@faiber/faiber-idp 0.3.0 → 0.5.1

package/dist/operations.d.ts

@@ -1,97 +1,749 @@
 import { ServiceApi, type Identifier, type RequestOptions } from "@faiber/sdk-core";
 import type * as T from "./operations.types.js";
 export declare class IdpOperations extends ServiceApi {
-    /** GET /; permission: public/session-derived. */
+    /**
+     * Performs the status route operation for the router capability.
+     * Calls `GET /` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     routerStatusRouteGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RouterStatusRouteGetResponse, unknown, {}>>;
-    /** GET /api/openapi.json; permission: public/session-derived. */
+    /**
+     * Performs the openapi json operation for the router capability.
+     * Calls `GET /api/openapi.json` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     routerOpenapiJsonGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RouterOpenapiJsonGetResponse, unknown, {}>>;
-    /** GET /api/v1/acl/permissions; permission: public/session-derived. */
+    /**
+     * Performs the discovery operation for the oidc capability.
+     * Calls `GET /api/v1/.well-known/openid-configuration` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    oidcDiscoveryGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("@faiber/sdk-core").JsonValue, unknown, {}>>;
+    /**
+     * Performs the permissions index operation for the acl capability.
+     * Calls `GET /api/v1/acl/permissions` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     aclPermissionsIndexGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AclPermissionsIndexGetResponse, unknown, {}>>;
-    /** GET /api/v1/acl/roles; permission: public/session-derived. */
+    /**
+     * Performs the roles index operation for the acl capability.
+     * Calls `GET /api/v1/acl/roles` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     aclRolesIndexGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AclRolesIndexGetResponse, unknown, {}>>;
-    /** POST /api/v1/acl/roles; permission: public/session-derived. */
+    /**
+     * Performs the roles create operation for the acl capability.
+     * Calls `POST /api/v1/acl/roles` through the shared IDP-aware Faiber client.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     aclRolesCreatePost(data: T.AclRolesCreatePostInput, options?: RequestOptions<T.AclRolesCreatePostInput>): Promise<import("axios").AxiosResponse<T.AclRolesCreatePostResponse, T.AclRolesCreatePostInput, {}>>;
-    /** DELETE /api/v1/acl/roles/{role_id}; permission: public/session-derived. */
+    /**
+     * Performs the roles delete operation for the acl capability.
+     * Calls `DELETE /api/v1/acl/roles/{role_id}` through the shared IDP-aware Faiber client.
+     * @param roleId Backend path identifier `role_id`.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     aclRolesDeleteDelete(roleId: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AclRolesDeleteDeleteResponse, unknown, {}>>;
-    /** GET /api/v1/acl/roles/{role_id}; permission: public/session-derived. */
+    /**
+     * Performs the roles show operation for the acl capability.
+     * Calls `GET /api/v1/acl/roles/{role_id}` through the shared IDP-aware Faiber client.
+     * @param roleId Backend path identifier `role_id`.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     aclRolesShowGet(roleId: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AclRolesShowGetResponse, unknown, {}>>;
-    /** PATCH /api/v1/acl/roles/{role_id}; permission: public/session-derived. */
+    /**
+     * Performs the roles update operation for the acl capability.
+     * Calls `PATCH /api/v1/acl/roles/{role_id}` through the shared IDP-aware Faiber client.
+     * @param roleId Backend path identifier `role_id`.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     aclRolesUpdatePatch(roleId: Identifier, data: T.AclRolesUpdatePatchInput, options?: RequestOptions<T.AclRolesUpdatePatchInput>): Promise<import("axios").AxiosResponse<T.AclRolesUpdatePatchResponse, T.AclRolesUpdatePatchInput, {}>>;
-    /** PUT /api/v1/acl/roles/{role_id}; permission: public/session-derived. */
+    /**
+     * Performs the roles update operation for the acl capability.
+     * Calls `PUT /api/v1/acl/roles/{role_id}` through the shared IDP-aware Faiber client.
+     * @param roleId Backend path identifier `role_id`.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     aclRolesUpdatePut(roleId: Identifier, data: T.AclRolesUpdatePutInput, options?: RequestOptions<T.AclRolesUpdatePutInput>): Promise<import("axios").AxiosResponse<T.AclRolesUpdatePutResponse, T.AclRolesUpdatePutInput, {}>>;
-    /** POST /api/v1/auth/account-login; permission: public/session-derived. */
+    /**
+     * Performs the login account operation for the auth capability.
