@zitadel/api 0.0.0 → 0.1.0-alpha.2

package/dist/generated/model/getFlowDefinition200.d.ts

@@ -5,157 +5,24 @@
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
+import type { GetFlowDefinition200FlowDefinition } from "./getFlowDefinition200FlowDefinition";
 export type GetFlowDefinition200 = {
-    /**
-       * Stable identifier for this flow, used as the target of cross-flow
-    `switch` and `pivot` transitions. Renaming is not supported — the
-    `name` is part of the public contract another definition may
-    reference. Acts as the human display label as well; no separate slug.
-  
-       * @pattern ^[a-z][a-z0-9-]*$
-       */
-    name: string;
-    /** User schema this flow operates on. Step `fields` reference properties
-    defined in this schema. The engine resolves field types, validation,
-    and implicit outcomes from schema annotations at runtime.
-     */
-    user_schema: string;
-    /** Maps each purpose this definition handles to its entry-point step.
-    Keys are purpose names; values must match a `name` in `steps`. A
-    definition can serve multiple purposes (e.g. a combined login/register
-    flow) by listing one entry per purpose.
-     */
-    purposes: Partial<Record<"login" | "register" | "recovery" | "profiling" | "reauth" | "link_account", string>>;
-    /** Scopes which teams or apps this flow definition applies to. Empty or
-    omitted fields mean "no restriction"; when both are empty the definition
-    matches every request in the project. The engine picks the most specific
-    matching definition: app > team > project-wide.
-     */
-    audience?: {
-        /** Restrict to specific teams (organizations). Empty means no team restriction. */
-        team_ids?: string[];
-        /** Restrict to specific applications. Empty means no app restriction. */
-        app_ids?: string[];
-    };
-    /**
-       * Ordered list of steps in this flow. The order is for human readability —
-    actual step sequencing is determined by transitions.
-  
-       * @minItems 1
-       */
-    steps: {
-        /** Unique step identifier within this flow. Used as transition targets
-      and returned in the API response as `step.name`.
-       */
-        name: string;
-        /** Schema property names to collect from the user. Each entry references
-      a property in the flow's user schema. The engine resolves field type,
-      validation rules, and implicit outcomes from schema annotations
-      (e.g. a property with `x-unique` set implies a `user_not_found`
-      transition outcome).
-       */
-        fields?: string[];
-        /** Actions the user can take. Keyed by action name.
-      The action name is what the frontend sends back in the submit request.
-      If omitted, the engine provides a default `submit` action.
-       */
-        actions?: {
-            [key: string]: {
-                /** Marks this as the default/primary action. The runtime template uses
-          this hint to choose visual emphasis. At most one action per step
-          should be primary; this is not enforced here.
-           */
-                primary?: boolean;
-                /** Optional localization key override for the action's label. When
-          omitted, the engine derives a key from the step and action names.
-          Display text is resolved client-side from a locale dictionary, never
-          by the engine.
-           */
-                text_key?: string;
-            };
-        };
-        /** Security gates that must be satisfied before submission. Keyed by gate
-      name. Each gate selects a kind (e.g. "captcha") and provider-specific
-      configuration. The engine may also inject gates dynamically based on
-      policy.
-       */
-        gates?: {
-            [key: string]: {
-                /** The gate category. Only `captcha` is currently defined. Authenticator
-          ceremonies (e.g. passkey) are modelled as credential auth_attempts via
-          `x-credential` on a field, not as gates.
-           */
-                kind: "captcha";
-                /** Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,
-          `hcaptcha`. The engine looks up an implementation in its provider
-          registry.
-           */
-                provider: string;
-                /** Provider-specific configuration consumed by the implementation when
-          issuing the per-render challenge. Opaque to the engine.
-           */
-                config?: {
-                    [key: string]: unknown;
-                };
-            };
-        };
-        /** Available SSO identity providers for this step. */
-        sso_providers?: {
-            /** Provider instance identifier. */
-            id: string;
-            /** Display name for the provider. */
-            name: string;
-            /** Template hint for rendering (logo, colors). */
-            template: string;
-        }[];
-        /** Server-side mutation to execute when this step completes successfully.
-      Runs after field validation passes, before the transition fires.
-    
-      - create_user: creates the user record (registration flows)
-       */
-        on_success?: "create_user";
-        /** Marks this as a terminal step. Tells the frontend what to do:
-      - redirect: navigate to redirect_uri (OIDC/SAML callback done)
-      - show: render as a success/info screen
-       */
-        complete?: "redirect" | "show";
-        /** Maps action/outcome names to their transition descriptor.
-    
-      Keys match action names from the `actions` dict. Additional keys
-      come from implicit outcomes based on schema annotations
-      (e.g. `user_not_found` from `x-unique` fields) and engine
-      events (e.g. `sso`, `callback`).
-       */
-        transitions?: {
-            [key: string]: {
-                /** Step name within this flow (when `action` is null), or the name
-          of another flow (when `action` is `switch` or `pivot`).
-           */
-                target: string;
-                /** How to interpret `target`:
-          - null (omitted): transition to a step in the current flow.
-          - switch: replace the current flow with the target flow.
-            No return — the current flow is discarded.
-            Example: login ↔ register.
-          - pivot: push the target flow onto the stack. The current flow
-            is paused and resumes when the target flow completes (auto-pop).
-            Example: login → recovery → back to login.
-           */
-                action?: "switch" | "pivot" | null;
-            };
-        };
-    }[];
-} & {
     /** Unique identifier for the flow definition. */
     id: string;
     /** Identifier of the project this flow definition belongs to. */
     project_id: string;
-    /** URI of the flow definition schema this definition was authored against.
-    If the schema_uri was not provided in the request, the flow definition is validated against the latest version of the schema, and the response includes the schema_uri of the latest version.
-     */
-    schema_uri: string;
     /** Status of the flow definition. */
     status: string;
+    /** A flow definition is the server-side configuration that describes a complete
+    authentication or identity flow. It is NOT sent to the frontend — the flow
+    engine evaluates it and produces FlowResponse payloads (steps with capability
+    dictionaries) for the client.
+  
+    Flow definitions are created by administrators and stored in the project/team
+    configuration hierarchy. The engine selects the matching definition based on
+    the purpose + audience when a flow is created via POST /flow.
+     */
+    flow_definition: GetFlowDefinition200FlowDefinition;
     created_at: string;
     updated_at: string;
 };

