@zitadel/api 0.0.0 → 0.1.0-alpha.2

package/dist/generated/endpoints/zitadelNextGen.zod.mjs

@@ -212,6 +212,21 @@ const GetUserByIDQueryParams = zod.strictObject({
 });
 const GetUserByIDResponse = zod.record(zod.string(), zod.unknown());
 /**
+* @summary Set user password
+*/
+const setUserPasswordPathUserIdRegExp = /* @__PURE__ */ new RegExp("^user_[a-zA-Z0-9_-]+$");
+const SetUserPasswordParams = zod.object({ user_id: zod.string().regex(setUserPasswordPathUserIdRegExp) });
+const setUserPasswordQueryProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
+const SetUserPasswordQueryParams = zod.strictObject({ project_id: zod.string().regex(setUserPasswordQueryProjectIdRegExp).describe("The unique identifier of the project") });
+const SetUserPasswordBody = zod.object({
+	password: zod.string().describe("The new password for the user."),
+	isChangeRequired: zod.boolean().optional().describe("Whether the user is required to change their password on the next login.\nIf not provided, it will default to false.\n")
+}).describe("Request to update the user's password.");
+/**
+* @summary Get my user information
+*/
+const GetMyUserResponse = zod.record(zod.string(), zod.unknown());
+/**
 * Resolves a flow definition based on purpose + audience context and returns
 the first capability step. Creates a new session implicitly unless
 `session_id` is provided (for step-up / reauth on an existing session).
@@ -369,6 +384,7 @@ frontend never sees a `complete` for intermediate flows.
 * @summary Submit step data and advance
 */
 const SubmitFlowStepParams = zod.object({ id: zod.string().describe("Flow ID returned by POST /flow or the latest POST /flow/{id}/submit.\nUsed to look up the correct flow state from the encrypted cookie,\nwhich can hold multiple concurrent flows. May change between responses\nwhen a flow pivot or pop occurs — always use the `id` from the latest response.\n") });
+const SubmitFlowStepHeader = zod.strictObject({ Origin: zod.url().optional().describe("Standard browser `Origin` header. When a step issues a passkey\nchallenge, the server derives the WebAuthn relying-party id and the\nallowed origin from this value. Browsers send it automatically on the\nfetch POST; no client action is required.\n") });
 const SubmitFlowStepBody = zod.object({
 	session_token: zod.string().optional().describe("Reserved for future rotation. The sealed `_zflow` cookie carries the flow state today."),
 	action: zod.string().describe("Which action to take. Must be a key from the step's `actions` dictionary:\n- A regular action (e.g., \"submit\", \"register\", \"back\")\n- The reserved value \"sso\" — triggers SSO redirect (requires `sso_provider_id`)\n"),
@@ -1220,7 +1236,7 @@ const listFlowDefinitionsQueryProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-
 const ListFlowDefinitionsQueryParams = zod.strictObject({
 	limit: zod.number().min(1).max(100).default(20).describe("Maximum number of items to return."),
 	page_token: zod.string().optional().describe("Token for fetching the next page of results.\nObtain this value from `next_page_token` in the previous response.\nOmit to start from the beginning.\nIts format is opaque and may change between releases.\n"),
-	project_id: zod.string().regex(listFlowDefinitionsQueryProjectIdRegExp).describe("The unique identifier of the project"),
+	project_id: zod.string().regex(listFlowDefinitionsQueryProjectIdRegExp).describe("The project id to filter by."),
 	purpose: zod.enum([
 		"login",
 		"register",
@@ -1236,7 +1252,7 @@ const ListFlowDefinitionsResponse = zod.object({
 		id: zod.string().describe("Unique identifier for the created flow definition."),
 		name: zod.string().regex(listFlowDefinitionsResponseFlowDefinitionsItemNameRegExp).describe("Stable identifier for this flow (echoed from the request).\n"),
 		project_id: zod.string().describe("Identifier of the project this flow definition belongs to."),
-		schema_uri: zod.url().describe("URI of the flow definition schema this definition was authored against.\nIf the schema_uri was not provided in the request, the flow definition is validated against the latest version of the schema, and the response includes the schema_uri of the latest version.\n"),
+		schema_uri: zod.url().optional().describe("URI of the flow definition schema this definition was authored against.\nIf the schema_uri was not provided in the request, the flow definition is validated against the latest version of the schema, and the response includes the schema_uri of the latest version.\n"),
 		status: zod.string().describe("Status of the flow definition."),
 		created_at: zod.iso.datetime({ offset: true }).describe("Timestamp when the flow definition was created."),
 		updated_at: zod.iso.datetime({ offset: true }).describe("Timestamp when the flow definition was last updated.")
@@ -1248,57 +1264,61 @@ const ListFlowDefinitionsResponse = zod.object({
 * @summary Get a flow definition by id
 */
 const GetFlowDefinitionParams = zod.object({ id: zod.string().describe("The id returned by the POST /flow_definitions endpoint.\n") });
-const getFlowDefinitionResponseOneNameRegExp = /* @__PURE__ */ new RegExp("^[a-z][a-z0-9-]*$");
-const getFlowDefinitionResponseOneStepsItemFieldsDefault = [];
-const getFlowDefinitionResponseOneStepsItemActionsPrimaryDefault = false;
-const getFlowDefinitionResponseOneStepsItemActionsDefault = {};
-const getFlowDefinitionResponseOneStepsItemGatesDefault = {};
-const getFlowDefinitionResponseOneStepsItemSsoProvidersDefault = [];
+const getFlowDefinitionQueryProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
+const GetFlowDefinitionQueryParams = zod.strictObject({ project_id: zod.string().regex(getFlowDefinitionQueryProjectIdRegExp).describe("The project id to filter by.") });
+const getFlowDefinitionResponseFlowDefinitionNameRegExp = /* @__PURE__ */ new RegExp("^[a-z][a-z0-9-]*$");
+const getFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault = [];
+const getFlowDefinitionResponseFlowDefinitionStepsItemActionsPrimaryDefault = false;
+const getFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault = {};
+const getFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault = {};
+const getFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault = [];
 const GetFlowDefinitionResponse = zod.object({
-	name: zod.string().regex(getFlowDefinitionResponseOneNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Renaming is not supported — the\n`name` is part of the public contract another definition may\nreference. Acts as the human display label as well; no separate slug.\n"),
-	user_schema: zod.url().describe("User schema this flow operates on. Step `fields` reference properties\ndefined in this schema. The engine resolves field types, validation,\nand implicit outcomes from schema annotations at runtime.\n"),
-	purposes: zod.record(zod.string(), zod.string()).describe("Maps each purpose this definition handles to its entry-point step.\nKeys are purpose names; values must match a `name` in `steps`. A\ndefinition can serve multiple purposes (e.g. a combined login/register\nflow) by listing one entry per purpose.\n"),
-	audience: zod.object({
-		team_ids: zod.array(zod.string()).optional().describe("Restrict to specific teams (organizations). Empty means no team restriction."),
-		app_ids: zod.array(zod.string()).optional().describe("Restrict to specific applications. Empty means no app restriction.")
