@faiber/faiber-profile 0.24.1 → 1.0.0

package/dist/operations.js

@@ -1,2377 +1,2619 @@
 import { ServiceApi, urlEncoded } from "@faiber/sdk-core";
 export class ProfileOperations extends ServiceApi {
     /**
-     * Performs the openapi json operation for the router capability.
+     * Read raw generated OpenAPI JSON; annotations do not establish complete mounted-route coverage.
      * Calls `GET /api/openapi.json` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: no local authentication or permission check; deployment gateway policy is separate.
      */
     routerOpenapiJsonGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/openapi.json` });
     }
     /**
-     * Performs the address get operation for the option capability.
+     * Read stored addresses by resolving supplied IDP user_ids to Profile UUIDs. The local mount is public.
      * Calls `POST /api/v1/address/get` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: no local authentication or permission check; deployment gateway policy is separate.
      */
     optionAddressGetPost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/address/get`, data: data });
     }
     /**
-     * Performs the get chat context operation for the session capability.
-     * Calls `GET /api/v1/auth/chat-context` through the shared IDP-aware Faiber client.
+     * List all deployment summary configuration rows, newest first.
+     * Calls `GET /api/v1/ai-summaries/configurations` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:configure.
      */
-    sessionGetChatContextGet(options) {
-        return this.client.request({ ...options, method: "GET", url: `/api/v1/auth/chat-context` });
+    aiSummaryConfigurationsGet(options) {
+        return this.client.request({ ...options, method: "GET", url: `/api/v1/ai-summaries/configurations` });
     }
     /**
-     * Performs the get self operation for the session capability.
-     * Calls `GET /api/v1/auth/self` through the shared IDP-aware Faiber client.
+     * Create a role configuration after confirming the IDP role exists; duplicate role configuration returns 409. Success status is 201.
+     * Calls `POST /api/v1/ai-summaries/configurations` through the shared IDP-aware Faiber client.
+     * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:configure.
      */
-    sessionGetSelfGet(options) {
-        return this.client.request({ ...options, method: "GET", url: `/api/v1/auth/self` });
+    aiSummaryConfigurationCreatePost(data, options) {
+        return this.client.request({ ...options, method: "POST", url: `/api/v1/ai-summaries/configurations`, data: data });
     }
     /**
-     * Performs the update self name operation for the session capability.
-     * Calls `PATCH /api/v1/auth/self` through the shared IDP-aware Faiber client.
+     * Read one deployment configuration row by UUID.
+     * Calls `GET /api/v1/ai-summaries/configurations/{id}` through the shared IDP-aware Faiber client.
+     * @param id Backend path identifier `id`.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:configure.
+     */
+    aiSummaryConfigurationGet(id, options) {
+        return this.client.request({ ...options, method: "GET", url: `/api/v1/ai-summaries/configurations/${encodeURIComponent(id)}` });
+    }
+    /**
+     * Replace a configuration draft with required expected_version; role_id is immutable, missing version returns 422, changed version returns 409.
+     * Calls `PUT /api/v1/ai-summaries/configurations/{id}` through the shared IDP-aware Faiber client.
+     * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:configure.
      */
-    sessionUpdateSelfNamePatch(data, options) {
-        return this.client.request({ ...options, method: "PATCH", url: `/api/v1/auth/self`, data: data });
+    aiSummaryConfigurationPut(id, data, options) {
+        return this.client.request({ ...options, method: "PUT", url: `/api/v1/ai-summaries/configurations/${encodeURIComponent(id)}`, data: data });
     }
     /**
-     * Performs the complete onboarding operation for the session capability.
-     * Calls `PUT /api/v1/auth/self/onboarding` through the shared IDP-aware Faiber client.
+     * Queue an eligible subject draft preview and return job_id/run_id with status 202. Global generation must be on; preview also requires subject read permission. Preview does not publish.
+     * Calls `POST /api/v1/ai-summaries/configurations/{id}/preview` through the shared IDP-aware Faiber client.
+     * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:configure.
      */
-    sessionCompleteOnboardingPut(data, options) {
-        return this.client.request({ ...options, method: "PUT", url: `/api/v1/auth/self/onboarding`, data: data });
+    aiSummaryPreviewPost(id, data, options) {
+        return this.client.request({ ...options, method: "POST", url: `/api/v1/ai-summaries/configurations/${encodeURIComponent(id)}/preview`, data: data });
     }
     /**
-     * Performs the index operation for the campaign capability.
-     * Calls `GET /api/v1/campaign` through the shared IDP-aware Faiber client.
+     * Publish an immutable next revision using draft version concurrency, then enqueue eligible role members. Duplicate identical publication or changed draft returns 409.
+     * Calls `POST /api/v1/ai-summaries/configurations/{id}/publish` through the shared IDP-aware Faiber client.
+     * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:configure.
      */
-    campaignIndexGet(options) {
-        return this.client.request({ ...options, method: "GET", url: `/api/v1/campaign` });
+    aiSummaryPublishPost(id, options) {
+        return this.client.request({ ...options, method: "POST", url: `/api/v1/ai-summaries/configurations/${encodeURIComponent(id)}/publish` });
     }
     /**
-     * Performs the my contributions operation for the campaign capability.
-     * Calls `GET /api/v1/campaign-profile/me/contributions` through the shared IDP-aware Faiber client.
+     * Enable a published role configuration and enqueue eligible subjects, or disable it and cancel its jobs; enabling without a publication returns 409.
+     * Calls `PATCH /api/v1/ai-summaries/configurations/{id}/status` through the shared IDP-aware Faiber client.
+     * @param id Backend path identifier `id`.
+     * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:configure.
      */
-    campaignMyContributionsGet(options) {
-        return this.client.request({ ...options, method: "GET", url: `/api/v1/campaign-profile/me/contributions` });
+    aiSummaryStatusPatch(id, data, options) {
+        return this.client.request({ ...options, method: "PATCH", url: `/api/v1/ai-summaries/configurations/${encodeURIComponent(id)}/status`, data: data });
     }
     /**
-     * Performs the show operation for the campaign capability.
-     * Calls `GET /api/v1/campaign/{id}` through the shared IDP-aware Faiber client.
+     * Validate draft formulas, budgets, sources, IDP role and tool-capable model without publishing; invalid drafts return 422.
+     * Calls `POST /api/v1/ai-summaries/configurations/{id}/validate` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:configure.
      */
-    campaignShowGet(id, options) {
-        return this.client.request({ ...options, method: "GET", url: `/api/v1/campaign/${encodeURIComponent(id)}` });
+    aiSummaryValidatePost(id, options) {
+        return this.client.request({ ...options, method: "POST", url: `/api/v1/ai-summaries/configurations/${encodeURIComponent(id)}/validate` });
+    }
+    /**
+     * Page deployment jobs using subject/role/status; defaults 1/25 and caps 100. Preview configuration, lease token and requested_by are withheld.
+     * Calls `GET /api/v1/ai-summaries/jobs` through the shared IDP-aware Faiber client.
+     * @param params Typed query parameters; omitted members retain backend defaults.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:manage.
+     */
+    aiSummaryJobsGet(params, options) {
+        return this.client.request({ ...options, method: "GET", url: `/api/v1/ai-summaries/jobs`, params });
     }
     /**
-     * Performs the contribute operation for the campaign capability.
-     * Calls `POST /api/v1/campaign/{id}/contributions` through the shared IDP-aware Faiber client.
+     * Reset a failed reviewable/terminal job for this deployment and return 202. Nonretryable or missing jobs return 409.
+     * Calls `POST /api/v1/ai-summaries/jobs/{id}/retry` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:manage.
+     */
+    aiSummaryRetryPost(id, options) {
+        return this.client.request({ ...options, method: "POST", url: `/api/v1/ai-summaries/jobs/${encodeURIComponent(id)}/retry` });
+    }
+    /**
+     * Read persisted deployment/subject/role latest state with availability/freshness and nullable job_status. Required role_id; read_own restricts to current subject, read_all permits others. GET never generates.
+     * Calls `GET /api/v1/ai-summaries/latest` through the shared IDP-aware Faiber client.
+     * @param params Typed query parameters; omitted members retain backend defaults.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:read_own.
+     */
+    aiSummaryLatestGet(params, options) {
+        return this.client.request({ ...options, method: "GET", url: `/api/v1/ai-summaries/latest`, params });
+    }
+    /**
+     * Read the configured Agentic project-funded model catalog, including tool support.
+     * Calls `GET /api/v1/ai-summaries/models` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:configure.
+     */
+    aiSummaryModelsGet(options) {
+        return this.client.request({ ...options, method: "GET", url: `/api/v1/ai-summaries/models` });
+    }
+    /**
+     * Queue 1–100 eligible subject-role pairs from published configurations and return 202 with job IDs; global and role generation must be enabled.
+     * Calls `POST /api/v1/ai-summaries/refresh` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:manage.
      */
-    campaignContributePost(id, data, options) {
-        return this.client.request({ ...options, method: "POST", url: `/api/v1/campaign/${encodeURIComponent(id)}/contributions`, data: data });
+    aiSummaryRefreshPost(data, options) {
+        return this.client.request({ ...options, method: "POST", url: `/api/v1/ai-summaries/refresh`, data: data });
+    }
+    /**
+     * Read IDP role catalog enriched with matching deployment summary configuration IDs/enabled flags.
+     * Calls `GET /api/v1/ai-summaries/roles` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:configure.
+     */
+    aiSummaryRolesGet(options) {
+        return this.client.request({ ...options, method: "GET", url: `/api/v1/ai-summaries/roles` });
+    }
+    /**
+     * Read a persisted deployment run only with subject read_own/read_all authority.
+     * Calls `GET /api/v1/ai-summaries/runs/{id}` through the shared IDP-aware Faiber client.
+     * @param id Backend path identifier `id`.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:read_own.
+     */
+    aiSummaryRunGet(id, options) {
+        return this.client.request({ ...options, method: "GET", url: `/api/v1/ai-summaries/runs/${encodeURIComponent(id)}` });
+    }
+    /**
+     * Read deployment-scoped global generation, concurrency and retention settings; reading does not invoke a model.
+     * Calls `GET /api/v1/ai-summaries/settings` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:configure.
+     */
+    aiSummarySettingsGet(options) {
+        return this.client.request({ ...options, method: "GET", url: `/api/v1/ai-summaries/settings` });
+    }
+    /**
+     * Set concurrency 1–16 and retention 1–3650 days; disabling generation cancels pending/retry/generating jobs for this deployment.
+     * Calls `PUT /api/v1/ai-summaries/settings` through the shared IDP-aware Faiber client.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:configure.
