@zitadel/api 0.0.0 → 0.1.0-alpha.2

package/src/generated/model/index.ts

@@ -55,6 +55,17 @@ export * from "./createFlowBodyPurpose";
 export * from "./createFlowDefault";
 export * from "./createFlowDefaultDetails";
 export * from "./createFlowDefinition201";
+export * from "./createFlowDefinition201FlowDefinition";
+export * from "./createFlowDefinition201FlowDefinitionAudience";
+export * from "./createFlowDefinition201FlowDefinitionStepsItem";
+export * from "./createFlowDefinition201FlowDefinitionStepsItemActions";
+export * from "./createFlowDefinition201FlowDefinitionStepsItemComplete";
+export * from "./createFlowDefinition201FlowDefinitionStepsItemGates";
+export * from "./createFlowDefinition201FlowDefinitionStepsItemGatesConfig";
+export * from "./createFlowDefinition201FlowDefinitionStepsItemGatesKind";
+export * from "./createFlowDefinition201FlowDefinitionStepsItemOnSuccess";
+export * from "./createFlowDefinition201FlowDefinitionStepsItemSsoProvidersItem";
+export * from "./createFlowDefinition201FlowDefinitionStepsItemTransitions";
 export * from "./createFlowDefinition400";
 export * from "./createFlowDefinition400Details";
 export * from "./createFlowDefinition409";
@@ -126,10 +137,9 @@ export * from "./createUserBody";
 export * from "./createUserDefault";
 export * from "./createUserDefaultDetails";
 export * from "./createUserParams";
-export * from "./deleteFlowDefinition404";
-export * from "./deleteFlowDefinition404Details";
 export * from "./deleteFlowDefinitionDefault";
 export * from "./deleteFlowDefinitionDefaultDetails";
+export * from "./deleteFlowDefinitionParams";
 export * from "./endSession400";
 export * from "./endSession400Details";
 export * from "./endSessionDefault";
@@ -165,10 +175,20 @@ export * from "./getAuthAttempt200RequiredFactorsItem";
 export * from "./getAuthAttempt200State";
 export * from "./getAuthAttemptDefault";
 export * from "./getFlowDefinition200";
-export * from "./getFlowDefinition404";
-export * from "./getFlowDefinition404Details";
+export * from "./getFlowDefinition200FlowDefinition";
+export * from "./getFlowDefinition200FlowDefinitionAudience";
+export * from "./getFlowDefinition200FlowDefinitionStepsItem";
+export * from "./getFlowDefinition200FlowDefinitionStepsItemActions";
+export * from "./getFlowDefinition200FlowDefinitionStepsItemComplete";
+export * from "./getFlowDefinition200FlowDefinitionStepsItemGates";
+export * from "./getFlowDefinition200FlowDefinitionStepsItemGatesConfig";
+export * from "./getFlowDefinition200FlowDefinitionStepsItemGatesKind";
+export * from "./getFlowDefinition200FlowDefinitionStepsItemOnSuccess";
+export * from "./getFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem";
+export * from "./getFlowDefinition200FlowDefinitionStepsItemTransitions";
 export * from "./getFlowDefinitionDefault";
 export * from "./getFlowDefinitionDefaultDetails";
+export * from "./getFlowDefinitionParams";
 export * from "./getFlowStep200";
 export * from "./getFlowStep200Branding";
 export * from "./getFlowStep200BrandingLayout";
@@ -220,6 +240,12 @@ export * from "./getMySession404";
 export * from "./getMySession404Details";
 export * from "./getMySessionDefault";
 export * from "./getMySessionDefaultDetails";
+export * from "./getMyUser200";
+export * from "./getMyUser401";
+export * from "./getMyUser401Details";
+export * from "./getMyUser404";
+export * from "./getMyUserDefault";
+export * from "./getMyUserDefaultDetails";
 export * from "./getOpenIDConfiguration4xx";
 export * from "./getOpenIDConfiguration4xxDetails";
 export * from "./getOpenIDConfiguration200";
@@ -361,6 +387,16 @@ export * from "./revokeToken4xxDetails";
 export * from "./revokeTokenBody";
 export * from "./revokeTokenDefault";
 export * from "./revokeTokenDefaultDetails";
+export * from "./setUserPassword400";
+export * from "./setUserPassword400Details";
+export * from "./setUserPassword404";
+export * from "./setUserPassword404Details";
+export * from "./setUserPassword500";
+export * from "./setUserPassword500Details";
+export * from "./setUserPasswordBody";
+export * from "./setUserPasswordDefault";
+export * from "./setUserPasswordDefaultDetails";
+export * from "./setUserPasswordParams";
 export * from "./submitFlowEvent400";
 export * from "./submitFlowEvent400Details";
 export * from "./submitFlowEvent404";
@@ -416,6 +452,17 @@ export * from "./submitFlowStepBodyGateProofs";
 export * from "./submitFlowStepDefault";
 export * from "./submitFlowStepDefaultDetails";
 export * from "./updateFlowDefinition200";
+export * from "./updateFlowDefinition200FlowDefinition";
+export * from "./updateFlowDefinition200FlowDefinitionAudience";
+export * from "./updateFlowDefinition200FlowDefinitionStepsItem";
+export * from "./updateFlowDefinition200FlowDefinitionStepsItemActions";
+export * from "./updateFlowDefinition200FlowDefinitionStepsItemComplete";
+export * from "./updateFlowDefinition200FlowDefinitionStepsItemGates";
+export * from "./updateFlowDefinition200FlowDefinitionStepsItemGatesConfig";
+export * from "./updateFlowDefinition200FlowDefinitionStepsItemGatesKind";
+export * from "./updateFlowDefinition200FlowDefinitionStepsItemOnSuccess";
+export * from "./updateFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem";
+export * from "./updateFlowDefinition200FlowDefinitionStepsItemTransitions";
 export * from "./updateFlowDefinition400";
 export * from "./updateFlowDefinition400Details";
 export * from "./updateFlowDefinition404";
@@ -433,6 +480,7 @@ export * from "./updateFlowDefinitionBodyStepsItemSsoProvidersItem";
 export * from "./updateFlowDefinitionBodyStepsItemTransitions";
 export * from "./updateFlowDefinitionDefault";
 export * from "./updateFlowDefinitionDefaultDetails";
+export * from "./updateFlowDefinitionParams";
 export * from "./verifyChallengeProof200";
 export * from "./verifyChallengeProof200ChallengesItem";
 export * from "./verifyChallengeProof200ChallengesItemMethod";