-	}).optional().describe("Scopes which teams or apps this flow definition applies to. Empty or\nomitted fields mean \"no restriction\"; when both are empty the definition\nmatches every request in the project. The engine picks the most specific\nmatching definition: app > team > project-wide.\n"),
-	steps: zod.array(zod.object({
-		name: zod.string().describe("Unique step identifier within this flow. Used as transition targets\nand returned in the API response as `step.name`.\n"),
-		fields: zod.array(zod.string()).default(getFlowDefinitionResponseOneStepsItemFieldsDefault).describe("Schema property names to collect from the user. Each entry references\na property in the flow's user schema. The engine resolves field type,\nvalidation rules, and implicit outcomes from schema annotations\n(e.g. a property with `x-unique` set implies a `user_not_found`\ntransition outcome).\n"),
-		actions: zod.record(zod.string(), zod.object({
-			primary: zod.boolean().default(false).describe("Marks this as the default/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n"),
-			text_key: zod.string().optional().describe("Optional localization key override for the action's label. When\nomitted, the engine derives a key from the step and action names.\nDisplay text is resolved client-side from a locale dictionary, never\nby the engine.\n")
-		}).describe("Configuration for a user-invokable action on a step. Keyed by action name\nin the parent dictionary. The action name is sent back in the submit\nrequest as `action`.\n")).default(getFlowDefinitionResponseOneStepsItemActionsDefault).describe("Actions the user can take. Keyed by action name.\nThe action name is what the frontend sends back in the submit request.\nIf omitted, the engine provides a default `submit` action.\n"),
-		gates: zod.record(zod.string(), zod.object({
-			kind: zod.enum(["captcha"]).describe("The gate category. Only `captcha` is currently defined. Authenticator\nceremonies (e.g. passkey) are modelled as credential auth_attempts via\n`x-credential` on a field, not as gates.\n"),
-			provider: zod.string().describe("Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,\n`hcaptcha`. The engine looks up an implementation in its provider\nregistry.\n"),
-			config: zod.record(zod.string(), zod.unknown()).optional().describe("Provider-specific configuration consumed by the implementation when\nissuing the per-render challenge. Opaque to the engine.\n")
-		}).describe("A security challenge that must be satisfied before this step's submission\nis accepted. The engine may also inject gates at runtime based on policy\nor risk evaluation.\n")).default(getFlowDefinitionResponseOneStepsItemGatesDefault).describe("Security gates that must be satisfied before submission. Keyed by gate\nname. Each gate selects a kind (e.g. \"captcha\") and provider-specific\nconfiguration. The engine may also inject gates dynamically based on\npolicy.\n"),
-		sso_providers: zod.array(zod.object({
-			id: zod.string().describe("Provider instance identifier."),
-			name: zod.string().describe("Display name for the provider."),
-			template: zod.string().describe("Template hint for rendering (logo, colors).")
-		}).describe("An available SSO identity provider.")).default(getFlowDefinitionResponseOneStepsItemSsoProvidersDefault).describe("Available SSO identity providers for this step."),
-		on_success: zod.enum(["create_user"]).optional().describe("Server-side mutation to execute when this step completes successfully.\nRuns after field validation passes, before the transition fires.\n\n- create_user: creates the user record (registration flows)\n"),
-		complete: zod.enum(["redirect", "show"]).optional().describe("Marks this as a terminal step. Tells the frontend what to do:\n- redirect: navigate to redirect_uri (OIDC/SAML callback done)\n- show: render as a success/info screen\n"),
-		transitions: zod.record(zod.string(), zod.object({
-			target: zod.string().describe("Step name within this flow (when `action` is null), or the name\nof another flow (when `action` is `switch` or `pivot`).\n"),
-			action: zod.union([zod.enum(["switch", "pivot"]), zod.null()]).optional().describe("How to interpret `target`:\n- null (omitted): transition to a step in the current flow.\n- switch: replace the current flow with the target flow.\n  No return — the current flow is discarded.\n  Example: login ↔ register.\n- pivot: push the target flow onto the stack. The current flow\n  is paused and resumes when the target flow completes (auto-pop).\n  Example: login → recovery → back to login.\n")
-		})).optional().describe("Maps action/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` dict. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n")
-	}).describe("A step in a flow definition. This is the admin-authored configuration,\nnot the runtime payload sent to the frontend.\n\nSteps are schema-driven: `fields` references properties from the flow's\nuser schema, and the engine resolves field metadata (type, validation,\nimplicit outcomes) from schema annotations at runtime.\n\nA step with only `complete` set is a terminal step. All other steps are\nrendered to the frontend as capability payloads.\n")).min(1).describe("Ordered list of steps in this flow. The order is for human readability —\nactual step sequencing is determined by transitions.\n")
-}).describe("A flow definition is the server-side configuration that describes a complete\nauthentication or identity flow. It is NOT sent to the frontend — the flow\nengine evaluates it and produces FlowResponse payloads (steps with capability\ndictionaries) for the client.\n\nFlow definitions are created by administrators and stored in the project/team\nconfiguration hierarchy. The engine selects the matching definition based on\nthe purpose + audience when a flow is created via POST /flow.\n").and(zod.object({
 	id: zod.string().describe("Unique identifier for the flow definition."),
 	project_id: zod.string().describe("Identifier of the project this flow definition belongs to."),
-	schema_uri: zod.url().describe("URI of the flow definition schema this definition was authored against.\nIf the schema_uri was not provided in the request, the flow definition is validated against the latest version of the schema, and the response includes the schema_uri of the latest version.\n"),
 	status: zod.string().describe("Status of the flow definition."),
+	flow_definition: zod.object({
+		name: zod.string().regex(getFlowDefinitionResponseFlowDefinitionNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Renaming is not supported — the\n`name` is part of the public contract another definition may\nreference. Acts as the human display label as well; no separate slug.\n"),
+		user_schema: zod.url().describe("User schema this flow operates on. Step `fields` reference properties\ndefined in this schema. The engine resolves field types, validation,\nand implicit outcomes from schema annotations at runtime.\n"),
+		purposes: zod.record(zod.string(), zod.string()).describe("Maps each purpose this definition handles to its entry-point step.\nKeys are purpose names; values must match a `name` in `steps`. A\ndefinition can serve multiple purposes (e.g. a combined login/register\nflow) by listing one entry per purpose.\n"),
+		audience: zod.object({
+			team_ids: zod.array(zod.string()).optional().describe("Restrict to specific teams (organizations). Empty means no team restriction."),
+			app_ids: zod.array(zod.string()).optional().describe("Restrict to specific applications. Empty means no app restriction.")
