pgbeam 0.3.12 → 0.3.13

package/dist/index.d.cts

@@ -1063,6 +1063,649 @@ type RotateAgentCredentialResponses = {
 */
 type RotateAgentCredentialResponse = (RotateAgentCredentialStatus200 | RotateAgentCredentialStatus400 | RotateAgentCredentialStatus401 | RotateAgentCredentialStatus403 | RotateAgentCredentialStatus404 | RotateAgentCredentialStatus409);
 
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+declare const maskingRuleKindEnum: {
+    readonly redact: "redact";
+    readonly null: "null";
+    readonly hash: "hash";
+};
+type MaskingRuleKindEnumKey = (typeof maskingRuleKindEnum)[keyof typeof maskingRuleKindEnum];
+/**
+ * @description A column masking rule applied to agent query results.
+ * @type object
+*/
+type MaskingRule = {
+    /**
+     * @description Relation name, optionally schema-qualified (e.g. \"public.users\" or \"users\").
+     * @example users
+     * @type string
+    */
+    table: string;
+    /**
+     * @description Column to mask.
+     * @example email
+     * @type string
+    */
+    column: string;
+    /**
+     * @description How to mask. redact replaces with a token, null returns NULL, hash returns a SHA-256 hex.
+     * @type string
+    */
+    kind: MaskingRuleKindEnumKey;
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+ * @description A per-relation row filter. The predicate is a raw SQL boolean expression ANDed into the WHERE clause for the matching relation.
+ * @type object
+*/
+type RowFilter = {
+    /**
+     * @description Relation name, optionally schema-qualified (e.g. \"public.orders\").
+     * @example orders
+     * @type string
+    */
+    table: string;
+    /**
+     * @description Raw SQL boolean expression ANDed into WHERE for this relation.
+     * @example tenant_id = current_setting('pgbeam.tenant')
+     * @type string
+    */
+    predicate: string;
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+ * @description Per-statement-kind allow/deny lists. Empty allow means all kinds permitted by the access mode.
+ * @type object
+*/
+type StatementRules = {
+    /**
+     * @description Allowed statement kinds (select, insert, update, delete, ddl, copy, set, show, explain, transaction).
+     * @type array | undefined
+    */
+    allow?: string[];
+    /**
+     * @description Denied statement kinds (takes precedence over allow).
+     * @type array | undefined
+    */
+    deny?: string[];
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+declare const policyProfileInputAccessModeEnum: {
+    readonly read_only: "read_only";
+    readonly read_write: "read_write";
+};
+type PolicyProfileInputAccessModeEnumKey = (typeof policyProfileInputAccessModeEnum)[keyof typeof policyProfileInputAccessModeEnum];
+declare const policyProfileInputWriteModeEnum: {
+    readonly normal: "normal";
+    readonly rollback: "rollback";
+    readonly sandbox: "sandbox";
+};
+type PolicyProfileInputWriteModeEnumKey = (typeof policyProfileInputWriteModeEnum)[keyof typeof policyProfileInputWriteModeEnum];
+declare const policyProfileInputApprovalModeEnum: {
+    readonly off: "off";
+    readonly writes: "writes";
+    readonly ddl: "ddl";
+    readonly all: "all";
+};
+type PolicyProfileInputApprovalModeEnumKey = (typeof policyProfileInputApprovalModeEnum)[keyof typeof policyProfileInputApprovalModeEnum];
+declare const policyProfileInputMigrationSafetyEnum: {
+    readonly off: "off";
+    readonly warn: "warn";
+    readonly block: "block";
+};
+type PolicyProfileInputMigrationSafetyEnumKey = (typeof policyProfileInputMigrationSafetyEnum)[keyof typeof policyProfileInputMigrationSafetyEnum];
+/**
+ * @description Mutable fields of a policy profile (used for create and update).
+ * @type object
+*/
+type PolicyProfileInput = {
+    /**
+     * @description Human-readable name for the policy profile.
+     * @minLength 1
+     * @maxLength 128
+     * @type string
+    */
+    name: string;
+    /**
+     * @description read_only blocks all data and schema mutations.
+     * @default "read_only"
+     * @type string | undefined
+    */
+    access_mode?: PolicyProfileInputAccessModeEnumKey;
+    /**
+     * @description Per-statement-kind allow/deny lists. Empty allow means all kinds permitted by the access mode.
+     * @type object | undefined
+    */
+    statement_rules?: StatementRules;
+    /**
+     * @description If non-empty, only these relations are reachable.
+     * @type array | undefined
+    */
+    table_allowlist?: string[];
+    /**
+     * @description Relations explicitly blocked.
+     * @type array | undefined
+    */
+    table_denylist?: string[];
+    /**
+     * @description Column masking rules applied to query results.
+     * @type array | undefined
+    */
+    masking_rules?: MaskingRule[];
+    /**
+     * @description Max queries per rolling hour window. 0 means unlimited.
+     * @minLength 0
+     * @default 0
+     * @type integer | undefined
+    */
+    budget_queries_per_hour?: number;
+    /**
+     * @description Max queries per day window. 0 means unlimited.
+     * @minLength 0
+     * @default 0
+     * @type integer | undefined
+    */
+    budget_queries_per_day?: number;
+    /**
+     * @description Max rows returned per query. 0 means unlimited.
+     * @minLength 0
+     * @default 0
+     * @type integer | undefined
+    */
+    max_rows?: number;
+    /**
+     * @description Upstream statement timeout for agent sessions. 0 uses the project default.
+     * @minLength 0
+     * @default 0
+     * @type integer | undefined
+    */
+    statement_timeout_ms?: number;
+    /**
+     * @description Per-relation row filters ANDed into agent reads.
+     * @type array | undefined
+    */
+    row_filters?: RowFilter[];
+    /**
+     * @description How writes are handled. normal commits, rollback auto-rolls back, sandbox routes to an ephemeral branch.
+     * @default "normal"
+     * @type string | undefined
+    */
+    write_mode?: PolicyProfileInputWriteModeEnumKey;
+    /**
+     * @description Which statement classes require human approval before execution.
+     * @default "off"
+     * @type string | undefined
+    */
+    approval_mode?: PolicyProfileInputApprovalModeEnumKey;
+    /**
+     * @description Statements touching at most this many rows are auto-approved. 0 means none.
+     * @minLength 0
+     * @default 0
+     * @type integer | undefined
+    */
+    approval_auto_max_rows?: number;
+    /**
+     * @description How long a held statement waits for a decision before expiring.
+     * @minLength 0
+     * @default 300
+     * @type integer | undefined
+    */
+    approval_timeout_seconds?: number;
+    /**
+     * @description Migration safety mode. warn surfaces findings, block refuses unsafe DDL.
+     * @default "off"
+     * @type string | undefined
+    */
+    migration_safety?: PolicyProfileInputMigrationSafetyEnumKey;
+    /**
+     * @description Per-day egress budget in bytes. 0 means unlimited.
+     * @minLength 0
+     * @default 0
+     * @type integer | undefined
+    */
+    egress_bytes_per_day?: number;
+    /**
+     * @description Hard cap on rows a single write (INSERT/UPDATE/DELETE) may affect. A write whose affected-row count would exceed this is executed inside a transaction, checked, and rolled back so nothing persists, then blocked. Enforced independently of human approval. 0 means unlimited.
+     * @minLength 0
+     * @default 0
+     * @type integer | undefined
+    */
+    max_affected_rows?: number;
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+declare const dryEvalMaskedColumnKindEnum: {
+    readonly redact: "redact";
+    readonly null: "null";
+    readonly hash: "hash";
+};
+type DryEvalMaskedColumnKindEnumKey = (typeof dryEvalMaskedColumnKindEnum)[keyof typeof dryEvalMaskedColumnKindEnum];
+/**
+ * @description One result column that would be masked, with the mask kind applied.
+ * @type object
+*/
+type DryEvalMaskedColumn = {
+    /**
+     * @description The output column name (post-alias) the client would see masked.
+     * @example email
+     * @type string
+    */
+    column: string;
+    /**
+     * @description How the column is masked.
+     * @type string
+    */
+    kind: DryEvalMaskedColumnKindEnumKey;
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+declare const dryEvalResultVerdictEnum: {
+    readonly allow: "allow";
+    readonly block: "block";
+    readonly mask: "mask";
+    readonly "row-filter": "row-filter";
+};
+type DryEvalResultVerdictEnumKey = (typeof dryEvalResultVerdictEnum)[keyof typeof dryEvalResultVerdictEnum];
+/**
+ * @description The decision the proxy would reach for the supplied statement under the supplied policy. verdict is the headline outcome; the remaining fields detail why.
+ * @type object
+*/
+type DryEvalResult = {
+    /**
+     * @description allow — permitted unchanged; block — rejected; mask — permitted but listed result columns are masked; row-filter — permitted but a WHERE predicate is injected (and any listed columns are also masked).
+     * @type string
+    */
+    verdict: DryEvalResultVerdictEnumKey;
+    /**
+     * @description Machine-readable decision tag. For a block, the blocking rule (e.g. read_only, table_denied, table_not_allowed, statement_denied, row_filter_unsafe). Otherwise \"ok\".
+     * @example ok
+     * @type string
+    */
+    rule: string;
+    /**
+     * @description Human-readable explanation of the verdict.
+     * @type string
+    */
+    reason: string;
+    /**
+     * @description What the author could do instead (present on block verdicts).
+     * @type string | undefined
+    */
+    hint?: string;
+    /**
+     * @description Result columns that would be masked. Present on mask/row-filter verdicts.
+     * @type array | undefined
+    */
+    masked_columns?: DryEvalMaskedColumn[];
+    /**
+     * @description The row-filter predicate ANDed into the statement\'s WHERE clause.
+     * @example tenant_id = current_setting('pgbeam.tenant')
+     * @type string | undefined
+    */
+    row_filter_predicate?: string;
+    /**
+     * @description The statement as it would be sent upstream after row-filter injection.
+     * @type string | undefined
+    */
+    rewritten_sql?: string;
+    /**
+     * @description Informational caveats about stateful enforcement a single-statement preview cannot model (per-region budgets, approvals, write-mode routing).
+     * @type array | undefined
+    */
+    notes?: string[];
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+declare const policyReplayItemChangeEnum: {
+    readonly newly_blocked: "newly_blocked";
+    readonly newly_allowed: "newly_allowed";
+    readonly still_allowed: "still_allowed";
+    readonly still_blocked: "still_blocked";
+};
+type PolicyReplayItemChangeEnumKey = (typeof policyReplayItemChangeEnum)[keyof typeof policyReplayItemChangeEnum];
+/**
+ * @description One distinct recorded query and the decision the candidate policy would reach for it.
+ * @type object
+*/
+type PolicyReplayItem = {
+    /**
+     * @description Normalized query hash identifying this statement shape.
+     * @type string
+    */
+    query_hash: string;
+    /**
+     * @description The recorded statement (normalized, literals replaced with $N placeholders), from its most recent occurrence.
+     * @type string
+    */
+    sql: string;
+    /**
+     * @description Statement kind (select, insert, update, delete, ddl, ...).
+     * @type string | undefined
+    */
+    statement_kind?: string;
+    /**
+     * @description How many recorded entries share this query shape in the window.
+     * @type integer
+    */
+    occurrences: number;
+    /**
+     * @description Oldest occurrence in the window.
+     * @type string
+    */
+    first_seen: string;
+    /**
+     * @description Newest occurrence in the window.
+     * @type string
+    */
+    last_seen: string;
+    /**
+     * @description The most recent recorded outcome for this query (query, masked, truncated, or blocked).
+     * @type string
+    */
+    recorded_event: string;
+    /**
+     * @description The decision rule recorded with a blocked outcome.
+     * @type string | undefined
+    */
+    recorded_rule?: string;
+    /**
+     * @description How the candidate decision compares to the recorded outcome. newly_blocked and newly_allowed are the changes worth reviewing before rollout; still_allowed and still_blocked are unchanged.
+     * @type string
+    */
+    change: PolicyReplayItemChangeEnumKey;
+    /**
+     * @description The decision the proxy would reach for the supplied statement under the supplied policy. verdict is the headline outcome; the remaining fields detail why.
+     * @type object
+    */
+    result: DryEvalResult;
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+ * @description Aggregate outcome of a policy replay.
+ * @type object
+*/
+type PolicyReplaySummary = {
+    /**
+     * @description Recorded audit entries covered by the replayed queries.
+     * @type integer
+    */
+    entries_scanned: number;
+    /**
+     * @description Distinct normalized queries found in the window (capped at limit).
+     * @type integer
+    */
+    distinct_queries: number;
+    /**
+     * @description Distinct queries actually evaluated against the candidate policy.
+     * @type integer
+    */
+    evaluated: number;
+    /**
+     * @description Queries the candidate policy would allow unchanged.
+     * @type integer
+    */
+    would_allow: number;
+    /**
+     * @description Queries the candidate policy would block.
+     * @type integer
+    */
+    would_block: number;
+    /**
+     * @description Queries the candidate policy would mask result columns on.
+     * @type integer
+    */
+    would_mask: number;
+    /**
+     * @description Queries the candidate policy would inject a row filter into.
+     * @type integer
+    */
+    would_row_filter: number;
+    /**
+     * @description Queries that executed under the recorded policy but the candidate policy would block.
+     * @type integer
+    */
+    newly_blocked: number;
+    /**
+     * @description Queries that were blocked when recorded but the candidate policy would permit.
+     * @type integer
+    */
+    newly_allowed: number;
+    /**
+     * @description Distinct queries skipped because the stored statement was truncated at record time and can no longer be parsed faithfully.
+     * @type integer
+    */
+    skipped_unparseable: number;
+    /**
+     * @description True when the window contained more distinct queries than limit; only the newest were replayed.
+     * @type boolean
+    */
+    truncated: boolean;
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+/**
+ * @description The outcome of replaying recorded agent traffic against a candidate policy: an aggregate summary plus per-query decisions, changes first.
+ * @type object
+*/
+type PolicyReplayResult = {
+    /**
+     * @description Aggregate outcome of a policy replay.
+     * @type object
+    */
+    summary: PolicyReplaySummary;
+    /**
+     * @description Per-query replay decisions, ordered changes first (newly blocked, then newly allowed), then by occurrence count.
+     * @type array
+    */
+    items: PolicyReplayItem[];
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+/**
+ * @description A least-privilege policy derived from an agent credential\'s recorded audit history, together with the replay diff that proves the candidate would not newly block any statement the credential legitimately ran. Advisory only: this endpoint never creates, updates, or otherwise mutates a policy or a credential. A good recommendation has replay.summary.newly_blocked == 0.
+ * @type object
+*/
+type PolicyRecommendation = {
+    /**
+     * @description True when there was enough parseable, executed traffic to derive a candidate. When false, candidate and replay are omitted and message explains why no recommendation could be made.
+     * @type boolean
+    */
+    sufficient_history: boolean;
+    /**
+     * @description Present when sufficient_history is false; a clear explanation of why no recommendation could be produced (e.g. no executed traffic in the window).
+     * @type string | undefined
+    */
+    message?: string;
+    /**
+     * @description Mutable fields of a policy profile (used for create and update).
+     * @type object | undefined
+    */
+    candidate?: PolicyProfileInput;
+    /**
+     * @description The outcome of replaying recorded agent traffic against a candidate policy: an aggregate summary plus per-query decisions, changes first.
+     * @type object | undefined
+    */
+    replay?: PolicyReplayResult;
+    /**
+     * @description Distinct executed query shapes the candidate was derived from (blocked attempts are excluded from derivation).
+     * @type integer
+    */
+    observed_queries: number;
+    /**
+     * @description Recorded audit entries covered by the analyzed window.
+     * @type integer
+    */
+    observed_entries: number;
+    /**
+     * @description Start of the analyzed traffic window (inclusive).
+     * @type string
+    */
+    window_start: string;
+    /**
+     * @description End of the analyzed traffic window (exclusive).
+     * @type string
+    */
+    window_end: string;
+    /**
+     * @description Human-readable rationale for each tightening decision (e.g. why the candidate was downgraded to read-only, or how max_rows was chosen).
+     * @type array | undefined
+    */
+    notes?: string[];
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+ * @description Optional parameters for a least-privilege policy recommendation. Every field is optional; an empty body analyzes the last 30 days of the credential\'s audit history.
+ * @type object
+*/
+type PolicyRecommendationInput = {
+    /**
+     * @description How many days of recorded audit history to analyze.
+     * @minLength 1
+     * @maxLength 365
+     * @default 30
+     * @type integer | undefined
+    */
+    lookback_days?: number;
+    /**
+     * @description Maximum number of distinct query shapes to analyze and replay, newest first. Traffic is deduplicated by normalized query hash.
+     * @minLength 1
+     * @maxLength 500
+     * @default 200
+     * @type integer | undefined
+    */
+    limit?: number;
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+/**
+ * @description Unique project identifier (prefixed, e.g. prj_xxx).
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string
+*/
+type RecommendAgentPolicyPathProjectId = string;
+/**
+ * @description Unique agent credential identifier (prefixed, e.g. agt_xxx).
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string
+*/
+type RecommendAgentPolicyPathAgentId = string;
+/**
+ * @description A least-privilege policy derived from an agent credential\'s recorded audit history, together with the replay diff that proves the candidate would not newly block any statement the credential legitimately ran. Advisory only: this endpoint never creates, updates, or otherwise mutates a policy or a credential. A good recommendation has replay.summary.newly_blocked == 0.
+ * @type object
+*/
+type RecommendAgentPolicyStatus200 = PolicyRecommendation;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type RecommendAgentPolicyStatus400 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type RecommendAgentPolicyStatus401 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type RecommendAgentPolicyStatus403 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type RecommendAgentPolicyStatus404 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type RecommendAgentPolicyStatus429 = Error$1;
+/**
+ * @description Optional parameters for a least-privilege policy recommendation. Every field is optional; an empty body analyzes the last 30 days of the credential\'s audit history.
+ * @type object | undefined
+*/
+type RecommendAgentPolicyData = PolicyRecommendationInput | undefined;
+/**
+ * @type object
+*/
+type RecommendAgentPolicyRequestConfig = {
+    data?: RecommendAgentPolicyData;
+    /**
+     * @type object
+    */
+    pathParams: {
+        project_id: RecommendAgentPolicyPathProjectId;
+        agent_id: RecommendAgentPolicyPathAgentId;
+    };
+    queryParams?: never;
+    headerParams?: never;
+    /**
+     * @type string
+    */
+    url: `/v1/projects/${string}/agents/${string}/policy-recommendation`;
+};
+/**
+ * @type object
+*/
+type RecommendAgentPolicyResponses = {
+    "200": RecommendAgentPolicyStatus200;
+    "400": RecommendAgentPolicyStatus400;
+    "401": RecommendAgentPolicyStatus401;
+    "403": RecommendAgentPolicyStatus403;
+    "404": RecommendAgentPolicyStatus404;
+    "429": RecommendAgentPolicyStatus429;
+};
+/**
+ * @description Union of all possible responses
+*/
+type RecommendAgentPolicyResponse = (RecommendAgentPolicyStatus200 | RecommendAgentPolicyStatus400 | RecommendAgentPolicyStatus401 | RecommendAgentPolicyStatus403 | RecommendAgentPolicyStatus404 | RecommendAgentPolicyStatus429);
+
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -4052,49 +4695,301 @@ type ListDatabasesResponses = {
 */
 
 /**
- * @description Request body for registering an upstream database.
+ * @description Request body for registering an upstream database.
+ * @type object
+*/
+type CreateDatabaseRequest = {
+    /**
+     * @description PostgreSQL host.
+     * @minLength 1
+     * @pattern ^[^\s\x00]+$
+     * @example db.example.com
+     * @type string
+    */
+    host: string;
+    /**
+     * @description PostgreSQL port.
+     * @minLength 1
+     * @maxLength 65535
+     * @example 5432
+     * @type integer
+    */
+    port: number;
+    /**
+     * @description PostgreSQL database name.
+     * @minLength 1
+     * @pattern ^[^\x00]+$
+     * @example mydb
+     * @type string
+    */
+    name: string;
+    /**
+     * @description PostgreSQL username.
+     * @minLength 1
+     * @pattern ^[^\x00]+$
+     * @example pgbeam
+     * @type string
+    */
+    username: string;
+    /**
+     * @description PostgreSQL password. Stored encrypted at rest.
+     * @minLength 1
+     * @pattern ^[^\x00]+$
+     * @type string
+    */
+    password: string;
+    /**
+     * @description PostgreSQL SSL connection mode.
+     * @example require
+     * @type string | undefined
+    */
+    ssl_mode?: SSLModeKey;
+    /**
+     * @description Database role. Primary receives writes, replicas receive reads.
+     * @default "primary"
+     * @type string | undefined
+    */
+    role?: DatabaseRoleKey;
+    /**
+     * @description Region where the connection pool is maintained (near the database). When set and different from the client\'s edge region, queries are relayed through the pool region\'s data plane. Empty means direct connection.\n
+     * @example us-east-1
+     * @type string | undefined
+    */
+    pool_region?: string;
+    /**
+     * @description Query timeout in milliseconds. 0 means disabled (default).\n
+     * @minLength 0
+     * @maxLength 300000
+     * @default 0
+     * @type integer | undefined
+    */
+    query_timeout_ms?: number;
+    /**
+     * @description Auto-route SELECT queries to read replicas.\n
+     * @default false
+     * @type boolean | undefined
+    */
+    auto_read_routing?: boolean;
+    /**
+     * @description Query cache configuration.
+     * @type object | undefined
+    */
+    cache_config?: CacheConfig;
+    /**
+     * @description Connection pool configuration.
+     * @type object | undefined
+    */
+    pool_config?: PoolConfig;
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+/**
+ * @description Unique project identifier (prefixed, e.g. prj_xxx).
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string
+*/
+type CreateDatabasePathProjectId = string;
+/**
+ * @description Registered upstream PostgreSQL database for a project.
+ * @type object
+*/
+type CreateDatabaseStatus201 = Database;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type CreateDatabaseStatus400 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type CreateDatabaseStatus401 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type CreateDatabaseStatus403 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type CreateDatabaseStatus404 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type CreateDatabaseStatus429 = Error$1;
+/**
+ * @description Request body for registering an upstream database.
+ * @type object
+*/
+type CreateDatabaseData = CreateDatabaseRequest;
+/**
+ * @type object
+*/
+type CreateDatabaseRequestConfig = {
+    data?: CreateDatabaseData;
+    /**
+     * @type object
+    */
+    pathParams: {
+        project_id: CreateDatabasePathProjectId;
+    };
+    queryParams?: never;
+    headerParams?: never;
+    /**
+     * @type string
+    */
+    url: `/v1/projects/${string}/databases`;
+};
+/**
+ * @type object
+*/
+type CreateDatabaseResponses = {
+    "201": CreateDatabaseStatus201;
+    "400": CreateDatabaseStatus400;
+    "401": CreateDatabaseStatus401;
+    "403": CreateDatabaseStatus403;
+    "404": CreateDatabaseStatus404;
+    "429": CreateDatabaseStatus429;
+};
+/**
+ * @description Union of all possible responses
+*/
+type CreateDatabaseResponse = (CreateDatabaseStatus201 | CreateDatabaseStatus400 | CreateDatabaseStatus401 | CreateDatabaseStatus403 | CreateDatabaseStatus404 | CreateDatabaseStatus429);
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+/**
+ * @description Unique project identifier (prefixed, e.g. prj_xxx).
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string
+*/
+type GetDatabasePathProjectId = string;
+/**
+ * @description Unique database identifier (prefixed, e.g. db_xxx).
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string
+*/
+type GetDatabasePathDatabaseId = string;
+/**
+ * @description Registered upstream PostgreSQL database for a project.
+ * @type object
+*/
+type GetDatabaseStatus200 = Database;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type GetDatabaseStatus400 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type GetDatabaseStatus401 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type GetDatabaseStatus403 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type GetDatabaseStatus404 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type GetDatabaseStatus429 = Error$1;
+/**
+ * @type object
+*/
+type GetDatabaseRequestConfig = {
+    data?: never;
+    /**
+     * @type object
+    */
+    pathParams: {
+        project_id: GetDatabasePathProjectId;
+        database_id: GetDatabasePathDatabaseId;
+    };
+    queryParams?: never;
+    headerParams?: never;
+    /**
+     * @type string
+    */
+    url: `/v1/projects/${string}/databases/${string}`;
+};
+/**
+ * @type object
+*/
+type GetDatabaseResponses = {
+    "200": GetDatabaseStatus200;
+    "400": GetDatabaseStatus400;
+    "401": GetDatabaseStatus401;
+    "403": GetDatabaseStatus403;
+    "404": GetDatabaseStatus404;
+    "429": GetDatabaseStatus429;
+};
+/**
+ * @description Union of all possible responses
+*/
+type GetDatabaseResponse = (GetDatabaseStatus200 | GetDatabaseStatus400 | GetDatabaseStatus401 | GetDatabaseStatus403 | GetDatabaseStatus404 | GetDatabaseStatus429);
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+/**
+ * @description Request body for partially updating an upstream database.
  * @type object
 */
-type CreateDatabaseRequest = {
+type UpdateDatabaseRequest = {
     /**
-     * @description PostgreSQL host.
+     * @description Updated PostgreSQL host.
      * @minLength 1
-     * @pattern ^[^\s\x00]+$
+     * @pattern ^[^\x00]+$
      * @example db.example.com
-     * @type string
+     * @type string | undefined
     */
-    host: string;
+    host?: string;
     /**
-     * @description PostgreSQL port.
+     * @description Updated PostgreSQL port.
      * @minLength 1
      * @maxLength 65535
      * @example 5432
-     * @type integer
+     * @type integer | undefined
     */
-    port: number;
+    port?: number;
     /**
-     * @description PostgreSQL database name.
-     * @minLength 1
-     * @pattern ^[^\x00]+$
+     * @description Updated PostgreSQL database name.
+     * @pattern ^[^\x00]*$
      * @example mydb
-     * @type string
+     * @type string | undefined
     */
-    name: string;
+    name?: string;
     /**
-     * @description PostgreSQL username.
-     * @minLength 1
-     * @pattern ^[^\x00]+$
+     * @description Updated PostgreSQL username.
+     * @pattern ^[^\x00]*$
      * @example pgbeam
-     * @type string
+     * @type string | undefined
     */
-    username: string;
+    username?: string;
     /**
-     * @description PostgreSQL password. Stored encrypted at rest.
-     * @minLength 1
-     * @pattern ^[^\x00]+$
-     * @type string
+     * @description Updated PostgreSQL password.
+     * @pattern ^[^\x00]*$
+     * @type string | undefined
     */
-    password: string;
+    password?: string;
     /**
      * @description PostgreSQL SSL connection mode.
      * @example require
@@ -4114,16 +5009,14 @@ type CreateDatabaseRequest = {
     */
     pool_region?: string;
     /**
-     * @description Query timeout in milliseconds. 0 means disabled (default).\n
+     * @description Query timeout in milliseconds. 0 means disabled.\n
      * @minLength 0
      * @maxLength 300000
-     * @default 0
      * @type integer | undefined
     */
     query_timeout_ms?: number;
     /**
      * @description Auto-route SELECT queries to read replicas.\n
-     * @default false
      * @type boolean | undefined
     */
     auto_read_routing?: boolean;
@@ -4149,75 +5042,82 @@ type CreateDatabaseRequest = {
  * @pattern ^[a-zA-Z0-9_.-]+$
  * @type string
 */
-type CreateDatabasePathProjectId = string;
+type UpdateDatabasePathProjectId = string;
+/**
+ * @description Unique database identifier (prefixed, e.g. db_xxx).
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string
+*/
+type UpdateDatabasePathDatabaseId = string;
 /**
  * @description Registered upstream PostgreSQL database for a project.
  * @type object
 */
-type CreateDatabaseStatus201 = Database;
+type UpdateDatabaseStatus200 = Database;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type CreateDatabaseStatus400 = Error$1;
+type UpdateDatabaseStatus400 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type CreateDatabaseStatus401 = Error$1;
+type UpdateDatabaseStatus401 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type CreateDatabaseStatus403 = Error$1;
+type UpdateDatabaseStatus403 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type CreateDatabaseStatus404 = Error$1;
+type UpdateDatabaseStatus404 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type CreateDatabaseStatus429 = Error$1;
+type UpdateDatabaseStatus429 = Error$1;
 /**
- * @description Request body for registering an upstream database.
+ * @description Request body for partially updating an upstream database.
  * @type object
 */
-type CreateDatabaseData = CreateDatabaseRequest;
+type UpdateDatabaseData = UpdateDatabaseRequest;
 /**
  * @type object
 */
-type CreateDatabaseRequestConfig = {
-    data?: CreateDatabaseData;
+type UpdateDatabaseRequestConfig = {
+    data?: UpdateDatabaseData;
     /**
      * @type object
     */
     pathParams: {
-        project_id: CreateDatabasePathProjectId;
+        project_id: UpdateDatabasePathProjectId;
+        database_id: UpdateDatabasePathDatabaseId;
     };
     queryParams?: never;
     headerParams?: never;
     /**
      * @type string
     */
-    url: `/v1/projects/${string}/databases`;
+    url: `/v1/projects/${string}/databases/${string}`;
 };
 /**
  * @type object
 */
-type CreateDatabaseResponses = {
-    "201": CreateDatabaseStatus201;
-    "400": CreateDatabaseStatus400;
-    "401": CreateDatabaseStatus401;
-    "403": CreateDatabaseStatus403;
-    "404": CreateDatabaseStatus404;
-    "429": CreateDatabaseStatus429;
+type UpdateDatabaseResponses = {
+    "200": UpdateDatabaseStatus200;
+    "400": UpdateDatabaseStatus400;
+    "401": UpdateDatabaseStatus401;
+    "403": UpdateDatabaseStatus403;
+    "404": UpdateDatabaseStatus404;
+    "429": UpdateDatabaseStatus429;
 };
 /**
  * @description Union of all possible responses
 */
-type CreateDatabaseResponse = (CreateDatabaseStatus201 | CreateDatabaseStatus400 | CreateDatabaseStatus401 | CreateDatabaseStatus403 | CreateDatabaseStatus404 | CreateDatabaseStatus429);
+type UpdateDatabaseResponse = (UpdateDatabaseStatus200 | UpdateDatabaseStatus400 | UpdateDatabaseStatus401 | UpdateDatabaseStatus403 | UpdateDatabaseStatus404 | UpdateDatabaseStatus429);
 
