@zitadel/api 0.0.0 → 0.1.0-alpha.2

package/dist/generated/model/updateFlowDefinition200.d.ts

@@ -5,157 +5,24 @@
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
+import type { UpdateFlowDefinition200FlowDefinition } from "./updateFlowDefinition200FlowDefinition";
 export type UpdateFlowDefinition200 = {
-    /**
-       * Stable identifier for this flow, used as the target of cross-flow
-    `switch` and `pivot` transitions. Renaming is not supported — the
-    `name` is part of the public contract another definition may
-    reference. Acts as the human display label as well; no separate slug.
-  
-       * @pattern ^[a-z][a-z0-9-]*$
-       */
-    name: string;
-    /** User schema this flow operates on. Step `fields` reference properties
-    defined in this schema. The engine resolves field types, validation,
-    and implicit outcomes from schema annotations at runtime.
-     */
-    user_schema: string;
-    /** Maps each purpose this definition handles to its entry-point step.
-    Keys are purpose names; values must match a `name` in `steps`. A
-    definition can serve multiple purposes (e.g. a combined login/register
-    flow) by listing one entry per purpose.
-     */
-    purposes: Partial<Record<"login" | "register" | "recovery" | "profiling" | "reauth" | "link_account", string>>;
-    /** Scopes which teams or apps this flow definition applies to. Empty or
-    omitted fields mean "no restriction"; when both are empty the definition
-    matches every request in the project. The engine picks the most specific
-    matching definition: app > team > project-wide.
-     */
-    audience?: {
-        /** Restrict to specific teams (organizations). Empty means no team restriction. */
-        team_ids?: string[];
-        /** Restrict to specific applications. Empty means no app restriction. */
-        app_ids?: string[];
-    };
-    /**
-       * Ordered list of steps in this flow. The order is for human readability —
-    actual step sequencing is determined by transitions.
-  
-       * @minItems 1
-       */
-    steps: {
-        /** Unique step identifier within this flow. Used as transition targets
-      and returned in the API response as `step.name`.
-       */
-        name: string;
-        /** Schema property names to collect from the user. Each entry references
-      a property in the flow's user schema. The engine resolves field type,
-      validation rules, and implicit outcomes from schema annotations
-      (e.g. a property with `x-unique` set implies a `user_not_found`
-      transition outcome).
-       */
-        fields?: string[];
-        /** Actions the user can take. Keyed by action name.
-      The action name is what the frontend sends back in the submit request.
-      If omitted, the engine provides a default `submit` action.
-       */
-        actions?: {
-            [key: string]: {
-                /** Marks this as the default/primary action. The runtime template uses
-          this hint to choose visual emphasis. At most one action per step
-          should be primary; this is not enforced here.
-           */
-                primary?: boolean;
-                /** Optional localization key override for the action's label. When
-          omitted, the engine derives a key from the step and action names.
-          Display text is resolved client-side from a locale dictionary, never
-          by the engine.
-           */
-                text_key?: string;
-            };
-        };
-        /** Security gates that must be satisfied before submission. Keyed by gate
-      name. Each gate selects a kind (e.g. "captcha") and provider-specific
-      configuration. The engine may also inject gates dynamically based on
-      policy.
-       */
-        gates?: {
-            [key: string]: {
-                /** The gate category. Only `captcha` is currently defined. Authenticator
-          ceremonies (e.g. passkey) are modelled as credential auth_attempts via
-          `x-credential` on a field, not as gates.
-           */
-                kind: "captcha";
-                /** Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,
-          `hcaptcha`. The engine looks up an implementation in its provider
-          registry.
-           */
-                provider: string;
-                /** Provider-specific configuration consumed by the implementation when
-          issuing the per-render challenge. Opaque to the engine.
-           */
-                config?: {
-                    [key: string]: unknown;
-                };
-            };
-        };
-        /** Available SSO identity providers for this step. */
-        sso_providers?: {
-            /** Provider instance identifier. */
-            id: string;
-            /** Display name for the provider. */
-            name: string;
-            /** Template hint for rendering (logo, colors). */
-            template: string;
-        }[];
-        /** Server-side mutation to execute when this step completes successfully.
-      Runs after field validation passes, before the transition fires.
-    
-      - create_user: creates the user record (registration flows)
-       */
-        on_success?: "create_user";
-        /** Marks this as a terminal step. Tells the frontend what to do:
-      - redirect: navigate to redirect_uri (OIDC/SAML callback done)
-      - show: render as a success/info screen
-       */
-        complete?: "redirect" | "show";
-        /** Maps action/outcome names to their transition descriptor.
-    
-      Keys match action names from the `actions` dict. Additional keys
-      come from implicit outcomes based on schema annotations
-      (e.g. `user_not_found` from `x-unique` fields) and engine
-      events (e.g. `sso`, `callback`).
-       */
-        transitions?: {
-            [key: string]: {
-                /** Step name within this flow (when `action` is null), or the name
-          of another flow (when `action` is `switch` or `pivot`).
-           */
-                target: string;
-                /** How to interpret `target`:
-          - null (omitted): transition to a step in the current flow.
-          - switch: replace the current flow with the target flow.
-            No return — the current flow is discarded.
-            Example: login ↔ register.
-          - pivot: push the target flow onto the stack. The current flow
-            is paused and resumes when the target flow completes (auto-pop).
-            Example: login → recovery → back to login.
-           */
-                action?: "switch" | "pivot" | null;
-            };
-        };
-    }[];
-} & {
     /** Unique identifier for the flow definition. */
     id: string;
     /** Identifier of the project this flow definition belongs to. */
     project_id: string;
-    /** URI of the flow definition schema this definition was authored against.
-    If the schema_uri was not provided in the request, the flow definition is validated against the latest version of the schema, and the response includes the schema_uri of the latest version.
-     */
-    schema_uri: string;
     /** Status of the flow definition. */
     status: string;
+    /** A flow definition is the server-side configuration that describes a complete
+    authentication or identity flow. It is NOT sent to the frontend — the flow
+    engine evaluates it and produces FlowResponse payloads (steps with capability
+    dictionaries) for the client.
+  
+    Flow definitions are created by administrators and stored in the project/team
+    configuration hierarchy. The engine selects the matching definition based on
+    the purpose + audience when a flow is created via POST /flow.
+     */
+    flow_definition: UpdateFlowDefinition200FlowDefinition;
     created_at: string;
     updated_at: string;
 };