package/dist/generated/model/getFlowDefinition200.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getFlowDefinition200.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getFlowDefinition200.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,oBAAoB,GAAG;IACjC;;;;;;;SAOK;IACL,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,QAAQ,EAAE,OAAO,CACf,MAAM,CAAC,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,GAAG,cAAc,EAAE,MAAM,CAAC,CAC5F,CAAC;IACF;;;;OAIG;IACH,QAAQ,CAAC,EAAE;QACT,mFAAmF;QACnF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,yEAAyE;QACzE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;KACpB,CAAC;IACF;;;;;SAKK;IACL,KAAK,EAAE;QACL;;SAEC;QACD,IAAI,EAAE,MAAM,CAAC;QACb;;;;;SAKC;QACD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB;;;SAGC;QACD,OAAO,CAAC,EAAE;YACR,CAAC,GAAG,EAAE,MAAM,GAAG;gBACb;;;aAGH;gBACG,OAAO,CAAC,EAAE,OAAO,CAAC;gBAClB;;;;aAIH;gBACG,QAAQ,CAAC,EAAE,MAAM,CAAC;aACnB,CAAC;SACH,CAAC;QACF;;;;SAIC;QACD,KAAK,CAAC,EAAE;YACN,CAAC,GAAG,EAAE,MAAM,GAAG;gBACb;;;aAGH;gBACG,IAAI,EAAE,SAAS,CAAC;gBAChB;;;aAGH;gBACG,QAAQ,EAAE,MAAM,CAAC;gBACjB;;aAEH;gBACG,MAAM,CAAC,EAAE;oBAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;iBAAE,CAAC;aACrC,CAAC;SACH,CAAC;QACF,sDAAsD;QACtD,aAAa,CAAC,EAAE;YACd,oCAAoC;YACpC,EAAE,EAAE,MAAM,CAAC;YACX,qCAAqC;YACrC,IAAI,EAAE,MAAM,CAAC;YACb,kDAAkD;YAClD,QAAQ,EAAE,MAAM,CAAC;SAClB,EAAE,CAAC;QACJ;;;;SAIC;QACD,UAAU,CAAC,EAAE,aAAa,CAAC;QAC3B;;;SAGC;QACD,QAAQ,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;QAC/B;;;;;;SAMC;QACD,WAAW,CAAC,EAAE;YACZ,CAAC,GAAG,EAAE,MAAM,GAAG;gBACb;;aAEH;gBACG,MAAM,EAAE,MAAM,CAAC;gBACf;;;;;;;;aAQH;gBACG,MAAM,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,IAAI,CAAC;aACpC,CAAC;SACH,CAAC;KACH,EAAE,CAAC;CACL,GAAG;IACF,iDAAiD;IACjD,EAAE,EAAE,MAAM,CAAC;IACX,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC"}
+{"version":3,"file":"getFlowDefinition200.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getFlowDefinition200.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAE/F,MAAM,MAAM,oBAAoB,GAAG;IACjC,iDAAiD;IACjD,EAAE,EAAE,MAAM,CAAC;IACX,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;OAQG;IACH,eAAe,EAAE,kCAAkC,CAAC;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC"}

