@faiber/faiber-task 0.23.0 → 1.0.0

package/dist/operations.d.ts

@@ -2,1066 +2,1177 @@ import { ServiceApi, type Identifier, type RequestOptions } from "@faiber/sdk-co
 import type * as T from "./operations.types.js";
 export declare class TaskOperations extends ServiceApi {
     /**
-     * Performs the openapi operation for the routes capability.
+     * Openapi.
      * Calls `GET /api/openapi.json` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: No local identity extractor; deployment ingress policy is separate. Shared FaiberClient still forwards configured credentials.
      */
-    workspaceQuery(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("@faiber/sdk-core").JsonValue, unknown, {}>>;
+    workspaceQuery(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("@faiber/sdk-core").ServiceOpenApiDocument, unknown, {}, any>>;
     /**
-     * Performs the effective access operation for the routes capability.
+     * Effective access. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/access/effective` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
      */
-    routesEffectiveAccessGet(params?: T.RoutesEffectiveAccessGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesEffectiveAccessGetResponse, unknown, {}>>;
+    routesEffectiveAccessGet(params?: T.RoutesEffectiveAccessGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesEffectiveAccessGetResponse, unknown, {}, any>>;
     /**
-     * Performs the create agent proposal operation for the routes capability.
+     * Create agent proposal. Returns HTTP 201 with the Task status/message/data envelope; ETag is preserved when supplied.
      * Calls `POST /api/v1/agent-proposals` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; local agent.propose; verified Bearer/cookie identity through FaiberClient; source checks agent.propose.
      */
-    routesCreateAgentProposalPost(data: T.RoutesCreateAgentProposalPostInput, options?: RequestOptions<T.RoutesCreateAgentProposalPostInput>): Promise<import("axios").AxiosResponse<T.RoutesCreateAgentProposalPostResponse, T.RoutesCreateAgentProposalPostInput, {}>>;
+    routesCreateAgentProposalPost(data: T.RoutesCreateAgentProposalPostInput, options?: RequestOptions<T.RoutesCreateAgentProposalPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").AgentProposal>, T.RoutesCreateAgentProposalPostInput, {}, any>>;
     /**
-     * Performs the approve agent proposal operation for the routes capability.
+     * Mark an agent proposal approved without executing its opaque payload; the proposer cannot approve their own proposal. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/agent-proposals/{id}/approve` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks agent.approve.
      */
-    routesApproveAgentProposalPost(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesApproveAgentProposalPostResponse, unknown, {}>>;
+    routesApproveAgentProposalPost(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").ApprovedAgentProposal>, unknown, {}, any>>;
     /**
-     * Performs the query operation for the routes capability.
+     * Query. Returns the Task status/message/data envelope with the full Axios status and headers. Queries enforce SQL visibility; reviewed mutations validate each domain grant. Proposal apply rechecks revision and preview atomically; conflicts apply nothing.
      * Calls `POST /api/v1/assistant/query` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient; source checks project.read.
      */
-    routesQueryPost(data: T.RoutesQueryPostInput, options?: RequestOptions<T.RoutesQueryPostInput>): Promise<import("axios").AxiosResponse<T.RoutesQueryPostResponse, T.RoutesQueryPostInput, {}>>;
+    routesQueryPost(data: T.RoutesQueryPostInput, options?: RequestOptions<T.RoutesQueryPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./workspace.js").WorkspaceQueryResult>, import("./workspace.js").WorkspaceQuery, {}, any>>;
     /**
-     * Performs the remove operation for the routes capability.
+     * Remove. Returns the Task status/message/data envelope with the full Axios status and headers. Private uploads remain quarantined until accepted; current task/note scope and binding rules are rechecked.
      * Calls `DELETE /api/v1/attachments/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks attachment.delete_own, attachment.manage.
      */
-    routesRemoveDeleteApiV1AttachmentsId(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").DeletedAttachment>, unknown, {}>>;
+    routesRemoveDeleteApiV1AttachmentsId(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").DeletedAttachment>, unknown, {}, any>>;
     /**
-     * Performs the status operation for the routes capability.
+     * Status. Returns the Task status/message/data envelope with the full Axios status and headers. Private uploads remain quarantined until accepted; current task/note scope and binding rules are rechecked.
      * Calls `GET /api/v1/attachments/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks work_item.read.
      */
-    routesStatusGetApiV1AttachmentsId(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").TaskAttachment>, unknown, {}>>;
+    routesStatusGetApiV1AttachmentsId(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").TaskAttachment>, unknown, {}, any>>;
     /**
-     * Performs the content operation for the routes capability.
+     * Content. Returns the Task status/message/data envelope with the full Axios status and headers. Private uploads remain quarantined until accepted; current task/note scope and binding rules are rechecked.
      * Calls `PUT /api/v1/attachments/{id}/content` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed multipart form.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks attachment.create.
      */
-    routesContentPut(id: Identifier, data: T.RoutesContentPutInput, options?: RequestOptions<T.RoutesContentPutInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").TaskAttachment>, FormData, {}>>;
+    routesContentPut(id: Identifier, data: T.RoutesContentPutInput, options?: RequestOptions<T.RoutesContentPutInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").TaskAttachment>, FormData, {}, any>>;
     /**
-     * Performs the download operation for the routes capability.
+     * Download. Returns the Task status/message/data envelope with the full Axios status and headers. Private uploads remain quarantined until accepted; current task/note scope and binding rules are rechecked.
      * Calls `GET /api/v1/attachments/{id}/download` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks work_item.read.
      */
-    routesDownloadGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesDownloadGetResponse, unknown, {}>>;
+    routesDownloadGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesDownloadGetResponse, unknown, {}, any>>;
     /**
-     * Performs the config operation for the routes capability.
+     * Config. Returns the Task status/message/data envelope with the full Axios status and headers. Private uploads remain quarantined until accepted; current task/note scope and binding rules are rechecked.
      * Calls `GET /api/v1/collaboration/config` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
      */
-    routesConfigGetApiV1CollaborationConfig(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").CollaborationConfig>, unknown, {}>>;
+    routesConfigGetApiV1CollaborationConfig(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").CollaborationConfig>, unknown, {}, any>>;
     /**
-     * Performs the events operation for the routes capability.
+     * Events. Raw SSE invalidate/changed frames, no JSON envelope; permission rechecked per event and keepalive every 15 seconds. Reconnect and refetch current snapshots; no replay cursor.
      * Calls `GET /api/v1/events` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; local project.read; verified Bearer/cookie identity through FaiberClient; source checks project.read, work_item.read.
      */
-    routesEventsGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesEventsGetResponse, unknown, {}>>;
+    routesEventsGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskEventStreamBody, unknown, {}, any>>;
     /**
-     * Performs the use guest link operation for the routes capability.
+     * Assignees. Returns the Task status/message/data envelope with the full Axios status and headers. Feedback realm identity is required; no platform fallback. Optional X-Feedback-Reporter-Id fences capture identity (409 requires fresh capture); IDP role grants and branch/stage checks remain authoritative.
+     * Calls `GET /api/v1/feedback/assignees` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:feedback:assign; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
+     */
+    feedbackAssigneesGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./feedback.js").FeedbackAssignees>, unknown, {}, any>>;
+    /**
+     * Initialize. Returns the Task status/message/data envelope with the full Axios status and headers. Feedback realm identity is required; no platform fallback. Optional X-Feedback-Reporter-Id fences capture identity (409 requires fresh capture); IDP role grants and branch/stage checks remain authoritative.
+     * Calls `POST /api/v1/feedback/attachments` through the shared IDP-aware Faiber client.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:feedback:submit; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
+     */
+    feedbackInitializePost(data: T.FeedbackInitializePostInput, options?: RequestOptions<T.FeedbackInitializePostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./feedback.js").FeedbackAttachment>, import("./feedback.js").InitializeFeedbackAttachment, {}, any>>;
+    /**
+     * Complete. Returns the Task status/message/data envelope with the full Axios status and headers. Feedback realm identity is required; no platform fallback. Optional X-Feedback-Reporter-Id fences capture identity (409 requires fresh capture); IDP role grants and branch/stage checks remain authoritative.
+     * Calls `POST /api/v1/feedback/attachments/{id}/complete` through the shared IDP-aware Faiber client.
+     * @param id Backend path identifier `id`.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants.
+     */
+    feedbackCompletePost(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./feedback.js").FeedbackAttachment>, unknown, {}, any>>;
+    /**
+     * Upload. Returns the Task status/message/data envelope with the full Axios status and headers. Feedback realm identity is required; no platform fallback. Optional X-Feedback-Reporter-Id fences capture identity (409 requires fresh capture); IDP role grants and branch/stage checks remain authoritative.
+     * Calls `PUT /api/v1/feedback/attachments/{id}/content` through the shared IDP-aware Faiber client.
+     * @param id Backend path identifier `id`.
+     * @param data Typed binary byte stream.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants.
+     */
+    feedbackUploadPut(id: Identifier, data: T.FeedbackUploadPutInput, options?: RequestOptions<T.FeedbackUploadPutInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./feedback.js").FeedbackAttachment>, T.FeedbackUploadPutInput, {}, any>>;
+    /**
+     * Capabilities. Returns the Task status/message/data envelope with the full Axios status and headers. Feedback realm identity is required; no platform fallback. Optional X-Feedback-Reporter-Id fences capture identity (409 requires fresh capture); IDP role grants and branch/stage checks remain authoritative.
+     * Calls `GET /api/v1/feedback/capabilities` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:feedback:submit; handler-specific local scope; verified Bearer/cookie identity through FaiberClient; source checks workspace.manage.
+     */
+    feedbackCapabilitiesGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./feedback.js").FeedbackCapabilities>, unknown, {}, any>>;
+    /**
+     * Get policy. Returns the Task status/message/data envelope with the full Axios status and headers. Feedback realm identity is required; no platform fallback. Optional X-Feedback-Reporter-Id fences capture identity (409 requires fresh capture); IDP role grants and branch/stage checks remain authoritative.
