@zitadel/api 0.0.0 → 0.1.0-alpha.10

package/dist/generated/endpoints/zitadelNextGen.zod.mjs

@@ -212,6 +212,21 @@ const GetUserByIDQueryParams = zod.strictObject({
 });
 const GetUserByIDResponse = zod.record(zod.string(), zod.unknown());
 /**
+* @summary Set user password
+*/
+const setUserPasswordPathUserIdRegExp = /* @__PURE__ */ new RegExp("^user_[a-zA-Z0-9_-]+$");
+const SetUserPasswordParams = zod.object({ user_id: zod.string().regex(setUserPasswordPathUserIdRegExp) });
+const setUserPasswordQueryProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
+const SetUserPasswordQueryParams = zod.strictObject({ project_id: zod.string().regex(setUserPasswordQueryProjectIdRegExp).describe("The unique identifier of the project") });
+const SetUserPasswordBody = zod.object({
+	password: zod.string().describe("The new password for the user."),
+	isChangeRequired: zod.boolean().optional().describe("Whether the user is required to change their password on the next login.\nIf not provided, it will default to false.\n")
+}).describe("Request to update the user's password.");
+/**
+* @summary Get my user information
+*/
+const GetMyUserResponse = zod.record(zod.string(), zod.unknown());
+/**
 * Resolves a flow definition based on purpose + audience context and returns
 the first capability step. Creates a new session implicitly unless
 `session_id` is provided (for step-up / reauth on an existing session).
@@ -259,12 +274,12 @@ Useful for page reloads or re-rendering after a network error.
 * @summary Get current step (re-render)
 */
 const GetFlowStepParams = zod.object({ id: zod.string().describe("Flow ID returned by POST /flow or the latest POST /flow/{id}/submit.\nUsed to look up the correct flow state from the encrypted cookie,\nwhich can hold multiple concurrent flows. May change between responses\nwhen a flow pivot or pop occurs — always use the `id` from the latest response.\n") });
-const getFlowStepResponseStepFieldsRequiredDefault = false;
-const getFlowStepResponseStepFieldsValidationMinLengthMin = 0;
-const getFlowStepResponseStepFieldsValidationMaxLengthMin = 0;
-const getFlowStepResponseStepFieldsDefault = {};
-const getFlowStepResponseStepActionsPrimaryDefault = false;
-const getFlowStepResponseStepActionsDefault = {};
+const getFlowStepResponseStepFieldsItemRequiredDefault = false;
+const getFlowStepResponseStepFieldsItemValidationMinLengthMin = 0;
+const getFlowStepResponseStepFieldsItemValidationMaxLengthMin = 0;
+const getFlowStepResponseStepFieldsDefault = [];
+const getFlowStepResponseStepActionsItemPrimaryDefault = false;
+const getFlowStepResponseStepActionsDefault = [];
 const getFlowStepResponseStepGatesDefault = {};
 const getFlowStepResponseStepSsoProvidersDefault = [];
 const getFlowStepResponseBrandingLayoutDefault = `centered`;
@@ -281,7 +296,8 @@ const GetFlowStepResponse = zod.object({
 		error: zod.union([zod.string(), zod.null()]).optional().describe("Error message from a previous failed submission."),
 		complete: zod.enum(["redirect", "show"]).optional().describe("Present only on terminal steps. Tells the frontend what to do:\n- redirect: navigate to redirect_uri immediately (OIDC/SAML done)\n- show: render the step as a success screen (e.g., registration confirmed)\n"),
 		redirect_url: zod.url().optional().describe("URL to navigate to (e.g., SSO provider redirect)."),
-		fields: zod.record(zod.string(), zod.object({
+		fields: zod.array(zod.object({
+			name: zod.string().describe("Field name, matching a property in the flow's user schema. Carries\nthe submitted value back to the engine.\n"),
 			type: zod.enum([
 				"text",
 				"email",
@@ -290,8 +306,10 @@ const GetFlowStepResponse = zod.object({
 				"number",
 				"url",
 				"date",
-				"hidden"
-			]).describe("The input kind the client should render. Encodes the formats that\nhave a matching HTML input type (email, url, date). For other\nformats (e.g. uuid) the type is `text` and `validation.format`\ncarries the rule.\n"),
+				"hidden",
+				"checkbox",
+				"select"
+			]).describe("The input kind the client should render. Encodes the formats and\nJSON types that map to a familiar HTML input: `email`, `url`,\n`date` come from `format`; `checkbox` from JSON `type: boolean`;\n`select` from a closed `enum`. For other formats (e.g. uuid) the\ntype is `text` and `validation.format` carries the rule.\n"),
 			text_key: zod.string().describe("Localization key for the field label."),
 			required: zod.boolean().default(false).describe("The field MUST be present and non-empty on submit. Mirrors the\nschema's top-level `required` array.\n"),
 			value: zod.unknown().optional().describe("Pre-filled value (e.g., an identifier carried over from a pivot)."),
@@ -303,13 +321,15 @@ const GetFlowStepResponse = zod.object({
 					"uri"
 				]).optional().describe("Semantic format the value must match. Values mirror the user\nmeta-schema. When `type` already encodes the format (email,\nurl, date), this key is informative and the input type is\nsufficient for client-side validation. When `type` is `text`\n(e.g. `format: uuid`), this key is the only signal.\n"),
 				min_length: zod.number().min(0).optional().describe("Minimum length in characters (inclusive). Mirrors `minLength`."),
-				max_length: zod.number().min(0).optional().describe("Maximum length in characters (inclusive). Mirrors `maxLength`.")
+				max_length: zod.number().min(0).optional().describe("Maximum length in characters (inclusive). Mirrors `maxLength`."),
+				enum: zod.array(zod.string()).optional().describe("Closed list of allowed values. Mirrors the JSON Schema `enum`\nkeyword on the underlying user property. When `type` is\n`select` the client renders these as options; for other types\nthe rule still applies as a membership check.\n")
 			}).optional().describe("Schema-derived rules the frontend SHOULD apply at input time. The\nserver runs the same rules on submit and is the only authority on\nwhether the step advances — these rules are a UX hint to reduce\nround trips, not a contract guarantee.\n\nOmitted entirely when the field has no rules beyond its `type`.\nEach key mirrors a JSON Schema keyword on the underlying user\nproperty; absent keys mean no rule.\n")
-		}).describe("A data input capability. Describes what the user must provide.\nDoes not contain display text — only a `text_key` resolved client-side.\n")).default(getFlowStepResponseStepFieldsDefault).describe("Unordered dictionary of input fields to collect. Keyed by field name.\nThe LiquidJS template controls which fields appear and in what order.\nField metadata (type, validation) is resolved by the engine from the\nflow's user schema.\n"),
-		actions: zod.record(zod.string(), zod.object({
+		}).describe("A data input capability. Describes what the user must provide.\nDoes not contain display text — only a `text_key` resolved client-side.\n")).default(getFlowStepResponseStepFieldsDefault).describe("Ordered list of input fields to collect. Field metadata (type, validation)\nis resolved by the engine from the flow's user schema. The LiquidJS\ntemplate iterates this array; for keyed lookup it builds a name-indexed\nmap locally.\n"),
+		actions: zod.array(zod.object({
+			name: zod.string().describe("Action identifier. Sent back in the submit request as `action`."),
 			primary: zod.boolean().default(false).describe("Marks this as the default/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n"),
 			text_key: zod.string().optional().describe("Optional localization key override for the action's label. When\nomitted, the engine derives a key from the step and action names.\nDisplay text is resolved client-side from a locale dictionary, never\nby the engine.\n")
-		}).describe("Configuration for a user-invokable action on a step. Keyed by action name\nin the parent dictionary. The action name is sent back in the submit\nrequest as `action`.\n")).default(getFlowStepResponseStepActionsDefault).describe("Unordered dictionary of available user actions. Keyed by action name.\nThe LiquidJS template controls positioning and presentation.\n"),
+		}).describe("Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`.\n")).default(getFlowStepResponseStepActionsDefault).describe("Ordered list of available user actions. The LiquidJS template iterates\nthis array and builds a name-indexed map locally for keyed lookup.\n"),
 		gates: zod.record(zod.string(), zod.object({
 			kind: zod.enum(["captcha"]).describe("The gate category. Only `captcha` is currently defined. Authenticator\nceremonies (e.g. passkey) are modelled as credential auth_attempts via\n`x-credential` on a field, not as gates.\n"),
 			provider: zod.string().describe("Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,\n`hcaptcha`. The engine looks up an implementation in its provider\nregistry.\n"),
@@ -325,7 +345,7 @@ const GetFlowStepResponse = zod.object({
 			challenge_id: zod.string().optional().describe("Server-side challenge identifier. Included in the proof submission\nso the server can match the response to the original challenge.\n"),
 			options: zod.record(zod.string(), zod.unknown()).optional().describe("Protocol-specific challenge options. For passkey, this is the\n`PublicKeyCredentialRequestOptions` (authenticate) or\n`PublicKeyCredentialCreationOptions` (register). Passed directly\nto the browser's `navigator.credentials` API.\n")
 		}).optional().describe("A pending authentication challenge issued by the server. Present when the\nflow engine has issued a challenge via auth_attempts (e.g., after the user\nsubmits `action: \"passkey\"`). The `<zl-passkey>` component reads this and\ntriggers the appropriate WebAuthn ceremony.\n\nThe challenge is NOT present on the initial step — it appears only after\nthe user explicitly selects a ceremony-based action.\n")
-	}).describe("A step contains unordered capability dictionaries: what to collect (fields),\nwhat the user can do (actions), and what security gates must be satisfied (gates).\nLayout and element ordering are controlled by the LiquidJS template in `branding.liquid_template`.\n"),
+	}).describe("A step contains ordered capability arrays: what to collect (fields),\nwhat the user can do (actions), and what security gates must be satisfied (gates).\nThe LiquidJS template in `branding.liquid_template` iterates these arrays in order\nand builds name-keyed indexes locally for lookup.\n"),
 	branding: zod.object({
 		layout: zod.enum(["centered", "split"]).default(getFlowStepResponseBrandingLayoutDefault).describe("Layout preset selector. The default.liquid master template uses this\nto branch into layout variants. Customers who eject the template\ncan ignore this field entirely.\n"),
 		liquid_template: zod.string().optional().describe("The LiquidJS template string for rendering this step. The orchestrator\nparses this template, injects the capability dictionaries as context,\nand renders the output HTML into its Shadow DOM.\n"),
@@ -369,6 +389,7 @@ frontend never sees a `complete` for intermediate flows.