 /**
 * Generated by Kubb (https://kubb.dev/).
@@ -4229,54 +5129,53 @@ type CreateDatabaseResponse = (CreateDatabaseStatus201 | CreateDatabaseStatus400
  * @pattern ^[a-zA-Z0-9_.-]+$
  * @type string
 */
-type GetDatabasePathProjectId = string;
+type DeleteDatabasePathProjectId = string;
 /**
  * @description Unique database identifier (prefixed, e.g. db_xxx).
  * @pattern ^[a-zA-Z0-9_.-]+$
  * @type string
 */
-type GetDatabasePathDatabaseId = string;
+type DeleteDatabasePathDatabaseId = string;
 /**
- * @description Registered upstream PostgreSQL database for a project.
- * @type object
+ * @type any
 */
-type GetDatabaseStatus200 = Database;
+type DeleteDatabaseStatus204 = any;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type GetDatabaseStatus400 = Error$1;
+type DeleteDatabaseStatus400 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type GetDatabaseStatus401 = Error$1;
+type DeleteDatabaseStatus401 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type GetDatabaseStatus403 = Error$1;
+type DeleteDatabaseStatus403 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type GetDatabaseStatus404 = Error$1;
+type DeleteDatabaseStatus404 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type GetDatabaseStatus429 = Error$1;
+type DeleteDatabaseStatus429 = Error$1;
 /**
  * @type object
 */
-type GetDatabaseRequestConfig = {
+type DeleteDatabaseRequestConfig = {
     data?: never;
     /**
      * @type object
     */
     pathParams: {
-        project_id: GetDatabasePathProjectId;
-        database_id: GetDatabasePathDatabaseId;
+        project_id: DeleteDatabasePathProjectId;
+        database_id: DeleteDatabasePathDatabaseId;
     };
     queryParams?: never;
     headerParams?: never;
@@ -4288,105 +5187,260 @@ type GetDatabaseRequestConfig = {
 /**
  * @type object
 */
-type GetDatabaseResponses = {
-    "200": GetDatabaseStatus200;
-    "400": GetDatabaseStatus400;
-    "401": GetDatabaseStatus401;
-    "403": GetDatabaseStatus403;
-    "404": GetDatabaseStatus404;
-    "429": GetDatabaseStatus429;
+type DeleteDatabaseResponses = {
+    "204": DeleteDatabaseStatus204;
+    "400": DeleteDatabaseStatus400;
+    "401": DeleteDatabaseStatus401;
+    "403": DeleteDatabaseStatus403;
+    "404": DeleteDatabaseStatus404;
+    "429": DeleteDatabaseStatus429;
 };
 /**
  * @description Union of all possible responses
 */
-type GetDatabaseResponse = (GetDatabaseStatus200 | GetDatabaseStatus400 | GetDatabaseStatus401 | GetDatabaseStatus403 | GetDatabaseStatus404 | GetDatabaseStatus429);
+type DeleteDatabaseResponse = (DeleteDatabaseStatus204 | DeleteDatabaseStatus400 | DeleteDatabaseStatus401 | DeleteDatabaseStatus403 | DeleteDatabaseStatus404 | DeleteDatabaseStatus429);
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+ * @description Result of testing connectivity to an upstream database.
+ * @type object
+*/
+type TestConnectionResult = {
+    /**
+     * @description Whether the connection test succeeded.
+     * @type boolean
+    */
+    ok: boolean;
+    /**
+     * @description Round-trip connection time in milliseconds.
+     * @type number
+    */
+    latency_ms?: number | null;
+    /**
+     * @description Error message if the connection test failed.
+     * @type string | undefined
+    */
+    error?: string;
+    /**
+     * @description PostgreSQL server version string, if available.
+     * @type string | undefined
+    */
+    server_version?: string;
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+/**
+ * @description Unique project identifier (prefixed, e.g. prj_xxx).
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string
+*/
+type TestDatabaseConnectionPathProjectId = string;
+/**
+ * @description Unique database identifier (prefixed, e.g. db_xxx).
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string
+*/
+type TestDatabaseConnectionPathDatabaseId = string;
+/**
+ * @description Result of testing connectivity to an upstream database.
+ * @type object
+*/
+type TestDatabaseConnectionStatus200 = TestConnectionResult;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type TestDatabaseConnectionStatus400 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type TestDatabaseConnectionStatus401 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type TestDatabaseConnectionStatus403 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type TestDatabaseConnectionStatus404 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type TestDatabaseConnectionStatus429 = Error$1;
+/**
+ * @type object
+*/
+type TestDatabaseConnectionRequestConfig = {
+    data?: never;
+    /**
+     * @type object
+    */
+    pathParams: {
+        project_id: TestDatabaseConnectionPathProjectId;
+        database_id: TestDatabaseConnectionPathDatabaseId;
+    };
+    queryParams?: never;
+    headerParams?: never;
+    /**
+     * @type string
+    */
+    url: `/v1/projects/${string}/databases/${string}/test-connection`;
+};
+/**
+ * @type object
+*/
+type TestDatabaseConnectionResponses = {
+    "200": TestDatabaseConnectionStatus200;
+    "400": TestDatabaseConnectionStatus400;
+    "401": TestDatabaseConnectionStatus401;
+    "403": TestDatabaseConnectionStatus403;
+    "404": TestDatabaseConnectionStatus404;
+    "429": TestDatabaseConnectionStatus429;
+};
+/**
+ * @description Union of all possible responses
+*/
+type TestDatabaseConnectionResponse = (TestDatabaseConnectionStatus200 | TestDatabaseConnectionStatus400 | TestDatabaseConnectionStatus401 | TestDatabaseConnectionStatus403 | TestDatabaseConnectionStatus404 | TestDatabaseConnectionStatus429);
 
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
 */
-
+declare const piiSuggestionPiiTypeEnum: {
+    readonly email: "email";
+    readonly phone: "phone";
+    readonly ssn: "ssn";
+    readonly credit_card: "credit_card";
+    readonly ip_address: "ip_address";
+    readonly full_name: "full_name";
+    readonly street_address: "street_address";
+    readonly date_of_birth: "date_of_birth";
+    readonly national_id: "national_id";
+    readonly passport: "passport";
+    readonly bank_account: "bank_account";
+    readonly api_secret: "api_secret";
+    readonly other: "other";
+};
+type PiiSuggestionPiiTypeEnumKey = (typeof piiSuggestionPiiTypeEnum)[keyof typeof piiSuggestionPiiTypeEnum];
+declare const piiSuggestionMaskKindEnum: {
+    readonly redact: "redact";
+    readonly null: "null";
+    readonly hash: "hash";
+};
+type PiiSuggestionMaskKindEnumKey = (typeof piiSuggestionMaskKindEnum)[keyof typeof piiSuggestionMaskKindEnum];
 /**
- * @description Request body for partially updating an upstream database.
+ * @description A single likely-PII column detected by the scanner, with a recommended masking rule. Suggestions are advisory only — nothing is applied until the operator reviews and adds it to a policy profile.
  * @type object
 */
-type UpdateDatabaseRequest = {
+type PiiSuggestion = {
     /**
-     * @description Updated PostgreSQL host.
-     * @minLength 1
-     * @pattern ^[^\x00]+$
-     * @example db.example.com
-     * @type string | undefined
+     * @description Schema the column belongs to (e.g. \"public\").
+     * @example public
+     * @type string
     */
-    host?: string;
+    schema: string;
     /**
-     * @description Updated PostgreSQL port.
-     * @minLength 1
-     * @maxLength 65535
-     * @example 5432
-     * @type integer | undefined
+     * @description Table the column belongs to.
+     * @example users
+     * @type string
     */
-    port?: number;
+    table: string;
     /**
-     * @description Updated PostgreSQL database name.
-     * @pattern ^[^\x00]*$
-     * @example mydb
-     * @type string | undefined
+     * @description The detected column name.
+     * @example email
+     * @type string
     */
-    name?: string;
+    column: string;
     /**
-     * @description Updated PostgreSQL username.
-     * @pattern ^[^\x00]*$
-     * @example pgbeam
-     * @type string | undefined
+     * @description PostgreSQL data type of the column.
+     * @example text
+     * @type string
     */
-    username?: string;
+    data_type: string;
     /**
-     * @description Updated PostgreSQL password.
-     * @pattern ^[^\x00]*$
-     * @type string | undefined
+     * @description The kind of personally identifiable information detected.
+     * @type string
     */
-    password?: string;
+    pii_type: PiiSuggestionPiiTypeEnumKey;
     /**
-     * @description PostgreSQL SSL connection mode.
-     * @example require
-     * @type string | undefined
+     * @description Recommended masking kind for this column. hash is suggested for join/group keys (e.g. email), redact for free-text PII, null for highly sensitive secrets.
+     * @type string
     */
-    ssl_mode?: SSLModeKey;
+    mask_kind: PiiSuggestionMaskKindEnumKey;
     /**
-     * @description Database role. Primary receives writes, replicas receive reads.
-     * @default "primary"
-     * @type string | undefined
+     * @description Confidence score in [0,1]. Combines column-name signal and sampled-value signal; higher is stronger evidence.
+     * @example 0.95
+     * @type number
     */
-    role?: DatabaseRoleKey;
+    confidence: number;
     /**
-     * @description Region where the connection pool is maintained (near the database). When set and different from the client\'s edge region, queries are relayed through the pool region\'s data plane. Empty means direct connection.\n
-     * @example us-east-1
-     * @type string | undefined
+     * @description Human-readable explanations for why the column was flagged.
+     * @example column name matches 'email',8/10 sampled values look like emails
+     * @type array
     */
-    pool_region?: string;
+    reasons: string[];
     /**
-     * @description Query timeout in milliseconds. 0 means disabled.\n
+     * @description Number of sampled non-null values that matched the PII pattern.
      * @minLength 0
-     * @maxLength 300000
      * @type integer | undefined
     */
-    query_timeout_ms?: number;
+    sample_match_count?: number;
     /**
-     * @description Auto-route SELECT queries to read replicas.\n
-     * @type boolean | undefined
+     * @description Number of non-null values sampled from the column.
+     * @minLength 0
+     * @type integer | undefined
     */
-    auto_read_routing?: boolean;
+    sample_size?: number;
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+/**
+ * @description Result of a PII detection scan over a database\'s schema.
+ * @type object
+*/
+type ScanPiiResult = {
     /**
-     * @description Query cache configuration.
-     * @type object | undefined
+     * @description Number of tables inspected.
+     * @minLength 0
+     * @type integer
     */
-    cache_config?: CacheConfig;
+    scanned_tables: number;
     /**
-     * @description Connection pool configuration.
-     * @type object | undefined
+     * @description Number of columns inspected.
+     * @minLength 0
+     * @type integer
     */
-    pool_config?: PoolConfig;
+    scanned_columns: number;
+    /**
+     * @description Ranked masking suggestions, highest confidence first. Empty when no likely-PII columns were found.
+     * @type array
+    */
+    suggestions: PiiSuggestion[];
+    /**
+     * @description True when the scan stopped early at the column limit and some columns were not inspected.
+     * @type boolean | undefined
+    */
+    truncated?: boolean;
+    /**
+     * @description Present when the scan failed to connect or read the schema.
+     * @type string | undefined
+    */
+    error?: string;
 };
 
 /**
@@ -4399,193 +5453,184 @@ type UpdateDatabaseRequest = {
  * @pattern ^[a-zA-Z0-9_.-]+$
  * @type string
 */
-type UpdateDatabasePathProjectId = string;
+type ScanDatabaseForPiiPathProjectId = string;
 /**
  * @description Unique database identifier (prefixed, e.g. db_xxx).
  * @pattern ^[a-zA-Z0-9_.-]+$
  * @type string
 */
-type UpdateDatabasePathDatabaseId = string;
+type ScanDatabaseForPiiPathDatabaseId = string;
 /**
- * @description Registered upstream PostgreSQL database for a project.
+ * @description Result of a PII detection scan over a database\'s schema.
  * @type object
 */
-type UpdateDatabaseStatus200 = Database;
+type ScanDatabaseForPiiStatus200 = ScanPiiResult;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type UpdateDatabaseStatus400 = Error$1;
+type ScanDatabaseForPiiStatus400 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type UpdateDatabaseStatus401 = Error$1;
+type ScanDatabaseForPiiStatus401 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type UpdateDatabaseStatus403 = Error$1;
+type ScanDatabaseForPiiStatus403 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type UpdateDatabaseStatus404 = Error$1;
+type ScanDatabaseForPiiStatus404 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type UpdateDatabaseStatus429 = Error$1;
-/**
- * @description Request body for partially updating an upstream database.
- * @type object
-*/
-type UpdateDatabaseData = UpdateDatabaseRequest;
+type ScanDatabaseForPiiStatus429 = Error$1;
 /**
  * @type object
 */
-type UpdateDatabaseRequestConfig = {
-    data?: UpdateDatabaseData;
+type ScanDatabaseForPiiRequestConfig = {
+    data?: never;
     /**
      * @type object
     */
     pathParams: {
-        project_id: UpdateDatabasePathProjectId;
-        database_id: UpdateDatabasePathDatabaseId;
+        project_id: ScanDatabaseForPiiPathProjectId;
+        database_id: ScanDatabaseForPiiPathDatabaseId;
     };
     queryParams?: never;
     headerParams?: never;
     /**
      * @type string
     */
-    url: `/v1/projects/${string}/databases/${string}`;
+    url: `/v1/projects/${string}/databases/${string}/scan-pii`;
 };
 /**
  * @type object
 */
-type UpdateDatabaseResponses = {
-    "200": UpdateDatabaseStatus200;
-    "400": UpdateDatabaseStatus400;
-    "401": UpdateDatabaseStatus401;
-    "403": UpdateDatabaseStatus403;
-    "404": UpdateDatabaseStatus404;
-    "429": UpdateDatabaseStatus429;
+type ScanDatabaseForPiiResponses = {
+    "200": ScanDatabaseForPiiStatus200;
+    "400": ScanDatabaseForPiiStatus400;
+    "401": ScanDatabaseForPiiStatus401;
+    "403": ScanDatabaseForPiiStatus403;
+    "404": ScanDatabaseForPiiStatus404;
+    "429": ScanDatabaseForPiiStatus429;
 };
 /**
  * @description Union of all possible responses
 */
-type UpdateDatabaseResponse = (UpdateDatabaseStatus200 | UpdateDatabaseStatus400 | UpdateDatabaseStatus401 | UpdateDatabaseStatus403 | UpdateDatabaseStatus404 | UpdateDatabaseStatus429);
+type ScanDatabaseForPiiResponse = (ScanDatabaseForPiiStatus200 | ScanDatabaseForPiiStatus400 | ScanDatabaseForPiiStatus401 | ScanDatabaseForPiiStatus403 | ScanDatabaseForPiiStatus404 | ScanDatabaseForPiiStatus429);
 
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
 */
-
-/**
- * @description Unique project identifier (prefixed, e.g. prj_xxx).
- * @pattern ^[a-zA-Z0-9_.-]+$
- * @type string
-*/
-type DeleteDatabasePathProjectId = string;
-/**
- * @description Unique database identifier (prefixed, e.g. db_xxx).
- * @pattern ^[a-zA-Z0-9_.-]+$
- * @type string
-*/
-type DeleteDatabasePathDatabaseId = string;
-/**
- * @type any
-*/
-type DeleteDatabaseStatus204 = any;
-/**
- * @description Standard error response envelope for PgBeam API requests.
- * @type object
-*/
-type DeleteDatabaseStatus400 = Error$1;
-/**
- * @description Standard error response envelope for PgBeam API requests.
- * @type object
-*/
-type DeleteDatabaseStatus401 = Error$1;
-/**
- * @description Standard error response envelope for PgBeam API requests.
- * @type object
-*/
-type DeleteDatabaseStatus403 = Error$1;
 /**
- * @description Standard error response envelope for PgBeam API requests.
+ * @description One column of a relation in the schema catalog.
  * @type object
 */
-type DeleteDatabaseStatus404 = Error$1;
+type SchemaCatalogColumn = {
+    /**
+     * @description Column name.
+     * @example email
+     * @type string
+    */
+    name: string;
+    /**
+     * @description PostgreSQL data type (information_schema.data_type).
+     * @example text
+     * @type string
+    */
+    data_type: string;
+    /**
+     * @description True for binary-typed columns (e.g. bytea). Masking a binary column always returns NULL — a redact/hash token would corrupt the wire type — so the editor warns when a masking rule targets one.
+     * @type boolean
+    */
+    is_binary: boolean;
+};
+
 /**
- * @description Standard error response envelope for PgBeam API requests.
- * @type object
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
 */
-type DeleteDatabaseStatus429 = Error$1;
+
+declare const schemaCatalogRelationKindEnum: {
+    readonly table: "table";
+    readonly view: "view";
+    readonly materialized_view: "materialized_view";
+    readonly other: "other";
+};
+type SchemaCatalogRelationKindEnumKey = (typeof schemaCatalogRelationKindEnum)[keyof typeof schemaCatalogRelationKindEnum];
 /**
+ * @description One relation (base table or view) in the schema catalog.
  * @type object
 */
-type DeleteDatabaseRequestConfig = {
-    data?: never;
+type SchemaCatalogRelation = {
     /**
-     * @type object
+     * @description Schema the relation belongs to.
+     * @example public
+     * @type string
     */
-    pathParams: {
-        project_id: DeleteDatabasePathProjectId;
-        database_id: DeleteDatabasePathDatabaseId;
-    };
-    queryParams?: never;
-    headerParams?: never;
+    schema: string;
     /**
+     * @description Relation name.
+     * @example users
      * @type string
     */
-    url: `/v1/projects/${string}/databases/${string}`;
-};
-/**
- * @type object
-*/
-type DeleteDatabaseResponses = {
-    "204": DeleteDatabaseStatus204;
-    "400": DeleteDatabaseStatus400;
-    "401": DeleteDatabaseStatus401;
-    "403": DeleteDatabaseStatus403;
-    "404": DeleteDatabaseStatus404;
-    "429": DeleteDatabaseStatus429;
+    name: string;
+    /**
+     * @description Relation kind. Allowlists, masking, and row-filters are enforced against the named relation itself, NOT through a view to its base tables — so a view over a row-filtered base table can leak. The editor warns when a policy entry targets a view.
+     * @type string
+    */
+    kind: SchemaCatalogRelationKindEnumKey;
+    /**
+     * @description The relation\'s columns.
+     * @type array
+    */
+    columns: SchemaCatalogColumn[];
 };
-/**
- * @description Union of all possible responses
-*/
-type DeleteDatabaseResponse = (DeleteDatabaseStatus204 | DeleteDatabaseStatus400 | DeleteDatabaseStatus401 | DeleteDatabaseStatus403 | DeleteDatabaseStatus404 | DeleteDatabaseStatus429);
 
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
 */
+
 /**
- * @description Result of testing connectivity to an upstream database.
+ * @description A read-only snapshot of a database\'s user relations (tables and views) and their columns, used to power table/column autocomplete and view-aware warnings in the policy editor. System schemas (pg_catalog, information_schema, pg_toast) are excluded.
  * @type object
 */
-type TestConnectionResult = {
+type SchemaCatalog = {
     /**
-     * @description Whether the connection test succeeded.
-     * @type boolean
+     * @description User relations, ordered by schema then name.
+     * @type array
     */
-    ok: boolean;
+    relations: SchemaCatalogRelation[];
     /**
-     * @description Round-trip connection time in milliseconds.
-     * @type number
+     * @description Number of relations in the catalog.
+     * @minLength 0
+     * @type integer
     */
-    latency_ms?: number | null;
+    scanned_relations: number;
     /**
-     * @description Error message if the connection test failed.
-     * @type string | undefined
+     * @description Number of columns in the catalog.
+     * @minLength 0
+     * @type integer
     */
-    error?: string;
+    scanned_columns: number;
     /**
-     * @description PostgreSQL server version string, if available.
+     * @description True when the catalog stopped early at the column limit.
+     * @type boolean | undefined
+    */
+    truncated?: boolean;
+    /**
+     * @description Present when introspection failed to connect or read the schema.
      * @type string | undefined
     */
-    server_version?: string;
+    error?: string;
 };
 