package/dist/generated/model/getFlowDefinition200FlowDefinition.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { GetFlowDefinition200FlowDefinitionAudience } from "./getFlowDefinition200FlowDefinitionAudience";
+import type { GetFlowDefinition200FlowDefinitionStepsItem } from "./getFlowDefinition200FlowDefinitionStepsItem";
+/**
+ * A flow definition is the server-side configuration that describes a complete
+authentication or identity flow. It is NOT sent to the frontend — the flow
+engine evaluates it and produces FlowResponse payloads (steps with capability
+dictionaries) for the client.
+
+Flow definitions are created by administrators and stored in the project/team
+configuration hierarchy. The engine selects the matching definition based on
+the purpose + audience when a flow is created via POST /flow.
+
+ */
+export type GetFlowDefinition200FlowDefinition = {
+    /**
+       * Stable identifier for this flow, used as the target of cross-flow
+    `switch` and `pivot` transitions. Renaming is not supported — the
+    `name` is part of the public contract another definition may
+    reference. Acts as the human display label as well; no separate slug.
+  
+       * @pattern ^[a-z][a-z0-9-]*$
+       */
+    name: string;
+    /** User schema this flow operates on. Step `fields` reference properties
+    defined in this schema. The engine resolves field types, validation,
+    and implicit outcomes from schema annotations at runtime.
+     */
+    user_schema: string;
+    /** Maps each purpose this definition handles to its entry-point step.
+    Keys are purpose names; values must match a `name` in `steps`. A
+    definition can serve multiple purposes (e.g. a combined login/register
+    flow) by listing one entry per purpose.
+     */
+    purposes: Partial<Record<"login" | "register" | "recovery" | "profiling" | "reauth" | "link_account", string>>;
+    /** Scopes which teams or apps this flow definition applies to. Empty or
+    omitted fields mean "no restriction"; when both are empty the definition
+    matches every request in the project. The engine picks the most specific
+    matching definition: app > team > project-wide.
+     */
+    audience?: GetFlowDefinition200FlowDefinitionAudience;
+    /**
+       * Ordered list of steps in this flow. The order is for human readability —
+    actual step sequencing is determined by transitions.
+  
+       * @minItems 1
+       */
+    steps: GetFlowDefinition200FlowDefinitionStepsItem[];
+};
+//# sourceMappingURL=getFlowDefinition200FlowDefinition.d.ts.map