package/dist/generated/model/updateFlowDefinition200.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"updateFlowDefinition200.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinition200.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,uBAAuB,GAAG;IACpC;;;;;;;SAOK;IACL,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,QAAQ,EAAE,OAAO,CACf,MAAM,CAAC,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,GAAG,cAAc,EAAE,MAAM,CAAC,CAC5F,CAAC;IACF;;;;OAIG;IACH,QAAQ,CAAC,EAAE;QACT,mFAAmF;QACnF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,yEAAyE;QACzE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;KACpB,CAAC;IACF;;;;;SAKK;IACL,KAAK,EAAE;QACL;;SAEC;QACD,IAAI,EAAE,MAAM,CAAC;QACb;;;;;SAKC;QACD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB;;;SAGC;QACD,OAAO,CAAC,EAAE;YACR,CAAC,GAAG,EAAE,MAAM,GAAG;gBACb;;;aAGH;gBACG,OAAO,CAAC,EAAE,OAAO,CAAC;gBAClB;;;;aAIH;gBACG,QAAQ,CAAC,EAAE,MAAM,CAAC;aACnB,CAAC;SACH,CAAC;QACF;;;;SAIC;QACD,KAAK,CAAC,EAAE;YACN,CAAC,GAAG,EAAE,MAAM,GAAG;gBACb;;;aAGH;gBACG,IAAI,EAAE,SAAS,CAAC;gBAChB;;;aAGH;gBACG,QAAQ,EAAE,MAAM,CAAC;gBACjB;;aAEH;gBACG,MAAM,CAAC,EAAE;oBAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;iBAAE,CAAC;aACrC,CAAC;SACH,CAAC;QACF,sDAAsD;QACtD,aAAa,CAAC,EAAE;YACd,oCAAoC;YACpC,EAAE,EAAE,MAAM,CAAC;YACX,qCAAqC;YACrC,IAAI,EAAE,MAAM,CAAC;YACb,kDAAkD;YAClD,QAAQ,EAAE,MAAM,CAAC;SAClB,EAAE,CAAC;QACJ;;;;SAIC;QACD,UAAU,CAAC,EAAE,aAAa,CAAC;QAC3B;;;SAGC;QACD,QAAQ,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;QAC/B;;;;;;SAMC;QACD,WAAW,CAAC,EAAE;YACZ,CAAC,GAAG,EAAE,MAAM,GAAG;gBACb;;aAEH;gBACG,MAAM,EAAE,MAAM,CAAC;gBACf;;;;;;;;aAQH;gBACG,MAAM,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,IAAI,CAAC;aACpC,CAAC;SACH,CAAC;KACH,EAAE,CAAC;CACL,GAAG;IACF,iDAAiD;IACjD,EAAE,EAAE,MAAM,CAAC;IACX,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC"}
+{"version":3,"file":"updateFlowDefinition200.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinition200.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,yCAAyC,CAAC;AAErG,MAAM,MAAM,uBAAuB,GAAG;IACpC,iDAAiD;IACjD,EAAE,EAAE,MAAM,CAAC;IACX,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;OAQG;IACH,eAAe,EAAE,qCAAqC,CAAC;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC"}