+     * Calls `GET /api/v1/feedback/policy` through the shared IDP-aware Faiber client.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
+     */
+    feedbackGetPolicyGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./feedback.js").FeedbackPolicyResult>, unknown, {}, any>>;
+    /**
+     * Put policy. Supply the current integer If-Match; missing preconditions return 428 and stale versions return 409. Returns the Task status/message/data envelope with the full Axios status and headers. Feedback realm identity is required; no platform fallback. Optional X-Feedback-Reporter-Id fences capture identity (409 requires fresh capture); IDP role grants and branch/stage checks remain authoritative.
+     * Calls `PUT /api/v1/feedback/policy` through the shared IDP-aware Faiber client.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
+     */
+    feedbackPutPolicyPut(data: T.FeedbackPutPolicyPutInput, options?: RequestOptions<T.FeedbackPutPolicyPutInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./feedback.js").FeedbackPolicyResult>, import("./feedback.js").FeedbackPolicy, {}, any>>;
+    /**
+     * Index. Returns the Task status/message/data envelope with the full Axios status and headers. Feedback realm identity is required; no platform fallback. Optional X-Feedback-Reporter-Id fences capture identity (409 requires fresh capture); IDP role grants and branch/stage checks remain authoritative.
+     * Calls `GET /api/v1/feedback/requests` through the shared IDP-aware Faiber client.
+     * @param params Typed query parameters; omitted members retain backend defaults.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:feedback:self:read; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
+     */
+    feedbackIndexGet(params?: T.FeedbackIndexGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./feedback.js").FeedbackPage>, unknown, {}, any>>;
+    /**
+     * Create. Returns the Task status/message/data envelope with the full Axios status and headers. Feedback realm identity is required; no platform fallback. Optional X-Feedback-Reporter-Id fences capture identity (409 requires fresh capture); IDP role grants and branch/stage checks remain authoritative.
+     * Calls `POST /api/v1/feedback/requests` through the shared IDP-aware Faiber client.
+     * @param idempotencyKey Stable printable ASCII key (1–128 characters, without spaces); reuse for identical retries.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:feedback:submit; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
+     */
+    feedbackCreatePost(data: T.FeedbackCreatePostInput, idempotencyKey: string, options?: RequestOptions<T.FeedbackCreatePostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./feedback.js").FeedbackRequest>, import("./feedback.js").SubmitFeedbackRequest, {}, any>>;
+    /**
+     * Show. Returns the Task status/message/data envelope with the full Axios status and headers. Feedback realm identity is required; no platform fallback. Optional X-Feedback-Reporter-Id fences capture identity (409 requires fresh capture); IDP role grants and branch/stage checks remain authoritative.
+     * Calls `GET /api/v1/feedback/requests/{id}` through the shared IDP-aware Faiber client.
+     * @param id Backend path identifier `id`.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants.
+     */
+    feedbackShowGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./feedback.js").FeedbackDetail>, unknown, {}, any>>;
+    /**
+     * Content. Returns the Task status/message/data envelope with the full Axios status and headers. Feedback realm identity is required; no platform fallback. Optional X-Feedback-Reporter-Id fences capture identity (409 requires fresh capture); IDP role grants and branch/stage checks remain authoritative.
+     * Calls `GET /api/v1/feedback/requests/{id}/attachments/{attachment}/content` through the shared IDP-aware Faiber client.
+     * @param id Backend path identifier `id`.
+     * @param attachment Backend path identifier `attachment`.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants.
+     */
+    feedbackContentGet(id: Identifier, attachment: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.FeedbackContentGetResponse, unknown, {}, any>>;
+    /**
+     * Decision. Returns the Task status/message/data envelope with the full Axios status and headers. Feedback realm identity is required; no platform fallback. Optional X-Feedback-Reporter-Id fences capture identity (409 requires fresh capture); IDP role grants and branch/stage checks remain authoritative.
+     * Calls `POST /api/v1/feedback/requests/{id}/decisions` through the shared IDP-aware Faiber client.
+     * @param id Backend path identifier `id`.
+     * @param idempotencyKey Stable printable ASCII key (1–128 characters, without spaces); reuse for identical retries.
+     * @param data Typed JSON request body.
+     * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants.
+     */
+    feedbackDecisionPost(id: Identifier, data: T.FeedbackDecisionPostInput, idempotencyKey: string, options?: RequestOptions<T.FeedbackDecisionPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./feedback.js").FeedbackRequest>, import("./feedback.js").DecideFeedbackRequest, {}, any>>;
+    /**
+     * Use guest link. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/guest-links/use` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Guest token in body; no IDP identity extractor. Expiry, active link and sandbox are checked by repository.
      */
-    routesUseGuestLinkPost(data: T.RoutesUseGuestLinkPostInput, options?: RequestOptions<T.RoutesUseGuestLinkPostInput>): Promise<import("axios").AxiosResponse<T.RoutesUseGuestLinkPostResponse, T.RoutesUseGuestLinkPostInput, {}>>;
+    routesUseGuestLinkPost(data: T.RoutesUseGuestLinkPostInput, options?: RequestOptions<T.RoutesUseGuestLinkPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").GuestLinkAccess>, T.RoutesUseGuestLinkPostInput, {}, any>>;
     /**
-     * Performs the list operation for the routes capability.
+     * List. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/internal/plans/gifts` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted backend service credential and tenant scope; not a public browser endpoint.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Trusted backend service Bearer credential (PRODUCT_CHAT_SERVICE_TOKEN; gifts use PRODUCT_TRIAL_GIFT_SERVICE_TOKEN), workspace and actor/owner scope; never expose service credentials to browser callers.
      */
-    routesListGet(params?: T.RoutesListGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesListGetResponse, unknown, {}>>;
+    routesListGet(params?: T.RoutesListGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").ManagedTrialGiftPage>, unknown, {}, any>>;
     /**
-     * Performs the create operation for the routes capability.
+     * Create. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/internal/plans/gifts` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted backend service credential and tenant scope; not a public browser endpoint.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Trusted backend service Bearer credential (PRODUCT_CHAT_SERVICE_TOKEN; gifts use PRODUCT_TRIAL_GIFT_SERVICE_TOKEN), workspace and actor/owner scope; never expose service credentials to browser callers.
      */
-    routesCreatePostApiV1InternalPlansGifts(data: T.RoutesCreatePostApiV1InternalPlansGiftsInput, options?: RequestOptions<T.RoutesCreatePostApiV1InternalPlansGiftsInput>): Promise<import("axios").AxiosResponse<T.RoutesCreatePostApiV1InternalPlansGiftsResponse, T.RoutesCreatePostApiV1InternalPlansGiftsInput, {}>>;
+    routesCreatePostApiV1InternalPlansGifts(data: T.RoutesCreatePostApiV1InternalPlansGiftsInput, options?: RequestOptions<T.RoutesCreatePostApiV1InternalPlansGiftsInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").ManagedTrialGift>, T.RoutesCreatePostApiV1InternalPlansGiftsInput, {}, any>>;
     /**
-     * Performs the show operation for the routes capability.
+     * Show. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/internal/plans/gifts/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted backend service credential and tenant scope; not a public browser endpoint.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Trusted backend service Bearer credential (PRODUCT_CHAT_SERVICE_TOKEN; gifts use PRODUCT_TRIAL_GIFT_SERVICE_TOKEN), workspace and actor/owner scope; never expose service credentials to browser callers.
      */
-    routesShowGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesShowGetResponse, unknown, {}>>;
+    routesShowGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").ManagedTrialGift>, unknown, {}, any>>;
     /**
-     * Performs the update operation for the routes capability.
+     * Update. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `PUT /api/v1/internal/plans/gifts/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted backend service credential and tenant scope; not a public browser endpoint.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Trusted backend service Bearer credential (PRODUCT_CHAT_SERVICE_TOKEN; gifts use PRODUCT_TRIAL_GIFT_SERVICE_TOKEN), workspace and actor/owner scope; never expose service credentials to browser callers.
      */
-    routesUpdatePut(id: Identifier, data: T.RoutesUpdatePutInput, options?: RequestOptions<T.RoutesUpdatePutInput>): Promise<import("axios").AxiosResponse<T.RoutesUpdatePutResponse, T.RoutesUpdatePutInput, {}>>;
+    routesUpdatePut(id: Identifier, data: T.RoutesUpdatePutInput, options?: RequestOptions<T.RoutesUpdatePutInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").ManagedTrialGift>, T.RoutesUpdatePutInput, {}, any>>;
     /**
-     * Performs the reserve internal operation for the routes capability.
+     * Reserve internal. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/internal/plans/memory-reservations` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted backend service credential and tenant scope; not a public browser endpoint.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Trusted backend service Bearer credential (PRODUCT_CHAT_SERVICE_TOKEN; gifts use PRODUCT_TRIAL_GIFT_SERVICE_TOKEN), workspace and actor/owner scope; never expose service credentials to browser callers.
      */
-    routesReserveInternalPost(data: T.RoutesReserveInternalPostInput, options?: RequestOptions<T.RoutesReserveInternalPostInput>): Promise<import("axios").AxiosResponse<T.RoutesReserveInternalPostResponse, T.RoutesReserveInternalPostInput, {}>>;
+    routesReserveInternalPost(data: T.RoutesReserveInternalPostInput, options?: RequestOptions<T.RoutesReserveInternalPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").MemoryReservation>, T.RoutesReserveInternalPostInput, {}, any>>;
     /**
-     * Performs the settle internal operation for the routes capability.
+     * Settle internal. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/internal/plans/memory-reservations/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted backend service credential and tenant scope; not a public browser endpoint.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Trusted backend service Bearer credential (PRODUCT_CHAT_SERVICE_TOKEN; gifts use PRODUCT_TRIAL_GIFT_SERVICE_TOKEN), workspace and actor/owner scope; never expose service credentials to browser callers.
