pgbeam 0.3.2 → 0.3.4

package/dist/operations.d.cts

@@ -1299,6 +1299,29 @@ type RejectApprovalRequestRequestConfig = {
     url: `/v1/projects/${string}/approvals/${string}/reject`;
 };
 
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+declare const auditDecision: {
+    readonly allow: "allow";
+    readonly block: "block";
+    readonly mask: "mask";
+    readonly truncate: "truncate";
+};
+type AuditDecisionKey = (typeof auditDecision)[keyof typeof auditDecision];
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+declare const auditSource: {
+    readonly wire: "wire";
+    readonly mcp: "mcp";
+    readonly control: "control";
+};
+type AuditSourceKey = (typeof auditSource)[keyof typeof auditSource];
+
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -1446,13 +1469,33 @@ type ListAuditLogsPathProjectId = string;
 */
 type ListAuditLogsQueryCredentialId = string | undefined;
 /**
- * @description Filter to a single event type (e.g. blocked).
+ * @description Filter to a single event type (e.g. blocked, masked, query).
  * @pattern ^[a-z_]+$
  * @type string | undefined
 */
 type ListAuditLogsQueryEvent = string | undefined;
 /**
- * @description Return entries strictly older than this timestamp (cursor).
+ * @description Coarse outcome filter that groups events. `allow` = query; `block` = blocked, budget_exhausted, auth_failed, credential_expired; `mask` = masked; `truncate` = truncated.
+ * @type string | undefined
+*/
+type ListAuditLogsQueryDecision = AuditDecisionKey | undefined;
+/**
+ * @description Filter by statement origin (wire, mcp, or control).
+ * @type string | undefined
+*/
+type ListAuditLogsQuerySource = AuditSourceKey | undefined;
+/**
+ * @description Return entries at or after this timestamp (inclusive lower bound).
+ * @type string | undefined
+*/
+type ListAuditLogsQueryStart = string | undefined;
+/**
+ * @description Return entries strictly older than this timestamp (cursor / upper bound).
+ * @type string | undefined
+*/
+type ListAuditLogsQueryEnd = string | undefined;
+/**
+ * @description Return entries strictly older than this timestamp (keyset pagination cursor).
  * @type string | undefined
 */
 type ListAuditLogsQueryBefore = string | undefined;
@@ -1486,6 +1529,10 @@ type ListAuditLogsRequestConfig = {
     queryParams?: {
         credential_id?: ListAuditLogsQueryCredentialId;
         event?: ListAuditLogsQueryEvent;
+        decision?: ListAuditLogsQueryDecision;
+        source?: ListAuditLogsQuerySource;
+        start?: ListAuditLogsQueryStart;
+        end?: ListAuditLogsQueryEnd;
         before?: ListAuditLogsQueryBefore;
         page_size?: ListAuditLogsQueryPageSize;
     };
@@ -1496,6 +1543,82 @@ type ListAuditLogsRequestConfig = {
     url: `/v1/projects/${string}/audit-logs`;
 };
 
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+/**
+ * @description Unique project identifier (prefixed, e.g. prj_xxx).
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string
+*/
+type ExportAuditLogsPathProjectId = string;
+/**
+ * @description Filter to a single agent credential.
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string | undefined
+*/
+type ExportAuditLogsQueryCredentialId = string | undefined;
+/**
+ * @description Filter to a single event type (e.g. blocked, masked, query).
+ * @pattern ^[a-z_]+$
+ * @type string | undefined
+*/
+type ExportAuditLogsQueryEvent = string | undefined;
+/**
+ * @description Coarse outcome filter that groups events. `allow` = query; `block` = blocked, budget_exhausted, auth_failed, credential_expired; `mask` = masked; `truncate` = truncated.
+ * @type string | undefined
+*/
+type ExportAuditLogsQueryDecision = AuditDecisionKey | undefined;
+/**
+ * @description Filter by statement origin (wire, mcp, or control).
+ * @type string | undefined
+*/
+type ExportAuditLogsQuerySource = AuditSourceKey | undefined;
+/**
+ * @description Return entries at or after this timestamp (inclusive lower bound).