 /**
@@ -4598,167 +5643,188 @@ type TestConnectionResult = {
  * @pattern ^[a-zA-Z0-9_.-]+$
  * @type string
 */
-type TestDatabaseConnectionPathProjectId = string;
+type GetSchemaCatalogPathProjectId = string;
 /**
  * @description Unique database identifier (prefixed, e.g. db_xxx).
  * @pattern ^[a-zA-Z0-9_.-]+$
  * @type string
 */
-type TestDatabaseConnectionPathDatabaseId = string;
+type GetSchemaCatalogPathDatabaseId = string;
 /**
- * @description Result of testing connectivity to an upstream database.
+ * @description A read-only snapshot of a database\'s user relations (tables and views) and their columns, used to power table/column autocomplete and view-aware warnings in the policy editor. System schemas (pg_catalog, information_schema, pg_toast) are excluded.
  * @type object
 */
-type TestDatabaseConnectionStatus200 = TestConnectionResult;
+type GetSchemaCatalogStatus200 = SchemaCatalog;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type TestDatabaseConnectionStatus400 = Error$1;
+type GetSchemaCatalogStatus400 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type TestDatabaseConnectionStatus401 = Error$1;
+type GetSchemaCatalogStatus401 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type TestDatabaseConnectionStatus403 = Error$1;
+type GetSchemaCatalogStatus403 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type TestDatabaseConnectionStatus404 = Error$1;
+type GetSchemaCatalogStatus404 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type TestDatabaseConnectionStatus429 = Error$1;
+type GetSchemaCatalogStatus429 = Error$1;
 /**
  * @type object
 */
-type TestDatabaseConnectionRequestConfig = {
+type GetSchemaCatalogRequestConfig = {
     data?: never;
     /**
      * @type object
     */
     pathParams: {
-        project_id: TestDatabaseConnectionPathProjectId;
-        database_id: TestDatabaseConnectionPathDatabaseId;
+        project_id: GetSchemaCatalogPathProjectId;
+        database_id: GetSchemaCatalogPathDatabaseId;
     };
     queryParams?: never;
     headerParams?: never;
     /**
      * @type string
     */
-    url: `/v1/projects/${string}/databases/${string}/test-connection`;
+    url: `/v1/projects/${string}/databases/${string}/schema-catalog`;
 };
 /**
  * @type object
 */
-type TestDatabaseConnectionResponses = {
-    "200": TestDatabaseConnectionStatus200;
-    "400": TestDatabaseConnectionStatus400;
-    "401": TestDatabaseConnectionStatus401;
-    "403": TestDatabaseConnectionStatus403;
-    "404": TestDatabaseConnectionStatus404;
-    "429": TestDatabaseConnectionStatus429;
+type GetSchemaCatalogResponses = {
+    "200": GetSchemaCatalogStatus200;
+    "400": GetSchemaCatalogStatus400;
+    "401": GetSchemaCatalogStatus401;
+    "403": GetSchemaCatalogStatus403;
+    "404": GetSchemaCatalogStatus404;
+    "429": GetSchemaCatalogStatus429;
 };
 /**
  * @description Union of all possible responses
 */
-type TestDatabaseConnectionResponse = (TestDatabaseConnectionStatus200 | TestDatabaseConnectionStatus400 | TestDatabaseConnectionStatus401 | TestDatabaseConnectionStatus403 | TestDatabaseConnectionStatus404 | TestDatabaseConnectionStatus429);
+type GetSchemaCatalogResponse = (GetSchemaCatalogStatus200 | GetSchemaCatalogStatus400 | GetSchemaCatalogStatus401 | GetSchemaCatalogStatus403 | GetSchemaCatalogStatus404 | GetSchemaCatalogStatus429);
 
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
 */
-declare const piiSuggestionPiiTypeEnum: {
-    readonly email: "email";
-    readonly phone: "phone";
-    readonly ssn: "ssn";
-    readonly credit_card: "credit_card";
-    readonly ip_address: "ip_address";
-    readonly full_name: "full_name";
-    readonly street_address: "street_address";
-    readonly date_of_birth: "date_of_birth";
-    readonly national_id: "national_id";
-    readonly passport: "passport";
-    readonly bank_account: "bank_account";
-    readonly api_secret: "api_secret";
-    readonly other: "other";
-};
-type PiiSuggestionPiiTypeEnumKey = (typeof piiSuggestionPiiTypeEnum)[keyof typeof piiSuggestionPiiTypeEnum];
-declare const piiSuggestionMaskKindEnum: {
-    readonly redact: "redact";
-    readonly null: "null";
-    readonly hash: "hash";
+/**
+ * @description DNS records the user needs to create for domain verification.
+ * @type object
+*/
+type DnsInstructions = {
+    /**
+     * @description The CNAME record host.
+     * @example db.example.com
+     * @type string | undefined
+    */
+    cname_host?: string;
+    /**
+     * @description The CNAME record target.
+     * @example abc.proxy.pgbeam.app
+     * @type string | undefined
+    */
+    cname_target?: string;
+    /**
+     * @description The TXT record host for verification.
+     * @example _pgbeam-verify.db.example.com
+     * @type string | undefined
+    */
+    txt_host?: string;
+    /**
+     * @description The TXT record value for verification.
+     * @example pgbeam-verify=abc123token
+     * @type string | undefined
+    */
+    txt_value?: string;
+    /**
+     * @description The CNAME record host for ACME TLS certificate issuance.
+     * @example _acme-challenge.db.example.com
+     * @type string | undefined
+    */
+    acme_cname_host?: string;
+    /**
+     * @description The CNAME target for ACME challenge delegation.
+     * @example _acme-challenge.abc.proxy.pgbeam.app
+     * @type string | undefined
+    */
+    acme_cname_target?: string;
 };
-type PiiSuggestionMaskKindEnumKey = (typeof piiSuggestionMaskKindEnum)[keyof typeof piiSuggestionMaskKindEnum];
+
 /**
- * @description A single likely-PII column detected by the scanner, with a recommended masking rule. Suggestions are advisory only — nothing is applied until the operator reviews and adds it to a policy profile.
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+/**
+ * @description Custom database hostname attached to a project.
  * @type object
 */
-type PiiSuggestion = {
+type CustomDomain = {
     /**
-     * @description Schema the column belongs to (e.g. \"public\").
-     * @example public
+     * @description Unique domain identifier (prefixed).
+     * @example dom_01h455vb4pex5vsknk084sn02q
      * @type string
     */
-    schema: string;
+    id: string;
     /**
-     * @description Table the column belongs to.
-     * @example users
+     * @description Owning project ID.
+     * @example prj_01h455vb4pex5vsknk084sn02q
      * @type string
     */
-    table: string;
+    project_id: string;
     /**
-     * @description The detected column name.
-     * @example email
+     * @description The custom domain name.
+     * @example db.example.com
      * @type string
     */
-    column: string;
+    domain: string;
     /**
-     * @description PostgreSQL data type of the column.
-     * @example text
-     * @type string
+     * @description Whether DNS ownership has been verified.
+     * @type boolean
     */
-    data_type: string;
+    verified: boolean;
     /**
-     * @description The kind of personally identifiable information detected.
+     * @description When DNS verification was completed.
      * @type string
     */
-    pii_type: PiiSuggestionPiiTypeEnumKey;
+    verified_at?: string | null;
     /**
-     * @description Recommended masking kind for this column. hash is suggested for join/group keys (e.g. email), redact for free-text PII, null for highly sensitive secrets.
+     * @description When the TLS certificate expires.
      * @type string
     */
-    mask_kind: PiiSuggestionMaskKindEnumKey;
+    tls_cert_expiry?: string | null;
     /**
-     * @description Confidence score in [0,1]. Combines column-name signal and sampled-value signal; higher is stronger evidence.
-     * @example 0.95
-     * @type number
+     * @description Token value for the DNS TXT record verification.
+     * @type string
     */
-    confidence: number;
+    dns_verification_token: string;
     /**
-     * @description Human-readable explanations for why the column was flagged.
-     * @example column name matches 'email',8/10 sampled values look like emails
-     * @type array
+     * @description DNS records the user needs to create for domain verification.
+     * @type object | undefined
     */
-    reasons: string[];
+    dns_instructions?: DnsInstructions;
     /**
-     * @description Number of sampled non-null values that matched the PII pattern.
-     * @minLength 0
-     * @type integer | undefined
+     * @description When the custom domain was created.
+     * @type string
     */
-    sample_match_count?: number;
+    created_at: string;
     /**
-     * @description Number of non-null values sampled from the column.
-     * @minLength 0
-     * @type integer | undefined
+     * @description When the custom domain was last updated.
+     * @type string
     */
-    sample_size?: number;
+    updated_at: string;
 };
 
 /**
@@ -4767,37 +5833,20 @@ type PiiSuggestion = {
 */
 
 /**
- * @description Result of a PII detection scan over a database\'s schema.
+ * @description Cursor-paginated list of custom domains for a project.
  * @type object
 */
-type ScanPiiResult = {
-    /**
-     * @description Number of tables inspected.
-     * @minLength 0
-     * @type integer
-    */
-    scanned_tables: number;
-    /**
-     * @description Number of columns inspected.
-     * @minLength 0
-     * @type integer
-    */
-    scanned_columns: number;
+type ListCustomDomainsResponse = {
     /**
-     * @description Ranked masking suggestions, highest confidence first. Empty when no likely-PII columns were found.
+     * @description Custom domains on the current page.
      * @type array
     */
-    suggestions: PiiSuggestion[];
-    /**
-     * @description True when the scan stopped early at the column limit and some columns were not inspected.
-     * @type boolean | undefined
-    */
-    truncated?: boolean;
+    domains: CustomDomain[];
     /**
-     * @description Present when the scan failed to connect or read the schema.
+     * @description Token for the next page. Empty if no more results.
      * @type string | undefined
     */
-    error?: string;
+    next_page_token?: string;
 };
 
 /**
@@ -4810,146 +5859,273 @@ type ScanPiiResult = {
  * @pattern ^[a-zA-Z0-9_.-]+$
  * @type string
 */
-type ScanDatabaseForPiiPathProjectId = string;
+type ListCustomDomainsPathProjectId = string;
 /**
- * @description Unique database identifier (prefixed, e.g. db_xxx).
+ * @description Maximum number of items to return (1-100, default 20).
+ * @minLength 1
+ * @maxLength 100
+ * @default 20
+ * @type integer | undefined
+*/
+type ListCustomDomainsQueryPageSize = number | undefined;
+/**
+ * @description Opaque token for cursor-based pagination.
  * @pattern ^[a-zA-Z0-9_.-]+$
- * @type string
+ * @type string | undefined
 */
-type ScanDatabaseForPiiPathDatabaseId = string;
+type ListCustomDomainsQueryPageToken = string | undefined;
 /**
- * @description Result of a PII detection scan over a database\'s schema.
+ * @description Cursor-paginated list of custom domains for a project.
  * @type object
 */
-type ScanDatabaseForPiiStatus200 = ScanPiiResult;
+type ListCustomDomainsStatus200 = ListCustomDomainsResponse;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type ScanDatabaseForPiiStatus400 = Error$1;
+type ListCustomDomainsStatus400 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type ScanDatabaseForPiiStatus401 = Error$1;
+type ListCustomDomainsStatus401 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type ScanDatabaseForPiiStatus403 = Error$1;
+type ListCustomDomainsStatus403 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type ScanDatabaseForPiiStatus404 = Error$1;
+type ListCustomDomainsStatus404 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type ScanDatabaseForPiiStatus429 = Error$1;
+type ListCustomDomainsStatus429 = Error$1;
 /**
  * @type object
 */
-type ScanDatabaseForPiiRequestConfig = {
+type ListCustomDomainsRequestConfig = {
     data?: never;
     /**
      * @type object
     */
     pathParams: {
-        project_id: ScanDatabaseForPiiPathProjectId;
-        database_id: ScanDatabaseForPiiPathDatabaseId;
+        project_id: ListCustomDomainsPathProjectId;
+    };
+    /**
+     * @type object | undefined
+    */
+    queryParams?: {
+        page_size?: ListCustomDomainsQueryPageSize;
+        page_token?: ListCustomDomainsQueryPageToken;
     };
-    queryParams?: never;
     headerParams?: never;
     /**
      * @type string
     */
-    url: `/v1/projects/${string}/databases/${string}/scan-pii`;
+    url: `/v1/projects/${string}/domains`;
 };
 /**
  * @type object
 */
-type ScanDatabaseForPiiResponses = {
-    "200": ScanDatabaseForPiiStatus200;
-    "400": ScanDatabaseForPiiStatus400;
-    "401": ScanDatabaseForPiiStatus401;
-    "403": ScanDatabaseForPiiStatus403;
-    "404": ScanDatabaseForPiiStatus404;
-    "429": ScanDatabaseForPiiStatus429;
+type ListCustomDomainsResponses = {
+    "200": ListCustomDomainsStatus200;
+    "400": ListCustomDomainsStatus400;
+    "401": ListCustomDomainsStatus401;
+    "403": ListCustomDomainsStatus403;
+    "404": ListCustomDomainsStatus404;
+    "429": ListCustomDomainsStatus429;
 };
-/**
- * @description Union of all possible responses
-*/
-type ScanDatabaseForPiiResponse = (ScanDatabaseForPiiStatus200 | ScanDatabaseForPiiStatus400 | ScanDatabaseForPiiStatus401 | ScanDatabaseForPiiStatus403 | ScanDatabaseForPiiStatus404 | ScanDatabaseForPiiStatus429);
 
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
 */
 /**
- * @description One column of a relation in the schema catalog.
+ * @description Request body for attaching a custom domain to a project.
  * @type object
 */
-type SchemaCatalogColumn = {
+type CreateCustomDomainRequest = {
     /**
-     * @description Column name.
-     * @example email
+     * @description The custom domain name to add (e.g., db.example.com).
+     * @minLength 1
+     * @maxLength 253
+     * @pattern ^[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?(\.[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?)*$
+     * @example db.example.com
      * @type string
     */
-    name: string;
+    domain: string;
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+/**
+ * @description Unique project identifier (prefixed, e.g. prj_xxx).
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string
+*/
+type CreateCustomDomainPathProjectId = string;
+/**
+ * @description Custom database hostname attached to a project.
+ * @type object
+*/
+type CreateCustomDomainStatus201 = CustomDomain;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type CreateCustomDomainStatus400 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type CreateCustomDomainStatus401 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type CreateCustomDomainStatus403 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type CreateCustomDomainStatus404 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type CreateCustomDomainStatus409 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type CreateCustomDomainStatus429 = Error$1;
+/**
+ * @description Request body for attaching a custom domain to a project.
+ * @type object
+*/
+type CreateCustomDomainData = CreateCustomDomainRequest;
+/**
+ * @type object
+*/
+type CreateCustomDomainRequestConfig = {
+    data?: CreateCustomDomainData;
     /**
-     * @description PostgreSQL data type (information_schema.data_type).
-     * @example text
-     * @type string
+     * @type object
     */
-    data_type: string;
+    pathParams: {
+        project_id: CreateCustomDomainPathProjectId;
+    };
+    queryParams?: never;
+    headerParams?: never;
     /**
-     * @description True for binary-typed columns (e.g. bytea). Masking a binary column always returns NULL — a redact/hash token would corrupt the wire type — so the editor warns when a masking rule targets one.
-     * @type boolean
+     * @type string
     */
-    is_binary: boolean;
+    url: `/v1/projects/${string}/domains`;
+};
+/**
+ * @type object
+*/
+type CreateCustomDomainResponses = {
+    "201": CreateCustomDomainStatus201;
+    "400": CreateCustomDomainStatus400;
+    "401": CreateCustomDomainStatus401;
+    "403": CreateCustomDomainStatus403;
+    "404": CreateCustomDomainStatus404;
+    "409": CreateCustomDomainStatus409;
+    "429": CreateCustomDomainStatus429;
 };
+/**
+ * @description Union of all possible responses
+*/
+type CreateCustomDomainResponse = (CreateCustomDomainStatus201 | CreateCustomDomainStatus400 | CreateCustomDomainStatus401 | CreateCustomDomainStatus403 | CreateCustomDomainStatus404 | CreateCustomDomainStatus409 | CreateCustomDomainStatus429);
 
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
 */
 
-declare const schemaCatalogRelationKindEnum: {
-    readonly table: "table";
-    readonly view: "view";
-    readonly materialized_view: "materialized_view";
-    readonly other: "other";
-};
-type SchemaCatalogRelationKindEnumKey = (typeof schemaCatalogRelationKindEnum)[keyof typeof schemaCatalogRelationKindEnum];
 /**
- * @description One relation (base table or view) in the schema catalog.
+ * @description Unique project identifier (prefixed, e.g. prj_xxx).
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string
+*/
+type DeleteCustomDomainPathProjectId = string;
+/**
+ * @description Unique custom domain identifier (prefixed, e.g. dom_xxx).
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string
+*/
+type DeleteCustomDomainPathDomainId = string;
+/**
+ * @type any
+*/
+type DeleteCustomDomainStatus204 = any;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type SchemaCatalogRelation = {
-    /**
-     * @description Schema the relation belongs to.
-     * @example public
-     * @type string
-    */
-    schema: string;
+type DeleteCustomDomainStatus400 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type DeleteCustomDomainStatus401 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type DeleteCustomDomainStatus403 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type DeleteCustomDomainStatus404 = Error$1;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type DeleteCustomDomainStatus429 = Error$1;
+/**
+ * @type object
+*/
+type DeleteCustomDomainRequestConfig = {
+    data?: never;
     /**
-     * @description Relation name.
-     * @example users
-     * @type string
+     * @type object
     */
-    name: string;
+    pathParams: {
+        project_id: DeleteCustomDomainPathProjectId;
+        domain_id: DeleteCustomDomainPathDomainId;
+    };
+    queryParams?: never;
+    headerParams?: never;
     /**
-     * @description Relation kind. Allowlists, masking, and row-filters are enforced against the named relation itself, NOT through a view to its base tables — so a view over a row-filtered base table can leak. The editor warns when a policy entry targets a view.
      * @type string
     */
-    kind: SchemaCatalogRelationKindEnumKey;
-    /**
-     * @description The relation\'s columns.
-     * @type array
-    */
-    columns: SchemaCatalogColumn[];
+    url: `/v1/projects/${string}/domains/${string}`;
+};
+/**
+ * @type object
+*/
+type DeleteCustomDomainResponses = {
+    "204": DeleteCustomDomainStatus204;
+    "400": DeleteCustomDomainStatus400;
+    "401": DeleteCustomDomainStatus401;
+    "403": DeleteCustomDomainStatus403;
+    "404": DeleteCustomDomainStatus404;
+    "429": DeleteCustomDomainStatus429;
 };
+/**
+ * @description Union of all possible responses
+*/
+type DeleteCustomDomainResponse = (DeleteCustomDomainStatus204 | DeleteCustomDomainStatus400 | DeleteCustomDomainStatus401 | DeleteCustomDomainStatus403 | DeleteCustomDomainStatus404 | DeleteCustomDomainStatus429);
 
 /**
 * Generated by Kubb (https://kubb.dev/).
@@ -4957,37 +6133,25 @@ type SchemaCatalogRelation = {
 */
 
 /**
- * @description A read-only snapshot of a database\'s user relations (tables and views) and their columns, used to power table/column autocomplete and view-aware warnings in the policy editor. System schemas (pg_catalog, information_schema, pg_toast) are excluded.
+ * @description Result of checking DNS ownership for a custom domain.
  * @type object
 */
-type SchemaCatalog = {
-    /**
-     * @description User relations, ordered by schema then name.
-     * @type array
-    */
-    relations: SchemaCatalogRelation[];
-    /**
-     * @description Number of relations in the catalog.
-     * @minLength 0
-     * @type integer
-    */
-    scanned_relations: number;
-    /**
-     * @description Number of columns in the catalog.
-     * @minLength 0
-     * @type integer
-    */
-    scanned_columns: number;
+type VerifyCustomDomainResponse = {
     /**
-     * @description True when the catalog stopped early at the column limit.
-     * @type boolean | undefined
+     * @description Whether DNS verification succeeded.
+     * @type boolean
     */
-    truncated?: boolean;
+    verified: boolean;
     /**
-     * @description Present when introspection failed to connect or read the schema.
+     * @description Error message if verification failed.
      * @type string | undefined
     */
     error?: string;
+    /**
+     * @description Custom database hostname attached to a project.
+     * @type object | undefined
+    */
+    domain?: CustomDomain;
 };
 
 /**
@@ -5000,123 +6164,110 @@ type SchemaCatalog = {
  * @pattern ^[a-zA-Z0-9_.-]+$
  * @type string
 */
-type GetSchemaCatalogPathProjectId = string;
+type VerifyCustomDomainPathProjectId = string;
 /**
- * @description Unique database identifier (prefixed, e.g. db_xxx).
+ * @description Unique custom domain identifier (prefixed, e.g. dom_xxx).
  * @pattern ^[a-zA-Z0-9_.-]+$
  * @type string
 */
-type GetSchemaCatalogPathDatabaseId = string;
+type VerifyCustomDomainPathDomainId = string;
 /**
- * @description A read-only snapshot of a database\'s user relations (tables and views) and their columns, used to power table/column autocomplete and view-aware warnings in the policy editor. System schemas (pg_catalog, information_schema, pg_toast) are excluded.
+ * @description Result of checking DNS ownership for a custom domain.
  * @type object
 */
-type GetSchemaCatalogStatus200 = SchemaCatalog;
+type VerifyCustomDomainStatus200 = VerifyCustomDomainResponse;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type GetSchemaCatalogStatus400 = Error$1;
+type VerifyCustomDomainStatus400 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type GetSchemaCatalogStatus401 = Error$1;
+type VerifyCustomDomainStatus401 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type GetSchemaCatalogStatus403 = Error$1;
+type VerifyCustomDomainStatus403 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type GetSchemaCatalogStatus404 = Error$1;
+type VerifyCustomDomainStatus404 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type GetSchemaCatalogStatus429 = Error$1;
+type VerifyCustomDomainStatus429 = Error$1;
 /**
  * @type object
 */
-type GetSchemaCatalogRequestConfig = {
+type VerifyCustomDomainRequestConfig = {
     data?: never;
     /**
      * @type object
     */
     pathParams: {
-        project_id: GetSchemaCatalogPathProjectId;
-        database_id: GetSchemaCatalogPathDatabaseId;
+        project_id: VerifyCustomDomainPathProjectId;
+        domain_id: VerifyCustomDomainPathDomainId;
     };
     queryParams?: never;
     headerParams?: never;
     /**
      * @type string
     */
-    url: `/v1/projects/${string}/databases/${string}/schema-catalog`;
+    url: `/v1/projects/${string}/domains/${string}/verify`;
 };
 /**
  * @type object
 */
-type GetSchemaCatalogResponses = {
-    "200": GetSchemaCatalogStatus200;
-    "400": GetSchemaCatalogStatus400;
-    "401": GetSchemaCatalogStatus401;
-    "403": GetSchemaCatalogStatus403;
-    "404": GetSchemaCatalogStatus404;
-    "429": GetSchemaCatalogStatus429;
+type VerifyCustomDomainResponses = {
+    "200": VerifyCustomDomainStatus200;
+    "400": VerifyCustomDomainStatus400;
+    "401": VerifyCustomDomainStatus401;
+    "403": VerifyCustomDomainStatus403;
+    "404": VerifyCustomDomainStatus404;
+    "429": VerifyCustomDomainStatus429;
 };
-/**
- * @description Union of all possible responses
-*/
-type GetSchemaCatalogResponse = (GetSchemaCatalogStatus200 | GetSchemaCatalogStatus400 | GetSchemaCatalogStatus401 | GetSchemaCatalogStatus403 | GetSchemaCatalogStatus404 | GetSchemaCatalogStatus429);
 