+     */
+    aiSummarySettingsPut(data, options) {
+        return this.client.request({ ...options, method: "PUT", url: `/api/v1/ai-summaries/settings`, data: data });
+    }
+    /**
+     * Read source capabilities, configured availability and concrete tool input/output JSON schemas.
+     * Calls `GET /api/v1/ai-summaries/sources` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:configure.
+     */
+    aiSummarySourcesGet(options) {
+        return this.client.request({ ...options, method: "GET", url: `/api/v1/ai-summaries/sources` });
+    }
+    /**
+     * Check an authenticated source adapter through Agentic. Connectivity alone does not establish eligible subject evidence or activate a configuration.
+     * Calls `POST /api/v1/ai-summaries/sources/{source}/check` through the shared IDP-aware Faiber client.
+     * @param source Backend path identifier `source`.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:configure.
+     */
+    aiSummarySourceCheckPost(source, options) {
+        return this.client.request({ ...options, method: "POST", url: `/api/v1/ai-summaries/sources/${encodeURIComponent(source)}/check` });
     }
     /**
-     * Performs the index operation for the city capability.
+     * Page persisted deployment summary runs using subject/role/status; defaults page=1/per_page=25 with size cap 100. read_own restricts the subject unless read_all is present.
+     * Calls `GET /api/v1/ai-summaries/summaries` through the shared IDP-aware Faiber client.
+     * @param params Typed query parameters; omitted members retain backend defaults.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP-validated Bearer/cookie actor; profile:ai_summary:read_own.
+     */
+    aiSummarySummariesGet(params, options) {
+        return this.client.request({ ...options, method: "GET", url: `/api/v1/ai-summaries/summaries`, params });
+    }
+    /**
+     * Read Chat-scope context: remove id, user_id, properties and services from the profile; return visible properties as a separate object. Office/LMS histories are omitted.
+     * Calls `GET /api/v1/auth/chat-context` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
+     */
+    sessionGetChatContextGet(options) {
+        return this.client.request({ ...options, method: "GET", url: `/api/v1/auth/chat-context` });
+    }
+    /**
+     * Read current gateway identity roles, permissions and Full-scope profile.
+     * Calls `GET /api/v1/auth/self` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
+     */
+    sessionGetSelfGet(options) {
+        return this.client.request({ ...options, method: "GET", url: `/api/v1/auth/self` });
+    }
+    /**
+     * Set current identity fa/en name strings; first name must be nonempty, each name at most 100 characters, locale fa/en, and embedded control characters are rejected with 422.
+     * Calls `PATCH /api/v1/auth/self` through the shared IDP-aware Faiber client.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
+     */
+    sessionUpdateSelfNamePatch(data, options) {
+        return this.client.request({ ...options, method: "PATCH", url: `/api/v1/auth/self`, data: data });
+    }
+    /**
+     * Validate age/height/weight/goal, merge onboarding app fields in PostgreSQL, and return the current session. Caller-supplied identity/role fields are rejected.
+     * Calls `PUT /api/v1/auth/self/onboarding` through the shared IDP-aware Faiber client.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
+     */
+    sessionCompleteOnboardingPut(data, options) {
+        return this.client.request({ ...options, method: "PUT", url: `/api/v1/auth/self/onboarding`, data: data });
+    }
+    /**
+     * List the city records. List pagination defaults 1/15 and caps at 100; filters apply before pagination, and deleted records are hidden unless filter[trashed]=only/with.
      * Calls `GET /api/v1/city` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: city:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission city:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     cityIndexGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/city`, params });
     }
     /**
-     * Performs the store operation for the city capability.
+     * Create the city record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `POST /api/v1/city` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: city:create.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission city:create; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     cityStorePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/city`, data: data });
     }
     /**
-     * Performs the destroy operation for the city capability.
+     * Soft-delete the city record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `DELETE /api/v1/city/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: city:delete.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission city:delete; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     cityDestroyDelete(id, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/city/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the show operation for the city capability.
+     * Read the city record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `GET /api/v1/city/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: city:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission city:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     cityShowGet(id, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/city/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the update operation for the city capability.
+     * Update supplied fields on the city record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `PATCH /api/v1/city/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: city:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission city:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     cityUpdatePatch(id, data, options) {
         return this.client.request({ ...options, method: "PATCH", url: `/api/v1/city/${encodeURIComponent(id)}`, data: data });
     }
     /**
-     * Performs the update operation for the city capability.
+     * Update supplied fields on the city record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `PUT /api/v1/city/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: city:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission city:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     cityUpdatePut(id, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/city/${encodeURIComponent(id)}`, data: data });
     }
     /**
-     * Performs the force destroy operation for the city capability.
+     * Permanently delete the city record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `DELETE /api/v1/city/force/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: city:delete.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission city:delete; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     cityForceDestroyDelete(id, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/city/force/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the restore operation for the city capability.
+     * Restore the city record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `GET /api/v1/city/undo/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: city:delete.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission city:delete; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     cityRestoreGet(id, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/city/undo/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the index operation for the country capability.
+     * List the country records. List pagination defaults 1/15 and caps at 100; filters apply before pagination, and deleted records are hidden unless filter[trashed]=only/with.
      * Calls `GET /api/v1/country` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: country:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission country:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     countryIndexGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/country`, params });
     }
     /**
-     * Performs the store operation for the country capability.
+     * Create the country record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `POST /api/v1/country` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: country:create.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission country:create; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     countryStorePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/country`, data: data });
     }
     /**
-     * Performs the destroy operation for the country capability.
+     * Soft-delete the country record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `DELETE /api/v1/country/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: country:delete.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission country:delete; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     countryDestroyDelete(id, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/country/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the show operation for the country capability.
+     * Read the country record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `GET /api/v1/country/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: country:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission country:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     countryShowGet(id, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/country/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the update operation for the country capability.
+     * Update supplied fields on the country record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `PATCH /api/v1/country/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: country:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission country:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     countryUpdatePatch(id, data, options) {
         return this.client.request({ ...options, method: "PATCH", url: `/api/v1/country/${encodeURIComponent(id)}`, data: data });
     }
     /**
-     * Performs the update operation for the country capability.
+     * Update supplied fields on the country record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `PUT /api/v1/country/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: country:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission country:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     countryUpdatePut(id, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/country/${encodeURIComponent(id)}`, data: data });
     }
     /**
-     * Performs the force destroy operation for the country capability.
+     * Permanently delete the country record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `DELETE /api/v1/country/force/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: country:delete.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission country:delete; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     countryForceDestroyDelete(id, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/country/force/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the restore operation for the country capability.
+     * Restore the country record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `GET /api/v1/country/undo/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: country:delete.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission country:delete; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     countryRestoreGet(id, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/country/undo/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the index operation for the custom type capability.
+     * Page undeleted custom types by name; filter[search] is a name substring, defaults 1/15 and size caps 100.
      * Calls `GET /api/v1/custom-type` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     customTypeIndexGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/custom-type`, params });
     }
     /**
-     * Performs the store operation for the custom type capability.
+     * Create a custom type with at least one option matching value_type; invalid options return 422 and duplicate names 409. Options may be raw values or {value,code,labels} objects.
      * Calls `POST /api/v1/custom-type` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     customTypeStorePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/custom-type`, data: data });
     }
     /**
-     * Performs the destroy operation for the custom type capability.
+     * Soft-delete a custom type; acknowledgement data is an empty object.
      * Calls `DELETE /api/v1/custom-type/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     customTypeDestroyDelete(id, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/custom-type/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the show operation for the custom type capability.
+     * Read an undeleted custom type by UUID.
      * Calls `GET /api/v1/custom-type/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     customTypeShowGet(id, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/custom-type/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the update operation for the custom type capability.
+     * Update supplied custom type fields and validate the resulting option list against value_type.
      * Calls `PATCH /api/v1/custom-type/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     customTypeUpdatePatch(id, data, options) {
         return this.client.request({ ...options, method: "PATCH", url: `/api/v1/custom-type/${encodeURIComponent(id)}`, data: data });
     }
     /**
-     * Performs the dependency operation for the option capability.
+     * Read constant gender/status/employee_type choices.
      * Calls `GET /api/v1/dependency` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: dependency:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission dependency:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     optionDependencyGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/dependency` });
     }
     /**
-     * Performs the index operation for the education capability.
+     * List active undeleted education {id,name} options ordered by name/id.
      * Calls `GET /api/v1/education` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     educationIndexGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/education` });
     }
     /**
-     * Performs the store operation for the education capability.
+     * Create an education option from a trimmed name containing 1–255 characters; invalid names return 422.
      * Calls `POST /api/v1/education` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     educationStorePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/education`, data: data });
     }
     /**
-     * Performs the dependencies operation for the education capability.
+     * Read attendance choices, active referral source codes and level_max_length=64.
      * Calls `GET /api/v1/education/dependencies` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     educationDependenciesGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/education/dependencies` });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * As fitness admin, import validated active catalog items from an immutable published Knowledge release in one transaction.
      * Calls `POST /api/v1/fitness/admin/catalog` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: fitness:admin plus administrator role.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission fitness:admin; gateway enforces ACL metadata, local annotation itself is not a permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessImportCatalogPost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/fitness/admin/catalog`, data: data });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * As fitness admin, idempotently provision the main gym and Asset products. Validate manager/AI-coach profiles and required model/assistant choices; enabling requires a complete catalog.
      * Calls `POST /api/v1/fitness/admin/provision` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: fitness:admin plus administrator role.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission fitness:admin; gateway enforces ACL metadata, local annotation itself is not a permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessProvisionPost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/fitness/admin/provision`, data: data });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * Read enabled catalog entries as an enabled member, manager or enabled main-gym coach. kind/category/name query filters apply, offset floors at zero, and at most 100 rows are returned.
      * Calls `GET /api/v1/fitness/catalog` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessListCatalogGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/fitness/catalog`, params });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * List enabled coaches and enabled published tariffs for the current enabled member gym, with bilingual coach_name.
      * Calls `GET /api/v1/fitness/coaches` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessCoachesGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/fitness/coaches` });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * Read current enabled member entitled coaching context, active AI/trial plans, Full-scope profile and compact catalog. Does not accept a target user ID.
      * Calls `GET /api/v1/fitness/context` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessContextGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/fitness/context` });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * Read the current enabled member intake draft, or null if no draft exists.
      * Calls `GET /api/v1/fitness/intake` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessIntakeGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/fitness/intake` });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * Validate and save current member intake using expected_version; stale versions return 409 and no duplicate draft is created.