+		}).optional().describe("Scopes which teams or apps this flow definition applies to. Empty or\nomitted fields mean \"no restriction\"; when both are empty the definition\nmatches every request in the project. The engine picks the most specific\nmatching definition: app > team > project-wide.\n"),
+		steps: zod.array(zod.object({
+			name: zod.string().describe("Unique step identifier within this flow. Used as transition targets\nand returned in the API response as `step.name`.\n"),
+			fields: zod.array(zod.string()).default(getFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault).describe("Schema property names to collect from the user. Each entry references\na property in the flow's user schema. The engine resolves field type,\nvalidation rules, and implicit outcomes from schema annotations\n(e.g. a property with `x-unique` set implies a `user_not_found`\ntransition outcome).\n"),
+			actions: zod.record(zod.string(), zod.object({
+				primary: zod.boolean().default(false).describe("Marks this as the default/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n"),
+				text_key: zod.string().optional().describe("Optional localization key override for the action's label. When\nomitted, the engine derives a key from the step and action names.\nDisplay text is resolved client-side from a locale dictionary, never\nby the engine.\n")
+			}).describe("Configuration for a user-invokable action on a step. Keyed by action name\nin the parent dictionary. The action name is sent back in the submit\nrequest as `action`.\n")).default(getFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault).describe("Actions the user can take. Keyed by action name.\nThe action name is what the frontend sends back in the submit request.\nIf omitted, the engine provides a default `submit` action.\n"),
+			gates: zod.record(zod.string(), zod.object({
+				kind: zod.enum(["captcha"]).describe("The gate category. Only `captcha` is currently defined. Authenticator\nceremonies (e.g. passkey) are modelled as credential auth_attempts via\n`x-credential` on a field, not as gates.\n"),
+				provider: zod.string().describe("Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,\n`hcaptcha`. The engine looks up an implementation in its provider\nregistry.\n"),
+				config: zod.record(zod.string(), zod.unknown()).optional().describe("Provider-specific configuration consumed by the implementation when\nissuing the per-render challenge. Opaque to the engine.\n")
+			}).describe("A security challenge that must be satisfied before this step's submission\nis accepted. The engine may also inject gates at runtime based on policy\nor risk evaluation.\n")).default(getFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault).describe("Security gates that must be satisfied before submission. Keyed by gate\nname. Each gate selects a kind (e.g. \"captcha\") and provider-specific\nconfiguration. The engine may also inject gates dynamically based on\npolicy.\n"),
+			sso_providers: zod.array(zod.object({
+				id: zod.string().describe("Provider instance identifier."),
+				name: zod.string().describe("Display name for the provider."),
+				template: zod.string().describe("Template hint for rendering (logo, colors).")
+			}).describe("An available SSO identity provider.")).default(getFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault).describe("Available SSO identity providers for this step."),
+			on_success: zod.enum(["create_user"]).optional().describe("Server-side mutation to execute when this step completes successfully.\nRuns after field validation passes, before the transition fires.\n\n- create_user: creates the user record (registration flows)\n"),
+			complete: zod.enum(["redirect", "show"]).optional().describe("Marks this as a terminal step. Tells the frontend what to do:\n- redirect: navigate to redirect_uri (OIDC/SAML callback done)\n- show: render as a success/info screen\n"),
+			transitions: zod.record(zod.string(), zod.object({
+				target: zod.string().describe("Step name within this flow (when `action` is null), or the name\nof another flow (when `action` is `switch` or `pivot`).\n"),
+				action: zod.union([zod.enum(["switch", "pivot"]), zod.null()]).optional().describe("How to interpret `target`:\n- null (omitted): transition to a step in the current flow.\n- switch: replace the current flow with the target flow.\n  No return — the current flow is discarded.\n  Example: login ↔ register.\n- pivot: push the target flow onto the stack. The current flow\n  is paused and resumes when the target flow completes (auto-pop).\n  Example: login → recovery → back to login.\n")
+			})).optional().describe("Maps action/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` dict. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n")
+		}).describe("A step in a flow definition. This is the admin-authored configuration,\nnot the runtime payload sent to the frontend.\n\nSteps are schema-driven: `fields` references properties from the flow's\nuser schema, and the engine resolves field metadata (type, validation,\nimplicit outcomes) from schema annotations at runtime.\n\nA step with only `complete` set is a terminal step. All other steps are\nrendered to the frontend as capability payloads.\n")).min(1).describe("Ordered list of steps in this flow. The order is for human readability —\nactual step sequencing is determined by transitions.\n")
+	}).describe("A flow definition is the server-side configuration that describes a complete\nauthentication or identity flow. It is NOT sent to the frontend — the flow\nengine evaluates it and produces FlowResponse payloads (steps with capability\ndictionaries) for the client.\n\nFlow definitions are created by administrators and stored in the project/team\nconfiguration hierarchy. The engine selects the matching definition based on\nthe purpose + audience when a flow is created via POST /flow.\n"),
 	created_at: zod.iso.datetime({ offset: true }),
 	updated_at: zod.iso.datetime({ offset: true })
-}));
+});
 /**
 * Update a flow definition by id
 * @summary Update a flow definition by id
 */
 const UpdateFlowDefinitionParams = zod.object({ id: zod.string().describe("The id returned by the POST /flow_definitions endpoint.\n") });
+const updateFlowDefinitionQueryProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
+const UpdateFlowDefinitionQueryParams = zod.strictObject({ project_id: zod.string().regex(updateFlowDefinitionQueryProjectIdRegExp).describe("The project id to filter by.") });
 const updateFlowDefinitionBodyStepsItemFieldsDefault = [];
 const updateFlowDefinitionBodyStepsItemActionsPrimaryDefault = false;
 const updateFlowDefinitionBodyStepsItemActionsDefault = {};
@@ -1336,57 +1356,59 @@ const UpdateFlowDefinitionBody = zod.object({
 		})).optional().describe("Maps action/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` dict. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n")
 	}).describe("A step in a flow definition. This is the admin-authored configuration,\nnot the runtime payload sent to the frontend.\n\nSteps are schema-driven: `fields` references properties from the flow's\nuser schema, and the engine resolves field metadata (type, validation,\nimplicit outcomes) from schema annotations at runtime.\n\nA step with only `complete` set is a terminal step. All other steps are\nrendered to the frontend as capability payloads.\n")).min(1).optional().describe("Replaces the full steps array if provided. Partial step lists are not\nsupported — supply all steps when updating this field.\n")
 }).describe("Partial update for a flow definition. Only provided fields are replaced;\nomitted fields retain their current server-side values.\n\nCollection fields (`steps`, `purposes`) are treated atomically: if\nprovided, the entire array/object is replaced. If omitted, the current\nvalue is preserved unchanged.\n\n`name` is a stable identifier and cannot be changed after creation.\n");
-const updateFlowDefinitionResponseOneNameRegExp = /* @__PURE__ */ new RegExp("^[a-z][a-z0-9-]*$");
-const updateFlowDefinitionResponseOneStepsItemFieldsDefault = [];
-const updateFlowDefinitionResponseOneStepsItemActionsPrimaryDefault = false;
-const updateFlowDefinitionResponseOneStepsItemActionsDefault = {};
-const updateFlowDefinitionResponseOneStepsItemGatesDefault = {};
-const updateFlowDefinitionResponseOneStepsItemSsoProvidersDefault = [];
+const updateFlowDefinitionResponseFlowDefinitionNameRegExp = /* @__PURE__ */ new RegExp("^[a-z][a-z0-9-]*$");
+const updateFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault = [];
+const updateFlowDefinitionResponseFlowDefinitionStepsItemActionsPrimaryDefault = false;
+const updateFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault = {};
+const updateFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault = {};