      */
-    routesSettleInternalPost(id: Identifier, data: T.RoutesSettleInternalPostInput, options?: RequestOptions<T.RoutesSettleInternalPostInput>): Promise<import("axios").AxiosResponse<T.RoutesSettleInternalPostResponse, T.RoutesSettleInternalPostInput, {}>>;
+    routesSettleInternalPost(id: Identifier, data: T.RoutesSettleInternalPostInput, options?: RequestOptions<T.RoutesSettleInternalPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").MemorySettlement>, T.RoutesSettleInternalPostInput, {}, any>>;
     /**
-     * Performs the reserve operation for the routes capability.
+     * Reserve. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/internal/plans/reservations` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted backend service credential and tenant scope; not a public browser endpoint.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Trusted backend service Bearer credential (PRODUCT_CHAT_SERVICE_TOKEN; gifts use PRODUCT_TRIAL_GIFT_SERVICE_TOKEN), workspace and actor/owner scope; never expose service credentials to browser callers.
      */
-    routesReservePost(data: T.RoutesReservePostInput, options?: RequestOptions<T.RoutesReservePostInput>): Promise<import("axios").AxiosResponse<T.RoutesReservePostResponse, T.RoutesReservePostInput, {}>>;
+    routesReservePost(data: T.RoutesReservePostInput, options?: RequestOptions<T.RoutesReservePostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").UsageReservation>, T.RoutesReservePostInput, {}, any>>;
     /**
-     * Performs the finish operation for the routes capability.
+     * Finish. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/internal/plans/reservations/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: trusted backend service credential and tenant scope; not a public browser endpoint.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Trusted backend service Bearer credential (PRODUCT_CHAT_SERVICE_TOKEN; gifts use PRODUCT_TRIAL_GIFT_SERVICE_TOKEN), workspace and actor/owner scope; never expose service credentials to browser callers.
      */
-    routesFinishPost(id: Identifier, data: T.RoutesFinishPostInput, options?: RequestOptions<T.RoutesFinishPostInput>): Promise<import("axios").AxiosResponse<T.RoutesFinishPostResponse, T.RoutesFinishPostInput, {}>>;
+    routesFinishPost(id: Identifier, data: T.RoutesFinishPostInput, options?: RequestOptions<T.RoutesFinishPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").FinishedUsageReservation>, T.RoutesFinishPostInput, {}, any>>;
     /**
-     * Performs the own operation for the routes capability.
+     * Own. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/memory-usage` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
      */
-    routesOwnGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").MemoryUsage>, unknown, {}>>;
+    routesOwnGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").MemoryUsage>, unknown, {}, any>>;
     /**
-     * Performs the folders operation for the routes capability.
+     * Folders. Returns the Task status/message/data envelope with the full Axios status and headers. Queries enforce SQL visibility; reviewed mutations validate each domain grant. Proposal apply rechecks revision and preview atomically; conflicts apply nothing.
      * Calls `GET /api/v1/note-folders` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient; source checks project.read.
      */
-    workspaceFolders(params?: T.RoutesFoldersGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesFoldersGetResponse, unknown, {}>>;
+    workspaceFolders(params: T.RoutesFoldersGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./workspace.js").NoteFolder[]>, unknown, {}, any>>;
     /**
-     * Performs the get operation for the routes capability.
+     * Get. Returns the Task status/message/data envelope with the full Axios status and headers. Feature flags may return 404. Jobs are actor-owned and note edit access is rechecked; extraction creates a preview and requires explicit apply.
      * Calls `GET /api/v1/note-imports/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants.
      */
-    routesGetGetApiV1NoteImportsId(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteImportJob>, unknown, {}>>;
+    routesGetGetApiV1NoteImportsId(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteImportJob>, unknown, {}, any>>;
     /**
-     * Performs the control operation for the routes capability.
+     * Control. Returns the Task status/message/data envelope with the full Axios status and headers. Feature flags may return 404. Jobs are actor-owned and note edit access is rechecked; extraction creates a preview and requires explicit apply.
      * Calls `POST /api/v1/note-imports/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks project.read.
      */
-    routesControlPost(id: Identifier, data: T.RoutesControlPostInput, options?: RequestOptions<T.RoutesControlPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteImportJob>, import("./collaboration.js").ControlNoteImport, {}>>;
+    routesControlPost(id: Identifier, data: T.RoutesControlPostInput, options?: RequestOptions<T.RoutesControlPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteImportJob>, import("./collaboration.js").ControlNoteImport, {}, any>>;
     /**
-     * Performs the apply operation for the routes capability.
+     * Apply. Returns the Task status/message/data envelope with the full Axios status and headers. Feature flags may return 404. Jobs are actor-owned and note edit access is rechecked; extraction creates a preview and requires explicit apply.
      * Calls `POST /api/v1/note-imports/{id}/apply` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks work_item.assign, work_item.read, work_item.update.
      */
-    routesApplyPostApiV1NoteImportsIdApply(id: Identifier, data: T.RoutesApplyPostApiV1NoteImportsIdApplyInput, options?: RequestOptions<T.RoutesApplyPostApiV1NoteImportsIdApplyInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteImportJob>, import("./collaboration.js").ApplyNoteImport, {}>>;
+    routesApplyPostApiV1NoteImportsIdApply(id: Identifier, data: T.RoutesApplyPostApiV1NoteImportsIdApplyInput, options?: RequestOptions<T.RoutesApplyPostApiV1NoteImportsIdApplyInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteImportJob>, import("./collaboration.js").ApplyNoteImport, {}, any>>;
     /**
-     * Performs the cover operation for the routes capability.
+     * Cover. Returns the Task status/message/data envelope with the full Axios status and headers. Private uploads remain quarantined until accepted; current task/note scope and binding rules are rechecked.
      * Calls `PUT /api/v1/notes/{id}/cover` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks project.read, work_item.update.
      */
-    routesCoverPut(id: Identifier, data: T.RoutesCoverPutInput, options?: RequestOptions<T.RoutesCoverPutInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteMedia>, import("./collaboration.js").SetNoteCover, {}>>;
+    routesCoverPut(id: Identifier, data: T.RoutesCoverPutInput, options?: RequestOptions<T.RoutesCoverPutInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteMedia>, import("./collaboration.js").SetNoteCover, {}, any>>;
     /**
-     * Performs the document operation for the routes capability.
+     * Document. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/notes/{id}/document` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants.
      */
-    routesDocumentGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesDocumentGetResponse, unknown, {}>>;
+    routesDocumentGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").NoteDocument>, unknown, {}, any>>;
     /**
-     * Performs the update operation for the routes capability.
+     * Update. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/notes/{id}/document` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants.
      */
-    routesUpdatePost(id: Identifier, data: T.RoutesUpdatePostInput, options?: RequestOptions<T.RoutesUpdatePostInput>): Promise<import("axios").AxiosResponse<T.RoutesUpdatePostResponse, T.RoutesUpdatePostInput, {}>>;
+    routesUpdatePost(id: Identifier, data: T.RoutesUpdatePostInput, options?: RequestOptions<T.RoutesUpdatePostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").NoteDocument>, import("./wire.types.js").SaveNoteDocument, {}, any>>;
     /**
-     * Performs the create operation for the routes capability.
+     * Create. Returns the Task status/message/data envelope with the full Axios status and headers. Feature flags may return 404. Jobs are actor-owned and note edit access is rechecked; extraction creates a preview and requires explicit apply.
      * Calls `POST /api/v1/notes/{id}/imports` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks project.read.
      */
-    routesCreatePostApiV1NotesIdImports(id: Identifier, data: T.RoutesCreatePostApiV1NotesIdImportsInput, options?: RequestOptions<T.RoutesCreatePostApiV1NotesIdImportsInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteImportJob>, import("./collaboration.js").StartNoteImport, {}>>;
+    routesCreatePostApiV1NotesIdImports(id: Identifier, data: T.RoutesCreatePostApiV1NotesIdImportsInput, options?: RequestOptions<T.RoutesCreatePostApiV1NotesIdImportsInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteImportJob>, import("./collaboration.js").StartNoteImport, {}, any>>;
     /**
-     * Performs the status operation for the routes capability.
+     * Status. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/notes/{id}/indexing` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks work_item.read.
      */
-    routesStatusGetApiV1NotesIdIndexing(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteIndexing>, unknown, {}>>;
+    routesStatusGetApiV1NotesIdIndexing(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteIndexing>, unknown, {}, any>>;
     /**
-     * Performs the retry operation for the routes capability.
+     * Retry. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/notes/{id}/indexing` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks work_item.read, work_item.update.
      */
-    routesRetryPost(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesRetryPostResponse, unknown, {}>>;
+    routesRetryPost(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteIndexing>, unknown, {}, any>>;
     /**
-     * Performs the get operation for the routes capability.
+     * Get. Returns the Task status/message/data envelope with the full Axios status and headers. Private uploads remain quarantined until accepted; current task/note scope and binding rules are rechecked.
      * Calls `GET /api/v1/notes/{id}/media` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants.
      */
-    routesGetGetApiV1NotesIdMedia(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteMedia>, unknown, {}>>;
+    routesGetGetApiV1NotesIdMedia(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteMedia>, unknown, {}, any>>;
     /**
-     * Performs the add operation for the routes capability.
+     * Add. Returns the Task status/message/data envelope with the full Axios status and headers. Private uploads remain quarantined until accepted; current task/note scope and binding rules are rechecked.
      * Calls `POST /api/v1/notes/{id}/media` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks project.read, work_item.update.
      */
-    routesAddPost(id: Identifier, data: T.RoutesAddPostInput, options?: RequestOptions<T.RoutesAddPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteMedia>, import("./collaboration.js").AddNoteMedia, {}>>;
+    routesAddPost(id: Identifier, data: T.RoutesAddPostInput, options?: RequestOptions<T.RoutesAddPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteMedia>, import("./collaboration.js").AddNoteMedia, {}, any>>;
     /**
-     * Performs the remove operation for the routes capability.