      * Calls `PUT /api/v1/fitness/intake` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessSaveIntakePut(data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/fitness/intake`, data: data });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * Read at most 100 unread current-user order events, newest first.
      * Calls `GET /api/v1/fitness/notifications` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessNotificationsGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/fitness/notifications` });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * Mark a current-user order notification read; returns {read:true} even when no owned row matched.
      * Calls `POST /api/v1/fitness/notifications/{id}/read` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessReadNotificationPost(id, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/fitness/notifications/${encodeURIComponent(id)}/read` });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * List up to 200 own/assigned/managed orders, or all orders for fitness admin; job_token and model_snapshot are withheld.
      * Calls `GET /api/v1/fitness/orders` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessOrdersGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/fitness/orders` });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * Purchase at server-owned prices or selected human tariff. Idempotency UUID is scoped to the current member; conflicting reuse returns 422. Trial bundles consume explicit entitlement; paid orders create Payment transactions.
      * Calls `POST /api/v1/fitness/orders` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessPurchasePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/fitness/orders`, data: data });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * Read an authorized order with current plan and pending proposals; owner, selected coach, gym manager or fitness admin may read.
      * Calls `GET /api/v1/fitness/orders/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessShowGetApiV1FitnessOrdersId(id, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/fitness/orders/${encodeURIComponent(id)}` });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * Apply a versioned order transition: owner retry/retry_payment/refund, selected enabled coach accept/decline. Invalid transitions return 422; stale update returns 409.
      * Calls `POST /api/v1/fitness/orders/{id}/action` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessActionPost(id, data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/fitness/orders/${encodeURIComponent(id)}/action`, data: data });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * Assign and activate a validated human coaching plan as the selected enabled coach; base revision detects stale writes.
      * Calls `POST /api/v1/fitness/orders/{id}/plan` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessAssignPost(id, data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/fitness/orders/${encodeURIComponent(id)}/plan`, data: data });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * Read server-owned one-time plan prices in IRR and support credit quotas. Human tariffs and meal upgrades are separate workflows.
      * Calls `GET /api/v1/fitness/products` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessProductsGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/fitness/products` });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * Validate a revision for an owned AI/trial order using base_revision_id; create a proposal without activating it.
      * Calls `POST /api/v1/fitness/proposals` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessProposePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/fitness/proposals`, data: data });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * Read a plan revision only after authorizing its owning order.
      * Calls `GET /api/v1/fitness/revisions/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessRevisionGet(id, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/fitness/revisions/${encodeURIComponent(id)}` });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * As the order owner, accept a proposed revision using its base revision or reject it. Returns a revision receipt on accept and {status:rejected} on rejection.
      * Calls `POST /api/v1/fitness/revisions/{id}/review` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessReviewPost(id, data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/fitness/revisions/${encodeURIComponent(id)}/review`, data: data });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * Read current membership, active plans, manager flag, assistant ID, paid/trial chat balance and optional trial entitlement.
      * Calls `GET /api/v1/fitness/self` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessMeGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/fitness/self` });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * Read the main gym configuration as its manager or fitness admin.
      * Calls `GET /api/v1/fitness/settings` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessSettingsGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/fitness/settings` });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * Save manager model/STT/TTS selections after Chat validates them; expected_version detects stale configuration with 409.
      * Calls `PUT /api/v1/fitness/settings` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessSaveSettingsPut(data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/fitness/settings`, data: data });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * As manager or the selected coach, validate and version a tariff and publish its Asset product. Expected-version conflicts return 409.
      * Calls `POST /api/v1/fitness/tariffs` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessSaveTariffPost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/fitness/tariffs`, data: data });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * Read the manager gym coach roster with profile names and tariff snapshots.
      * Calls `GET /api/v1/fitness/team` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessTeamGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/fitness/team` });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * As manager, enroll/disable a coach within the same gym after verifying a Profile exists; the AI coach cannot be assigned here.
      * Calls `PUT /api/v1/fitness/team` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessSaveCoachPut(data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/fitness/team`, data: data });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * Redeem a valid gift for an eligible verified new gym member. Returns frozen trial entitlement; duplicate same-gift redemption reuses it, other prior trials are rejected.
      * Calls `POST /api/v1/fitness/trial/redeem` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessRedeemPost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/fitness/trial/redeem`, data: data });
     }
     /**
-     * Use the paid coaching workflow with server-owned prices, membership and revision checks. Reuse idempotency keys for purchases; stale versions return 409, unauthorized relationships return 403.
+     * Read model/STT/TTS choices and version as an enabled member or manager; payment is not required.
      * Calls `GET /api/v1/fitness/voice-settings` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated gym membership, manager/coach relationship or owned order as required by the operation.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check; operation also enforces its current-member/order/coach/manager role as documented.
      */
     fitnessVoiceSettingsGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/fitness/voice-settings` });
     }
     /**
-     * Performs the identity operation for the option capability.
+     * Read the current gateway identity profile using Get-scope property/service visibility.
      * Calls `GET /api/v1/identity` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     optionIdentityGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/identity` });
     }
     /**
-     * Performs the integration docs show operation for the integration capability.
+     * Read HTTP integration metadata and SDK snippets; optional direct transport fields are omitted when absent.
      * Calls `GET /api/v1/integration/docs` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: admin:integration:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission admin:integration:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     integrationIntegrationDocsShowGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/integration/docs` });
     }
     /**
-     * Performs the flow integration show operation for the integration capability.
+     * Read the broker queue and event payload field metadata for Profile Flow integration; this does not execute workflows.
      * Calls `GET /api/v1/integration/flow` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: no local authentication or permission check; deployment gateway policy is separate.
      */
     integrationFlowIntegrationShowGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/integration/flow` });
     }
     /**
-     * Performs the reserve operation for the fitness capability.
+     * Reserve one response credit for a trusted Chat turn. Locks quota, checks user/turn binding, consumes paid grant or trial balance, and creates a fifteen-minute reservation lease.
      * Calls `POST /api/v1/internal/fitness-chat/reserve` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: server-only product trial-gift or fitness-chat bearer credential; never browser administration.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: dedicated FITNESS_CHAT_TOKEN Bearer service credential; user IDP credentials do not satisfy this guard.
      */
     fitnessReservePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/internal/fitness-chat/reserve`, data: data });
     }
     /**
-     * Performs the settle operation for the fitness capability.
+     * Settle a trusted Chat turn with required success: consume a reserved response on success or refund once on failure; already-settled turns are idempotent.
      * Calls `POST /api/v1/internal/fitness-chat/settle` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: server-only product trial-gift or fitness-chat bearer credential; never browser administration.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: dedicated FITNESS_CHAT_TOKEN Bearer service credential; user IDP credentials do not satisfy this guard.
      */
     fitnessSettlePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/internal/fitness-chat/settle`, data: data });
     }
     /**
-     * Performs the list operation for the fitness capability.
+     * Read Asset-only trial gifts with page/per_page/search. Defaults 1/25, size caps at 100, page at 100000, and search length at 200. Token hashes are withheld.
      * Calls `GET /api/v1/internal/plans/gifts` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: server-only product trial-gift or fitness-chat bearer credential; never browser administration.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: dedicated PRODUCT_TRIAL_GIFT_SERVICE_TOKEN Bearer service credential; intended for Asset adapter.
      */
     fitnessListGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/internal/plans/gifts`, params });
     }
     /**
-     * Performs the create operation for the fitness capability.
+     * Create an Asset-only gift idempotently by request_id and created_by. Limits require responses 1–59/plans 1–2; token is returned only on initial creation.
      * Calls `POST /api/v1/internal/plans/gifts` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: server-only product trial-gift or fitness-chat bearer credential; never browser administration.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: dedicated PRODUCT_TRIAL_GIFT_SERVICE_TOKEN Bearer service credential; intended for Asset adapter.
      */
     fitnessCreatePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/internal/plans/gifts`, data: data });
     }
     /**
-     * Performs the show operation for the fitness capability.
+     * Read an Asset-only gift record without its token hash.
      * Calls `GET /api/v1/internal/plans/gifts/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: server-only product trial-gift or fitness-chat bearer credential; never browser administration.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: dedicated PRODUCT_TRIAL_GIFT_SERVICE_TOKEN Bearer service credential; intended for Asset adapter.
      */
     fitnessShowGetApiV1InternalPlansGiftsId(id, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/internal/plans/gifts/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the update operation for the fitness capability.
+     * Edit future gift redemption settings; existing entitlement remains frozen. max_uses cannot fall below used_count; token rotation is rejected after first redemption.
      * Calls `PUT /api/v1/internal/plans/gifts/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: server-only product trial-gift or fitness-chat bearer credential; never browser administration.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: dedicated PRODUCT_TRIAL_GIFT_SERVICE_TOKEN Bearer service credential; intended for Asset adapter.
      */
     fitnessUpdatePut(id, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/internal/plans/gifts/${encodeURIComponent(id)}`, data: data });
     }
     /**
-     * Performs the store operation for the log action capability.
+     * Insert an action/meta audit row and return its stored ID/timestamp. meta is arbitrary JSON.
      * Calls `POST /api/v1/log-action` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: log_action:create.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission log_action:create; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     logActionStorePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/log-action`, data: data });
     }
     /**
-     * Performs the store slug operation for the log action capability.
+     * Insert an audit row with the path slug overriding request action; metadata remains arbitrary JSON.
      * Calls `POST /api/v1/log-action/{slug}` through the shared IDP-aware Faiber client.
      * @param slug Backend path identifier `slug`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: log_action:create.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission log_action:create; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     logActionStoreSlugPost(slug, data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/log-action/${encodeURIComponent(slug)}`, data: data });
     }
     /**
-     * Performs the store direct operation for the log action capability.
+     * Insert an audit row through the public direct mount with the path slug overriding request action.
      * Calls `POST /api/v1/log-action/direct/{slug}` through the shared IDP-aware Faiber client.
      * @param slug Backend path identifier `slug`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: no local authentication or permission check; deployment gateway policy is separate.
      */
     logActionStoreDirectPost(slug, data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/log-action/direct/${encodeURIComponent(slug)}`, data: data });
     }
     /**
-     * Performs the index operation for the logger capability.
+     * Read all stored audit logs without pagination; local router has no authentication middleware. request/response/meta remain arbitrary JSON.
      * Calls `GET /api/v1/logger` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: no local authentication or permission check; deployment gateway policy is separate.
      */
     loggerIndexGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/logger` });
     }
     /**
-     * Performs the show operation for the logger capability.