+     * Calls `POST /api/v1/auth/account-login` through the shared IDP-aware Faiber client.
+     * @param data Typed URL-encoded form.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     authLoginAccountPost(data: T.AuthLoginAccountPostInput, options?: RequestOptions<T.AuthLoginAccountPostInput>): Promise<import("axios").AxiosResponse<T.AuthLoginAccountPostResponse, URLSearchParams, {}>>;
-    /** POST /api/v1/auth/generate/one-time; permission: public/session-derived. */
+    /**
+     * Performs the public show operation for the identity authority capability.
+     * Calls `GET /api/v1/auth/authority` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    identityAuthorityPublicShowGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.IdentityAuthorityPublicShowGetResponse, unknown, {}>>;
+    /**
+     * Performs the start operation for the custom oauth capability.
+     * Calls `GET /api/v1/auth/custom-oauth/{provider}` through the shared IDP-aware Faiber client.
+     * @param provider Backend path identifier `provider`.
+     * @param params Typed query parameters; omitted members retain backend defaults.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    customOauthStartGet(provider: Identifier, params?: T.CustomOauthStartGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<void, unknown, {}>>;
+    /**
+     * Performs the callback operation for the custom oauth capability.
+     * Calls `GET /api/v1/auth/custom-oauth/{provider}/callback` through the shared IDP-aware Faiber client.
+     * @param provider Backend path identifier `provider`.
+     * @param params Typed query parameters; omitted members retain backend defaults.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    customOauthCallbackGet(provider: Identifier, params?: T.CustomOauthCallbackGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<void, unknown, {}>>;
+    /**
+     * Performs the unlink operation for the custom oauth capability.
+     * Calls `DELETE /api/v1/auth/custom-oauth/{provider}/link` through the shared IDP-aware Faiber client.
+     * @param provider Backend path identifier `provider`.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    customOauthUnlinkDelete(provider: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.CustomOauthUnlinkDeleteResponseData, unknown, {}>>;
+    /**
+     * Performs the public providers operation for the custom oauth capability.
+     * Calls `GET /api/v1/auth/custom-oauth/providers` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    customOauthPublicProvidersGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.CustomOauthPublicProvidersGetResponse, unknown, {}>>;
+    /**
+     * Performs the generate one time token route operation for the auth capability.
+     * Calls `POST /api/v1/auth/generate/one-time` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     authGenerateOneTimeTokenRoutePost(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AuthGenerateOneTimeTokenRoutePostResponse, unknown, {}>>;
-    /** GET /api/v1/auth/identities; permission: public/session-derived. */
+    /**
+     * Performs the browser handoff operation for the auth capability.
+     * Calls `GET /api/v1/auth/handoff` through the shared IDP-aware Faiber client.
+     * @param params Typed query parameters; omitted members retain backend defaults.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    authBrowserHandoffGet(params?: T.AuthBrowserHandoffGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AuthBrowserHandoffGetResponse, unknown, {}>>;
+    /**
+     * Performs the list linked identities operation for the auth capability.
+     * Calls `GET /api/v1/auth/identities` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     authListLinkedIdentitiesGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AuthListLinkedIdentitiesGetResponse, unknown, {}>>;
-    /** POST /api/v1/auth/login; permission: public/session-derived. */
+    /**
+     * Performs the login operation for the auth capability.
+     * Calls `POST /api/v1/auth/login` through the shared IDP-aware Faiber client.
+     * @param data Typed URL-encoded form.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     authLoginPost(data: T.AuthLoginPostInput, options?: RequestOptions<T.AuthLoginPostInput>): Promise<import("axios").AxiosResponse<T.AuthLoginPostResponse, URLSearchParams, {}>>;
-    /** DELETE /api/v1/auth/oauth/{provider}; permission: public/session-derived. */
-    authOauthUnlinkDelete(provider: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AuthOauthUnlinkDeleteResponse, unknown, {}>>;
-    /** GET /api/v1/auth/oauth/{provider}; permission: public/session-derived. */
-    authOauthStartGet(provider: Identifier, params?: T.AuthOauthStartGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AuthOauthStartGetResponse, unknown, {}>>;
-    /** GET /api/v1/auth/oauth/{provider}/callback; permission: public/session-derived. */
-    authOauthCallbackGet(provider: Identifier, params?: T.AuthOauthCallbackGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AuthOauthCallbackGetResponse, unknown, {}>>;
-    /** GET /api/v1/auth/oauth/providers; permission: public/session-derived. */
+    /**
+     * Performs the logout operation for the auth capability.