+ * @type string | undefined
+*/
+type ExportAuditLogsQueryStart = string | undefined;
+/**
+ * @description Return entries strictly older than this timestamp (cursor / upper bound).
+ * @type string | undefined
+*/
+type ExportAuditLogsQueryEnd = string | undefined;
+/**
+ * @type string
+*/
+type ExportAuditLogsStatus200 = string;
+/**
+ * @type object
+*/
+type ExportAuditLogsRequestConfig = {
+    data?: never;
+    /**
+     * @type object
+    */
+    pathParams: {
+        project_id: ExportAuditLogsPathProjectId;
+    };
+    /**
+     * @type object | undefined
+    */
+    queryParams?: {
+        credential_id?: ExportAuditLogsQueryCredentialId;
+        event?: ExportAuditLogsQueryEvent;
+        decision?: ExportAuditLogsQueryDecision;
+        source?: ExportAuditLogsQuerySource;
+        start?: ExportAuditLogsQueryStart;
+        end?: ExportAuditLogsQueryEnd;
+    };
+    headerParams?: never;
+    /**
+     * @type string
+    */
+    url: `/v1/projects/${string}/audit-logs/export`;
+};
+
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -3078,6 +3201,328 @@ type TestDatabaseConnectionRequestConfig = {
     url: `/v1/projects/${string}/databases/${string}/test-connection`;
 };
 
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+declare const piiSuggestionPiiTypeEnum: {
+    readonly email: "email";
+    readonly phone: "phone";
+    readonly ssn: "ssn";
+    readonly credit_card: "credit_card";
+    readonly ip_address: "ip_address";
+    readonly full_name: "full_name";
+    readonly street_address: "street_address";
+    readonly date_of_birth: "date_of_birth";
+    readonly national_id: "national_id";
+    readonly passport: "passport";
+    readonly bank_account: "bank_account";
+    readonly api_secret: "api_secret";
+    readonly other: "other";
+};
+type PiiSuggestionPiiTypeEnumKey = (typeof piiSuggestionPiiTypeEnum)[keyof typeof piiSuggestionPiiTypeEnum];
+declare const piiSuggestionMaskKindEnum: {
+    readonly redact: "redact";
+    readonly null: "null";
+    readonly hash: "hash";
+};
+type PiiSuggestionMaskKindEnumKey = (typeof piiSuggestionMaskKindEnum)[keyof typeof piiSuggestionMaskKindEnum];
+/**
+ * @description A single likely-PII column detected by the scanner, with a recommended masking rule. Suggestions are advisory only — nothing is applied until the operator reviews and adds it to a policy profile.
+ * @type object
+*/
+type PiiSuggestion = {
+    /**
+     * @description Schema the column belongs to (e.g. \"public\").
+     * @example public
+     * @type string
+    */
+    schema: string;
+    /**
+     * @description Table the column belongs to.
+     * @example users
+     * @type string
+    */
+    table: string;
+    /**
+     * @description The detected column name.
+     * @example email
+     * @type string
+    */
+    column: string;
+    /**
+     * @description PostgreSQL data type of the column.
+     * @example text
+     * @type string
+    */
+    data_type: string;
+    /**
+     * @description The kind of personally identifiable information detected.
+     * @type string
+    */
+    pii_type: PiiSuggestionPiiTypeEnumKey;
+    /**
+     * @description Recommended masking kind for this column. hash is suggested for join/group keys (e.g. email), redact for free-text PII, null for highly sensitive secrets.
+     * @type string
+    */
+    mask_kind: PiiSuggestionMaskKindEnumKey;
+    /**
+     * @description Confidence score in [0,1]. Combines column-name signal and sampled-value signal; higher is stronger evidence.
+     * @example 0.95
+     * @type number
+    */
+    confidence: number;
+    /**
+     * @description Human-readable explanations for why the column was flagged.
+     * @example column name matches 'email',8/10 sampled values look like emails
+     * @type array
+    */
+    reasons: string[];
+    /**
+     * @description Number of sampled non-null values that matched the PII pattern.
+     * @minLength 0
+     * @type integer | undefined
+    */
+    sample_match_count?: number;
+    /**
+     * @description Number of non-null values sampled from the column.