+     * Read a stored audit log by UUID; missing row returns data:null.
      * Calls `GET /api/v1/logger/{log}` through the shared IDP-aware Faiber client.
      * @param log Backend path identifier `log`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: no local authentication or permission check; deployment gateway policy is separate.
      */
     loggerShowGet(log, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/logger/${encodeURIComponent(log)}` });
     }
     /**
-     * Performs the parent children get operation for the option capability.
+     * Read children for parent user_ids, merging legacy links with active parent/child relation types and deduplicating pairs. The local mount is public.
      * Calls `POST /api/v1/parent/children/get` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: no local authentication or permission check; deployment gateway policy is separate.
      */
     optionParentChildrenGetPost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/parent/children/get`, data: data });
     }
     /**
-     * Performs the parent get operation for the option capability.
+     * Read legacy parent-link rows for student user_ids. The local mount is public.
      * Calls `POST /api/v1/parent/get` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: no local authentication or permission check; deployment gateway policy is separate.
      */
     optionParentGetPost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/parent/get`, data: data });
     }
     /**
-     * Performs the index operation for the profile capability.
+     * List undeleted profiles with role, active-enrollment, status, normalized literal identity search and dynamic filters applied before pagination. Defaults page=1/per_page=15; per_page caps at 100. filter[trashed] is accepted but does not expose deleted profiles.
      * Calls `GET /api/v1/profile` through the shared IDP-aware Faiber client.
      * Supports live core/property/trusted-event filters, repeated date ranges and sorting before pagination; invalid clauses return HTTP 400.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: /api/v1/profile, profile:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileIndexGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile`, params });
     }
     /**
-     * Performs the avatar show operation for the profile capability.
+     * Read binary image or private media bytes. Required key must belong to the supplied owner UUID and must not contain traversal; 403 rejects unsafe keys, 404 means the object is unavailable. Returns raw bytes with service Content-Type and Cache-Control headers.
      * Calls `GET /api/v1/profile-media/{uuid}/avatar` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: public read; key restricted to requested owner UUID.
      */
     profileAvatarShowGetApiV1ProfileMediaUuidAvatar(uuid, params, options) {
-        return this.client.request({ ...options, method: "GET", url: `/api/v1/profile-media/${encodeURIComponent(uuid)}/avatar`, params });
+        return this.client.request({ ...options, method: "GET", url: `/api/v1/profile-media/${encodeURIComponent(uuid)}/avatar`, params, responseType: "arraybuffer" });
     }
     /**
-     * Performs the index operation for the profile property capability.
+     * Read binary image or private media bytes. Required key must belong to the supplied owner UUID and must not contain traversal; 403 rejects unsafe keys, 404 means the object is unavailable. Returns raw bytes with service Content-Type and Cache-Control headers.
+     * Calls `GET /api/v1/profile-media/{uuid}/images` through the shared IDP-aware Faiber client.
+     * @param uuid Backend path identifier `uuid`.
+     * @param params Typed query parameters; omitted members retain backend defaults.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: public read; key restricted to requested owner UUID.
+     */
+    profileImageShowGet(uuid, params, options) {
+        return this.client.request({ ...options, method: "GET", url: `/api/v1/profile-media/${encodeURIComponent(uuid)}/images`, params, responseType: "arraybuffer" });
+    }
+    /**
+     * List the property definition records. List pagination defaults 1/15 and caps at 100; filters apply before pagination, and deleted records are hidden unless filter[trashed]=only/with.
      * Calls `GET /api/v1/profile-property-definition` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile_property_definition:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile_property_definition:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profilePropertyIndexGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile-property-definition`, params });
     }
     /**
-     * Performs the store operation for the profile property capability.
+     * Create the property definition record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `POST /api/v1/profile-property-definition` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile_property_definition:create.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile_property_definition:create; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profilePropertyStorePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/profile-property-definition`, data: data });
     }
     /**
-     * Performs the destroy operation for the profile property capability.
+     * Soft-delete the property definition record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `DELETE /api/v1/profile-property-definition/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile_property_definition:delete.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile_property_definition:delete; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profilePropertyDestroyDelete(id, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/profile-property-definition/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the show operation for the profile property capability.
+     * Read the property definition record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `GET /api/v1/profile-property-definition/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile_property_definition:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile_property_definition:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profilePropertyShowGet(id, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile-property-definition/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the update operation for the profile property capability.
+     * Update supplied fields on the property definition record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `PATCH /api/v1/profile-property-definition/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile_property_definition:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile_property_definition:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profilePropertyUpdatePatch(id, data, options) {
         return this.client.request({ ...options, method: "PATCH", url: `/api/v1/profile-property-definition/${encodeURIComponent(id)}`, data: data });
     }
     /**
-     * Performs the update operation for the profile property capability.
+     * Update supplied fields on the property definition record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `PUT /api/v1/profile-property-definition/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile_property_definition:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile_property_definition:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profilePropertyUpdatePut(id, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/profile-property-definition/${encodeURIComponent(id)}`, data: data });
     }
     /**
-     * Performs the force destroy operation for the profile property capability.
+     * Permanently delete the property definition record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `DELETE /api/v1/profile-property-definition/force/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile_property_definition:force_delete.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile_property_definition:force_delete; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profilePropertyForceDestroyDelete(id, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/profile-property-definition/force/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the restore operation for the profile property capability.
+     * Restore the property definition record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `GET /api/v1/profile-property-definition/undo/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile_property_definition:restore.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile_property_definition:restore; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profilePropertyRestoreGet(id, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile-property-definition/undo/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the show profile referral operation for the referral capability.
+     * Read the raw Profile row by local Profile UUID; this is not the shaped public profile response.
      * Calls `GET /api/v1/profile-referral/{profile_id}` through the shared IDP-aware Faiber client.
      * @param profileId Backend path identifier `profile_id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     referralShowProfileReferralGet(profileId, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile-referral/${encodeURIComponent(profileId)}` });
     }
     /**
-     * Performs the assign operation for the referral capability.
+     * Replace referral source/referrer by local Profile UUID; null/omitted fields clear them. Reject self/cyclic referrals, chains beyond 64 levels and inactive/missing sources or referrers.
      * Calls `PUT /api/v1/profile-referral/{profile_id}` through the shared IDP-aware Faiber client.
      * @param profileId Backend path identifier `profile_id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     referralAssignPut(profileId, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/profile-referral/${encodeURIComponent(profileId)}`, data: data });
     }
     /**
-     * Performs the list relations operation for the relation capability.
+     * List relations by optional endpoint profile_id and active flag, newest first.
      * Calls `GET /api/v1/profile-relation` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     relationListRelationsGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile-relation`, params });
     }
     /**
-     * Performs the create relation operation for the relation capability.
+     * Create relation plus managed inverse atomically after active-type, endpoint, self-link and cardinality/status constraint checks. Returns one or two rows.
      * Calls `POST /api/v1/profile-relation` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     relationCreateRelationPost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/profile-relation`, data: data });
     }
     /**
-     * Performs the delete relation operation for the relation capability.
+     * Permanently delete a relation and its inverse atomically.
      * Calls `DELETE /api/v1/profile-relation/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     relationDeleteRelationDelete(id, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/profile-relation/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the show relation operation for the relation capability.
+     * Read a relation by UUID.
      * Calls `GET /api/v1/profile-relation/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     relationShowRelationGet(id, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile-relation/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the update relation operation for the relation capability.
+     * Update object metadata/active flag on a relation and its managed inverse atomically; returns updated rows.
      * Calls `PUT /api/v1/profile-relation/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     relationUpdateRelationPut(id, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/profile-relation/${encodeURIComponent(id)}`, data: data });
     }
     /**
-     * Performs the delete parent operation for the profile capability.
+     * Delete matching legacy student/parent IDP UUID links and return an empty acknowledgement.
      * Calls `DELETE /api/v1/profile/{student_uuid}/delete/parent/{parent_uuid}` through the shared IDP-aware Faiber client.
      * @param studentUuid Backend path identifier `student_uuid`.
      * @param parentUuid Backend path identifier `parent_uuid`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileDeleteParentDelete(studentUuid, parentUuid, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/profile/${encodeURIComponent(studentUuid)}/delete/parent/${encodeURIComponent(parentUuid)}` });
     }
     /**
-     * Performs the destroy operation for the profile capability.
+     * Soft-delete a profile by IDP user UUID; returns an empty acknowledgement.
      * Calls `DELETE /api/v1/profile/{uuid}` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:delete.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:delete; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileDestroyDelete(uuid, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/profile/${encodeURIComponent(uuid)}` });
     }
     /**
-     * Performs the show operation for the profile capability.
+     * Read a profile by IDP user UUID first, falling back to local Profile UUID; return Get-scope properties/services and Office/LMS projections.
      * Calls `GET /api/v1/profile/{uuid}` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileShowGet(uuid, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/${encodeURIComponent(uuid)}` });
     }
     /**
-     * Performs the update operation for the profile capability.
+     * Atomically patch profile scalars, app/meta and validated properties, then rebuild search. Resolves IDP user UUID first and local Profile UUID second. Omission preserves values; job:null clears, while other nullable scalar nulls deserialize as omission in this pinned model.
      * Calls `PATCH /api/v1/profile/{uuid}` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileUpdatePatch(uuid, data, options) {
         return this.client.request({ ...options, method: "PATCH", url: `/api/v1/profile/${encodeURIComponent(uuid)}`, data: data });
     }
     /**
-     * Performs the show admin operation for the profile capability.
+     * Read an admin profile by IDP user UUID with admin-visible properties and trusted service data.
      * Calls `GET /api/v1/profile/{uuid}/admin` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:read_admin.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:read_admin; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileShowAdminGet(uuid, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/${encodeURIComponent(uuid)}/admin` });
     }
     /**
-     * Performs the avatar delete operation for the profile capability.
+     * Clear the owned/authorized user avatar reference and attempt object cleanup; returns an empty acknowledgement.
      * Calls `DELETE /api/v1/profile/{uuid}/avatar` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     profileAvatarDeleteDelete(uuid, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/profile/${encodeURIComponent(uuid)}/avatar` });
     }
     /**
-     * Performs the avatar show operation for the profile capability.
+     * Read binary image or private media bytes. Required key must belong to the supplied owner UUID and must not contain traversal; 403 rejects unsafe keys, 404 means the object is unavailable. Returns raw bytes with service Content-Type and Cache-Control headers.
      * Calls `GET /api/v1/profile/{uuid}/avatar` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: public read; key restricted to requested owner UUID.