+     * Remove. Returns the Task status/message/data envelope with the full Axios status and headers. Private uploads remain quarantined until accepted; current task/note scope and binding rules are rechecked.
      * Calls `DELETE /api/v1/notes/{id}/media/{attachment}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param attachment Backend path identifier `attachment`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks project.read, work_item.update.
      */
-    routesRemoveDeleteApiV1NotesIdMediaAttachment(id: Identifier, attachment: Identifier, data: T.RoutesRemoveDeleteApiV1NotesIdMediaAttachmentInput, options?: RequestOptions<T.RoutesRemoveDeleteApiV1NotesIdMediaAttachmentInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteMedia>, import("./collaboration.js").RemoveNoteMedia, {}>>;
+    routesRemoveDeleteApiV1NotesIdMediaAttachment(id: Identifier, attachment: Identifier, data: T.RoutesRemoveDeleteApiV1NotesIdMediaAttachmentInput, options?: RequestOptions<T.RoutesRemoveDeleteApiV1NotesIdMediaAttachmentInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteMedia>, import("./collaboration.js").RemoveNoteMedia, {}, any>>;
     /**
-     * Performs the authorize operation for the routes capability.
+     * Authorize. Raw {auth} signature for the exact private-note channel and numeric/dot socket ID after note-read access; no Task envelope, WebSocket, or credential in query.
      * Calls `POST /api/v1/notes/{id}/realtime/auth` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants.
      */
-    routesAuthorizePost(id: Identifier, data: T.RoutesAuthorizePostInput, options?: RequestOptions<T.RoutesAuthorizePostInput>): Promise<import("axios").AxiosResponse<import("@faiber/sdk-core").JsonValue, T.RoutesAuthorizePostInput, {}>>;
+    routesAuthorizePost(id: Identifier, data: T.RoutesAuthorizePostInput, options?: RequestOptions<T.RoutesAuthorizePostInput>): Promise<import("axios").AxiosResponse<import("./wire.types.js").NoteRealtimeAuthorization, T.RoutesAuthorizePostInput, {}, any>>;
     /**
-     * Performs the config operation for the routes capability.
+     * Config. Returns the Task status/message/data envelope with the full Axios status and headers. Reads note-scoped Sockudo configuration; 503 when required realtime configuration is absent.
      * Calls `GET /api/v1/notes/{id}/realtime/config` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks note.updated.
      */
-    routesConfigGetApiV1NotesIdRealtimeConfig(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesConfigGetApiV1NotesIdRealtimeConfigResponse, unknown, {}>>;
+    routesConfigGetApiV1NotesIdRealtimeConfig(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").NoteRealtimeConfig>, unknown, {}, any>>;
     /**
-     * Performs the create operation for the routes capability.
+     * Create. Returns the Task status/message/data envelope with the full Axios status and headers. Feature flags may return 404. Jobs are actor-owned and note edit access is rechecked; extraction creates a preview and requires explicit apply.
      * Calls `POST /api/v1/notes/{id}/source-imports` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks project.read.
      */
-    routesCreatePostApiV1NotesIdSourceImports(id: Identifier, data: T.RoutesCreatePostApiV1NotesIdSourceImportsInput, options?: RequestOptions<T.RoutesCreatePostApiV1NotesIdSourceImportsInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteImportJob>, import("./collaboration.js").StartSourceImport, {}>>;
+    routesCreatePostApiV1NotesIdSourceImports(id: Identifier, data: T.RoutesCreatePostApiV1NotesIdSourceImportsInput, options?: RequestOptions<T.RoutesCreatePostApiV1NotesIdSourceImportsInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteImportJob>, import("./collaboration.js").StartSourceImport, {}, any>>;
     /**
-     * Performs the catalog operation for the routes capability.
+     * Catalog. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/notes/data/catalog` through the shared IDP-aware Faiber client.
+     * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks project.read.
      */
-    routesCatalogGetApiV1NotesDataCatalog(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesCatalogGetApiV1NotesDataCatalogResponse, unknown, {}>>;
+    routesCatalogGetApiV1NotesDataCatalog(params?: T.RoutesCatalogGetApiV1NotesDataCatalogQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").NoteDataCatalog>, unknown, {}, any>>;
     /**
-     * Performs the search operation for the routes capability.
+     * Search. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/notes/knowledge/search` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; local work_item.read; verified Bearer/cookie identity through FaiberClient; source checks project.read, work_item.read.
      */
-    routesSearchPost(data: T.RoutesSearchPostInput, options?: RequestOptions<T.RoutesSearchPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteKnowledgeResult>, import("./collaboration.js").NoteKnowledgeQuery, {}>>;
+    routesSearchPost(data: T.RoutesSearchPostInput, options?: RequestOptions<T.RoutesSearchPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").NoteKnowledgeResult>, import("./collaboration.js").NoteKnowledgeQuery, {}, any>>;
     /**
-     * Performs the get preferences operation for the routes capability.
+     * Get preferences. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/notification-preferences` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
      */
-    routesGetPreferencesGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesGetPreferencesGetResponse, unknown, {}>>;
+    routesGetPreferencesGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").NotificationPreferences>, unknown, {}, any>>;
     /**
-     * Performs the put preferences operation for the routes capability.
+     * Put preferences. Supply the current integer If-Match; missing preconditions return 428 and stale versions return 409. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `PUT /api/v1/notification-preferences` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
      */
-    routesPutPreferencesPut(data: T.RoutesPutPreferencesPutInput, options?: RequestOptions<T.RoutesPutPreferencesPutInput>): Promise<import("axios").AxiosResponse<T.RoutesPutPreferencesPutResponse, T.RoutesPutPreferencesPutInput, {}>>;
+    routesPutPreferencesPut(data: T.RoutesPutPreferencesPutInput, options?: RequestOptions<T.RoutesPutPreferencesPutInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").NotificationPreferences>, T.RoutesPutPreferencesPutInput, {}, any>>;
     /**
-     * Performs the upsert performance policy operation for the routes capability.
+     * Upsert performance policy. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `PUT /api/v1/performance/policies` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; local performance.manage; verified Bearer/cookie identity through FaiberClient; source checks performance.manage.
      */
-    routesUpsertPerformancePolicyPut(data: T.RoutesUpsertPerformancePolicyPutInput, options?: RequestOptions<T.RoutesUpsertPerformancePolicyPutInput>): Promise<import("axios").AxiosResponse<T.RoutesUpsertPerformancePolicyPutResponse, T.RoutesUpsertPerformancePolicyPutInput, {}>>;
+    routesUpsertPerformancePolicyPut(data: T.RoutesUpsertPerformancePolicyPutInput, options?: RequestOptions<T.RoutesUpsertPerformancePolicyPutInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").PerformancePolicy>, T.RoutesUpsertPerformancePolicyPutInput, {}, any>>;
     /**
-     * Performs the preferences operation for the routes capability.
+     * Preferences. Returns the Task status/message/data envelope with the full Axios status and headers. Queries enforce SQL visibility; reviewed mutations validate each domain grant. Proposal apply rechecks revision and preview atomically; conflicts apply nothing.
      * Calls `GET /api/v1/planning-preferences` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
      */
-    workspacePreferences(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesPreferencesGetResponse, unknown, {}>>;
+    workspacePreferences(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./workspace.js").PlanningPreferencesResult>, unknown, {}, any>>;
     /**
-     * Performs the save preferences operation for the routes capability.
+     * Save preferences. Supply the current integer If-Match; missing preconditions return 428 and stale versions return 409. Returns the Task status/message/data envelope with the full Axios status and headers. Queries enforce SQL visibility; reviewed mutations validate each domain grant. Proposal apply rechecks revision and preview atomically; conflicts apply nothing.
      * Calls `PUT /api/v1/planning-preferences` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
      */
-    workspaceSavePreferences(data: T.RoutesSavePreferencesPutInput, options?: RequestOptions<T.RoutesSavePreferencesPutInput>): Promise<import("axios").AxiosResponse<T.RoutesSavePreferencesPutResponse, T.RoutesSavePreferencesPutInput, {}>>;
+    workspaceSavePreferences(data: T.RoutesSavePreferencesPutInput, options?: RequestOptions<T.RoutesSavePreferencesPutInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./workspace.js").PlanningPreferencesResult>, import("./workspace.js").PlanningPreferences, {}, any>>;
     /**
-     * Performs the get operation for the routes capability.
+     * Get. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/plans` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
      */
-    routesGetGetApiV1Plans(params?: T.RoutesGetGetApiV1PlansQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesGetGetApiV1PlansResponse, unknown, {}>>;
+    routesGetGetApiV1Plans(params?: T.RoutesGetGetApiV1PlansQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").PlanAccount>, unknown, {}, any>>;
     /**
-     * Performs the income operation for the routes capability.
+     * Income. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/plans/admin/income` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
      */
-    routesIncomeGet(params?: T.RoutesIncomeGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesIncomeGetResponse, unknown, {}>>;
+    routesIncomeGet(params: T.RoutesIncomeGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").IncomeReportData>, unknown, {}, any>>;
     /**
-     * Performs the configure operation for the routes capability.
+     * Configure. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `PUT /api/v1/plans/admin/memory-limits` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
      */
-    routesConfigurePut(data: T.RoutesConfigurePutInput, options?: RequestOptions<T.RoutesConfigurePutInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").PlanMemoryLimits>, import("./collaboration.js").PlanMemoryLimits, {}>>;
+    routesConfigurePut(data: T.RoutesConfigurePutInput, options?: RequestOptions<T.RoutesConfigurePutInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").PlanMemoryLimits>, import("./collaboration.js").PlanMemoryLimits, {}, any>>;
     /**
-     * Performs the users operation for the routes capability.
+     * Users. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/plans/admin/users` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
      */
-    routesUsersGet(params?: T.RoutesUsersGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesUsersGetResponse, unknown, {}>>;
+    routesUsersGet(params: T.RoutesUsersGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").AdminUserPlansData>, unknown, {}, any>>;
     /**
-     * Performs the checkout operation for the routes capability.