+const updateFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault = [];
 const UpdateFlowDefinitionResponse = zod.object({
-	name: zod.string().regex(updateFlowDefinitionResponseOneNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Renaming is not supported — the\n`name` is part of the public contract another definition may\nreference. Acts as the human display label as well; no separate slug.\n"),
-	user_schema: zod.url().describe("User schema this flow operates on. Step `fields` reference properties\ndefined in this schema. The engine resolves field types, validation,\nand implicit outcomes from schema annotations at runtime.\n"),
-	purposes: zod.record(zod.string(), zod.string()).describe("Maps each purpose this definition handles to its entry-point step.\nKeys are purpose names; values must match a `name` in `steps`. A\ndefinition can serve multiple purposes (e.g. a combined login/register\nflow) by listing one entry per purpose.\n"),
-	audience: zod.object({
-		team_ids: zod.array(zod.string()).optional().describe("Restrict to specific teams (organizations). Empty means no team restriction."),
-		app_ids: zod.array(zod.string()).optional().describe("Restrict to specific applications. Empty means no app restriction.")
-	}).optional().describe("Scopes which teams or apps this flow definition applies to. Empty or\nomitted fields mean \"no restriction\"; when both are empty the definition\nmatches every request in the project. The engine picks the most specific\nmatching definition: app > team > project-wide.\n"),
-	steps: zod.array(zod.object({
-		name: zod.string().describe("Unique step identifier within this flow. Used as transition targets\nand returned in the API response as `step.name`.\n"),
-		fields: zod.array(zod.string()).default(updateFlowDefinitionResponseOneStepsItemFieldsDefault).describe("Schema property names to collect from the user. Each entry references\na property in the flow's user schema. The engine resolves field type,\nvalidation rules, and implicit outcomes from schema annotations\n(e.g. a property with `x-unique` set implies a `user_not_found`\ntransition outcome).\n"),
-		actions: zod.record(zod.string(), zod.object({
-			primary: zod.boolean().default(false).describe("Marks this as the default/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n"),
-			text_key: zod.string().optional().describe("Optional localization key override for the action's label. When\nomitted, the engine derives a key from the step and action names.\nDisplay text is resolved client-side from a locale dictionary, never\nby the engine.\n")
-		}).describe("Configuration for a user-invokable action on a step. Keyed by action name\nin the parent dictionary. The action name is sent back in the submit\nrequest as `action`.\n")).default(updateFlowDefinitionResponseOneStepsItemActionsDefault).describe("Actions the user can take. Keyed by action name.\nThe action name is what the frontend sends back in the submit request.\nIf omitted, the engine provides a default `submit` action.\n"),
-		gates: zod.record(zod.string(), zod.object({
-			kind: zod.enum(["captcha"]).describe("The gate category. Only `captcha` is currently defined. Authenticator\nceremonies (e.g. passkey) are modelled as credential auth_attempts via\n`x-credential` on a field, not as gates.\n"),
-			provider: zod.string().describe("Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,\n`hcaptcha`. The engine looks up an implementation in its provider\nregistry.\n"),
-			config: zod.record(zod.string(), zod.unknown()).optional().describe("Provider-specific configuration consumed by the implementation when\nissuing the per-render challenge. Opaque to the engine.\n")
-		}).describe("A security challenge that must be satisfied before this step's submission\nis accepted. The engine may also inject gates at runtime based on policy\nor risk evaluation.\n")).default(updateFlowDefinitionResponseOneStepsItemGatesDefault).describe("Security gates that must be satisfied before submission. Keyed by gate\nname. Each gate selects a kind (e.g. \"captcha\") and provider-specific\nconfiguration. The engine may also inject gates dynamically based on\npolicy.\n"),
-		sso_providers: zod.array(zod.object({
-			id: zod.string().describe("Provider instance identifier."),
-			name: zod.string().describe("Display name for the provider."),
-			template: zod.string().describe("Template hint for rendering (logo, colors).")
-		}).describe("An available SSO identity provider.")).default(updateFlowDefinitionResponseOneStepsItemSsoProvidersDefault).describe("Available SSO identity providers for this step."),
-		on_success: zod.enum(["create_user"]).optional().describe("Server-side mutation to execute when this step completes successfully.\nRuns after field validation passes, before the transition fires.\n\n- create_user: creates the user record (registration flows)\n"),
-		complete: zod.enum(["redirect", "show"]).optional().describe("Marks this as a terminal step. Tells the frontend what to do:\n- redirect: navigate to redirect_uri (OIDC/SAML callback done)\n- show: render as a success/info screen\n"),
-		transitions: zod.record(zod.string(), zod.object({
-			target: zod.string().describe("Step name within this flow (when `action` is null), or the name\nof another flow (when `action` is `switch` or `pivot`).\n"),
-			action: zod.union([zod.enum(["switch", "pivot"]), zod.null()]).optional().describe("How to interpret `target`:\n- null (omitted): transition to a step in the current flow.\n- switch: replace the current flow with the target flow.\n  No return — the current flow is discarded.\n  Example: login ↔ register.\n- pivot: push the target flow onto the stack. The current flow\n  is paused and resumes when the target flow completes (auto-pop).\n  Example: login → recovery → back to login.\n")
-		})).optional().describe("Maps action/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` dict. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n")
-	}).describe("A step in a flow definition. This is the admin-authored configuration,\nnot the runtime payload sent to the frontend.\n\nSteps are schema-driven: `fields` references properties from the flow's\nuser schema, and the engine resolves field metadata (type, validation,\nimplicit outcomes) from schema annotations at runtime.\n\nA step with only `complete` set is a terminal step. All other steps are\nrendered to the frontend as capability payloads.\n")).min(1).describe("Ordered list of steps in this flow. The order is for human readability —\nactual step sequencing is determined by transitions.\n")
-}).describe("A flow definition is the server-side configuration that describes a complete\nauthentication or identity flow. It is NOT sent to the frontend — the flow\nengine evaluates it and produces FlowResponse payloads (steps with capability\ndictionaries) for the client.\n\nFlow definitions are created by administrators and stored in the project/team\nconfiguration hierarchy. The engine selects the matching definition based on\nthe purpose + audience when a flow is created via POST /flow.\n").and(zod.object({
 	id: zod.string().describe("Unique identifier for the flow definition."),
 	project_id: zod.string().describe("Identifier of the project this flow definition belongs to."),
-	schema_uri: zod.url().describe("URI of the flow definition schema this definition was authored against.\nIf the schema_uri was not provided in the request, the flow definition is validated against the latest version of the schema, and the response includes the schema_uri of the latest version.\n"),
 	status: zod.string().describe("Status of the flow definition."),
+	flow_definition: zod.object({
+		name: zod.string().regex(updateFlowDefinitionResponseFlowDefinitionNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Renaming is not supported — the\n`name` is part of the public contract another definition may\nreference. Acts as the human display label as well; no separate slug.\n"),
+		user_schema: zod.url().describe("User schema this flow operates on. Step `fields` reference properties\ndefined in this schema. The engine resolves field types, validation,\nand implicit outcomes from schema annotations at runtime.\n"),
+		purposes: zod.record(zod.string(), zod.string()).describe("Maps each purpose this definition handles to its entry-point step.\nKeys are purpose names; values must match a `name` in `steps`. A\ndefinition can serve multiple purposes (e.g. a combined login/register\nflow) by listing one entry per purpose.\n"),
+		audience: zod.object({
+			team_ids: zod.array(zod.string()).optional().describe("Restrict to specific teams (organizations). Empty means no team restriction."),
+			app_ids: zod.array(zod.string()).optional().describe("Restrict to specific applications. Empty means no app restriction.")