      */
     profileAvatarShowGetApiV1ProfileUuidAvatar(uuid, params, options) {
-        return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/${encodeURIComponent(uuid)}/avatar`, params });
+        return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/${encodeURIComponent(uuid)}/avatar`, params, responseType: "arraybuffer" });
     }
     /**
-     * Performs the avatar store operation for the profile capability.
+     * Upload the multipart file field as JPEG, PNG or WebP (up to 5 MiB). Returns url and key; 413 rejects oversize, 415 unsupported media, 422 absent/empty file, and 503 unconfigured storage.
      * Calls `POST /api/v1/profile/{uuid}/avatar` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed multipart form.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated target user or profile:update permission.
      */
     profileAvatarStorePost(uuid, data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/profile/${encodeURIComponent(uuid)}/avatar`, data: data });
     }
     /**
-     * Performs the delete address operation for the profile capability.
+     * Delete an address by exact title and IDP user UUID; returns an empty acknowledgement even if the title has no row.
      * Calls `DELETE /api/v1/profile/{uuid}/delete/address/{title}` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param title Backend path identifier `title`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileDeleteAddressDelete(uuid, title, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/profile/${encodeURIComponent(uuid)}/delete/address/${encodeURIComponent(title)}` });
     }
     /**
-     * Performs the update employee type operation for the profile capability.
+     * Set employee_type for an IDP user UUID and return the Get-scope profile.
      * Calls `PATCH /api/v1/profile/{uuid}/employee-type` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update_employee_type.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update_employee_type; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileUpdateEmployeeTypePatch(uuid, data, options) {
         return this.client.request({ ...options, method: "PATCH", url: `/api/v1/profile/${encodeURIComponent(uuid)}/employee-type`, data: data });
     }
     /**
-     * Performs the update employee type operation for the profile capability.
+     * Set employee_type for an IDP user UUID and return the Get-scope profile.
      * Calls `PUT /api/v1/profile/{uuid}/employee-type` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update_employee_type.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update_employee_type; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileUpdateEmployeeTypePut(uuid, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/profile/${encodeURIComponent(uuid)}/employee-type`, data: data });
     }
     /**
-     * Performs the update freemium operation for the profile capability.
+     * Set freemium_session_limit for an IDP user UUID and return the Get-scope profile.
      * Calls `PATCH /api/v1/profile/{uuid}/freemium-session-limit` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:freemium_session_limit.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:freemium_session_limit; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileUpdateFreemiumPatch(uuid, data, options) {
         return this.client.request({ ...options, method: "PATCH", url: `/api/v1/profile/${encodeURIComponent(uuid)}/freemium-session-limit`, data: data });
     }
     /**
-     * Performs the update freemium operation for the profile capability.
+     * Set freemium_session_limit for an IDP user UUID and return the Get-scope profile.
      * Calls `PUT /api/v1/profile/{uuid}/freemium-session-limit` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:freemium_session_limit.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:freemium_session_limit; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileUpdateFreemiumPut(uuid, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/profile/${encodeURIComponent(uuid)}/freemium-session-limit`, data: data });
     }
     /**
-     * Performs the show full operation for the profile capability.
+     * Read by IDP user UUID or fallback Profile UUID with Full-scope properties/services and Office/LMS projections.
      * Calls `GET /api/v1/profile/{uuid}/full` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileShowFullGet(uuid, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/${encodeURIComponent(uuid)}/full` });
     }
     /**
-     * Performs the media show operation for the profile capability.
+     * Upload the multipart file field as JPEG, PNG or WebP (up to 5 MiB). Returns url and key; 413 rejects oversize, 415 unsupported media, 422 absent/empty file, and 503 unconfigured storage.
+     * Calls `POST /api/v1/profile/{uuid}/images` through the shared IDP-aware Faiber client.
+     * @param uuid Backend path identifier `uuid`.
+     * @param data Typed multipart form.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated target user or profile:update permission.
+     */
+    profileImageStorePost(uuid, data, options) {
+        return this.client.request({ ...options, method: "POST", url: `/api/v1/profile/${encodeURIComponent(uuid)}/images`, data: data });
+    }
+    /**
+     * Read binary image or private media bytes. Required key must belong to the supplied owner UUID and must not contain traversal; 403 rejects unsafe keys, 404 means the object is unavailable. Returns raw bytes with service Content-Type and Cache-Control headers.
      * Calls `GET /api/v1/profile/{uuid}/media` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: authenticated IDP context; key restricted to requested profile UUID.
      */
     profileMediaShowGet(uuid, params, options) {
-        return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/${encodeURIComponent(uuid)}/media`, params });
+        return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/${encodeURIComponent(uuid)}/media`, params, responseType: "arraybuffer" });
     }
     /**
-     * Performs the update properties operation for the profile capability.
+     * Validate active configured properties, update them atomically and rebuild search. Returns updated_keys and array-item added/removed IDs and counts; unknown/inactive keys return 422.
      * Calls `PATCH /api/v1/profile/{uuid}/properties` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileUpdatePropertiesPatch(uuid, data, options) {
         return this.client.request({ ...options, method: "PATCH", url: `/api/v1/profile/${encodeURIComponent(uuid)}/properties`, data: data });
     }
     /**
-     * Performs the update properties operation for the profile capability.
+     * Validate active configured properties, update them atomically and rebuild search. Returns updated_keys and array-item added/removed IDs and counts; unknown/inactive keys return 422.
      * Calls `PUT /api/v1/profile/{uuid}/properties` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileUpdatePropertiesPut(uuid, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/profile/${encodeURIComponent(uuid)}/properties`, data: data });
     }
     /**
-     * Performs the update status operation for the profile capability.
+     * Set status for an IDP user UUID and return the Get-scope profile.
      * Calls `PATCH /api/v1/profile/{uuid}/status` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update_status.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update_status; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileUpdateStatusPatch(uuid, data, options) {
         return this.client.request({ ...options, method: "PATCH", url: `/api/v1/profile/${encodeURIComponent(uuid)}/status`, data: data });
     }
     /**
-     * Performs the update status operation for the profile capability.
+     * Set status for an IDP user UUID and return the Get-scope profile.
      * Calls `PUT /api/v1/profile/{uuid}/status` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update_status.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update_status; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileUpdateStatusPut(uuid, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/profile/${encodeURIComponent(uuid)}/status`, data: data });
     }
     /**
-     * Performs the accountant index operation for the profile capability.
+     * List undeleted profiles with role, active-enrollment, status, normalized literal identity search and dynamic filters applied before pagination. Defaults page=1/per_page=15; per_page caps at 100. filter[trashed] is accepted but does not expose deleted profiles. This mounted route fixes the role to accountant.
      * Calls `GET /api/v1/profile/accountant` through the shared IDP-aware Faiber client.
      * Supports live core/property/trusted-event filters, repeated date ranges and sorting before pagination; invalid clauses return HTTP 400.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:read_accountant; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileAccountantIndexGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/accountant`, params });
     }
     /**
-     * Performs the add address operation for the profile capability.
+     * Replace the address with the same title for an IDP user UUID in a transaction; blank titles return 422. Returns an empty acknowledgement.
      * Calls `PATCH /api/v1/profile/add/address/{uuid}` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileAddAddressPatch(uuid, data, options) {
         return this.client.request({ ...options, method: "PATCH", url: `/api/v1/profile/add/address/${encodeURIComponent(uuid)}`, data: data });
     }
     /**
-     * Performs the add address operation for the profile capability.
+     * Replace the address with the same title for an IDP user UUID in a transaction; blank titles return 422. Returns an empty acknowledgement.
      * Calls `PUT /api/v1/profile/add/address/{uuid}` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileAddAddressPut(uuid, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/profile/add/address/${encodeURIComponent(uuid)}`, data: data });
     }
     /**
-     * Performs the add app operation for the profile capability.
+     * Replace schema-free app JSON for an IDP user UUID and return an empty acknowledgement.
      * Calls `PATCH /api/v1/profile/add/app/{uuid}` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileAddAppPatch(uuid, data, options) {
         return this.client.request({ ...options, method: "PATCH", url: `/api/v1/profile/add/app/${encodeURIComponent(uuid)}`, data: data });
     }
     /**
-     * Performs the add app operation for the profile capability.
+     * Replace schema-free app JSON for an IDP user UUID and return an empty acknowledgement.
      * Calls `PUT /api/v1/profile/add/app/{uuid}` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileAddAppPut(uuid, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/profile/add/app/${encodeURIComponent(uuid)}`, data: data });
     }
     /**
-     * Performs the add parent operation for the profile capability.
+     * Replace the legacy parent link for a student IDP UUID; request user_id is the parent IDP UUID. Returns an empty acknowledgement.
      * Calls `PATCH /api/v1/profile/add/parent/{uuid}` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileAddParentPatch(uuid, data, options) {
         return this.client.request({ ...options, method: "PATCH", url: `/api/v1/profile/add/parent/${encodeURIComponent(uuid)}`, data: data });
     }
     /**
-     * Performs the add parent operation for the profile capability.
+     * Replace the legacy parent link for a student IDP UUID; request user_id is the parent IDP UUID. Returns an empty acknowledgement.
      * Calls `PUT /api/v1/profile/add/parent/{uuid}` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileAddParentPut(uuid, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/profile/add/parent/${encodeURIComponent(uuid)}`, data: data });
     }
     /**
-     * Performs the city get operation for the profile capability.
+     * Read undeleted profiles matching any requested city UUID, optionally restricted by nonempty user_ids.
      * Calls `POST /api/v1/profile/city/get` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: no local authentication or permission check; deployment gateway policy is separate.
      */
     profileCityGetPost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/profile/city/get`, data: data });
     }
     /**
-     * Performs the consultant index operation for the profile capability.
+     * List undeleted profiles with role, active-enrollment, status, normalized literal identity search and dynamic filters applied before pagination. Defaults page=1/per_page=15; per_page caps at 100. filter[trashed] is accepted but does not expose deleted profiles. This mounted route fixes the role to consultant.
      * Calls `GET /api/v1/profile/consultant` through the shared IDP-aware Faiber client.
      * Supports live core/property/trusted-event filters, repeated date ranges and sorting before pagination; invalid clauses return HTTP 400.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:read_consultant; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileConsultantIndexGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/consultant`, params });
     }
     /**
-     * Performs the country get operation for the profile capability.
+     * Read undeleted profiles matching any requested country UUID, optionally restricted by nonempty user_ids.
      * Calls `POST /api/v1/profile/country/get` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: no local authentication or permission check; deployment gateway policy is separate.