+     * Checkout. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/plans/checkout` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
      */
-    routesCheckoutPost(data: T.RoutesCheckoutPostInput, options?: RequestOptions<T.RoutesCheckoutPostInput>): Promise<import("axios").AxiosResponse<T.RoutesCheckoutPostResponse, T.RoutesCheckoutPostInput, {}>>;
+    routesCheckoutPost(data: T.RoutesCheckoutPostInput, options?: RequestOptions<T.RoutesCheckoutPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").PlanCheckoutResult>, T.RoutesCheckoutPostInput, {}, any>>;
     /**
-     * Performs the redeem operation for the routes capability.
+     * Redeem. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/plans/gift` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
      */
-    routesRedeemPost(data: T.RoutesRedeemPostInput, options?: RequestOptions<T.RoutesRedeemPostInput>): Promise<import("axios").AxiosResponse<T.RoutesRedeemPostResponse, T.RoutesRedeemPostInput, {}>>;
+    routesRedeemPost(data: T.RoutesRedeemPostInput, options?: RequestOptions<T.RoutesRedeemPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").PlanRedeemed>, T.RoutesRedeemPostInput, {}, any>>;
     /**
-     * Performs the gift operation for the routes capability.
+     * Gift. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/plans/gift-tokens` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
      */
-    routesGiftPost(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesGiftPostResponse, unknown, {}>>;
+    routesGiftPost(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").PlanGiftToken>, unknown, {}, any>>;
     /**
-     * Performs the catalog operation for the routes capability.
+     * Catalog. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/plans/memory-limits` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
      */
-    routesCatalogGetApiV1PlansMemoryLimits(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").PlanMemoryLimits>, unknown, {}>>;
+    routesCatalogGetApiV1PlansMemoryLimits(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").PlanMemoryLimits>, unknown, {}, any>>;
     /**
-     * Performs the reconcile operation for the routes capability.
+     * Reconcile. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/plans/orders/{id}/reconcile` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants.
      */
-    routesReconcilePost(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesReconcilePostResponse, unknown, {}>>;
+    routesReconcilePost(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").PlanReconcile>, unknown, {}, any>>;
     /**
-     * Performs the point history operation for the routes capability.
+     * Point history. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/points/history` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; local report.read; verified Bearer/cookie identity through FaiberClient; source checks report.read.
      */
-    routesPointHistoryGet(params?: T.RoutesPointHistoryGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesPointHistoryGetResponse, unknown, {}>>;
+    routesPointHistoryGet(params?: T.RoutesPointHistoryGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").PointHistoryEntry[]>, unknown, {}, any>>;
     /**
-     * Performs the list projects operation for the routes capability.
+     * List projects. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/projects` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; local project.read; verified Bearer/cookie identity through FaiberClient.
      */
-    routesListProjectsGet(params?: T.RoutesListProjectsGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesListProjectsGetResponse, unknown, {}>>;
+    routesListProjectsGet(params?: T.RoutesListProjectsGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskPageResponse<import("./types.js").Project>, unknown, {}, any>>;
     /**
-     * Performs the create project operation for the routes capability.
+     * Create project. Returns HTTP 201 with the Task status/message/data envelope; ETag is preserved when supplied.
      * Calls `POST /api/v1/projects` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; local project.create; verified Bearer/cookie identity through FaiberClient.
      */
-    routesCreateProjectPost(data: T.RoutesCreateProjectPostInput, options?: RequestOptions<T.RoutesCreateProjectPostInput>): Promise<import("axios").AxiosResponse<T.RoutesCreateProjectPostResponse, T.RoutesCreateProjectPostInput, {}>>;
+    routesCreateProjectPost(data: T.RoutesCreateProjectPostInput, options?: RequestOptions<T.RoutesCreateProjectPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").Project>, import("./types.js").CreateProjectInput, {}, any>>;
     /**
-     * Performs the get project operation for the routes capability.
+     * Get project. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/projects/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks project.read.
      */
-    routesGetProjectGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesGetProjectGetResponse, unknown, {}>>;
+    routesGetProjectGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").Project>, unknown, {}, any>>;
     /**
-     * Performs the update project operation for the routes capability.
+     * Update project. Supply the current integer If-Match; missing preconditions return 428 and stale versions return 409. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `PATCH /api/v1/projects/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks project.update.
      */
-    routesUpdateProjectPatch(id: Identifier, data: T.RoutesUpdateProjectPatchInput, options?: RequestOptions<T.RoutesUpdateProjectPatchInput>): Promise<import("axios").AxiosResponse<T.RoutesUpdateProjectPatchResponse, T.RoutesUpdateProjectPatchInput, {}>>;
+    routesUpdateProjectPatch(id: Identifier, data: T.RoutesUpdateProjectPatchInput, options?: RequestOptions<T.RoutesUpdateProjectPatchInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").Project>, import("./types.js").UpdateProjectInput, {}, any>>;
     /**
-     * Performs the get operation for the routes capability.
+     * Get. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/projects/{id}/board-workflow` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks project.read.
      */
-    routesGetGetApiV1ProjectsIdBoardWorkflow(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").BoardWorkflow>, unknown, {}>>;
+    routesGetGetApiV1ProjectsIdBoardWorkflow(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").BoardWorkflow>, unknown, {}, any>>;
     /**
-     * Performs the put operation for the routes capability.
+     * Put. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `PUT /api/v1/projects/{id}/board-workflow` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks project.members.manage, work_item.rank, work_item.transition.
      */
-    routesPutPutApiV1ProjectsIdBoardWorkflow(id: Identifier, data: T.RoutesPutPutApiV1ProjectsIdBoardWorkflowInput, options?: RequestOptions<T.RoutesPutPutApiV1ProjectsIdBoardWorkflowInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").BoardWorkflow>, import("./collaboration.js").SaveBoardWorkflow, {}>>;
+    routesPutPutApiV1ProjectsIdBoardWorkflow(id: Identifier, data: T.RoutesPutPutApiV1ProjectsIdBoardWorkflowInput, options?: RequestOptions<T.RoutesPutPutApiV1ProjectsIdBoardWorkflowInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").BoardWorkflow>, import("./collaboration.js").SaveBoardWorkflow, {}, any>>;
     /**
-     * Performs the project checklists operation for the routes capability.
+     * Project checklists. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/projects/{id}/checklists` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks work_item.read.
      */
-    routesProjectChecklistsGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesProjectChecklistsGetResponse, unknown, {}>>;
+    routesProjectChecklistsGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").ChecklistSnapshot[]>, unknown, {}, any>>;
     /**
-     * Performs the grant project access operation for the routes capability.
+     * Grant project access. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/projects/{id}/grants` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks project.members.manage, workspace.manage.
      */
-    routesGrantProjectAccessPost(id: Identifier, data: T.RoutesGrantProjectAccessPostInput, options?: RequestOptions<T.RoutesGrantProjectAccessPostInput>): Promise<import("axios").AxiosResponse<T.RoutesGrantProjectAccessPostResponse, T.RoutesGrantProjectAccessPostInput, {}>>;
+    routesGrantProjectAccessPost(id: Identifier, data: T.RoutesGrantProjectAccessPostInput, options?: RequestOptions<T.RoutesGrantProjectAccessPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").GrantProjectAccessResult>, T.RoutesGrantProjectAccessPostInput, {}, any>>;
     /**
-     * Performs the members operation for the routes capability.
+     * Members. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/projects/{id}/members` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks project.read.
      */
-    routesMembersGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesMembersGetResponse, unknown, {}>>;
+    routesMembersGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").ProjectMember[]>, unknown, {}, any>>;
     /**
-     * Performs the remove member operation for the routes capability.
+     * Remove member. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `DELETE /api/v1/projects/{id}/members/{user_id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param userId Backend path identifier `user_id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks project.members.manage.
      */
-    routesRemoveMemberDelete(id: Identifier, userId: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesRemoveMemberDeleteResponse, unknown, {}>>;
+    routesRemoveMemberDelete(id: Identifier, userId: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").RemovalResult>, unknown, {}, any>>;
     /**
-     * Performs the get operation for the routes capability.
+     * Get. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/projects/{id}/memory-usage` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks project.read.
      */
-    routesGetGetApiV1ProjectsIdMemoryUsage(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").MemoryUsage>, unknown, {}>>;
+    routesGetGetApiV1ProjectsIdMemoryUsage(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").MemoryUsage>, unknown, {}, any>>;
     /**
-     * Performs the get operation for the routes capability.
+     * Get. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/projects/{id}/report` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks report.read.
      */
-    routesGetGetApiV1ProjectsIdReport(id: Identifier, params?: T.RoutesGetGetApiV1ProjectsIdReportQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesGetGetApiV1ProjectsIdReportResponse, unknown, {}>>;
+    routesGetGetApiV1ProjectsIdReport(id: Identifier, params: T.RoutesGetGetApiV1ProjectsIdReportQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesGetGetApiV1ProjectsIdReportResponse, unknown, {}, any>>;
     /**
-     * Performs the workflow states operation for the routes capability.
+     * Workflow states. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/projects/{id}/workflow` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks project.read.
      */
-    routesWorkflowStatesGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesWorkflowStatesGetResponse, unknown, {}>>;
+    routesWorkflowStatesGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesWorkflowStatesGetResponse, unknown, {}, any>>;
     /**
-     * Performs the ensure personal project operation for the routes capability.
+     * Ensure personal project. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/projects/personal` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
      */
-    routesEnsurePersonalProjectPost(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").ProjectResponse, unknown, {}>>;
+    routesEnsurePersonalProjectPost(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").ProjectResponse, unknown, {}, any>>;
     /**
-     * Performs the create shared project operation for the routes capability.
+     * Create shared project. Returns HTTP 201 with the Task status/message/data envelope; ETag is preserved when supplied.