+     * @minLength 0
+     * @type integer | undefined
+    */
+    sample_size?: number;
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+/**
+ * @description Result of a PII detection scan over a database\'s schema.
+ * @type object
+*/
+type ScanPiiResult = {
+    /**
+     * @description Number of tables inspected.
+     * @minLength 0
+     * @type integer
+    */
+    scanned_tables: number;
+    /**
+     * @description Number of columns inspected.
+     * @minLength 0
+     * @type integer
+    */
+    scanned_columns: number;
+    /**
+     * @description Ranked masking suggestions, highest confidence first. Empty when no likely-PII columns were found.
+     * @type array
+    */
+    suggestions: PiiSuggestion[];
+    /**
+     * @description True when the scan stopped early at the column limit and some columns were not inspected.
+     * @type boolean | undefined
+    */
+    truncated?: boolean;
+    /**
+     * @description Present when the scan failed to connect or read the schema.
+     * @type string | undefined
+    */
+    error?: string;
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+/**
+ * @description Unique project identifier (prefixed, e.g. prj_xxx).
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string
+*/
+type ScanDatabaseForPiiPathProjectId = string;
+/**
+ * @description Unique database identifier (prefixed, e.g. db_xxx).
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string
+*/
+type ScanDatabaseForPiiPathDatabaseId = string;
+/**
+ * @description Result of a PII detection scan over a database\'s schema.
+ * @type object
+*/
+type ScanDatabaseForPiiStatus200 = ScanPiiResult;
+/**
+ * @type object
+*/
+type ScanDatabaseForPiiRequestConfig = {
+    data?: never;
+    /**
+     * @type object
+    */
+    pathParams: {
+        project_id: ScanDatabaseForPiiPathProjectId;
+        database_id: ScanDatabaseForPiiPathDatabaseId;
+    };
+    queryParams?: never;
+    headerParams?: never;
+    /**
+     * @type string
+    */
+    url: `/v1/projects/${string}/databases/${string}/scan-pii`;
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+ * @description One column of a relation in the schema catalog.
+ * @type object
+*/
+type SchemaCatalogColumn = {
+    /**
+     * @description Column name.
+     * @example email
+     * @type string
+    */
+    name: string;
+    /**
+     * @description PostgreSQL data type (information_schema.data_type).
+     * @example text
+     * @type string
+    */
+    data_type: string;
+    /**
+     * @description True for binary-typed columns (e.g. bytea). Masking a binary column always returns NULL — a redact/hash token would corrupt the wire type — so the editor warns when a masking rule targets one.
+     * @type boolean
+    */
+    is_binary: boolean;
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+declare const schemaCatalogRelationKindEnum: {
+    readonly table: "table";
+    readonly view: "view";
+    readonly materialized_view: "materialized_view";
+    readonly other: "other";
+};
+type SchemaCatalogRelationKindEnumKey = (typeof schemaCatalogRelationKindEnum)[keyof typeof schemaCatalogRelationKindEnum];
+/**
+ * @description One relation (base table or view) in the schema catalog.
+ * @type object
+*/
+type SchemaCatalogRelation = {
+    /**
+     * @description Schema the relation belongs to.
+     * @example public
+     * @type string
+    */
+    schema: string;
+    /**
+     * @description Relation name.
+     * @example users
+     * @type string
+    */
+    name: string;
+    /**
+     * @description Relation kind. Allowlists, masking, and row-filters are enforced against the named relation itself, NOT through a view to its base tables — so a view over a row-filtered base table can leak. The editor warns when a policy entry targets a view.
+     * @type string
+    */
+    kind: SchemaCatalogRelationKindEnumKey;
+    /**
+     * @description The relation\'s columns.
+     * @type array
+    */
+    columns: SchemaCatalogColumn[];
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+/**
+ * @description A read-only snapshot of a database\'s user relations (tables and views) and their columns, used to power table/column autocomplete and view-aware warnings in the policy editor. System schemas (pg_catalog, information_schema, pg_toast) are excluded.
+ * @type object
+*/
+type SchemaCatalog = {
+    /**
+     * @description User relations, ordered by schema then name.
+     * @type array
+    */
+    relations: SchemaCatalogRelation[];
+    /**
+     * @description Number of relations in the catalog.
