-         *     Note: The encrypted connection data is never exposed in API responses.
-         *     Only metadata about the connection is returned.
+         *     Note: The encrypted provider data is never exposed in API responses. Only
+         *     metadata about the provider is returned.
          */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["Connection"];
+            "application/json": components["schemas"]["Provider"];
           };
         };
         /**
@@ -2827,8 +3115,8 @@ interface paths {
     put?: never;
     post?: never;
     /**
-     * Delete connection
-     * @description Soft-deletes the connection from the workspace.
+     * Delete provider
+     * @description Soft-deletes the provider from the workspace.
      */
     delete: {
       parameters: {
@@ -2837,8 +3125,8 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the connection. */
-          connectionId: components["schemas"]["ConnectionId"];
+          /** @description Opaque identifier of the provider. */
+          providerId: components["schemas"]["ProviderId"];
         };
         cookie?: never;
       };
@@ -2901,8 +3189,8 @@ interface paths {
     options?: never;
     head?: never;
     /**
-     * Update connection
-     * @description Updates connection name or encrypted data.
+     * Update provider
+     * @description Updates provider name or encrypted data.
      */
     patch: {
       parameters: {
@@ -2911,30 +3199,30 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the connection. */
-          connectionId: components["schemas"]["ConnectionId"];
+          /** @description Opaque identifier of the provider. */
+          providerId: components["schemas"]["ProviderId"];
         };
         cookie?: never;
       };
-      /** @description Request payload for updating an existing workspace connection. */
+      /** @description Request payload for updating an existing workspace provider. */
       requestBody: {
         content: {
-          "application/json": components["schemas"]["UpdateConnection"];
+          "application/json": components["schemas"]["UpdateProvider"];
         };
       };
       responses: {
         /**
-         * @description Response type for a workspace connection.
+         * @description Response type for a workspace inference provider.
          *
-         *     Note: The encrypted connection data is never exposed in API responses.
-         *     Only metadata about the connection is returned.
+         *     Note: The encrypted provider data is never exposed in API responses. Only
+         *     metadata about the provider is returned.
          */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["Connection"];
+            "application/json": components["schemas"]["Provider"];
           };
         };
         /**
@@ -3019,7 +3307,7 @@ interface paths {
     };
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/connections/{connectionId}/verify/": {
+  "/workspaces/{workspaceSlug}/providers/{providerId}/verify/": {
     parameters: {
       query?: never;
       header?: never;
@@ -3029,8 +3317,8 @@ interface paths {
     get?: never;
     put?: never;
     /**
-     * Verify connection
-     * @description Checks whether the connection's backing store is reachable with its stored credentials.
+     * Verify provider
+     * @description Checks whether the provider is reachable with its stored credentials.
      */
     post: {
       parameters: {
@@ -3039,8 +3327,8 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the connection. */
-          connectionId: components["schemas"]["ConnectionId"];
+          /** @description Opaque identifier of the provider. */
+          providerId: components["schemas"]["ProviderId"];
         };
         cookie?: never;
       };
@@ -3108,7 +3396,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  "/workspaces/{workspaceSlug}/connections/{connectionId}/picker-token/": {
+  "/workspaces/{workspaceSlug}/connections/oauth/{provider}/start/": {
     parameters: {
       query?: never;
       header?: never;
@@ -3118,8 +3406,8 @@ interface paths {
     get?: never;
     put?: never;
     /**
-     * Mint picker token
-     * @description Returns a short-lived provider access token for a browser file picker (file services with a token-based picker only). The refresh token is never returned.
+     * Start cloud file OAuth
+     * @description Begins the OAuth authorization for a cloud file-service connection and returns the provider authorize URL to redirect the user to. On the user's consent, the provider redirects to the callback, which creates the connection.
      */
     post: {
       parameters: {
@@ -3128,42 +3416,34 @@ interface paths {
         path: {
           /** @description URL-safe workspace identifier. */
           workspaceSlug: string;
-          /** @description Opaque identifier of the connection. */
-          connectionId: components["schemas"]["ConnectionId"];
+          /** @description The cloud file provider to connect. */
+          provider: components["schemas"]["FileServiceProvider"];
         };
         cookie?: never;
       };
-      requestBody?: never;
+      /** @description Request payload for starting a cloud file-service OAuth authorization. */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["StartFileServiceOAuth"];
+        };
+      };
       responses: {
-        /**
-         * @description A short-lived provider OAuth access token for a browser file picker.
-         *
-         *     Carries only the access token and its expiry — never the refresh token, which
-         *     stays server-side. The token is minted from the connection's stored
-         *     credentials and is short-lived (the provider's access-token lifetime), so the
-         *     browser holds a narrow, expiring credential rather than a durable one.
-         */
+        /** @description The response to a successful authorization start: where to send the user. */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["PickerToken"];
+            "application/json": components["schemas"]["OAuthStartResponse"];
           };
         };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
+        /** @description Failed to parse the request body as JSON */
         400: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["ErrorResponse"];
+            "text/plain": string;
           };
         };
         /**
@@ -3196,111 +3476,8 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        404: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
-          };
-        };
-      };
-    };
-    delete?: never;
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
-  "/workspaces/{workspaceSlug}/connections/oauth/{provider}/start/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
-    get?: never;
-    put?: never;
-    /**
-     * Start cloud file OAuth
-     * @description Begins the OAuth authorization for a cloud file-service connection and returns the provider authorize URL to redirect the user to. On the user's consent, the provider redirects to the callback, which creates the connection.
-     */
-    post: {
-      parameters: {
-        query?: never;
-        header?: never;
-        path: {
-          /** @description URL-safe workspace identifier. */
-          workspaceSlug: string;
-          /** @description The cloud file provider to connect. */
-          provider: components["schemas"]["Provider"];
-        };
-        cookie?: never;
-      };
-      /** @description Request payload for starting a cloud file-service OAuth authorization. */
-      requestBody: {
-        content: {
-          "application/json": components["schemas"]["StartFileServiceOAuth"];
-        };
-      };
-      responses: {
-        /** @description The response to a successful authorization start: where to send the user. */
-        200: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["OAuthStartResponse"];
-          };
-        };
-        /** @description Failed to parse the request body as JSON */
-        400: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        401: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
-          };
-        };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        403: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
-          };
-        };
-        /** @description Expected request with `Content-Type: application/json` */
-        415: {
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
           headers: {
             [name: string]: unknown;
           };
@@ -9524,28 +9701,481 @@ interface paths {
         };
       };
       responses: {
-        /** @description Workspace webhook response. */
+        /** @description Workspace webhook response. */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["Webhook"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+      };
+    };
+    trace?: never;
+  };
+  "/workspaces/{workspaceSlug}/webhooks/{webhookId}/test/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    /**
+     * Test webhook
+     * @description Sends a test payload to the webhook endpoint and returns the result.
+     */
+    post: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          /** @description URL-safe workspace identifier. */
+          workspaceSlug: string;
+          /** @description Opaque identifier of the webhook. */
+          webhookId: components["schemas"]["WebhookId"];
+        };
+        cookie?: never;
+      };
+      /** @description Request payload for testing a webhook. */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["TestWebhook"];
+        };
+      };
+      responses: {
+        /** @description Result of a webhook delivery attempt. */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["WebhookResult"];
+          };
+        };
+        /** @description Failed to parse the request body as JSON */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+      };
+    };
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/account/identities/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List sign-in methods
+     * @description Returns the authenticated account's identities: its password and any linked providers.
+     */
+    get: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path?: never;
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description The account's sign-in methods. */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["AccountIdentities"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/account/identities/password/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    /**
+     * Set or change password
+     * @description Sets or changes the account's password. Changing an existing password requires the current password; setting a first password on an account that has none requires a step-up re-authentication proof.
+     */
+    put: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path?: never;
+        cookie?: never;
+      };
+      /**
+       * @description A password set or change.
+       *
+       *     When the account already has a password, `current_password` is required and
+       *     verified before the change is applied, so a hijacked session or CSRF cannot
+       *     silently reset it (and lock out the real owner). When the account has no
+       *     password yet (an SSO-only account setting its first one), there is nothing to
+       *     re-authenticate against, so a fresh step-up `reauth_proof` is required instead
+       *     — a live session alone must not mint a durable new credential.
+       */
+      requestBody: {
+        content: {
+          "application/json": components["schemas"]["SetPassword"];
+        };
+      };
+      responses: {
+        /** @description Password set. */
+        204: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content?: never;
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /** @description Expected request with `Content-Type: application/json` */
+        415: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+        /** @description Failed to deserialize the JSON body into the target type */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "text/plain": string;
+          };
+        };
+      };
+    };
+    post?: never;
+    /**
+     * Remove password
+     * @description Removes the account's password, leaving it able to sign in only through its linked providers. Refused if the password is the account's only sign-in method.
+     */
+    delete: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path?: never;
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description Password removed. */
+        204: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content?: never;
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
+        409: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            "application/json": components["schemas"]["ErrorResponse"];
+          };
+        };
+      };
+    };
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  "/account/identities/{provider}/": {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    /**
+     * Link a provider
+     * @description Begins linking the given OpenID Connect provider to the authenticated account and returns the provider authorize URL. Requires a step-up re-authentication proof (`reauthProof`, from the reauth endpoint). On consent, the callback attaches the verified provider identity to the caller's account.
+     */
+    post: {
+      parameters: {
+        query?: {
+          /**
+           * @description A step-up re-authentication proof. Required to start a *link* (adding a
+           *     provider is a credential-adding action, so a live session alone is not
+           *     enough); ignored for sign-in and reauth.
+           */
+          reauthProof?: string;
+          /**
+           * @description Frontend URL to return to once done. Carried through the flow and used to
+           *     build the callback's redirect.
+           */
+          redirectUri?: string;
+        };
+        header?: never;
+        path: {
+          /** @description The identity provider to act on. */
+          provider: components["schemas"]["IdentityProvider"];
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description The response to a successful sign-in start: where to send the user. */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "application/json": components["schemas"]["Webhook"];
-          };
-        };
-        /**
-         * @description HTTP error response representation with security-conscious design.
-         *
-         *     This struct contains all the information needed to serialize an error
-         *     response, including the error name, message, HTTP status code, resource
-         *     information, and user-friendly messages.
-         */
-        400: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "application/json": components["schemas"]["ErrorResponse"];
+            "application/json": components["schemas"]["OidcStartResponse"];
           };
         };
         /**
@@ -9570,7 +10200,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        403: {
+        404: {
           headers: {
             [name: string]: unknown;
           };
@@ -9585,7 +10215,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        503: {
           headers: {
             [name: string]: unknown;
           };
@@ -9593,76 +10223,44 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /** @description Expected request with `Content-Type: application/json` */
-        415: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
-        /** @description Failed to deserialize the JSON body into the target type */
-        422: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
       };
     };
-    trace?: never;
-  };
-  "/workspaces/{workspaceSlug}/webhooks/{webhookId}/test/": {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
-    get?: never;
-    put?: never;
     /**
-     * Test webhook
-     * @description Sends a test payload to the webhook endpoint and returns the result.
+     * Unlink a provider
+     * @description Removes a linked OIDC provider from the account. Refused if the provider is the account's only sign-in method.
      */
-    post: {
+    delete: {
       parameters: {
         query?: never;
         header?: never;
         path: {
-          /** @description URL-safe workspace identifier. */
-          workspaceSlug: string;
-          /** @description Opaque identifier of the webhook. */
-          webhookId: components["schemas"]["WebhookId"];
+          /** @description The identity provider to act on. */
+          provider: components["schemas"]["IdentityProvider"];
         };
         cookie?: never;
       };
-      /** @description Request payload for testing a webhook. */
-      requestBody: {
-        content: {
-          "application/json": components["schemas"]["TestWebhook"];
-        };
-      };
+      requestBody?: never;
       responses: {
-        /** @description Result of a webhook delivery attempt. */
-        200: {
+        /** @description Provider unlinked. */
+        204: {
           headers: {
             [name: string]: unknown;
           };
-          content: {
-            "application/json": components["schemas"]["WebhookResult"];
-          };
+          content?: never;
         };
-        /** @description Failed to parse the request body as JSON */
+        /**
+         * @description HTTP error response representation with security-conscious design.