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
 */
+declare const healthResponseStatusEnum: {
+    readonly ok: "ok";
+    readonly degraded: "degraded";
+};
+type HealthResponseStatusEnumKey = (typeof healthResponseStatusEnum)[keyof typeof healthResponseStatusEnum];
 /**
- * @description DNS records the user needs to create for domain verification.
+ * @description Health status and build metadata for the API service.
  * @type object
 */
-type DnsInstructions = {
-    /**
-     * @description The CNAME record host.
-     * @example db.example.com
-     * @type string | undefined
-    */
-    cname_host?: string;
-    /**
-     * @description The CNAME record target.
-     * @example abc.proxy.pgbeam.app
-     * @type string | undefined
-    */
-    cname_target?: string;
+type HealthResponse = {
     /**
-     * @description The TXT record host for verification.
-     * @example _pgbeam-verify.db.example.com
-     * @type string | undefined
+     * @description Overall service health.
+     * @type string
     */
-    txt_host?: string;
+    status: HealthResponseStatusEnumKey;
     /**
-     * @description The TXT record value for verification.
-     * @example pgbeam-verify=abc123token
-     * @type string | undefined
+     * @description API server version.
+     * @example 1.0.0
+     * @type string
     */
-    txt_value?: string;
+    version: string;
     /**
-     * @description The CNAME record host for ACME TLS certificate issuance.
-     * @example _acme-challenge.db.example.com
-     * @type string | undefined
+     * @description Resolved image SHA (digest or SHA tag).
+     * @example f1f01eda9e1bc25a3a1d28b1e18c5579fa9a128fede12169d3a392504f9729e4
+     * @type string
     */
-    acme_cname_host?: string;
+    image_sha: string;
     /**
-     * @description The CNAME target for ACME challenge delegation.
-     * @example _acme-challenge.abc.proxy.pgbeam.app
+     * @description Server time.
      * @type string | undefined
     */
-    acme_cname_target?: string;
+    timestamp?: string;
 };
 
 /**
@@ -5125,60 +6276,90 @@ type DnsInstructions = {
 */
 
 /**
- * @description Custom database hostname attached to a project.
+ * @description Health status and build metadata for the API service.
  * @type object
 */
-type CustomDomain = {
+type GetHealthStatus200 = HealthResponse;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
+*/
+type GetHealthStatus429 = Error$1;
+/**
+ * @type object
+*/
+type GetHealthRequestConfig = {
+    data?: never;
+    pathParams?: never;
+    queryParams?: never;
+    headerParams?: never;
     /**
-     * @description Unique domain identifier (prefixed).
-     * @example dom_01h455vb4pex5vsknk084sn02q
      * @type string
     */
-    id: string;
+    url: "/v1/health";
+};
+/**
+ * @type object
+*/
+type GetHealthResponses = {
+    "200": GetHealthStatus200;
+    "429": GetHealthStatus429;
+};
+/**
+ * @description Union of all possible responses
+*/
+type GetHealthResponse = (GetHealthStatus200 | GetHealthStatus429);
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+declare const honeytokenActionEnum: {
+    readonly audit_only: "audit_only";
+    readonly kill: "kill";
+};
+type HoneytokenActionEnumKey = (typeof honeytokenActionEnum)[keyof typeof honeytokenActionEnum];
+/**
+ * @description A decoy (canary) relation. Any agent statement that references it is blocked (fail closed) and recorded as a canary_tripped audit event.\n
+ * @type object
+*/
+type Honeytoken = {
     /**
-     * @description Owning project ID.
-     * @example prj_01h455vb4pex5vsknk084sn02q
+     * @description Unique honeytoken identifier.
+     * @example hnt_01j9x8y7z6w5v4u3t2s1r0q9p8
      * @type string
     */
-    project_id: string;
+    id: string;
     /**
-     * @description The custom domain name.
-     * @example db.example.com
+     * @description Project the honeytoken belongs to.
+     * @example prj_01j9x8y7z6w5v4u3t2s1r0q9p8
      * @type string
     */
-    domain: string;
-    /**
-     * @description Whether DNS ownership has been verified.
-     * @type boolean
-    */
-    verified: boolean;
+    project_id: string;
     /**
-     * @description When DNS verification was completed.
+     * @description Optional schema. Null matches the unqualified/public form, mirroring the relation allowlist normalization.\n
+     * @example public
      * @type string
     */
-    verified_at?: string | null;
+    schema_name?: string | null;
     /**
-     * @description When the TLS certificate expires.
+     * @description Relation (table or view) name of the decoy.
+     * @example customer_ssns
      * @type string
     */
-    tls_cert_expiry?: string | null;
+    relation_name: string;
     /**
-     * @description Token value for the DNS TXT record verification.
+     * @description Response when tripped. audit_only blocks the statement, records the event, and fires webhooks. kill additionally disables the tripping credential via the kill-switch.\n
      * @type string
     */
-    dns_verification_token: string;
-    /**
-     * @description DNS records the user needs to create for domain verification.
-     * @type object | undefined
-    */
-    dns_instructions?: DnsInstructions;
+    action: HoneytokenActionEnumKey;
     /**
-     * @description When the custom domain was created.
+     * @description When the honeytoken was registered.
      * @type string
     */
     created_at: string;
     /**
-     * @description When the custom domain was last updated.
+     * @description When the honeytoken was last updated.
      * @type string
     */
     updated_at: string;
@@ -5190,17 +6371,17 @@ type CustomDomain = {
 */
 
 /**
- * @description Cursor-paginated list of custom domains for a project.
+ * @description Cursor-paginated honeytokens for a project.
  * @type object
 */
-type ListCustomDomainsResponse = {
+type ListHoneytokensResponse = {
     /**
-     * @description Custom domains on the current page.
+     * @description Honeytokens returned for the current page.
      * @type array
     */
-    domains: CustomDomain[];
+    honeytokens: Honeytoken[];
     /**
-     * @description Token for the next page. Empty if no more results.
+     * @description Opaque token for cursor-based pagination.
      * @type string | undefined
     */
     next_page_token?: string;
@@ -5216,7 +6397,7 @@ type ListCustomDomainsResponse = {
  * @pattern ^[a-zA-Z0-9_.-]+$
  * @type string
 */
-type ListCustomDomainsPathProjectId = string;
+type ListHoneytokensPathProjectId = string;
 /**
  * @description Maximum number of items to return (1-100, default 20).
  * @minLength 1
@@ -5224,97 +6405,113 @@ type ListCustomDomainsPathProjectId = string;
  * @default 20
  * @type integer | undefined
 */
-type ListCustomDomainsQueryPageSize = number | undefined;
+type ListHoneytokensQueryPageSize = number | undefined;
 /**
  * @description Opaque token for cursor-based pagination.
  * @pattern ^[a-zA-Z0-9_.-]+$
  * @type string | undefined
 */
-type ListCustomDomainsQueryPageToken = string | undefined;
+type ListHoneytokensQueryPageToken = string | undefined;
 /**
- * @description Cursor-paginated list of custom domains for a project.
+ * @description Cursor-paginated honeytokens for a project.
  * @type object
 */
-type ListCustomDomainsStatus200 = ListCustomDomainsResponse;
+type ListHoneytokensStatus200 = ListHoneytokensResponse;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type ListCustomDomainsStatus400 = Error$1;
+type ListHoneytokensStatus400 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type ListCustomDomainsStatus401 = Error$1;
+type ListHoneytokensStatus401 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type ListCustomDomainsStatus403 = Error$1;
+type ListHoneytokensStatus403 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type ListCustomDomainsStatus404 = Error$1;
+type ListHoneytokensStatus404 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type ListCustomDomainsStatus429 = Error$1;
+type ListHoneytokensStatus429 = Error$1;
 /**
  * @type object
 */
-type ListCustomDomainsRequestConfig = {
+type ListHoneytokensRequestConfig = {
     data?: never;
     /**
      * @type object
     */
     pathParams: {
-        project_id: ListCustomDomainsPathProjectId;
+        project_id: ListHoneytokensPathProjectId;
     };
     /**
      * @type object | undefined
     */
-    queryParams?: {
-        page_size?: ListCustomDomainsQueryPageSize;
-        page_token?: ListCustomDomainsQueryPageToken;
+    queryParams?: {
+        page_size?: ListHoneytokensQueryPageSize;
+        page_token?: ListHoneytokensQueryPageToken;
     };
     headerParams?: never;
     /**
      * @type string
     */
-    url: `/v1/projects/${string}/domains`;
+    url: `/v1/projects/${string}/honeytokens`;
 };
 /**
  * @type object
 */
-type ListCustomDomainsResponses = {
-    "200": ListCustomDomainsStatus200;
-    "400": ListCustomDomainsStatus400;
-    "401": ListCustomDomainsStatus401;
-    "403": ListCustomDomainsStatus403;
-    "404": ListCustomDomainsStatus404;
-    "429": ListCustomDomainsStatus429;
+type ListHoneytokensResponses = {
+    "200": ListHoneytokensStatus200;
+    "400": ListHoneytokensStatus400;
+    "401": ListHoneytokensStatus401;
+    "403": ListHoneytokensStatus403;
+    "404": ListHoneytokensStatus404;
+    "429": ListHoneytokensStatus429;
 };
 
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
 */
+declare const honeytokenInputActionEnum: {
+    readonly audit_only: "audit_only";
+    readonly kill: "kill";
+};
+type HoneytokenInputActionEnumKey = (typeof honeytokenInputActionEnum)[keyof typeof honeytokenInputActionEnum];
 /**
- * @description Request body for attaching a custom domain to a project.
+ * @description Request body for creating or updating a honeytoken.
  * @type object
 */
-type CreateCustomDomainRequest = {
+type HoneytokenInput = {
     /**
-     * @description The custom domain name to add (e.g., db.example.com).
+     * @description Optional schema. Null or empty matches the unqualified/public form.
+     * @maxLength 255
+     * @example public
+     * @type string
+    */
+    schema_name?: string | null;
+    /**
+     * @description Relation (table or view) name of the decoy.
      * @minLength 1
-     * @maxLength 253
-     * @pattern ^[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?(\.[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?)*$
-     * @example db.example.com
+     * @maxLength 255
+     * @example customer_ssns
      * @type string
     */
-    domain: string;
+    relation_name: string;
+    /**
+     * @description Response when the honeytoken is tripped.
+     * @type string
+    */
+    action: HoneytokenInputActionEnumKey;
 };
 
 /**
@@ -5327,81 +6524,75 @@ type CreateCustomDomainRequest = {
  * @pattern ^[a-zA-Z0-9_.-]+$
  * @type string
 */
-type CreateCustomDomainPathProjectId = string;
-/**
- * @description Custom database hostname attached to a project.
- * @type object
-*/
-type CreateCustomDomainStatus201 = CustomDomain;
+type CreateHoneytokenPathProjectId = string;
 /**
- * @description Standard error response envelope for PgBeam API requests.
+ * @description A decoy (canary) relation. Any agent statement that references it is blocked (fail closed) and recorded as a canary_tripped audit event.\n
  * @type object
 */
-type CreateCustomDomainStatus400 = Error$1;
+type CreateHoneytokenStatus201 = Honeytoken;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type CreateCustomDomainStatus401 = Error$1;
+type CreateHoneytokenStatus400 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type CreateCustomDomainStatus403 = Error$1;
+type CreateHoneytokenStatus401 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type CreateCustomDomainStatus404 = Error$1;
+type CreateHoneytokenStatus403 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type CreateCustomDomainStatus409 = Error$1;
+type CreateHoneytokenStatus404 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type CreateCustomDomainStatus429 = Error$1;
+type CreateHoneytokenStatus429 = Error$1;
 /**
- * @description Request body for attaching a custom domain to a project.
+ * @description Request body for creating or updating a honeytoken.
  * @type object
 */
-type CreateCustomDomainData = CreateCustomDomainRequest;
+type CreateHoneytokenData = HoneytokenInput;
 /**
  * @type object
 */
-type CreateCustomDomainRequestConfig = {
-    data?: CreateCustomDomainData;
+type CreateHoneytokenRequestConfig = {
+    data?: CreateHoneytokenData;
     /**
      * @type object
     */
     pathParams: {
-        project_id: CreateCustomDomainPathProjectId;
+        project_id: CreateHoneytokenPathProjectId;
     };
     queryParams?: never;
     headerParams?: never;
     /**
      * @type string
     */
-    url: `/v1/projects/${string}/domains`;
+    url: `/v1/projects/${string}/honeytokens`;
 };
 /**
  * @type object
 */
-type CreateCustomDomainResponses = {
-    "201": CreateCustomDomainStatus201;
-    "400": CreateCustomDomainStatus400;
-    "401": CreateCustomDomainStatus401;
-    "403": CreateCustomDomainStatus403;
-    "404": CreateCustomDomainStatus404;
-    "409": CreateCustomDomainStatus409;
-    "429": CreateCustomDomainStatus429;
+type CreateHoneytokenResponses = {
+    "201": CreateHoneytokenStatus201;
+    "400": CreateHoneytokenStatus400;
+    "401": CreateHoneytokenStatus401;
+    "403": CreateHoneytokenStatus403;
+    "404": CreateHoneytokenStatus404;
+    "429": CreateHoneytokenStatus429;
 };
 /**
  * @description Union of all possible responses
 */
-type CreateCustomDomainResponse = (CreateCustomDomainStatus201 | CreateCustomDomainStatus400 | CreateCustomDomainStatus401 | CreateCustomDomainStatus403 | CreateCustomDomainStatus404 | CreateCustomDomainStatus409 | CreateCustomDomainStatus429);
+type CreateHoneytokenResponse = (CreateHoneytokenStatus201 | CreateHoneytokenStatus400 | CreateHoneytokenStatus401 | CreateHoneytokenStatus403 | CreateHoneytokenStatus404 | CreateHoneytokenStatus429);
 
 /**
 * Generated by Kubb (https://kubb.dev/).
@@ -5413,103 +6604,71 @@ type CreateCustomDomainResponse = (CreateCustomDomainStatus201 | CreateCustomDom
  * @pattern ^[a-zA-Z0-9_.-]+$
  * @type string
 */
-type DeleteCustomDomainPathProjectId = string;
+type GetHoneytokenPathProjectId = string;
 /**
- * @description Unique custom domain identifier (prefixed, e.g. dom_xxx).
+ * @description Unique honeytoken identifier (prefixed, e.g. hnt_xxx).
  * @pattern ^[a-zA-Z0-9_.-]+$
  * @type string
 */
-type DeleteCustomDomainPathDomainId = string;
-/**
- * @type any
-*/
-type DeleteCustomDomainStatus204 = any;
+type GetHoneytokenPathHoneytokenId = string;
 /**
- * @description Standard error response envelope for PgBeam API requests.
+ * @description A decoy (canary) relation. Any agent statement that references it is blocked (fail closed) and recorded as a canary_tripped audit event.\n
  * @type object
 */
-type DeleteCustomDomainStatus400 = Error$1;
+type GetHoneytokenStatus200 = Honeytoken;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type DeleteCustomDomainStatus401 = Error$1;
+type GetHoneytokenStatus400 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type DeleteCustomDomainStatus403 = Error$1;
+type GetHoneytokenStatus401 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type DeleteCustomDomainStatus404 = Error$1;
+type GetHoneytokenStatus403 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type DeleteCustomDomainStatus429 = Error$1;
+type GetHoneytokenStatus404 = Error$1;
 /**
  * @type object
 */
-type DeleteCustomDomainRequestConfig = {
+type GetHoneytokenRequestConfig = {
     data?: never;
     /**
      * @type object
     */
     pathParams: {
-        project_id: DeleteCustomDomainPathProjectId;
-        domain_id: DeleteCustomDomainPathDomainId;
+        project_id: GetHoneytokenPathProjectId;
+        honeytoken_id: GetHoneytokenPathHoneytokenId;
     };
     queryParams?: never;
     headerParams?: never;
     /**
      * @type string
     */
-    url: `/v1/projects/${string}/domains/${string}`;
+    url: `/v1/projects/${string}/honeytokens/${string}`;
 };
 /**
  * @type object
 */
-type DeleteCustomDomainResponses = {
-    "204": DeleteCustomDomainStatus204;
-    "400": DeleteCustomDomainStatus400;
-    "401": DeleteCustomDomainStatus401;
-    "403": DeleteCustomDomainStatus403;
-    "404": DeleteCustomDomainStatus404;
-    "429": DeleteCustomDomainStatus429;
+type GetHoneytokenResponses = {
+    "200": GetHoneytokenStatus200;
+    "400": GetHoneytokenStatus400;
+    "401": GetHoneytokenStatus401;
+    "403": GetHoneytokenStatus403;
+    "404": GetHoneytokenStatus404;
 };
 /**
  * @description Union of all possible responses
 */
-type DeleteCustomDomainResponse = (DeleteCustomDomainStatus204 | DeleteCustomDomainStatus400 | DeleteCustomDomainStatus401 | DeleteCustomDomainStatus403 | DeleteCustomDomainStatus404 | DeleteCustomDomainStatus429);
-
-/**
-* Generated by Kubb (https://kubb.dev/).
-* Do not edit manually.
-*/
-
-/**
- * @description Result of checking DNS ownership for a custom domain.
- * @type object
-*/
-type VerifyCustomDomainResponse = {
-    /**
-     * @description Whether DNS verification succeeded.
-     * @type boolean
-    */
-    verified: boolean;
-    /**
-     * @description Error message if verification failed.
-     * @type string | undefined
-    */
-    error?: string;
-    /**
-     * @description Custom database hostname attached to a project.
-     * @type object | undefined
-    */
-    domain?: CustomDomain;
-};
+type GetHoneytokenResponse = (GetHoneytokenStatus200 | GetHoneytokenStatus400 | GetHoneytokenStatus401 | GetHoneytokenStatus403 | GetHoneytokenStatus404);
 
 /**
 * Generated by Kubb (https://kubb.dev/).
@@ -5521,151 +6680,151 @@ type VerifyCustomDomainResponse = {
  * @pattern ^[a-zA-Z0-9_.-]+$
  * @type string
 */
-type VerifyCustomDomainPathProjectId = string;
+type UpdateHoneytokenPathProjectId = string;
 /**
- * @description Unique custom domain identifier (prefixed, e.g. dom_xxx).
+ * @description Unique honeytoken identifier (prefixed, e.g. hnt_xxx).
  * @pattern ^[a-zA-Z0-9_.-]+$
  * @type string
 */
-type VerifyCustomDomainPathDomainId = string;
+type UpdateHoneytokenPathHoneytokenId = string;
 /**
- * @description Result of checking DNS ownership for a custom domain.
+ * @description A decoy (canary) relation. Any agent statement that references it is blocked (fail closed) and recorded as a canary_tripped audit event.\n
  * @type object
 */
-type VerifyCustomDomainStatus200 = VerifyCustomDomainResponse;
+type UpdateHoneytokenStatus200 = Honeytoken;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type VerifyCustomDomainStatus400 = Error$1;
+type UpdateHoneytokenStatus400 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type VerifyCustomDomainStatus401 = Error$1;
+type UpdateHoneytokenStatus401 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type VerifyCustomDomainStatus403 = Error$1;
+type UpdateHoneytokenStatus403 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type VerifyCustomDomainStatus404 = Error$1;
+type UpdateHoneytokenStatus404 = Error$1;
 /**
- * @description Standard error response envelope for PgBeam API requests.
+ * @description Request body for creating or updating a honeytoken.
  * @type object
 */
-type VerifyCustomDomainStatus429 = Error$1;
+type UpdateHoneytokenData = HoneytokenInput;
 /**
  * @type object
 */
-type VerifyCustomDomainRequestConfig = {
-    data?: never;
+type UpdateHoneytokenRequestConfig = {
+    data?: UpdateHoneytokenData;
     /**
      * @type object
     */
     pathParams: {
-        project_id: VerifyCustomDomainPathProjectId;
-        domain_id: VerifyCustomDomainPathDomainId;
+        project_id: UpdateHoneytokenPathProjectId;
+        honeytoken_id: UpdateHoneytokenPathHoneytokenId;
     };
     queryParams?: never;
     headerParams?: never;
     /**
      * @type string
     */
-    url: `/v1/projects/${string}/domains/${string}/verify`;
+    url: `/v1/projects/${string}/honeytokens/${string}`;
 };
 /**
  * @type object
 */
-type VerifyCustomDomainResponses = {
-    "200": VerifyCustomDomainStatus200;
-    "400": VerifyCustomDomainStatus400;
-    "401": VerifyCustomDomainStatus401;
-    "403": VerifyCustomDomainStatus403;
-    "404": VerifyCustomDomainStatus404;
-    "429": VerifyCustomDomainStatus429;
+type UpdateHoneytokenResponses = {
+    "200": UpdateHoneytokenStatus200;
+    "400": UpdateHoneytokenStatus400;
+    "401": UpdateHoneytokenStatus401;
+    "403": UpdateHoneytokenStatus403;
+    "404": UpdateHoneytokenStatus404;
 };
+/**
+ * @description Union of all possible responses
+*/
+type UpdateHoneytokenResponse = (UpdateHoneytokenStatus200 | UpdateHoneytokenStatus400 | UpdateHoneytokenStatus401 | UpdateHoneytokenStatus403 | UpdateHoneytokenStatus404);
 
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
 */
-declare const healthResponseStatusEnum: {
-    readonly ok: "ok";
-    readonly degraded: "degraded";
-};
-type HealthResponseStatusEnumKey = (typeof healthResponseStatusEnum)[keyof typeof healthResponseStatusEnum];
+
 /**
- * @description Health status and build metadata for the API service.
+ * @description Unique project identifier (prefixed, e.g. prj_xxx).
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string
+*/
+type DeleteHoneytokenPathProjectId = string;
+/**
+ * @description Unique honeytoken identifier (prefixed, e.g. hnt_xxx).
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string
+*/
+type DeleteHoneytokenPathHoneytokenId = string;
+/**
+ * @type any
+*/
+type DeleteHoneytokenStatus204 = any;
+/**
+ * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type HealthResponse = {
-    /**
-     * @description Overall service health.
-     * @type string
-    */
-    status: HealthResponseStatusEnumKey;
-    /**
-     * @description API server version.
-     * @example 1.0.0
-     * @type string
-    */
-    version: string;
-    /**
-     * @description Resolved image SHA (digest or SHA tag).
-     * @example f1f01eda9e1bc25a3a1d28b1e18c5579fa9a128fede12169d3a392504f9729e4
-     * @type string
-    */
-    image_sha: string;
-    /**
-     * @description Server time.
-     * @type string | undefined
-    */
-    timestamp?: string;
-};
-
+type DeleteHoneytokenStatus400 = Error$1;
 /**
-* Generated by Kubb (https://kubb.dev/).
-* Do not edit manually.
+ * @description Standard error response envelope for PgBeam API requests.
+ * @type object
 */
-
+type DeleteHoneytokenStatus401 = Error$1;
 /**
- * @description Health status and build metadata for the API service.
+ * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type GetHealthStatus200 = HealthResponse;
+type DeleteHoneytokenStatus403 = Error$1;
 /**
  * @description Standard error response envelope for PgBeam API requests.
  * @type object
 */
-type GetHealthStatus429 = Error$1;
+type DeleteHoneytokenStatus404 = Error$1;
 /**
  * @type object
 */
-type GetHealthRequestConfig = {
+type DeleteHoneytokenRequestConfig = {
     data?: never;
-    pathParams?: never;
+    /**
+     * @type object
+    */
+    pathParams: {
+        project_id: DeleteHoneytokenPathProjectId;
+        honeytoken_id: DeleteHoneytokenPathHoneytokenId;
+    };
     queryParams?: never;
     headerParams?: never;
     /**
      * @type string
     */
-    url: "/v1/health";
+    url: `/v1/projects/${string}/honeytokens/${string}`;
 };
 /**
  * @type object
 */
-type GetHealthResponses = {
-    "200": GetHealthStatus200;
-    "429": GetHealthStatus429;
+type DeleteHoneytokenResponses = {
+    "204": DeleteHoneytokenStatus204;
+    "400": DeleteHoneytokenStatus400;
+    "401": DeleteHoneytokenStatus401;
+    "403": DeleteHoneytokenStatus403;
+    "404": DeleteHoneytokenStatus404;
 };
 /**
  * @description Union of all possible responses
 */
-type GetHealthResponse = (GetHealthStatus200 | GetHealthStatus429);
+type DeleteHoneytokenResponse = (DeleteHoneytokenStatus204 | DeleteHoneytokenStatus400 | DeleteHoneytokenStatus401 | DeleteHoneytokenStatus403 | DeleteHoneytokenStatus404);
 