 * @summary Submit step data and advance
 */
 const SubmitFlowStepParams = zod.object({ id: zod.string().describe("Flow ID returned by POST /flow or the latest POST /flow/{id}/submit.\nUsed to look up the correct flow state from the encrypted cookie,\nwhich can hold multiple concurrent flows. May change between responses\nwhen a flow pivot or pop occurs — always use the `id` from the latest response.\n") });
+const SubmitFlowStepHeader = zod.strictObject({ Origin: zod.url().optional().describe("Standard browser `Origin` header. When a step issues a passkey\nchallenge, the server derives the WebAuthn relying-party id and the\nallowed origin from this value. Browsers send it automatically on the\nfetch POST; no client action is required.\n") });
 const SubmitFlowStepBody = zod.object({
 	session_token: zod.string().optional().describe("Reserved for future rotation. The sealed `_zflow` cookie carries the flow state today."),
 	action: zod.string().describe("Which action to take. Must be a key from the step's `actions` dictionary:\n- A regular action (e.g., \"submit\", \"register\", \"back\")\n- The reserved value \"sso\" — triggers SSO redirect (requires `sso_provider_id`)\n"),
@@ -381,12 +402,12 @@ const SubmitFlowStepBody = zod.object({
 	}).optional().describe("Response to a pending challenge on the step. Required when the step has a\n`challenge` property (e.g., after submitting a passkey action).\nThe `<zl-passkey>` component populates this after the WebAuthn ceremony.\n"),
 	sso_provider_id: zod.string().optional().describe("ID of the selected SSO provider (from `sso_providers[].id`).\nRequired when `action` is \"sso\".\n")
 });
-const submitFlowStepResponseStepFieldsRequiredDefault = false;
-const submitFlowStepResponseStepFieldsValidationMinLengthMin = 0;
-const submitFlowStepResponseStepFieldsValidationMaxLengthMin = 0;
-const submitFlowStepResponseStepFieldsDefault = {};
-const submitFlowStepResponseStepActionsPrimaryDefault = false;
-const submitFlowStepResponseStepActionsDefault = {};
+const submitFlowStepResponseStepFieldsItemRequiredDefault = false;
+const submitFlowStepResponseStepFieldsItemValidationMinLengthMin = 0;
+const submitFlowStepResponseStepFieldsItemValidationMaxLengthMin = 0;
+const submitFlowStepResponseStepFieldsDefault = [];
+const submitFlowStepResponseStepActionsItemPrimaryDefault = false;
+const submitFlowStepResponseStepActionsDefault = [];
 const submitFlowStepResponseStepGatesDefault = {};
 const submitFlowStepResponseStepSsoProvidersDefault = [];
 const submitFlowStepResponseBrandingLayoutDefault = `centered`;
@@ -403,7 +424,8 @@ const SubmitFlowStepResponse = zod.object({
 		error: zod.union([zod.string(), zod.null()]).optional().describe("Error message from a previous failed submission."),
 		complete: zod.enum(["redirect", "show"]).optional().describe("Present only on terminal steps. Tells the frontend what to do:\n- redirect: navigate to redirect_uri immediately (OIDC/SAML done)\n- show: render the step as a success screen (e.g., registration confirmed)\n"),
 		redirect_url: zod.url().optional().describe("URL to navigate to (e.g., SSO provider redirect)."),
-		fields: zod.record(zod.string(), zod.object({
+		fields: zod.array(zod.object({
+			name: zod.string().describe("Field name, matching a property in the flow's user schema. Carries\nthe submitted value back to the engine.\n"),
 			type: zod.enum([
 				"text",
 				"email",
@@ -412,8 +434,10 @@ const SubmitFlowStepResponse = zod.object({
 				"number",
 				"url",
 				"date",
-				"hidden"
-			]).describe("The input kind the client should render. Encodes the formats that\nhave a matching HTML input type (email, url, date). For other\nformats (e.g. uuid) the type is `text` and `validation.format`\ncarries the rule.\n"),
+				"hidden",
+				"checkbox",
+				"select"
+			]).describe("The input kind the client should render. Encodes the formats and\nJSON types that map to a familiar HTML input: `email`, `url`,\n`date` come from `format`; `checkbox` from JSON `type: boolean`;\n`select` from a closed `enum`. For other formats (e.g. uuid) the\ntype is `text` and `validation.format` carries the rule.\n"),
 			text_key: zod.string().describe("Localization key for the field label."),
 			required: zod.boolean().default(false).describe("The field MUST be present and non-empty on submit. Mirrors the\nschema's top-level `required` array.\n"),
 			value: zod.unknown().optional().describe("Pre-filled value (e.g., an identifier carried over from a pivot)."),
@@ -425,13 +449,15 @@ const SubmitFlowStepResponse = zod.object({
 					"uri"
 				]).optional().describe("Semantic format the value must match. Values mirror the user\nmeta-schema. When `type` already encodes the format (email,\nurl, date), this key is informative and the input type is\nsufficient for client-side validation. When `type` is `text`\n(e.g. `format: uuid`), this key is the only signal.\n"),
 				min_length: zod.number().min(0).optional().describe("Minimum length in characters (inclusive). Mirrors `minLength`."),
-				max_length: zod.number().min(0).optional().describe("Maximum length in characters (inclusive). Mirrors `maxLength`.")
+				max_length: zod.number().min(0).optional().describe("Maximum length in characters (inclusive). Mirrors `maxLength`."),
+				enum: zod.array(zod.string()).optional().describe("Closed list of allowed values. Mirrors the JSON Schema `enum`\nkeyword on the underlying user property. When `type` is\n`select` the client renders these as options; for other types\nthe rule still applies as a membership check.\n")
 			}).optional().describe("Schema-derived rules the frontend SHOULD apply at input time. The\nserver runs the same rules on submit and is the only authority on\nwhether the step advances — these rules are a UX hint to reduce\nround trips, not a contract guarantee.\n\nOmitted entirely when the field has no rules beyond its `type`.\nEach key mirrors a JSON Schema keyword on the underlying user\nproperty; absent keys mean no rule.\n")
-		}).describe("A data input capability. Describes what the user must provide.\nDoes not contain display text — only a `text_key` resolved client-side.\n")).default(submitFlowStepResponseStepFieldsDefault).describe("Unordered dictionary of input fields to collect. Keyed by field name.\nThe LiquidJS template controls which fields appear and in what order.\nField metadata (type, validation) is resolved by the engine from the\nflow's user schema.\n"),
-		actions: zod.record(zod.string(), zod.object({
+		}).describe("A data input capability. Describes what the user must provide.\nDoes not contain display text — only a `text_key` resolved client-side.\n")).default(submitFlowStepResponseStepFieldsDefault).describe("Ordered list of input fields to collect. Field metadata (type, validation)\nis resolved by the engine from the flow's user schema. The LiquidJS\ntemplate iterates this array; for keyed lookup it builds a name-indexed\nmap locally.\n"),
+		actions: zod.array(zod.object({
+			name: zod.string().describe("Action identifier. Sent back in the submit request as `action`."),
 			primary: zod.boolean().default(false).describe("Marks this as the default/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n"),
 			text_key: zod.string().optional().describe("Optional localization key override for the action's label. When\nomitted, the engine derives a key from the step and action names.\nDisplay text is resolved client-side from a locale dictionary, never\nby the engine.\n")
-		}).describe("Configuration for a user-invokable action on a step. Keyed by action name\nin the parent dictionary. The action name is sent back in the submit\nrequest as `action`.\n")).default(submitFlowStepResponseStepActionsDefault).describe("Unordered dictionary of available user actions. Keyed by action name.\nThe LiquidJS template controls positioning and presentation.\n"),
+		}).describe("Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`.\n")).default(submitFlowStepResponseStepActionsDefault).describe("Ordered list of available user actions. The LiquidJS template iterates\nthis array and builds a name-indexed map locally for keyed lookup.\n"),
 		gates: zod.record(zod.string(), zod.object({
 			kind: zod.enum(["captcha"]).describe("The gate category. Only `captcha` is currently defined. Authenticator\nceremonies (e.g. passkey) are modelled as credential auth_attempts via\n`x-credential` on a field, not as gates.\n"),
 			provider: zod.string().describe("Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,\n`hcaptcha`. The engine looks up an implementation in its provider\nregistry.\n"),
@@ -447,7 +473,7 @@ const SubmitFlowStepResponse = zod.object({
 			challenge_id: zod.string().optional().describe("Server-side challenge identifier. Included in the proof submission\nso the server can match the response to the original challenge.\n"),
 			options: zod.record(zod.string(), zod.unknown()).optional().describe("Protocol-specific challenge options. For passkey, this is the\n`PublicKeyCredentialRequestOptions` (authenticate) or\n`PublicKeyCredentialCreationOptions` (register). Passed directly\nto the browser's `navigator.credentials` API.\n")
 		}).optional().describe("A pending authentication challenge issued by the server. Present when the\nflow engine has issued a challenge via auth_attempts (e.g., after the user\nsubmits `action: \"passkey\"`). The `<zl-passkey>` component reads this and\ntriggers the appropriate WebAuthn ceremony.\n\nThe challenge is NOT present on the initial step — it appears only after\nthe user explicitly selects a ceremony-based action.\n")
-	}).describe("A step contains unordered capability dictionaries: what to collect (fields),\nwhat the user can do (actions), and what security gates must be satisfied (gates).\nLayout and element ordering are controlled by the LiquidJS template in `branding.liquid_template`.\n"),
+	}).describe("A step contains ordered capability arrays: what to collect (fields),\nwhat the user can do (actions), and what security gates must be satisfied (gates).\nThe LiquidJS template in `branding.liquid_template` iterates these arrays in order\nand builds name-keyed indexes locally for lookup.\n"),
 	branding: zod.object({
 		layout: zod.enum(["centered", "split"]).default(submitFlowStepResponseBrandingLayoutDefault).describe("Layout preset selector. The default.liquid master template uses this\nto branch into layout variants. Customers who eject the template\ncan ignore this field entirely.\n"),