+     * Calls `GET /api/v1/auth/logout` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    authLogoutGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AuthLogoutGetResponse, unknown, {}>>;
+    /**
+     * Performs the authorize operation for the auth capability.
+     * Calls `GET /api/v1/auth/native/authorize` through the shared IDP-aware Faiber client.
+     * @param params Typed query parameters; omitted members retain backend defaults.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    authAuthorizeGet(params?: T.AuthAuthorizeGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<void, unknown, {}>>;
+    /**
+     * Performs the token operation for the auth capability.
+     * Calls `POST /api/v1/auth/native/token` through the shared IDP-aware Faiber client.
+     * @param data Typed URL-encoded form.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    authTokenPost(data: T.AuthTokenPostInput, options?: RequestOptions<T.AuthTokenPostInput>): Promise<import("axios").AxiosResponse<T.AuthTokenPostResponseData, URLSearchParams, {}>>;
+    /**
+     * Performs the oauth unlink operation for the auth capability.
+     * Calls `DELETE /api/v1/auth/oauth/{provider}` through the shared IDP-aware Faiber client.
+     * @param provider Backend path identifier `provider`.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    authOauthUnlinkDelete(provider: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AuthOauthUnlinkDeleteResponseData, unknown, {}>>;
+    /**
+     * Performs the oauth start operation for the auth capability.
+     * Calls `GET /api/v1/auth/oauth/{provider}` through the shared IDP-aware Faiber client.
+     * @param provider Backend path identifier `provider`.
+     * @param params Typed query parameters; omitted members retain backend defaults.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    authOauthStartGet(provider: Identifier, params?: T.AuthOauthStartGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<void, unknown, {}>>;
+    /**
+     * Performs the oauth callback operation for the auth capability.
+     * Calls `GET /api/v1/auth/oauth/{provider}/callback` through the shared IDP-aware Faiber client.
+     * @param provider Backend path identifier `provider`.
+     * @param params Typed query parameters; omitted members retain backend defaults.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    authOauthCallbackGet(provider: Identifier, params?: T.AuthOauthCallbackGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<void, unknown, {}>>;
+    /**
+     * Performs the oauth providers operation for the auth capability.
+     * Calls `GET /api/v1/auth/oauth/providers` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     authOauthProvidersGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AuthOauthProvidersGetResponse, unknown, {}>>;
-    /** POST /api/v1/auth/otp-login; permission: public/session-derived. */
+    /**
+     * Performs the otp login operation for the auth capability.
+     * Calls `POST /api/v1/auth/otp-login` through the shared IDP-aware Faiber client.
+     * @param data Typed URL-encoded form.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     authOtpLoginPost(data: T.AuthOtpLoginPostInput, options?: RequestOptions<T.AuthOtpLoginPostInput>): Promise<import("axios").AxiosResponse<T.AuthOtpLoginPostResponse, URLSearchParams, {}>>;
-    /** GET /api/v1/auth/refresh; permission: public/session-derived. */
+    /**
+     * Performs the refresh token operation for the auth capability.
+     * Calls `GET /api/v1/auth/refresh` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     authRefreshTokenGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AuthRefreshTokenGetResponse, unknown, {}>>;
-    /** POST /api/v1/auth/secure/generate/one-time; permission: public/session-derived. */
+    /**
+     * Performs the generate secure one time token route operation for the auth capability.
+     * Calls `POST /api/v1/auth/secure/generate/one-time` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     authGenerateSecureOneTimeTokenRoutePost(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AuthGenerateSecureOneTimeTokenRoutePostResponse, unknown, {}>>;
-    /** GET /api/v1/auth/token-login; permission: public/session-derived. */
+    /**
+     * Performs the list sessions operation for the auth capability.
+     * Calls `GET /api/v1/auth/sessions` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    authListSessionsGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AuthListSessionsGetResponse, unknown, {}>>;
+    /**
+     * Performs the delete session operation for the auth capability.
+     * Calls `DELETE /api/v1/auth/sessions/{session_id}` through the shared IDP-aware Faiber client.
+     * @param sessionId Backend path identifier `session_id`.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    authDeleteSessionDelete(sessionId: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AuthDeleteSessionDeleteResponseData, unknown, {}>>;
+    /**
+     * Performs the login token operation for the auth capability.
+     * Calls `GET /api/v1/auth/token-login` through the shared IDP-aware Faiber client.