 /**
 * Generated by Kubb (https://kubb.dev/).
@@ -6377,101 +7536,23 @@ type ListOrganizationsStatus429 = Error$1;
 /**
  * @type object
 */
-type ListOrganizationsRequestConfig = {
-    data?: never;
-    pathParams?: never;
-    queryParams?: never;
-    headerParams?: never;
-    /**
-     * @type string
-    */
-    url: "/v1/organizations";
-};
-/**
- * @type object
-*/
-type ListOrganizationsResponses = {
-    "200": ListOrganizationsStatus200;
-    "401": ListOrganizationsStatus401;
-    "429": ListOrganizationsStatus429;
-};
-
-/**
-* Generated by Kubb (https://kubb.dev/).
-* Do not edit manually.
-*/
-declare const maskingRuleKindEnum: {
-    readonly redact: "redact";
-    readonly null: "null";
-    readonly hash: "hash";
-};
-type MaskingRuleKindEnumKey = (typeof maskingRuleKindEnum)[keyof typeof maskingRuleKindEnum];
-/**
- * @description A column masking rule applied to agent query results.
- * @type object
-*/
-type MaskingRule = {
-    /**
-     * @description Relation name, optionally schema-qualified (e.g. \"public.users\" or \"users\").
-     * @example users
-     * @type string
-    */
-    table: string;
-    /**
-     * @description Column to mask.
-     * @example email
-     * @type string
-    */
-    column: string;
-    /**
-     * @description How to mask. redact replaces with a token, null returns NULL, hash returns a SHA-256 hex.
-     * @type string
-    */
-    kind: MaskingRuleKindEnumKey;
-};
-
-/**
-* Generated by Kubb (https://kubb.dev/).
-* Do not edit manually.
-*/
-/**
- * @description A per-relation row filter. The predicate is a raw SQL boolean expression ANDed into the WHERE clause for the matching relation.
- * @type object
-*/
-type RowFilter = {
-    /**
-     * @description Relation name, optionally schema-qualified (e.g. \"public.orders\").
-     * @example orders
-     * @type string
-    */
-    table: string;
+type ListOrganizationsRequestConfig = {
+    data?: never;
+    pathParams?: never;
+    queryParams?: never;
+    headerParams?: never;
     /**
-     * @description Raw SQL boolean expression ANDed into WHERE for this relation.
-     * @example tenant_id = current_setting('pgbeam.tenant')
      * @type string
     */
-    predicate: string;
+    url: "/v1/organizations";
 };
-
-/**
-* Generated by Kubb (https://kubb.dev/).
-* Do not edit manually.
-*/
 /**
- * @description Per-statement-kind allow/deny lists. Empty allow means all kinds permitted by the access mode.
  * @type object
 */
-type StatementRules = {
-    /**
-     * @description Allowed statement kinds (select, insert, update, delete, ddl, copy, set, show, explain, transaction).
-     * @type array | undefined
-    */
-    allow?: string[];
-    /**
-     * @description Denied statement kinds (takes precedence over allow).
-     * @type array | undefined
-    */
-    deny?: string[];
+type ListOrganizationsResponses = {
+    "200": ListOrganizationsStatus200;
+    "401": ListOrganizationsStatus401;
+    "429": ListOrganizationsStatus429;
 };
 
 /**
@@ -6756,154 +7837,6 @@ type ListPolicyProfilesResponses = {
 * Do not edit manually.
 */
 
-declare const policyProfileInputAccessModeEnum: {
-    readonly read_only: "read_only";
-    readonly read_write: "read_write";
-};
-type PolicyProfileInputAccessModeEnumKey = (typeof policyProfileInputAccessModeEnum)[keyof typeof policyProfileInputAccessModeEnum];
-declare const policyProfileInputWriteModeEnum: {
-    readonly normal: "normal";
-    readonly rollback: "rollback";
-    readonly sandbox: "sandbox";
-};
-type PolicyProfileInputWriteModeEnumKey = (typeof policyProfileInputWriteModeEnum)[keyof typeof policyProfileInputWriteModeEnum];
-declare const policyProfileInputApprovalModeEnum: {
-    readonly off: "off";
-    readonly writes: "writes";
-    readonly ddl: "ddl";
-    readonly all: "all";
-};
-type PolicyProfileInputApprovalModeEnumKey = (typeof policyProfileInputApprovalModeEnum)[keyof typeof policyProfileInputApprovalModeEnum];
-declare const policyProfileInputMigrationSafetyEnum: {
-    readonly off: "off";
-    readonly warn: "warn";
-    readonly block: "block";
-};
-type PolicyProfileInputMigrationSafetyEnumKey = (typeof policyProfileInputMigrationSafetyEnum)[keyof typeof policyProfileInputMigrationSafetyEnum];
-/**
- * @description Mutable fields of a policy profile (used for create and update).
- * @type object
-*/
-type PolicyProfileInput = {
-    /**
-     * @description Human-readable name for the policy profile.
-     * @minLength 1
-     * @maxLength 128
-     * @type string
-    */
-    name: string;
-    /**
-     * @description read_only blocks all data and schema mutations.
-     * @default "read_only"
-     * @type string | undefined
-    */
-    access_mode?: PolicyProfileInputAccessModeEnumKey;
-    /**
-     * @description Per-statement-kind allow/deny lists. Empty allow means all kinds permitted by the access mode.
-     * @type object | undefined
-    */
-    statement_rules?: StatementRules;
-    /**
-     * @description If non-empty, only these relations are reachable.
-     * @type array | undefined
-    */
-    table_allowlist?: string[];
-    /**
-     * @description Relations explicitly blocked.
-     * @type array | undefined
-    */
-    table_denylist?: string[];
-    /**
-     * @description Column masking rules applied to query results.
-     * @type array | undefined
-    */
-    masking_rules?: MaskingRule[];
-    /**
-     * @description Max queries per rolling hour window. 0 means unlimited.
-     * @minLength 0
-     * @default 0
-     * @type integer | undefined
-    */
-    budget_queries_per_hour?: number;
-    /**
-     * @description Max queries per day window. 0 means unlimited.
-     * @minLength 0
-     * @default 0
-     * @type integer | undefined
-    */
-    budget_queries_per_day?: number;
-    /**
-     * @description Max rows returned per query. 0 means unlimited.
-     * @minLength 0
-     * @default 0
-     * @type integer | undefined
-    */
-    max_rows?: number;
-    /**
-     * @description Upstream statement timeout for agent sessions. 0 uses the project default.
-     * @minLength 0
-     * @default 0
-     * @type integer | undefined
-    */
-    statement_timeout_ms?: number;
-    /**
-     * @description Per-relation row filters ANDed into agent reads.
-     * @type array | undefined
-    */
-    row_filters?: RowFilter[];
-    /**
-     * @description How writes are handled. normal commits, rollback auto-rolls back, sandbox routes to an ephemeral branch.
-     * @default "normal"
-     * @type string | undefined
-    */
-    write_mode?: PolicyProfileInputWriteModeEnumKey;
-    /**
-     * @description Which statement classes require human approval before execution.
-     * @default "off"
-     * @type string | undefined
-    */
-    approval_mode?: PolicyProfileInputApprovalModeEnumKey;
-    /**
-     * @description Statements touching at most this many rows are auto-approved. 0 means none.
-     * @minLength 0
-     * @default 0
-     * @type integer | undefined
-    */
-    approval_auto_max_rows?: number;
-    /**
-     * @description How long a held statement waits for a decision before expiring.
-     * @minLength 0
-     * @default 300
-     * @type integer | undefined
-    */
-    approval_timeout_seconds?: number;
-    /**
-     * @description Migration safety mode. warn surfaces findings, block refuses unsafe DDL.
-     * @default "off"
-     * @type string | undefined
-    */
-    migration_safety?: PolicyProfileInputMigrationSafetyEnumKey;
-    /**
-     * @description Per-day egress budget in bytes. 0 means unlimited.
-     * @minLength 0
-     * @default 0
-     * @type integer | undefined
-    */
-    egress_bytes_per_day?: number;
-    /**
-     * @description Hard cap on rows a single write (INSERT/UPDATE/DELETE) may affect. A write whose affected-row count would exceed this is executed inside a transaction, checked, and rolled back so nothing persists, then blocked. Enforced independently of human approval. 0 means unlimited.
-     * @minLength 0
-     * @default 0
-     * @type integer | undefined
-    */
-    max_affected_rows?: number;
-};
-
-/**
-* Generated by Kubb (https://kubb.dev/).
-* Do not edit manually.
-*/
-
 /**
  * @description Unique project identifier (prefixed, e.g. prj_xxx).
  * @pattern ^[a-zA-Z0-9_.-]+$
@@ -7216,137 +8149,48 @@ type DeletePolicyProfileRequestConfig = {
 /**
  * @type object
 */
-type DeletePolicyProfileResponses = {
-    "204": DeletePolicyProfileStatus204;
-    "400": DeletePolicyProfileStatus400;
-    "401": DeletePolicyProfileStatus401;
-    "403": DeletePolicyProfileStatus403;
-    "404": DeletePolicyProfileStatus404;
-    "409": DeletePolicyProfileStatus409;
-};
-/**
- * @description Union of all possible responses
-*/
-type DeletePolicyProfileResponse = (DeletePolicyProfileStatus204 | DeletePolicyProfileStatus400 | DeletePolicyProfileStatus401 | DeletePolicyProfileStatus403 | DeletePolicyProfileStatus404 | DeletePolicyProfileStatus409);
-
-/**
-* Generated by Kubb (https://kubb.dev/).
-* Do not edit manually.
-*/
-
-/**
- * @description A SQL statement to test plus the policy to test it against. Supply exactly one of policy_id (an existing saved policy) or policy (an unsaved draft, e.g. the in-progress editor form).
- * @type object
-*/
-type DryEvalInput = {
-    /**
-     * @description The single SQL statement to evaluate.
-     * @minLength 1
-     * @maxLength 100000
-     * @example SELECT email FROM users WHERE id = 1
-     * @type string
-    */
-    sql: string;
-    /**
-     * @description ID of an existing saved policy profile to evaluate against.
-     * @example pol_01h455vb4pex5vsknk084sn02q
-     * @type string | undefined
-    */
-    policy_id?: string;
-    /**
-     * @description Mutable fields of a policy profile (used for create and update).
-     * @type object | undefined
-    */
-    policy?: PolicyProfileInput;
-};
-
-/**
-* Generated by Kubb (https://kubb.dev/).
-* Do not edit manually.
-*/
-declare const dryEvalMaskedColumnKindEnum: {
-    readonly redact: "redact";
-    readonly null: "null";
-    readonly hash: "hash";
-};
-type DryEvalMaskedColumnKindEnumKey = (typeof dryEvalMaskedColumnKindEnum)[keyof typeof dryEvalMaskedColumnKindEnum];
-/**
- * @description One result column that would be masked, with the mask kind applied.
- * @type object
-*/
-type DryEvalMaskedColumn = {
-    /**
-     * @description The output column name (post-alias) the client would see masked.
-     * @example email
-     * @type string
-    */
-    column: string;
-    /**
-     * @description How the column is masked.
-     * @type string
-    */
-    kind: DryEvalMaskedColumnKindEnumKey;
+type DeletePolicyProfileResponses = {
+    "204": DeletePolicyProfileStatus204;
+    "400": DeletePolicyProfileStatus400;
+    "401": DeletePolicyProfileStatus401;
+    "403": DeletePolicyProfileStatus403;
+    "404": DeletePolicyProfileStatus404;
+    "409": DeletePolicyProfileStatus409;
 };
+/**
+ * @description Union of all possible responses
+*/
+type DeletePolicyProfileResponse = (DeletePolicyProfileStatus204 | DeletePolicyProfileStatus400 | DeletePolicyProfileStatus401 | DeletePolicyProfileStatus403 | DeletePolicyProfileStatus404 | DeletePolicyProfileStatus409);
 
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
 */
 
-declare const dryEvalResultVerdictEnum: {
-    readonly allow: "allow";
-    readonly block: "block";
-    readonly mask: "mask";
-    readonly "row-filter": "row-filter";
-};
-type DryEvalResultVerdictEnumKey = (typeof dryEvalResultVerdictEnum)[keyof typeof dryEvalResultVerdictEnum];
 /**
- * @description The decision the proxy would reach for the supplied statement under the supplied policy. verdict is the headline outcome; the remaining fields detail why.
+ * @description A SQL statement to test plus the policy to test it against. Supply exactly one of policy_id (an existing saved policy) or policy (an unsaved draft, e.g. the in-progress editor form).
  * @type object
 */
-type DryEvalResult = {
-    /**
-     * @description allow — permitted unchanged; block — rejected; mask — permitted but listed result columns are masked; row-filter — permitted but a WHERE predicate is injected (and any listed columns are also masked).
-     * @type string
-    */
-    verdict: DryEvalResultVerdictEnumKey;
-    /**
-     * @description Machine-readable decision tag. For a block, the blocking rule (e.g. read_only, table_denied, table_not_allowed, statement_denied, row_filter_unsafe). Otherwise \"ok\".
-     * @example ok
-     * @type string
-    */
-    rule: string;
+type DryEvalInput = {
     /**
-     * @description Human-readable explanation of the verdict.
+     * @description The single SQL statement to evaluate.
+     * @minLength 1
+     * @maxLength 100000
+     * @example SELECT email FROM users WHERE id = 1
      * @type string
     */
-    reason: string;
-    /**
-     * @description What the author could do instead (present on block verdicts).
-     * @type string | undefined
-    */
-    hint?: string;
-    /**
-     * @description Result columns that would be masked. Present on mask/row-filter verdicts.
-     * @type array | undefined
-    */
-    masked_columns?: DryEvalMaskedColumn[];
-    /**
-     * @description The row-filter predicate ANDed into the statement\'s WHERE clause.
-     * @example tenant_id = current_setting('pgbeam.tenant')
-     * @type string | undefined
-    */
-    row_filter_predicate?: string;
+    sql: string;
     /**
-     * @description The statement as it would be sent upstream after row-filter injection.
+     * @description ID of an existing saved policy profile to evaluate against.
+     * @example pol_01h455vb4pex5vsknk084sn02q
      * @type string | undefined
     */
-    rewritten_sql?: string;
+    policy_id?: string;
     /**
-     * @description Informational caveats about stateful enforcement a single-statement preview cannot model (per-region budgets, approvals, write-mode routing).
-     * @type array | undefined
+     * @description Mutable fields of a policy profile (used for create and update).
+     * @type object | undefined
     */
-    notes?: string[];
+    policy?: PolicyProfileInput;
 };
 
 /**
@@ -7481,163 +8325,6 @@ type PolicyReplayInput = {
 * Do not edit manually.
 */
 
-declare const policyReplayItemChangeEnum: {
-    readonly newly_blocked: "newly_blocked";
-    readonly newly_allowed: "newly_allowed";
-    readonly still_allowed: "still_allowed";
-    readonly still_blocked: "still_blocked";
-};
-type PolicyReplayItemChangeEnumKey = (typeof policyReplayItemChangeEnum)[keyof typeof policyReplayItemChangeEnum];
-/**
- * @description One distinct recorded query and the decision the candidate policy would reach for it.
- * @type object
-*/
-type PolicyReplayItem = {
-    /**
-     * @description Normalized query hash identifying this statement shape.
-     * @type string
-    */
-    query_hash: string;
-    /**
-     * @description The recorded statement (normalized, literals replaced with $N placeholders), from its most recent occurrence.
-     * @type string
-    */
-    sql: string;
-    /**
-     * @description Statement kind (select, insert, update, delete, ddl, ...).
-     * @type string | undefined
-    */
-    statement_kind?: string;
-    /**
-     * @description How many recorded entries share this query shape in the window.
-     * @type integer
-    */
-    occurrences: number;
-    /**
-     * @description Oldest occurrence in the window.
-     * @type string
-    */
-    first_seen: string;
-    /**
-     * @description Newest occurrence in the window.
-     * @type string
-    */
-    last_seen: string;
-    /**
-     * @description The most recent recorded outcome for this query (query, masked, truncated, or blocked).
-     * @type string
-    */
-    recorded_event: string;
-    /**
-     * @description The decision rule recorded with a blocked outcome.
-     * @type string | undefined
-    */
-    recorded_rule?: string;
-    /**
-     * @description How the candidate decision compares to the recorded outcome. newly_blocked and newly_allowed are the changes worth reviewing before rollout; still_allowed and still_blocked are unchanged.
-     * @type string
-    */
-    change: PolicyReplayItemChangeEnumKey;
-    /**
-     * @description The decision the proxy would reach for the supplied statement under the supplied policy. verdict is the headline outcome; the remaining fields detail why.
-     * @type object
-    */
-    result: DryEvalResult;
-};
-
-/**
-* Generated by Kubb (https://kubb.dev/).
-* Do not edit manually.
-*/
-/**
- * @description Aggregate outcome of a policy replay.
- * @type object
-*/
-type PolicyReplaySummary = {
-    /**
-     * @description Recorded audit entries covered by the replayed queries.
-     * @type integer
-    */
-    entries_scanned: number;
-    /**
-     * @description Distinct normalized queries found in the window (capped at limit).
-     * @type integer
-    */
-    distinct_queries: number;
-    /**
-     * @description Distinct queries actually evaluated against the candidate policy.
-     * @type integer
-    */
-    evaluated: number;
-    /**
-     * @description Queries the candidate policy would allow unchanged.
-     * @type integer
-    */
-    would_allow: number;
-    /**
-     * @description Queries the candidate policy would block.
-     * @type integer
-    */
-    would_block: number;
-    /**
-     * @description Queries the candidate policy would mask result columns on.
-     * @type integer
-    */
-    would_mask: number;
-    /**
-     * @description Queries the candidate policy would inject a row filter into.
-     * @type integer
-    */
-    would_row_filter: number;
-    /**
-     * @description Queries that executed under the recorded policy but the candidate policy would block.
-     * @type integer
-    */
-    newly_blocked: number;
-    /**
-     * @description Queries that were blocked when recorded but the candidate policy would permit.
-     * @type integer
-    */
-    newly_allowed: number;
-    /**
-     * @description Distinct queries skipped because the stored statement was truncated at record time and can no longer be parsed faithfully.
-     * @type integer
-    */
-    skipped_unparseable: number;
-    /**
-     * @description True when the window contained more distinct queries than limit; only the newest were replayed.
-     * @type boolean
-    */
-    truncated: boolean;
-};
-
-/**
-* Generated by Kubb (https://kubb.dev/).
-* Do not edit manually.
-*/
-
-/**
- * @description The outcome of replaying recorded agent traffic against a candidate policy: an aggregate summary plus per-query decisions, changes first.
- * @type object
-*/
-type PolicyReplayResult = {
-    /**
-     * @description Aggregate outcome of a policy replay.
-     * @type object
-    */
-    summary: PolicyReplaySummary;
-    /**
-     * @description Per-query replay decisions, ordered changes first (newly blocked, then newly allowed), then by occurrence count.
-     * @type array
-    */
-    items: PolicyReplayItem[];
-};
-
-/**
-* Generated by Kubb (https://kubb.dev/).
-* Do not edit manually.
-*/
-
 /**
  * @description Unique project identifier (prefixed, e.g. prj_xxx).
  * @pattern ^[a-zA-Z0-9_.-]+$
@@ -11259,6 +11946,10 @@ type RevokeAgentCredentialParams = {
 type RotateAgentCredentialParams = {
     pathParams: NonNullable<RotateAgentCredentialRequestConfig["pathParams"]>;
 };
+type RecommendAgentPolicyParams = {
+    pathParams: NonNullable<RecommendAgentPolicyRequestConfig["pathParams"]>;
+    body: NonNullable<RecommendAgentPolicyRequestConfig["data"]>;
+};
 type ListAnomalyAlertsParams = {
     pathParams: NonNullable<ListAnomalyAlertsRequestConfig["pathParams"]>;
     queryParams?: NonNullable<ListAnomalyAlertsRequestConfig["queryParams"]>;
@@ -11361,6 +12052,24 @@ type DeleteCustomDomainParams = {
 type VerifyCustomDomainParams = {
     pathParams: NonNullable<VerifyCustomDomainRequestConfig["pathParams"]>;
 };
+type ListHoneytokensParams = {
+    pathParams: NonNullable<ListHoneytokensRequestConfig["pathParams"]>;
+    queryParams?: NonNullable<ListHoneytokensRequestConfig["queryParams"]>;
+};
+type CreateHoneytokenParams = {
+    pathParams: NonNullable<CreateHoneytokenRequestConfig["pathParams"]>;
+    body: NonNullable<CreateHoneytokenRequestConfig["data"]>;
+};
+type GetHoneytokenParams = {
+    pathParams: NonNullable<GetHoneytokenRequestConfig["pathParams"]>;
+};
+type UpdateHoneytokenParams = {
+    pathParams: NonNullable<UpdateHoneytokenRequestConfig["pathParams"]>;
+    body: NonNullable<UpdateHoneytokenRequestConfig["data"]>;
+};
+type DeleteHoneytokenParams = {
+    pathParams: NonNullable<DeleteHoneytokenRequestConfig["pathParams"]>;
+};
 type GetProjectInsightsParams = {
     pathParams: NonNullable<GetProjectInsightsRequestConfig["pathParams"]>;
     queryParams?: NonNullable<GetProjectInsightsRequestConfig["queryParams"]>;
@@ -11514,6 +12223,16 @@ interface ApiOperations {
         exportAuditLogs(params: ExportAuditLogsParams): Promise<ExportAuditLogsStatus200>;
         verifyAuditChain(params: VerifyAuditChainParams): Promise<VerifyAuditChainStatus200>;
     };
+    policies: {
+        recommendAgentPolicy(params: RecommendAgentPolicyParams): Promise<RecommendAgentPolicyStatus200>;
+        listPolicyProfiles(params: ListPolicyProfilesParams): Promise<ListPolicyProfilesStatus200>;
+        createPolicyProfile(params: CreatePolicyProfileParams): Promise<CreatePolicyProfileStatus201>;
+        getPolicyProfile(params: GetPolicyProfileParams): Promise<GetPolicyProfileStatus200>;
+        updatePolicyProfile(params: UpdatePolicyProfileParams): Promise<UpdatePolicyProfileStatus200>;
+        deletePolicyProfile(params: DeletePolicyProfileParams): Promise<void>;
+        dryEvalPolicy(params: DryEvalPolicyParams): Promise<DryEvalPolicyStatus200>;
+        replayPolicy(params: ReplayPolicyParams): Promise<ReplayPolicyStatus200>;
+    };
     anomalies: {
         listAnomalyAlerts(params: ListAnomalyAlertsParams): Promise<ListAnomalyAlertsStatus200>;
         updateAnomalyAlert(params: UpdateAnomalyAlertParams): Promise<UpdateAnomalyAlertStatus200>;
@@ -11572,18 +12291,16 @@ interface ApiOperations {
         revokeSelfHostEnrollment(params: RevokeSelfHostEnrollmentParams): Promise<void>;
         rotateSelfHostEnrollment(params: RotateSelfHostEnrollmentParams): Promise<RotateSelfHostEnrollmentStatus200>;
     };
+    honeytokens: {
+        listHoneytokens(params: ListHoneytokensParams): Promise<ListHoneytokensStatus200>;
+        createHoneytoken(params: CreateHoneytokenParams): Promise<CreateHoneytokenStatus201>;
+        getHoneytoken(params: GetHoneytokenParams): Promise<GetHoneytokenStatus200>;
+        updateHoneytoken(params: UpdateHoneytokenParams): Promise<UpdateHoneytokenStatus200>;
+        deleteHoneytoken(params: DeleteHoneytokenParams): Promise<void>;
+    };
     migrations: {
         lintMigration(params: LintMigrationParams): Promise<LintMigrationStatus200>;
     };
-    policies: {
-        listPolicyProfiles(params: ListPolicyProfilesParams): Promise<ListPolicyProfilesStatus200>;
-        createPolicyProfile(params: CreatePolicyProfileParams): Promise<CreatePolicyProfileStatus201>;
-        getPolicyProfile(params: GetPolicyProfileParams): Promise<GetPolicyProfileStatus200>;
-        updatePolicyProfile(params: UpdatePolicyProfileParams): Promise<UpdatePolicyProfileStatus200>;
-        deletePolicyProfile(params: DeletePolicyProfileParams): Promise<void>;
-        dryEvalPolicy(params: DryEvalPolicyParams): Promise<DryEvalPolicyStatus200>;
-        replayPolicy(params: ReplayPolicyParams): Promise<ReplayPolicyStatus200>;
-    };
     support: {
         listSupportCases(params: ListSupportCasesParams): Promise<ListSupportCasesStatus200>;
         createSupportCase(params: CreateSupportCaseParams): Promise<CreateSupportCaseStatus201>;
@@ -11632,6 +12349,10 @@ interface RequestMap {
         params: RotateAgentCredentialParams;
         response: RotateAgentCredentialStatus200;
     };
+    "POST /v1/projects/{project_id}/agents/{agent_id}/policy-recommendation": {
+        params: RecommendAgentPolicyParams;
+        response: RecommendAgentPolicyStatus200;
+    };
     "GET /v1/projects/{project_id}/anomalies": {
         params: ListAnomalyAlertsParams;
         response: ListAnomalyAlertsStatus200;
@@ -11752,6 +12473,26 @@ interface RequestMap {
         params?: undefined;
         response: GetHealthStatus200;
     };
+    "GET /v1/projects/{project_id}/honeytokens": {
+        params: ListHoneytokensParams;
+        response: ListHoneytokensStatus200;
+    };
+    "POST /v1/projects/{project_id}/honeytokens": {
+        params: CreateHoneytokenParams;
+        response: CreateHoneytokenStatus201;
+    };
+    "GET /v1/projects/{project_id}/honeytokens/{honeytoken_id}": {
+        params: GetHoneytokenParams;
+        response: GetHoneytokenStatus200;
+    };
+    "PUT /v1/projects/{project_id}/honeytokens/{honeytoken_id}": {
+        params: UpdateHoneytokenParams;
+        response: UpdateHoneytokenStatus200;
+    };
+    "DELETE /v1/projects/{project_id}/honeytokens/{honeytoken_id}": {
+        params: DeleteHoneytokenParams;
+        response: void;
+    };
     "GET /v1/projects/{project_id}/insights": {
         params: GetProjectInsightsParams;
         response: GetProjectInsightsStatus200;
@@ -12115,5 +12856,5 @@ type McpTransportResponses = {
 */
 type McpTransportResponse = (McpTransportStatus200 | McpTransportStatus401 | McpTransportStatus429);
 