 		liquid_template: zod.string().optional().describe("The LiquidJS template string for rendering this step. The orchestrator\nparses this template, injects the capability dictionaries as context,\nand renders the output HTML into its Shadow DOM.\n"),
@@ -1167,8 +1193,8 @@ Flow definitions are created based on the flow meta schema, which includes the f
 const createFlowDefinitionBodyProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const createFlowDefinitionBodyFlowDefinitionNameRegExp = /* @__PURE__ */ new RegExp("^[a-z][a-z0-9-]*$");
 const createFlowDefinitionBodyFlowDefinitionStepsItemFieldsDefault = [];
-const createFlowDefinitionBodyFlowDefinitionStepsItemActionsPrimaryDefault = false;
-const createFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault = {};
+const createFlowDefinitionBodyFlowDefinitionStepsItemActionsItemPrimaryDefault = false;
+const createFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault = [];
 const createFlowDefinitionBodyFlowDefinitionStepsItemGatesDefault = {};
 const createFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersDefault = [];
 const CreateFlowDefinitionBody = zod.object({
@@ -1185,10 +1211,11 @@ const CreateFlowDefinitionBody = zod.object({
 		steps: zod.array(zod.object({
 			name: zod.string().describe("Unique step identifier within this flow. Used as transition targets\nand returned in the API response as `step.name`.\n"),
 			fields: zod.array(zod.string()).default(createFlowDefinitionBodyFlowDefinitionStepsItemFieldsDefault).describe("Schema property names to collect from the user. Each entry references\na property in the flow's user schema. The engine resolves field type,\nvalidation rules, and implicit outcomes from schema annotations\n(e.g. a property with `x-unique` set implies a `user_not_found`\ntransition outcome).\n"),
-			actions: zod.record(zod.string(), zod.object({
+			actions: zod.array(zod.object({
+				name: zod.string().describe("Action identifier. Sent back in the submit request as `action`."),
 				primary: zod.boolean().default(false).describe("Marks this as the default/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n"),
 				text_key: zod.string().optional().describe("Optional localization key override for the action's label. When\nomitted, the engine derives a key from the step and action names.\nDisplay text is resolved client-side from a locale dictionary, never\nby the engine.\n")
-			}).describe("Configuration for a user-invokable action on a step. Keyed by action name\nin the parent dictionary. The action name is sent back in the submit\nrequest as `action`.\n")).default(createFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault).describe("Actions the user can take. Keyed by action name.\nThe action name is what the frontend sends back in the submit request.\nIf omitted, the engine provides a default `submit` action.\n"),
+			}).describe("Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`.\n")).default(createFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault).describe("Ordered list of actions the user can take. The action name is what the\nfrontend sends back in the submit request. If omitted, the engine\nprovides a default `submit` action.\n"),
 			gates: zod.record(zod.string(), zod.object({
 				kind: zod.enum(["captcha"]).describe("The gate category. Only `captcha` is currently defined. Authenticator\nceremonies (e.g. passkey) are modelled as credential auth_attempts via\n`x-credential` on a field, not as gates.\n"),
 				provider: zod.string().describe("Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,\n`hcaptcha`. The engine looks up an implementation in its provider\nregistry.\n"),
@@ -1204,7 +1231,7 @@ const CreateFlowDefinitionBody = zod.object({
 			transitions: zod.record(zod.string(), zod.object({
 				target: zod.string().describe("Step name within this flow (when `action` is null), or the name\nof another flow (when `action` is `switch` or `pivot`).\n"),
 				action: zod.union([zod.enum(["switch", "pivot"]), zod.null()]).optional().describe("How to interpret `target`:\n- null (omitted): transition to a step in the current flow.\n- switch: replace the current flow with the target flow.\n  No return — the current flow is discarded.\n  Example: login ↔ register.\n- pivot: push the target flow onto the stack. The current flow\n  is paused and resumes when the target flow completes (auto-pop).\n  Example: login → recovery → back to login.\n")
-			})).optional().describe("Maps action/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` dict. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n")
+			})).optional().describe("Maps action/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` array. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n")
 		}).describe("A step in a flow definition. This is the admin-authored configuration,\nnot the runtime payload sent to the frontend.\n\nSteps are schema-driven: `fields` references properties from the flow's\nuser schema, and the engine resolves field metadata (type, validation,\nimplicit outcomes) from schema annotations at runtime.\n\nA step with only `complete` set is a terminal step. All other steps are\nrendered to the frontend as capability payloads.\n")).min(1).describe("Ordered list of steps in this flow. The order is for human readability —\nactual step sequencing is determined by transitions.\n")
 	}).describe("A flow definition is the server-side configuration that describes a complete\nauthentication or identity flow. It is NOT sent to the frontend — the flow\nengine evaluates it and produces FlowResponse payloads (steps with capability\ndictionaries) for the client.\n\nFlow definitions are created by administrators and stored in the project/team\nconfiguration hierarchy. The engine selects the matching definition based on\nthe purpose + audience when a flow is created via POST /flow.\n")
 });
@@ -1220,7 +1247,7 @@ const listFlowDefinitionsQueryProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-
 const ListFlowDefinitionsQueryParams = zod.strictObject({
 	limit: zod.number().min(1).max(100).default(20).describe("Maximum number of items to return."),
 	page_token: zod.string().optional().describe("Token for fetching the next page of results.\nObtain this value from `next_page_token` in the previous response.\nOmit to start from the beginning.\nIts format is opaque and may change between releases.\n"),
-	project_id: zod.string().regex(listFlowDefinitionsQueryProjectIdRegExp).describe("The unique identifier of the project"),
+	project_id: zod.string().regex(listFlowDefinitionsQueryProjectIdRegExp).describe("The project id to filter by."),
 	purpose: zod.enum([
 		"login",
 		"register",
@@ -1236,7 +1263,7 @@ const ListFlowDefinitionsResponse = zod.object({
 		id: zod.string().describe("Unique identifier for the created flow definition."),
 		name: zod.string().regex(listFlowDefinitionsResponseFlowDefinitionsItemNameRegExp).describe("Stable identifier for this flow (echoed from the request).\n"),
 		project_id: zod.string().describe("Identifier of the project this flow definition belongs to."),
-		schema_uri: zod.url().describe("URI of the flow definition schema this definition was authored against.\nIf the schema_uri was not provided in the request, the flow definition is validated against the latest version of the schema, and the response includes the schema_uri of the latest version.\n"),
+		schema_uri: zod.url().optional().describe("URI of the flow definition schema this definition was authored against.\nIf the schema_uri was not provided in the request, the flow definition is validated against the latest version of the schema, and the response includes the schema_uri of the latest version.\n"),
 		status: zod.string().describe("Status of the flow definition."),
 		created_at: zod.iso.datetime({ offset: true }).describe("Timestamp when the flow definition was created."),
 		updated_at: zod.iso.datetime({ offset: true }).describe("Timestamp when the flow definition was last updated.")
@@ -1248,60 +1275,65 @@ const ListFlowDefinitionsResponse = zod.object({
 * @summary Get a flow definition by id
 */
 const GetFlowDefinitionParams = zod.object({ id: zod.string().describe("The id returned by the POST /flow_definitions endpoint.\n") });
-const getFlowDefinitionResponseOneNameRegExp = /* @__PURE__ */ new RegExp("^[a-z][a-z0-9-]*$");
-const getFlowDefinitionResponseOneStepsItemFieldsDefault = [];
-const getFlowDefinitionResponseOneStepsItemActionsPrimaryDefault = false;
-const getFlowDefinitionResponseOneStepsItemActionsDefault = {};
-const getFlowDefinitionResponseOneStepsItemGatesDefault = {};
-const getFlowDefinitionResponseOneStepsItemSsoProvidersDefault = [];
+const getFlowDefinitionQueryProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
+const GetFlowDefinitionQueryParams = zod.strictObject({ project_id: zod.string().regex(getFlowDefinitionQueryProjectIdRegExp).describe("The project id to filter by.") });
+const getFlowDefinitionResponseFlowDefinitionNameRegExp = /* @__PURE__ */ new RegExp("^[a-z][a-z0-9-]*$");
+const getFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault = [];
+const getFlowDefinitionResponseFlowDefinitionStepsItemActionsItemPrimaryDefault = false;
+const getFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault = [];
+const getFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault = {};
+const getFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault = [];
 const GetFlowDefinitionResponse = zod.object({
-	name: zod.string().regex(getFlowDefinitionResponseOneNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Renaming is not supported — the\n`name` is part of the public contract another definition may\nreference. Acts as the human display label as well; no separate slug.\n"),
-	user_schema: zod.url().describe("User schema this flow operates on. Step `fields` reference properties\ndefined in this schema. The engine resolves field types, validation,\nand implicit outcomes from schema annotations at runtime.\n"),
-	purposes: zod.record(zod.string(), zod.string()).describe("Maps each purpose this definition handles to its entry-point step.\nKeys are purpose names; values must match a `name` in `steps`. A\ndefinition can serve multiple purposes (e.g. a combined login/register\nflow) by listing one entry per purpose.\n"),
-	audience: zod.object({
-		team_ids: zod.array(zod.string()).optional().describe("Restrict to specific teams (organizations). Empty means no team restriction."),
-		app_ids: zod.array(zod.string()).optional().describe("Restrict to specific applications. Empty means no app restriction.")