+     * @param params Typed query parameters; omitted members retain backend defaults.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     authLoginTokenGet(params?: T.AuthLoginTokenGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AuthLoginTokenGetResponse, unknown, {}>>;
-    /** GET /api/v1/auth/validate; permission: public/session-derived. */
+    /**
+     * Performs the validate operation for the auth capability.
+     * Calls `GET /api/v1/auth/validate` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     authValidateGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AuthValidateGetResponse, unknown, {}>>;
-    /** GET /api/v1/auth/web-login; permission: public/session-derived. */
-    authLogoutGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.AuthLogoutGetResponse, unknown, {}>>;
-    /** POST /api/v1/auth/web-login; permission: public/session-derived. */
+    /**
+     * Performs the login web operation for the auth capability.
+     * Calls `POST /api/v1/auth/web-login` through the shared IDP-aware Faiber client.
+     * @param data Typed URL-encoded form.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     authLoginWebPost(data: T.AuthLoginWebPostInput, options?: RequestOptions<T.AuthLoginWebPostInput>): Promise<import("axios").AxiosResponse<T.AuthLoginWebPostResponse, URLSearchParams, {}>>;
-    /** GET /api/v1/integration/flow; permission: public/session-derived. */
+    /**
+     * Performs the enroll operation for the identity authority capability.
+     * Calls `POST /api/v1/federation/enroll` through the shared IDP-aware Faiber client.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    identityAuthorityEnrollPost(data: T.IdentityAuthorityEnrollPostInput, options?: RequestOptions<T.IdentityAuthorityEnrollPostInput>): Promise<import("axios").AxiosResponse<T.IdentityAuthorityEnrollPostResponse, T.IdentityAuthorityEnrollPostInput, {}>>;
+    /**
+     * Performs the flow integration show operation for the integration capability.
+     * Calls `GET /api/v1/integration/flow` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     integrationFlowIntegrationShowGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.IntegrationFlowIntegrationShowGetResponse, unknown, {}>>;
-    /** GET /api/v1/settings/oauth; permission: public/session-derived. */
+    /**
+     * Performs the authorize operation for the oidc capability.
+     * Calls `GET /api/v1/oauth2/authorize` through the shared IDP-aware Faiber client.
+     * @param params Typed query parameters; omitted members retain backend defaults.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    oidcAuthorizeGet(params?: T.OidcAuthorizeGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<void, unknown, {}>>;
+    /**
+     * Performs the backchannel logout operation for the oidc capability.
+     * Calls `POST /api/v1/oauth2/backchannel-logout` through the shared IDP-aware Faiber client.
+     * @param data Typed URL-encoded form.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    oidcBackchannelLogoutPost(data: T.OidcBackchannelLogoutPostInput, options?: RequestOptions<T.OidcBackchannelLogoutPostInput>): Promise<import("axios").AxiosResponse<void, URLSearchParams, {}>>;
+    /**
+     * Performs the introspect operation for the oidc capability.
+     * Calls `POST /api/v1/oauth2/introspect` through the shared IDP-aware Faiber client.
+     * @param data Typed URL-encoded form.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    oidcIntrospectPost(data: T.OidcIntrospectPostInput, options?: RequestOptions<T.OidcIntrospectPostInput>): Promise<import("axios").AxiosResponse<import("@faiber/sdk-core").JsonValue, URLSearchParams, {}>>;
+    /**
+     * Performs the jwks operation for the oidc capability.
+     * Calls `GET /api/v1/oauth2/jwks` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    oidcJwksGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("@faiber/sdk-core").JsonValue, unknown, {}>>;
+    /**
+     * Performs the logout operation for the oidc capability.
+     * Calls `GET /api/v1/oauth2/logout` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    oidcLogoutGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.OidcLogoutGetResponse, unknown, {}>>;
+    /**
+     * Performs the logout operation for the oidc capability.
+     * Calls `POST /api/v1/oauth2/logout` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    oidcLogoutPost(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.OidcLogoutPostResponse, unknown, {}>>;
+    /**
+     * Performs the revoke operation for the oidc capability.
+     * Calls `POST /api/v1/oauth2/revoke` through the shared IDP-aware Faiber client.
+     * @param data Typed URL-encoded form.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    oidcRevokePost(data: T.OidcRevokePostInput, options?: RequestOptions<T.OidcRevokePostInput>): Promise<import("axios").AxiosResponse<void, URLSearchParams, {}>>;
+    /**
+     * Performs the token operation for the oidc capability.