      */
     profileCountryGetPost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/profile/country/get`, data: data });
     }
     /**
-     * Performs the force destroy operation for the profile capability.
+     * Permanently delete an undeleted profile by IDP user UUID; returns an empty acknowledgement.
      * Calls `DELETE /api/v1/profile/force/{uuid}` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:force_delete.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:force_delete; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileForceDestroyDelete(uuid, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/profile/force/${encodeURIComponent(uuid)}` });
     }
     /**
-     * Performs the bulk get operation for the profile capability.
+     * Read undeleted profiles for IDP user UUIDs and attach legacy parent summaries. Empty batches return an empty list; the local mount has no auth middleware.
      * Calls `POST /api/v1/profile/get` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: no local authentication or permission check; deployment gateway policy is separate.
      */
     profileBulkGetPost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/profile/get`, data: data });
     }
     /**
-     * Performs the chat list operation for the profile capability.
+     * Read the compatibility chat-list route, which currently always returns an empty array.
      * Calls `GET /api/v1/profile/get-chat-list/{uuid}` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: no local authentication or permission check; deployment gateway policy is separate.
      */
     profileChatListGet(uuid, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/get-chat-list/${encodeURIComponent(uuid)}` });
     }
     /**
-     * Performs the get address operation for the profile capability.
+     * Read stored addresses by IDP user UUID, resolving the separate local Profile UUID.
      * Calls `GET /api/v1/profile/get/address/{uuid}` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileGetAddressGet(uuid, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/get/address/${encodeURIComponent(uuid)}` });
     }
     /**
-     * Performs the get app operation for the profile capability.
+     * Read schema-free stored app JSON for an IDP user UUID; missing data becomes an empty object.
      * Calls `GET /api/v1/profile/get/app/{uuid}` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileGetAppGet(uuid, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/get/app/${encodeURIComponent(uuid)}` });
     }
     /**
-     * Performs the get parent operation for the profile capability.
+     * Read the optional legacy parent-link row by student IDP UUID; missing link is data:null.
      * Calls `GET /api/v1/profile/get/parent/{uuid}` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileGetParentGet(uuid, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/get/parent/${encodeURIComponent(uuid)}` });
     }
     /**
-     * Performs the manager index operation for the profile capability.
+     * List undeleted profiles with role, active-enrollment, status, normalized literal identity search and dynamic filters applied before pagination. Defaults page=1/per_page=15; per_page caps at 100. filter[trashed] is accepted but does not expose deleted profiles. This mounted route fixes the role to manager.
      * Calls `GET /api/v1/profile/manager` through the shared IDP-aware Faiber client.
      * Supports live core/property/trusted-event filters, repeated date ranges and sorting before pagination; invalid clauses return HTTP 400.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:read_manager; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileManagerIndexGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/manager`, params });
     }
     /**
-     * Performs the get my addresses operation for the profile capability.
+     * Read addresses for the identity supplied by the authenticated gateway context.
      * Calls `GET /api/v1/profile/me/addresses` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     profileGetMyAddressesGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/me/addresses` });
     }
     /**
-     * Performs the save my address operation for the profile capability.
+     * Replace an address by title for the current gateway identity. Other addresses remain unchanged; blank titles return 422.
      * Calls `PATCH /api/v1/profile/me/addresses` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     profileSaveMyAddressPatch(data, options) {
         return this.client.request({ ...options, method: "PATCH", url: `/api/v1/profile/me/addresses`, data: data });
     }
     /**
-     * Performs the save my address operation for the profile capability.
+     * Replace an address by title for the current gateway identity. Other addresses remain unchanged; blank titles return 422.
      * Calls `PUT /api/v1/profile/me/addresses` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     profileSaveMyAddressPut(data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/profile/me/addresses`, data: data });
     }
     /**
-     * Performs the delete my address operation for the profile capability.
+     * Delete the current gateway identity address by exact title and return an empty acknowledgement.
      * Calls `DELETE /api/v1/profile/me/addresses/{title}` through the shared IDP-aware Faiber client.
      * @param title Backend path identifier `title`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     profileDeleteMyAddressDelete(title, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/profile/me/addresses/${encodeURIComponent(title)}` });
     }
     /**
-     * Performs the other index operation for the profile capability.
+     * List undeleted profiles with role, active-enrollment, status, normalized literal identity search and dynamic filters applied before pagination. Defaults page=1/per_page=15; per_page caps at 100. filter[trashed] is accepted but does not expose deleted profiles. This mounted route fixes the role to other.
      * Calls `GET /api/v1/profile/other` through the shared IDP-aware Faiber client.
      * Supports live core/property/trusted-event filters, repeated date ranges and sorting before pagination; invalid clauses return HTTP 400.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileOtherIndexGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/other`, params });
     }
     /**
-     * Performs the parent index operation for the profile capability.
+     * List undeleted profiles with role, active-enrollment, status, normalized literal identity search and dynamic filters applied before pagination. Defaults page=1/per_page=15; per_page caps at 100. filter[trashed] is accepted but does not expose deleted profiles. This mounted route fixes the role to parent.
      * Calls `GET /api/v1/profile/parent` through the shared IDP-aware Faiber client.
      * Supports live core/property/trusted-event filters, repeated date ranges and sorting before pagination; invalid clauses return HTTP 400.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:read_parent; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileParentIndexGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/parent`, params });
     }
     /**
-     * Resolve 1–200 explicit user UUIDs into active directory identities. Returns results and has_more:false; never grants collaborator eligibility.
+     * Resolve 1–200 requested active undeleted IDP user UUIDs. Results preserve names, set email/phone null, and has_more=false. Does not decide external space membership.
      * Calls `POST /api/v1/profile/people/resolve` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:lookup and authenticated directory access.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:lookup; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     workspaceResolvePeople(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/profile/people/resolve`, data: data });
     }
     /**
-     * Performs the search operation for the profile search capability.
+     * Search using bounded literal normalized terms and dynamic predicates; at least one filter or search term is required. Maximum 50 filters/10 sorts, page defaults 1, per_page defaults 20 and caps at 100. include selects core/properties/services snapshots.
      * Calls `POST /api/v1/profile/people/search` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:lookup.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:lookup; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileSearchSearchPostApiV1ProfilePeopleSearch(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/profile/people/search`, data: data });
     }
     /**
-     * Performs the province get operation for the profile capability.
+     * Read undeleted profiles matching any requested province UUID, optionally restricted by nonempty user_ids.
      * Calls `POST /api/v1/profile/province/get` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: no local authentication or permission check; deployment gateway policy is separate.
      */
     profileProvinceGetPost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/profile/province/get`, data: data });
     }
     /**
-     * Performs the search operation for the profile search capability.
+     * Search using bounded literal normalized terms and dynamic predicates; at least one filter or search term is required. Maximum 50 filters/10 sorts, page defaults 1, per_page defaults 20 and caps at 100. include selects core/properties/services snapshots.
      * Calls `POST /api/v1/profile/search` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:search.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:search; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileSearchSearchPost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/profile/search`, data: data });
     }
     /**
-     * Performs the student index operation for the profile capability.
+     * List undeleted profiles with role, active-enrollment, status, normalized literal identity search and dynamic filters applied before pagination. Defaults page=1/per_page=15; per_page caps at 100. filter[trashed] is accepted but does not expose deleted profiles. This mounted route fixes the role to student.
      * Calls `GET /api/v1/profile/student` through the shared IDP-aware Faiber client.
      * Supports live core/property/trusted-event filters, repeated date ranges and sorting before pagination; invalid clauses return HTTP 400.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:read_student; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileStudentIndexGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/student`, params });
     }
     /**
-     * Performs the student pes operation for the profile capability.
+     * Aggregate enrolled nonarchived enrollments across undeleted profiles: count and amount minus discount.
      * Calls `GET /api/v1/profile/students/pes` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: no local authentication or permission check; deployment gateway policy is separate.
      */
     profileStudentPesGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/students/pes` });
     }
     /**
-     * Performs the student pes schema operation for the profile capability.
+     * Read the constant PES schema descriptor {count:integer,amount:number}.
      * Calls `GET /api/v1/profile/students/pes/schema` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: no local authentication or permission check; deployment gateway policy is separate.
      */
     profileStudentPesSchemaGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/students/pes/schema` });
     }
     /**
-     * Performs the support index operation for the profile capability.
+     * List undeleted profiles with role, active-enrollment, status, normalized literal identity search and dynamic filters applied before pagination. Defaults page=1/per_page=15; per_page caps at 100. filter[trashed] is accepted but does not expose deleted profiles. This mounted route fixes the role to support.
      * Calls `GET /api/v1/profile/support` through the shared IDP-aware Faiber client.
      * Supports live core/property/trusted-event filters, repeated date ranges and sorting before pagination; invalid clauses return HTTP 400.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:read_support; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileSupportIndexGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/support`, params });
     }
     /**
-     * Performs the support pes operation for the profile capability.
+     * Aggregate pending nonarchived enrollments across undeleted profiles: count and amount minus discount.
      * Calls `GET /api/v1/profile/supports/pes` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: no local authentication or permission check; deployment gateway policy is separate.
      */
     profileSupportPesGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/supports/pes` });
     }
     /**
-     * Performs the support pes schema operation for the profile capability.
+     * Read the constant PES schema descriptor {count:integer,amount:number}.
      * Calls `GET /api/v1/profile/supports/pes/schema` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: no local authentication or permission check; deployment gateway policy is separate.
      */
     profileSupportPesSchemaGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/supports/pes/schema` });
     }
     /**
-     * Performs the teacher index operation for the profile capability.
+     * List undeleted profiles with role, active-enrollment, status, normalized literal identity search and dynamic filters applied before pagination. Defaults page=1/per_page=15; per_page caps at 100. filter[trashed] is accepted but does not expose deleted profiles. This mounted route fixes the role to teacher.
      * Calls `GET /api/v1/profile/teacher` through the shared IDP-aware Faiber client.
      * Supports live core/property/trusted-event filters, repeated date ranges and sorting before pagination; invalid clauses return HTTP 400.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:read_teacher; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileTeacherIndexGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/teacher`, params });
     }
     /**
-     * Performs the restore operation for the profile capability.
+     * Restore a profile by IDP user UUID, including a previously deleted row; returns an empty acknowledgement.
      * Calls `GET /api/v1/profile/undo/{uuid}` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:restore.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:restore; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileRestoreGet(uuid, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/profile/undo/${encodeURIComponent(uuid)}` });
     }
     /**
-     * Performs the add meta operation for the profile capability.