-	}).optional().describe("Scopes which teams or apps this flow definition applies to. Empty or\nomitted fields mean \"no restriction\"; when both are empty the definition\nmatches every request in the project. The engine picks the most specific\nmatching definition: app > team > project-wide.\n"),
-	steps: zod.array(zod.object({
-		name: zod.string().describe("Unique step identifier within this flow. Used as transition targets\nand returned in the API response as `step.name`.\n"),
-		fields: zod.array(zod.string()).default(getFlowDefinitionResponseOneStepsItemFieldsDefault).describe("Schema property names to collect from the user. Each entry references\na property in the flow's user schema. The engine resolves field type,\nvalidation rules, and implicit outcomes from schema annotations\n(e.g. a property with `x-unique` set implies a `user_not_found`\ntransition outcome).\n"),
-		actions: zod.record(zod.string(), zod.object({
-			primary: zod.boolean().default(false).describe("Marks this as the default/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n"),
-			text_key: zod.string().optional().describe("Optional localization key override for the action's label. When\nomitted, the engine derives a key from the step and action names.\nDisplay text is resolved client-side from a locale dictionary, never\nby the engine.\n")
-		}).describe("Configuration for a user-invokable action on a step. Keyed by action name\nin the parent dictionary. The action name is sent back in the submit\nrequest as `action`.\n")).default(getFlowDefinitionResponseOneStepsItemActionsDefault).describe("Actions the user can take. Keyed by action name.\nThe action name is what the frontend sends back in the submit request.\nIf omitted, the engine provides a default `submit` action.\n"),
-		gates: zod.record(zod.string(), zod.object({
-			kind: zod.enum(["captcha"]).describe("The gate category. Only `captcha` is currently defined. Authenticator\nceremonies (e.g. passkey) are modelled as credential auth_attempts via\n`x-credential` on a field, not as gates.\n"),
-			provider: zod.string().describe("Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,\n`hcaptcha`. The engine looks up an implementation in its provider\nregistry.\n"),
-			config: zod.record(zod.string(), zod.unknown()).optional().describe("Provider-specific configuration consumed by the implementation when\nissuing the per-render challenge. Opaque to the engine.\n")
-		}).describe("A security challenge that must be satisfied before this step's submission\nis accepted. The engine may also inject gates at runtime based on policy\nor risk evaluation.\n")).default(getFlowDefinitionResponseOneStepsItemGatesDefault).describe("Security gates that must be satisfied before submission. Keyed by gate\nname. Each gate selects a kind (e.g. \"captcha\") and provider-specific\nconfiguration. The engine may also inject gates dynamically based on\npolicy.\n"),
-		sso_providers: zod.array(zod.object({
-			id: zod.string().describe("Provider instance identifier."),
-			name: zod.string().describe("Display name for the provider."),
-			template: zod.string().describe("Template hint for rendering (logo, colors).")
-		}).describe("An available SSO identity provider.")).default(getFlowDefinitionResponseOneStepsItemSsoProvidersDefault).describe("Available SSO identity providers for this step."),
-		on_success: zod.enum(["create_user"]).optional().describe("Server-side mutation to execute when this step completes successfully.\nRuns after field validation passes, before the transition fires.\n\n- create_user: creates the user record (registration flows)\n"),
-		complete: zod.enum(["redirect", "show"]).optional().describe("Marks this as a terminal step. Tells the frontend what to do:\n- redirect: navigate to redirect_uri (OIDC/SAML callback done)\n- show: render as a success/info screen\n"),
-		transitions: zod.record(zod.string(), zod.object({
-			target: zod.string().describe("Step name within this flow (when `action` is null), or the name\nof another flow (when `action` is `switch` or `pivot`).\n"),
-			action: zod.union([zod.enum(["switch", "pivot"]), zod.null()]).optional().describe("How to interpret `target`:\n- null (omitted): transition to a step in the current flow.\n- switch: replace the current flow with the target flow.\n  No return — the current flow is discarded.\n  Example: login ↔ register.\n- pivot: push the target flow onto the stack. The current flow\n  is paused and resumes when the target flow completes (auto-pop).\n  Example: login → recovery → back to login.\n")
-		})).optional().describe("Maps action/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` dict. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n")
-	}).describe("A step in a flow definition. This is the admin-authored configuration,\nnot the runtime payload sent to the frontend.\n\nSteps are schema-driven: `fields` references properties from the flow's\nuser schema, and the engine resolves field metadata (type, validation,\nimplicit outcomes) from schema annotations at runtime.\n\nA step with only `complete` set is a terminal step. All other steps are\nrendered to the frontend as capability payloads.\n")).min(1).describe("Ordered list of steps in this flow. The order is for human readability —\nactual step sequencing is determined by transitions.\n")
-}).describe("A flow definition is the server-side configuration that describes a complete\nauthentication or identity flow. It is NOT sent to the frontend — the flow\nengine evaluates it and produces FlowResponse payloads (steps with capability\ndictionaries) for the client.\n\nFlow definitions are created by administrators and stored in the project/team\nconfiguration hierarchy. The engine selects the matching definition based on\nthe purpose + audience when a flow is created via POST /flow.\n").and(zod.object({
 	id: zod.string().describe("Unique identifier for the flow definition."),
 	project_id: zod.string().describe("Identifier of the project this flow definition belongs to."),
-	schema_uri: zod.url().describe("URI of the flow definition schema this definition was authored against.\nIf the schema_uri was not provided in the request, the flow definition is validated against the latest version of the schema, and the response includes the schema_uri of the latest version.\n"),
 	status: zod.string().describe("Status of the flow definition."),
+	flow_definition: zod.object({
+		name: zod.string().regex(getFlowDefinitionResponseFlowDefinitionNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Renaming is not supported — the\n`name` is part of the public contract another definition may\nreference. Acts as the human display label as well; no separate slug.\n"),
+		user_schema: zod.url().describe("User schema this flow operates on. Step `fields` reference properties\ndefined in this schema. The engine resolves field types, validation,\nand implicit outcomes from schema annotations at runtime.\n"),
+		purposes: zod.record(zod.string(), zod.string()).describe("Maps each purpose this definition handles to its entry-point step.\nKeys are purpose names; values must match a `name` in `steps`. A\ndefinition can serve multiple purposes (e.g. a combined login/register\nflow) by listing one entry per purpose.\n"),
+		audience: zod.object({
+			team_ids: zod.array(zod.string()).optional().describe("Restrict to specific teams (organizations). Empty means no team restriction."),
+			app_ids: zod.array(zod.string()).optional().describe("Restrict to specific applications. Empty means no app restriction.")
+		}).optional().describe("Scopes which teams or apps this flow definition applies to. Empty or\nomitted fields mean \"no restriction\"; when both are empty the definition\nmatches every request in the project. The engine picks the most specific\nmatching definition: app > team > project-wide.\n"),
+		steps: zod.array(zod.object({
+			name: zod.string().describe("Unique step identifier within this flow. Used as transition targets\nand returned in the API response as `step.name`.\n"),
+			fields: zod.array(zod.string()).default(getFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault).describe("Schema property names to collect from the user. Each entry references\na property in the flow's user schema. The engine resolves field type,\nvalidation rules, and implicit outcomes from schema annotations\n(e.g. a property with `x-unique` set implies a `user_not_found`\ntransition outcome).\n"),
+			actions: zod.array(zod.object({
+				name: zod.string().describe("Action identifier. Sent back in the submit request as `action`."),
+				primary: zod.boolean().default(false).describe("Marks this as the default/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n"),
+				text_key: zod.string().optional().describe("Optional localization key override for the action's label. When\nomitted, the engine derives a key from the step and action names.\nDisplay text is resolved client-side from a locale dictionary, never\nby the engine.\n")
+			}).describe("Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`.\n")).default(getFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault).describe("Ordered list of actions the user can take. The action name is what the\nfrontend sends back in the submit request. If omitted, the engine\nprovides a default `submit` action.\n"),
+			gates: zod.record(zod.string(), zod.object({
+				kind: zod.enum(["captcha"]).describe("The gate category. Only `captcha` is currently defined. Authenticator\nceremonies (e.g. passkey) are modelled as credential auth_attempts via\n`x-credential` on a field, not as gates.\n"),
+				provider: zod.string().describe("Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,\n`hcaptcha`. The engine looks up an implementation in its provider\nregistry.\n"),
+				config: zod.record(zod.string(), zod.unknown()).optional().describe("Provider-specific configuration consumed by the implementation when\nissuing the per-render challenge. Opaque to the engine.\n")
+			}).describe("A security challenge that must be satisfied before this step's submission\nis accepted. The engine may also inject gates at runtime based on policy\nor risk evaluation.\n")).default(getFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault).describe("Security gates that must be satisfied before submission. Keyed by gate\nname. Each gate selects a kind (e.g. \"captcha\") and provider-specific\nconfiguration. The engine may also inject gates dynamically based on\npolicy.\n"),
+			sso_providers: zod.array(zod.object({
+				id: zod.string().describe("Provider instance identifier."),
+				name: zod.string().describe("Display name for the provider."),
+				template: zod.string().describe("Template hint for rendering (logo, colors).")