package/dist/generated/model/getFlowDefinition200FlowDefinition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFlowDefinition200FlowDefinition.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getFlowDefinition200FlowDefinition.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC/G,OAAO,KAAK,EAAE,2CAA2C,EAAE,MAAM,+CAA+C,CAAC;AAEjH;;;;;;;;;;GAUG;AACH,MAAM,MAAM,kCAAkC,GAAG;IAC/C;;;;;;;SAOK;IACL,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,QAAQ,EAAE,OAAO,CACf,MAAM,CAAC,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,GAAG,cAAc,EAAE,MAAM,CAAC,CAC5F,CAAC;IACF;;;;OAIG;IACH,QAAQ,CAAC,EAAE,0CAA0C,CAAC;IACtD;;;;;SAKK;IACL,KAAK,EAAE,2CAA2C,EAAE,CAAC;CACtD,CAAC"}

package/dist/generated/model/getFlowDefinition200FlowDefinitionAudience.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Scopes which teams or apps this flow definition applies to. Empty or
+omitted fields mean "no restriction"; when both are empty the definition
+matches every request in the project. The engine picks the most specific
+matching definition: app > team > project-wide.
+
+ */
+export type GetFlowDefinition200FlowDefinitionAudience = {
+    /** Restrict to specific teams (organizations). Empty means no team restriction. */
+    team_ids?: string[];
+    /** Restrict to specific applications. Empty means no app restriction. */
+    app_ids?: string[];
+};
+//# sourceMappingURL=getFlowDefinition200FlowDefinitionAudience.d.ts.map

package/dist/generated/model/getFlowDefinition200FlowDefinitionAudience.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFlowDefinition200FlowDefinitionAudience.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getFlowDefinition200FlowDefinitionAudience.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,0CAA0C,GAAG;IACvD,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC"}

package/dist/generated/model/getFlowDefinition200FlowDefinitionStepsItem.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { GetFlowDefinition200FlowDefinitionStepsItemActions } from "./getFlowDefinition200FlowDefinitionStepsItemActions";
+import type { GetFlowDefinition200FlowDefinitionStepsItemComplete } from "./getFlowDefinition200FlowDefinitionStepsItemComplete";
+import type { GetFlowDefinition200FlowDefinitionStepsItemGates } from "./getFlowDefinition200FlowDefinitionStepsItemGates";
+import type { GetFlowDefinition200FlowDefinitionStepsItemOnSuccess } from "./getFlowDefinition200FlowDefinitionStepsItemOnSuccess";
+import type { GetFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem } from "./getFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem";
+import type { GetFlowDefinition200FlowDefinitionStepsItemTransitions } from "./getFlowDefinition200FlowDefinitionStepsItemTransitions";
+/**
+ * A step in a flow definition. This is the admin-authored configuration,
+not the runtime payload sent to the frontend.
+
+Steps are schema-driven: `fields` references properties from the flow's
+user schema, and the engine resolves field metadata (type, validation,
+implicit outcomes) from schema annotations at runtime.
+
+A step with only `complete` set is a terminal step. All other steps are
+rendered to the frontend as capability payloads.
+
+ */
+export type GetFlowDefinition200FlowDefinitionStepsItem = {
+    /** Unique step identifier within this flow. Used as transition targets
+    and returned in the API response as `step.name`.
+     */
+    name: string;
+    /** Schema property names to collect from the user. Each entry references
+    a property in the flow's user schema. The engine resolves field type,
+    validation rules, and implicit outcomes from schema annotations
+    (e.g. a property with `x-unique` set implies a `user_not_found`
+    transition outcome).
+     */
+    fields?: string[];
+    /** Actions the user can take. Keyed by action name.
+    The action name is what the frontend sends back in the submit request.
+    If omitted, the engine provides a default `submit` action.
+     */
+    actions?: GetFlowDefinition200FlowDefinitionStepsItemActions;
+    /** Security gates that must be satisfied before submission. Keyed by gate
+    name. Each gate selects a kind (e.g. "captcha") and provider-specific
+    configuration. The engine may also inject gates dynamically based on
+    policy.
+     */
+    gates?: GetFlowDefinition200FlowDefinitionStepsItemGates;
+    /** Available SSO identity providers for this step. */
+    sso_providers?: GetFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem[];
+    /** Server-side mutation to execute when this step completes successfully.
+    Runs after field validation passes, before the transition fires.
+  
+    - create_user: creates the user record (registration flows)
+     */
+    on_success?: GetFlowDefinition200FlowDefinitionStepsItemOnSuccess;
+    /** Marks this as a terminal step. Tells the frontend what to do:
+    - redirect: navigate to redirect_uri (OIDC/SAML callback done)
+    - show: render as a success/info screen
+     */
+    complete?: GetFlowDefinition200FlowDefinitionStepsItemComplete;
+    /** Maps action/outcome names to their transition descriptor.
+  
+    Keys match action names from the `actions` dict. Additional keys
+    come from implicit outcomes based on schema annotations
+    (e.g. `user_not_found` from `x-unique` fields) and engine
+    events (e.g. `sso`, `callback`).
+     */
+    transitions?: GetFlowDefinition200FlowDefinitionStepsItemTransitions;
+};
+//# sourceMappingURL=getFlowDefinition200FlowDefinitionStepsItem.d.ts.map