+         *
+         *     This struct contains all the information needed to serialize an error
+         *     response, including the error name, message, HTTP status code, resource
+         *     information, and user-friendly messages.
+         */
         400: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            "text/plain": string;
+            "application/json": components["schemas"]["ErrorResponse"];
           };
         };
         /**
@@ -9687,7 +10285,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        403: {
+        404: {
           headers: {
             [name: string]: unknown;
           };
@@ -9702,7 +10300,7 @@ interface paths {
          *     response, including the error name, message, HTTP status code, resource
          *     information, and user-friendly messages.
          */
-        404: {
+        409: {
           headers: {
             [name: string]: unknown;
           };
@@ -9710,27 +10308,8 @@ interface paths {
             "application/json": components["schemas"]["ErrorResponse"];
           };
         };
-        /** @description Expected request with `Content-Type: application/json` */
-        415: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
-        /** @description Failed to deserialize the JSON body into the target type */
-        422: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            "text/plain": string;
-          };
-        };
       };
     };
-    delete?: never;
     options?: never;
     head?: never;
     patch?: never;
@@ -10638,6 +11217,18 @@ interface components {
       data: components["schemas"]["ConnectionActivityParams"];
       /** @constant */
       type: "connection.sync.failed";
+    } | {
+      data: components["schemas"]["ProviderActivityParams"];
+      /** @constant */
+      type: "provider.created";
+    } | {
+      data: components["schemas"]["ProviderActivityParams"];
+      /** @constant */
+      type: "provider.updated";
+    } | {
+      data: components["schemas"]["ProviderActivityParams"];
+      /** @constant */
+      type: "provider.deleted";
     } | {
       data: components["schemas"]["WebhookActivityParams"];
       /** @constant */
@@ -10710,7 +11301,7 @@ interface components {
      *     to categorize different types of activities that occur within workspaces for comprehensive
      *     audit trail and activity tracking.
      */
-    ActivityType: "workspace.created" | "workspace.updated" | "workspace.deleted" | "member.added" | "member.updated" | "member.deleted" | "invite.created" | "invite.accepted" | "invite.declined" | "invite.canceled" | "connection.created" | "connection.updated" | "connection.deleted" | "connection.sync.started" | "connection.sync.completed" | "connection.sync.failed" | "webhook.created" | "webhook.updated" | "webhook.deleted" | "file.created" | "file.updated" | "file.deleted" | "pipeline.created" | "pipeline.updated" | "pipeline.deleted" | "pipeline.detection.started" | "pipeline.detection.completed" | "pipeline.detection.failed" | "pipeline.redaction.created" | "policy.created" | "policy.updated" | "policy.deleted";
+    ActivityType: "workspace.created" | "workspace.updated" | "workspace.deleted" | "member.added" | "member.updated" | "member.deleted" | "invite.created" | "invite.accepted" | "invite.declined" | "invite.canceled" | "connection.created" | "connection.updated" | "connection.deleted" | "connection.sync.started" | "connection.sync.completed" | "connection.sync.failed" | "provider.created" | "provider.updated" | "provider.deleted" | "webhook.created" | "webhook.updated" | "webhook.deleted" | "file.created" | "file.updated" | "file.deleted" | "pipeline.created" | "pipeline.updated" | "pipeline.deleted" | "pipeline.detection.started" | "pipeline.detection.completed" | "pipeline.detection.failed" | "pipeline.redaction.created" | "policy.created" | "policy.updated" | "policy.deleted";
     /** @description API token response structure. */
     ApiToken: {
       /**
@@ -11782,6 +12373,8 @@ interface components {
      *     Only metadata about the connection is returned.
      */
     Connection: {
+      /** @description Capability category of the connection (object store, file service). */
+      connectionType: components["schemas"]["ConnectionType"];
       /**
        * Format: date-time
        * @description When the connection was created.
@@ -11795,11 +12388,19 @@ interface components {
       id: components["schemas"]["ConnectionId"];
       /** @description Whether the connection is enabled. */
       isActive: boolean;
-      /** @description Provider identifier (`s3`, `azure`, `gcs`, `openai`, `ollama`, ...). */
+      /**
+       * Format: date-time
+       * @description When the connection last synced successfully, if ever. Independent of
+       *     `sync`: a connection with no schedule still records its on-demand syncs.
+       */
+      lastSyncedAt?: string;
+      /** @description Provider identifier (`s3`, `azure`, `gcs`, `google_drive`, `dropbox`, ...). */
       provider: string;
-      /** @description Capability category of the provider (object store, language model, ...). */
-      providerType: components["schemas"]["ProviderType"];
-      /** @description Sync configuration; present only for sync-capable connections. */
+      /**
+       * @description Scheduled-sync configuration; present only for connections that sync on a
+       *     timer. Its absence does not mean the connection cannot sync — a file
+       *     service and an unscheduled object store both transfer on demand.
+       */
       sync?: components["schemas"]["SyncSchedule"];
       /**
        * Format: date-time
@@ -11817,12 +12418,12 @@ interface components {
       connectionName: string;
     };
     /**
-     * @description A fully-typed connection configuration for any capability.
+     * @description A fully-typed transfer-connection configuration.
      *
      *     Untagged: the two inner enums have disjoint `provider` values, so serde
      *     resolves the variant from the flat payload without an outer discriminator.
      */
-    ConnectionConfig: components["schemas"]["StorageConfig"] | components["schemas"]["FileServiceConfig"] | components["schemas"]["LlmConfig"];
+    ConnectionConfig: components["schemas"]["StorageConfig"] | components["schemas"]["FileServiceConfig"];
     /** @description Opaque conn identifier (conn_<uuid>). */
     ConnectionId: string;
     /**
@@ -11942,6 +12543,17 @@ interface components {
        */
       syncId: string;
     };
+    /**
+     * @description The capability category of a transfer connection.
+     *
+     *     Corresponds to the `CONNECTION_TYPE` PostgreSQL enum. A stable, closed set:
+     *     the concrete provider (the `provider` column, e.g. `s3`) stays open and
+     *     extensible, while its capability is one of these types. Both categories are
+     *     transfer-capable — an object store is enumerable and syncs on a timer; a file
+     *     service transfers on demand. Inference services are a separate resource
+     *     (`workspace_providers`), not a connection.
+     */
+    ConnectionType: "object_store" | "file_service";
     /** @description Result of a connection reachability check. */
     ConnectionVerification: {
       /** @description Failure reason when not reachable; omitted on success. */
@@ -12038,8 +12650,8 @@ interface components {
        */
       isActive?: boolean;
       /**
-       * @description Sync configuration. Applies only to sync-capable providers (object
-       *     stores); rejected for others. Omit for manual-only defaults.
+       * @description Scheduled-sync configuration. Accepted only for schedulable providers
+       *     (object stores); rejected for others. Omit for on-demand only.
        */
       sync?: components["schemas"]["SyncScheduleInput"];
     };
@@ -12134,6 +12746,22 @@ interface components {
       /** @constant */
       source: "inline";
     });
+    /** @description Request payload for creating a new workspace provider. */
+    CreateProvider: {
+      /**
+       * @description Typed provider configuration (provider tag + its credentials), encrypted at
+       *     rest. The `provider` tag selects which credential shape is required and
+       *     which model type the provider has.
+       */
+      config: components["schemas"]["ProviderConfig"];
+      /** @description Human-readable provider display name. */
+      displayName: string;
+      /**
+       * @description Whether the provider is enabled. Omit to default to active; set `false` to
+       *     create it disabled.
+       */
+      isActive?: boolean;
+    };
     /** @description Request payload for creating a new workspace webhook. */
     CreateWebhook: {
       /** @description Detailed description of the webhook's purpose (max 500 characters). */
@@ -12849,7 +13477,7 @@ interface components {
      */
     FileServiceConfig: {
       /** @description Which provider backs this connection. */
-      provider: components["schemas"]["Provider"];
+      provider: components["schemas"]["FileServiceProvider"];
       /**
        * @description The folder (id or path) new exports are written into; `None` uses the
        *     account root.
@@ -12858,6 +13486,13 @@ interface components {
       /** @description The OAuth token set for this connection. */
       tokens: components["schemas"]["OAuthTokens"];
     };
+    /**
+     * @description A supported cloud file-service provider.
+     *
+     *     The serialized form (snake_case) is the `provider` tag stored on a connection
+     *     and used in the API, so every provider name lives in exactly one place.
+     */
+    FileServiceProvider: "google_drive" | "dropbox" | "one_drive" | "box";
     /**
      * @description A supported file extension.
      * @enum {string}
@@ -13563,6 +14198,16 @@ interface components {
       /** @description The files to import. Already-imported files are skipped. */
       files: components["schemas"]["PickedFile"][];
     };
+    /**
+     * @description A fully-typed inference connection configuration, across every inference kind.
+     *
+     *     Inference is a family: a language model for chat today, and other model kinds
+     *     (e.g. named-entity recognition) as they are added. Each kind owns its own
+     *     config with its own `provider` tag, and this enum is untagged, so the flat
+     *     payload's `provider` remains the sole discriminator — an inference kind is
+     *     added as a new variant with no change to the wire format or storage.
+     */
+    InferenceConfig: components["schemas"]["LlmConfig"];
     /**
      * @description Workspace invite with complete information.
      *
@@ -14354,12 +14999,12 @@ interface components {
     };
     /**
      * @description Path parameters for the OAuth start endpoint: which cloud file provider to
-     *     begin authorizing. The provider is the crate's [`Provider`], so the API and
+     *     begin authorizing. The provider is the crate's [`FileServiceProvider`], so the API and
      *     stored config name each provider identically.
      */
     OAuthStartPathParams: {
       /** @description The cloud file provider to connect. */
-      provider: components["schemas"]["Provider"];
+      provider: components["schemas"]["FileServiceProvider"];
     };
     /** @description The response to a successful authorization start: where to send the user. */
     OAuthStartResponse: {
@@ -14507,6 +15152,22 @@ interface components {
        */
       expiresAt?: number;
     };
+    /**
+     * @description Body for minting a browser file-picker token.
+     *
+     *     The OneDrive v8 picker requests a token per resource (it names the resource in
+     *     each `authenticate` command); the caller passes that `resource` so the server
+     *     mints a token scoped to exactly it. Ignored by providers whose picker takes a
+     *     single provider token (Google Drive, Box); omit it for those.
+     */
+    PickerTokenRequest: {
+      /**
+       * @description The resource the picker asked for (its `authenticate` command's
+       *     `resource`), e.g. `https://contoso-my.sharepoint.com`. Optional; when
+       *     absent the server uses the connection's default picker resource.
+       */
+      resource?: string;
+    };
     /** @description Pipeline response. */
     Pipeline: {
       /**
@@ -15088,22 +15749,105 @@ interface components {
       not: components["schemas"]["Predicate"];
     };
     /**
-     * @description A supported cloud file-service provider.
+     * @description Response type for a workspace inference provider.
      *
-     *     The serialized form (snake_case) is the `provider` tag stored on a connection
-     *     and used in the API, so every provider name lives in exactly one place.
+     *     Note: The encrypted provider data is never exposed in API responses. Only
+     *     metadata about the provider is returned.
+     */
+    Provider: {
+      /**
+       * Format: date-time
+       * @description When the provider was created.
+       */
+      createdAt: string;
+      /** @description Account that created this provider. */
+      createdBy: components["schemas"]["AccountRef"];
+      /** @description Human-readable provider display name. */
+      displayName: string;
+      /** @description Opaque identifier of the provider. */
+      id: components["schemas"]["ProviderId"];
+      /** @description Whether the provider is enabled. */
+      isActive: boolean;
+      /** @description Provider identifier (`openai`, `ollama`, `anthropic`, ...). */
+      provider: string;
+      /** @description Inference model type of the provider (llm, ner). */
+      providerType: components["schemas"]["ProviderType"];
+      /**
+       * Format: date-time
+       * @description When the provider was last updated.