+			}).describe("An available SSO identity provider.")).default(getFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault).describe("Available SSO identity providers for this step."),
+			on_success: zod.enum(["create_user"]).optional().describe("Server-side mutation to execute when this step completes successfully.\nRuns after field validation passes, before the transition fires.\n\n- create_user: creates the user record (registration flows)\n"),
+			complete: zod.enum(["redirect", "show"]).optional().describe("Marks this as a terminal step. Tells the frontend what to do:\n- redirect: navigate to redirect_uri (OIDC/SAML callback done)\n- show: render as a success/info screen\n"),
+			transitions: zod.record(zod.string(), zod.object({
+				target: zod.string().describe("Step name within this flow (when `action` is null), or the name\nof another flow (when `action` is `switch` or `pivot`).\n"),
+				action: zod.union([zod.enum(["switch", "pivot"]), zod.null()]).optional().describe("How to interpret `target`:\n- null (omitted): transition to a step in the current flow.\n- switch: replace the current flow with the target flow.\n  No return — the current flow is discarded.\n  Example: login ↔ register.\n- pivot: push the target flow onto the stack. The current flow\n  is paused and resumes when the target flow completes (auto-pop).\n  Example: login → recovery → back to login.\n")
+			})).optional().describe("Maps action/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` array. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n")
+		}).describe("A step in a flow definition. This is the admin-authored configuration,\nnot the runtime payload sent to the frontend.\n\nSteps are schema-driven: `fields` references properties from the flow's\nuser schema, and the engine resolves field metadata (type, validation,\nimplicit outcomes) from schema annotations at runtime.\n\nA step with only `complete` set is a terminal step. All other steps are\nrendered to the frontend as capability payloads.\n")).min(1).describe("Ordered list of steps in this flow. The order is for human readability —\nactual step sequencing is determined by transitions.\n")
+	}).describe("A flow definition is the server-side configuration that describes a complete\nauthentication or identity flow. It is NOT sent to the frontend — the flow\nengine evaluates it and produces FlowResponse payloads (steps with capability\ndictionaries) for the client.\n\nFlow definitions are created by administrators and stored in the project/team\nconfiguration hierarchy. The engine selects the matching definition based on\nthe purpose + audience when a flow is created via POST /flow.\n"),
 	created_at: zod.iso.datetime({ offset: true }),
 	updated_at: zod.iso.datetime({ offset: true })
-}));
+});
 /**
 * Update a flow definition by id
 * @summary Update a flow definition by id
 */
 const UpdateFlowDefinitionParams = zod.object({ id: zod.string().describe("The id returned by the POST /flow_definitions endpoint.\n") });
+const updateFlowDefinitionQueryProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
+const UpdateFlowDefinitionQueryParams = zod.strictObject({ project_id: zod.string().regex(updateFlowDefinitionQueryProjectIdRegExp).describe("The project id to filter by.") });
 const updateFlowDefinitionBodyStepsItemFieldsDefault = [];
-const updateFlowDefinitionBodyStepsItemActionsPrimaryDefault = false;
-const updateFlowDefinitionBodyStepsItemActionsDefault = {};
+const updateFlowDefinitionBodyStepsItemActionsItemPrimaryDefault = false;
+const updateFlowDefinitionBodyStepsItemActionsDefault = [];
 const updateFlowDefinitionBodyStepsItemGatesDefault = {};
 const updateFlowDefinitionBodyStepsItemSsoProvidersDefault = [];
 const UpdateFlowDefinitionBody = zod.object({
@@ -1314,10 +1346,11 @@ const UpdateFlowDefinitionBody = zod.object({
 	steps: zod.array(zod.object({
 		name: zod.string().describe("Unique step identifier within this flow. Used as transition targets\nand returned in the API response as `step.name`.\n"),
 		fields: zod.array(zod.string()).default(updateFlowDefinitionBodyStepsItemFieldsDefault).describe("Schema property names to collect from the user. Each entry references\na property in the flow's user schema. The engine resolves field type,\nvalidation rules, and implicit outcomes from schema annotations\n(e.g. a property with `x-unique` set implies a `user_not_found`\ntransition outcome).\n"),
-		actions: zod.record(zod.string(), zod.object({
+		actions: zod.array(zod.object({
+			name: zod.string().describe("Action identifier. Sent back in the submit request as `action`."),
 			primary: zod.boolean().default(false).describe("Marks this as the default/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n"),
 			text_key: zod.string().optional().describe("Optional localization key override for the action's label. When\nomitted, the engine derives a key from the step and action names.\nDisplay text is resolved client-side from a locale dictionary, never\nby the engine.\n")
-		}).describe("Configuration for a user-invokable action on a step. Keyed by action name\nin the parent dictionary. The action name is sent back in the submit\nrequest as `action`.\n")).default(updateFlowDefinitionBodyStepsItemActionsDefault).describe("Actions the user can take. Keyed by action name.\nThe action name is what the frontend sends back in the submit request.\nIf omitted, the engine provides a default `submit` action.\n"),
+		}).describe("Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`.\n")).default(updateFlowDefinitionBodyStepsItemActionsDefault).describe("Ordered list of actions the user can take. The action name is what the\nfrontend sends back in the submit request. If omitted, the engine\nprovides a default `submit` action.\n"),
 		gates: zod.record(zod.string(), zod.object({
 			kind: zod.enum(["captcha"]).describe("The gate category. Only `captcha` is currently defined. Authenticator\nceremonies (e.g. passkey) are modelled as credential auth_attempts via\n`x-credential` on a field, not as gates.\n"),
 			provider: zod.string().describe("Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,\n`hcaptcha`. The engine looks up an implementation in its provider\nregistry.\n"),
@@ -1333,60 +1366,63 @@ const UpdateFlowDefinitionBody = zod.object({
 		transitions: zod.record(zod.string(), zod.object({
 			target: zod.string().describe("Step name within this flow (when `action` is null), or the name\nof another flow (when `action` is `switch` or `pivot`).\n"),
 			action: zod.union([zod.enum(["switch", "pivot"]), zod.null()]).optional().describe("How to interpret `target`:\n- null (omitted): transition to a step in the current flow.\n- switch: replace the current flow with the target flow.\n  No return — the current flow is discarded.\n  Example: login ↔ register.\n- pivot: push the target flow onto the stack. The current flow\n  is paused and resumes when the target flow completes (auto-pop).\n  Example: login → recovery → back to login.\n")
-		})).optional().describe("Maps action/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` dict. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n")
+		})).optional().describe("Maps action/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` array. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n")
 	}).describe("A step in a flow definition. This is the admin-authored configuration,\nnot the runtime payload sent to the frontend.\n\nSteps are schema-driven: `fields` references properties from the flow's\nuser schema, and the engine resolves field metadata (type, validation,\nimplicit outcomes) from schema annotations at runtime.\n\nA step with only `complete` set is a terminal step. All other steps are\nrendered to the frontend as capability payloads.\n")).min(1).optional().describe("Replaces the full steps array if provided. Partial step lists are not\nsupported — supply all steps when updating this field.\n")
 }).describe("Partial update for a flow definition. Only provided fields are replaced;\nomitted fields retain their current server-side values.\n\nCollection fields (`steps`, `purposes`) are treated atomically: if\nprovided, the entire array/object is replaced. If omitted, the current\nvalue is preserved unchanged.\n\n`name` is a stable identifier and cannot be changed after creation.\n");
-const updateFlowDefinitionResponseOneNameRegExp = /* @__PURE__ */ new RegExp("^[a-z][a-z0-9-]*$");
-const updateFlowDefinitionResponseOneStepsItemFieldsDefault = [];
-const updateFlowDefinitionResponseOneStepsItemActionsPrimaryDefault = false;
-const updateFlowDefinitionResponseOneStepsItemActionsDefault = {};
-const updateFlowDefinitionResponseOneStepsItemGatesDefault = {};
-const updateFlowDefinitionResponseOneStepsItemSsoProvidersDefault = [];
+const updateFlowDefinitionResponseFlowDefinitionNameRegExp = /* @__PURE__ */ new RegExp("^[a-z][a-z0-9-]*$");
+const updateFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault = [];
+const updateFlowDefinitionResponseFlowDefinitionStepsItemActionsItemPrimaryDefault = false;
+const updateFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault = [];
+const updateFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault = {};
+const updateFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault = [];
 const UpdateFlowDefinitionResponse = zod.object({
-	name: zod.string().regex(updateFlowDefinitionResponseOneNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Renaming is not supported — the\n`name` is part of the public contract another definition may\nreference. Acts as the human display label as well; no separate slug.\n"),
-	user_schema: zod.url().describe("User schema this flow operates on. Step `fields` reference properties\ndefined in this schema. The engine resolves field types, validation,\nand implicit outcomes from schema annotations at runtime.\n"),
-	purposes: zod.record(zod.string(), zod.string()).describe("Maps each purpose this definition handles to its entry-point step.\nKeys are purpose names; values must match a `name` in `steps`. A\ndefinition can serve multiple purposes (e.g. a combined login/register\nflow) by listing one entry per purpose.\n"),
-	audience: zod.object({
-		team_ids: zod.array(zod.string()).optional().describe("Restrict to specific teams (organizations). Empty means no team restriction."),
-		app_ids: zod.array(zod.string()).optional().describe("Restrict to specific applications. Empty means no app restriction.")
-	}).optional().describe("Scopes which teams or apps this flow definition applies to. Empty or\nomitted fields mean \"no restriction\"; when both are empty the definition\nmatches every request in the project. The engine picks the most specific\nmatching definition: app > team > project-wide.\n"),
-	steps: zod.array(zod.object({
-		name: zod.string().describe("Unique step identifier within this flow. Used as transition targets\nand returned in the API response as `step.name`.\n"),
-		fields: zod.array(zod.string()).default(updateFlowDefinitionResponseOneStepsItemFieldsDefault).describe("Schema property names to collect from the user. Each entry references\na property in the flow's user schema. The engine resolves field type,\nvalidation rules, and implicit outcomes from schema annotations\n(e.g. a property with `x-unique` set implies a `user_not_found`\ntransition outcome).\n"),
-		actions: zod.record(zod.string(), zod.object({
-			primary: zod.boolean().default(false).describe("Marks this as the default/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n"),
-			text_key: zod.string().optional().describe("Optional localization key override for the action's label. When\nomitted, the engine derives a key from the step and action names.\nDisplay text is resolved client-side from a locale dictionary, never\nby the engine.\n")
-		}).describe("Configuration for a user-invokable action on a step. Keyed by action name\nin the parent dictionary. The action name is sent back in the submit\nrequest as `action`.\n")).default(updateFlowDefinitionResponseOneStepsItemActionsDefault).describe("Actions the user can take. Keyed by action name.\nThe action name is what the frontend sends back in the submit request.\nIf omitted, the engine provides a default `submit` action.\n"),
-		gates: zod.record(zod.string(), zod.object({
-			kind: zod.enum(["captcha"]).describe("The gate category. Only `captcha` is currently defined. Authenticator\nceremonies (e.g. passkey) are modelled as credential auth_attempts via\n`x-credential` on a field, not as gates.\n"),
-			provider: zod.string().describe("Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,\n`hcaptcha`. The engine looks up an implementation in its provider\nregistry.\n"),
-			config: zod.record(zod.string(), zod.unknown()).optional().describe("Provider-specific configuration consumed by the implementation when\nissuing the per-render challenge. Opaque to the engine.\n")
-		}).describe("A security challenge that must be satisfied before this step's submission\nis accepted. The engine may also inject gates at runtime based on policy\nor risk evaluation.\n")).default(updateFlowDefinitionResponseOneStepsItemGatesDefault).describe("Security gates that must be satisfied before submission. Keyed by gate\nname. Each gate selects a kind (e.g. \"captcha\") and provider-specific\nconfiguration. The engine may also inject gates dynamically based on\npolicy.\n"),
-		sso_providers: zod.array(zod.object({
-			id: zod.string().describe("Provider instance identifier."),
-			name: zod.string().describe("Display name for the provider."),
-			template: zod.string().describe("Template hint for rendering (logo, colors).")