package/dist/generated/model/updateFlowDefinition200FlowDefinition.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { UpdateFlowDefinition200FlowDefinitionAudience } from "./updateFlowDefinition200FlowDefinitionAudience";
+import type { UpdateFlowDefinition200FlowDefinitionStepsItem } from "./updateFlowDefinition200FlowDefinitionStepsItem";
+/**
+ * A flow definition is the server-side configuration that describes a complete
+authentication or identity flow. It is NOT sent to the frontend — the flow
+engine evaluates it and produces FlowResponse payloads (steps with capability
+dictionaries) for the client.
+
+Flow definitions are created by administrators and stored in the project/team
+configuration hierarchy. The engine selects the matching definition based on
+the purpose + audience when a flow is created via POST /flow.
+
+ */
+export type UpdateFlowDefinition200FlowDefinition = {
+    /**
+       * Stable identifier for this flow, used as the target of cross-flow
+    `switch` and `pivot` transitions. Renaming is not supported — the
+    `name` is part of the public contract another definition may
+    reference. Acts as the human display label as well; no separate slug.
+  
+       * @pattern ^[a-z][a-z0-9-]*$
+       */
+    name: string;
+    /** User schema this flow operates on. Step `fields` reference properties
+    defined in this schema. The engine resolves field types, validation,
+    and implicit outcomes from schema annotations at runtime.
+     */
+    user_schema: string;
+    /** Maps each purpose this definition handles to its entry-point step.
+    Keys are purpose names; values must match a `name` in `steps`. A
+    definition can serve multiple purposes (e.g. a combined login/register
+    flow) by listing one entry per purpose.
+     */
+    purposes: Partial<Record<"login" | "register" | "recovery" | "profiling" | "reauth" | "link_account", string>>;
+    /** Scopes which teams or apps this flow definition applies to. Empty or
+    omitted fields mean "no restriction"; when both are empty the definition
+    matches every request in the project. The engine picks the most specific
+    matching definition: app > team > project-wide.
+     */
+    audience?: UpdateFlowDefinition200FlowDefinitionAudience;
+    /**
+       * Ordered list of steps in this flow. The order is for human readability —
+    actual step sequencing is determined by transitions.
+  
+       * @minItems 1
+       */
+    steps: UpdateFlowDefinition200FlowDefinitionStepsItem[];
+};
+//# sourceMappingURL=updateFlowDefinition200FlowDefinition.d.ts.map

package/dist/generated/model/updateFlowDefinition200FlowDefinition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinition200FlowDefinition.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinition200FlowDefinition.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,6CAA6C,EAAE,MAAM,iDAAiD,CAAC;AACrH,OAAO,KAAK,EAAE,8CAA8C,EAAE,MAAM,kDAAkD,CAAC;AAEvH;;;;;;;;;;GAUG;AACH,MAAM,MAAM,qCAAqC,GAAG;IAClD;;;;;;;SAOK;IACL,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,QAAQ,EAAE,OAAO,CACf,MAAM,CAAC,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,GAAG,cAAc,EAAE,MAAM,CAAC,CAC5F,CAAC;IACF;;;;OAIG;IACH,QAAQ,CAAC,EAAE,6CAA6C,CAAC;IACzD;;;;;SAKK;IACL,KAAK,EAAE,8CAA8C,EAAE,CAAC;CACzD,CAAC"}