+		}).optional().describe("Scopes which teams or apps this flow definition applies to. Empty or\nomitted fields mean \"no restriction\"; when both are empty the definition\nmatches every request in the project. The engine picks the most specific\nmatching definition: app > team > project-wide.\n"),
+		steps: zod.array(zod.object({
+			name: zod.string().describe("Unique step identifier within this flow. Used as transition targets\nand returned in the API response as `step.name`.\n"),
+			fields: zod.array(zod.string()).default(updateFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault).describe("Schema property names to collect from the user. Each entry references\na property in the flow's user schema. The engine resolves field type,\nvalidation rules, and implicit outcomes from schema annotations\n(e.g. a property with `x-unique` set implies a `user_not_found`\ntransition outcome).\n"),
+			actions: zod.record(zod.string(), zod.object({
+				primary: zod.boolean().default(false).describe("Marks this as the default/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n"),
+				text_key: zod.string().optional().describe("Optional localization key override for the action's label. When\nomitted, the engine derives a key from the step and action names.\nDisplay text is resolved client-side from a locale dictionary, never\nby the engine.\n")
+			}).describe("Configuration for a user-invokable action on a step. Keyed by action name\nin the parent dictionary. The action name is sent back in the submit\nrequest as `action`.\n")).default(updateFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault).describe("Actions the user can take. Keyed by action name.\nThe action name is what the frontend sends back in the submit request.\nIf omitted, the engine provides a default `submit` action.\n"),
+			gates: zod.record(zod.string(), zod.object({
+				kind: zod.enum(["captcha"]).describe("The gate category. Only `captcha` is currently defined. Authenticator\nceremonies (e.g. passkey) are modelled as credential auth_attempts via\n`x-credential` on a field, not as gates.\n"),
+				provider: zod.string().describe("Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,\n`hcaptcha`. The engine looks up an implementation in its provider\nregistry.\n"),
+				config: zod.record(zod.string(), zod.unknown()).optional().describe("Provider-specific configuration consumed by the implementation when\nissuing the per-render challenge. Opaque to the engine.\n")
+			}).describe("A security challenge that must be satisfied before this step's submission\nis accepted. The engine may also inject gates at runtime based on policy\nor risk evaluation.\n")).default(updateFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault).describe("Security gates that must be satisfied before submission. Keyed by gate\nname. Each gate selects a kind (e.g. \"captcha\") and provider-specific\nconfiguration. The engine may also inject gates dynamically based on\npolicy.\n"),
+			sso_providers: zod.array(zod.object({
+				id: zod.string().describe("Provider instance identifier."),
+				name: zod.string().describe("Display name for the provider."),
+				template: zod.string().describe("Template hint for rendering (logo, colors).")
+			}).describe("An available SSO identity provider.")).default(updateFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault).describe("Available SSO identity providers for this step."),
+			on_success: zod.enum(["create_user"]).optional().describe("Server-side mutation to execute when this step completes successfully.\nRuns after field validation passes, before the transition fires.\n\n- create_user: creates the user record (registration flows)\n"),
+			complete: zod.enum(["redirect", "show"]).optional().describe("Marks this as a terminal step. Tells the frontend what to do:\n- redirect: navigate to redirect_uri (OIDC/SAML callback done)\n- show: render as a success/info screen\n"),
+			transitions: zod.record(zod.string(), zod.object({
+				target: zod.string().describe("Step name within this flow (when `action` is null), or the name\nof another flow (when `action` is `switch` or `pivot`).\n"),
+				action: zod.union([zod.enum(["switch", "pivot"]), zod.null()]).optional().describe("How to interpret `target`:\n- null (omitted): transition to a step in the current flow.\n- switch: replace the current flow with the target flow.\n  No return — the current flow is discarded.\n  Example: login ↔ register.\n- pivot: push the target flow onto the stack. The current flow\n  is paused and resumes when the target flow completes (auto-pop).\n  Example: login → recovery → back to login.\n")
+			})).optional().describe("Maps action/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` dict. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n")
+		}).describe("A step in a flow definition. This is the admin-authored configuration,\nnot the runtime payload sent to the frontend.\n\nSteps are schema-driven: `fields` references properties from the flow's\nuser schema, and the engine resolves field metadata (type, validation,\nimplicit outcomes) from schema annotations at runtime.\n\nA step with only `complete` set is a terminal step. All other steps are\nrendered to the frontend as capability payloads.\n")).min(1).describe("Ordered list of steps in this flow. The order is for human readability —\nactual step sequencing is determined by transitions.\n")
+	}).describe("A flow definition is the server-side configuration that describes a complete\nauthentication or identity flow. It is NOT sent to the frontend — the flow\nengine evaluates it and produces FlowResponse payloads (steps with capability\ndictionaries) for the client.\n\nFlow definitions are created by administrators and stored in the project/team\nconfiguration hierarchy. The engine selects the matching definition based on\nthe purpose + audience when a flow is created via POST /flow.\n"),
 	created_at: zod.iso.datetime({ offset: true }),
 	updated_at: zod.iso.datetime({ offset: true })
-}));
+});
 /**
 * Delete a flow definition by id
 * @summary Delete a flow definition by id
 */
 const DeleteFlowDefinitionParams = zod.object({ id: zod.string().describe("The id returned by the POST /flow_definitions endpoint.\n") });
+const deleteFlowDefinitionQueryProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
+const DeleteFlowDefinitionQueryParams = zod.strictObject({ project_id: zod.string().regex(deleteFlowDefinitionQueryProjectIdRegExp).describe("The project id to filter by.") });
 /**
 * @summary Create team
 */
@@ -1408,6 +1430,6 @@ const GetTeamResponse = zod.object({
 	updatedAt: zod.iso.datetime({ offset: true }).describe("The time when the team was last updated.")