package/dist/generated/model/getFlowDefinition200FlowDefinitionStepsItem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFlowDefinition200FlowDefinitionStepsItem.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getFlowDefinition200FlowDefinitionStepsItem.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,kDAAkD,EAAE,MAAM,sDAAsD,CAAC;AAC/H,OAAO,KAAK,EAAE,mDAAmD,EAAE,MAAM,uDAAuD,CAAC;AACjI,OAAO,KAAK,EAAE,gDAAgD,EAAE,MAAM,oDAAoD,CAAC;AAC3H,OAAO,KAAK,EAAE,oDAAoD,EAAE,MAAM,wDAAwD,CAAC;AACnI,OAAO,KAAK,EAAE,2DAA2D,EAAE,MAAM,+DAA+D,CAAC;AACjJ,OAAO,KAAK,EAAE,sDAAsD,EAAE,MAAM,0DAA0D,CAAC;AAEvI;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,2CAA2C,GAAG;IACxD;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;OAGG;IACH,OAAO,CAAC,EAAE,kDAAkD,CAAC;IAC7D;;;;OAIG;IACH,KAAK,CAAC,EAAE,gDAAgD,CAAC;IACzD,sDAAsD;IACtD,aAAa,CAAC,EAAE,2DAA2D,EAAE,CAAC;IAC9E;;;;OAIG;IACH,UAAU,CAAC,EAAE,oDAAoD,CAAC;IAClE;;;OAGG;IACH,QAAQ,CAAC,EAAE,mDAAmD,CAAC;IAC/D;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,sDAAsD,CAAC;CACtE,CAAC"}

package/dist/generated/model/getFlowDefinition200FlowDefinitionStepsItemActions.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Actions the user can take. Keyed by action name.
+The action name is what the frontend sends back in the submit request.
+If omitted, the engine provides a default `submit` action.
+
+ */
+export type GetFlowDefinition200FlowDefinitionStepsItemActions = {
+    [key: string]: {
+        /** Marks this as the default/primary action. The runtime template uses
+      this hint to choose visual emphasis. At most one action per step
+      should be primary; this is not enforced here.
+       */
+        primary?: boolean;
+        /** Optional localization key override for the action's label. When
+      omitted, the engine derives a key from the step and action names.
+      Display text is resolved client-side from a locale dictionary, never
+      by the engine.
+       */
+        text_key?: string;
+    };
+};
+//# sourceMappingURL=getFlowDefinition200FlowDefinitionStepsItemActions.d.ts.map