+     * @minLength 0
+     * @type integer
+    */
+    scanned_relations: number;
+    /**
+     * @description Number of columns in the catalog.
+     * @minLength 0
+     * @type integer
+    */
+    scanned_columns: number;
+    /**
+     * @description True when the catalog stopped early at the column limit.
+     * @type boolean | undefined
+    */
+    truncated?: boolean;
+    /**
+     * @description Present when introspection failed to connect or read the schema.
+     * @type string | undefined
+    */
+    error?: string;
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+/**
+ * @description Unique project identifier (prefixed, e.g. prj_xxx).
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string
+*/
+type GetSchemaCatalogPathProjectId = string;
+/**
+ * @description Unique database identifier (prefixed, e.g. db_xxx).
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string
+*/
+type GetSchemaCatalogPathDatabaseId = string;
+/**
+ * @description A read-only snapshot of a database\'s user relations (tables and views) and their columns, used to power table/column autocomplete and view-aware warnings in the policy editor. System schemas (pg_catalog, information_schema, pg_toast) are excluded.
+ * @type object
+*/
+type GetSchemaCatalogStatus200 = SchemaCatalog;
+/**
+ * @type object
+*/
+type GetSchemaCatalogRequestConfig = {
+    data?: never;
+    /**
+     * @type object
+    */
+    pathParams: {
+        project_id: GetSchemaCatalogPathProjectId;
+        database_id: GetSchemaCatalogPathDatabaseId;
+    };
+    queryParams?: never;
+    headerParams?: never;
+    /**
+     * @type string
+    */
+    url: `/v1/projects/${string}/databases/${string}/schema-catalog`;
+};
+
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -4588,6 +5033,166 @@ type DeletePolicyProfileRequestConfig = {
     url: `/v1/projects/${string}/policies/${string}`;
 };
 
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+/**
+ * @description A SQL statement to test plus the policy to test it against. Supply exactly one of policy_id (an existing saved policy) or policy (an unsaved draft, e.g. the in-progress editor form).
+ * @type object
+*/
+type DryEvalInput = {
+    /**
+     * @description The single SQL statement to evaluate.
+     * @minLength 1
+     * @maxLength 100000
+     * @example SELECT email FROM users WHERE id = 1
+     * @type string
+    */
+    sql: string;
+    /**
+     * @description ID of an existing saved policy profile to evaluate against.
+     * @example pol_01h455vb4pex5vsknk084sn02q
+     * @type string | undefined
+    */
+    policy_id?: string;
+    /**
+     * @description Mutable fields of a policy profile (used for create and update).
+     * @type object | undefined
+    */
+    policy?: PolicyProfileInput;
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+declare const dryEvalMaskedColumnKindEnum: {
+    readonly redact: "redact";
+    readonly null: "null";
+    readonly hash: "hash";
+};
+type DryEvalMaskedColumnKindEnumKey = (typeof dryEvalMaskedColumnKindEnum)[keyof typeof dryEvalMaskedColumnKindEnum];
+/**
+ * @description One result column that would be masked, with the mask kind applied.
+ * @type object
+*/
+type DryEvalMaskedColumn = {
+    /**
+     * @description The output column name (post-alias) the client would see masked.
+     * @example email
+     * @type string
+    */
+    column: string;
+    /**
+     * @description How the column is masked.
+     * @type string
+    */
+    kind: DryEvalMaskedColumnKindEnumKey;
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+declare const dryEvalResultVerdictEnum: {
+    readonly allow: "allow";
+    readonly block: "block";
+    readonly mask: "mask";
+    readonly "row-filter": "row-filter";
+};
+type DryEvalResultVerdictEnumKey = (typeof dryEvalResultVerdictEnum)[keyof typeof dryEvalResultVerdictEnum];
+/**
+ * @description The decision the proxy would reach for the supplied statement under the supplied policy. verdict is the headline outcome; the remaining fields detail why.
+ * @type object
+*/
+type DryEvalResult = {
+    /**
+     * @description allow — permitted unchanged; block — rejected; mask — permitted but listed result columns are masked; row-filter — permitted but a WHERE predicate is injected (and any listed columns are also masked).