package/src/generated/model/listFlowDefinitions200FlowDefinitionsItem.ts

@@ -24,7 +24,7 @@ export type ListFlowDefinitions200FlowDefinitionsItem = {
   /** URI of the flow definition schema this definition was authored against.
   If the schema_uri was not provided in the request, the flow definition is validated against the latest version of the schema, and the response includes the schema_uri of the latest version.
    */
-  schema_uri: string;
+  schema_uri?: string;
   /** Status of the flow definition. */
   status: string;
   /** Timestamp when the flow definition was created. */

package/src/generated/model/listFlowDefinitionsParams.ts

@@ -23,7 +23,7 @@ Its format is opaque and may change between releases.
  */
   page_token?: string;
   /**
-   * The unique identifier of the project
+   * The project id to filter by.
    * @pattern ^[a-zA-Z0-9_-]+$
    */
   project_id: string;

package/src/generated/model/setUserPassword400.ts

@@ -0,0 +1,20 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { SetUserPassword400Details } from "./setUserPassword400Details";
+
+/**
+ * Standard error payload returned for failed API requests.
+ */
+export type SetUserPassword400 = {
+  /** Stable machine-readable error code. */
+  code: string;
+  /** Human-readable explanation of the error. */
+  message: string;
+  /** Additional error-specific context. */
+  details?: SetUserPassword400Details;
+};

package/src/generated/model/setUserPassword400Details.ts

@@ -0,0 +1,12 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Additional error-specific context.
+ */
+export type SetUserPassword400Details = { [key: string]: unknown };