-		}).describe("An available SSO identity provider.")).default(updateFlowDefinitionResponseOneStepsItemSsoProvidersDefault).describe("Available SSO identity providers for this step."),
-		on_success: zod.enum(["create_user"]).optional().describe("Server-side mutation to execute when this step completes successfully.\nRuns after field validation passes, before the transition fires.\n\n- create_user: creates the user record (registration flows)\n"),
-		complete: zod.enum(["redirect", "show"]).optional().describe("Marks this as a terminal step. Tells the frontend what to do:\n- redirect: navigate to redirect_uri (OIDC/SAML callback done)\n- show: render as a success/info screen\n"),
-		transitions: zod.record(zod.string(), zod.object({
-			target: zod.string().describe("Step name within this flow (when `action` is null), or the name\nof another flow (when `action` is `switch` or `pivot`).\n"),
-			action: zod.union([zod.enum(["switch", "pivot"]), zod.null()]).optional().describe("How to interpret `target`:\n- null (omitted): transition to a step in the current flow.\n- switch: replace the current flow with the target flow.\n  No return — the current flow is discarded.\n  Example: login ↔ register.\n- pivot: push the target flow onto the stack. The current flow\n  is paused and resumes when the target flow completes (auto-pop).\n  Example: login → recovery → back to login.\n")
-		})).optional().describe("Maps action/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` dict. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n")
-	}).describe("A step in a flow definition. This is the admin-authored configuration,\nnot the runtime payload sent to the frontend.\n\nSteps are schema-driven: `fields` references properties from the flow's\nuser schema, and the engine resolves field metadata (type, validation,\nimplicit outcomes) from schema annotations at runtime.\n\nA step with only `complete` set is a terminal step. All other steps are\nrendered to the frontend as capability payloads.\n")).min(1).describe("Ordered list of steps in this flow. The order is for human readability —\nactual step sequencing is determined by transitions.\n")
-}).describe("A flow definition is the server-side configuration that describes a complete\nauthentication or identity flow. It is NOT sent to the frontend — the flow\nengine evaluates it and produces FlowResponse payloads (steps with capability\ndictionaries) for the client.\n\nFlow definitions are created by administrators and stored in the project/team\nconfiguration hierarchy. The engine selects the matching definition based on\nthe purpose + audience when a flow is created via POST /flow.\n").and(zod.object({
 	id: zod.string().describe("Unique identifier for the flow definition."),
 	project_id: zod.string().describe("Identifier of the project this flow definition belongs to."),
-	schema_uri: zod.url().describe("URI of the flow definition schema this definition was authored against.\nIf the schema_uri was not provided in the request, the flow definition is validated against the latest version of the schema, and the response includes the schema_uri of the latest version.\n"),
 	status: zod.string().describe("Status of the flow definition."),
+	flow_definition: zod.object({
+		name: zod.string().regex(updateFlowDefinitionResponseFlowDefinitionNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Renaming is not supported — the\n`name` is part of the public contract another definition may\nreference. Acts as the human display label as well; no separate slug.\n"),
+		user_schema: zod.url().describe("User schema this flow operates on. Step `fields` reference properties\ndefined in this schema. The engine resolves field types, validation,\nand implicit outcomes from schema annotations at runtime.\n"),
+		purposes: zod.record(zod.string(), zod.string()).describe("Maps each purpose this definition handles to its entry-point step.\nKeys are purpose names; values must match a `name` in `steps`. A\ndefinition can serve multiple purposes (e.g. a combined login/register\nflow) by listing one entry per purpose.\n"),
+		audience: zod.object({
+			team_ids: zod.array(zod.string()).optional().describe("Restrict to specific teams (organizations). Empty means no team restriction."),
+			app_ids: zod.array(zod.string()).optional().describe("Restrict to specific applications. Empty means no app restriction.")
+		}).optional().describe("Scopes which teams or apps this flow definition applies to. Empty or\nomitted fields mean \"no restriction\"; when both are empty the definition\nmatches every request in the project. The engine picks the most specific\nmatching definition: app > team > project-wide.\n"),
+		steps: zod.array(zod.object({
+			name: zod.string().describe("Unique step identifier within this flow. Used as transition targets\nand returned in the API response as `step.name`.\n"),
+			fields: zod.array(zod.string()).default(updateFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault).describe("Schema property names to collect from the user. Each entry references\na property in the flow's user schema. The engine resolves field type,\nvalidation rules, and implicit outcomes from schema annotations\n(e.g. a property with `x-unique` set implies a `user_not_found`\ntransition outcome).\n"),
+			actions: zod.array(zod.object({
+				name: zod.string().describe("Action identifier. Sent back in the submit request as `action`."),
+				primary: zod.boolean().default(false).describe("Marks this as the default/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n"),
+				text_key: zod.string().optional().describe("Optional localization key override for the action's label. When\nomitted, the engine derives a key from the step and action names.\nDisplay text is resolved client-side from a locale dictionary, never\nby the engine.\n")
+			}).describe("Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`.\n")).default(updateFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault).describe("Ordered list of actions the user can take. The action name is what the\nfrontend sends back in the submit request. If omitted, the engine\nprovides a default `submit` action.\n"),
+			gates: zod.record(zod.string(), zod.object({
+				kind: zod.enum(["captcha"]).describe("The gate category. Only `captcha` is currently defined. Authenticator\nceremonies (e.g. passkey) are modelled as credential auth_attempts via\n`x-credential` on a field, not as gates.\n"),
+				provider: zod.string().describe("Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,\n`hcaptcha`. The engine looks up an implementation in its provider\nregistry.\n"),
+				config: zod.record(zod.string(), zod.unknown()).optional().describe("Provider-specific configuration consumed by the implementation when\nissuing the per-render challenge. Opaque to the engine.\n")
+			}).describe("A security challenge that must be satisfied before this step's submission\nis accepted. The engine may also inject gates at runtime based on policy\nor risk evaluation.\n")).default(updateFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault).describe("Security gates that must be satisfied before submission. Keyed by gate\nname. Each gate selects a kind (e.g. \"captcha\") and provider-specific\nconfiguration. The engine may also inject gates dynamically based on\npolicy.\n"),
+			sso_providers: zod.array(zod.object({
+				id: zod.string().describe("Provider instance identifier."),
+				name: zod.string().describe("Display name for the provider."),
+				template: zod.string().describe("Template hint for rendering (logo, colors).")
+			}).describe("An available SSO identity provider.")).default(updateFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault).describe("Available SSO identity providers for this step."),
+			on_success: zod.enum(["create_user"]).optional().describe("Server-side mutation to execute when this step completes successfully.\nRuns after field validation passes, before the transition fires.\n\n- create_user: creates the user record (registration flows)\n"),
+			complete: zod.enum(["redirect", "show"]).optional().describe("Marks this as a terminal step. Tells the frontend what to do:\n- redirect: navigate to redirect_uri (OIDC/SAML callback done)\n- show: render as a success/info screen\n"),
+			transitions: zod.record(zod.string(), zod.object({
+				target: zod.string().describe("Step name within this flow (when `action` is null), or the name\nof another flow (when `action` is `switch` or `pivot`).\n"),
+				action: zod.union([zod.enum(["switch", "pivot"]), zod.null()]).optional().describe("How to interpret `target`:\n- null (omitted): transition to a step in the current flow.\n- switch: replace the current flow with the target flow.\n  No return — the current flow is discarded.\n  Example: login ↔ register.\n- pivot: push the target flow onto the stack. The current flow\n  is paused and resumes when the target flow completes (auto-pop).\n  Example: login → recovery → back to login.\n")
+			})).optional().describe("Maps action/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` array. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n")
+		}).describe("A step in a flow definition. This is the admin-authored configuration,\nnot the runtime payload sent to the frontend.\n\nSteps are schema-driven: `fields` references properties from the flow's\nuser schema, and the engine resolves field metadata (type, validation,\nimplicit outcomes) from schema annotations at runtime.\n\nA step with only `complete` set is a terminal step. All other steps are\nrendered to the frontend as capability payloads.\n")).min(1).describe("Ordered list of steps in this flow. The order is for human readability —\nactual step sequencing is determined by transitions.\n")
+	}).describe("A flow definition is the server-side configuration that describes a complete\nauthentication or identity flow. It is NOT sent to the frontend — the flow\nengine evaluates it and produces FlowResponse payloads (steps with capability\ndictionaries) for the client.\n\nFlow definitions are created by administrators and stored in the project/team\nconfiguration hierarchy. The engine selects the matching definition based on\nthe purpose + audience when a flow is created via POST /flow.\n"),
 	created_at: zod.iso.datetime({ offset: true }),
 	updated_at: zod.iso.datetime({ offset: true })
-}));
+});
 /**
 * Delete a flow definition by id
 * @summary Delete a flow definition by id
 */
 const DeleteFlowDefinitionParams = zod.object({ id: zod.string().describe("The id returned by the POST /flow_definitions endpoint.\n") });
+const deleteFlowDefinitionQueryProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
+const DeleteFlowDefinitionQueryParams = zod.strictObject({ project_id: zod.string().regex(deleteFlowDefinitionQueryProjectIdRegExp).describe("The project id to filter by.") });
 /**
 * @summary Create team
 */
@@ -1408,6 +1444,6 @@ const GetTeamResponse = zod.object({
 	updatedAt: zod.iso.datetime({ offset: true }).describe("The time when the team was last updated.")