+       */
+      updatedAt: string;
+      /** @description Handle of the workspace this provider belongs to. */
+      workspaceSlug: components["schemas"]["Handle"];
+    };
+    /** @description Params of a provider activity (`provider.*`). */
+    ProviderActivityParams: {
+      /** @description Id of the provider. */
+      providerId: components["schemas"]["ProviderId"];
+      /** @description Display name of the provider. */
+      providerName: string;
+    };
+    /**
+     * @description A fully-typed inference-provider configuration.
+     *
+     *     Untagged: the inner config's `provider` tag is the sole discriminator, so the
+     *     stored/wire form is flat. A new inference kind is added as a variant of
+     *     [`InferenceConfig`] with no change here.
+     */
+    ProviderConfig: components["schemas"]["InferenceConfig"];
+    /** @description Opaque prov identifier (prov_<uuid>). */
+    ProviderId: string;
+    /**
+     * @description Generic paginated response wrapper.
+     *
+     *     Provides a consistent structure for all paginated API responses with
+     *     cursor-based pagination support. When `next_cursor` is present, there
+     *     are more items to fetch.
+     */
+    ProviderPage: {
+      /** @description Items in this page. */
+      items: components["schemas"]["Provider"][];
+      /** @description Cursor to fetch the next page. Present only when more items exist. */
+      nextCursor?: string;
+      /**
+       * Format: int64
+       * @description Total count of items matching the query (if requested).
+       */
+      total?: number;
+    };
+    /**
+     * @description Path parameters for provider operations.
+     *
+     *     The workspace is resolved separately from the `{workspaceSlug}` segment by the
+     *     [`WorkspaceContext`] extractor.
+     *
+     *     [`WorkspaceContext`]: crate::extract::WorkspaceContext
      */
-    Provider: "google_drive" | "dropbox" | "one_drive" | "box";
+    ProviderPathParams: {
+      /** @description Opaque identifier of the provider. */
+      providerId: components["schemas"]["ProviderId"];
+    };
     /**
-     * @description The capability category of a connection's provider.
+     * @description The inference model type backing a workspace provider.
      *
-     *     Corresponds to the `PROVIDER_TYPE` PostgreSQL enum. A stable, closed set:
-     *     the concrete provider (the `provider` column, e.g. `s3` or `anthropic`) stays
-     *     open and extensible, while its capability is one of these types. Lets a
-     *     connection be found by what it can do — e.g. a workspace's language model —
-     *     without decrypting its config.
+     *     Corresponds to the `PROVIDER_TYPE` PostgreSQL enum. A workspace provider is an
+     *     inference service the platform calls; this says which kind of model it is — a
+     *     language model for chat, or a named-entity-recognition model for extraction.
+     *     The concrete vendor (the `provider` column, e.g. `openai`) is orthogonal and
+     *     stays open; this type is a stable, closed set used to find a workspace's
+     *     provider of a given type without decrypting its config.
      */
-    ProviderType: "object_store" | "language_model" | "file_service";
+    ProviderType: "llm" | "ner";
+    /** @description Query parameters for listing providers. */
+    ProvidersQuery: {
+      /**
+       * @description Filter by provider (`openai`, `ollama`, `anthropic`). Repeatable; a
+       *     provider matches if it uses any of the given providers. Empty means no
+       *     filter.
+       * @default []
+       */
+      provider?: string[];
+    };
     /**
      * @description Public view of an account, returned when looking up someone other than the
      *     authenticated caller. Carries only the fields safe to share with a
@@ -15807,11 +16551,16 @@ interface components {
       reason?: string;
     };
     /**
-     * @description What an import does with a file whose source object no longer exists.
+     * @description What a whole-listing import does with a file whose source object no longer
+     *     exists.
      *
-     *     Corresponds to the `SYNC_DELETION_POLICY` PostgreSQL enum. Deletion is opt-in
-     *     per connection: the default `Ignore` keeps imports strictly additive so a
-     *     transient listing error or a misconfigured root path can never remove files.
+     *     Corresponds to the `SYNC_DELETION_POLICY` PostgreSQL enum. Only whole-listing
+     *     import reconciles deletions (it compares the full source listing against what
+     *     was imported), so this applies to object-store import alone; picker-driven
+     *     file-service import transfers only the files the user selected and never
+     *     reconciles. Deletion is opt-in per connection: the default `Ignore` keeps
+     *     imports strictly additive so a transient listing error or a misconfigured
+     *     root path can never remove files.
      */
     SyncDeletionPolicy: "ignore" | "delete";
     /**
@@ -15819,27 +16568,34 @@ interface components {
      *
      *     Corresponds to the `SYNC_MODE` PostgreSQL enum: `Import` fetches objects from
      *     the connection into the workspace; `Export` pushes workspace files out.
+     *
+     *     A scheduled `Import` is an object-store concept: it enumerates the source and
+     *     pulls the whole listing on a timer. A file service is not enumerated on a
+     *     timer — its import is picker-driven and request-time — so only `Export` is
+     *     scheduled for a file service.
      */
     SyncMode: "import" | "export";
-    /** @description A connection's sync configuration, present only for sync-capable connections. */
+    /**
+     * @description A connection's scheduled-sync configuration (its cron config), present only
+     *     for connections that sync on a timer. A connection can transfer on demand
+     *     without this — it is purely the schedule, not a capability marker. When the
+     *     connection last synced is on [`Connection`] itself, since a connection with no
+     *     schedule still syncs.
+     */
     SyncSchedule: {
       /** @description How an import reconciles files whose source object was deleted. */
       deletionPolicy: components["schemas"]["SyncDeletionPolicy"];
-      /**
-       * Format: date-time
-       * @description When the connection last synced successfully, if ever.
-       */
-      lastSynced?: string;
       /** @description Cron expression for scheduled imports, if configured. */
       scheduleCron?: string;
       /** @description Whether the connection imports data in or exports data out. */
       syncMode: components["schemas"]["SyncMode"];
     };
     /**
-     * @description Sync configuration for a sync-capable connection (object stores).
+     * @description Scheduled-sync configuration for a schedulable connection.
      *
-     *     Only meaningful for connections whose provider supports syncing; omitted for
-     *     connections that do not (e.g. LLM inference).
+     *     Accepted only for providers that can sync on a timer (object stores); rejected
+     *     for others — a file service transfers on demand (picker import, per-file
+     *     export), and an LLM does not transfer at all. Omit for on-demand only.
      */
     SyncScheduleInput: {
       /**
@@ -15865,10 +16621,12 @@ interface components {
     /**
      * @description Defines how a connection sync run was initiated.
      *
-     *     This enumeration corresponds to the `SYNC_TRIGGER_TYPE` PostgreSQL enum and is used
-     *     to track whether a run was manually triggered, scheduled, or triggered by a webhook.
+     *     Corresponds to the `SYNC_TRIGGER_TYPE` PostgreSQL enum. The axis is who
+     *     initiated the run: the connection's own schedule, or anything else — a user,
+     *     the SDK, an external automation (Zapier and the like). The latter is
+     *     `OnDemand`, which covers every non-scheduled trigger, not only a human click.
      */
-    SyncTriggerType: "manual" | "scheduled" | "webhook";
+    SyncTriggerType: "on_demand" | "scheduled";
     /**
      * @description A detection recognition missed.
      *
@@ -17369,8 +18127,8 @@ interface components {
        */
       isActive?: boolean;
       /**
-       * @description Sync configuration. Applies only to sync-capable providers. Omit to leave
-       *     unchanged.
+       * @description Scheduled-sync configuration. Accepted only for schedulable providers
+       *     (object stores); rejected for others. Omit to leave unchanged.
        */
       sync?: components["schemas"]["SyncScheduleInput"];
     };
@@ -17431,6 +18189,18 @@ interface components {
       /** @description Human-readable policy display name. */
       displayName?: string;
     };
+    /** @description Request payload for updating an existing workspace provider. */
+    UpdateProvider: {
+      /**
+       * @description Typed provider configuration. If provided, fully replaces the stored config
+       *     (and, with it, the provider). Omit to leave it unchanged.
+       */
+      config?: components["schemas"]["ProviderConfig"];
+      /** @description Human-readable provider display name. */
+      displayName?: string;
+      /** @description Whether the provider is enabled. Omit to leave unchanged. */
+      isActive?: boolean;
+    };
     /** @description Request payload for updating an existing workspace webhook. */
     UpdateWebhook: {
       /** @description Updated description of the webhook's purpose (max 500 characters). */
@@ -17666,7 +18436,7 @@ interface components {
      *     This enumeration corresponds to the `WEBHOOK_EVENT` PostgreSQL enum and is used
      *     to configure which events a webhook should receive notifications for.