+     * Replace schema-free metadata JSON for an IDP user UUID and return an empty acknowledgement.
      * Calls `PATCH /api/v1/profile/update/{uuid}/meta` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileAddMetaPatch(uuid, data, options) {
         return this.client.request({ ...options, method: "PATCH", url: `/api/v1/profile/update/${encodeURIComponent(uuid)}/meta`, data: data });
     }
     /**
-     * Performs the add meta operation for the profile capability.
+     * Replace schema-free metadata JSON for an IDP user UUID and return an empty acknowledgement.
      * Calls `PUT /api/v1/profile/update/{uuid}/meta` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileAddMetaPut(uuid, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/profile/update/${encodeURIComponent(uuid)}/meta`, data: data });
     }
     /**
-     * Performs the update operation for the education capability.
+     * Atomically update education fields by IDP user UUID. Omission preserves and null clears; invalid attendance/level/referral/education/referrer values return 422. Level is a nonempty string up to 64 characters and description up to 10000.
      * Calls `PUT /api/v1/profile/update/education-information/{uuid}` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     educationUpdatePut(uuid, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/profile/update/education-information/${encodeURIComponent(uuid)}`, data: data });
     }
     /**
-     * Performs the update personal operation for the profile capability.
+     * Update supplied personal fields for an IDP user UUID. Localized name objects merge fa/en string members; job:null clears the job. Other absent/null optional scalar members are preserved.
      * Calls `PATCH /api/v1/profile/update/personal-information/{uuid}` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileUpdatePersonalPatch(uuid, data, options) {
         return this.client.request({ ...options, method: "PATCH", url: `/api/v1/profile/update/personal-information/${encodeURIComponent(uuid)}`, data: data });
     }
     /**
-     * Performs the update personal operation for the profile capability.
+     * Update supplied personal fields for an IDP user UUID. Localized name objects merge fa/en string members; job:null clears the job. Other absent/null optional scalar members are preserved.
      * Calls `PUT /api/v1/profile/update/personal-information/{uuid}` through the shared IDP-aware Faiber client.
      * @param uuid Backend path identifier `uuid`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: profile:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission profile:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     profileUpdatePersonalPut(uuid, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/profile/update/personal-information/${encodeURIComponent(uuid)}`, data: data });
     }
     /**
-     * Performs the index operation for the province capability.
+     * List the province records. List pagination defaults 1/15 and caps at 100; filters apply before pagination, and deleted records are hidden unless filter[trashed]=only/with.
      * Calls `GET /api/v1/province` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: province:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission province:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     provinceIndexGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/province`, params });
     }
     /**
-     * Performs the store operation for the province capability.
+     * Create the province record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `POST /api/v1/province` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: province:create.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission province:create; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     provinceStorePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/province`, data: data });
     }
     /**
-     * Performs the destroy operation for the province capability.
+     * Soft-delete the province record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `DELETE /api/v1/province/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: province:delete.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission province:delete; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     provinceDestroyDelete(id, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/province/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the show operation for the province capability.
+     * Read the province record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `GET /api/v1/province/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: province:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission province:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     provinceShowGet(id, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/province/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the update operation for the province capability.
+     * Update supplied fields on the province record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `PATCH /api/v1/province/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: province:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission province:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     provinceUpdatePatch(id, data, options) {
         return this.client.request({ ...options, method: "PATCH", url: `/api/v1/province/${encodeURIComponent(id)}`, data: data });
     }
     /**
-     * Performs the update operation for the province capability.
+     * Update supplied fields on the province record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `PUT /api/v1/province/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: province:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission province:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     provinceUpdatePut(id, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/province/${encodeURIComponent(id)}`, data: data });
     }
     /**
-     * Performs the force destroy operation for the province capability.
+     * Permanently delete the province record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `DELETE /api/v1/province/force/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: province:delete.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission province:delete; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     provinceForceDestroyDelete(id, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/province/force/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the restore operation for the province capability.
+     * Restore the province record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `GET /api/v1/province/undo/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: province:delete.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission province:delete; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     provinceRestoreGet(id, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/province/undo/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the list operation for the referral capability.
+     * List undeleted referral sources ordered by sort_order.
      * Calls `GET /api/v1/referral-source` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     referralListGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/referral-source` });
     }
     /**
-     * Performs the create operation for the referral capability.
+     * Create a referral source requiring nonblank code and object labels/metadata.
      * Calls `POST /api/v1/referral-source` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     referralCreatePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/referral-source`, data: data });
     }
     /**
-     * Performs the delete operation for the referral capability.
+     * Soft-delete and deactivate a referral source.
      * Calls `DELETE /api/v1/referral-source/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     referralDeleteDelete(id, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/referral-source/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the show operation for the referral capability.
+     * Read a referral source by UUID.
      * Calls `GET /api/v1/referral-source/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     referralShowGet(id, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/referral-source/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the update operation for the referral capability.
+     * Replace a referral source requiring nonblank code and object labels/metadata.
      * Calls `PUT /api/v1/referral-source/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     referralUpdatePut(id, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/referral-source/${encodeURIComponent(id)}`, data: data });
     }
     /**
-     * Performs the list types operation for the relation capability.
+     * List undeleted relation types ordered by sort_order.
      * Calls `GET /api/v1/relation-type` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     relationListTypesGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/relation-type` });
     }
     /**
-     * Performs the create type operation for the relation capability.
+     * Create a validated relation type with object labels/constraints; directional managed inverses require an active inverse type.
      * Calls `POST /api/v1/relation-type` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     relationCreateTypePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/relation-type`, data: data });
     }
     /**
-     * Performs the delete type operation for the relation capability.
+     * Soft-delete and deactivate a relation type.
      * Calls `DELETE /api/v1/relation-type/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     relationDeleteTypeDelete(id, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/relation-type/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the show type operation for the relation capability.
+     * Read a relation type by UUID.
      * Calls `GET /api/v1/relation-type/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     relationShowTypeGet(id, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/relation-type/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the update type operation for the relation capability.
+     * Replace a validated relation type definition.
      * Calls `PUT /api/v1/relation-type/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     relationUpdateTypePut(id, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/relation-type/${encodeURIComponent(id)}`, data: data });
     }
     /**
-     * Performs the index operation for the setting capability.
+     * Read all numeric settings, newest first, under data.setting.
      * Calls `GET /api/v1/setting` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: setting:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission setting:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     settingIndexGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/setting` });
     }
     /**
-     * Performs the store operation for the setting capability.
+     * Create a numeric setting from key/title/value and return data.setting.
      * Calls `POST /api/v1/setting` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: setting:create.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission setting:create; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     settingStorePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/setting`, data: data });
     }
     /**
-     * Performs the actions list operation for the lifecycle capability.
+     * List state actions, optionally by state_id, ordered by sort_order.
      * Calls `GET /api/v1/state-action` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleActionsListGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/state-action`, params });
     }
     /**
-     * Performs the create action operation for the lifecycle capability.
+     * Create a validated enter/exit action of type event/webhook/message/external_flag with retry configuration.
      * Calls `POST /api/v1/state-action` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleCreateActionPost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/state-action`, data: data });
     }
     /**
-     * Performs the delete action operation for the lifecycle capability.
+     * Disable an action; this command does not physically delete its row.
      * Calls `DELETE /api/v1/state-action/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleDeleteActionDelete(id, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/state-action/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the show action operation for the lifecycle capability.
+     * Read a state action by UUID.
      * Calls `GET /api/v1/state-action/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleShowActionGet(id, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/state-action/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the update action operation for the lifecycle capability.
+     * Replace a validated state action configuration.
      * Calls `PUT /api/v1/state-action/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleUpdateActionPut(id, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/state-action/${encodeURIComponent(id)}`, data: data });
     }
     /**
-     * Performs the dry run action operation for the lifecycle capability.
+     * Validate action configuration and evaluate its condition against empty facts; returns execution eligibility without executing or enqueueing.
      * Calls `POST /api/v1/state-action/dry-run` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleDryRunActionPost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/state-action/dry-run`, data: data });
     }
     /**
-     * Performs the states operation for the lifecycle capability.
+     * List undeleted state definitions, optionally by system_id, highest priority first.
      * Calls `GET /api/v1/state-definition` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleStatesGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/state-definition`, params });
     }
     /**
-     * Performs the create state operation for the lifecycle capability.
+     * Create a validated state under an existing system; each system may have one undeleted fallback. Immediate systems trigger reevaluation.
      * Calls `POST /api/v1/state-definition` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleCreateStatePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/state-definition`, data: data });
     }
     /**
-     * Performs the delete state operation for the lifecycle capability.
+     * Soft-delete/deactivate a state definition and trigger immediate-system reevaluation.
      * Calls `DELETE /api/v1/state-definition/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleDeleteStateDelete(id, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/state-definition/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the show state operation for the lifecycle capability.
+     * Read a state definition row by UUID.
      * Calls `GET /api/v1/state-definition/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleShowStateGet(id, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/state-definition/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the update state operation for the lifecycle capability.
+     * Replace a validated state configuration and increment version; immediate systems trigger reevaluation.
      * Calls `PUT /api/v1/state-definition/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleUpdateStatePut(id, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/state-definition/${encodeURIComponent(id)}`, data: data });
     }
     /**
-     * Performs the action attempts operation for the lifecycle capability.
+     * List action attempts optionally by outbox_id, newest first.
      * Calls `GET /api/v1/state-evaluation/action-attempts` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleActionAttemptsGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/state-evaluation/action-attempts`, params });
     }
     /**
-     * Performs the evaluate operation for the lifecycle capability.
+     * Persist a changed eligible selected state under a profile/system lock, record its transition, and enqueue enter/exit actions; unchanged/ineligible results do not create transitions.
      * Calls `POST /api/v1/state-evaluation/evaluate` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleEvaluatePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/state-evaluation/evaluate`, data: data });
     }
     /**
-     * Performs the outbox operation for the lifecycle capability.
+     * List outbox rows optionally filtered by status.
      * Calls `GET /api/v1/state-evaluation/outbox` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleOutboxGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/state-evaluation/outbox`, params });
     }
     /**
-     * Performs the retry operation for the lifecycle capability.
+     * Reset only a failed outbox row to pending; missing rows return 404 and other states 409.
      * Calls `POST /api/v1/state-evaluation/outbox/{id}/retry` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleRetryPost(id, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/state-evaluation/outbox/${encodeURIComponent(id)}/retry` });
     }
     /**
-     * Performs the process outbox operation for the lifecycle capability.