package/src/generated/model/setUserPassword404.ts

@@ -0,0 +1,20 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { SetUserPassword404Details } from "./setUserPassword404Details";
+
+/**
+ * Standard error payload returned for failed API requests.
+ */
+export type SetUserPassword404 = {
+  /** Stable machine-readable error code. */
+  code: string;
+  /** Human-readable explanation of the error. */
+  message: string;
+  /** Additional error-specific context. */
+  details?: SetUserPassword404Details;
+};

package/src/generated/model/setUserPassword404Details.ts

@@ -0,0 +1,12 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Additional error-specific context.
+ */
+export type SetUserPassword404Details = { [key: string]: unknown };

package/src/generated/model/setUserPassword500.ts

@@ -0,0 +1,20 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { SetUserPassword500Details } from "./setUserPassword500Details";
+
+/**
+ * Standard error payload returned for failed API requests.
+ */
+export type SetUserPassword500 = {
+  /** Stable machine-readable error code. */
+  code: string;
+  /** Human-readable explanation of the error. */
+  message: string;
+  /** Additional error-specific context. */
+  details?: SetUserPassword500Details;
+};

package/src/generated/model/setUserPassword500Details.ts

@@ -0,0 +1,12 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Additional error-specific context.
+ */
+export type SetUserPassword500Details = { [key: string]: unknown };

package/src/generated/model/setUserPasswordBody.ts

@@ -0,0 +1,19 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Request to update the user's password.
+ */
+export type SetUserPasswordBody = {
+  /** The new password for the user. */
+  password: string;
+  /** Whether the user is required to change their password on the next login.
+  If not provided, it will default to false.
+   */
+  isChangeRequired?: boolean;
+};

package/src/generated/model/setUserPasswordDefault.ts

@@ -0,0 +1,20 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { SetUserPasswordDefaultDetails } from "./setUserPasswordDefaultDetails";
+
+/**
+ * Standard error payload returned for failed API requests.
+ */
+export type SetUserPasswordDefault = {
+  /** Stable machine-readable error code. */
+  code: string;
+  /** Human-readable explanation of the error. */
+  message: string;
+  /** Additional error-specific context. */
+  details?: SetUserPasswordDefaultDetails;
+};

package/src/generated/model/setUserPasswordDefaultDetails.ts

@@ -0,0 +1,12 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Additional error-specific context.
+ */
+export type SetUserPasswordDefaultDetails = { [key: string]: unknown };

package/src/generated/model/setUserPasswordParams.ts

@@ -0,0 +1,15 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+export type SetUserPasswordParams = {
+  /**
+   * The unique identifier of the project
+   * @pattern ^[a-zA-Z0-9_-]+$
+   */
+  project_id: string;
+};

package/src/generated/model/updateFlowDefinition200.ts

@@ -5,158 +5,25 @@
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
+import type { UpdateFlowDefinition200FlowDefinition } from "./updateFlowDefinition200FlowDefinition";
 