      */
-    WebhookEvent: "file.created" | "file.updated" | "file.deleted" | "member.added" | "member.deleted" | "member.updated" | "connection.created" | "connection.updated" | "connection.deleted" | "connection.sync.started" | "connection.sync.completed" | "connection.sync.failed" | "pipeline.created" | "pipeline.updated" | "pipeline.deleted" | "pipeline.detection.started" | "pipeline.detection.completed" | "pipeline.detection.failed" | "pipeline.redaction.created" | "policy.created" | "policy.updated" | "policy.deleted";
+    WebhookEvent: "file.created" | "file.updated" | "file.deleted" | "member.added" | "member.deleted" | "member.updated" | "connection.created" | "connection.updated" | "connection.deleted" | "connection.sync.started" | "connection.sync.completed" | "connection.sync.failed" | "provider.created" | "provider.updated" | "provider.deleted" | "pipeline.created" | "pipeline.updated" | "pipeline.deleted" | "pipeline.detection.started" | "pipeline.detection.completed" | "pipeline.detection.failed" | "pipeline.redaction.created" | "policy.created" | "policy.updated" | "policy.deleted";
     /** @description Opaque whk identifier (whk_<uuid>). */
     WebhookId: string;
     /**
@@ -17878,380 +18648,393 @@ interface components {
 }
 //#endregion
 //#region src/datatypes/account.d.ts
-type Schemas$23 = components["schemas"];
-type Handle = Schemas$23["Handle"];
-type Account = Schemas$23["Account"];
-type PublicAccount = Schemas$23["PublicAccount"];
-type UpdateAccount = Schemas$23["UpdateAccount"];
-type AccountRef = Schemas$23["AccountRef"];
-type AccountIdentities = Schemas$23["AccountIdentities"];
-type AccountIdentity = Schemas$23["AccountIdentity"];
-type IdentityProvider = Schemas$23["IdentityProvider"];
-type SetPassword = Schemas$23["SetPassword"];
-type OidcStartResponse = Schemas$23["OidcStartResponse"];
+type Schemas$24 = components["schemas"];
+type Handle = Schemas$24["Handle"];
+type Account = Schemas$24["Account"];
+type PublicAccount = Schemas$24["PublicAccount"];
+type UpdateAccount = Schemas$24["UpdateAccount"];
+type AccountRef = Schemas$24["AccountRef"];
+type AccountIdentities = Schemas$24["AccountIdentities"];
+type AccountIdentity = Schemas$24["AccountIdentity"];
+type IdentityProvider = Schemas$24["IdentityProvider"];
+type SetPassword = Schemas$24["SetPassword"];
+type OidcStartResponse = Schemas$24["OidcStartResponse"];
 //#endregion
 //#region src/datatypes/activity.d.ts
-type Schemas$22 = components["schemas"];
-type Activity = Schemas$22["Activity"];
-type ActivityPage = Schemas$22["ActivityPage"];
-type ActivityType = Schemas$22["ActivityType"];
-type ActivityFilterQuery = Schemas$22["ActivityFilterQuery"];
-type ActivityExportOptions = Schemas$22["ActivityExportOptions"];
-type ActivityPayload = Schemas$22["ActivityPayload"];
-type WorkspaceActivityParams = Schemas$22["WorkspaceActivityParams"];
-type MemberActivityParams = Schemas$22["MemberActivityParams"];
-type InviteActivityParams = Schemas$22["InviteActivityParams"];
-type ConnectionActivityParams = Schemas$22["ConnectionActivityParams"];
-type PipelineActivityParams = Schemas$22["PipelineActivityParams"];
-type DetectionActivityParams = Schemas$22["DetectionActivityParams"];
-type RedactionActivityParams = Schemas$22["RedactionActivityParams"];
-type PolicyActivityParams = Schemas$22["PolicyActivityParams"];
-type FileActivityParams = Schemas$22["FileActivityParams"];
-type WebhookActivityParams = Schemas$22["WebhookActivityParams"];
+type Schemas$23 = components["schemas"];
+type Activity = Schemas$23["Activity"];
+type ActivityPage = Schemas$23["ActivityPage"];
+type ActivityType = Schemas$23["ActivityType"];
+type ActivityFilterQuery = Schemas$23["ActivityFilterQuery"];
+type ActivityExportOptions = Schemas$23["ActivityExportOptions"];
+type ActivityPayload = Schemas$23["ActivityPayload"];
+type WorkspaceActivityParams = Schemas$23["WorkspaceActivityParams"];
+type MemberActivityParams = Schemas$23["MemberActivityParams"];
+type InviteActivityParams = Schemas$23["InviteActivityParams"];
+type ConnectionActivityParams = Schemas$23["ConnectionActivityParams"];
+type PipelineActivityParams = Schemas$23["PipelineActivityParams"];
+type DetectionActivityParams = Schemas$23["DetectionActivityParams"];
+type RedactionActivityParams = Schemas$23["RedactionActivityParams"];
+type PolicyActivityParams = Schemas$23["PolicyActivityParams"];
+type FileActivityParams = Schemas$23["FileActivityParams"];
+type WebhookActivityParams = Schemas$23["WebhookActivityParams"];
 //#endregion
 //#region src/datatypes/analytics.d.ts
-type Schemas$21 = components["schemas"];
-type WorkspaceAnalytics = Schemas$21["WorkspaceAnalytics"];
-type StorageAnalytics = Schemas$21["StorageAnalytics"];
-type StorageKindEntry = Schemas$21["StorageKindEntry"];
-type DetectionAnalytics = Schemas$21["DetectionAnalytics"];
-type DetectionStatusEntry = Schemas$21["DetectionStatusEntry"];
-type UsageAnalytics = Schemas$21["UsageAnalytics"];
-type ModelUsage = Schemas$21["ModelUsage"];
-type ModelUsageEntry = Schemas$21["ModelUsageEntry"];
-type Usage = Schemas$21["Usage"];
-type UsageReport = Schemas$21["UsageReport"];
-type TokenCounts = Schemas$21["TokenCounts"];
-type ProviderType = Schemas$21["ProviderType"];
-type RecognizerId = Schemas$21["RecognizerId"];
-type DetectionTimeSeries = Schemas$21["DetectionTimeSeries"];
-type DetectionDayEntry = Schemas$21["DetectionDayEntry"];
+type Schemas$22 = components["schemas"];
+type WorkspaceAnalytics = Schemas$22["WorkspaceAnalytics"];
+type StorageAnalytics = Schemas$22["StorageAnalytics"];
+type StorageKindEntry = Schemas$22["StorageKindEntry"];
+type DetectionAnalytics = Schemas$22["DetectionAnalytics"];
+type DetectionStatusEntry = Schemas$22["DetectionStatusEntry"];
+type UsageAnalytics = Schemas$22["UsageAnalytics"];
+type ModelUsage = Schemas$22["ModelUsage"];
+type ModelUsageEntry = Schemas$22["ModelUsageEntry"];
+type Usage = Schemas$22["Usage"];
+type UsageReport = Schemas$22["UsageReport"];
+type TokenCounts = Schemas$22["TokenCounts"];
+type RecognizerId = Schemas$22["RecognizerId"];
+type DetectionTimeSeries = Schemas$22["DetectionTimeSeries"];
+type DetectionDayEntry = Schemas$22["DetectionDayEntry"];
 //#endregion
 //#region src/datatypes/api-token.d.ts
-type Schemas$20 = components["schemas"];
-type ApiToken = Schemas$20["ApiToken"];
-type ApiTokenWithJWT = Schemas$20["ApiTokenWithJWT"];
-type ApiTokenType = Schemas$20["ApiTokenType"];
-type CreateApiToken = Schemas$20["CreateApiToken"];
-type UpdateApiToken = Schemas$20["UpdateApiToken"];
-type TokenExpiration = Schemas$20["TokenExpiration"];
-type ApiTokenPage = Schemas$20["ApiTokenPage"];
+type Schemas$21 = components["schemas"];
+type ApiToken = Schemas$21["ApiToken"];
+type ApiTokenWithJWT = Schemas$21["ApiTokenWithJWT"];
+type ApiTokenType = Schemas$21["ApiTokenType"];
+type CreateApiToken = Schemas$21["CreateApiToken"];
+type UpdateApiToken = Schemas$21["UpdateApiToken"];
+type TokenExpiration = Schemas$21["TokenExpiration"];
+type ApiTokenPage = Schemas$21["ApiTokenPage"];
 //#endregion
 //#region src/datatypes/artifact.d.ts
-type Schemas$19 = components["schemas"];
-type ArtifactSet = Schemas$19["ArtifactSet"];
-type Layout = Schemas$19["Layout"];
-type LayoutBlock = Schemas$19["LayoutBlock"];
-type LayoutWord = Schemas$19["LayoutWord"];
-type Transcription = Schemas$19["Transcription"];
-type TranscriptSegment = Schemas$19["TranscriptSegment"];
-type TranscriptWord = Schemas$19["TranscriptWord"];
-type Tokens = Schemas$19["Tokens"];
-type Token = Schemas$19["Token"];
+type Schemas$20 = components["schemas"];
+type ArtifactSet = Schemas$20["ArtifactSet"];
+type Layout = Schemas$20["Layout"];
+type LayoutBlock = Schemas$20["LayoutBlock"];
+type LayoutWord = Schemas$20["LayoutWord"];
+type Transcription = Schemas$20["Transcription"];
+type TranscriptSegment = Schemas$20["TranscriptSegment"];
+type TranscriptWord = Schemas$20["TranscriptWord"];
+type Tokens = Schemas$20["Tokens"];
+type Token = Schemas$20["Token"];
 //#endregion
 //#region src/datatypes/audit.d.ts
-type Schemas$18 = components["schemas"];
-type Audit = Schemas$18["Audit"];
-type DocumentContext = Schemas$18["DocumentContext"];
-type CodecParams = Schemas$18["CodecParams"];
-type EntityCoRef = Schemas$18["EntityCoRef"];
-type Report = Schemas$18["Report"];
-type EditSet = Schemas$18["EditSet"];
-type RasterMode = Schemas$18["RasterMode"];
-type Dpi = Schemas$18["Dpi"];
-type Redaction = Schemas$18["Redaction"];
-type Selection = Schemas$18["Selection"];
-type Suppress = Schemas$18["Suppress"];
-type ManualIntent = Schemas$18["ManualIntent"];
-type LeakProfile = Schemas$18["LeakProfile"];
-type RuleMatch = Schemas$18["RuleMatch"];
-type Attribution = Schemas$18["Attribution"];
-type CitedAttribution = Schemas$18["CitedAttribution"];
-type FreeformAttribution = Schemas$18["FreeformAttribution"];
-type ModelEvent = Schemas$18["ModelEvent"];
-type PatternEvent = Schemas$18["PatternEvent"];
-type Conflict = Schemas$18["Conflict"];
-type Contested = Schemas$18["Contested"];
-type Deduplication = Schemas$18["Deduplication"];
-type Calibration = Schemas$18["Calibration"];
-type OperatorId = Schemas$18["OperatorId"];
-type AuditHash = Schemas$18["AuditHash"];
-type Category = Schemas$18["Category"];
+type Schemas$19 = components["schemas"];
+type Audit = Schemas$19["Audit"];
+type DocumentContext = Schemas$19["DocumentContext"];
+type CodecParams = Schemas$19["CodecParams"];
+type EntityCoRef = Schemas$19["EntityCoRef"];
+type Report = Schemas$19["Report"];
+type EditSet = Schemas$19["EditSet"];
+type RasterMode = Schemas$19["RasterMode"];
+type Dpi = Schemas$19["Dpi"];
+type Redaction = Schemas$19["Redaction"];
+type Selection = Schemas$19["Selection"];
+type Suppress = Schemas$19["Suppress"];
+type ManualIntent = Schemas$19["ManualIntent"];
+type LeakProfile = Schemas$19["LeakProfile"];
+type RuleMatch = Schemas$19["RuleMatch"];
+type Attribution = Schemas$19["Attribution"];
+type CitedAttribution = Schemas$19["CitedAttribution"];
+type FreeformAttribution = Schemas$19["FreeformAttribution"];
+type ModelEvent = Schemas$19["ModelEvent"];
+type PatternEvent = Schemas$19["PatternEvent"];