-export { ApiError, PgBeamClient, SSLMode, agentCredentialAuthMethodEnum, agentCredentialPrincipalTypeEnum, agentCredentialStatusEnum, anomalyAlertSeverityEnum, anomalyAlertStatusEnum, approvalRequestStatusEnum, auditDecision, auditSource, cacheRuleEntryQueryTypeEnum, cacheRuleEntryRecommendationEnum, createAgentCredentialRequestPrincipalTypeEnum, createProjectRequestCloudEnum, dataResidency, databaseBranchStatusEnum, databaseRole, dryEvalMaskedColumnKindEnum, dryEvalResultVerdictEnum, extractMessage, healthResponseStatusEnum, maskingRuleKindEnum, mcpRequestJsonrpcEnum, mcpRequestMethodEnum, mcpResponseJsonrpcEnum, migrationFindingSeverityEnum, organizationPlanBillingProviderEnum, organizationPlanPlanEnum, organizationPlanSubscriptionStatusEnum, piiSuggestionMaskKindEnum, piiSuggestionPiiTypeEnum, policyProfileAccessModeEnum, policyProfileApprovalModeEnum, policyProfileInputAccessModeEnum, policyProfileInputApprovalModeEnum, policyProfileInputMigrationSafetyEnum, policyProfileInputWriteModeEnum, policyProfileMigrationSafetyEnum, policyProfileWriteModeEnum, policyReplayItemChangeEnum, poolMode, projectCloudEnum, projectStatus, regionProviderEnum, regionStatusEnum, schemaCatalogRelationKindEnum, supportCaseStatus, supportMessageSource, updateAgentCredentialStatusRequestStatusEnum, updateAnomalyAlertRequestStatusEnum, updateOnboardingRequestStepEnum, vercelResourceStatusStatusEnum, webhookEndpointFormatEnum, webhookEndpointInputFormatEnum };
-export type { AccountExport, AgentCredential, AgentCredentialAuthMethodEnumKey, AgentCredentialPrincipalTypeEnumKey, AgentCredentialSecrets, AgentCredentialStatusEnumKey, AnomalyAlert, AnomalyAlertSeverityEnumKey, AnomalyAlertStatusEnumKey, ApiClient, ApprovalDecisionRequest, ApprovalRequest, ApprovalRequestStatusEnumKey, ApproveApprovalRequestData, ApproveApprovalRequestPathApprovalId, ApproveApprovalRequestPathProjectId, ApproveApprovalRequestRequestConfig, ApproveApprovalRequestResponse, ApproveApprovalRequestResponses, ApproveApprovalRequestStatus200, ApproveApprovalRequestStatus400, ApproveApprovalRequestStatus401, ApproveApprovalRequestStatus403, ApproveApprovalRequestStatus404, ApproveApprovalRequestStatus409, AuditChainVerification, AuditDecision, AuditDecisionKey, AuditLogEntry, AuditSource, AuditSourceKey, CacheConfig, CacheRuleEntry, CacheRuleEntryQueryTypeEnumKey, CacheRuleEntryRecommendationEnumKey, CacheSummary, CancellationFeedbackRequest, CidrEntry, CreateAgentCredentialData, CreateAgentCredentialPathProjectId, CreateAgentCredentialRequest, CreateAgentCredentialRequestConfig, CreateAgentCredentialRequestPrincipalTypeEnumKey, CreateAgentCredentialResponse, CreateAgentCredentialResponses, CreateAgentCredentialStatus201, CreateAgentCredentialStatus400, CreateAgentCredentialStatus401, CreateAgentCredentialStatus403, CreateAgentCredentialStatus404, CreateAgentCredentialStatus409, CreateAgentCredentialStatus429, CreateCustomDomainData, CreateCustomDomainPathProjectId, CreateCustomDomainRequest, CreateCustomDomainRequestConfig, CreateCustomDomainResponse, CreateCustomDomainResponses, CreateCustomDomainStatus201, CreateCustomDomainStatus400, CreateCustomDomainStatus401, CreateCustomDomainStatus403, CreateCustomDomainStatus404, CreateCustomDomainStatus409, CreateCustomDomainStatus429, CreateDatabaseData, CreateDatabasePathProjectId, CreateDatabaseRequest, CreateDatabaseRequestConfig, CreateDatabaseResponse, CreateDatabaseResponses, CreateDatabaseStatus201, CreateDatabaseStatus400, CreateDatabaseStatus401, CreateDatabaseStatus403, CreateDatabaseStatus404, CreateDatabaseStatus429, CreatePolicyProfileData, CreatePolicyProfilePathProjectId, CreatePolicyProfileRequestConfig, CreatePolicyProfileResponse, CreatePolicyProfileResponses, CreatePolicyProfileStatus201, CreatePolicyProfileStatus400, CreatePolicyProfileStatus401, CreatePolicyProfileStatus403, CreatePolicyProfileStatus404, CreatePolicyProfileStatus409, CreatePolicyProfileStatus429, CreateProjectData, CreateProjectRequest, CreateProjectRequestCloudEnumKey, CreateProjectRequestConfig, CreateProjectResponse, CreateProjectResponses, CreateProjectStatus201, CreateProjectStatus400, CreateProjectStatus401, CreateProjectStatus403, CreateProjectStatus409, CreateProjectStatus429, CreateReplicaData, CreateReplicaPathDatabaseId, CreateReplicaRequest, CreateReplicaRequestConfig, CreateReplicaResponse, CreateReplicaResponses, CreateReplicaStatus201, CreateReplicaStatus400, CreateReplicaStatus401, CreateReplicaStatus403, CreateReplicaStatus404, CreateReplicaStatus429, CreateSelfHostEnrollmentData, CreateSelfHostEnrollmentPathOrgId, CreateSelfHostEnrollmentRequest, CreateSelfHostEnrollmentRequestConfig, CreateSelfHostEnrollmentResponse, CreateSelfHostEnrollmentResponses, CreateSelfHostEnrollmentStatus201, CreateSelfHostEnrollmentStatus400, CreateSelfHostEnrollmentStatus401, CreateSelfHostEnrollmentStatus403, CreateSelfHostEnrollmentStatus429, CreateSupportCaseData, CreateSupportCasePathOrgId, CreateSupportCaseRequest, CreateSupportCaseRequestConfig, CreateSupportCaseResponse, CreateSupportCaseResponses, CreateSupportCaseStatus201, CreateSupportCaseStatus400, CreateSupportCaseStatus401, CreateSupportCaseStatus403, CreateSupportMessageData, CreateSupportMessagePathCaseId, CreateSupportMessagePathOrgId, CreateSupportMessageRequest, CreateSupportMessageRequestConfig, CreateSupportMessageResponse, CreateSupportMessageResponses, CreateSupportMessageStatus201, CreateSupportMessageStatus400, CreateSupportMessageStatus401, CreateSupportMessageStatus403, CreateSupportMessageStatus404, CreateWebhookEndpointData, CreateWebhookEndpointPathProjectId, CreateWebhookEndpointRequestConfig, CreateWebhookEndpointResponse, CreateWebhookEndpointResponses, CreateWebhookEndpointStatus201, CreateWebhookEndpointStatus400, CreateWebhookEndpointStatus401, CreateWebhookEndpointStatus403, CreateWebhookEndpointStatus404, CreateWebhookEndpointStatus429, CustomDomain, DailyUsage, DataResidencyKey, Database, DatabaseBranch, DatabaseBranchStatusEnumKey, DatabaseRoleKey, DeleteCustomDomainPathDomainId, DeleteCustomDomainPathProjectId, DeleteCustomDomainRequestConfig, DeleteCustomDomainResponse, DeleteCustomDomainResponses, DeleteCustomDomainStatus204, DeleteCustomDomainStatus400, DeleteCustomDomainStatus401, DeleteCustomDomainStatus403, DeleteCustomDomainStatus404, DeleteCustomDomainStatus429, DeleteDatabasePathDatabaseId, DeleteDatabasePathProjectId, DeleteDatabaseRequestConfig, DeleteDatabaseResponse, DeleteDatabaseResponses, DeleteDatabaseStatus204, DeleteDatabaseStatus400, DeleteDatabaseStatus401, DeleteDatabaseStatus403, DeleteDatabaseStatus404, DeleteDatabaseStatus429, DeletePolicyProfilePathPolicyId, DeletePolicyProfilePathProjectId, DeletePolicyProfileRequestConfig, DeletePolicyProfileResponse, DeletePolicyProfileResponses, DeletePolicyProfileStatus204, DeletePolicyProfileStatus400, DeletePolicyProfileStatus401, DeletePolicyProfileStatus403, DeletePolicyProfileStatus404, DeletePolicyProfileStatus409, DeleteProjectPathProjectId, DeleteProjectRequestConfig, DeleteProjectResponse, DeleteProjectResponses, DeleteProjectStatus204, DeleteProjectStatus400, DeleteProjectStatus401, DeleteProjectStatus403, DeleteProjectStatus404, DeleteProjectStatus429, DeleteReplicaPathDatabaseId, DeleteReplicaPathReplicaId, DeleteReplicaRequestConfig, DeleteReplicaResponse, DeleteReplicaResponses, DeleteReplicaStatus204, DeleteReplicaStatus400, DeleteReplicaStatus401, DeleteReplicaStatus403, DeleteReplicaStatus404, DeleteReplicaStatus429, DeleteWebhookEndpointPathProjectId, DeleteWebhookEndpointPathWebhookId, DeleteWebhookEndpointRequestConfig, DeleteWebhookEndpointResponse, DeleteWebhookEndpointResponses, DeleteWebhookEndpointStatus204, DeleteWebhookEndpointStatus400, DeleteWebhookEndpointStatus401, DeleteWebhookEndpointStatus403, DeleteWebhookEndpointStatus404, DiscardDatabaseBranchPathBranchId, DiscardDatabaseBranchPathProjectId, DiscardDatabaseBranchRequestConfig, DiscardDatabaseBranchResponse, DiscardDatabaseBranchResponses, DiscardDatabaseBranchStatus204, DiscardDatabaseBranchStatus400, DiscardDatabaseBranchStatus401, DiscardDatabaseBranchStatus403, DiscardDatabaseBranchStatus404, DnsInstructions, DryEvalInput, DryEvalMaskedColumn, DryEvalMaskedColumnKindEnumKey, DryEvalPolicyData, DryEvalPolicyPathProjectId, DryEvalPolicyRequestConfig, DryEvalPolicyResponse, DryEvalPolicyResponses, DryEvalPolicyStatus200, DryEvalPolicyStatus400, DryEvalPolicyStatus401, DryEvalPolicyStatus403, DryEvalPolicyStatus404, DryEvalPolicyStatus429, DryEvalResult, DryEvalResultVerdictEnumKey, Error$1 as Error, ExportAccountDataRequestConfig, ExportAccountDataResponse, ExportAccountDataResponses, ExportAccountDataStatus200, ExportAccountDataStatus401, ExportAccountDataStatus404, ExportAccountDataStatus429, ExportAuditLogsPathProjectId, ExportAuditLogsQueryCredentialId, ExportAuditLogsQueryDecision, ExportAuditLogsQueryEnd, ExportAuditLogsQueryEvent, ExportAuditLogsQuerySource, ExportAuditLogsQueryStart, ExportAuditLogsRequestConfig, ExportAuditLogsResponse, ExportAuditLogsResponses, ExportAuditLogsStatus200, ExportAuditLogsStatus400, ExportAuditLogsStatus401, ExportAuditLogsStatus403, ExportAuditLogsStatus404, ExportAuditLogsStatus429, GetAgentCredentialPathAgentId, GetAgentCredentialPathProjectId, GetAgentCredentialRequestConfig, GetAgentCredentialResponse, GetAgentCredentialResponses, GetAgentCredentialStatus200, GetAgentCredentialStatus400, GetAgentCredentialStatus401, GetAgentCredentialStatus403, GetAgentCredentialStatus404, GetDatabasePathDatabaseId, GetDatabasePathProjectId, GetDatabaseRequestConfig, GetDatabaseResponse, GetDatabaseResponses, GetDatabaseStatus200, GetDatabaseStatus400, GetDatabaseStatus401, GetDatabaseStatus403, GetDatabaseStatus404, GetDatabaseStatus429, GetHealthRequestConfig, GetHealthResponse, GetHealthResponses, GetHealthStatus200, GetHealthStatus429, GetOnboardingProgressPathOrgId, GetOnboardingProgressRequestConfig, GetOnboardingProgressResponse, GetOnboardingProgressResponses, GetOnboardingProgressStatus200, GetOnboardingProgressStatus400, GetOnboardingProgressStatus401, GetOnboardingProgressStatus403, GetOnboardingProgressStatus404, GetOnboardingProgressStatus429, GetOrganizationPlanPathOrgId, GetOrganizationPlanRequestConfig, GetOrganizationPlanResponse, GetOrganizationPlanResponses, GetOrganizationPlanStatus200, GetOrganizationPlanStatus400, GetOrganizationPlanStatus401, GetOrganizationPlanStatus403, GetOrganizationPlanStatus429, GetOrganizationUsagePathOrgId, GetOrganizationUsageQueryEndDate, GetOrganizationUsageQueryStartDate, GetOrganizationUsageRequestConfig, GetOrganizationUsageResponse, GetOrganizationUsageResponses, GetOrganizationUsageStatus200, GetOrganizationUsageStatus400, GetOrganizationUsageStatus401, GetOrganizationUsageStatus403, GetOrganizationUsageStatus429, GetPolicyProfilePathPolicyId, GetPolicyProfilePathProjectId, GetPolicyProfileRequestConfig, GetPolicyProfileResponse, GetPolicyProfileResponses, GetPolicyProfileStatus200, GetPolicyProfileStatus400, GetPolicyProfileStatus401, GetPolicyProfileStatus403, GetPolicyProfileStatus404, GetProjectInsightsPathProjectId, GetProjectInsightsQueryLimit, GetProjectInsightsQueryRange, GetProjectInsightsRequestConfig, GetProjectInsightsResponse, GetProjectInsightsResponses, GetProjectInsightsStatus200, GetProjectInsightsStatus400, GetProjectInsightsStatus401, GetProjectInsightsStatus404, GetProjectInsightsStatus429, GetProjectMetricsPathProjectId, GetProjectMetricsQueryLimit, GetProjectMetricsQueryRegion, GetProjectMetricsRequestConfig, GetProjectMetricsResponse, GetProjectMetricsResponses, GetProjectMetricsStatus200, GetProjectMetricsStatus400, GetProjectMetricsStatus401, GetProjectMetricsStatus404, GetProjectMetricsStatus429, GetProjectPathProjectId, GetProjectRequestConfig, GetProjectResponse, GetProjectResponses, GetProjectStatus200, GetProjectStatus400, GetProjectStatus401, GetProjectStatus403, GetProjectStatus404, GetProjectStatus429, GetProjectUsagePathProjectId, GetProjectUsageQueryEndDate, GetProjectUsageQueryStartDate, GetProjectUsageRequestConfig, GetProjectUsageResponse, GetProjectUsageResponses, GetProjectUsageStatus200, GetProjectUsageStatus400, GetProjectUsageStatus401, GetProjectUsageStatus404, GetProjectUsageStatus429, GetSchemaCatalogPathDatabaseId, GetSchemaCatalogPathProjectId, GetSchemaCatalogRequestConfig, GetSchemaCatalogResponse, GetSchemaCatalogResponses, GetSchemaCatalogStatus200, GetSchemaCatalogStatus400, GetSchemaCatalogStatus401, GetSchemaCatalogStatus403, GetSchemaCatalogStatus404, GetSchemaCatalogStatus429, GetSupportCasePathCaseId, GetSupportCasePathOrgId, GetSupportCaseRequestConfig, GetSupportCaseResponse, GetSupportCaseResponses, GetSupportCaseStatus200, GetSupportCaseStatus400, GetSupportCaseStatus401, GetSupportCaseStatus403, GetSupportCaseStatus404, GetVercelInstallationPathOrgId, GetVercelInstallationRequestConfig, GetVercelInstallationResponse, GetVercelInstallationResponses, GetVercelInstallationStatus200, GetVercelInstallationStatus400, GetVercelInstallationStatus401, GetVercelInstallationStatus403, GetVercelInstallationStatus404, GetVercelInstallationStatus429, GetWebhookEndpointPathProjectId, GetWebhookEndpointPathWebhookId, GetWebhookEndpointRequestConfig, GetWebhookEndpointResponse, GetWebhookEndpointResponses, GetWebhookEndpointStatus200, GetWebhookEndpointStatus400, GetWebhookEndpointStatus401, GetWebhookEndpointStatus403, GetWebhookEndpointStatus404, HandleSlackSupportEventData, HandleSlackSupportEventRequestConfig, HandleSlackSupportEventResponse, HandleSlackSupportEventResponses, HandleSlackSupportEventStatus200, HandleSlackSupportEventStatus400, HandleSlackSupportEventStatus401, HandleSlackSupportEventStatus404, HealthResponse, HealthResponseStatusEnumKey, LatencySummary, LintMigrationData, LintMigrationPathProjectId, LintMigrationRequestConfig, LintMigrationResponse, LintMigrationResponses, LintMigrationStatus200, LintMigrationStatus400, LintMigrationStatus401, LintMigrationStatus403, LintMigrationStatus404, ListAgentCredentialsPathProjectId, ListAgentCredentialsQueryPageSize, ListAgentCredentialsQueryPageToken, ListAgentCredentialsRequestConfig, ListAgentCredentialsResponse, ListAgentCredentialsResponses, ListAgentCredentialsStatus200, ListAgentCredentialsStatus400, ListAgentCredentialsStatus401, ListAgentCredentialsStatus403, ListAgentCredentialsStatus404, ListAgentCredentialsStatus429, ListAnomalyAlertsPathProjectId, ListAnomalyAlertsQueryPageSize, ListAnomalyAlertsQueryPageToken, ListAnomalyAlertsQueryStatus, ListAnomalyAlertsRequestConfig, ListAnomalyAlertsResponse, ListAnomalyAlertsResponses, ListAnomalyAlertsStatus200, ListAnomalyAlertsStatus400, ListAnomalyAlertsStatus401, ListAnomalyAlertsStatus403, ListAnomalyAlertsStatus404, ListAnomalyAlertsStatus429, ListApprovalRequestsPathProjectId, ListApprovalRequestsQueryPageSize, ListApprovalRequestsQueryPageToken, ListApprovalRequestsQueryStatus, ListApprovalRequestsRequestConfig, ListApprovalRequestsResponse, ListApprovalRequestsResponses, ListApprovalRequestsStatus200, ListApprovalRequestsStatus400, ListApprovalRequestsStatus401, ListApprovalRequestsStatus403, ListApprovalRequestsStatus404, ListApprovalRequestsStatus429, ListAuditLogsPathProjectId, ListAuditLogsQueryBefore, ListAuditLogsQueryCredentialId, ListAuditLogsQueryDecision, ListAuditLogsQueryEnd, ListAuditLogsQueryEvent, ListAuditLogsQueryPageSize, ListAuditLogsQuerySource, ListAuditLogsQueryStart, ListAuditLogsRequestConfig, ListAuditLogsResponse, ListAuditLogsResponses, ListAuditLogsStatus200, ListAuditLogsStatus400, ListAuditLogsStatus401, ListAuditLogsStatus403, ListAuditLogsStatus404, ListAuditLogsStatus429, ListCacheRulesPathDatabaseId, ListCacheRulesPathProjectId, ListCacheRulesQueryPageSize, ListCacheRulesQueryPageToken, ListCacheRulesRequestConfig, ListCacheRulesResponse, ListCacheRulesResponses, ListCacheRulesStatus200, ListCacheRulesStatus400, ListCacheRulesStatus401, ListCacheRulesStatus403, ListCacheRulesStatus404, ListCacheRulesStatus429, ListCustomDomainsPathProjectId, ListCustomDomainsQueryPageSize, ListCustomDomainsQueryPageToken, ListCustomDomainsRequestConfig, ListCustomDomainsResponse, ListCustomDomainsResponses, ListCustomDomainsStatus200, ListCustomDomainsStatus400, ListCustomDomainsStatus401, ListCustomDomainsStatus403, ListCustomDomainsStatus404, ListCustomDomainsStatus429, ListDatabaseBranchesPathProjectId, ListDatabaseBranchesQueryPageSize, ListDatabaseBranchesQueryPageToken, ListDatabaseBranchesQueryStatus, ListDatabaseBranchesRequestConfig, ListDatabaseBranchesResponse, ListDatabaseBranchesResponses, ListDatabaseBranchesStatus200, ListDatabaseBranchesStatus400, ListDatabaseBranchesStatus401, ListDatabaseBranchesStatus403, ListDatabaseBranchesStatus404, ListDatabaseBranchesStatus429, ListDatabasesPathProjectId, ListDatabasesQueryPageSize, ListDatabasesQueryPageToken, ListDatabasesRequestConfig, ListDatabasesResponse, ListDatabasesResponses, ListDatabasesStatus200, ListDatabasesStatus400, ListDatabasesStatus401, ListDatabasesStatus403, ListDatabasesStatus404, ListDatabasesStatus429, ListOrganizationsRequestConfig, ListOrganizationsResponse, ListOrganizationsResponses, ListOrganizationsStatus200, ListOrganizationsStatus401, ListOrganizationsStatus429, ListPlansRequestConfig, ListPlansResponse, ListPlansResponses, ListPlansStatus200, ListPlansStatus401, ListPlansStatus429, ListPolicyProfilesPathProjectId, ListPolicyProfilesQueryPageSize, ListPolicyProfilesQueryPageToken, ListPolicyProfilesRequestConfig, ListPolicyProfilesResponse, ListPolicyProfilesResponses, ListPolicyProfilesStatus200, ListPolicyProfilesStatus400, ListPolicyProfilesStatus401, ListPolicyProfilesStatus403, ListPolicyProfilesStatus404, ListPolicyProfilesStatus429, ListProjectsQueryOrgId, ListProjectsQueryPageSize, ListProjectsQueryPageToken, ListProjectsQuerySortBy, ListProjectsRequestConfig, ListProjectsResponse, ListProjectsResponses, ListProjectsStatus200, ListProjectsStatus400, ListProjectsStatus401, ListProjectsStatus403, ListProjectsStatus429, ListRegionsRequestConfig, ListRegionsResponse, ListRegionsResponses, ListRegionsStatus200, ListRegionsStatus401, ListRegionsStatus429, ListReplicasPathDatabaseId, ListReplicasRequestConfig, ListReplicasResponse, ListReplicasResponses, ListReplicasStatus200, ListReplicasStatus400, ListReplicasStatus401, ListReplicasStatus403, ListReplicasStatus404, ListReplicasStatus429, ListSelfHostEnrollmentsPathOrgId, ListSelfHostEnrollmentsRequestConfig, ListSelfHostEnrollmentsResponse, ListSelfHostEnrollmentsResponses, ListSelfHostEnrollmentsStatus200, ListSelfHostEnrollmentsStatus400, ListSelfHostEnrollmentsStatus401, ListSelfHostEnrollmentsStatus403, ListSupportCasesPathOrgId, ListSupportCasesQueryPage, ListSupportCasesQueryPageSize, ListSupportCasesQuerySearch, ListSupportCasesQueryStatus, ListSupportCasesRequestConfig, ListSupportCasesResponse, ListSupportCasesResponses, ListSupportCasesStatus200, ListSupportCasesStatus400, ListSupportCasesStatus401, ListSupportCasesStatus403, ListWebhookEndpointsPathProjectId, ListWebhookEndpointsQueryPageSize, ListWebhookEndpointsQueryPageToken, ListWebhookEndpointsRequestConfig, ListWebhookEndpointsResponse, ListWebhookEndpointsResponses, ListWebhookEndpointsStatus200, ListWebhookEndpointsStatus400, ListWebhookEndpointsStatus401, ListWebhookEndpointsStatus403, ListWebhookEndpointsStatus404, ListWebhookEndpointsStatus429, MaskingRule, MaskingRuleKindEnumKey, McpRequest, McpRequestJsonrpcEnumKey, McpRequestMethodEnumKey, McpResponse, McpResponseJsonrpcEnumKey, McpTransportData, McpTransportRequestConfig, McpTransportResponse, McpTransportResponses, McpTransportStatus200, McpTransportStatus401, McpTransportStatus429, MetricsSnapshot, MigrationFinding, MigrationFindingSeverityEnumKey, MigrationLintRequest, MigrationLintResponse, OnboardingProgress, OrganizationPlan, OrganizationPlanBillingProviderEnumKey, OrganizationPlanPlanEnumKey, OrganizationPlanSubscriptionStatusEnumKey, OrganizationSummary, PgBeamClientOptions, PiiSuggestion, PiiSuggestionMaskKindEnumKey, PiiSuggestionPiiTypeEnumKey, PlanInfo, PlanLimits, PolicyProfile, PolicyProfileAccessModeEnumKey, PolicyProfileApprovalModeEnumKey, PolicyProfileInput, PolicyProfileInputAccessModeEnumKey, PolicyProfileInputApprovalModeEnumKey, PolicyProfileInputMigrationSafetyEnumKey, PolicyProfileInputWriteModeEnumKey, PolicyProfileMigrationSafetyEnumKey, PolicyProfileWriteModeEnumKey, PolicyReplayInput, PolicyReplayItem, PolicyReplayItemChangeEnumKey, PolicyReplayResult, PolicyReplaySummary, PoolConfig, PoolModeKey, Project, ProjectCloudEnumKey, ProjectDailyUsage, ProjectInsights, ProjectMetricsResponse, ProjectStatusKey, ProjectUsageResponse, QueryInsight, Region, RegionProviderEnumKey, RegionStatusEnumKey, RejectApprovalRequestData, RejectApprovalRequestPathApprovalId, RejectApprovalRequestPathProjectId, RejectApprovalRequestRequestConfig, RejectApprovalRequestResponse, RejectApprovalRequestResponses, RejectApprovalRequestStatus200, RejectApprovalRequestStatus400, RejectApprovalRequestStatus401, RejectApprovalRequestStatus403, RejectApprovalRequestStatus404, RejectApprovalRequestStatus409, ReplayPolicyData, ReplayPolicyPathProjectId, ReplayPolicyRequestConfig, ReplayPolicyResponse, ReplayPolicyResponses, ReplayPolicyStatus200, ReplayPolicyStatus400, ReplayPolicyStatus401, ReplayPolicyStatus403, ReplayPolicyStatus404, ReplayPolicyStatus429, Replica, RetryConfig, RevokeAgentCredentialPathAgentId, RevokeAgentCredentialPathProjectId, RevokeAgentCredentialRequestConfig, RevokeAgentCredentialResponse, RevokeAgentCredentialResponses, RevokeAgentCredentialStatus204, RevokeAgentCredentialStatus400, RevokeAgentCredentialStatus401, RevokeAgentCredentialStatus403, RevokeAgentCredentialStatus404, RevokeSelfHostEnrollmentPathEnrollmentId, RevokeSelfHostEnrollmentPathOrgId, RevokeSelfHostEnrollmentRequestConfig, RevokeSelfHostEnrollmentResponse, RevokeSelfHostEnrollmentResponses, RevokeSelfHostEnrollmentStatus204, RevokeSelfHostEnrollmentStatus400, RevokeSelfHostEnrollmentStatus401, RevokeSelfHostEnrollmentStatus403, RevokeSelfHostEnrollmentStatus404, RotateAgentCredentialPathAgentId, RotateAgentCredentialPathProjectId, RotateAgentCredentialRequestConfig, RotateAgentCredentialResponse, RotateAgentCredentialResponses, RotateAgentCredentialStatus200, RotateAgentCredentialStatus400, RotateAgentCredentialStatus401, RotateAgentCredentialStatus403, RotateAgentCredentialStatus404, RotateAgentCredentialStatus409, RotateSelfHostEnrollmentPathEnrollmentId, RotateSelfHostEnrollmentPathOrgId, RotateSelfHostEnrollmentRequestConfig, RotateSelfHostEnrollmentResponse, RotateSelfHostEnrollmentResponses, RotateSelfHostEnrollmentStatus200, RotateSelfHostEnrollmentStatus400, RotateSelfHostEnrollmentStatus401, RotateSelfHostEnrollmentStatus403, RotateSelfHostEnrollmentStatus404, RotateSelfHostEnrollmentStatus409, RowFilter, SSLModeKey, ScanDatabaseForPiiPathDatabaseId, ScanDatabaseForPiiPathProjectId, ScanDatabaseForPiiRequestConfig, ScanDatabaseForPiiResponse, ScanDatabaseForPiiResponses, ScanDatabaseForPiiStatus200, ScanDatabaseForPiiStatus400, ScanDatabaseForPiiStatus401, ScanDatabaseForPiiStatus403, ScanDatabaseForPiiStatus404, ScanDatabaseForPiiStatus429, ScanPiiResult, SchemaCatalog, SchemaCatalogColumn, SchemaCatalogRelation, SchemaCatalogRelationKindEnumKey, SelfHostEnrollment, SelfHostEnrollmentSecret, SlackEventPayload, StatementRules, SubmitCancellationFeedbackData, SubmitCancellationFeedbackPathOrgId, SubmitCancellationFeedbackRequestConfig, SubmitCancellationFeedbackResponse, SubmitCancellationFeedbackResponses, SubmitCancellationFeedbackStatus204, SubmitCancellationFeedbackStatus400, SubmitCancellationFeedbackStatus401, SubmitCancellationFeedbackStatus403, SubmitCancellationFeedbackStatus429, SupportCase, SupportCaseStatus, SupportCaseStatusKey, SupportMessage, SupportMessageSourceKey, TestConnectionResult, TestDatabaseConnectionPathDatabaseId, TestDatabaseConnectionPathProjectId, TestDatabaseConnectionRequestConfig, TestDatabaseConnectionResponse, TestDatabaseConnectionResponses, TestDatabaseConnectionStatus200, TestDatabaseConnectionStatus400, TestDatabaseConnectionStatus401, TestDatabaseConnectionStatus403, TestDatabaseConnectionStatus404, TestDatabaseConnectionStatus429, TestWebhookEndpointPathProjectId, TestWebhookEndpointPathWebhookId, TestWebhookEndpointRequestConfig, TestWebhookEndpointResponse, TestWebhookEndpointResponses, TestWebhookEndpointStatus202, TestWebhookEndpointStatus400, TestWebhookEndpointStatus401, TestWebhookEndpointStatus403, TestWebhookEndpointStatus404, UpdateAgentCredentialStatusData, UpdateAgentCredentialStatusPathAgentId, UpdateAgentCredentialStatusPathProjectId, UpdateAgentCredentialStatusRequest, UpdateAgentCredentialStatusRequestConfig, UpdateAgentCredentialStatusRequestStatusEnumKey, UpdateAgentCredentialStatusResponse, UpdateAgentCredentialStatusResponses, UpdateAgentCredentialStatusStatus200, UpdateAgentCredentialStatusStatus400, UpdateAgentCredentialStatusStatus401, UpdateAgentCredentialStatusStatus403, UpdateAgentCredentialStatusStatus404, UpdateAnomalyAlertData, UpdateAnomalyAlertPathAnomalyId, UpdateAnomalyAlertPathProjectId, UpdateAnomalyAlertRequest, UpdateAnomalyAlertRequestConfig, UpdateAnomalyAlertRequestStatusEnumKey, UpdateAnomalyAlertResponse, UpdateAnomalyAlertResponses, UpdateAnomalyAlertStatus200, UpdateAnomalyAlertStatus400, UpdateAnomalyAlertStatus401, UpdateAnomalyAlertStatus403, UpdateAnomalyAlertStatus404, UpdateCacheRuleData, UpdateCacheRulePathDatabaseId, UpdateCacheRulePathProjectId, UpdateCacheRulePathQueryHash, UpdateCacheRuleRequest, UpdateCacheRuleRequestConfig, UpdateCacheRuleResponse, UpdateCacheRuleResponses, UpdateCacheRuleStatus200, UpdateCacheRuleStatus400, UpdateCacheRuleStatus401, UpdateCacheRuleStatus403, UpdateCacheRuleStatus404, UpdateCacheRuleStatus429, UpdateDatabaseData, UpdateDatabasePathDatabaseId, UpdateDatabasePathProjectId, UpdateDatabaseRequest, UpdateDatabaseRequestConfig, UpdateDatabaseResponse, UpdateDatabaseResponses, UpdateDatabaseStatus200, UpdateDatabaseStatus400, UpdateDatabaseStatus401, UpdateDatabaseStatus403, UpdateDatabaseStatus404, UpdateDatabaseStatus429, UpdateOnboardingProgressData, UpdateOnboardingProgressPathOrgId, UpdateOnboardingProgressRequestConfig, UpdateOnboardingProgressResponse, UpdateOnboardingProgressResponses, UpdateOnboardingProgressStatus200, UpdateOnboardingProgressStatus400, UpdateOnboardingProgressStatus401, UpdateOnboardingProgressStatus403, UpdateOnboardingProgressStatus404, UpdateOnboardingProgressStatus429, UpdateOnboardingRequest, UpdateOnboardingRequestStepEnumKey, UpdatePolicyProfileData, UpdatePolicyProfilePathPolicyId, UpdatePolicyProfilePathProjectId, UpdatePolicyProfileRequestConfig, UpdatePolicyProfileResponse, UpdatePolicyProfileResponses, UpdatePolicyProfileStatus200, UpdatePolicyProfileStatus400, UpdatePolicyProfileStatus401, UpdatePolicyProfileStatus403, UpdatePolicyProfileStatus404, UpdatePolicyProfileStatus429, UpdateProjectData, UpdateProjectPathProjectId, UpdateProjectRequest, UpdateProjectRequestConfig, UpdateProjectResponse, UpdateProjectResponses, UpdateProjectStatus200, UpdateProjectStatus400, UpdateProjectStatus401, UpdateProjectStatus403, UpdateProjectStatus404, UpdateProjectStatus429, UpdateSpendLimitData, UpdateSpendLimitPathOrgId, UpdateSpendLimitRequest, UpdateSpendLimitRequestConfig, UpdateSpendLimitResponse, UpdateSpendLimitResponses, UpdateSpendLimitStatus200, UpdateSpendLimitStatus400, UpdateSpendLimitStatus401, UpdateSpendLimitStatus403, UpdateSpendLimitStatus429, UpdateSupportCaseData, UpdateSupportCasePathCaseId, UpdateSupportCasePathOrgId, UpdateSupportCaseRequest, UpdateSupportCaseRequestConfig, UpdateSupportCaseResponse, UpdateSupportCaseResponses, UpdateSupportCaseStatus200, UpdateSupportCaseStatus400, UpdateSupportCaseStatus401, UpdateSupportCaseStatus403, UpdateSupportCaseStatus404, UpdateWebhookEndpointData, UpdateWebhookEndpointPathProjectId, UpdateWebhookEndpointPathWebhookId, UpdateWebhookEndpointRequestConfig, UpdateWebhookEndpointResponse, UpdateWebhookEndpointResponses, UpdateWebhookEndpointStatus200, UpdateWebhookEndpointStatus400, UpdateWebhookEndpointStatus401, UpdateWebhookEndpointStatus403, UpdateWebhookEndpointStatus404, UsageResponse, VercelInstallationStatus, VercelResourceStatus, VercelResourceStatusStatusEnumKey, VerifyAuditChainPathProjectId, VerifyAuditChainQueryEnd, VerifyAuditChainQueryStart, VerifyAuditChainRequestConfig, VerifyAuditChainResponse, VerifyAuditChainResponses, VerifyAuditChainStatus200, VerifyAuditChainStatus400, VerifyAuditChainStatus401, VerifyAuditChainStatus403, VerifyAuditChainStatus404, VerifyAuditChainStatus429, VerifyCustomDomainPathDomainId, VerifyCustomDomainPathProjectId, VerifyCustomDomainRequestConfig, VerifyCustomDomainResponse, VerifyCustomDomainResponses, VerifyCustomDomainStatus200, VerifyCustomDomainStatus400, VerifyCustomDomainStatus401, VerifyCustomDomainStatus403, VerifyCustomDomainStatus404, VerifyCustomDomainStatus429, WebhookEndpoint, WebhookEndpointFormatEnumKey, WebhookEndpointInput, WebhookEndpointInputFormatEnumKey, WebhookTestResponse };
+export { ApiError, PgBeamClient, SSLMode, agentCredentialAuthMethodEnum, agentCredentialPrincipalTypeEnum, agentCredentialStatusEnum, anomalyAlertSeverityEnum, anomalyAlertStatusEnum, approvalRequestStatusEnum, auditDecision, auditSource, cacheRuleEntryQueryTypeEnum, cacheRuleEntryRecommendationEnum, createAgentCredentialRequestPrincipalTypeEnum, createProjectRequestCloudEnum, dataResidency, databaseBranchStatusEnum, databaseRole, dryEvalMaskedColumnKindEnum, dryEvalResultVerdictEnum, extractMessage, healthResponseStatusEnum, honeytokenActionEnum, honeytokenInputActionEnum, maskingRuleKindEnum, mcpRequestJsonrpcEnum, mcpRequestMethodEnum, mcpResponseJsonrpcEnum, migrationFindingSeverityEnum, organizationPlanBillingProviderEnum, organizationPlanPlanEnum, organizationPlanSubscriptionStatusEnum, piiSuggestionMaskKindEnum, piiSuggestionPiiTypeEnum, policyProfileAccessModeEnum, policyProfileApprovalModeEnum, policyProfileInputAccessModeEnum, policyProfileInputApprovalModeEnum, policyProfileInputMigrationSafetyEnum, policyProfileInputWriteModeEnum, policyProfileMigrationSafetyEnum, policyProfileWriteModeEnum, policyReplayItemChangeEnum, poolMode, projectCloudEnum, projectStatus, regionProviderEnum, regionStatusEnum, schemaCatalogRelationKindEnum, supportCaseStatus, supportMessageSource, updateAgentCredentialStatusRequestStatusEnum, updateAnomalyAlertRequestStatusEnum, updateOnboardingRequestStepEnum, vercelResourceStatusStatusEnum, webhookEndpointFormatEnum, webhookEndpointInputFormatEnum };
+export type { AccountExport, AgentCredential, AgentCredentialAuthMethodEnumKey, AgentCredentialPrincipalTypeEnumKey, AgentCredentialSecrets, AgentCredentialStatusEnumKey, AnomalyAlert, AnomalyAlertSeverityEnumKey, AnomalyAlertStatusEnumKey, ApiClient, ApprovalDecisionRequest, ApprovalRequest, ApprovalRequestStatusEnumKey, ApproveApprovalRequestData, ApproveApprovalRequestPathApprovalId, ApproveApprovalRequestPathProjectId, ApproveApprovalRequestRequestConfig, ApproveApprovalRequestResponse, ApproveApprovalRequestResponses, ApproveApprovalRequestStatus200, ApproveApprovalRequestStatus400, ApproveApprovalRequestStatus401, ApproveApprovalRequestStatus403, ApproveApprovalRequestStatus404, ApproveApprovalRequestStatus409, AuditChainVerification, AuditDecision, AuditDecisionKey, AuditLogEntry, AuditSource, AuditSourceKey, CacheConfig, CacheRuleEntry, CacheRuleEntryQueryTypeEnumKey, CacheRuleEntryRecommendationEnumKey, CacheSummary, CancellationFeedbackRequest, CidrEntry, CreateAgentCredentialData, CreateAgentCredentialPathProjectId, CreateAgentCredentialRequest, CreateAgentCredentialRequestConfig, CreateAgentCredentialRequestPrincipalTypeEnumKey, CreateAgentCredentialResponse, CreateAgentCredentialResponses, CreateAgentCredentialStatus201, CreateAgentCredentialStatus400, CreateAgentCredentialStatus401, CreateAgentCredentialStatus403, CreateAgentCredentialStatus404, CreateAgentCredentialStatus409, CreateAgentCredentialStatus429, CreateCustomDomainData, CreateCustomDomainPathProjectId, CreateCustomDomainRequest, CreateCustomDomainRequestConfig, CreateCustomDomainResponse, CreateCustomDomainResponses, CreateCustomDomainStatus201, CreateCustomDomainStatus400, CreateCustomDomainStatus401, CreateCustomDomainStatus403, CreateCustomDomainStatus404, CreateCustomDomainStatus409, CreateCustomDomainStatus429, CreateDatabaseData, CreateDatabasePathProjectId, CreateDatabaseRequest, CreateDatabaseRequestConfig, CreateDatabaseResponse, CreateDatabaseResponses, CreateDatabaseStatus201, CreateDatabaseStatus400, CreateDatabaseStatus401, CreateDatabaseStatus403, CreateDatabaseStatus404, CreateDatabaseStatus429, CreateHoneytokenData, CreateHoneytokenPathProjectId, CreateHoneytokenRequestConfig, CreateHoneytokenResponse, CreateHoneytokenResponses, CreateHoneytokenStatus201, CreateHoneytokenStatus400, CreateHoneytokenStatus401, CreateHoneytokenStatus403, CreateHoneytokenStatus404, CreateHoneytokenStatus429, CreatePolicyProfileData, CreatePolicyProfilePathProjectId, CreatePolicyProfileRequestConfig, CreatePolicyProfileResponse, CreatePolicyProfileResponses, CreatePolicyProfileStatus201, CreatePolicyProfileStatus400, CreatePolicyProfileStatus401, CreatePolicyProfileStatus403, CreatePolicyProfileStatus404, CreatePolicyProfileStatus409, CreatePolicyProfileStatus429, CreateProjectData, CreateProjectRequest, CreateProjectRequestCloudEnumKey, CreateProjectRequestConfig, CreateProjectResponse, CreateProjectResponses, CreateProjectStatus201, CreateProjectStatus400, CreateProjectStatus401, CreateProjectStatus403, CreateProjectStatus409, CreateProjectStatus429, CreateReplicaData, CreateReplicaPathDatabaseId, CreateReplicaRequest, CreateReplicaRequestConfig, CreateReplicaResponse, CreateReplicaResponses, CreateReplicaStatus201, CreateReplicaStatus400, CreateReplicaStatus401, CreateReplicaStatus403, CreateReplicaStatus404, CreateReplicaStatus429, CreateSelfHostEnrollmentData, CreateSelfHostEnrollmentPathOrgId, CreateSelfHostEnrollmentRequest, CreateSelfHostEnrollmentRequestConfig, CreateSelfHostEnrollmentResponse, CreateSelfHostEnrollmentResponses, CreateSelfHostEnrollmentStatus201, CreateSelfHostEnrollmentStatus400, CreateSelfHostEnrollmentStatus401, CreateSelfHostEnrollmentStatus403, CreateSelfHostEnrollmentStatus429, CreateSupportCaseData, CreateSupportCasePathOrgId, CreateSupportCaseRequest, CreateSupportCaseRequestConfig, CreateSupportCaseResponse, CreateSupportCaseResponses, CreateSupportCaseStatus201, CreateSupportCaseStatus400, CreateSupportCaseStatus401, CreateSupportCaseStatus403, CreateSupportMessageData, CreateSupportMessagePathCaseId, CreateSupportMessagePathOrgId, CreateSupportMessageRequest, CreateSupportMessageRequestConfig, CreateSupportMessageResponse, CreateSupportMessageResponses, CreateSupportMessageStatus201, CreateSupportMessageStatus400, CreateSupportMessageStatus401, CreateSupportMessageStatus403, CreateSupportMessageStatus404, CreateWebhookEndpointData, CreateWebhookEndpointPathProjectId, CreateWebhookEndpointRequestConfig, CreateWebhookEndpointResponse, CreateWebhookEndpointResponses, CreateWebhookEndpointStatus201, CreateWebhookEndpointStatus400, CreateWebhookEndpointStatus401, CreateWebhookEndpointStatus403, CreateWebhookEndpointStatus404, CreateWebhookEndpointStatus429, CustomDomain, DailyUsage, DataResidencyKey, Database, DatabaseBranch, DatabaseBranchStatusEnumKey, DatabaseRoleKey, DeleteCustomDomainPathDomainId, DeleteCustomDomainPathProjectId, DeleteCustomDomainRequestConfig, DeleteCustomDomainResponse, DeleteCustomDomainResponses, DeleteCustomDomainStatus204, DeleteCustomDomainStatus400, DeleteCustomDomainStatus401, DeleteCustomDomainStatus403, DeleteCustomDomainStatus404, DeleteCustomDomainStatus429, DeleteDatabasePathDatabaseId, DeleteDatabasePathProjectId, DeleteDatabaseRequestConfig, DeleteDatabaseResponse, DeleteDatabaseResponses, DeleteDatabaseStatus204, DeleteDatabaseStatus400, DeleteDatabaseStatus401, DeleteDatabaseStatus403, DeleteDatabaseStatus404, DeleteDatabaseStatus429, DeleteHoneytokenPathHoneytokenId, DeleteHoneytokenPathProjectId, DeleteHoneytokenRequestConfig, DeleteHoneytokenResponse, DeleteHoneytokenResponses, DeleteHoneytokenStatus204, DeleteHoneytokenStatus400, DeleteHoneytokenStatus401, DeleteHoneytokenStatus403, DeleteHoneytokenStatus404, DeletePolicyProfilePathPolicyId, DeletePolicyProfilePathProjectId, DeletePolicyProfileRequestConfig, DeletePolicyProfileResponse, DeletePolicyProfileResponses, DeletePolicyProfileStatus204, DeletePolicyProfileStatus400, DeletePolicyProfileStatus401, DeletePolicyProfileStatus403, DeletePolicyProfileStatus404, DeletePolicyProfileStatus409, DeleteProjectPathProjectId, DeleteProjectRequestConfig, DeleteProjectResponse, DeleteProjectResponses, DeleteProjectStatus204, DeleteProjectStatus400, DeleteProjectStatus401, DeleteProjectStatus403, DeleteProjectStatus404, DeleteProjectStatus429, DeleteReplicaPathDatabaseId, DeleteReplicaPathReplicaId, DeleteReplicaRequestConfig, DeleteReplicaResponse, DeleteReplicaResponses, DeleteReplicaStatus204, DeleteReplicaStatus400, DeleteReplicaStatus401, DeleteReplicaStatus403, DeleteReplicaStatus404, DeleteReplicaStatus429, DeleteWebhookEndpointPathProjectId, DeleteWebhookEndpointPathWebhookId, DeleteWebhookEndpointRequestConfig, DeleteWebhookEndpointResponse, DeleteWebhookEndpointResponses, DeleteWebhookEndpointStatus204, DeleteWebhookEndpointStatus400, DeleteWebhookEndpointStatus401, DeleteWebhookEndpointStatus403, DeleteWebhookEndpointStatus404, DiscardDatabaseBranchPathBranchId, DiscardDatabaseBranchPathProjectId, DiscardDatabaseBranchRequestConfig, DiscardDatabaseBranchResponse, DiscardDatabaseBranchResponses, DiscardDatabaseBranchStatus204, DiscardDatabaseBranchStatus400, DiscardDatabaseBranchStatus401, DiscardDatabaseBranchStatus403, DiscardDatabaseBranchStatus404, DnsInstructions, DryEvalInput, DryEvalMaskedColumn, DryEvalMaskedColumnKindEnumKey, DryEvalPolicyData, DryEvalPolicyPathProjectId, DryEvalPolicyRequestConfig, DryEvalPolicyResponse, DryEvalPolicyResponses, DryEvalPolicyStatus200, DryEvalPolicyStatus400, DryEvalPolicyStatus401, DryEvalPolicyStatus403, DryEvalPolicyStatus404, DryEvalPolicyStatus429, DryEvalResult, DryEvalResultVerdictEnumKey, Error$1 as