 export type UpdateFlowDefinition200 = {
-  /**
-     * Stable identifier for this flow, used as the target of cross-flow
-  `switch` and `pivot` transitions. Renaming is not supported — the
-  `name` is part of the public contract another definition may
-  reference. Acts as the human display label as well; no separate slug.
-
-     * @pattern ^[a-z][a-z0-9-]*$
-     */
-  name: string;
-  /** User schema this flow operates on. Step `fields` reference properties
-  defined in this schema. The engine resolves field types, validation,
-  and implicit outcomes from schema annotations at runtime.
-   */
-  user_schema: string;
-  /** Maps each purpose this definition handles to its entry-point step.
-  Keys are purpose names; values must match a `name` in `steps`. A
-  definition can serve multiple purposes (e.g. a combined login/register
-  flow) by listing one entry per purpose.
-   */
-  purposes: Partial<
-    Record<"login" | "register" | "recovery" | "profiling" | "reauth" | "link_account", string>
-  >;
-  /** Scopes which teams or apps this flow definition applies to. Empty or
-  omitted fields mean "no restriction"; when both are empty the definition
-  matches every request in the project. The engine picks the most specific
-  matching definition: app > team > project-wide.
-   */
-  audience?: {
-    /** Restrict to specific teams (organizations). Empty means no team restriction. */
-    team_ids?: string[];
-    /** Restrict to specific applications. Empty means no app restriction. */
-    app_ids?: string[];
-  };
-  /**
-     * Ordered list of steps in this flow. The order is for human readability —
-  actual step sequencing is determined by transitions.
-
-     * @minItems 1
-     */
-  steps: {
-    /** Unique step identifier within this flow. Used as transition targets
-  and returned in the API response as `step.name`.
-   */
-    name: string;
-    /** Schema property names to collect from the user. Each entry references
-  a property in the flow's user schema. The engine resolves field type,
-  validation rules, and implicit outcomes from schema annotations
-  (e.g. a property with `x-unique` set implies a `user_not_found`
-  transition outcome).
-   */
-    fields?: string[];
-    /** Actions the user can take. Keyed by action name.
-  The action name is what the frontend sends back in the submit request.
-  If omitted, the engine provides a default `submit` action.
-   */
-    actions?: {
-      [key: string]: {
-        /** Marks this as the default/primary action. The runtime template uses
-  this hint to choose visual emphasis. At most one action per step
-  should be primary; this is not enforced here.
-   */
-        primary?: boolean;
-        /** Optional localization key override for the action's label. When
-  omitted, the engine derives a key from the step and action names.
-  Display text is resolved client-side from a locale dictionary, never
-  by the engine.
-   */
-        text_key?: string;
-      };
-    };
-    /** Security gates that must be satisfied before submission. Keyed by gate
-  name. Each gate selects a kind (e.g. "captcha") and provider-specific
-  configuration. The engine may also inject gates dynamically based on
-  policy.
-   */
-    gates?: {
-      [key: string]: {
-        /** The gate category. Only `captcha` is currently defined. Authenticator
-  ceremonies (e.g. passkey) are modelled as credential auth_attempts via
-  `x-credential` on a field, not as gates.
-   */
-        kind: "captcha";
-        /** Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,
-  `hcaptcha`. The engine looks up an implementation in its provider
-  registry.
-   */
-        provider: string;
-        /** Provider-specific configuration consumed by the implementation when
-  issuing the per-render challenge. Opaque to the engine.
-   */
-        config?: { [key: string]: unknown };
-      };
-    };
-    /** Available SSO identity providers for this step. */
-    sso_providers?: {
-      /** Provider instance identifier. */
-      id: string;
-      /** Display name for the provider. */
-      name: string;
-      /** Template hint for rendering (logo, colors). */
-      template: string;
-    }[];
-    /** Server-side mutation to execute when this step completes successfully.
-  Runs after field validation passes, before the transition fires.
-
-  - create_user: creates the user record (registration flows)
-   */
-    on_success?: "create_user";
-    /** Marks this as a terminal step. Tells the frontend what to do:
-  - redirect: navigate to redirect_uri (OIDC/SAML callback done)
-  - show: render as a success/info screen
-   */
-    complete?: "redirect" | "show";
-    /** Maps action/outcome names to their transition descriptor.
-
-  Keys match action names from the `actions` dict. Additional keys
-  come from implicit outcomes based on schema annotations
-  (e.g. `user_not_found` from `x-unique` fields) and engine
-  events (e.g. `sso`, `callback`).
-   */
-    transitions?: {
-      [key: string]: {
-        /** Step name within this flow (when `action` is null), or the name
-  of another flow (when `action` is `switch` or `pivot`).
-   */
-        target: string;
-        /** How to interpret `target`:
-  - null (omitted): transition to a step in the current flow.
-  - switch: replace the current flow with the target flow.
-    No return — the current flow is discarded.
-    Example: login ↔ register.
-  - pivot: push the target flow onto the stack. The current flow
-    is paused and resumes when the target flow completes (auto-pop).
-    Example: login → recovery → back to login.
-   */
-        action?: "switch" | "pivot" | null;
-      };
-    };
-  }[];
-} & {
   /** Unique identifier for the flow definition. */
   id: string;
   /** Identifier of the project this flow definition belongs to. */
   project_id: string;
-  /** URI of the flow definition schema this definition was authored against.
-  If the schema_uri was not provided in the request, the flow definition is validated against the latest version of the schema, and the response includes the schema_uri of the latest version.
-   */
-  schema_uri: string;
   /** Status of the flow definition. */
   status: string;
+  /** A flow definition is the server-side configuration that describes a complete
+  authentication or identity flow. It is NOT sent to the frontend — the flow
+  engine evaluates it and produces FlowResponse payloads (steps with capability
+  dictionaries) for the client.
+
+  Flow definitions are created by administrators and stored in the project/team
+  configuration hierarchy. The engine selects the matching definition based on
+  the purpose + audience when a flow is created via POST /flow.
+   */
+  flow_definition: UpdateFlowDefinition200FlowDefinition;
   created_at: string;
   updated_at: string;
 };