package/dist/generated/model/updateFlowDefinition200FlowDefinitionAudience.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Scopes which teams or apps this flow definition applies to. Empty or
+omitted fields mean "no restriction"; when both are empty the definition
+matches every request in the project. The engine picks the most specific
+matching definition: app > team > project-wide.
+
+ */
+export type UpdateFlowDefinition200FlowDefinitionAudience = {
+    /** Restrict to specific teams (organizations). Empty means no team restriction. */
+    team_ids?: string[];
+    /** Restrict to specific applications. Empty means no app restriction. */
+    app_ids?: string[];
+};
+//# sourceMappingURL=updateFlowDefinition200FlowDefinitionAudience.d.ts.map

package/dist/generated/model/updateFlowDefinition200FlowDefinitionAudience.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinition200FlowDefinitionAudience.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinition200FlowDefinitionAudience.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,6CAA6C,GAAG;IAC1D,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC"}

package/dist/generated/model/updateFlowDefinition200FlowDefinitionStepsItem.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { UpdateFlowDefinition200FlowDefinitionStepsItemActions } from "./updateFlowDefinition200FlowDefinitionStepsItemActions";
+import type { UpdateFlowDefinition200FlowDefinitionStepsItemComplete } from "./updateFlowDefinition200FlowDefinitionStepsItemComplete";
+import type { UpdateFlowDefinition200FlowDefinitionStepsItemGates } from "./updateFlowDefinition200FlowDefinitionStepsItemGates";
+import type { UpdateFlowDefinition200FlowDefinitionStepsItemOnSuccess } from "./updateFlowDefinition200FlowDefinitionStepsItemOnSuccess";
+import type { UpdateFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem } from "./updateFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem";
+import type { UpdateFlowDefinition200FlowDefinitionStepsItemTransitions } from "./updateFlowDefinition200FlowDefinitionStepsItemTransitions";
+/**
+ * A step in a flow definition. This is the admin-authored configuration,
+not the runtime payload sent to the frontend.
+
+Steps are schema-driven: `fields` references properties from the flow's
+user schema, and the engine resolves field metadata (type, validation,
+implicit outcomes) from schema annotations at runtime.
+
+A step with only `complete` set is a terminal step. All other steps are
+rendered to the frontend as capability payloads.
+
+ */
+export type UpdateFlowDefinition200FlowDefinitionStepsItem = {
+    /** Unique step identifier within this flow. Used as transition targets
+    and returned in the API response as `step.name`.
+     */
+    name: string;
+    /** Schema property names to collect from the user. Each entry references
+    a property in the flow's user schema. The engine resolves field type,
+    validation rules, and implicit outcomes from schema annotations
+    (e.g. a property with `x-unique` set implies a `user_not_found`
+    transition outcome).
+     */
+    fields?: string[];
+    /** Actions the user can take. Keyed by action name.
+    The action name is what the frontend sends back in the submit request.
+    If omitted, the engine provides a default `submit` action.
+     */
+    actions?: UpdateFlowDefinition200FlowDefinitionStepsItemActions;
+    /** Security gates that must be satisfied before submission. Keyed by gate
+    name. Each gate selects a kind (e.g. "captcha") and provider-specific
+    configuration. The engine may also inject gates dynamically based on
+    policy.
+     */
+    gates?: UpdateFlowDefinition200FlowDefinitionStepsItemGates;
+    /** Available SSO identity providers for this step. */
+    sso_providers?: UpdateFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem[];
+    /** Server-side mutation to execute when this step completes successfully.
+    Runs after field validation passes, before the transition fires.
+  
+    - create_user: creates the user record (registration flows)
+     */
+    on_success?: UpdateFlowDefinition200FlowDefinitionStepsItemOnSuccess;
+    /** Marks this as a terminal step. Tells the frontend what to do:
+    - redirect: navigate to redirect_uri (OIDC/SAML callback done)
+    - show: render as a success/info screen
+     */
+    complete?: UpdateFlowDefinition200FlowDefinitionStepsItemComplete;
+    /** Maps action/outcome names to their transition descriptor.
+  
+    Keys match action names from the `actions` dict. Additional keys
+    come from implicit outcomes based on schema annotations
+    (e.g. `user_not_found` from `x-unique` fields) and engine
+    events (e.g. `sso`, `callback`).
+     */
+    transitions?: UpdateFlowDefinition200FlowDefinitionStepsItemTransitions;
+};
+//# sourceMappingURL=updateFlowDefinition200FlowDefinitionStepsItem.d.ts.map