+type Conflict = Schemas$19["Conflict"];
+type Contested = Schemas$19["Contested"];
+type Deduplication = Schemas$19["Deduplication"];
+type Calibration = Schemas$19["Calibration"];
+type OperatorId = Schemas$19["OperatorId"];
+type AuditHash = Schemas$19["AuditHash"];
+type Category = Schemas$19["Category"];
 /** Half-open `[start, end)` index range. Generated name; a plain uint range. */
-type RangeOfUint = Schemas$18["Range_of_uint"];
-type SourceRef = Schemas$18["SourceRef"];
-type BoundingBox = Schemas$18["BoundingBox"];
-type Point = Schemas$18["Point"];
-type Polygon = Schemas$18["Polygon"];
-type Dimensions = Schemas$18["Dimensions"];
-type TimeSpan = Schemas$18["TimeSpan"];
-type TextEntity = Schemas$18["TextEntity"];
-type TextAuditEvent = Schemas$18["TextAuditEvent"];
-type TextAuditKind = Schemas$18["TextAuditKind"];
-type TextAuditLog = Schemas$18["TextAuditLog"];
-type TextHint = Schemas$18["TextHint"];
-type TextLocation = Schemas$18["TextLocation"];
-type TextCoord = Schemas$18["TextCoord"];
-type DecodedSpan = Schemas$18["DecodedSpan"];
-type SourceSpan = Schemas$18["SourceSpan"];
-type TextData = Schemas$18["TextData"];
-type TextModel = Schemas$18["TextModel"];
-type TextPattern = Schemas$18["TextPattern"];
-type TextManual = Schemas$18["TextManual"];
-type TextEdit = Schemas$18["TextEdit"];
-type TextAdd = Schemas$18["TextAdd"];
-type TextRefinement = Schemas$18["TextRefinement"];
-type TextRetag = Schemas$18["TextRetag"];
-type ImageEntity = Schemas$18["ImageEntity"];
-type ImageAuditEvent = Schemas$18["ImageAuditEvent"];
-type ImageAuditKind = Schemas$18["ImageAuditKind"];
-type ImageAuditLog = Schemas$18["ImageAuditLog"];
-type ImageHint = Schemas$18["ImageHint"];
-type ImageLocation = Schemas$18["ImageLocation"];
-type ImageData = Schemas$18["ImageData"];
-type ImageModel = Schemas$18["ImageModel"];
-type ImagePattern = Schemas$18["ImagePattern"];
-type ImageManual = Schemas$18["ImageManual"];
-type ImageEdit = Schemas$18["ImageEdit"];
-type ImageAdd = Schemas$18["ImageAdd"];
-type ImageRefinement = Schemas$18["ImageRefinement"];
-type ImageRetag = Schemas$18["ImageRetag"];
-type AudioEntity = Schemas$18["AudioEntity"];
-type AudioAuditEvent = Schemas$18["AudioAuditEvent"];
-type AudioAuditKind = Schemas$18["AudioAuditKind"];
-type AudioAuditLog = Schemas$18["AudioAuditLog"];
-type AudioHint = Schemas$18["AudioHint"];
-type AudioLocation = Schemas$18["AudioLocation"];
-type AudioData = Schemas$18["AudioData"];
-type AudioModel = Schemas$18["AudioModel"];
-type AudioPattern = Schemas$18["AudioPattern"];
-type AudioManual = Schemas$18["AudioManual"];
-type AudioEdit = Schemas$18["AudioEdit"];
-type AudioAdd = Schemas$18["AudioAdd"];
-type AudioRefinement = Schemas$18["AudioRefinement"];
-type AudioRetag = Schemas$18["AudioRetag"];
-type TabularEntity = Schemas$18["TabularEntity"];
-type TabularAuditEvent = Schemas$18["TabularAuditEvent"];
-type TabularAuditKind = Schemas$18["TabularAuditKind"];
-type TabularAuditLog = Schemas$18["TabularAuditLog"];
-type TabularHint = Schemas$18["TabularHint"];
-type TabularLocation = Schemas$18["TabularLocation"];
-type TabularModel = Schemas$18["TabularModel"];
-type TabularPattern = Schemas$18["TabularPattern"];
-type TabularManual = Schemas$18["TabularManual"];
-type TabularEdit = Schemas$18["TabularEdit"];
-type TabularAdd = Schemas$18["TabularAdd"];
-type TabularRefinement = Schemas$18["TabularRefinement"];
-type TabularRetag = Schemas$18["TabularRetag"];
+type RangeOfUint = Schemas$19["Range_of_uint"];
+type SourceRef = Schemas$19["SourceRef"];
+type BoundingBox = Schemas$19["BoundingBox"];
+type Point = Schemas$19["Point"];
+type Polygon = Schemas$19["Polygon"];
+type Dimensions = Schemas$19["Dimensions"];
+type TimeSpan = Schemas$19["TimeSpan"];
+type TextEntity = Schemas$19["TextEntity"];
+type TextAuditEvent = Schemas$19["TextAuditEvent"];
+type TextAuditKind = Schemas$19["TextAuditKind"];
+type TextAuditLog = Schemas$19["TextAuditLog"];
+type TextHint = Schemas$19["TextHint"];
+type TextLocation = Schemas$19["TextLocation"];
+type TextCoord = Schemas$19["TextCoord"];
+type DecodedSpan = Schemas$19["DecodedSpan"];
+type SourceSpan = Schemas$19["SourceSpan"];
+type TextData = Schemas$19["TextData"];
+type TextModel = Schemas$19["TextModel"];
+type TextPattern = Schemas$19["TextPattern"];
+type TextManual = Schemas$19["TextManual"];
+type TextEdit = Schemas$19["TextEdit"];
+type TextAdd = Schemas$19["TextAdd"];
+type TextRefinement = Schemas$19["TextRefinement"];
+type TextRetag = Schemas$19["TextRetag"];
+type ImageEntity = Schemas$19["ImageEntity"];
+type ImageAuditEvent = Schemas$19["ImageAuditEvent"];
+type ImageAuditKind = Schemas$19["ImageAuditKind"];
+type ImageAuditLog = Schemas$19["ImageAuditLog"];
+type ImageHint = Schemas$19["ImageHint"];
+type ImageLocation = Schemas$19["ImageLocation"];
+type ImageData = Schemas$19["ImageData"];
+type ImageModel = Schemas$19["ImageModel"];
+type ImagePattern = Schemas$19["ImagePattern"];
+type ImageManual = Schemas$19["ImageManual"];
+type ImageEdit = Schemas$19["ImageEdit"];
+type ImageAdd = Schemas$19["ImageAdd"];
+type ImageRefinement = Schemas$19["ImageRefinement"];
+type ImageRetag = Schemas$19["ImageRetag"];
+type AudioEntity = Schemas$19["AudioEntity"];
+type AudioAuditEvent = Schemas$19["AudioAuditEvent"];
+type AudioAuditKind = Schemas$19["AudioAuditKind"];
+type AudioAuditLog = Schemas$19["AudioAuditLog"];
+type AudioHint = Schemas$19["AudioHint"];
+type AudioLocation = Schemas$19["AudioLocation"];
+type AudioData = Schemas$19["AudioData"];
+type AudioModel = Schemas$19["AudioModel"];
+type AudioPattern = Schemas$19["AudioPattern"];
+type AudioManual = Schemas$19["AudioManual"];
+type AudioEdit = Schemas$19["AudioEdit"];
+type AudioAdd = Schemas$19["AudioAdd"];
+type AudioRefinement = Schemas$19["AudioRefinement"];
+type AudioRetag = Schemas$19["AudioRetag"];
+type TabularEntity = Schemas$19["TabularEntity"];
+type TabularAuditEvent = Schemas$19["TabularAuditEvent"];
+type TabularAuditKind = Schemas$19["TabularAuditKind"];
+type TabularAuditLog = Schemas$19["TabularAuditLog"];
+type TabularHint = Schemas$19["TabularHint"];
+type TabularLocation = Schemas$19["TabularLocation"];
+type TabularModel = Schemas$19["TabularModel"];
+type TabularPattern = Schemas$19["TabularPattern"];
+type TabularManual = Schemas$19["TabularManual"];
+type TabularEdit = Schemas$19["TabularEdit"];
+type TabularAdd = Schemas$19["TabularAdd"];
+type TabularRefinement = Schemas$19["TabularRefinement"];
+type TabularRetag = Schemas$19["TabularRetag"];
 //#endregion
 //#region src/datatypes/auth.d.ts
-type Schemas$17 = components["schemas"];
-type Login = Schemas$17["Login"];
-type Signup = Schemas$17["Signup"];
-type DesktopTokenRequest = Schemas$17["DesktopTokenRequest"];
-type DesktopToken = Schemas$17["DesktopToken"];
+type Schemas$18 = components["schemas"];
+type Login = Schemas$18["Login"];
+type Signup = Schemas$18["Signup"];
+type DesktopTokenRequest = Schemas$18["DesktopTokenRequest"];
+type DesktopToken = Schemas$18["DesktopToken"];
 //#endregion
 //#region src/datatypes/catalog.d.ts
-type Schemas$16 = components["schemas"];
+type Schemas$17 = components["schemas"];
 /** Registry of the deployment's built-in labels, keyed by id. */
-type LabelCatalog = Schemas$16["LabelCatalog"];
+type LabelCatalog = Schemas$17["LabelCatalog"];
 /** The engine's registered recognizers, grouped into NER and LLM. */
-type RecognizerCatalog = Schemas$16["RecognizerCatalog"];
-type RegisteredRecognizer = Schemas$16["RegisteredRecognizer"];
+type RecognizerCatalog = Schemas$17["RecognizerCatalog"];
+type RegisteredRecognizer = Schemas$17["RegisteredRecognizer"];
 /** Which connector families and providers this deployment can create. */
-type ConnectorCatalog = Schemas$16["ConnectorCatalog"];
-type FileProviders = Schemas$16["FileProviders"];
+type ConnectorCatalog = Schemas$17["ConnectorCatalog"];
+type FileProviders = Schemas$17["FileProviders"];
 //#endregion
 //#region src/datatypes/chat.d.ts
-type Schemas$15 = components["schemas"];
-type ChatSession = Schemas$15["ChatSession"];
-type ChatSessionPage = Schemas$15["ChatSessionPage"];
-type CreateChatSession = Schemas$15["CreateChatSession"];
-type ChatMessage = Schemas$15["ChatMessage"];
-type ChatRole = Schemas$15["ChatRole"];
-type SendChatMessage = Schemas$15["SendChatMessage"];
-type ChatToken = Schemas$15["ChatToken"];
+type Schemas$16 = components["schemas"];
+type ChatSession = Schemas$16["ChatSession"];
+type ChatSessionPage = Schemas$16["ChatSessionPage"];
+type CreateChatSession = Schemas$16["CreateChatSession"];
+type ChatMessage = Schemas$16["ChatMessage"];
+type ChatRole = Schemas$16["ChatRole"];
+type SendChatMessage = Schemas$16["SendChatMessage"];
+type ChatToken = Schemas$16["ChatToken"];
 //#endregion
 //#region src/datatypes/connection.d.ts
-type Schemas$14 = components["schemas"];
-type ConnectionId = Schemas$14["ConnectionId"];
-type Connection = Schemas$14["Connection"];
-type CreateConnection = Schemas$14["CreateConnection"];
-type UpdateConnection = Schemas$14["UpdateConnection"];
-type ConnectionsQuery = Schemas$14["ConnectionsQuery"];
-type ConnectionPage = Schemas$14["ConnectionPage"];
-type ConnectionSync = Schemas$14["ConnectionSync"];
-type ConnectionSyncPage = Schemas$14["ConnectionSyncPage"];
-type ConnectionVerification = Schemas$14["ConnectionVerification"];
-type ImportFiles = Schemas$14["ImportFiles"];
-type PickedFile = Schemas$14["PickedFile"];
-type ExportFiles = Schemas$14["ExportFiles"];
-type PickerToken = Schemas$14["PickerToken"];
-type SyncMode = Schemas$14["SyncMode"];
-type SyncStatus = Schemas$14["SyncStatus"];
-type SyncTriggerType = Schemas$14["SyncTriggerType"];
-type SyncDeletionPolicy = Schemas$14["SyncDeletionPolicy"];
-type ConnectionConfig = Schemas$14["ConnectionConfig"];
-type StorageConfig = Schemas$14["StorageConfig"];
-type S3Credentials = Schemas$14["S3Credentials"];
-type AzureCredentials = Schemas$14["AzureCredentials"];
-type GcsCredentials = Schemas$14["GcsCredentials"];
-type LlmConfig = Schemas$14["LlmConfig"];
-type AuthenticatedProvider = Schemas$14["AuthenticatedProvider"];
-type UnauthenticatedProvider = Schemas$14["UnauthenticatedProvider"];