      * Calls `POST /api/v1/projects/shared` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
      */
-    routesCreateSharedProjectPost(data: T.RoutesCreateSharedProjectPostInput, options?: RequestOptions<T.RoutesCreateSharedProjectPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").ProjectResponse, T.RoutesCreateSharedProjectPostInput, {}>>;
+    routesCreateSharedProjectPost(data: T.RoutesCreateSharedProjectPostInput, options?: RequestOptions<T.RoutesCreateSharedProjectPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").ProjectResponse, T.RoutesCreateSharedProjectPostInput, {}, any>>;
     /**
-     * Performs the report summary operation for the routes capability.
+     * Report summary. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/reports/summary` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; local report.read; verified Bearer/cookie identity through FaiberClient; source checks report.read.
      */
-    routesReportSummaryGet(params?: T.RoutesReportSummaryGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesReportSummaryGetResponse, unknown, {}>>;
+    routesReportSummaryGet(params: T.RoutesReportSummaryGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesReportSummaryGetResponse, unknown, {}, any>>;
     /**
-     * Performs the team monitoring operation for the routes capability.
+     * Team monitoring. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/reports/team-monitoring` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; local report.read; verified Bearer/cookie identity through FaiberClient; source checks report.read.
      */
-    routesTeamMonitoringGet(params?: T.RoutesTeamMonitoringGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesTeamMonitoringGetResponse, unknown, {}>>;
+    routesTeamMonitoringGet(params?: T.RoutesTeamMonitoringGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").TeamMonitoring>, unknown, {}, any>>;
     /**
-     * Performs the propose operation for the routes capability.
+     * Propose. Returns the Task status/message/data envelope with the full Axios status and headers. Queries enforce SQL visibility; reviewed mutations validate each domain grant. Proposal apply rechecks revision and preview atomically; conflicts apply nothing.
      * Calls `POST /api/v1/review-proposals` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
      */
-    workspacePropose(data: T.RoutesProposePostInput, options?: RequestOptions<T.RoutesProposePostInput>): Promise<import("axios").AxiosResponse<T.RoutesProposePostResponse, T.RoutesProposePostInput, {}>>;
+    workspacePropose(data: T.RoutesProposePostInput, options?: RequestOptions<T.RoutesProposePostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./workspace.js").ReviewProposal>, import("./workspace.js").ReviewProposalInput, {}, any>>;
     /**
-     * Performs the get operation for the routes capability.
+     * Get. Returns the Task status/message/data envelope with the full Axios status and headers. Queries enforce SQL visibility; reviewed mutations validate each domain grant. Proposal apply rechecks revision and preview atomically; conflicts apply nothing.
      * Calls `GET /api/v1/review-proposals/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks project.read, work_item.read.
      */
-    workspaceProposal(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesGetGetApiV1ReviewProposalsIdResponse, unknown, {}>>;
+    workspaceProposal(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./workspace.js").ReviewProposal>, unknown, {}, any>>;
     /**
-     * Performs the revise operation for the routes capability.
+     * Revise. Supply the current integer If-Match; missing preconditions return 428 and stale versions return 409. Returns the Task status/message/data envelope with the full Axios status and headers. Queries enforce SQL visibility; reviewed mutations validate each domain grant. Proposal apply rechecks revision and preview atomically; conflicts apply nothing.
      * Calls `PUT /api/v1/review-proposals/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants.
      */
-    workspaceRevise(id: Identifier, data: T.RoutesRevisePutInput, options?: RequestOptions<T.RoutesRevisePutInput>): Promise<import("axios").AxiosResponse<T.RoutesRevisePutResponse, T.RoutesRevisePutInput, {}>>;
+    workspaceRevise(id: Identifier, data: T.RoutesRevisePutInput, options?: RequestOptions<T.RoutesRevisePutInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./workspace.js").ReviewProposal>, import("./workspace.js").ReviewProposalInput, {}, any>>;
     /**
-     * Performs the apply operation for the routes capability.
+     * Apply. Supply the current integer If-Match; missing preconditions return 428 and stale versions return 409. Returns the Task status/message/data envelope with the full Axios status and headers. Queries enforce SQL visibility; reviewed mutations validate each domain grant. Proposal apply rechecks revision and preview atomically; conflicts apply nothing.
      * Calls `POST /api/v1/review-proposals/{id}/apply` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants.
      */
-    workspaceApply(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesApplyPostApiV1ReviewProposalsIdApplyResponse, unknown, {}>>;
+    workspaceApply(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./workspace.js").ReviewProposal>, unknown, {}, any>>;
     /**
-     * Performs the refresh operation for the routes capability.
+     * Refresh. Returns the Task status/message/data envelope with the full Axios status and headers. Queries enforce SQL visibility; reviewed mutations validate each domain grant. Proposal apply rechecks revision and preview atomically; conflicts apply nothing.
      * Calls `POST /api/v1/review-proposals/{id}/refresh` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants.
      */
-    workspaceRefresh(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesRefreshPostResponse, unknown, {}>>;
+    workspaceRefresh(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./workspace.js").ReviewProposal>, unknown, {}, any>>;
     /**
-     * Performs the validate proposal operation for the routes capability.
+     * Validate proposal. Returns the Task status/message/data envelope with the full Axios status and headers. Queries enforce SQL visibility; reviewed mutations validate each domain grant. Proposal apply rechecks revision and preview atomically; conflicts apply nothing.
      * Calls `POST /api/v1/review-proposals/validate` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; handler-specific local scope; verified Bearer/cookie identity through FaiberClient.
      */
-    workspaceValidate(data: T.RoutesValidateProposalPostInput, options?: RequestOptions<T.RoutesValidateProposalPostInput>): Promise<import("axios").AxiosResponse<T.RoutesValidateProposalPostResponse, T.RoutesValidateProposalPostInput, {}>>;
+    workspaceValidate(data: T.RoutesValidateProposalPostInput, options?: RequestOptions<T.RoutesValidateProposalPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./workspace.js").ReviewPreviewResult>, import("./workspace.js").ReviewProposalInput, {}, any>>;
     /**
-     * Performs the list sprints operation for the routes capability.
+     * List sprints. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/sprints` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; local sprint.read; verified Bearer/cookie identity through FaiberClient.
      */
-    routesListSprintsGet(params?: T.RoutesListSprintsGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesListSprintsGetResponse, unknown, {}>>;
+    routesListSprintsGet(params?: T.RoutesListSprintsGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesListSprintsGetResponse, unknown, {}, any>>;
     /**
-     * Performs the create sprint operation for the routes capability.
+     * Create sprint. Returns HTTP 201 with the Task status/message/data envelope; ETag is preserved when supplied.
      * Calls `POST /api/v1/sprints` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; local sprint.manage; verified Bearer/cookie identity through FaiberClient; source checks sprint.manage.
      */
-    routesCreateSprintPost(data: T.RoutesCreateSprintPostInput, options?: RequestOptions<T.RoutesCreateSprintPostInput>): Promise<import("axios").AxiosResponse<T.RoutesCreateSprintPostResponse, T.RoutesCreateSprintPostInput, {}>>;
+    routesCreateSprintPost(data: T.RoutesCreateSprintPostInput, options?: RequestOptions<T.RoutesCreateSprintPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").Sprint>, T.RoutesCreateSprintPostInput, {}, any>>;
     /**
-     * Performs the complete sprint operation for the routes capability.
+     * Complete sprint. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/sprints/{id}/complete` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks sprint.complete.
      */
-    routesCompleteSprintPost(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesCompleteSprintPostResponse, unknown, {}>>;
+    routesCompleteSprintPost(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").Sprint>, unknown, {}, any>>;
     /**
-     * Performs the start sprint operation for the routes capability.
+     * Start sprint. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/sprints/{id}/start` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks sprint.start.
      */
-    routesStartSprintPost(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesStartSprintPostResponse, unknown, {}>>;
+    routesStartSprintPost(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").Sprint>, unknown, {}, any>>;
     /**
-     * Performs the list teams operation for the routes capability.
+     * List teams. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/teams` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; local team.read; verified Bearer/cookie identity through FaiberClient.
      */
-    routesListTeamsGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesListTeamsGetResponse, unknown, {}>>;
+    routesListTeamsGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesListTeamsGetResponse, unknown, {}, any>>;
     /**
-     * Performs the create team operation for the routes capability.
+     * Create team. Returns HTTP 201 with the Task status/message/data envelope; ETag is preserved when supplied.
      * Calls `POST /api/v1/teams` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; local team.manage; verified Bearer/cookie identity through FaiberClient; source checks team.manage, team.read.
      */
-    routesCreateTeamPost(data: T.RoutesCreateTeamPostInput, options?: RequestOptions<T.RoutesCreateTeamPostInput>): Promise<import("axios").AxiosResponse<T.RoutesCreateTeamPostResponse, T.RoutesCreateTeamPostInput, {}>>;
+    routesCreateTeamPost(data: T.RoutesCreateTeamPostInput, options?: RequestOptions<T.RoutesCreateTeamPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").Team>, T.RoutesCreateTeamPostInput, {}, any>>;
     /**
-     * Performs the get team operation for the routes capability.
+     * Get team. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/teams/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks team.read.
      */
-    routesGetTeamGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesGetTeamGetResponse, unknown, {}>>;
+    routesGetTeamGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").Team>, unknown, {}, any>>;
     /**
-     * Performs the update team operation for the routes capability.
+     * Update team. Supply the current integer If-Match; missing preconditions return 428 and stale versions return 409. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `PATCH /api/v1/teams/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks team.manage, team.read.
      */
-    routesUpdateTeamPatch(id: Identifier, data: T.RoutesUpdateTeamPatchInput, options?: RequestOptions<T.RoutesUpdateTeamPatchInput>): Promise<import("axios").AxiosResponse<T.RoutesUpdateTeamPatchResponse, T.RoutesUpdateTeamPatchInput, {}>>;
+    routesUpdateTeamPatch(id: Identifier, data: T.RoutesUpdateTeamPatchInput, options?: RequestOptions<T.RoutesUpdateTeamPatchInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").Team>, T.RoutesUpdateTeamPatchInput, {}, any>>;
     /**
-     * Performs the list work items operation for the routes capability.