package/dist/generated/model/updateFlowDefinition200FlowDefinitionStepsItem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinition200FlowDefinitionStepsItem.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinition200FlowDefinitionStepsItem.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,qDAAqD,EAAE,MAAM,yDAAyD,CAAC;AACrI,OAAO,KAAK,EAAE,sDAAsD,EAAE,MAAM,0DAA0D,CAAC;AACvI,OAAO,KAAK,EAAE,mDAAmD,EAAE,MAAM,uDAAuD,CAAC;AACjI,OAAO,KAAK,EAAE,uDAAuD,EAAE,MAAM,2DAA2D,CAAC;AACzI,OAAO,KAAK,EAAE,8DAA8D,EAAE,MAAM,kEAAkE,CAAC;AACvJ,OAAO,KAAK,EAAE,yDAAyD,EAAE,MAAM,6DAA6D,CAAC;AAE7I;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,8CAA8C,GAAG;IAC3D;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;OAGG;IACH,OAAO,CAAC,EAAE,qDAAqD,CAAC;IAChE;;;;OAIG;IACH,KAAK,CAAC,EAAE,mDAAmD,CAAC;IAC5D,sDAAsD;IACtD,aAAa,CAAC,EAAE,8DAA8D,EAAE,CAAC;IACjF;;;;OAIG;IACH,UAAU,CAAC,EAAE,uDAAuD,CAAC;IACrE;;;OAGG;IACH,QAAQ,CAAC,EAAE,sDAAsD,CAAC;IAClE;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,yDAAyD,CAAC;CACzE,CAAC"}

package/dist/generated/model/updateFlowDefinition200FlowDefinitionStepsItemActions.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Actions the user can take. Keyed by action name.
+The action name is what the frontend sends back in the submit request.
+If omitted, the engine provides a default `submit` action.
+
+ */
+export type UpdateFlowDefinition200FlowDefinitionStepsItemActions = {
+    [key: string]: {
+        /** Marks this as the default/primary action. The runtime template uses
+      this hint to choose visual emphasis. At most one action per step
+      should be primary; this is not enforced here.
+       */
+        primary?: boolean;
+        /** Optional localization key override for the action's label. When
+      omitted, the engine derives a key from the step and action names.
+      Display text is resolved client-side from a locale dictionary, never
+      by the engine.
+       */
+        text_key?: string;
+    };
+};
+//# sourceMappingURL=updateFlowDefinition200FlowDefinitionStepsItemActions.d.ts.map

package/dist/generated/model/updateFlowDefinition200FlowDefinitionStepsItemActions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinition200FlowDefinitionStepsItemActions.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinition200FlowDefinitionStepsItemActions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;GAKG;AACH,MAAM,MAAM,qDAAqD,GAAG;IAClE,CAAC,GAAG,EAAE,MAAM,GAAG;QACb;;;SAGC;QACD,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB;;;;SAIC;QACD,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH,CAAC"}

package/dist/generated/model/updateFlowDefinition200FlowDefinitionStepsItemComplete.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Marks this as a terminal step. Tells the frontend what to do:
+- redirect: navigate to redirect_uri (OIDC/SAML callback done)
+- show: render as a success/info screen
+
+ */
+export type UpdateFlowDefinition200FlowDefinitionStepsItemComplete = (typeof UpdateFlowDefinition200FlowDefinitionStepsItemComplete)[keyof typeof UpdateFlowDefinition200FlowDefinitionStepsItemComplete];
+export declare const UpdateFlowDefinition200FlowDefinitionStepsItemComplete: {
+    readonly redirect: "redirect";
+    readonly show: "show";
+};
+//# sourceMappingURL=updateFlowDefinition200FlowDefinitionStepsItemComplete.d.ts.map

package/dist/generated/model/updateFlowDefinition200FlowDefinitionStepsItemComplete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinition200FlowDefinitionStepsItemComplete.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinition200FlowDefinitionStepsItemComplete.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;GAKG;AACH,MAAM,MAAM,sDAAsD,GAChE,CAAC,OAAO,sDAAsD,CAAC,CAAC,MAAM,OAAO,sDAAsD,CAAC,CAAC;AAEvI,eAAO,MAAM,sDAAsD;aACjE,QAAQ,EAAE,UAAU;aACpB,IAAI,EAAE,MAAM;CACJ,CAAC"}