+     * Calls `POST /api/v1/oauth2/token` through the shared IDP-aware Faiber client.
+     * @param data Typed URL-encoded form.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    oidcTokenPost(data: T.OidcTokenPostInput, options?: RequestOptions<T.OidcTokenPostInput>): Promise<import("axios").AxiosResponse<T.OidcTokenPostResponseData, URLSearchParams, {}>>;
+    /**
+     * Performs the userinfo operation for the oidc capability.
+     * Calls `GET /api/v1/oauth2/userinfo` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    oidcUserinfoGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("@faiber/sdk-core").JsonValue, unknown, {}>>;
+    /**
+     * Performs the userinfo operation for the oidc capability.
+     * Calls `POST /api/v1/oauth2/userinfo` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    oidcUserinfoPost(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("@faiber/sdk-core").JsonValue, unknown, {}>>;
+    /**
+     * Performs the list operation for the custom oauth capability.
+     * Calls `GET /api/v1/settings/custom-oauth` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    customOauthListGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.CustomOauthListGetResponse, unknown, {}>>;
+    /**
+     * Performs the create operation for the custom oauth capability.
+     * Calls `POST /api/v1/settings/custom-oauth` through the shared IDP-aware Faiber client.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    customOauthCreatePost(data: T.CustomOauthCreatePostInput, options?: RequestOptions<T.CustomOauthCreatePostInput>): Promise<import("axios").AxiosResponse<T.CustomOauthCreatePostResponse, T.CustomOauthCreatePostInput, {}>>;
+    /**
+     * Performs the remove operation for the custom oauth capability.
+     * Calls `DELETE /api/v1/settings/custom-oauth/{id}` through the shared IDP-aware Faiber client.
+     * @param id Backend path identifier `id`.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    customOauthRemoveDelete(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.CustomOauthRemoveDeleteResponseData, unknown, {}>>;
+    /**
+     * Performs the update operation for the custom oauth capability.
+     * Calls `PUT /api/v1/settings/custom-oauth/{id}` through the shared IDP-aware Faiber client.
+     * @param id Backend path identifier `id`.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    customOauthUpdatePut(id: Identifier, data: T.CustomOauthUpdatePutInput, options?: RequestOptions<T.CustomOauthUpdatePutInput>): Promise<import("axios").AxiosResponse<T.CustomOauthUpdatePutResponse, T.CustomOauthUpdatePutInput, {}>>;
+    /**
+     * Performs the admin show operation for the identity authority capability.
+     * Calls `GET /api/v1/settings/identity-authority` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    identityAuthorityAdminShowGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.IdentityAuthorityAdminShowGetResponse, unknown, {}>>;
+    /**
+     * Performs the update operation for the identity authority capability.
+     * Calls `PUT /api/v1/settings/identity-authority` through the shared IDP-aware Faiber client.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    identityAuthorityUpdatePut(data: T.IdentityAuthorityUpdatePutInput, options?: RequestOptions<T.IdentityAuthorityUpdatePutInput>): Promise<import("axios").AxiosResponse<T.IdentityAuthorityUpdatePutResponse, T.IdentityAuthorityUpdatePutInput, {}>>;
+    /**
+     * Performs the discover operation for the identity authority capability.
+     * Calls `POST /api/v1/settings/identity-authority/discover` through the shared IDP-aware Faiber client.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    identityAuthorityDiscoverPost(data: T.IdentityAuthorityDiscoverPostInput, options?: RequestOptions<T.IdentityAuthorityDiscoverPostInput>): Promise<import("axios").AxiosResponse<T.IdentityAuthorityDiscoverPostResponse, T.IdentityAuthorityDiscoverPostInput, {}>>;
+    /**
+     * Performs the pair canonical operation for the identity authority capability.
+     * Calls `POST /api/v1/settings/identity-authority/pair` through the shared IDP-aware Faiber client.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    identityAuthorityPairCanonicalPost(data: T.IdentityAuthorityPairCanonicalPostInput, options?: RequestOptions<T.IdentityAuthorityPairCanonicalPostInput>): Promise<import("axios").AxiosResponse<T.IdentityAuthorityPairCanonicalPostResponse, T.IdentityAuthorityPairCanonicalPostInput, {}>>;
+    /**
+     * Performs the create pairing invitation operation for the identity authority capability.