+     * @type string
+    */
+    verdict: DryEvalResultVerdictEnumKey;
+    /**
+     * @description Machine-readable decision tag. For a block, the blocking rule (e.g. read_only, table_denied, table_not_allowed, statement_denied, row_filter_unsafe). Otherwise \"ok\".
+     * @example ok
+     * @type string
+    */
+    rule: string;
+    /**
+     * @description Human-readable explanation of the verdict.
+     * @type string
+    */
+    reason: string;
+    /**
+     * @description What the author could do instead (present on block verdicts).
+     * @type string | undefined
+    */
+    hint?: string;
+    /**
+     * @description Result columns that would be masked. Present on mask/row-filter verdicts.
+     * @type array | undefined
+    */
+    masked_columns?: DryEvalMaskedColumn[];
+    /**
+     * @description The row-filter predicate ANDed into the statement\'s WHERE clause.
+     * @example tenant_id = current_setting('pgbeam.tenant')
+     * @type string | undefined
+    */
+    row_filter_predicate?: string;
+    /**
+     * @description The statement as it would be sent upstream after row-filter injection.
+     * @type string | undefined
+    */
+    rewritten_sql?: string;
+    /**
+     * @description Informational caveats about stateful enforcement a single-statement preview cannot model (per-region budgets, approvals, write-mode routing).
+     * @type array | undefined
+    */
+    notes?: string[];
+};
+
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+/**
+ * @description Unique project identifier (prefixed, e.g. prj_xxx).
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @type string
+*/
+type DryEvalPolicyPathProjectId = string;
+/**
+ * @description The decision the proxy would reach for the supplied statement under the supplied policy. verdict is the headline outcome; the remaining fields detail why.
+ * @type object
+*/
+type DryEvalPolicyStatus200 = DryEvalResult;
+/**
+ * @description A SQL statement to test plus the policy to test it against. Supply exactly one of policy_id (an existing saved policy) or policy (an unsaved draft, e.g. the in-progress editor form).
+ * @type object
+*/
+type DryEvalPolicyData = DryEvalInput;
+/**
+ * @type object
+*/
+type DryEvalPolicyRequestConfig = {
+    data?: DryEvalPolicyData;
+    /**
+     * @type object
+    */
+    pathParams: {
+        project_id: DryEvalPolicyPathProjectId;
+    };
+    queryParams?: never;
+    headerParams?: never;
+    /**
+     * @type string
+    */
+    url: `/v1/projects/${string}/policy-evaluations`;
+};
+
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -4713,6 +5318,12 @@ type Project = {
      * @type string
     */
     default_policy_profile_id?: string | null;
+    /**
+     * @description Project-level kill-switch. When true, ALL agent-credential connections to this project are blocked at the proxy and live agent sessions are dropped within seconds. Passthrough/human connections are unaffected.\n
+     * @example false
+     * @type boolean | undefined
+    */
+    agents_disabled?: boolean;
     /**
      * @description Number of databases attached to this project.