-type Provider = Schemas$14["Provider"];
-type FileServiceConfig = Schemas$14["FileServiceConfig"];
-type OAuthTokens = Schemas$14["OAuthTokens"];
-type StartFileServiceOAuth = Schemas$14["StartFileServiceOAuth"];
-type OAuthStartResponse = Schemas$14["OAuthStartResponse"];
-type SyncSchedule = Schemas$14["SyncSchedule"];
-type SyncScheduleInput = Schemas$14["SyncScheduleInput"];
+type Schemas$15 = components["schemas"];
+type ConnectionId = Schemas$15["ConnectionId"];
+type Connection = Schemas$15["Connection"];
+type ConnectionType = Schemas$15["ConnectionType"];
+type CreateConnection = Schemas$15["CreateConnection"];
+type UpdateConnection = Schemas$15["UpdateConnection"];
+type ConnectionsQuery = Schemas$15["ConnectionsQuery"];
+type ConnectionPage = Schemas$15["ConnectionPage"];
+type ConnectionSync = Schemas$15["ConnectionSync"];
+type ConnectionSyncPage = Schemas$15["ConnectionSyncPage"];
+type ConnectionVerification = Schemas$15["ConnectionVerification"];
+type ImportFiles = Schemas$15["ImportFiles"];
+type PickedFile = Schemas$15["PickedFile"];
+type ExportFiles = Schemas$15["ExportFiles"];
+type PickerTokenRequest = Schemas$15["PickerTokenRequest"];
+type PickerToken = Schemas$15["PickerToken"];
+type SyncMode = Schemas$15["SyncMode"];
+type SyncStatus = Schemas$15["SyncStatus"];
+type SyncTriggerType = Schemas$15["SyncTriggerType"];
+type SyncDeletionPolicy = Schemas$15["SyncDeletionPolicy"];
+type ConnectionConfig = Schemas$15["ConnectionConfig"];
+type StorageConfig = Schemas$15["StorageConfig"];
+type S3Credentials = Schemas$15["S3Credentials"];
+type AzureCredentials = Schemas$15["AzureCredentials"];
+type GcsCredentials = Schemas$15["GcsCredentials"];
+type LlmConfig = Schemas$15["LlmConfig"];
+type AuthenticatedProvider = Schemas$15["AuthenticatedProvider"];
+type UnauthenticatedProvider = Schemas$15["UnauthenticatedProvider"];
+type FileServiceProvider = Schemas$15["FileServiceProvider"];
+type FileServiceConfig = Schemas$15["FileServiceConfig"];
+type OAuthTokens = Schemas$15["OAuthTokens"];
+type StartFileServiceOAuth = Schemas$15["StartFileServiceOAuth"];
+type OAuthStartResponse = Schemas$15["OAuthStartResponse"];
+type SyncSchedule = Schemas$15["SyncSchedule"];
+type SyncScheduleInput = Schemas$15["SyncScheduleInput"];
 //#endregion
 //#region src/datatypes/detection.d.ts
-type Schemas$13 = components["schemas"];
-type DetectionId = Schemas$13["DetectionId"];
-type Detection = Schemas$13["Detection"];
-type DetectionMetadata = Schemas$13["DetectionMetadata"];
-type CreateDetection = Schemas$13["CreateDetection"];
-type DetectionStatus = Schemas$13["DetectionStatus"];
-type DetectionPage = Schemas$13["DetectionPage"];
-type WorkspaceDetectionsQuery = Schemas$13["WorkspaceDetectionsQuery"];
-type PipelineDetectionsQuery = Schemas$13["PipelineDetectionsQuery"];
-type DetectionStatusEvent = Schemas$13["DetectionStatusEvent"];
-type RedactionId = Schemas$13["RedactionId"];
-type RedactDetection = Schemas$13["RedactDetection"];
-type RedactionResult = Schemas$13["RedactionResult"];
-type RedactionResultPage = Schemas$13["RedactionResultPage"];
+type Schemas$14 = components["schemas"];
+type DetectionId = Schemas$14["DetectionId"];
+type Detection = Schemas$14["Detection"];
+type DetectionMetadata = Schemas$14["DetectionMetadata"];
+type CreateDetection = Schemas$14["CreateDetection"];
+type DetectionStatus = Schemas$14["DetectionStatus"];
+type DetectionPage = Schemas$14["DetectionPage"];
+type WorkspaceDetectionsQuery = Schemas$14["WorkspaceDetectionsQuery"];
+type PipelineDetectionsQuery = Schemas$14["PipelineDetectionsQuery"];
+type DetectionStatusEvent = Schemas$14["DetectionStatusEvent"];
+type RedactionId = Schemas$14["RedactionId"];
+type RedactDetection = Schemas$14["RedactDetection"];
+type RedactionResult = Schemas$14["RedactionResult"];
+type RedactionResultPage = Schemas$14["RedactionResultPage"];
 //#endregion
 //#region src/datatypes/error.d.ts
-type Schemas$12 = components["schemas"];
-type ErrorResponse = Schemas$12["ErrorResponse"];
-type ValidationErrorDetail = Schemas$12["ValidationErrorDetail"];
+type Schemas$13 = components["schemas"];
+type ErrorResponse = Schemas$13["ErrorResponse"];
+type ValidationErrorDetail = Schemas$13["ValidationErrorDetail"];
 //#endregion
 //#region src/datatypes/export.d.ts
-type Schemas$11 = components["schemas"];
-type ExportFormat = Schemas$11["ExportFormat"];
-type ExportQuery = Schemas$11["ExportQuery"];
-type DateWindow = Schemas$11["DateWindow"];
+type Schemas$12 = components["schemas"];
+type ExportFormat = Schemas$12["ExportFormat"];
+type ExportQuery = Schemas$12["ExportQuery"];
+type DateWindow = Schemas$12["DateWindow"];
 //#endregion
 //#region src/datatypes/file.d.ts
-type Schemas$10 = components["schemas"];
-type File = Schemas$10["File"];
-type UpdateFile = Schemas$10["UpdateFile"];
-type FileKind = Schemas$10["FileKind"];
-type FileHash = Schemas$10["FileHash"];
-type FormatToken = Schemas$10["FormatToken"];
-type ModalityToken = Schemas$10["ModalityToken"];
-type ListFiles = Schemas$10["ListFiles"];
-type FilePage = Schemas$10["FilePage"];
-type DeleteFiles = Schemas$10["DeleteFiles"];
-type DeletedFiles = Schemas$10["DeletedFiles"];
+type Schemas$11 = components["schemas"];
+type File = Schemas$11["File"];
+type UpdateFile = Schemas$11["UpdateFile"];
+type FileKind = Schemas$11["FileKind"];
+type FileHash = Schemas$11["FileHash"];
+type FormatToken = Schemas$11["FormatToken"];
+type ModalityToken = Schemas$11["ModalityToken"];
+type ListFiles = Schemas$11["ListFiles"];
+type FilePage = Schemas$11["FilePage"];
+type DeleteFiles = Schemas$11["DeleteFiles"];
+type DeletedFiles = Schemas$11["DeletedFiles"];
 //#endregion
 //#region src/datatypes/health.d.ts
-type Schemas$9 = components["schemas"];
-type Health = Schemas$9["Health"];
-type HealthStatus = Schemas$9["HealthStatus"];
-type ComponentHealth = Schemas$9["ComponentHealth"];
+type Schemas$10 = components["schemas"];
+type Health = Schemas$10["Health"];
+type HealthStatus = Schemas$10["HealthStatus"];
+type ComponentHealth = Schemas$10["ComponentHealth"];
 //#endregion
 //#region src/datatypes/invite.d.ts
-type Schemas$8 = components["schemas"];
-type Invite = Schemas$8["Invite"];
-type InviteSent = Schemas$8["InviteSent"];
-type CreateInvite = Schemas$8["CreateInvite"];
-type ReplyInvite = Schemas$8["ReplyInvite"];
-type GenerateInviteCode = Schemas$8["GenerateInviteCode"];
-type InviteCode = Schemas$8["InviteCode"];
-type InviteStatus = Schemas$8["InviteStatus"];
-type InviteExpiration = Schemas$8["InviteExpiration"];
-type ListInvites = Schemas$8["ListInvites"];
-type InviteSortField = Schemas$8["InviteSortField"];
-type SortOrder = Schemas$8["SortOrder"];
-type InvitePreview = Schemas$8["InvitePreview"];
-type InvitePage = Schemas$8["InvitePage"];
+type Schemas$9 = components["schemas"];
+type Invite = Schemas$9["Invite"];
+type InviteSent = Schemas$9["InviteSent"];
+type CreateInvite = Schemas$9["CreateInvite"];
+type ReplyInvite = Schemas$9["ReplyInvite"];
+type GenerateInviteCode = Schemas$9["GenerateInviteCode"];
+type InviteCode = Schemas$9["InviteCode"];
+type InviteStatus = Schemas$9["InviteStatus"];
+type InviteExpiration = Schemas$9["InviteExpiration"];
+type ListInvites = Schemas$9["ListInvites"];
+type InviteSortField = Schemas$9["InviteSortField"];
+type SortOrder = Schemas$9["SortOrder"];
+type InvitePreview = Schemas$9["InvitePreview"];
+type InvitePage = Schemas$9["InvitePage"];
 //#endregion
 //#region src/datatypes/member.d.ts
-type Schemas$7 = components["schemas"];
-type Member = Schemas$7["Member"];
-type UpdateMember = Schemas$7["UpdateMember"];
-type ListMembers = Schemas$7["ListMembers"];
-type MemberSortField = Schemas$7["MemberSortField"];
-type MemberPage = Schemas$7["MemberPage"];
+type Schemas$8 = components["schemas"];
+type Member = Schemas$8["Member"];
+type UpdateMember = Schemas$8["UpdateMember"];
+type ListMembers = Schemas$8["ListMembers"];
+type MemberSortField = Schemas$8["MemberSortField"];
+type MemberPage = Schemas$8["MemberPage"];
 //#endregion
 //#region src/datatypes/notification.d.ts
-type Schemas$6 = components["schemas"];
-type Notification = Schemas$6["Notification"];
-type NotificationEvent = Schemas$6["NotificationEvent"];
-type NotificationSettings = Schemas$6["NotificationSettings"];
-type UpdateNotificationSettings = Schemas$6["UpdateNotificationSettings"];
-type UnreadStatus = Schemas$6["UnreadStatus"];
-type NotificationPage = Schemas$6["NotificationPage"];
-type MarkedReadStatus = Schemas$6["MarkedReadStatus"];
-type UnreadCountEvent = Schemas$6["UnreadCountEvent"];
-type NotificationPayload = Schemas$6["NotificationPayload"];
-type MemberInvitedParams = Schemas$6["MemberInvitedParams"];
-type MemberJoinedParams = Schemas$6["MemberJoinedParams"];
-type ConnectionSyncCompletedParams = Schemas$6["ConnectionSyncCompletedParams"];
-type ConnectionSyncFailedParams = Schemas$6["ConnectionSyncFailedParams"];
-type DetectionCompletedParams = Schemas$6["DetectionCompletedParams"];
-type DetectionFailedParams = Schemas$6["DetectionFailedParams"];
-type RedactionCreatedParams = Schemas$6["RedactionCreatedParams"];
+type Schemas$7 = components["schemas"];
+type Notification = Schemas$7["Notification"];
+type NotificationEvent = Schemas$7["NotificationEvent"];
+type NotificationSettings = Schemas$7["NotificationSettings"];
+type UpdateNotificationSettings = Schemas$7["UpdateNotificationSettings"];
+type UnreadStatus = Schemas$7["UnreadStatus"];
+type NotificationPage = Schemas$7["NotificationPage"];
+type MarkedReadStatus = Schemas$7["MarkedReadStatus"];
+type UnreadCountEvent = Schemas$7["UnreadCountEvent"];
+type NotificationPayload = Schemas$7["NotificationPayload"];
+type MemberInvitedParams = Schemas$7["MemberInvitedParams"];
+type MemberJoinedParams = Schemas$7["MemberJoinedParams"];
+type ConnectionSyncCompletedParams = Schemas$7["ConnectionSyncCompletedParams"];
+type ConnectionSyncFailedParams = Schemas$7["ConnectionSyncFailedParams"];
+type DetectionCompletedParams = Schemas$7["DetectionCompletedParams"];
+type DetectionFailedParams = Schemas$7["DetectionFailedParams"];