+     * Calls `POST /api/v1/settings/identity-authority/pairing-invitations` through the shared IDP-aware Faiber client.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    identityAuthorityCreatePairingInvitationPost(data: T.IdentityAuthorityCreatePairingInvitationPostInput, options?: RequestOptions<T.IdentityAuthorityCreatePairingInvitationPostInput>): Promise<import("axios").AxiosResponse<T.IdentityAuthorityCreatePairingInvitationPostResponse, T.IdentityAuthorityCreatePairingInvitationPostInput, {}>>;
+    /**
+     * Performs the oauth settings show operation for the settings capability.
+     * Calls `GET /api/v1/settings/oauth` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     settingsOauthSettingsShowGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.SettingsOauthSettingsShowGetResponse, unknown, {}>>;
-    /** PUT /api/v1/settings/oauth; permission: public/session-derived. */
+    /**
+     * Performs the oauth settings update operation for the settings capability.
+     * Calls `PUT /api/v1/settings/oauth` through the shared IDP-aware Faiber client.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     settingsOauthSettingsUpdatePut(data: T.SettingsOauthSettingsUpdatePutInput, options?: RequestOptions<T.SettingsOauthSettingsUpdatePutInput>): Promise<import("axios").AxiosResponse<T.SettingsOauthSettingsUpdatePutResponse, T.SettingsOauthSettingsUpdatePutInput, {}>>;
-    /** GET /api/v1/users; permission: public/session-derived. */
+    /**
+     * Performs the list operation for the oauth clients capability.
+     * Calls `GET /api/v1/settings/oauth-clients` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    oauthClientsListGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.OauthClientsListGetResponse, unknown, {}>>;
+    /**
+     * Performs the create operation for the oauth clients capability.
+     * Calls `POST /api/v1/settings/oauth-clients` through the shared IDP-aware Faiber client.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    oauthClientsCreatePost(data: T.OauthClientsCreatePostInput, options?: RequestOptions<T.OauthClientsCreatePostInput>): Promise<import("axios").AxiosResponse<T.OauthClientsCreatePostResponse, T.OauthClientsCreatePostInput, {}>>;
+    /**
+     * Performs the remove operation for the oauth clients capability.
+     * Calls `DELETE /api/v1/settings/oauth-clients/{id}` through the shared IDP-aware Faiber client.
+     * @param id Backend path identifier `id`.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    oauthClientsRemoveDelete(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.OauthClientsRemoveDeleteResponseData, unknown, {}>>;
+    /**
+     * Performs the update operation for the oauth clients capability.
+     * Calls `PUT /api/v1/settings/oauth-clients/{id}` through the shared IDP-aware Faiber client.
+     * @param id Backend path identifier `id`.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    oauthClientsUpdatePut(id: Identifier, data: T.OauthClientsUpdatePutInput, options?: RequestOptions<T.OauthClientsUpdatePutInput>): Promise<import("axios").AxiosResponse<T.OauthClientsUpdatePutResponse, T.OauthClientsUpdatePutInput, {}>>;
+    /**
+     * Performs the rotate operation for the oauth clients capability.
+     * Calls `POST /api/v1/settings/oauth-clients/{id}/rotate-secret` through the shared IDP-aware Faiber client.
+     * @param id Backend path identifier `id`.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    oauthClientsRotatePost(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.OauthClientsRotatePostResponse, unknown, {}>>;
+    /**
+     * Performs the users index operation for the user capability.
+     * Calls `GET /api/v1/users` through the shared IDP-aware Faiber client.
+     * @param params Typed query parameters; omitted members retain backend defaults.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     userUsersIndexGet(params?: T.UserUsersIndexGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.UserUsersIndexGetResponse, unknown, {}>>;
-    /** POST /api/v1/users; permission: public/session-derived. */
+    /**
+     * Performs the user create operation for the user capability.
+     * Calls `POST /api/v1/users` through the shared IDP-aware Faiber client.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     userUserCreatePost(data: T.UserUserCreatePostInput, options?: RequestOptions<T.UserUserCreatePostInput>): Promise<import("axios").AxiosResponse<T.UserUserCreatePostResponse, T.UserUserCreatePostInput, {}>>;
-    /** DELETE /api/v1/users/{user_id}; permission: public/session-derived. */
+    /**
+     * Performs the user delete operation for the user capability.
+     * Calls `DELETE /api/v1/users/{user_id}` through the shared IDP-aware Faiber client.
+     * @param userId Backend path identifier `user_id`.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     userUserDeleteDelete(userId: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.UserUserDeleteDeleteResponse, unknown, {}>>;
-    /** GET /api/v1/users/{user_id}; permission: public/session-derived. */
+    /**
+     * Performs the user find operation for the user capability.