      * @type integer | undefined
@@ -5021,6 +5632,12 @@ type UpdateProjectRequest = {
      * @type string
     */
     default_policy_profile_id?: string | null;
+    /**
+     * @description Project-level kill-switch. Set true to block ALL agent-credential connections to this project (live agent sessions are dropped within seconds); set false to re-enable them. Passthrough/human connections are unaffected. Engaging the kill-switch emits a kill_switch webhook event.\n
+     * @example true
+     * @type boolean | undefined
+    */
+    agents_disabled?: boolean;
 };
 
 /**
@@ -6838,6 +7455,10 @@ declare const operationsByTag: {
             readonly method: "GET";
             readonly path: "/v1/projects/{project_id}/audit-logs";
         };
+        readonly exportAuditLogs: {
+            readonly method: "GET";
+            readonly path: "/v1/projects/{project_id}/audit-logs/export";
+        };
     };
     readonly anomalies: {
         readonly listAnomalyAlerts: {
@@ -6990,6 +7611,14 @@ declare const operationsByTag: {
             readonly method: "POST";
             readonly path: "/v1/projects/{project_id}/databases/{database_id}/test-connection";
         };
+        readonly scanDatabaseForPii: {
+            readonly method: "POST";
+            readonly path: "/v1/projects/{project_id}/databases/{database_id}/scan-pii";
+        };
+        readonly getSchemaCatalog: {
+            readonly method: "GET";
+            readonly path: "/v1/projects/{project_id}/databases/{database_id}/schema-catalog";
+        };
     };
     readonly platform: {
         readonly getHealth: {
@@ -7028,6 +7657,10 @@ declare const operationsByTag: {
             readonly method: "DELETE";
             readonly path: "/v1/projects/{project_id}/policies/{policy_id}";
         };
+        readonly dryEvalPolicy: {
+            readonly method: "POST";
+            readonly path: "/v1/projects/{project_id}/policy-evaluations";
+        };
     };
     readonly support: {
         readonly listSupportCases: {
@@ -7150,6 +7783,11 @@ declare const operationsByPath: {
         readonly path: "/v1/projects/{project_id}/audit-logs";
         readonly operationId: "listAuditLogs";
     };
+    readonly "GET /v1/projects/{project_id}/audit-logs/export": {
+        readonly method: "GET";
+        readonly path: "/v1/projects/{project_id}/audit-logs/export";
+        readonly operationId: "exportAuditLogs";
+    };
     readonly "GET /v1/plans": {
         readonly method: "GET";
         readonly path: "/v1/plans";
@@ -7220,6 +7858,16 @@ declare const operationsByPath: {
         readonly path: "/v1/projects/{project_id}/databases/{database_id}/test-connection";
         readonly operationId: "testDatabaseConnection";
     };
+    readonly "POST /v1/projects/{project_id}/databases/{database_id}/scan-pii": {
+        readonly method: "POST";
+        readonly path: "/v1/projects/{project_id}/databases/{database_id}/scan-pii";
+        readonly operationId: "scanDatabaseForPii";
+    };
+    readonly "GET /v1/projects/{project_id}/databases/{database_id}/schema-catalog": {
+        readonly method: "GET";
+        readonly path: "/v1/projects/{project_id}/databases/{database_id}/schema-catalog";
+        readonly operationId: "getSchemaCatalog";
+    };
     readonly "GET /v1/projects/{project_id}/domains": {
         readonly method: "GET";
         readonly path: "/v1/projects/{project_id}/domains";
@@ -7290,6 +7938,11 @@ declare const operationsByPath: {
         readonly path: "/v1/projects/{project_id}/policies/{policy_id}";
         readonly operationId: "deletePolicyProfile";
     };
+    readonly "POST /v1/projects/{project_id}/policy-evaluations": {
+        readonly method: "POST";
+        readonly path: "/v1/projects/{project_id}/policy-evaluations";
+        readonly operationId: "dryEvalPolicy";
+    };
     readonly "GET /v1/projects": {
         readonly method: "GET";
         readonly path: "/v1/projects";
@@ -7456,6 +8109,10 @@ type ListAuditLogsParams = {
     pathParams: NonNullable<ListAuditLogsRequestConfig["pathParams"]>;
     queryParams?: NonNullable<ListAuditLogsRequestConfig["queryParams"]>;
 };
+type ExportAuditLogsParams = {
+    pathParams: NonNullable<ExportAuditLogsRequestConfig["pathParams"]>;