package/dist/generated/model/updateFlowDefinition200FlowDefinitionStepsItemGates.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { UpdateFlowDefinition200FlowDefinitionStepsItemGatesConfig } from "./updateFlowDefinition200FlowDefinitionStepsItemGatesConfig";
+import type { UpdateFlowDefinition200FlowDefinitionStepsItemGatesKind } from "./updateFlowDefinition200FlowDefinitionStepsItemGatesKind";
+/**
+ * Security gates that must be satisfied before submission. Keyed by gate
+name. Each gate selects a kind (e.g. "captcha") and provider-specific
+configuration. The engine may also inject gates dynamically based on
+policy.
+
+ */
+export type UpdateFlowDefinition200FlowDefinitionStepsItemGates = {
+    [key: string]: {
+        /** The gate category. Only `captcha` is currently defined. Authenticator
+      ceremonies (e.g. passkey) are modelled as credential auth_attempts via
+      `x-credential` on a field, not as gates.
+       */
+        kind: UpdateFlowDefinition200FlowDefinitionStepsItemGatesKind;
+        /** Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,
+      `hcaptcha`. The engine looks up an implementation in its provider
+      registry.
+       */
+        provider: string;
+        /** Provider-specific configuration consumed by the implementation when
+      issuing the per-render challenge. Opaque to the engine.
+       */
+        config?: UpdateFlowDefinition200FlowDefinitionStepsItemGatesConfig;
+    };
+};
+//# sourceMappingURL=updateFlowDefinition200FlowDefinitionStepsItemGates.d.ts.map

package/dist/generated/model/updateFlowDefinition200FlowDefinitionStepsItemGates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinition200FlowDefinitionStepsItemGates.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinition200FlowDefinitionStepsItemGates.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,yDAAyD,EAAE,MAAM,6DAA6D,CAAC;AAC7I,OAAO,KAAK,EAAE,uDAAuD,EAAE,MAAM,2DAA2D,CAAC;AAEzI;;;;;;GAMG;AACH,MAAM,MAAM,mDAAmD,GAAG;IAChE,CAAC,GAAG,EAAE,MAAM,GAAG;QACb;;;SAGC;QACD,IAAI,EAAE,uDAAuD,CAAC;QAC9D;;;SAGC;QACD,QAAQ,EAAE,MAAM,CAAC;QACjB;;SAEC;QACD,MAAM,CAAC,EAAE,yDAAyD,CAAC;KACpE,CAAC;CACH,CAAC"}

package/dist/generated/model/updateFlowDefinition200FlowDefinitionStepsItemGatesConfig.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Provider-specific configuration consumed by the implementation when
+issuing the per-render challenge. Opaque to the engine.
+
+ */
+export type UpdateFlowDefinition200FlowDefinitionStepsItemGatesConfig = {
+    [key: string]: unknown;
+};
+//# sourceMappingURL=updateFlowDefinition200FlowDefinitionStepsItemGatesConfig.d.ts.map

package/dist/generated/model/updateFlowDefinition200FlowDefinitionStepsItemGatesConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinition200FlowDefinitionStepsItemGatesConfig.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinition200FlowDefinitionStepsItemGatesConfig.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;GAIG;AACH,MAAM,MAAM,yDAAyD,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC"}

package/dist/generated/model/updateFlowDefinition200FlowDefinitionStepsItemGatesKind.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * The gate category. Only `captcha` is currently defined. Authenticator
+ceremonies (e.g. passkey) are modelled as credential auth_attempts via
+`x-credential` on a field, not as gates.
+
+ */
+export type UpdateFlowDefinition200FlowDefinitionStepsItemGatesKind = (typeof UpdateFlowDefinition200FlowDefinitionStepsItemGatesKind)[keyof typeof UpdateFlowDefinition200FlowDefinitionStepsItemGatesKind];
+export declare const UpdateFlowDefinition200FlowDefinitionStepsItemGatesKind: {
+    readonly captcha: "captcha";
+};
+//# sourceMappingURL=updateFlowDefinition200FlowDefinitionStepsItemGatesKind.d.ts.map

package/dist/generated/model/updateFlowDefinition200FlowDefinitionStepsItemGatesKind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinition200FlowDefinitionStepsItemGatesKind.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinition200FlowDefinitionStepsItemGatesKind.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;GAKG;AACH,MAAM,MAAM,uDAAuD,GACjE,CAAC,OAAO,uDAAuD,CAAC,CAAC,MAAM,OAAO,uDAAuD,CAAC,CAAC;AAEzI,eAAO,MAAM,uDAAuD;aAClE,OAAO,EAAE,SAAS;CACV,CAAC"}