 }).describe("The current state of a team.");
 //#endregion
-export { AuthorizeDeviceQueryParams, AuthorizeDeviceResponse, AuthorizeGetQueryParams, CreateAuthAttemptBody, CreateFlowBody, CreateFlowDefinitionBody, CreateHandoffHeader, CreateHandoffParams, CreateHandoffResponse, CreateProjectBody, CreateSchemaBody, CreateSchemaQueryParams, CreateSessionBody, CreateTeamBody, CreateTeamQueryParams, CreateUserBody, CreateUserQueryParams, DeleteFlowDefinitionParams, EndSessionQueryParams, ExchangeHandoffBody, ExchangeHandoffHeader, ExchangeHandoffQueryParams, ExchangeHandoffResponse, GetAuthAttemptParams, GetAuthAttemptResponse, GetFlowDefinitionParams, GetFlowDefinitionResponse, GetFlowStepParams, GetFlowStepResponse, GetKeysResponse, GetMySessionResponse, GetOpenIDConfigurationResponse, GetProjectParams, GetProjectResponse, GetSchemaByIdParams, GetSchemaByIdQueryParams, GetSchemaByIdResponse, GetSessionParams, GetSessionQueryParams, GetSessionResponse, GetTeamParams, GetTeamQueryParams, GetTeamResponse, GetTokenResponse, GetUserByIDParams, GetUserByIDQueryParams, GetUserByIDResponse, GetUserInfoResponse, IntrospectResponse, IssueChallengeBody, IssueChallengeParams, ListFlowDefinitionsQueryParams, ListFlowDefinitionsResponse, ListSessionsQueryParams, ListSessionsResponse, ListUsersQueryParams, ListUsersResponse, ListUsersResponseItem, RevokeSessionParams, RevokeSessionQueryParams, SubmitFlowEventBody, SubmitFlowEventParams, SubmitFlowStepBody, SubmitFlowStepParams, SubmitFlowStepResponse, UpdateFlowDefinitionBody, UpdateFlowDefinitionParams, UpdateFlowDefinitionResponse, VerifyChallengeProofBody, VerifyChallengeProofHeader, VerifyChallengeProofParams, VerifyChallengeProofResponse, createAuthAttemptBodyProjectIdRegExp, createAuthAttemptBodySessionIdOneRegExp, createFlowBodyFlowDefinitionNameRegExp, createFlowBodyProjectIdRegExp, createFlowBodySchemaVersionRegExp, createFlowDefinitionBodyFlowDefinitionNameRegExp, createFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault, createFlowDefinitionBodyFlowDefinitionStepsItemActionsPrimaryDefault, createFlowDefinitionBodyFlowDefinitionStepsItemFieldsDefault, createFlowDefinitionBodyFlowDefinitionStepsItemGatesDefault, createFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersDefault, createFlowDefinitionBodyProjectIdRegExp, createHandoffPathAttemptIdRegExp, createSchemaBodyOnePropertiesXEditableDefault, createSchemaBodyOnePropertiesXMfaDefault, createSchemaBodyOnePropertiesXSensitiveDefault, createSchemaBodyOneXAuthMethodsMagicLinkPositionMin, createSchemaBodyOneXAuthMethodsOtpPositionMin, createSchemaBodyOneXAuthMethodsPasskeyPositionMin, createSchemaBodyOneXAuthMethodsPasswordPositionMin, createSchemaBodyOneXAuthMethodsSsoPositionMin, createSchemaQueryProjectIdRegExp, createSchemaQueryTeamIdRegExp, createSessionBodyProjectIdRegExp, createTeamQueryProjectIdRegExp, createUserQueryProjectIdRegExp, createUserQueryTeamIdRegExp, exchangeHandoffQueryProjectIdRegExp, exchangeHandoffResponseSessionFactorsItemPayloadOneUserIdRegExp, exchangeHandoffResponseSessionProjectIdRegExp, exchangeHandoffResponseSessionSessionIdRegExp, exchangeHandoffResponseSessionUserIdOneRegExp, getAuthAttemptPathAttemptIdRegExp, getAuthAttemptResponseAttemptIdRegExp, getAuthAttemptResponseChallengesItemChallengeIdRegExp, getAuthAttemptResponseCompletedFactorsItemPayloadOneUserIdRegExp, getAuthAttemptResponseProjectIdRegExp, getAuthAttemptResponseSessionIdOneRegExp, getAuthAttemptResponseUserIdOneRegExp, getFlowDefinitionResponseOneNameRegExp, getFlowDefinitionResponseOneStepsItemActionsDefault, getFlowDefinitionResponseOneStepsItemActionsPrimaryDefault, getFlowDefinitionResponseOneStepsItemFieldsDefault, getFlowDefinitionResponseOneStepsItemGatesDefault, getFlowDefinitionResponseOneStepsItemSsoProvidersDefault, getFlowStepResponseBrandingLayoutDefault, getFlowStepResponseStepActionsDefault, getFlowStepResponseStepActionsPrimaryDefault, getFlowStepResponseStepFieldsDefault, getFlowStepResponseStepFieldsRequiredDefault, getFlowStepResponseStepFieldsValidationMaxLengthMin, getFlowStepResponseStepFieldsValidationMinLengthMin, getFlowStepResponseStepGatesDefault, getFlowStepResponseStepSsoProvidersDefault, getMySessionResponseFactorsItemPayloadOneUserIdRegExp, getMySessionResponseProjectIdRegExp, getMySessionResponseSessionIdRegExp, getMySessionResponseUserIdOneRegExp, getOpenIDConfigurationResponseClaimsParameterSupportedDefault, getOpenIDConfigurationResponseRequestParameterSupportedDefault, getOpenIDConfigurationResponseRequestUriParameterSupportedDefault, getOpenIDConfigurationResponseRequireRequestUriRegistrationDefault, getProjectPathProjectIdRegExp, getSchemaByIdQueryProjectIdRegExp, getSchemaByIdQueryTeamIdRegExp, getSchemaByIdResponseOnePropertiesXEditableDefault, getSchemaByIdResponseOnePropertiesXMfaDefault, getSchemaByIdResponseOnePropertiesXSensitiveDefault, getSchemaByIdResponseOneXAuthMethodsMagicLinkPositionMin, getSchemaByIdResponseOneXAuthMethodsOtpPositionMin, getSchemaByIdResponseOneXAuthMethodsPasskeyPositionMin, getSchemaByIdResponseOneXAuthMethodsPasswordPositionMin, getSchemaByIdResponseOneXAuthMethodsSsoPositionMin, getSessionPathSessionIdRegExp, getSessionQueryProjectIdRegExp, getSessionResponseFactorsItemPayloadOneUserIdRegExp, getSessionResponseProjectIdRegExp, getSessionResponseSessionIdRegExp, getSessionResponseUserIdOneRegExp, getTeamPathTeamIdRegExp, getTeamQueryProjectIdRegExp, getUserByIDPathUserIdRegExp, getUserByIDQueryProjectIdRegExp, getUserByIDQueryTeamIdRegExp, issueChallengePathAttemptIdRegExp, listFlowDefinitionsQueryLimitDefault, listFlowDefinitionsQueryLimitMax, listFlowDefinitionsQueryProjectIdRegExp, listFlowDefinitionsResponseFlowDefinitionsItemNameRegExp, listSessionsQueryLimitDefault, listSessionsQueryLimitMax, listSessionsQueryProjectIdRegExp, listSessionsQueryUserIdRegExp, listSessionsResponseSessionsItemFactorsItemPayloadOneUserIdRegExp, listSessionsResponseSessionsItemProjectIdRegExp, listSessionsResponseSessionsItemSessionIdRegExp, listSessionsResponseSessionsItemUserIdOneRegExp, listUsersQueryLimitDefault, listUsersQueryLimitMax, listUsersQueryOffsetDefault, listUsersQueryOffsetMin, revokeSessionPathSessionIdRegExp, revokeSessionQueryProjectIdRegExp, submitFlowStepResponseBrandingLayoutDefault, submitFlowStepResponseStepActionsDefault, submitFlowStepResponseStepActionsPrimaryDefault, submitFlowStepResponseStepFieldsDefault, submitFlowStepResponseStepFieldsRequiredDefault, submitFlowStepResponseStepFieldsValidationMaxLengthMin, submitFlowStepResponseStepFieldsValidationMinLengthMin, submitFlowStepResponseStepGatesDefault, submitFlowStepResponseStepSsoProvidersDefault, updateFlowDefinitionBodyStepsItemActionsDefault, updateFlowDefinitionBodyStepsItemActionsPrimaryDefault, updateFlowDefinitionBodyStepsItemFieldsDefault, updateFlowDefinitionBodyStepsItemGatesDefault, updateFlowDefinitionBodyStepsItemSsoProvidersDefault, updateFlowDefinitionResponseOneNameRegExp, updateFlowDefinitionResponseOneStepsItemActionsDefault, updateFlowDefinitionResponseOneStepsItemActionsPrimaryDefault, updateFlowDefinitionResponseOneStepsItemFieldsDefault, updateFlowDefinitionResponseOneStepsItemGatesDefault, updateFlowDefinitionResponseOneStepsItemSsoProvidersDefault, verifyChallengeProofPathAttemptIdRegExp, verifyChallengeProofPathChallengeIdRegExp, verifyChallengeProofResponseAttemptIdRegExp, verifyChallengeProofResponseChallengesItemChallengeIdRegExp, verifyChallengeProofResponseCompletedFactorsItemPayloadOneUserIdRegExp, verifyChallengeProofResponseProjectIdRegExp, verifyChallengeProofResponseSessionIdOneRegExp, verifyChallengeProofResponseUserIdOneRegExp };