package/dist/generated/model/getFlowDefinition200FlowDefinitionStepsItemActions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFlowDefinition200FlowDefinitionStepsItemActions.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getFlowDefinition200FlowDefinitionStepsItemActions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;GAKG;AACH,MAAM,MAAM,kDAAkD,GAAG;IAC/D,CAAC,GAAG,EAAE,MAAM,GAAG;QACb;;;SAGC;QACD,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB;;;;SAIC;QACD,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH,CAAC"}

package/dist/generated/model/getFlowDefinition200FlowDefinitionStepsItemComplete.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Marks this as a terminal step. Tells the frontend what to do:
+- redirect: navigate to redirect_uri (OIDC/SAML callback done)
+- show: render as a success/info screen
+
+ */
+export type GetFlowDefinition200FlowDefinitionStepsItemComplete = (typeof GetFlowDefinition200FlowDefinitionStepsItemComplete)[keyof typeof GetFlowDefinition200FlowDefinitionStepsItemComplete];
+export declare const GetFlowDefinition200FlowDefinitionStepsItemComplete: {
+    readonly redirect: "redirect";
+    readonly show: "show";
+};
+//# sourceMappingURL=getFlowDefinition200FlowDefinitionStepsItemComplete.d.ts.map

package/dist/generated/model/getFlowDefinition200FlowDefinitionStepsItemComplete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFlowDefinition200FlowDefinitionStepsItemComplete.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getFlowDefinition200FlowDefinitionStepsItemComplete.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;GAKG;AACH,MAAM,MAAM,mDAAmD,GAC7D,CAAC,OAAO,mDAAmD,CAAC,CAAC,MAAM,OAAO,mDAAmD,CAAC,CAAC;AAEjI,eAAO,MAAM,mDAAmD;aAC9D,QAAQ,EAAE,UAAU;aACpB,IAAI,EAAE,MAAM;CACJ,CAAC"}

package/dist/generated/model/getFlowDefinition200FlowDefinitionStepsItemGates.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { GetFlowDefinition200FlowDefinitionStepsItemGatesConfig } from "./getFlowDefinition200FlowDefinitionStepsItemGatesConfig";
+import type { GetFlowDefinition200FlowDefinitionStepsItemGatesKind } from "./getFlowDefinition200FlowDefinitionStepsItemGatesKind";
+/**
+ * Security gates that must be satisfied before submission. Keyed by gate
+name. Each gate selects a kind (e.g. "captcha") and provider-specific
+configuration. The engine may also inject gates dynamically based on
+policy.
+
+ */
+export type GetFlowDefinition200FlowDefinitionStepsItemGates = {
+    [key: string]: {
+        /** The gate category. Only `captcha` is currently defined. Authenticator
+      ceremonies (e.g. passkey) are modelled as credential auth_attempts via
+      `x-credential` on a field, not as gates.
+       */
+        kind: GetFlowDefinition200FlowDefinitionStepsItemGatesKind;
+        /** Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,
+      `hcaptcha`. The engine looks up an implementation in its provider
+      registry.
+       */
+        provider: string;
+        /** Provider-specific configuration consumed by the implementation when
+      issuing the per-render challenge. Opaque to the engine.
+       */
+        config?: GetFlowDefinition200FlowDefinitionStepsItemGatesConfig;
+    };
+};
+//# sourceMappingURL=getFlowDefinition200FlowDefinitionStepsItemGates.d.ts.map

package/dist/generated/model/getFlowDefinition200FlowDefinitionStepsItemGates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFlowDefinition200FlowDefinitionStepsItemGates.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getFlowDefinition200FlowDefinitionStepsItemGates.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,sDAAsD,EAAE,MAAM,0DAA0D,CAAC;AACvI,OAAO,KAAK,EAAE,oDAAoD,EAAE,MAAM,wDAAwD,CAAC;AAEnI;;;;;;GAMG;AACH,MAAM,MAAM,gDAAgD,GAAG;IAC7D,CAAC,GAAG,EAAE,MAAM,GAAG;QACb;;;SAGC;QACD,IAAI,EAAE,oDAAoD,CAAC;QAC3D;;;SAGC;QACD,QAAQ,EAAE,MAAM,CAAC;QACjB;;SAEC;QACD,MAAM,CAAC,EAAE,sDAAsD,CAAC;KACjE,CAAC;CACH,CAAC"}