+     * Calls `GET /api/v1/users/{user_id}` through the shared IDP-aware Faiber client.
+     * @param userId Backend path identifier `user_id`.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     userUserFindGet(userId: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.UserUserFindGetResponse, unknown, {}>>;
-    /** PATCH /api/v1/users/{user_id}; permission: public/session-derived. */
+    /**
+     * Performs the user update operation for the user capability.
+     * Calls `PATCH /api/v1/users/{user_id}` through the shared IDP-aware Faiber client.
+     * @param userId Backend path identifier `user_id`.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     userUserUpdatePatch(userId: Identifier, data: T.UserUserUpdatePatchInput, options?: RequestOptions<T.UserUserUpdatePatchInput>): Promise<import("axios").AxiosResponse<T.UserUserUpdatePatchResponse, T.UserUserUpdatePatchInput, {}>>;
-    /** PUT /api/v1/users/{user_id}; permission: public/session-derived. */
+    /**
+     * Performs the user update operation for the user capability.
+     * Calls `PUT /api/v1/users/{user_id}` through the shared IDP-aware Faiber client.
+     * @param userId Backend path identifier `user_id`.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     userUserUpdatePut(userId: Identifier, data: T.UserUserUpdatePutInput, options?: RequestOptions<T.UserUserUpdatePutInput>): Promise<import("axios").AxiosResponse<T.UserUserUpdatePutResponse, T.UserUserUpdatePutInput, {}>>;
-    /** PATCH /api/v1/users/{user_id}/change-password; permission: public/session-derived. */
+    /**
+     * Performs the change password operation for the user capability.
+     * Calls `PATCH /api/v1/users/{user_id}/change-password` through the shared IDP-aware Faiber client.
+     * @param userId Backend path identifier `user_id`.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     userChangePasswordPatch(userId: Identifier, data: T.UserChangePasswordPatchInput, options?: RequestOptions<T.UserChangePasswordPatchInput>): Promise<import("axios").AxiosResponse<T.UserChangePasswordPatchResponse, T.UserChangePasswordPatchInput, {}>>;
-    /** PUT /api/v1/users/{user_id}/change-password; permission: public/session-derived. */
+    /**
+     * Performs the change password operation for the user capability.
+     * Calls `PUT /api/v1/users/{user_id}/change-password` through the shared IDP-aware Faiber client.
+     * @param userId Backend path identifier `user_id`.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     userChangePasswordPut(userId: Identifier, data: T.UserChangePasswordPutInput, options?: RequestOptions<T.UserChangePasswordPutInput>): Promise<import("axios").AxiosResponse<T.UserChangePasswordPutResponse, T.UserChangePasswordPutInput, {}>>;
-    /** PATCH /api/v1/users/{user_id}/change-roles; permission: public/session-derived. */
+    /**
+     * Performs the change roles operation for the user capability.
+     * Calls `PATCH /api/v1/users/{user_id}/change-roles` through the shared IDP-aware Faiber client.
+     * @param userId Backend path identifier `user_id`.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     userChangeRolesPatch(userId: Identifier, data: T.UserChangeRolesPatchInput, options?: RequestOptions<T.UserChangeRolesPatchInput>): Promise<import("axios").AxiosResponse<T.UserChangeRolesPatchResponse, T.UserChangeRolesPatchInput, {}>>;
-    /** PUT /api/v1/users/{user_id}/change-roles; permission: public/session-derived. */
+    /**
+     * Performs the change roles operation for the user capability.
+     * Calls `PUT /api/v1/users/{user_id}/change-roles` through the shared IDP-aware Faiber client.
+     * @param userId Backend path identifier `user_id`.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     userChangeRolesPut(userId: Identifier, data: T.UserChangeRolesPutInput, options?: RequestOptions<T.UserChangeRolesPutInput>): Promise<import("axios").AxiosResponse<T.UserChangeRolesPutResponse, T.UserChangeRolesPutInput, {}>>;
-    /** GET /api/v1/users/{user_id}/logout; permission: public/session-derived. */
+    /**
+     * Performs the user logout operation for the user capability.
+     * Calls `GET /api/v1/users/{user_id}/logout` through the shared IDP-aware Faiber client.
+     * @param userId Backend path identifier `user_id`.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     userUserLogoutGet(userId: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.UserUserLogoutGetResponse, unknown, {}>>;
-    /** PATCH /api/v1/users/{user_id}/status; permission: public/session-derived. */
+    /**
+     * Performs the user set status operation for the user capability.