package/dist/generated/model/updateFlowDefinition200FlowDefinitionStepsItemOnSuccess.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Server-side mutation to execute when this step completes successfully.
+Runs after field validation passes, before the transition fires.
+
+- create_user: creates the user record (registration flows)
+
+ */
+export type UpdateFlowDefinition200FlowDefinitionStepsItemOnSuccess = (typeof UpdateFlowDefinition200FlowDefinitionStepsItemOnSuccess)[keyof typeof UpdateFlowDefinition200FlowDefinitionStepsItemOnSuccess];
+export declare const UpdateFlowDefinition200FlowDefinitionStepsItemOnSuccess: {
+    readonly create_user: "create_user";
+};
+//# sourceMappingURL=updateFlowDefinition200FlowDefinitionStepsItemOnSuccess.d.ts.map

package/dist/generated/model/updateFlowDefinition200FlowDefinitionStepsItemOnSuccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinition200FlowDefinitionStepsItemOnSuccess.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinition200FlowDefinitionStepsItemOnSuccess.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,uDAAuD,GACjE,CAAC,OAAO,uDAAuD,CAAC,CAAC,MAAM,OAAO,uDAAuD,CAAC,CAAC;AAEzI,eAAO,MAAM,uDAAuD;aAClE,WAAW,EAAE,aAAa;CAClB,CAAC"}

package/dist/generated/model/updateFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * An available SSO identity provider.
+ */
+export type UpdateFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem = {
+    /** Provider instance identifier. */
+    id: string;
+    /** Display name for the provider. */
+    name: string;
+    /** Template hint for rendering (logo, colors). */
+    template: string;
+};
+//# sourceMappingURL=updateFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem.d.ts.map

package/dist/generated/model/updateFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,MAAM,8DAA8D,GAAG;IAC3E,oCAAoC;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC"}

package/dist/generated/model/updateFlowDefinition200FlowDefinitionStepsItemTransitions.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Maps action/outcome names to their transition descriptor.
+
+Keys match action names from the `actions` dict. Additional keys
+come from implicit outcomes based on schema annotations
+(e.g. `user_not_found` from `x-unique` fields) and engine
+events (e.g. `sso`, `callback`).
+
+ */
+export type UpdateFlowDefinition200FlowDefinitionStepsItemTransitions = {
+    [key: string]: {
+        /** Step name within this flow (when `action` is null), or the name
+      of another flow (when `action` is `switch` or `pivot`).
+       */
+        target: string;
+        /** How to interpret `target`:
+      - null (omitted): transition to a step in the current flow.
+      - switch: replace the current flow with the target flow.
+        No return — the current flow is discarded.
+        Example: login ↔ register.
+      - pivot: push the target flow onto the stack. The current flow
+        is paused and resumes when the target flow completes (auto-pop).
+        Example: login → recovery → back to login.
+       */
+        action?: "switch" | "pivot" | null;
+    };
+};
+//# sourceMappingURL=updateFlowDefinition200FlowDefinitionStepsItemTransitions.d.ts.map

package/dist/generated/model/updateFlowDefinition200FlowDefinitionStepsItemTransitions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinition200FlowDefinitionStepsItemTransitions.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinition200FlowDefinitionStepsItemTransitions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;GAQG;AACH,MAAM,MAAM,yDAAyD,GAAG;IACtE,CAAC,GAAG,EAAE,MAAM,GAAG;QACb;;SAEC;QACD,MAAM,EAAE,MAAM,CAAC;QACf;;;;;;;;SAQC;QACD,MAAM,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,IAAI,CAAC;KACpC,CAAC;CACH,CAAC"}

package/dist/generated/model/updateFlowDefinitionParams.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+export type UpdateFlowDefinitionParams = {
+    /**
+     * The project id to filter by.
+     * @pattern ^[a-zA-Z0-9_-]+$
+     */
+    project_id: string;
+};
+//# sourceMappingURL=updateFlowDefinitionParams.d.ts.map

package/dist/generated/model/updateFlowDefinitionParams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinitionParams.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinitionParams.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,0BAA0B,GAAG;IACvC;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC"}