package/dist/generated/model/getFlowDefinition200FlowDefinitionStepsItemGatesConfig.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Provider-specific configuration consumed by the implementation when
+issuing the per-render challenge. Opaque to the engine.
+
+ */
+export type GetFlowDefinition200FlowDefinitionStepsItemGatesConfig = {
+    [key: string]: unknown;
+};
+//# sourceMappingURL=getFlowDefinition200FlowDefinitionStepsItemGatesConfig.d.ts.map

package/dist/generated/model/getFlowDefinition200FlowDefinitionStepsItemGatesConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFlowDefinition200FlowDefinitionStepsItemGatesConfig.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getFlowDefinition200FlowDefinitionStepsItemGatesConfig.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;GAIG;AACH,MAAM,MAAM,sDAAsD,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC"}

package/dist/generated/model/getFlowDefinition200FlowDefinitionStepsItemGatesKind.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * The gate category. Only `captcha` is currently defined. Authenticator
+ceremonies (e.g. passkey) are modelled as credential auth_attempts via
+`x-credential` on a field, not as gates.
+
+ */
+export type GetFlowDefinition200FlowDefinitionStepsItemGatesKind = (typeof GetFlowDefinition200FlowDefinitionStepsItemGatesKind)[keyof typeof GetFlowDefinition200FlowDefinitionStepsItemGatesKind];
+export declare const GetFlowDefinition200FlowDefinitionStepsItemGatesKind: {
+    readonly captcha: "captcha";
+};
+//# sourceMappingURL=getFlowDefinition200FlowDefinitionStepsItemGatesKind.d.ts.map

package/dist/generated/model/getFlowDefinition200FlowDefinitionStepsItemGatesKind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFlowDefinition200FlowDefinitionStepsItemGatesKind.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getFlowDefinition200FlowDefinitionStepsItemGatesKind.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;GAKG;AACH,MAAM,MAAM,oDAAoD,GAC9D,CAAC,OAAO,oDAAoD,CAAC,CAAC,MAAM,OAAO,oDAAoD,CAAC,CAAC;AAEnI,eAAO,MAAM,oDAAoD;aAC/D,OAAO,EAAE,SAAS;CACV,CAAC"}

package/dist/generated/model/getFlowDefinition200FlowDefinitionStepsItemOnSuccess.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Server-side mutation to execute when this step completes successfully.
+Runs after field validation passes, before the transition fires.
+
+- create_user: creates the user record (registration flows)
+
+ */
+export type GetFlowDefinition200FlowDefinitionStepsItemOnSuccess = (typeof GetFlowDefinition200FlowDefinitionStepsItemOnSuccess)[keyof typeof GetFlowDefinition200FlowDefinitionStepsItemOnSuccess];
+export declare const GetFlowDefinition200FlowDefinitionStepsItemOnSuccess: {
+    readonly create_user: "create_user";
+};
+//# sourceMappingURL=getFlowDefinition200FlowDefinitionStepsItemOnSuccess.d.ts.map

package/dist/generated/model/getFlowDefinition200FlowDefinitionStepsItemOnSuccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFlowDefinition200FlowDefinitionStepsItemOnSuccess.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getFlowDefinition200FlowDefinitionStepsItemOnSuccess.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,oDAAoD,GAC9D,CAAC,OAAO,oDAAoD,CAAC,CAAC,MAAM,OAAO,oDAAoD,CAAC,CAAC;AAEnI,eAAO,MAAM,oDAAoD;aAC/D,WAAW,EAAE,aAAa;CAClB,CAAC"}