+     * List work items. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/work-items` through the shared IDP-aware Faiber client.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; local work_item.read; verified Bearer/cookie identity through FaiberClient.
      */
-    routesListWorkItemsGet(params?: T.RoutesListWorkItemsGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesListWorkItemsGetResponse, unknown, {}>>;
+    routesListWorkItemsGet(params?: T.RoutesListWorkItemsGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskPageResponse<import("./types.js").WorkItem>, unknown, {}, any>>;
     /**
-     * Performs the create work item operation for the routes capability.
+     * Create work item. Returns HTTP 201 with the Task status/message/data envelope; ETag is preserved when supplied.
      * Calls `POST /api/v1/work-items` through the shared IDP-aware Faiber client.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; local work_item.create; verified Bearer/cookie identity through FaiberClient; source checks work_item.assign, work_item.create.
      */
-    routesCreateWorkItemPost(data: T.RoutesCreateWorkItemPostInput, options?: RequestOptions<T.RoutesCreateWorkItemPostInput>): Promise<import("axios").AxiosResponse<T.RoutesCreateWorkItemPostResponse, T.RoutesCreateWorkItemPostInput, {}>>;
+    routesCreateWorkItemPost(data: T.RoutesCreateWorkItemPostInput, options?: RequestOptions<T.RoutesCreateWorkItemPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").WorkItem>, import("./types.js").CreateWorkItemInput, {}, any>>;
     /**
-     * Performs the remove work item operation for the routes capability.
+     * Remove work item. Supply the current integer If-Match; missing preconditions return 428 and stale versions return 409. Returns HTTP 204 with no response body.
      * Calls `DELETE /api/v1/work-items/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks work_item.read.
      */
-    routesRemoveWorkItemDelete(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<void, unknown, {}>>;
+    routesRemoveWorkItemDelete(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<void, unknown, {}, any>>;
     /**
-     * Performs the get work item operation for the routes capability.
+     * Get work item. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/work-items/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks work_item.read.
      */
-    routesGetWorkItemGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesGetWorkItemGetResponse, unknown, {}>>;
+    routesGetWorkItemGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").WorkItem>, unknown, {}, any>>;
     /**
-     * Performs the update work item operation for the routes capability.
+     * Update work item. Supply the current integer If-Match; missing preconditions return 428 and stale versions return 409. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `PATCH /api/v1/work-items/{id}` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks work_item.assign, work_item.update.
      */
-    routesUpdateWorkItemPatch(id: Identifier, data: T.RoutesUpdateWorkItemPatchInput, options?: RequestOptions<T.RoutesUpdateWorkItemPatchInput>): Promise<import("axios").AxiosResponse<T.RoutesUpdateWorkItemPatchResponse, T.RoutesUpdateWorkItemPatchInput, {}>>;
+    routesUpdateWorkItemPatch(id: Identifier, data: T.RoutesUpdateWorkItemPatchInput, options?: RequestOptions<T.RoutesUpdateWorkItemPatchInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").WorkItem>, import("./types.js").UpdateWorkItemInput, {}, any>>;
     /**
-     * Performs the work item activity operation for the routes capability.
+     * Work item activity. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/work-items/{id}/activity` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks work_item.read.
      */
-    routesWorkItemActivityGet(id: Identifier, params?: T.RoutesWorkItemActivityGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesWorkItemActivityGetResponse, unknown, {}>>;
+    routesWorkItemActivityGet(id: Identifier, params?: T.RoutesWorkItemActivityGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").WorkItemActivity[]>, unknown, {}, any>>;
     /**
-     * Performs the create operation for the routes capability.
+     * Create. Returns the Task status/message/data envelope with the full Axios status and headers. Private uploads remain quarantined until accepted; current task/note scope and binding rules are rechecked.
      * Calls `POST /api/v1/work-items/{id}/attachments` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks attachment.create, comment.create, project.read, work_item.update.
      */
-    routesCreatePostApiV1WorkItemsIdAttachments(id: Identifier, data: T.RoutesCreatePostApiV1WorkItemsIdAttachmentsInput, options?: RequestOptions<T.RoutesCreatePostApiV1WorkItemsIdAttachmentsInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").TaskAttachment>, import("./collaboration.js").CreateAttachment, {}>>;
+    routesCreatePostApiV1WorkItemsIdAttachments(id: Identifier, data: T.RoutesCreatePostApiV1WorkItemsIdAttachmentsInput, options?: RequestOptions<T.RoutesCreatePostApiV1WorkItemsIdAttachmentsInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./collaboration.js").TaskAttachment>, import("./collaboration.js").CreateAttachment, {}, any>>;
     /**
-     * Performs the work item checklist operation for the routes capability.
+     * Work item checklist. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/work-items/{id}/checklist` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks work_item.read.
      */
-    routesWorkItemChecklistGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesWorkItemChecklistGetResponse, unknown, {}>>;
+    routesWorkItemChecklistGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").ChecklistSnapshot>, unknown, {}, any>>;
     /**
-     * Performs the replace checklist operation for the routes capability.
+     * Replace checklist. Supply the current integer If-Match; missing preconditions return 428 and stale versions return 409. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `PUT /api/v1/work-items/{id}/checklist` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks project.read, work_item.read, work_item.update.
      */
-    routesReplaceChecklistPut(id: Identifier, data: T.RoutesReplaceChecklistPutInput, options?: RequestOptions<T.RoutesReplaceChecklistPutInput>): Promise<import("axios").AxiosResponse<T.RoutesReplaceChecklistPutResponse, T.RoutesReplaceChecklistPutInput, {}>>;
+    routesReplaceChecklistPut(id: Identifier, data: T.RoutesReplaceChecklistPutInput, options?: RequestOptions<T.RoutesReplaceChecklistPutInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").ChecklistResult>, T.RoutesReplaceChecklistPutInput, {}, any>>;
     /**
-     * Performs the list comments operation for the routes capability.
+     * List comments. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/work-items/{id}/comments` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks work_item.read.
      */
-    routesListCommentsGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesListCommentsGetResponse, unknown, {}>>;
+    routesListCommentsGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesListCommentsGetResponse, unknown, {}, any>>;
     /**
-     * Performs the create comment operation for the routes capability.
+     * Create comment. Returns HTTP 201 with the Task status/message/data envelope; ETag is preserved when supplied.
      * Calls `POST /api/v1/work-items/{id}/comments` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks comment.create.
      */
-    routesCreateCommentPost(id: Identifier, data: T.RoutesCreateCommentPostInput, options?: RequestOptions<T.RoutesCreateCommentPostInput>): Promise<import("axios").AxiosResponse<T.RoutesCreateCommentPostResponse, T.RoutesCreateCommentPostInput, {}>>;
+    routesCreateCommentPost(id: Identifier, data: T.RoutesCreateCommentPostInput, options?: RequestOptions<T.RoutesCreateCommentPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").Comment>, T.RoutesCreateCommentPostInput, {}, any>>;
     /**
-     * Performs the comment page operation for the routes capability.
+     * Comment page. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/work-items/{id}/comments/page` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param params Typed query parameters; omitted members retain backend defaults.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks work_item.read.
      */
-    routesCommentPageGet(id: Identifier, params?: T.RoutesCommentPageGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesCommentPageGetResponse, unknown, {}>>;
+    routesCommentPageGet(id: Identifier, params?: T.RoutesCommentPageGetQuery, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesCommentPageGetResponse, unknown, {}, any>>;
     /**
-     * Performs the list commits operation for the routes capability.
+     * List commits. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/work-items/{id}/commits` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks work_item.read.
      */
-    routesListCommitsGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesListCommitsGetResponse, unknown, {}>>;
+    routesListCommitsGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesListCommitsGetResponse, unknown, {}, any>>;
     /**
-     * Performs the attach commit operation for the routes capability.
+     * Attach commit. Returns HTTP 201 with the Task status/message/data envelope; ETag is preserved when supplied.
      * Calls `POST /api/v1/work-items/{id}/commits` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks work_item.update.
      */
-    routesAttachCommitPost(id: Identifier, data: T.RoutesAttachCommitPostInput, options?: RequestOptions<T.RoutesAttachCommitPostInput>): Promise<import("axios").AxiosResponse<T.RoutesAttachCommitPostResponse, T.RoutesAttachCommitPostInput, {}>>;
+    routesAttachCommitPost(id: Identifier, data: T.RoutesAttachCommitPostInput, options?: RequestOptions<T.RoutesAttachCommitPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").CommitLink>, T.RoutesAttachCommitPostInput, {}, any>>;
     /**
-     * Performs the add points operation for the routes capability.
+     * Add points. Returns HTTP 201 with the Task status/message/data envelope; ETag is preserved when supplied.
      * Calls `POST /api/v1/work-items/{id}/points` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks points.manage.
      */
-    routesAddPointsPost(id: Identifier, data: T.RoutesAddPointsPostInput, options?: RequestOptions<T.RoutesAddPointsPostInput>): Promise<import("axios").AxiosResponse<T.RoutesAddPointsPostResponse, T.RoutesAddPointsPostInput, {}>>;
+    routesAddPointsPost(id: Identifier, data: T.RoutesAddPointsPostInput, options?: RequestOptions<T.RoutesAddPointsPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").PointEntry>, T.RoutesAddPointsPostInput, {}, any>>;
     /**
-     * Performs the remove operation for the routes capability.
+     * Remove. Supply the current integer If-Match; missing preconditions return 428 and stale versions return 409. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `DELETE /api/v1/work-items/{id}/reminder` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants.