+    queryParams?: NonNullable<ExportAuditLogsRequestConfig["queryParams"]>;
+};
 type GetOrganizationPlanParams = {
     pathParams: NonNullable<GetOrganizationPlanRequestConfig["pathParams"]>;
 };
@@ -7503,6 +8160,12 @@ type DeleteDatabaseParams = {
 type TestDatabaseConnectionParams = {
     pathParams: NonNullable<TestDatabaseConnectionRequestConfig["pathParams"]>;
 };
+type ScanDatabaseForPiiParams = {
+    pathParams: NonNullable<ScanDatabaseForPiiRequestConfig["pathParams"]>;
+};
+type GetSchemaCatalogParams = {
+    pathParams: NonNullable<GetSchemaCatalogRequestConfig["pathParams"]>;
+};
 type ListCustomDomainsParams = {
     pathParams: NonNullable<ListCustomDomainsRequestConfig["pathParams"]>;
     queryParams?: NonNullable<ListCustomDomainsRequestConfig["queryParams"]>;
@@ -7550,6 +8213,10 @@ type UpdatePolicyProfileParams = {
 type DeletePolicyProfileParams = {
     pathParams: NonNullable<DeletePolicyProfileRequestConfig["pathParams"]>;
 };
+type DryEvalPolicyParams = {
+    pathParams: NonNullable<DryEvalPolicyRequestConfig["pathParams"]>;
+    body: NonNullable<DryEvalPolicyRequestConfig["data"]>;
+};
 type ListProjectsParams = {
     queryParams: NonNullable<ListProjectsRequestConfig["queryParams"]>;
 };
@@ -7645,6 +8312,7 @@ interface ApiOperations {
         revokeAgentCredential(params: RevokeAgentCredentialParams): Promise<void>;
         rotateAgentCredential(params: RotateAgentCredentialParams): Promise<RotateAgentCredentialStatus200>;
         listAuditLogs(params: ListAuditLogsParams): Promise<ListAuditLogsStatus200>;
+        exportAuditLogs(params: ExportAuditLogsParams): Promise<ExportAuditLogsStatus200>;
     };
     anomalies: {
         listAnomalyAlerts(params: ListAnomalyAlertsParams): Promise<ListAnomalyAlertsStatus200>;
@@ -7692,6 +8360,8 @@ interface ApiOperations {
         updateDatabase(params: UpdateDatabaseParams): Promise<UpdateDatabaseStatus200>;
         deleteDatabase(params: DeleteDatabaseParams): Promise<void>;
         testDatabaseConnection(params: TestDatabaseConnectionParams): Promise<TestDatabaseConnectionStatus200>;
+        scanDatabaseForPii(params: ScanDatabaseForPiiParams): Promise<ScanDatabaseForPiiStatus200>;
+        getSchemaCatalog(params: GetSchemaCatalogParams): Promise<GetSchemaCatalogStatus200>;
     };
     platform: {
         getHealth(): Promise<GetHealthStatus200>;
@@ -7706,6 +8376,7 @@ interface ApiOperations {
         getPolicyProfile(params: GetPolicyProfileParams): Promise<GetPolicyProfileStatus200>;
         updatePolicyProfile(params: UpdatePolicyProfileParams): Promise<UpdatePolicyProfileStatus200>;
         deletePolicyProfile(params: DeletePolicyProfileParams): Promise<void>;
+        dryEvalPolicy(params: DryEvalPolicyParams): Promise<DryEvalPolicyStatus200>;
     };
     support: {
         listSupportCases(params: ListSupportCasesParams): Promise<ListSupportCasesStatus200>;
@@ -7779,6 +8450,10 @@ interface RequestMap {
         params: ListAuditLogsParams;
         response: ListAuditLogsStatus200;
     };
+    "GET /v1/projects/{project_id}/audit-logs/export": {
+        params: ExportAuditLogsParams;
+        response: ExportAuditLogsStatus200;
+    };
     "GET /v1/plans": {
         params?: undefined;
         response: ListPlansStatus200;
@@ -7835,6 +8510,14 @@ interface RequestMap {
         params: TestDatabaseConnectionParams;
         response: TestDatabaseConnectionStatus200;
     };
+    "POST /v1/projects/{project_id}/databases/{database_id}/scan-pii": {
+        params: ScanDatabaseForPiiParams;
+        response: ScanDatabaseForPiiStatus200;
+    };
+    "GET /v1/projects/{project_id}/databases/{database_id}/schema-catalog": {
+        params: GetSchemaCatalogParams;
+        response: GetSchemaCatalogStatus200;
+    };
     "GET /v1/projects/{project_id}/domains": {
         params: ListCustomDomainsParams;
         response: ListCustomDomainsStatus200;
@@ -7891,6 +8574,10 @@ interface RequestMap {
         params: DeletePolicyProfileParams;
         response: void;
     };
+    "POST /v1/projects/{project_id}/policy-evaluations": {
+        params: DryEvalPolicyParams;
+        response: DryEvalPolicyStatus200;
+    };
     "GET /v1/projects": {
         params: ListProjectsParams;
         response: ListProjectsStatus200;