+export { AuthorizeDeviceQueryParams, AuthorizeDeviceResponse, AuthorizeGetQueryParams, CreateAuthAttemptBody, CreateFlowBody, CreateFlowDefinitionBody, CreateHandoffHeader, CreateHandoffParams, CreateHandoffResponse, CreateProjectBody, CreateSchemaBody, CreateSchemaQueryParams, CreateSessionBody, CreateTeamBody, CreateTeamQueryParams, CreateUserBody, CreateUserQueryParams, DeleteFlowDefinitionParams, DeleteFlowDefinitionQueryParams, EndSessionQueryParams, ExchangeHandoffBody, ExchangeHandoffHeader, ExchangeHandoffQueryParams, ExchangeHandoffResponse, GetAuthAttemptParams, GetAuthAttemptResponse, GetFlowDefinitionParams, GetFlowDefinitionQueryParams, GetFlowDefinitionResponse, GetFlowStepParams, GetFlowStepResponse, GetKeysResponse, GetMySessionResponse, GetMyUserResponse, GetOpenIDConfigurationResponse, GetProjectParams, GetProjectResponse, GetSchemaByIdParams, GetSchemaByIdQueryParams, GetSchemaByIdResponse, GetSessionParams, GetSessionQueryParams, GetSessionResponse, GetTeamParams, GetTeamQueryParams, GetTeamResponse, GetTokenResponse, GetUserByIDParams, GetUserByIDQueryParams, GetUserByIDResponse, GetUserInfoResponse, IntrospectResponse, IssueChallengeBody, IssueChallengeParams, ListFlowDefinitionsQueryParams, ListFlowDefinitionsResponse, ListSessionsQueryParams, ListSessionsResponse, ListUsersQueryParams, ListUsersResponse, ListUsersResponseItem, RevokeSessionParams, RevokeSessionQueryParams, SetUserPasswordBody, SetUserPasswordParams, SetUserPasswordQueryParams, SubmitFlowEventBody, SubmitFlowEventParams, SubmitFlowStepBody, SubmitFlowStepHeader, SubmitFlowStepParams, SubmitFlowStepResponse, UpdateFlowDefinitionBody, UpdateFlowDefinitionParams, UpdateFlowDefinitionQueryParams, UpdateFlowDefinitionResponse, VerifyChallengeProofBody, VerifyChallengeProofHeader, VerifyChallengeProofParams, VerifyChallengeProofResponse, createAuthAttemptBodyProjectIdRegExp, createAuthAttemptBodySessionIdOneRegExp, createFlowBodyFlowDefinitionNameRegExp, createFlowBodyProjectIdRegExp, createFlowBodySchemaVersionRegExp, createFlowDefinitionBodyFlowDefinitionNameRegExp, createFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault, createFlowDefinitionBodyFlowDefinitionStepsItemActionsItemPrimaryDefault, createFlowDefinitionBodyFlowDefinitionStepsItemFieldsDefault, createFlowDefinitionBodyFlowDefinitionStepsItemGatesDefault, createFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersDefault, createFlowDefinitionBodyProjectIdRegExp, createHandoffPathAttemptIdRegExp, createSchemaBodyOnePropertiesXEditableDefault, createSchemaBodyOnePropertiesXMfaDefault, createSchemaBodyOnePropertiesXSensitiveDefault, createSchemaBodyOneXAuthMethodsMagicLinkPositionMin, createSchemaBodyOneXAuthMethodsOtpPositionMin, createSchemaBodyOneXAuthMethodsPasskeyPositionMin, createSchemaBodyOneXAuthMethodsPasswordPositionMin, createSchemaBodyOneXAuthMethodsSsoPositionMin, createSchemaQueryProjectIdRegExp, createSchemaQueryTeamIdRegExp, createSessionBodyProjectIdRegExp, createTeamQueryProjectIdRegExp, createUserQueryProjectIdRegExp, createUserQueryTeamIdRegExp, deleteFlowDefinitionQueryProjectIdRegExp, exchangeHandoffQueryProjectIdRegExp, exchangeHandoffResponseSessionFactorsItemPayloadOneUserIdRegExp, exchangeHandoffResponseSessionProjectIdRegExp, exchangeHandoffResponseSessionSessionIdRegExp, exchangeHandoffResponseSessionUserIdOneRegExp, getAuthAttemptPathAttemptIdRegExp, getAuthAttemptResponseAttemptIdRegExp, getAuthAttemptResponseChallengesItemChallengeIdRegExp, getAuthAttemptResponseCompletedFactorsItemPayloadOneUserIdRegExp, getAuthAttemptResponseProjectIdRegExp, getAuthAttemptResponseSessionIdOneRegExp, getAuthAttemptResponseUserIdOneRegExp, getFlowDefinitionQueryProjectIdRegExp, getFlowDefinitionResponseFlowDefinitionNameRegExp, getFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault, getFlowDefinitionResponseFlowDefinitionStepsItemActionsItemPrimaryDefault, getFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault, getFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault, getFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault, getFlowStepResponseBrandingLayoutDefault, getFlowStepResponseStepActionsDefault, getFlowStepResponseStepActionsItemPrimaryDefault, getFlowStepResponseStepFieldsDefault, getFlowStepResponseStepFieldsItemRequiredDefault, getFlowStepResponseStepFieldsItemValidationMaxLengthMin, getFlowStepResponseStepFieldsItemValidationMinLengthMin, getFlowStepResponseStepGatesDefault, getFlowStepResponseStepSsoProvidersDefault, getMySessionResponseFactorsItemPayloadOneUserIdRegExp, getMySessionResponseProjectIdRegExp, getMySessionResponseSessionIdRegExp, getMySessionResponseUserIdOneRegExp, getOpenIDConfigurationResponseClaimsParameterSupportedDefault, getOpenIDConfigurationResponseRequestParameterSupportedDefault, getOpenIDConfigurationResponseRequestUriParameterSupportedDefault, getOpenIDConfigurationResponseRequireRequestUriRegistrationDefault, getProjectPathProjectIdRegExp, getSchemaByIdQueryProjectIdRegExp, getSchemaByIdQueryTeamIdRegExp, getSchemaByIdResponseOnePropertiesXEditableDefault, getSchemaByIdResponseOnePropertiesXMfaDefault, getSchemaByIdResponseOnePropertiesXSensitiveDefault, getSchemaByIdResponseOneXAuthMethodsMagicLinkPositionMin, getSchemaByIdResponseOneXAuthMethodsOtpPositionMin, getSchemaByIdResponseOneXAuthMethodsPasskeyPositionMin, getSchemaByIdResponseOneXAuthMethodsPasswordPositionMin, getSchemaByIdResponseOneXAuthMethodsSsoPositionMin, getSessionPathSessionIdRegExp, getSessionQueryProjectIdRegExp, getSessionResponseFactorsItemPayloadOneUserIdRegExp, getSessionResponseProjectIdRegExp, getSessionResponseSessionIdRegExp, getSessionResponseUserIdOneRegExp, getTeamPathTeamIdRegExp, getTeamQueryProjectIdRegExp, getUserByIDPathUserIdRegExp, getUserByIDQueryProjectIdRegExp, getUserByIDQueryTeamIdRegExp, issueChallengePathAttemptIdRegExp, listFlowDefinitionsQueryLimitDefault, listFlowDefinitionsQueryLimitMax, listFlowDefinitionsQueryProjectIdRegExp, listFlowDefinitionsResponseFlowDefinitionsItemNameRegExp, listSessionsQueryLimitDefault, listSessionsQueryLimitMax, listSessionsQueryProjectIdRegExp, listSessionsQueryUserIdRegExp, listSessionsResponseSessionsItemFactorsItemPayloadOneUserIdRegExp, listSessionsResponseSessionsItemProjectIdRegExp, listSessionsResponseSessionsItemSessionIdRegExp, listSessionsResponseSessionsItemUserIdOneRegExp, listUsersQueryLimitDefault, listUsersQueryLimitMax, listUsersQueryOffsetDefault, listUsersQueryOffsetMin, revokeSessionPathSessionIdRegExp, revokeSessionQueryProjectIdRegExp, setUserPasswordPathUserIdRegExp, setUserPasswordQueryProjectIdRegExp, submitFlowStepResponseBrandingLayoutDefault, submitFlowStepResponseStepActionsDefault, submitFlowStepResponseStepActionsItemPrimaryDefault, submitFlowStepResponseStepFieldsDefault, submitFlowStepResponseStepFieldsItemRequiredDefault, submitFlowStepResponseStepFieldsItemValidationMaxLengthMin, submitFlowStepResponseStepFieldsItemValidationMinLengthMin, submitFlowStepResponseStepGatesDefault, submitFlowStepResponseStepSsoProvidersDefault, updateFlowDefinitionBodyStepsItemActionsDefault, updateFlowDefinitionBodyStepsItemActionsItemPrimaryDefault, updateFlowDefinitionBodyStepsItemFieldsDefault, updateFlowDefinitionBodyStepsItemGatesDefault, updateFlowDefinitionBodyStepsItemSsoProvidersDefault, updateFlowDefinitionQueryProjectIdRegExp, updateFlowDefinitionResponseFlowDefinitionNameRegExp, updateFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemActionsItemPrimaryDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault, verifyChallengeProofPathAttemptIdRegExp, verifyChallengeProofPathChallengeIdRegExp, verifyChallengeProofResponseAttemptIdRegExp, verifyChallengeProofResponseChallengesItemChallengeIdRegExp, verifyChallengeProofResponseCompletedFactorsItemPayloadOneUserIdRegExp, verifyChallengeProofResponseProjectIdRegExp, verifyChallengeProofResponseSessionIdOneRegExp, verifyChallengeProofResponseUserIdOneRegExp };
 
 //# sourceMappingURL=zitadelNextGen.zod.mjs.map