+     * Calls `PATCH /api/v1/users/{user_id}/status` through the shared IDP-aware Faiber client.
+     * @param userId Backend path identifier `user_id`.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     userUserSetStatusPatch(userId: Identifier, data: T.UserUserSetStatusPatchInput, options?: RequestOptions<T.UserUserSetStatusPatchInput>): Promise<import("axios").AxiosResponse<T.UserUserSetStatusPatchResponse, T.UserUserSetStatusPatchInput, {}>>;
-    /** PUT /api/v1/users/{user_id}/status; permission: public/session-derived. */
+    /**
+     * Performs the user set status operation for the user capability.
+     * Calls `PUT /api/v1/users/{user_id}/status` through the shared IDP-aware Faiber client.
+     * @param userId Backend path identifier `user_id`.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     userUserSetStatusPut(userId: Identifier, data: T.UserUserSetStatusPutInput, options?: RequestOptions<T.UserUserSetStatusPutInput>): Promise<import("axios").AxiosResponse<T.UserUserSetStatusPutResponse, T.UserUserSetStatusPutInput, {}>>;
-    /** POST /api/v1/users/register; permission: public/session-derived. */
+    /**
+     * Performs the users directory operation for the user capability.
+     * Calls `GET /api/v1/users/directory` through the shared IDP-aware Faiber client.
+     * @param params Typed query parameters; omitted members retain backend defaults.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    userUsersDirectoryGet(params?: T.UserUsersDirectoryGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.UserUsersDirectoryGetResponse, unknown, {}>>;
+    /**
+     * Performs the register operation for the user capability.
+     * Calls `POST /api/v1/users/register` through the shared IDP-aware Faiber client.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     userRegisterPost(data: T.UserRegisterPostInput, options?: RequestOptions<T.UserRegisterPostInput>): Promise<import("axios").AxiosResponse<T.UserRegisterPostResponse, T.UserRegisterPostInput, {}>>;
-    /** POST /api/v1/users/register-email; permission: public/session-derived. */
+    /**
+     * Performs the register with email operation for the user capability.
+     * Calls `POST /api/v1/users/register-email` through the shared IDP-aware Faiber client.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     userRegisterWithEmailPost(data: T.UserRegisterWithEmailPostInput, options?: RequestOptions<T.UserRegisterWithEmailPostInput>): Promise<import("axios").AxiosResponse<T.UserRegisterWithEmailPostResponse, T.UserRegisterWithEmailPostInput, {}>>;
-    /** POST /api/v1/users/register-phone; permission: public/session-derived. */
+    /**
+     * Performs the register with phone operation for the user capability.
+     * Calls `POST /api/v1/users/register-phone` through the shared IDP-aware Faiber client.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     userRegisterWithPhonePost(data: T.UserRegisterWithPhonePostInput, options?: RequestOptions<T.UserRegisterWithPhonePostInput>): Promise<import("axios").AxiosResponse<T.UserRegisterWithPhonePostResponse, T.UserRegisterWithPhonePostInput, {}>>;
-    /** GET /api/v1/users/self; permission: public/session-derived. */
+    /**
+     * Performs the users registration stats operation for the user capability.
+     * Calls `GET /api/v1/users/registration-stats` through the shared IDP-aware Faiber client.
+     * @param params Typed query parameters; omitted members retain backend defaults.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
+    userUsersRegistrationStatsGet(params?: T.UserUsersRegistrationStatsGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.UserUsersRegistrationStatsGetResponse, unknown, {}>>;
+    /**
+     * Performs the user find self operation for the user capability.
+     * Calls `GET /api/v1/users/self` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     userUserFindSelfGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.UserUserFindSelfGetResponse, unknown, {}>>;
-    /** GET /api/v1/users/stats; permission: public/session-derived. */
+    /**
+     * Performs the users stats operation for the user capability.
+     * Calls `GET /api/v1/users/stats` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     userUsersStatsGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.UserUsersStatsGetResponse, unknown, {}>>;
-    /** GET /api/v1/users/sync; permission: public/session-derived. */
+    /**
+     * Performs the sync users operation for the user capability.
+     * Calls `GET /api/v1/users/sync` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed service envelope, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     */
     userSyncUsersGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.UserSyncUsersGetResponse, unknown, {}>>;
 }
 //# sourceMappingURL=operations.d.ts.map