package/src/generated/model/updateFlowDefinition200FlowDefinition.ts

@@ -0,0 +1,58 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { UpdateFlowDefinition200FlowDefinitionAudience } from "./updateFlowDefinition200FlowDefinitionAudience";
+import type { UpdateFlowDefinition200FlowDefinitionStepsItem } from "./updateFlowDefinition200FlowDefinitionStepsItem";
+
+/**
+ * A flow definition is the server-side configuration that describes a complete
+authentication or identity flow. It is NOT sent to the frontend — the flow
+engine evaluates it and produces FlowResponse payloads (steps with capability
+dictionaries) for the client.
+
+Flow definitions are created by administrators and stored in the project/team
+configuration hierarchy. The engine selects the matching definition based on
+the purpose + audience when a flow is created via POST /flow.
+
+ */
+export type UpdateFlowDefinition200FlowDefinition = {
+  /**
+     * Stable identifier for this flow, used as the target of cross-flow
+  `switch` and `pivot` transitions. Renaming is not supported — the
+  `name` is part of the public contract another definition may
+  reference. Acts as the human display label as well; no separate slug.
+
+     * @pattern ^[a-z][a-z0-9-]*$
+     */
+  name: string;
+  /** User schema this flow operates on. Step `fields` reference properties
+  defined in this schema. The engine resolves field types, validation,
+  and implicit outcomes from schema annotations at runtime.
+   */
+  user_schema: string;
+  /** Maps each purpose this definition handles to its entry-point step.
+  Keys are purpose names; values must match a `name` in `steps`. A
+  definition can serve multiple purposes (e.g. a combined login/register
+  flow) by listing one entry per purpose.
+   */
+  purposes: Partial<
+    Record<"login" | "register" | "recovery" | "profiling" | "reauth" | "link_account", string>
+  >;
+  /** Scopes which teams or apps this flow definition applies to. Empty or
+  omitted fields mean "no restriction"; when both are empty the definition
+  matches every request in the project. The engine picks the most specific
+  matching definition: app > team > project-wide.
+   */
+  audience?: UpdateFlowDefinition200FlowDefinitionAudience;
+  /**
+     * Ordered list of steps in this flow. The order is for human readability —
+  actual step sequencing is determined by transitions.
+
+     * @minItems 1
+     */
+  steps: UpdateFlowDefinition200FlowDefinitionStepsItem[];
+};

package/src/generated/model/updateFlowDefinition200FlowDefinitionAudience.ts

@@ -0,0 +1,21 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Scopes which teams or apps this flow definition applies to. Empty or
+omitted fields mean "no restriction"; when both are empty the definition
+matches every request in the project. The engine picks the most specific
+matching definition: app > team > project-wide.
+
+ */
+export type UpdateFlowDefinition200FlowDefinitionAudience = {
+  /** Restrict to specific teams (organizations). Empty means no team restriction. */
+  team_ids?: string[];
+  /** Restrict to specific applications. Empty means no app restriction. */
+  app_ids?: string[];
+};