package/dist/generated/model/getFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * An available SSO identity provider.
+ */
+export type GetFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem = {
+    /** Provider instance identifier. */
+    id: string;
+    /** Display name for the provider. */
+    name: string;
+    /** Template hint for rendering (logo, colors). */
+    template: string;
+};
+//# sourceMappingURL=getFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem.d.ts.map

package/dist/generated/model/getFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,MAAM,2DAA2D,GAAG;IACxE,oCAAoC;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC"}

package/dist/generated/model/getFlowDefinition200FlowDefinitionStepsItemTransitions.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Maps action/outcome names to their transition descriptor.
+
+Keys match action names from the `actions` dict. Additional keys
+come from implicit outcomes based on schema annotations
+(e.g. `user_not_found` from `x-unique` fields) and engine
+events (e.g. `sso`, `callback`).
+
+ */
+export type GetFlowDefinition200FlowDefinitionStepsItemTransitions = {
+    [key: string]: {
+        /** Step name within this flow (when `action` is null), or the name
+      of another flow (when `action` is `switch` or `pivot`).
+       */
+        target: string;
+        /** How to interpret `target`:
+      - null (omitted): transition to a step in the current flow.
+      - switch: replace the current flow with the target flow.
+        No return — the current flow is discarded.
+        Example: login ↔ register.
+      - pivot: push the target flow onto the stack. The current flow
+        is paused and resumes when the target flow completes (auto-pop).
+        Example: login → recovery → back to login.
+       */
+        action?: "switch" | "pivot" | null;
+    };
+};
+//# sourceMappingURL=getFlowDefinition200FlowDefinitionStepsItemTransitions.d.ts.map

package/dist/generated/model/getFlowDefinition200FlowDefinitionStepsItemTransitions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFlowDefinition200FlowDefinitionStepsItemTransitions.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getFlowDefinition200FlowDefinitionStepsItemTransitions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;GAQG;AACH,MAAM,MAAM,sDAAsD,GAAG;IACnE,CAAC,GAAG,EAAE,MAAM,GAAG;QACb;;SAEC;QACD,MAAM,EAAE,MAAM,CAAC;QACf;;;;;;;;SAQC;QACD,MAAM,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,IAAI,CAAC;KACpC,CAAC;CACH,CAAC"}

package/dist/generated/model/getFlowDefinitionParams.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+export type GetFlowDefinitionParams = {
+    /**
+     * The project id to filter by.
+     * @pattern ^[a-zA-Z0-9_-]+$
+     */
+    project_id: string;
+};
+//# sourceMappingURL=getFlowDefinitionParams.d.ts.map

package/dist/generated/model/getFlowDefinitionParams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFlowDefinitionParams.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getFlowDefinitionParams.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,uBAAuB,GAAG;IACpC;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC"}

package/dist/generated/model/getMyUser200.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+export type GetMyUser200 = {
+    [key: string]: unknown;
+};
+//# sourceMappingURL=getMyUser200.d.ts.map

package/dist/generated/model/getMyUser200.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getMyUser200.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getMyUser200.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,YAAY,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC"}

package/dist/generated/model/{getFlowDefinition404.d.ts → getMyUser401.d.ts}

@@ -5,16 +5,16 @@
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
-import type { GetFlowDefinition404Details } from "./getFlowDefinition404Details";
+import type { GetMyUser401Details } from "./getMyUser401Details";
 /**
  * Standard error payload returned for failed API requests.
  */
-export type GetFlowDefinition404 = {
+export type GetMyUser401 = {
     /** Stable machine-readable error code. */
     code: string;
     /** Human-readable explanation of the error. */
     message: string;
     /** Additional error-specific context. */
-    details?: GetFlowDefinition404Details;
+    details?: GetMyUser401Details;
 };
-//# sourceMappingURL=getFlowDefinition404.d.ts.map
+//# sourceMappingURL=getMyUser401.d.ts.map

package/dist/generated/model/getMyUser401.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getMyUser401.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getMyUser401.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEjE;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,OAAO,CAAC,EAAE,mBAAmB,CAAC;CAC/B,CAAC"}