      */
-    routesRemoveDeleteApiV1WorkItemsIdReminder(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesRemoveDeleteApiV1WorkItemsIdReminderResponse, unknown, {}>>;
+    routesRemoveDeleteApiV1WorkItemsIdReminder(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").RemovalResult>, unknown, {}, any>>;
     /**
-     * Performs the get operation for the routes capability.
+     * Get. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/work-items/{id}/reminder` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants.
      */
-    routesGetGetApiV1WorkItemsIdReminder(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesGetGetApiV1WorkItemsIdReminderResponse, unknown, {}>>;
+    routesGetGetApiV1WorkItemsIdReminder(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").Reminder | null>, unknown, {}, any>>;
     /**
-     * Performs the put operation for the routes capability.
+     * Put. Supply the current integer If-Match; missing preconditions return 428 and stale versions return 409. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `PUT /api/v1/work-items/{id}/reminder` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants.
      */
-    routesPutPutApiV1WorkItemsIdReminder(id: Identifier, data: T.RoutesPutPutApiV1WorkItemsIdReminderInput, options?: RequestOptions<T.RoutesPutPutApiV1WorkItemsIdReminderInput>): Promise<import("axios").AxiosResponse<T.RoutesPutPutApiV1WorkItemsIdReminderResponse, T.RoutesPutPutApiV1WorkItemsIdReminderInput, {}>>;
+    routesPutPutApiV1WorkItemsIdReminder(id: Identifier, data: T.RoutesPutPutApiV1WorkItemsIdReminderInput, options?: RequestOptions<T.RoutesPutPutApiV1WorkItemsIdReminderInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").Reminder>, import("./types.js").ReminderInput, {}, any>>;
     /**
-     * Performs the transition work item operation for the routes capability.
+     * Transition work item. Supply the current integer If-Match; missing preconditions return 428 and stale versions return 409. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/work-items/{id}/transition` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks work_item.rank, work_item.transition.
      */
-    routesTransitionWorkItemPost(id: Identifier, data: T.RoutesTransitionWorkItemPostInput, options?: RequestOptions<T.RoutesTransitionWorkItemPostInput>): Promise<import("axios").AxiosResponse<T.RoutesTransitionWorkItemPostResponse, T.RoutesTransitionWorkItemPostInput, {}>>;
+    routesTransitionWorkItemPost(id: Identifier, data: T.RoutesTransitionWorkItemPostInput, options?: RequestOptions<T.RoutesTransitionWorkItemPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./types.js").WorkItem>, T.RoutesTransitionWorkItemPostInput, {}, any>>;
     /**
-     * Performs the list work logs operation for the routes capability.
+     * List work logs. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/work-items/{id}/work-logs` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks work_item.read.
      */
-    routesListWorkLogsGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesListWorkLogsGetResponse, unknown, {}>>;
+    routesListWorkLogsGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesListWorkLogsGetResponse, unknown, {}, any>>;
     /**
-     * Performs the create work log operation for the routes capability.
+     * Create work log. Returns HTTP 201 with the Task status/message/data envelope; ETag is preserved when supplied.
      * Calls `POST /api/v1/work-items/{id}/work-logs` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks time_log.create.
      */
-    routesCreateWorkLogPost(id: Identifier, data: T.RoutesCreateWorkLogPostInput, options?: RequestOptions<T.RoutesCreateWorkLogPostInput>): Promise<import("axios").AxiosResponse<T.RoutesCreateWorkLogPostResponse, T.RoutesCreateWorkLogPostInput, {}>>;
+    routesCreateWorkLogPost(id: Identifier, data: T.RoutesCreateWorkLogPostInput, options?: RequestOptions<T.RoutesCreateWorkLogPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").WorkLog>, T.RoutesCreateWorkLogPostInput, {}, any>>;
     /**
-     * Performs the list work sessions operation for the routes capability.
+     * List work sessions. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/work-items/{id}/work-sessions` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks work_item.read.
      */
-    routesListWorkSessionsGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesListWorkSessionsGetResponse, unknown, {}>>;
+    routesListWorkSessionsGet(id: Identifier, options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesListWorkSessionsGetResponse, unknown, {}, any>>;
     /**
-     * Performs the start work session operation for the routes capability.
+     * Start work session. Returns HTTP 201 with the Task status/message/data envelope; ETag is preserved when supplied.
      * Calls `POST /api/v1/work-items/{id}/work-sessions/start` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks time_log.create.
      */
-    routesStartWorkSessionPost(id: Identifier, data: T.RoutesStartWorkSessionPostInput, options?: RequestOptions<T.RoutesStartWorkSessionPostInput>): Promise<import("axios").AxiosResponse<T.RoutesStartWorkSessionPostResponse, T.RoutesStartWorkSessionPostInput, {}>>;
+    routesStartWorkSessionPost(id: Identifier, data: T.RoutesStartWorkSessionPostInput, options?: RequestOptions<T.RoutesStartWorkSessionPostInput>): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").StartedWorkSession>, T.RoutesStartWorkSessionPostInput, {}, any>>;
     /**
-     * Performs the heartbeat work session operation for the routes capability.
+     * Heartbeat work session. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/work-sessions/{id}/heartbeat` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks time_log.create.
      */
-    routesHeartbeatWorkSessionPost(id: Identifier, data: T.RoutesHeartbeatWorkSessionPostInput, options?: RequestOptions<T.RoutesHeartbeatWorkSessionPostInput>): Promise<import("axios").AxiosResponse<T.RoutesHeartbeatWorkSessionPostResponse, T.RoutesHeartbeatWorkSessionPostInput, {}>>;
+    routesHeartbeatWorkSessionPost(id: Identifier, data: T.RoutesHeartbeatWorkSessionPostInput, options?: RequestOptions<T.RoutesHeartbeatWorkSessionPostInput>): Promise<import("axios").AxiosResponse<T.RoutesHeartbeatWorkSessionPostResponse, T.RoutesHeartbeatWorkSessionPostInput, {}, any>>;
     /**
-     * Performs the stop work session operation for the routes capability.
+     * Stop work session. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `POST /api/v1/work-sessions/{id}/stop` through the shared IDP-aware Faiber client.
      * @param id Backend path identifier `id`.
      * @param data Typed JSON request body.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: Verified IDP Bearer/cookie identity through FaiberClient; configured task:access:use and current workspace/resource grants; source checks time_log.create, time_log.manage.
      */
-    routesStopWorkSessionPost(id: Identifier, data: T.RoutesStopWorkSessionPostInput, options?: RequestOptions<T.RoutesStopWorkSessionPostInput>): Promise<import("axios").AxiosResponse<T.RoutesStopWorkSessionPostResponse, T.RoutesStopWorkSessionPostInput, {}>>;
+    routesStopWorkSessionPost(id: Identifier, data: T.RoutesStopWorkSessionPostInput, options?: RequestOptions<T.RoutesStopWorkSessionPostInput>): Promise<import("axios").AxiosResponse<T.RoutesStopWorkSessionPostResponse, T.RoutesStopWorkSessionPostInput, {}, any>>;
     /**
-     * Performs the active work sessions operation for the routes capability.
+     * Active work sessions. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/work-sessions/active` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; local time_log.create; verified Bearer/cookie identity through FaiberClient.
      */
-    routesActiveWorkSessionsGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesActiveWorkSessionsGetResponse, unknown, {}>>;
+    routesActiveWorkSessionsGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesActiveWorkSessionsGetResponse, unknown, {}, any>>;
     /**
-     * Performs the workspace operation for the routes capability.
+     * Workspace. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /api/v1/workspace` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: IDP route policy task:access:use; local project.read; verified Bearer/cookie identity through FaiberClient.
      */
-    routesWorkspaceGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesWorkspaceGetResponse, unknown, {}>>;
+    routesWorkspaceGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesWorkspaceGetResponse, unknown, {}, any>>;
     /**
-     * Performs the ready operation for the routes capability.
+     * Ready. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /health/dependencies` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: No local identity extractor; deployment ingress policy is separate. Shared FaiberClient still forwards configured credentials.
      */
-    routesReadyGetHealthDependencies(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesReadyGetHealthDependenciesResponse, unknown, {}>>;
+    routesReadyGetHealthDependencies(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").Readiness>, unknown, {}, any>>;
     /**
-     * Performs the live operation for the routes capability.
+     * Live. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /health/live` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: No local identity extractor; deployment ingress policy is separate. Shared FaiberClient still forwards configured credentials.
      */
-    routesLiveGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesLiveGetResponse, unknown, {}>>;
+    routesLiveGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesLiveGetResponse, unknown, {}, any>>;
     /**
-     * Performs the ready operation for the routes capability.
+     * Ready. Returns the Task status/message/data envelope with the full Axios status and headers.
      * Calls `GET /health/ready` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: No local identity extractor; deployment ingress policy is separate. Shared FaiberClient still forwards configured credentials.
      */
-    routesReadyGetHealthReady(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesReadyGetHealthReadyResponse, unknown, {}>>;
+    routesReadyGetHealthReady(options?: RequestOptions): Promise<import("axios").AxiosResponse<import("./types.js").TaskResponse<import("./wire.types.js").Readiness>, unknown, {}, any>>;
     /**
-     * Performs the metrics operation for the routes capability.
+     * Metrics.
      * Calls `GET /metrics` through the shared IDP-aware Faiber client.
      * @param options Axios headers, timeout, cancellation signal, credentials, adapter, and other request options.
-     * @returns The complete Axios response, including the typed service envelope, status, and headers.
-     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: session-derived or public bootstrap route.
+     * @returns The complete Axios response, including the typed handler payload, status, and headers.
+     * @throws AxiosError for authentication, permission, validation, not-found, conflict, or transport failures; required permission: No local identity extractor; deployment ingress policy is separate. Shared FaiberClient still forwards configured credentials.
      */
-    routesMetricsGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<T.RoutesMetricsGetResponse, unknown, {}>>;
+    routesMetricsGet(options?: RequestOptions): Promise<import("axios").AxiosResponse<string, unknown, {}, any>>;
 }
 //# sourceMappingURL=operations.d.ts.map