+type RedactionCreatedParams = Schemas$7["RedactionCreatedParams"];
 //#endregion
 //#region src/datatypes/pagination.d.ts
-type Schemas$5 = components["schemas"];
-type CursorPagination = Schemas$5["CursorPagination"];
+type Schemas$6 = components["schemas"];
+type CursorPagination = Schemas$6["CursorPagination"];
 //#endregion
 //#region src/datatypes/pipeline.d.ts
-type Schemas$4 = components["schemas"];
-type Pipeline = Schemas$4["Pipeline"];
-type CreatePipeline = Schemas$4["CreatePipeline"];
-type UpdatePipeline = Schemas$4["UpdatePipeline"];
-type PipelineDefinition = Schemas$4["PipelineDefinition"];
-type PipelineFilter = Schemas$4["PipelineFilter"];
-type PipelineStatus = Schemas$4["PipelineStatus"];
-type PipelineTriggerType = Schemas$4["PipelineTriggerType"];
-type PipelineSummary = Schemas$4["PipelineSummary"];
-type PipelineSummaryPage = Schemas$4["PipelineSummaryPage"];
+type Schemas$5 = components["schemas"];
+type Pipeline = Schemas$5["Pipeline"];
+type CreatePipeline = Schemas$5["CreatePipeline"];
+type UpdatePipeline = Schemas$5["UpdatePipeline"];
+type PipelineDefinition = Schemas$5["PipelineDefinition"];
+type PipelineFilter = Schemas$5["PipelineFilter"];
+type PipelineStatus = Schemas$5["PipelineStatus"];
+type PipelineTriggerType = Schemas$5["PipelineTriggerType"];
+type PipelineSummary = Schemas$5["PipelineSummary"];
+type PipelineSummaryPage = Schemas$5["PipelineSummaryPage"];
 //#endregion
 //#region src/datatypes/policy.d.ts
+type Schemas$4 = components["schemas"];
+type Policy = Schemas$4["Policy"];
+type PolicySummary = Schemas$4["PolicySummary"];
+type PolicySummaryPage = Schemas$4["PolicySummaryPage"];
+type PolicyDefinition = Schemas$4["PolicyDefinition"];
+type PolicyDraft = Schemas$4["PolicyDraft"];
+type CreatePolicy = Schemas$4["CreatePolicy"];
+type UpdatePolicy = Schemas$4["UpdatePolicy"];
+type PolicyRule = Schemas$4["PolicyRule"];
+type CustomMatcher = Schemas$4["CustomMatcher"];
+type PolicyTemplate = Schemas$4["PolicyTemplate"];
+type TemplateOrigin = Schemas$4["TemplateOrigin"];
+type HipaaDeidMethod = Schemas$4["HipaaDeidMethod"];
+type HipaaAccountNumbers = Schemas$4["HipaaAccountNumbers"];
+type GdprArticle9Treatment = Schemas$4["GdprArticle9Treatment"];
+type GdprSensitiveScope = Schemas$4["GdprSensitiveScope"];
+type PciDssPart = Schemas$4["PciDssPart"];
+type PciPanRender = Schemas$4["PciPanRender"];
+type Predicate = Schemas$4["Predicate"];
+type ModalityRedactions = Schemas$4["ModalityRedactions"];
+type TextRedaction = Schemas$4["TextRedaction"];
+type ImageRedaction = Schemas$4["ImageRedaction"];
+type AudioRedaction = Schemas$4["AudioRedaction"];
+type TabularRedaction = Schemas$4["TabularRedaction"];
+type LabelScope = Schemas$4["LabelScope"];
+type LabelEntry = Schemas$4["LabelEntry"];
+type LabelLocale = Schemas$4["LabelLocale"];
+type Label = Schemas$4["Label"];
+type LabelRef = Schemas$4["LabelRef"];
+type LocalizedText = Schemas$4["LocalizedText"];
+type Color = Schemas$4["Color"];
+type Waveform = Schemas$4["Waveform"];
+type ClampBucket = Schemas$4["ClampBucket"];
+type ConfidenceThreshold = Schemas$4["ConfidenceThreshold"];
+type DateStyle = Schemas$4["DateStyle"];
+type DateGranularity = Schemas$4["DateGranularity"];
+type LanguageTag = Schemas$4["LanguageTag"];
+type Sha2Algorithm = Schemas$4["Sha2Algorithm"];
+type TerminalFallback = Schemas$4["TerminalFallback"];
+//#endregion
+//#region src/datatypes/provider.d.ts
 type Schemas$3 = components["schemas"];
-type Policy = Schemas$3["Policy"];
-type PolicySummary = Schemas$3["PolicySummary"];
-type PolicySummaryPage = Schemas$3["PolicySummaryPage"];
-type PolicyDefinition = Schemas$3["PolicyDefinition"];
-type PolicyDraft = Schemas$3["PolicyDraft"];
-type CreatePolicy = Schemas$3["CreatePolicy"];
-type UpdatePolicy = Schemas$3["UpdatePolicy"];
-type PolicyRule = Schemas$3["PolicyRule"];
-type CustomMatcher = Schemas$3["CustomMatcher"];
-type PolicyTemplate = Schemas$3["PolicyTemplate"];
-type TemplateOrigin = Schemas$3["TemplateOrigin"];
-type HipaaDeidMethod = Schemas$3["HipaaDeidMethod"];
-type HipaaAccountNumbers = Schemas$3["HipaaAccountNumbers"];
-type GdprArticle9Treatment = Schemas$3["GdprArticle9Treatment"];
-type GdprSensitiveScope = Schemas$3["GdprSensitiveScope"];
-type PciDssPart = Schemas$3["PciDssPart"];
-type PciPanRender = Schemas$3["PciPanRender"];
-type Predicate = Schemas$3["Predicate"];
-type ModalityRedactions = Schemas$3["ModalityRedactions"];
-type TextRedaction = Schemas$3["TextRedaction"];
-type ImageRedaction = Schemas$3["ImageRedaction"];
-type AudioRedaction = Schemas$3["AudioRedaction"];
-type TabularRedaction = Schemas$3["TabularRedaction"];
-type LabelScope = Schemas$3["LabelScope"];
-type LabelEntry = Schemas$3["LabelEntry"];
-type LabelLocale = Schemas$3["LabelLocale"];
-type Label = Schemas$3["Label"];
-type LabelRef = Schemas$3["LabelRef"];
-type LocalizedText = Schemas$3["LocalizedText"];
-type Color = Schemas$3["Color"];
-type Waveform = Schemas$3["Waveform"];
-type ClampBucket = Schemas$3["ClampBucket"];
-type ConfidenceThreshold = Schemas$3["ConfidenceThreshold"];
-type DateStyle = Schemas$3["DateStyle"];
-type DateGranularity = Schemas$3["DateGranularity"];
-type LanguageTag = Schemas$3["LanguageTag"];
-type Sha2Algorithm = Schemas$3["Sha2Algorithm"];
-type TerminalFallback = Schemas$3["TerminalFallback"];
+type ProviderId = Schemas$3["ProviderId"];
+type Provider = Schemas$3["Provider"];
+type CreateProvider = Schemas$3["CreateProvider"];
+type UpdateProvider = Schemas$3["UpdateProvider"];
+type ProvidersQuery = Schemas$3["ProvidersQuery"];
+type ProviderPage = Schemas$3["ProviderPage"];
+type ProviderType = Schemas$3["ProviderType"];
+type ProviderConfig = Schemas$3["ProviderConfig"];
+type InferenceConfig = Schemas$3["InferenceConfig"];
 //#endregion
 //#region src/datatypes/scope.d.ts
 type Schemas$2 = components["schemas"];
@@ -18289,5 +19072,5 @@ type Retention = Schemas["Retention"];
 type RetentionSettings = Schemas["RetentionSettings"];
 type RetentionOverride = Schemas["RetentionOverride"];
 //#endregion
-export { PolicyDraft as $, PolicyActivityParams as $a, TextData as $i, Provider as $n, Dimensions as $r, ListInvites as $t, Color as A, ModelUsage as Aa, RuleMatch as Ai, RedactionResult as An, AudioAuditKind as Ar, NotificationEvent as At, ImageRedaction as B, WorkspaceAnalytics as Ba, TabularEntity as Bi, ConnectionSyncPage as Bn, AudioRefinement as Br, MemberPage as Bt, Language as C, CreateApiToken as Ca, PatternEvent as Ci, DetectionMetadata as Cn, DesktopToken as Cr, ConnectionSyncFailedParams as Ct, ScopeMetadata as D, DetectionDayEntry as Da, RasterMode as Di, PipelineDetectionsQuery as Dn, Attribution as Dr, MemberInvitedParams as Dt, Languages as E, DetectionAnalytics as Ea, RangeOfUint as Ei, DetectionStatusEvent as En, Signup as Er, MarkedReadStatus as Et, DateStyle as F, StorageKindEntry as Fa, TabularAdd as Fi, Connection as Fn, AudioHint as Fr, UnreadCountEvent as Ft, LabelScope as G, ActivityPayload as Ga, TabularPattern as Gi, FileServiceConfig as Gn, Calibration as Gr, Invite as Gt, LabelEntry as H, ActivityExportOptions as Ha, TabularLocation as Hi, ConnectionsQuery as Hn, Audit as Hr, UpdateMember as Ht, GdprArticle9Treatment as I, TokenCounts as Ia, TabularAuditEvent as Ii, ConnectionConfig as In, AudioLocation as Ir, UnreadStatus as It, ModalityRedactions as J, DetectionActivityParams as Ja, TextAdd as Ji, LlmConfig as Jn, CodecParams as Jr, InvitePage as Jt, LanguageTag as K, ActivityType as Ka, TabularRefinement as Ki, GcsCredentials as Kn, Category as Kr, InviteCode as Kt, GdprSensitiveScope as L, Usage as La, TabularAuditKind as Li, ConnectionId as Ln, AudioManual as Lr, UpdateNotificationSettings as Lt, CreatePolicy as M, ProviderType as Ma, SourceRef as Mi, WorkspaceDetectionsQuery as Mn, AudioData as Mr, NotificationPayload as Mt, CustomMatcher as N, RecognizerId as Na, SourceSpan as Ni, AuthenticatedProvider as Nn, AudioEdit as Nr, NotificationSettings as Nt, AudioRedaction as O, DetectionStatusEntry as Oa, Redaction as Oi, RedactDetection as On, AudioAdd as Or, MemberJoinedParams as Ot, DateGranularity as P, StorageAnalytics as Pa, Suppress as Pi, AzureCredentials as Pn, AudioEntity as Pr, RedactionCreatedParams as Pt, PolicyDefinition as Q, PipelineActivityParams as Qa, TextCoord as Qi, PickerToken as Qn, Deduplication as Qr, InviteStatus as Qt, HipaaAccountNumbers as R, UsageAnalytics as Ra, TabularAuditLog as Ri, ConnectionPage as Rn, AudioModel as Rr, ListMembers as Rt, CountryCode as S, ApiTokenWithJWT as Sa, OperatorId as Si, DetectionId as Sn, RegisteredRecognizer as Sr, ConnectionSyncCompletedParams as St, LanguageSpan as T, UpdateApiToken as Ta, Polygon as Ti, DetectionStatus as Tn, Login as Tr, DetectionFailedParams as Tt, LabelLocale as U, ActivityFilterQuery as Ua, TabularManual as Ui, CreateConnection as Un, AuditHash as Ur, CreateInvite as Ut, Label as V, Activity as Va, TabularHint as Vi, ConnectionVerification as Vn, AudioRetag as Vr, MemberSortField as Vt, LabelRef as W, ActivityPage as Wa, TabularModel as Wi, ExportFiles as Wn, BoundingBox as Wr, GenerateInviteCode as Wt, PciPanRender as X, InviteActivityParams as Xa, TextAuditKind as Xi, OAuthTokens as Xn, Contested as Xr, InviteSent as Xt, PciDssPart as Y, FileActivityParams as Ya, TextAuditEvent as Yi, OAuthStartResponse as Yn, Conflict as Yr, InvitePreview as Yt, Policy as Z, MemberActivityParams as Za, TextAuditLog as Zi, PickedFile as Zn, DecodedSpan as Zr, InviteSortField as Zt, WebhookId as _, TranscriptWord as _a, ImageRefinement as _i, ExportQuery as _n, SendChatMessage as _r, PipelineSummary as _t, RetentionSettings as a, TextModel as aa, ImageAdd as ai, DeleteFiles as an, AccountIdentity as ao, SyncSchedule as ar, Sha2Algorithm as at, WebhookStatus as b, ApiTokenPage as ba, ManualIntent as bi, CreateDetection as bn, LabelCatalog as br, UpdatePipeline as bt, WorkspacePage as c, TextRetag as ca, ImageAuditLog as ci, FileHash as cn, IdentityProvider as co, SyncTriggerType as cr, TerminalFallback as ct, CreateWebhook as d, Layout as da, ImageEntity as di, FormatToken as dn, SetPassword as do, ChatMessage as dr, Waveform as dt, TextEdit as ea, DocumentContext as ei, ReplyInvite