Error, ExportAccountDataRequestConfig, ExportAccountDataResponse, ExportAccountDataResponses, ExportAccountDataStatus200, ExportAccountDataStatus401, ExportAccountDataStatus404, ExportAccountDataStatus429, ExportAuditLogsPathProjectId, ExportAuditLogsQueryCredentialId, ExportAuditLogsQueryDecision, ExportAuditLogsQueryEnd, ExportAuditLogsQueryEvent, ExportAuditLogsQuerySource, ExportAuditLogsQueryStart, ExportAuditLogsRequestConfig, ExportAuditLogsResponse, ExportAuditLogsResponses, ExportAuditLogsStatus200, ExportAuditLogsStatus400, ExportAuditLogsStatus401, ExportAuditLogsStatus403, ExportAuditLogsStatus404, ExportAuditLogsStatus429, GetAgentCredentialPathAgentId, GetAgentCredentialPathProjectId, GetAgentCredentialRequestConfig, GetAgentCredentialResponse, GetAgentCredentialResponses, GetAgentCredentialStatus200, GetAgentCredentialStatus400, GetAgentCredentialStatus401, GetAgentCredentialStatus403, GetAgentCredentialStatus404, GetDatabasePathDatabaseId, GetDatabasePathProjectId, GetDatabaseRequestConfig, GetDatabaseResponse, GetDatabaseResponses, GetDatabaseStatus200, GetDatabaseStatus400, GetDatabaseStatus401, GetDatabaseStatus403, GetDatabaseStatus404, GetDatabaseStatus429, GetHealthRequestConfig, GetHealthResponse, GetHealthResponses, GetHealthStatus200, GetHealthStatus429, GetHoneytokenPathHoneytokenId, GetHoneytokenPathProjectId, GetHoneytokenRequestConfig, GetHoneytokenResponse, GetHoneytokenResponses, GetHoneytokenStatus200, GetHoneytokenStatus400, GetHoneytokenStatus401, GetHoneytokenStatus403, GetHoneytokenStatus404, GetOnboardingProgressPathOrgId, GetOnboardingProgressRequestConfig, GetOnboardingProgressResponse, GetOnboardingProgressResponses, GetOnboardingProgressStatus200, GetOnboardingProgressStatus400, GetOnboardingProgressStatus401, GetOnboardingProgressStatus403, GetOnboardingProgressStatus404, GetOnboardingProgressStatus429, GetOrganizationPlanPathOrgId, GetOrganizationPlanRequestConfig, GetOrganizationPlanResponse, GetOrganizationPlanResponses, GetOrganizationPlanStatus200, GetOrganizationPlanStatus400, GetOrganizationPlanStatus401, GetOrganizationPlanStatus403, GetOrganizationPlanStatus429, GetOrganizationUsagePathOrgId, GetOrganizationUsageQueryEndDate, GetOrganizationUsageQueryStartDate, GetOrganizationUsageRequestConfig, GetOrganizationUsageResponse, GetOrganizationUsageResponses, GetOrganizationUsageStatus200, GetOrganizationUsageStatus400, GetOrganizationUsageStatus401, GetOrganizationUsageStatus403, GetOrganizationUsageStatus429, GetPolicyProfilePathPolicyId, GetPolicyProfilePathProjectId, GetPolicyProfileRequestConfig, GetPolicyProfileResponse, GetPolicyProfileResponses, GetPolicyProfileStatus200, GetPolicyProfileStatus400, GetPolicyProfileStatus401, GetPolicyProfileStatus403, GetPolicyProfileStatus404, GetProjectInsightsPathProjectId, GetProjectInsightsQueryLimit, GetProjectInsightsQueryRange, GetProjectInsightsRequestConfig, GetProjectInsightsResponse, GetProjectInsightsResponses, GetProjectInsightsStatus200, GetProjectInsightsStatus400, GetProjectInsightsStatus401, GetProjectInsightsStatus404, GetProjectInsightsStatus429, GetProjectMetricsPathProjectId, GetProjectMetricsQueryLimit, GetProjectMetricsQueryRegion, GetProjectMetricsRequestConfig, GetProjectMetricsResponse, GetProjectMetricsResponses, GetProjectMetricsStatus200, GetProjectMetricsStatus400, GetProjectMetricsStatus401, GetProjectMetricsStatus404, GetProjectMetricsStatus429, GetProjectPathProjectId, GetProjectRequestConfig, GetProjectResponse, GetProjectResponses, GetProjectStatus200, GetProjectStatus400, GetProjectStatus401, GetProjectStatus403, GetProjectStatus404, GetProjectStatus429, GetProjectUsagePathProjectId, GetProjectUsageQueryEndDate, GetProjectUsageQueryStartDate, GetProjectUsageRequestConfig, GetProjectUsageResponse, GetProjectUsageResponses, GetProjectUsageStatus200, GetProjectUsageStatus400, GetProjectUsageStatus401, GetProjectUsageStatus404, GetProjectUsageStatus429, GetSchemaCatalogPathDatabaseId, GetSchemaCatalogPathProjectId, GetSchemaCatalogRequestConfig, GetSchemaCatalogResponse, GetSchemaCatalogResponses, GetSchemaCatalogStatus200, GetSchemaCatalogStatus400, GetSchemaCatalogStatus401, GetSchemaCatalogStatus403, GetSchemaCatalogStatus404, GetSchemaCatalogStatus429, GetSupportCasePathCaseId, GetSupportCasePathOrgId, GetSupportCaseRequestConfig, GetSupportCaseResponse, GetSupportCaseResponses, GetSupportCaseStatus200, GetSupportCaseStatus400, GetSupportCaseStatus401, GetSupportCaseStatus403, GetSupportCaseStatus404, GetVercelInstallationPathOrgId, GetVercelInstallationRequestConfig, GetVercelInstallationResponse, GetVercelInstallationResponses, GetVercelInstallationStatus200, GetVercelInstallationStatus400, GetVercelInstallationStatus401, GetVercelInstallationStatus403, GetVercelInstallationStatus404, GetVercelInstallationStatus429, GetWebhookEndpointPathProjectId, GetWebhookEndpointPathWebhookId, GetWebhookEndpointRequestConfig, GetWebhookEndpointResponse, GetWebhookEndpointResponses, GetWebhookEndpointStatus200, GetWebhookEndpointStatus400, GetWebhookEndpointStatus401, GetWebhookEndpointStatus403, GetWebhookEndpointStatus404, HandleSlackSupportEventData, HandleSlackSupportEventRequestConfig, HandleSlackSupportEventResponse, HandleSlackSupportEventResponses, HandleSlackSupportEventStatus200, HandleSlackSupportEventStatus400, HandleSlackSupportEventStatus401, HandleSlackSupportEventStatus404, HealthResponse, HealthResponseStatusEnumKey, Honeytoken, HoneytokenActionEnumKey, HoneytokenInput, HoneytokenInputActionEnumKey, LatencySummary, LintMigrationData, LintMigrationPathProjectId, LintMigrationRequestConfig, LintMigrationResponse, LintMigrationResponses, LintMigrationStatus200, LintMigrationStatus400, LintMigrationStatus401, LintMigrationStatus403, LintMigrationStatus404, ListAgentCredentialsPathProjectId, ListAgentCredentialsQueryPageSize, ListAgentCredentialsQueryPageToken, ListAgentCredentialsRequestConfig, ListAgentCredentialsResponse, ListAgentCredentialsResponses, ListAgentCredentialsStatus200, ListAgentCredentialsStatus400, ListAgentCredentialsStatus401, ListAgentCredentialsStatus403, ListAgentCredentialsStatus404, ListAgentCredentialsStatus429, ListAnomalyAlertsPathProjectId, ListAnomalyAlertsQueryPageSize, ListAnomalyAlertsQueryPageToken, ListAnomalyAlertsQueryStatus, ListAnomalyAlertsRequestConfig, ListAnomalyAlertsResponse, ListAnomalyAlertsResponses, ListAnomalyAlertsStatus200, ListAnomalyAlertsStatus400, ListAnomalyAlertsStatus401, ListAnomalyAlertsStatus403, ListAnomalyAlertsStatus404, ListAnomalyAlertsStatus429, ListApprovalRequestsPathProjectId, ListApprovalRequestsQueryPageSize, ListApprovalRequestsQueryPageToken, ListApprovalRequestsQueryStatus, ListApprovalRequestsRequestConfig, ListApprovalRequestsResponse, ListApprovalRequestsResponses, ListApprovalRequestsStatus200, ListApprovalRequestsStatus400, ListApprovalRequestsStatus401, ListApprovalRequestsStatus403, ListApprovalRequestsStatus404, ListApprovalRequestsStatus429, ListAuditLogsPathProjectId, ListAuditLogsQueryBefore, ListAuditLogsQueryCredentialId, ListAuditLogsQueryDecision, ListAuditLogsQueryEnd, ListAuditLogsQueryEvent, ListAuditLogsQueryPageSize, ListAuditLogsQuerySource, ListAuditLogsQueryStart, ListAuditLogsRequestConfig, ListAuditLogsResponse, ListAuditLogsResponses, ListAuditLogsStatus200, ListAuditLogsStatus400, ListAuditLogsStatus401, ListAuditLogsStatus403, ListAuditLogsStatus404, ListAuditLogsStatus429, ListCacheRulesPathDatabaseId, ListCacheRulesPathProjectId, ListCacheRulesQueryPageSize, ListCacheRulesQueryPageToken, ListCacheRulesRequestConfig, ListCacheRulesResponse, ListCacheRulesResponses, ListCacheRulesStatus200, ListCacheRulesStatus400, ListCacheRulesStatus401, ListCacheRulesStatus403, ListCacheRulesStatus404, ListCacheRulesStatus429, ListCustomDomainsPathProjectId, ListCustomDomainsQueryPageSize, ListCustomDomainsQueryPageToken, ListCustomDomainsRequestConfig, ListCustomDomainsResponse, ListCustomDomainsResponses, ListCustomDomainsStatus200, ListCustomDomainsStatus400, ListCustomDomainsStatus401, ListCustomDomainsStatus403, ListCustomDomainsStatus404, ListCustomDomainsStatus429, ListDatabaseBranchesPathProjectId, ListDatabaseBranchesQueryPageSize, ListDatabaseBranchesQueryPageToken, ListDatabaseBranchesQueryStatus, ListDatabaseBranchesRequestConfig, ListDatabaseBranchesResponse, ListDatabaseBranchesResponses, ListDatabaseBranchesStatus200, ListDatabaseBranchesStatus400, ListDatabaseBranchesStatus401, ListDatabaseBranchesStatus403, ListDatabaseBranchesStatus404, ListDatabaseBranchesStatus429, ListDatabasesPathProjectId, ListDatabasesQueryPageSize, ListDatabasesQueryPageToken, ListDatabasesRequestConfig, ListDatabasesResponse, ListDatabasesResponses, ListDatabasesStatus200, ListDatabasesStatus400, ListDatabasesStatus401, ListDatabasesStatus403, ListDatabasesStatus404, ListDatabasesStatus429, ListHoneytokensPathProjectId, ListHoneytokensQueryPageSize, ListHoneytokensQueryPageToken, ListHoneytokensRequestConfig, ListHoneytokensResponse, ListHoneytokensResponses, ListHoneytokensStatus200, ListHoneytokensStatus400, ListHoneytokensStatus401, ListHoneytokensStatus403, ListHoneytokensStatus404, ListHoneytokensStatus429, ListOrganizationsRequestConfig, ListOrganizationsResponse, ListOrganizationsResponses, ListOrganizationsStatus200, ListOrganizationsStatus401, ListOrganizationsStatus429, ListPlansRequestConfig, ListPlansResponse, ListPlansResponses, ListPlansStatus200, ListPlansStatus401, ListPlansStatus429, ListPolicyProfilesPathProjectId, ListPolicyProfilesQueryPageSize, ListPolicyProfilesQueryPageToken, ListPolicyProfilesRequestConfig, ListPolicyProfilesResponse, ListPolicyProfilesResponses, ListPolicyProfilesStatus200, ListPolicyProfilesStatus400, ListPolicyProfilesStatus401, ListPolicyProfilesStatus403, ListPolicyProfilesStatus404, ListPolicyProfilesStatus429, ListProjectsQueryOrgId, ListProjectsQueryPageSize, ListProjectsQueryPageToken, ListProjectsQuerySortBy, ListProjectsRequestConfig, ListProjectsResponse, ListProjectsResponses, ListProjectsStatus200, ListProjectsStatus400, ListProjectsStatus401, ListProjectsStatus403, ListProjectsStatus429, ListRegionsRequestConfig, ListRegionsResponse, ListRegionsResponses, ListRegionsStatus200, ListRegionsStatus401, ListRegionsStatus429, ListReplicasPathDatabaseId, ListReplicasRequestConfig, ListReplicasResponse, ListReplicasResponses, ListReplicasStatus200, ListReplicasStatus400, ListReplicasStatus401, ListReplicasStatus403, ListReplicasStatus404, ListReplicasStatus429, ListSelfHostEnrollmentsPathOrgId, ListSelfHostEnrollmentsRequestConfig, ListSelfHostEnrollmentsResponse, ListSelfHostEnrollmentsResponses, ListSelfHostEnrollmentsStatus200, ListSelfHostEnrollmentsStatus400, ListSelfHostEnrollmentsStatus401, ListSelfHostEnrollmentsStatus403, ListSupportCasesPathOrgId, ListSupportCasesQueryPage, ListSupportCasesQueryPageSize, ListSupportCasesQuerySearch, ListSupportCasesQueryStatus, ListSupportCasesRequestConfig, ListSupportCasesResponse, ListSupportCasesResponses, ListSupportCasesStatus200, ListSupportCasesStatus400, ListSupportCasesStatus401, ListSupportCasesStatus403, ListWebhookEndpointsPathProjectId, ListWebhookEndpointsQueryPageSize, ListWebhookEndpointsQueryPageToken, ListWebhookEndpointsRequestConfig, ListWebhookEndpointsResponse, ListWebhookEndpointsResponses, ListWebhookEndpointsStatus200, ListWebhookEndpointsStatus400, ListWebhookEndpointsStatus401, ListWebhookEndpointsStatus403, ListWebhookEndpointsStatus404, ListWebhookEndpointsStatus429, MaskingRule, MaskingRuleKindEnumKey, McpRequest, McpRequestJsonrpcEnumKey, McpRequestMethodEnumKey, McpResponse, McpResponseJsonrpcEnumKey, McpTransportData, McpTransportRequestConfig, McpTransportResponse, McpTransportResponses, McpTransportStatus200, McpTransportStatus401, McpTransportStatus429, MetricsSnapshot, MigrationFinding, MigrationFindingSeverityEnumKey, MigrationLintRequest, MigrationLintResponse, OnboardingProgress, OrganizationPlan, OrganizationPlanBillingProviderEnumKey, OrganizationPlanPlanEnumKey, OrganizationPlanSubscriptionStatusEnumKey, OrganizationSummary, PgBeamClientOptions, PiiSuggestion, PiiSuggestionMaskKindEnumKey, PiiSuggestionPiiTypeEnumKey, PlanInfo, PlanLimits, PolicyProfile, PolicyProfileAccessModeEnumKey, PolicyProfileApprovalModeEnumKey, PolicyProfileInput, PolicyProfileInputAccessModeEnumKey, PolicyProfileInputApprovalModeEnumKey, PolicyProfileInputMigrationSafetyEnumKey, PolicyProfileInputWriteModeEnumKey, PolicyProfileMigrationSafetyEnumKey, PolicyProfileWriteModeEnumKey, PolicyRecommendation, PolicyRecommendationInput, PolicyReplayInput, PolicyReplayItem, PolicyReplayItemChangeEnumKey, PolicyReplayResult, PolicyReplaySummary, PoolConfig, PoolModeKey, Project, ProjectCloudEnumKey, ProjectDailyUsage, ProjectInsights, ProjectMetricsResponse, ProjectStatusKey, ProjectUsageResponse, QueryInsight, RecommendAgentPolicyData, RecommendAgentPolicyPathAgentId, RecommendAgentPolicyPathProjectId, RecommendAgentPolicyRequestConfig, RecommendAgentPolicyResponse, RecommendAgentPolicyResponses, RecommendAgentPolicyStatus200, RecommendAgentPolicyStatus400, RecommendAgentPolicyStatus401, RecommendAgentPolicyStatus403, RecommendAgentPolicyStatus404, RecommendAgentPolicyStatus429, Region, RegionProviderEnumKey, RegionStatusEnumKey, RejectApprovalRequestData, RejectApprovalRequestPathApprovalId, RejectApprovalRequestPathProjectId, RejectApprovalRequestRequestConfig, RejectApprovalRequestResponse, RejectApprovalRequestResponses, RejectApprovalRequestStatus200, RejectApprovalRequestStatus400, RejectApprovalRequestStatus401, RejectApprovalRequestStatus403, RejectApprovalRequestStatus404, RejectApprovalRequestStatus409, ReplayPolicyData, ReplayPolicyPathProjectId, ReplayPolicyRequestConfig, ReplayPolicyResponse, ReplayPolicyResponses, ReplayPolicyStatus200, ReplayPolicyStatus400, ReplayPolicyStatus401, ReplayPolicyStatus403, ReplayPolicyStatus404, ReplayPolicyStatus429, Replica, RetryConfig, RevokeAgentCredentialPathAgentId, RevokeAgentCredentialPathProjectId, RevokeAgentCredentialRequestConfig, RevokeAgentCredentialResponse, RevokeAgentCredentialResponses, RevokeAgentCredentialStatus204, RevokeAgentCredentialStatus400, RevokeAgentCredentialStatus401, RevokeAgentCredentialStatus403, RevokeAgentCredentialStatus404, RevokeSelfHostEnrollmentPathEnrollmentId, RevokeSelfHostEnrollmentPathOrgId, RevokeSelfHostEnrollmentRequestConfig, RevokeSelfHostEnrollmentResponse, RevokeSelfHostEnrollmentResponses, RevokeSelfHostEnrollmentStatus204, RevokeSelfHostEnrollmentStatus400, RevokeSelfHostEnrollmentStatus401, RevokeSelfHostEnrollmentStatus403, RevokeSelfHostEnrollmentStatus404, RotateAgentCredentialPathAgentId, RotateAgentCredentialPathProjectId, RotateAgentCredentialRequestConfig, RotateAgentCredentialResponse, RotateAgentCredentialResponses, RotateAgentCredentialStatus200, RotateAgentCredentialStatus400, RotateAgentCredentialStatus401, RotateAgentCredentialStatus403, RotateAgentCredentialStatus404, RotateAgentCredentialStatus409, RotateSelfHostEnrollmentPathEnrollmentId, RotateSelfHostEnrollmentPathOrgId, RotateSelfHostEnrollmentRequestConfig, RotateSelfHostEnrollmentResponse, RotateSelfHostEnrollmentResponses, RotateSelfHostEnrollmentStatus200, RotateSelfHostEnrollmentStatus400, RotateSelfHostEnrollmentStatus401, RotateSelfHostEnrollmentStatus403, RotateSelfHostEnrollmentStatus404, RotateSelfHostEnrollmentStatus409, RowFilter, SSLModeKey, ScanDatabaseForPiiPathDatabaseId, ScanDatabaseForPiiPathProjectId, ScanDatabaseForPiiRequestConfig, ScanDatabaseForPiiResponse, ScanDatabaseForPiiResponses, ScanDatabaseForPiiStatus200, ScanDatabaseForPiiStatus400, ScanDatabaseForPiiStatus401, ScanDatabaseForPiiStatus403, ScanDatabaseForPiiStatus404, ScanDatabaseForPiiStatus429, ScanPiiResult, SchemaCatalog, SchemaCatalogColumn, SchemaCatalogRelation, SchemaCatalogRelationKindEnumKey, SelfHostEnrollment, SelfHostEnrollmentSecret, SlackEventPayload, StatementRules, SubmitCancellationFeedbackData, SubmitCancellationFeedbackPathOrgId, SubmitCancellationFeedbackRequestConfig, SubmitCancellationFeedbackResponse, SubmitCancellationFeedbackResponses, SubmitCancellationFeedbackStatus204, SubmitCancellationFeedbackStatus400, SubmitCancellationFeedbackStatus401, SubmitCancellationFeedbackStatus403, SubmitCancellationFeedbackStatus429, SupportCase, SupportCaseStatus, SupportCaseStatusKey, SupportMessage, SupportMessageSourceKey, TestConnectionResult, TestDatabaseConnectionPathDatabaseId, TestDatabaseConnectionPathProjectId, TestDatabaseConnectionRequestConfig, TestDatabaseConnectionResponse, TestDatabaseConnectionResponses, TestDatabaseConnectionStatus200, TestDatabaseConnectionStatus400, TestDatabaseConnectionStatus401, TestDatabaseConnectionStatus403, TestDatabaseConnectionStatus404, TestDatabaseConnectionStatus429, TestWebhookEndpointPathProjectId, TestWebhookEndpointPathWebhookId, TestWebhookEndpointRequestConfig, TestWebhookEndpointResponse, TestWebhookEndpointResponses, TestWebhookEndpointStatus202, TestWebhookEndpointStatus400, TestWebhookEndpointStatus401, TestWebhookEndpointStatus403, TestWebhookEndpointStatus404, UpdateAgentCredentialStatusData, UpdateAgentCredentialStatusPathAgentId, UpdateAgentCredentialStatusPathProjectId, UpdateAgentCredentialStatusRequest, UpdateAgentCredentialStatusRequestConfig, UpdateAgentCredentialStatusRequestStatusEnumKey, UpdateAgentCredentialStatusResponse, UpdateAgentCredentialStatusResponses, UpdateAgentCredentialStatusStatus200, UpdateAgentCredentialStatusStatus400, UpdateAgentCredentialStatusStatus401, UpdateAgentCredentialStatusStatus403, UpdateAgentCredentialStatusStatus404, UpdateAnomalyAlertData, UpdateAnomalyAlertPathAnomalyId, UpdateAnomalyAlertPathProjectId, UpdateAnomalyAlertRequest, UpdateAnomalyAlertRequestConfig, UpdateAnomalyAlertRequestStatusEnumKey, UpdateAnomalyAlertResponse, UpdateAnomalyAlertResponses, UpdateAnomalyAlertStatus200, UpdateAnomalyAlertStatus400, UpdateAnomalyAlertStatus401, UpdateAnomalyAlertStatus403, UpdateAnomalyAlertStatus404, UpdateCacheRuleData, UpdateCacheRulePathDatabaseId, UpdateCacheRulePathProjectId, UpdateCacheRulePathQueryHash, UpdateCacheRuleRequest, UpdateCacheRuleRequestConfig, UpdateCacheRuleResponse, UpdateCacheRuleResponses, UpdateCacheRuleStatus200, UpdateCacheRuleStatus400, UpdateCacheRuleStatus401, UpdateCacheRuleStatus403, UpdateCacheRuleStatus404, UpdateCacheRuleStatus429, UpdateDatabaseData, UpdateDatabasePathDatabaseId, UpdateDatabasePathProjectId, UpdateDatabaseRequest, UpdateDatabaseRequestConfig, UpdateDatabaseResponse, UpdateDatabaseResponses, UpdateDatabaseStatus200, UpdateDatabaseStatus400, UpdateDatabaseStatus401, UpdateDatabaseStatus403, UpdateDatabaseStatus404, UpdateDatabaseStatus429, UpdateHoneytokenData, UpdateHoneytokenPathHoneytokenId, UpdateHoneytokenPathProjectId, UpdateHoneytokenRequestConfig, UpdateHoneytokenResponse, UpdateHoneytokenResponses, UpdateHoneytokenStatus200, UpdateHoneytokenStatus400, UpdateHoneytokenStatus401, UpdateHoneytokenStatus403, UpdateHoneytokenStatus404, UpdateOnboardingProgressData, UpdateOnboardingProgressPathOrgId, UpdateOnboardingProgressRequestConfig, UpdateOnboardingProgressResponse, UpdateOnboardingProgressResponses, UpdateOnboardingProgressStatus200, UpdateOnboardingProgressStatus400, UpdateOnboardingProgressStatus401, UpdateOnboardingProgressStatus403, UpdateOnboardingProgressStatus404, UpdateOnboardingProgressStatus429, UpdateOnboardingRequest, UpdateOnboardingRequestStepEnumKey, UpdatePolicyProfileData, UpdatePolicyProfilePathPolicyId, UpdatePolicyProfilePathProjectId, UpdatePolicyProfileRequestConfig, UpdatePolicyProfileResponse, UpdatePolicyProfileResponses, UpdatePolicyProfileStatus200, UpdatePolicyProfileStatus400, UpdatePolicyProfileStatus401, UpdatePolicyProfileStatus403, UpdatePolicyProfileStatus404, UpdatePolicyProfileStatus429, UpdateProjectData, UpdateProjectPathProjectId, UpdateProjectRequest, UpdateProjectRequestConfig, UpdateProjectResponse, UpdateProjectResponses, UpdateProjectStatus200, UpdateProjectStatus400, UpdateProjectStatus401, UpdateProjectStatus403, UpdateProjectStatus404, UpdateProjectStatus429, UpdateSpendLimitData, UpdateSpendLimitPathOrgId, UpdateSpendLimitRequest, UpdateSpendLimitRequestConfig, UpdateSpendLimitResponse, UpdateSpendLimitResponses, UpdateSpendLimitStatus200, UpdateSpendLimitStatus400, UpdateSpendLimitStatus401, UpdateSpendLimitStatus403, UpdateSpendLimitStatus429, UpdateSupportCaseData, UpdateSupportCasePathCaseId, UpdateSupportCasePathOrgId, UpdateSupportCaseRequest, UpdateSupportCaseRequestConfig, UpdateSupportCaseResponse, UpdateSupportCaseResponses, UpdateSupportCaseStatus200, UpdateSupportCaseStatus400, UpdateSupportCaseStatus401, UpdateSupportCaseStatus403, UpdateSupportCaseStatus404, UpdateWebhookEndpointData, UpdateWebhookEndpointPathProjectId, UpdateWebhookEndpointPathWebhookId, UpdateWebhookEndpointRequestConfig, UpdateWebhookEndpointResponse, UpdateWebhookEndpointResponses, UpdateWebhookEndpointStatus200, UpdateWebhookEndpointStatus400, UpdateWebhookEndpointStatus401, UpdateWebhookEndpointStatus403, UpdateWebhookEndpointStatus404, UsageResponse, VercelInstallationStatus, VercelResourceStatus, VercelResourceStatusStatusEnumKey, VerifyAuditChainPathProjectId, VerifyAuditChainQueryEnd, VerifyAuditChainQueryStart, VerifyAuditChainRequestConfig, VerifyAuditChainResponse, VerifyAuditChainResponses, VerifyAuditChainStatus200, VerifyAuditChainStatus400, VerifyAuditChainStatus401, VerifyAuditChainStatus403, VerifyAuditChainStatus404, VerifyAuditChainStatus429, VerifyCustomDomainPathDomainId, VerifyCustomDomainPathProjectId, VerifyCustomDomainRequestConfig, VerifyCustomDomainResponse, VerifyCustomDomainResponses, VerifyCustomDomainStatus200, VerifyCustomDomainStatus400, VerifyCustomDomainStatus401, VerifyCustomDomainStatus403, VerifyCustomDomainStatus404, VerifyCustomDomainStatus429, WebhookEndpoint, WebhookEndpointFormatEnumKey, WebhookEndpointInput, WebhookEndpointInputFormatEnumKey, WebhookTestResponse };