 }).describe("The current state of a team.");
 //#endregion
-export { AuthorizeDeviceQueryParams, AuthorizeDeviceResponse, AuthorizeGetQueryParams, CreateAuthAttemptBody, CreateFlowBody, CreateFlowDefinitionBody, CreateHandoffHeader, CreateHandoffParams, CreateHandoffResponse, CreateProjectBody, CreateSchemaBody, CreateSchemaQueryParams, CreateSessionBody, CreateTeamBody, CreateTeamQueryParams, CreateUserBody, CreateUserQueryParams, DeleteFlowDefinitionParams, EndSessionQueryParams, ExchangeHandoffBody, ExchangeHandoffHeader, ExchangeHandoffQueryParams, ExchangeHandoffResponse, GetAuthAttemptParams, GetAuthAttemptResponse, GetFlowDefinitionParams, GetFlowDefinitionResponse, GetFlowStepParams, GetFlowStepResponse, GetKeysResponse, GetMySessionResponse, GetOpenIDConfigurationResponse, GetProjectParams, GetProjectResponse, GetSchemaByIdParams, GetSchemaByIdQueryParams, GetSchemaByIdResponse, GetSessionParams, GetSessionQueryParams, GetSessionResponse, GetTeamParams, GetTeamQueryParams, GetTeamResponse, GetTokenResponse, GetUserByIDParams, GetUserByIDQueryParams, GetUserByIDResponse, GetUserInfoResponse, IntrospectResponse, IssueChallengeBody, IssueChallengeParams, ListFlowDefinitionsQueryParams, ListFlowDefinitionsResponse, ListSessionsQueryParams, ListSessionsResponse, ListUsersQueryParams, ListUsersResponse, ListUsersResponseItem, RevokeSessionParams, RevokeSessionQueryParams, SubmitFlowEventBody, SubmitFlowEventParams, SubmitFlowStepBody, SubmitFlowStepParams, SubmitFlowStepResponse, UpdateFlowDefinitionBody, UpdateFlowDefinitionParams, UpdateFlowDefinitionResponse, VerifyChallengeProofBody, VerifyChallengeProofHeader, VerifyChallengeProofParams, VerifyChallengeProofResponse, createAuthAttemptBodyProjectIdRegExp, createAuthAttemptBodySessionIdOneRegExp, createFlowBodyFlowDefinitionNameRegExp, createFlowBodyProjectIdRegExp, createFlowBodySchemaVersionRegExp, createFlowDefinitionBodyFlowDefinitionNameRegExp, createFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault, createFlowDefinitionBodyFlowDefinitionStepsItemActionsPrimaryDefault, createFlowDefinitionBodyFlowDefinitionStepsItemFieldsDefault, createFlowDefinitionBodyFlowDefinitionStepsItemGatesDefault, createFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersDefault, createFlowDefinitionBodyProjectIdRegExp, createHandoffPathAttemptIdRegExp, createSchemaBodyOnePropertiesXEditableDefault, createSchemaBodyOnePropertiesXMfaDefault, createSchemaBodyOnePropertiesXSensitiveDefault, createSchemaBodyOneXAuthMethodsMagicLinkPositionMin, createSchemaBodyOneXAuthMethodsOtpPositionMin, createSchemaBodyOneXAuthMethodsPasskeyPositionMin, createSchemaBodyOneXAuthMethodsPasswordPositionMin, createSchemaBodyOneXAuthMethodsSsoPositionMin, createSchemaQueryProjectIdRegExp, createSchemaQueryTeamIdRegExp, createSessionBodyProjectIdRegExp, createTeamQueryProjectIdRegExp, createUserQueryProjectIdRegExp, createUserQueryTeamIdRegExp, exchangeHandoffQueryProjectIdRegExp, exchangeHandoffResponseSessionFactorsItemPayloadOneUserIdRegExp, exchangeHandoffResponseSessionProjectIdRegExp, exchangeHandoffResponseSessionSessionIdRegExp, exchangeHandoffResponseSessionUserIdOneRegExp, getAuthAttemptPathAttemptIdRegExp, getAuthAttemptResponseAttemptIdRegExp, getAuthAttemptResponseChallengesItemChallengeIdRegExp, getAuthAttemptResponseCompletedFactorsItemPayloadOneUserIdRegExp, getAuthAttemptResponseProjectIdRegExp, getAuthAttemptResponseSessionIdOneRegExp, getAuthAttemptResponseUserIdOneRegExp, getFlowDefinitionResponseOneNameRegExp, getFlowDefinitionResponseOneStepsItemActionsDefault, getFlowDefinitionResponseOneStepsItemActionsPrimaryDefault, getFlowDefinitionResponseOneStepsItemFieldsDefault, getFlowDefinitionResponseOneStepsItemGatesDefault, getFlowDefinitionResponseOneStepsItemSsoProvidersDefault, getFlowStepResponseBrandingLayoutDefault, getFlowStepResponseStepActionsDefault, getFlowStepResponseStepActionsPrimaryDefault, getFlowStepResponseStepFieldsDefault, getFlowStepResponseStepFieldsRequiredDefault, getFlowStepResponseStepFieldsValidationMaxLengthMin, getFlowStepResponseStepFieldsValidationMinLengthMin, getFlowStepResponseStepGatesDefault, getFlowStepResponseStepSsoProvidersDefault, getMySessionResponseFactorsItemPayloadOneUserIdRegExp, getMySessionResponseProjectIdRegExp, getMySessionResponseSessionIdRegExp, getMySessionResponseUserIdOneRegExp, getOpenIDConfigurationResponseClaimsParameterSupportedDefault, getOpenIDConfigurationResponseRequestParameterSupportedDefault, getOpenIDConfigurationResponseRequestUriParameterSupportedDefault, getOpenIDConfigurationResponseRequireRequestUriRegistrationDefault, getProjectPathProjectIdRegExp, getSchemaByIdQueryProjectIdRegExp, getSchemaByIdQueryTeamIdRegExp, getSchemaByIdResponseOnePropertiesXEditableDefault, getSchemaByIdResponseOnePropertiesXMfaDefault, getSchemaByIdResponseOnePropertiesXSensitiveDefault, getSchemaByIdResponseOneXAuthMethodsMagicLinkPositionMin, getSchemaByIdResponseOneXAuthMethodsOtpPositionMin, getSchemaByIdResponseOneXAuthMethodsPasskeyPositionMin, getSchemaByIdResponseOneXAuthMethodsPasswordPositionMin, getSchemaByIdResponseOneXAuthMethodsSsoPositionMin, getSessionPathSessionIdRegExp, getSessionQueryProjectIdRegExp, getSessionResponseFactorsItemPayloadOneUserIdRegExp, getSessionResponseProjectIdRegExp, getSessionResponseSessionIdRegExp, getSessionResponseUserIdOneRegExp, getTeamPathTeamIdRegExp, getTeamQueryProjectIdRegExp, getUserByIDPathUserIdRegExp, getUserByIDQueryProjectIdRegExp, getUserByIDQueryTeamIdRegExp, issueChallengePathAttemptIdRegExp, listFlowDefinitionsQueryLimitDefault, listFlowDefinitionsQueryLimitMax, listFlowDefinitionsQueryProjectIdRegExp, listFlowDefinitionsResponseFlowDefinitionsItemNameRegExp, listSessionsQueryLimitDefault, listSessionsQueryLimitMax, listSessionsQueryProjectIdRegExp, listSessionsQueryUserIdRegExp, listSessionsResponseSessionsItemFactorsItemPayloadOneUserIdRegExp, listSessionsResponseSessionsItemProjectIdRegExp, listSessionsResponseSessionsItemSessionIdRegExp, listSessionsResponseSessionsItemUserIdOneRegExp, listUsersQueryLimitDefault, listUsersQueryLimitMax, listUsersQueryOffsetDefault, listUsersQueryOffsetMin, revokeSessionPathSessionIdRegExp, revokeSessionQueryProjectIdRegExp, submitFlowStepResponseBrandingLayoutDefault, submitFlowStepResponseStepActionsDefault, submitFlowStepResponseStepActionsPrimaryDefault, submitFlowStepResponseStepFieldsDefault, submitFlowStepResponseStepFieldsRequiredDefault, submitFlowStepResponseStepFieldsValidationMaxLengthMin, submitFlowStepResponseStepFieldsValidationMinLengthMin, submitFlowStepResponseStepGatesDefault, submitFlowStepResponseStepSsoProvidersDefault, updateFlowDefinitionBodyStepsItemActionsDefault, updateFlowDefinitionBodyStepsItemActionsPrimaryDefault, updateFlowDefinitionBodyStepsItemFieldsDefault, updateFlowDefinitionBodyStepsItemGatesDefault, updateFlowDefinitionBodyStepsItemSsoProvidersDefault, updateFlowDefinitionResponseOneNameRegExp, updateFlowDefinitionResponseOneStepsItemActionsDefault, updateFlowDefinitionResponseOneStepsItemActionsPrimaryDefault, updateFlowDefinitionResponseOneStepsItemFieldsDefault, updateFlowDefinitionResponseOneStepsItemGatesDefault, updateFlowDefinitionResponseOneStepsItemSsoProvidersDefault, verifyChallengeProofPathAttemptIdRegExp, verifyChallengeProofPathChallengeIdRegExp, verifyChallengeProofResponseAttemptIdRegExp, verifyChallengeProofResponseChallengesItemChallengeIdRegExp, verifyChallengeProofResponseCompletedFactorsItemPayloadOneUserIdRegExp, verifyChallengeProofResponseProjectIdRegExp, verifyChallengeProofResponseSessionIdOneRegExp, verifyChallengeProofResponseUserIdOneRegExp };
+export { AuthorizeDeviceQueryParams, AuthorizeDeviceResponse, AuthorizeGetQueryParams, CreateAuthAttemptBody, CreateFlowBody, CreateFlowDefinitionBody, CreateHandoffHeader, CreateHandoffParams, CreateHandoffResponse, CreateProjectBody, CreateSchemaBody, CreateSchemaQueryParams, CreateSessionBody, CreateTeamBody, CreateTeamQueryParams, CreateUserBody, CreateUserQueryParams, DeleteFlowDefinitionParams, DeleteFlowDefinitionQueryParams, EndSessionQueryParams, ExchangeHandoffBody, ExchangeHandoffHeader, ExchangeHandoffQueryParams, ExchangeHandoffResponse, GetAuthAttemptParams, GetAuthAttemptResponse, GetFlowDefinitionParams, GetFlowDefinitionQueryParams, GetFlowDefinitionResponse, GetFlowStepParams, GetFlowStepResponse, GetKeysResponse, GetMySessionResponse, GetMyUserResponse, GetOpenIDConfigurationResponse, GetProjectParams, GetProjectResponse, GetSchemaByIdParams, GetSchemaByIdQueryParams, GetSchemaByIdResponse, GetSessionParams, GetSessionQueryParams, GetSessionResponse, GetTeamParams, GetTeamQueryParams, GetTeamResponse, GetTokenResponse, GetUserByIDParams, GetUserByIDQueryParams, GetUserByIDResponse, GetUserInfoResponse, IntrospectResponse, IssueChallengeBody, IssueChallengeParams, ListFlowDefinitionsQueryParams, ListFlowDefinitionsResponse, ListSessionsQueryParams, ListSessionsResponse, ListUsersQueryParams, ListUsersResponse, ListUsersResponseItem, RevokeSessionParams, RevokeSessionQueryParams, SetUserPasswordBody, SetUserPasswordParams, SetUserPasswordQueryParams, SubmitFlowEventBody, SubmitFlowEventParams, SubmitFlowStepBody, SubmitFlowStepHeader, SubmitFlowStepParams, SubmitFlowStepResponse, UpdateFlowDefinitionBody, UpdateFlowDefinitionParams, UpdateFlowDefinitionQueryParams, UpdateFlowDefinitionResponse, VerifyChallengeProofBody, VerifyChallengeProofHeader, VerifyChallengeProofParams, VerifyChallengeProofResponse, createAuthAttemptBodyProjectIdRegExp, createAuthAttemptBodySessionIdOneRegExp, createFlowBodyFlowDefinitionNameRegExp, createFlowBodyProjectIdRegExp, createFlowBodySchemaVersionRegExp, createFlowDefinitionBodyFlowDefinitionNameRegExp, createFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault, createFlowDefinitionBodyFlowDefinitionStepsItemActionsPrimaryDefault, createFlowDefinitionBodyFlowDefinitionStepsItemFieldsDefault, createFlowDefinitionBodyFlowDefinitionStepsItemGatesDefault, createFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersDefault, createFlowDefinitionBodyProjectIdRegExp, createHandoffPathAttemptIdRegExp, createSchemaBodyOnePropertiesXEditableDefault, createSchemaBodyOnePropertiesXMfaDefault, createSchemaBodyOnePropertiesXSensitiveDefault, createSchemaBodyOneXAuthMethodsMagicLinkPositionMin, createSchemaBodyOneXAuthMethodsOtpPositionMin, createSchemaBodyOneXAuthMethodsPasskeyPositionMin, createSchemaBodyOneXAuthMethodsPasswordPositionMin, createSchemaBodyOneXAuthMethodsSsoPositionMin, createSchemaQueryProjectIdRegExp, createSchemaQueryTeamIdRegExp, createSessionBodyProjectIdRegExp, createTeamQueryProjectIdRegExp, createUserQueryProjectIdRegExp, createUserQueryTeamIdRegExp, deleteFlowDefinitionQueryProjectIdRegExp, exchangeHandoffQueryProjectIdRegExp, exchangeHandoffResponseSessionFactorsItemPayloadOneUserIdRegExp, exchangeHandoffResponseSessionProjectIdRegExp, exchangeHandoffResponseSessionSessionIdRegExp, exchangeHandoffResponseSessionUserIdOneRegExp, getAuthAttemptPathAttemptIdRegExp, getAuthAttemptResponseAttemptIdRegExp, getAuthAttemptResponseChallengesItemChallengeIdRegExp, getAuthAttemptResponseCompletedFactorsItemPayloadOneUserIdRegExp, getAuthAttemptResponseProjectIdRegExp, getAuthAttemptResponseSessionIdOneRegExp, getAuthAttemptResponseUserIdOneRegExp, getFlowDefinitionQueryProjectIdRegExp, getFlowDefinitionResponseFlowDefinitionNameRegExp, getFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault, getFlowDefinitionResponseFlowDefinitionStepsItemActionsPrimaryDefault, getFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault, getFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault, getFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault, getFlowStepResponseBrandingLayoutDefault, getFlowStepResponseStepActionsDefault, getFlowStepResponseStepActionsPrimaryDefault, getFlowStepResponseStepFieldsDefault, getFlowStepResponseStepFieldsRequiredDefault, getFlowStepResponseStepFieldsValidationMaxLengthMin, getFlowStepResponseStepFieldsValidationMinLengthMin, getFlowStepResponseStepGatesDefault, getFlowStepResponseStepSsoProvidersDefault, getMySessionResponseFactorsItemPayloadOneUserIdRegExp, getMySessionResponseProjectIdRegExp, getMySessionResponseSessionIdRegExp, getMySessionResponseUserIdOneRegExp, getOpenIDConfigurationResponseClaimsParameterSupportedDefault, getOpenIDConfigurationResponseRequestParameterSupportedDefault, getOpenIDConfigurationResponseRequestUriParameterSupportedDefault, getOpenIDConfigurationResponseRequireRequestUriRegistrationDefault, getProjectPathProjectIdRegExp, getSchemaByIdQueryProjectIdRegExp, getSchemaByIdQueryTeamIdRegExp, getSchemaByIdResponseOnePropertiesXEditableDefault, getSchemaByIdResponseOnePropertiesXMfaDefault, getSchemaByIdResponseOnePropertiesXSensitiveDefault, getSchemaByIdResponseOneXAuthMethodsMagicLinkPositionMin, getSchemaByIdResponseOneXAuthMethodsOtpPositionMin, getSchemaByIdResponseOneXAuthMethodsPasskeyPositionMin, getSchemaByIdResponseOneXAuthMethodsPasswordPositionMin, getSchemaByIdResponseOneXAuthMethodsSsoPositionMin, getSessionPathSessionIdRegExp, getSessionQueryProjectIdRegExp, getSessionResponseFactorsItemPayloadOneUserIdRegExp, getSessionResponseProjectIdRegExp, getSessionResponseSessionIdRegExp, getSessionResponseUserIdOneRegExp, getTeamPathTeamIdRegExp, getTeamQueryProjectIdRegExp, getUserByIDPathUserIdRegExp, getUserByIDQueryProjectIdRegExp, getUserByIDQueryTeamIdRegExp, issueChallengePathAttemptIdRegExp, listFlowDefinitionsQueryLimitDefault, listFlowDefinitionsQueryLimitMax, listFlowDefinitionsQueryProjectIdRegExp, listFlowDefinitionsResponseFlowDefinitionsItemNameRegExp, listSessionsQueryLimitDefault, listSessionsQueryLimitMax, listSessionsQueryProjectIdRegExp, listSessionsQueryUserIdRegExp, listSessionsResponseSessionsItemFactorsItemPayloadOneUserIdRegExp, listSessionsResponseSessionsItemProjectIdRegExp, listSessionsResponseSessionsItemSessionIdRegExp, listSessionsResponseSessionsItemUserIdOneRegExp, listUsersQueryLimitDefault, listUsersQueryLimitMax, listUsersQueryOffsetDefault, listUsersQueryOffsetMin, revokeSessionPathSessionIdRegExp, revokeSessionQueryProjectIdRegExp, setUserPasswordPathUserIdRegExp, setUserPasswordQueryProjectIdRegExp, submitFlowStepResponseBrandingLayoutDefault, submitFlowStepResponseStepActionsDefault, submitFlowStepResponseStepActionsPrimaryDefault, submitFlowStepResponseStepFieldsDefault, submitFlowStepResponseStepFieldsRequiredDefault, submitFlowStepResponseStepFieldsValidationMaxLengthMin, submitFlowStepResponseStepFieldsValidationMinLengthMin, submitFlowStepResponseStepGatesDefault, submitFlowStepResponseStepSsoProvidersDefault, updateFlowDefinitionBodyStepsItemActionsDefault, updateFlowDefinitionBodyStepsItemActionsPrimaryDefault, updateFlowDefinitionBodyStepsItemFieldsDefault, updateFlowDefinitionBodyStepsItemGatesDefault, updateFlowDefinitionBodyStepsItemSsoProvidersDefault, updateFlowDefinitionQueryProjectIdRegExp, updateFlowDefinitionResponseFlowDefinitionNameRegExp, updateFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemActionsPrimaryDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault, verifyChallengeProofPathAttemptIdRegExp, verifyChallengeProofPathChallengeIdRegExp, verifyChallengeProofResponseAttemptIdRegExp, verifyChallengeProofResponseChallengesItemChallengeIdRegExp, verifyChallengeProofResponseCompletedFactorsItemPayloadOneUserIdRegExp, verifyChallengeProofResponseProjectIdRegExp, verifyChallengeProofResponseSessionIdOneRegExp, verifyChallengeProofResponseUserIdOneRegExp };
 
 //# sourceMappingURL=zitadelNextGen.zod.mjs.map