as en, RedactionActivityParams as eo, S3Credentials as er, PolicyRule as et, TestWebhook as f, LayoutBlock as fa, ImageHint as fi, ListFiles as fn, UpdateAccount as fo, ChatRole as fr, CreatePipeline as ft, WebhookEvent as g, TranscriptSegment as ga, ImagePattern as gi, ExportFormat as gn, CreateChatSession as gr, PipelineStatus as gt, WebhookCreated as h, Tokens as ha, ImageModel as hi, DateWindow as hn, ChatToken as hr, PipelineFilter as ht, RetentionOverride as i, TextManual as ia, FreeformAttribution as ii, HealthStatus as in, AccountIdentities as io, SyncMode as ir, Predicate as it, ConfidenceThreshold as j, ModelUsageEntry as ja, Selection as ji, RedactionResultPage as jn, AudioAuditLog as jr, NotificationPage as jt, ClampBucket as k, DetectionTimeSeries as ka, Report as ki, RedactionId as kn, AudioAuditEvent as kr, Notification as kt, WorkspaceRole as l, TimeSpan as la, ImageData as li, FileKind as ln, OidcStartResponse as lo, UnauthenticatedProvider as lr, TextRedaction as lt, Webhook as m, Token as ma, ImageManual as mi, UpdateFile as mn, ChatSessionPage as mr, PipelineDefinition as mt, RasterPolicy as n, TextHint as na, EditSet as ni, ComponentHealth as nn, WorkspaceActivityParams as no, StorageConfig as nr, PolicySummaryPage as nt, UpdateWorkspace as o, TextPattern as oa, ImageAuditEvent as oi, DeletedFiles as on, AccountRef as oo, SyncScheduleInput as or, TabularRedaction as ot, UpdateWebhook as p, LayoutWord as pa, ImageLocation as pi, ModalityToken as pn, paths as po, ChatSession as pr, Pipeline as pt, LocalizedText as q, ConnectionActivityParams as qa, TabularRetag as qi, ImportFiles as qn, CitedAttribution as qr, InviteExpiration as qt, Retention as r, TextLocation as ra, EntityCoRef as ri, Health as rn, Account as ro, SyncDeletionPolicy as rr, PolicyTemplate as rt, Workspace as s, TextRefinement as sa, ImageAuditKind as si, File as sn, Handle as so, SyncStatus as sr, TemplateOrigin as st, CreateWorkspace as t, TextEntity as ta, Dpi as ti, SortOrder as tn, WebhookActivityParams as to, StartFileServiceOAuth as tr, PolicySummary as tt, WorkspaceSettings as u, ArtifactSet as ua, ImageEdit as ui, FilePage as un, PublicAccount as uo, UpdateConnection as ur, UpdatePolicy as ut, WebhookPage as v, Transcription as va, ImageRetag as vi, ErrorResponse as vn, ConnectorCatalog as vr, PipelineSummaryPage as vt, LanguageProvenance as w, TokenExpiration as wa, Point as wi, DetectionPage as wn, DesktopTokenRequest as wr, DetectionCompletedParams as wt, Confidence as x, ApiTokenType as xa, ModelEvent as xi, Detection as xn, RecognizerCatalog as xr, CursorPagination as xt, WebhookResult as y, ApiToken as ya, LeakProfile as yi, ValidationErrorDetail as yn, FileProviders as yr, PipelineTriggerType as yt, HipaaDeidMethod as z, UsageReport as za, TabularEdit as zi, ConnectionSync as zn, AudioPattern as zr, Member as zt };
-//# sourceMappingURL=index-BtQASJ4U.d.ts.map
+export { LabelRef as $, ActivityFilterQuery as $a, TabularLocation as $i, CreateConnection as $n, Audit as $r, GenerateInviteCode as $t, Provider as A, ApiToken as Aa, LeakProfile as Ai, Detection as An, FileProviders as Ar, CursorPagination as At, ConfidenceThreshold as B, DetectionTimeSeries as Ba, Report as Bi, RedactionResultPage as Bn, AudioAuditEvent as Br, NotificationPage as Bt, Language as C, LayoutBlock as Ca, ImageHint as Ci, UpdateFile as Cn, paths as Co, ChatRole as Cr, PipelineDefinition as Ct, ScopeMetadata as D, TranscriptSegment as Da, ImagePattern as Di, ErrorResponse as Dn, CreateChatSession as Dr, PipelineSummaryPage as Dt, Languages as E, Tokens as Ea, ImageModel as Ei, ExportQuery as En, ChatToken as Er, PipelineSummary as Et, ProvidersQuery as F, TokenExpiration as Fa, Point as Fi, DetectionStatusEvent as Fn, DesktopTokenRequest as Fr, MarkedReadStatus as Ft, GdprArticle9Treatment as G, StorageKindEntry as Ga, Suppress as Gi, ConnectionConfig as Gn, AudioEntity as Gr, UnreadStatus as Gt, CustomMatcher as H, ModelUsageEntry as Ha, Selection as Hi, AuthenticatedProvider as Hn, AudioAuditLog as Hr, NotificationSettings as Ht, UpdateProvider as I, UpdateApiToken as Ia, Polygon as Ii, PipelineDetectionsQuery as In, Login as Ir, MemberInvitedParams as It, HipaaDeidMethod as J, UsageAnalytics as Ja, TabularAuditKind as Ji, ConnectionSync as Jn, AudioManual as Jr, Member as Jt, GdprSensitiveScope as K, TokenCounts as Ka, TabularAdd as Ki, ConnectionId as Kn, AudioHint as Kr, UpdateNotificationSettings as Kt, AudioRedaction as L, DetectionAnalytics as La, RangeOfUint as Li, RedactDetection as Ln, Signup as Lr, MemberJoinedParams as Lt, ProviderId as M, ApiTokenType as Ma, ModelEvent as Mi, DetectionMetadata as Mn, RecognizerCatalog as Mr, ConnectionSyncFailedParams as Mt, ProviderPage as N, ApiTokenWithJWT as Na, OperatorId as Ni, DetectionPage as Nn, RegisteredRecognizer as Nr, DetectionCompletedParams as Nt, CreateProvider as O, TranscriptWord as Oa, ImageRefinement as Oi, ValidationErrorDetail as On, SendChatMessage as Or, PipelineTriggerType as Ot, ProviderType as P, CreateApiToken as Pa, PatternEvent as Pi, DetectionStatus as Pn, DesktopToken as Pr, DetectionFailedParams as Pt, LabelLocale as Q, ActivityExportOptions as Qa, TabularHint as Qi, ConnectionsQuery as Qn, AudioRetag as Qr, CreateInvite as Qt, ClampBucket as R, DetectionDayEntry as Ra, RasterMode as Ri, RedactionId as Rn, Attribution as Rr, Notification as Rt, CountryCode as S, Layout as Sa, ImageEntity as Si, ModalityToken as Sn, UpdateAccount as So, ChatMessage as Sr, Pipeline as St, LanguageSpan as T, Token as Ta, ImageManual as Ti, ExportFormat as Tn, ChatSessionPage as Tr, PipelineStatus as Tt, DateGranularity as U, RecognizerId as Ua, SourceRef as Ui, AzureCredentials as Un, AudioData as Ur, RedactionCreatedParams as Ut, CreatePolicy as V, ModelUsage as Va, RuleMatch as Vi, WorkspaceDetectionsQuery as Vn, AudioAuditKind as Vr, NotificationPayload as Vt, DateStyle as W, StorageAnalytics as Wa, SourceSpan as Wi, Connection as Wn, AudioEdit as Wr, UnreadCountEvent as Wt, Label as X, WorkspaceAnalytics as Xa, TabularEdit as Xi, ConnectionType as Xn, AudioPattern as Xr, MemberSortField as Xt, ImageRedaction as Y, UsageReport as Ya, TabularAuditLog as Yi, ConnectionSyncPage as Yn, AudioModel as Yr, MemberPage as Yt, LabelEntry as Z, Activity as Za, TabularEntity as Zi, ConnectionVerification as Zn, AudioRefinement as Zr, UpdateMember as Zt, WebhookId as _, TextPattern as _a, ImageAuditEvent as _i, FileHash as _n, Handle as _o, SyncScheduleInput as _r, TerminalFallback as _t, RetentionSettings as a, TextAdd as aa, CodecParams as ai, InviteSent as an, FileActivityParams as ao, LlmConfig as ar, PciPanRender as at, WebhookStatus as b, TimeSpan as ba, ImageData as bi, FormatToken as bn, PublicAccount as bo, UnauthenticatedProvider as br, Waveform as bt, WorkspacePage as c, TextAuditLog as ca, DecodedSpan as ci, ListInvites as cn, PipelineActivityParams as co, PickedFile as cr, PolicyDraft as ct, CreateWebhook as d, TextEdit as da, DocumentContext as di, ComponentHealth as dn, WebhookActivityParams as do, S3Credentials as dr, PolicySummaryPage as dt, TabularManual as ea, AuditHash as ei, Invite as en, ActivityPage as eo, ExportFiles as er, LabelScope as et, TestWebhook as f, TextEntity as fa, Dpi as fi, Health as fn, WorkspaceActivityParams as fo, StartFileServiceOAuth as fr, PolicyTemplate as ft, WebhookEvent as g, TextModel as ga, ImageAdd as gi, File as gn, AccountRef as go, SyncSchedule as gr, TemplateOrigin as gt, WebhookCreated as h, TextManual as ha, FreeformAttribution as hi, DeletedFiles as hn, AccountIdentity as ho, SyncMode as hr, TabularRedaction as ht, RetentionOverride as i, TabularRetag as ia, CitedAttribution as ii, InvitePreview as in, DetectionActivityParams as io, ImportFiles as ir, PciDssPart as it, ProviderConfig as j, ApiTokenPage as ja, ManualIntent as ji, DetectionId as jn, LabelCatalog as jr, ConnectionSyncCompletedParams as jt, InferenceConfig as k, Transcription as ka, ImageRetag as ki, CreateDetection as kn, ConnectorCatalog as kr, UpdatePipeline as kt, WorkspaceRole as l, TextCoord as la, Deduplication as li, ReplyInvite as ln, PolicyActivityParams as lo, PickerToken as lr, PolicyRule as lt, Webhook as m, TextLocation as ma, EntityCoRef as mi, DeleteFiles as mn, AccountIdentities as mo, SyncDeletionPolicy as mr, Sha2Algorithm as mt, RasterPolicy as n, TabularPattern as na, Calibration as ni, InviteExpiration as nn, ActivityType as no, FileServiceProvider as nr, LocalizedText as nt, UpdateWorkspace as o, TextAuditEvent as oa, Conflict as oi, InviteSortField as on, InviteActivityParams as oo, OAuthStartResponse as or, Policy as ot, UpdateWebhook as p, TextHint as pa, EditSet as pi, HealthStatus as pn, Account as po, StorageConfig as pr, Predicate as pt, HipaaAccountNumbers as q, Usage as qa, TabularAuditEvent as qi, ConnectionPage as qn, AudioLocation as qr, ListMembers as qt, Retention as r, TabularRefinement as ra, Category as ri, InvitePage as rn, ConnectionActivityParams as ro, GcsCredentials as rr, ModalityRedactions as rt, Workspace as s, TextAuditKind as sa, Contested as si, InviteStatus as sn, MemberActivityParams as so, OAuthTokens as sr, PolicyDefinition as st, CreateWorkspace as t, TabularModel as ta, BoundingBox as ti, InviteCode as tn, ActivityPayload as to, FileServiceConfig as tr, LanguageTag as tt, WorkspaceSettings as u, TextData as ua, Dimensions as ui, SortOrder as un, RedactionActivityParams as uo, PickerTokenRequest as ur, PolicySummary as ut, WebhookPage as v, TextRefinement as va, ImageAuditKind as vi, FileKind as vn, IdentityProvider as vo, SyncStatus as vr, TextRedaction as vt, LanguageProvenance as w, LayoutWord as wa, ImageLocation as wi, DateWindow as wn, ChatSession as wr, PipelineFilter as wt, Confidence as x, ArtifactSet as xa, ImageEdit as xi, ListFiles as xn, SetPassword as xo, UpdateConnection as xr, CreatePipeline as xt, WebhookResult as y, TextRetag as ya, ImageAuditLog as yi, FilePage as yn, OidcStartResponse as yo, SyncTriggerType as yr, UpdatePolicy as yt, Color as z, DetectionStatusEntry as za, Redaction as zi, RedactionResult as zn, AudioAdd as zr, NotificationEvent as zt };
+//# sourceMappingURL=index-CNUnM9QG.d.ts.map