package/src/generated/model/updateFlowDefinition200FlowDefinitionStepsItem.ts

@@ -0,0 +1,71 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { UpdateFlowDefinition200FlowDefinitionStepsItemActions } from "./updateFlowDefinition200FlowDefinitionStepsItemActions";
+import type { UpdateFlowDefinition200FlowDefinitionStepsItemComplete } from "./updateFlowDefinition200FlowDefinitionStepsItemComplete";
+import type { UpdateFlowDefinition200FlowDefinitionStepsItemGates } from "./updateFlowDefinition200FlowDefinitionStepsItemGates";
+import type { UpdateFlowDefinition200FlowDefinitionStepsItemOnSuccess } from "./updateFlowDefinition200FlowDefinitionStepsItemOnSuccess";
+import type { UpdateFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem } from "./updateFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem";
+import type { UpdateFlowDefinition200FlowDefinitionStepsItemTransitions } from "./updateFlowDefinition200FlowDefinitionStepsItemTransitions";
+
+/**
+ * A step in a flow definition. This is the admin-authored configuration,
+not the runtime payload sent to the frontend.
+
+Steps are schema-driven: `fields` references properties from the flow's
+user schema, and the engine resolves field metadata (type, validation,
+implicit outcomes) from schema annotations at runtime.
+
+A step with only `complete` set is a terminal step. All other steps are
+rendered to the frontend as capability payloads.
+
+ */
+export type UpdateFlowDefinition200FlowDefinitionStepsItem = {
+  /** Unique step identifier within this flow. Used as transition targets
+  and returned in the API response as `step.name`.
+   */
+  name: string;
+  /** Schema property names to collect from the user. Each entry references
+  a property in the flow's user schema. The engine resolves field type,
+  validation rules, and implicit outcomes from schema annotations
+  (e.g. a property with `x-unique` set implies a `user_not_found`
+  transition outcome).
+   */
+  fields?: string[];
+  /** Actions the user can take. Keyed by action name.
+  The action name is what the frontend sends back in the submit request.
+  If omitted, the engine provides a default `submit` action.
+   */
+  actions?: UpdateFlowDefinition200FlowDefinitionStepsItemActions;
+  /** Security gates that must be satisfied before submission. Keyed by gate
+  name. Each gate selects a kind (e.g. "captcha") and provider-specific
+  configuration. The engine may also inject gates dynamically based on
+  policy.
+   */
+  gates?: UpdateFlowDefinition200FlowDefinitionStepsItemGates;
+  /** Available SSO identity providers for this step. */
+  sso_providers?: UpdateFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem[];
+  /** Server-side mutation to execute when this step completes successfully.
+  Runs after field validation passes, before the transition fires.
+
+  - create_user: creates the user record (registration flows)
+   */
+  on_success?: UpdateFlowDefinition200FlowDefinitionStepsItemOnSuccess;
+  /** Marks this as a terminal step. Tells the frontend what to do:
+  - redirect: navigate to redirect_uri (OIDC/SAML callback done)
+  - show: render as a success/info screen
+   */
+  complete?: UpdateFlowDefinition200FlowDefinitionStepsItemComplete;
+  /** Maps action/outcome names to their transition descriptor.
+
+  Keys match action names from the `actions` dict. Additional keys
+  come from implicit outcomes based on schema annotations
+  (e.g. `user_not_found` from `x-unique` fields) and engine
+  events (e.g. `sso`, `callback`).
+   */
+  transitions?: UpdateFlowDefinition200FlowDefinitionStepsItemTransitions;
+};

package/src/generated/model/updateFlowDefinition200FlowDefinitionStepsItemActions.ts

@@ -0,0 +1,29 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Actions the user can take. Keyed by action name.
+The action name is what the frontend sends back in the submit request.
+If omitted, the engine provides a default `submit` action.
+
+ */
+export type UpdateFlowDefinition200FlowDefinitionStepsItemActions = {
+  [key: string]: {
+    /** Marks this as the default/primary action. The runtime template uses
+  this hint to choose visual emphasis. At most one action per step
+  should be primary; this is not enforced here.
+   */
+    primary?: boolean;
+    /** Optional localization key override for the action's label. When
+  omitted, the engine derives a key from the step and action names.
+  Display text is resolved client-side from a locale dictionary, never
+  by the engine.
+   */
+    text_key?: string;
+  };
+};