+     * Process up to 100 ready actions and return the count completed; may publish broker events or call configured webhooks.
      * Calls `POST /api/v1/state-evaluation/outbox/process` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleProcessOutboxPost(options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/state-evaluation/outbox/process` });
     }
     /**
-     * Performs the preview operation for the lifecycle capability.
+     * Evaluate system eligibility and choose the highest-priority matching active state or fallback without persisting transitions.
      * Calls `POST /api/v1/state-evaluation/preview` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecyclePreviewPost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/state-evaluation/preview`, data: data });
     }
     /**
-     * Performs the transitions operation for the lifecycle capability.
+     * List transitions optionally filtered by Profile UUID and system UUID, newest first.
      * Calls `GET /api/v1/state-evaluation/transitions` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleTransitionsGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/state-evaluation/transitions`, params });
     }
     /**
-     * Performs the validate rule operation for the lifecycle capability.
+     * Validate and evaluate the lifecycle AST against supplied JSON facts; returns valid/matched, invalid rules return 422.
      * Calls `POST /api/v1/state-evaluation/validate-rule` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleValidateRulePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/state-evaluation/validate-rule`, data: data });
     }
     /**
-     * Performs the systems operation for the lifecycle capability.
+     * List undeleted lifecycle systems ordered by code.
      * Calls `GET /api/v1/state-system` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleSystemsGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/state-system` });
     }
     /**
-     * Performs the create system operation for the lifecycle capability.
+     * Create a lifecycle system with object labels/description, validated rule and optional valid cron schedule.
      * Calls `POST /api/v1/state-system` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleCreateSystemPost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/state-system`, data: data });
     }
     /**
-     * Performs the delete system operation for the lifecycle capability.
+     * Soft-delete and deactivate a lifecycle system; acknowledge with an empty object.
      * Calls `DELETE /api/v1/state-system/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleDeleteSystemDelete(id, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/state-system/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the show system operation for the lifecycle capability.
+     * Read a lifecycle system row by local UUID, including a soft-deleted row if present.
      * Calls `GET /api/v1/state-system/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleShowSystemGet(id, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/state-system/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the update system operation for the lifecycle capability.
+     * Replace lifecycle system configuration, increment version and trigger reevaluation for immediate publication mode.
      * Calls `PUT /api/v1/state-system/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
      */
     lifecycleUpdateSystemPut(id, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/state-system/${encodeURIComponent(id)}`, data: data });
     }
     /**
-     * Performs the index operation for the survey capability.
+     * Read all survey rows without pagination. meta is arbitrary stored JSON.
      * Calls `GET /api/v1/survey` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: survey:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission survey:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     surveyIndexGet(options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/survey` });
     }
     /**
-     * Performs the store operation for the survey capability.
+     * Create a survey row. Request key type is serialized as survey_type on the returned row; enrollment_id/type/meta may be omitted or null.
      * Calls `POST /api/v1/survey` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: survey:create.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission survey:create; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     surveyStorePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/survey`, data: data });
     }
     /**
-     * Performs the index operation for the trusted service capability.
+     * List the trusted service records. List pagination defaults 1/15 and caps at 100; filters apply before pagination, and deleted records are hidden unless filter[trashed]=only/with.
      * Calls `GET /api/v1/trusted-service` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted_service:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission trusted_service:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     trustedServiceIndexGet(params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/trusted-service`, params });
     }
     /**
-     * Performs the store operation for the trusted service capability.
+     * Create the trusted service record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `POST /api/v1/trusted-service` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted_service:create.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission trusted_service:create; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     trustedServiceStorePost(data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/trusted-service`, data: data });
     }
     /**
-     * Performs the destroy operation for the trusted service capability.
+     * Soft-delete the trusted service record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `DELETE /api/v1/trusted-service/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted_service:delete.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission trusted_service:delete; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     trustedServiceDestroyDelete(id, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/trusted-service/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the show operation for the trusted service capability.
+     * Read the trusted service record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `GET /api/v1/trusted-service/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted_service:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission trusted_service:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     trustedServiceShowGet(id, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/trusted-service/${encodeURIComponent(id)}` });
     }
     /**
-     * Performs the update operation for the trusted service capability.
+     * Update supplied fields on the trusted service record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `PATCH /api/v1/trusted-service/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted_service:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission trusted_service:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     trustedServiceUpdatePatch(id, data, options) {
         return this.client.request({ ...options, method: "PATCH", url: `/api/v1/trusted-service/${encodeURIComponent(id)}`, data: data });
     }
     /**
-     * Performs the update operation for the trusted service capability.
+     * Update supplied fields on the trusted service record. Local IDs are UUIDs; responses retain the named backend envelope.
      * Calls `PUT /api/v1/trusted-service/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted_service:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission trusted_service:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     trustedServiceUpdatePut(id, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/trusted-service/${encodeURIComponent(id)}`, data: data });
     }
     /**
-     * Performs the event index operation for the trusted service capability.
+     * Manage trusted-service event visibility and arbitrary payload_schema within the path service UUID. Event reads/updates/deletes verify event ownership and deleted status.
      * Calls `GET /api/v1/trusted-service/{id}/event` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted_service:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission trusted_service:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     trustedServiceEventIndexGet(id, params, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/trusted-service/${encodeURIComponent(id)}/event`, params });
     }
     /**
-     * Performs the event store operation for the trusted service capability.
+     * Manage trusted-service event visibility and arbitrary payload_schema within the path service UUID. Event reads/updates/deletes verify event ownership and deleted status.
      * Calls `POST /api/v1/trusted-service/{id}/event` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted_service:create.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission trusted_service:create; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     trustedServiceEventStorePost(id, data, options) {
         return this.client.request({ ...options, method: "POST", url: `/api/v1/trusted-service/${encodeURIComponent(id)}/event`, data: data });
     }
     /**
-     * Performs the event destroy operation for the trusted service capability.
+     * Manage trusted-service event visibility and arbitrary payload_schema within the path service UUID. Event reads/updates/deletes verify event ownership and deleted status.
      * Calls `DELETE /api/v1/trusted-service/{id}/event/{event_id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param eventId Backend path identifier `event_id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted_service:delete.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission trusted_service:delete; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     trustedServiceEventDestroyDelete(id, eventId, options) {
         return this.client.request({ ...options, method: "DELETE", url: `/api/v1/trusted-service/${encodeURIComponent(id)}/event/${encodeURIComponent(eventId)}` });
     }
     /**
-     * Performs the event show operation for the trusted service capability.
+     * Manage trusted-service event visibility and arbitrary payload_schema within the path service UUID. Event reads/updates/deletes verify event ownership and deleted status.
      * Calls `GET /api/v1/trusted-service/{id}/event/{event_id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param eventId Backend path identifier `event_id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted_service:read.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission trusted_service:read; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     trustedServiceEventShowGet(id, eventId, options) {
         return this.client.request({ ...options, method: "GET", url: `/api/v1/trusted-service/${encodeURIComponent(id)}/event/${encodeURIComponent(eventId)}` });
     }
     /**
-     * Performs the event update operation for the trusted service capability.
+     * Manage trusted-service event visibility and arbitrary payload_schema within the path service UUID. Event reads/updates/deletes verify event ownership and deleted status.
      * Calls `PATCH /api/v1/trusted-service/{id}/event/{event_id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param eventId Backend path identifier `event_id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted_service:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission trusted_service:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     trustedServiceEventUpdatePatch(id, eventId, data, options) {
         return this.client.request({ ...options, method: "PATCH", url: `/api/v1/trusted-service/${encodeURIComponent(id)}/event/${encodeURIComponent(eventId)}`, data: data });
     }
     /**
-     * Performs the event update operation for the trusted service capability.
+     * Manage trusted-service event visibility and arbitrary payload_schema within the path service UUID. Event reads/updates/deletes verify event ownership and deleted status.
      * Calls `PUT /api/v1/trusted-service/{id}/event/{event_id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param eventId Backend path identifier `event_id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted_service:update.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: declared IDP permission trusted_service:update; gateway enforces ACL metadata, local annotation itself is not a permission check.
      */
     trustedServiceEventUpdatePut(id, eventId, data, options) {
         return this.client.request({ ...options, method: "PUT", url: `/api/v1/trusted-service/${encodeURIComponent(id)}/event/${encodeURIComponent(eventId)}`, data: data });
     }
     /**
-     * Performs the health operation for the router capability.
+     * Read active campaigns in their current date window, ordered by sort_order and creation time. visibility metadata is returned as data and is not a row predicate.
+     * Calls `GET /campaign` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
+     */
+    campaignIndexGet(options) {
+        return this.client.request({ ...options, method: "GET", url: `/campaign` });
+    }
+    /**
+     * Read current user contribution history with purpose snapshots; confirmed_at is not serialized.
+     * Calls `GET /campaign-profile/me/contributions` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
+     */
+    campaignMyContributionsGet(options) {
+        return this.client.request({ ...options, method: "GET", url: `/campaign-profile/me/contributions` });
+    }
+    /**
+     * Read one campaign projection by UUID; the detail query does not restrict status or date window.
+     * Calls `GET /campaign/{id}` through the shared IDP-aware Faiber client.
+     * @param id Backend path identifier `id`.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
+     */
+    campaignShowGet(id, options) {
+        return this.client.request({ ...options, method: "GET", url: `/campaign/${encodeURIComponent(id)}` });
+    }
+    /**
+     * Record a positive money/sha contribution for an available campaign using current user and idempotency_key. Disabled methods return 409, invalid amount/method 422; duplicate user/key reuses the existing receipt.
+     * Calls `POST /campaign/{id}/contributions` through the shared IDP-aware Faiber client.
+     * @param id Backend path identifier `id`.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: gateway AuthContext; no additional named handler permission check.
+     */
+    campaignContributePost(id, data, options) {
+        return this.client.request({ ...options, method: "POST", url: `/campaign/${encodeURIComponent(id)}/contributions`, data: data });
+    }
+    /**
+     * Read process health and the package version; no dependency readiness check is performed.
      * Calls `GET /health` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: no local authentication or permission check; deployment gateway policy is separate.
      */
     routerHealthGetHealth(options) {
         return this.client.request({ ...options, method: "GET", url: `/health` });
     }
     /**
-     * Performs the health operation for the router capability.
+     * Read process health and the package version; no dependency readiness check is performed.
      * Calls `GET /up` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: no local authentication or permission check; deployment gateway policy is separate.
      */
     routerHealthGetUp(options) {
         return this.client.request({ ...options, method: "GET", url: `/up` });