@zitadel/api 0.0.0

package/dist/generated/model/authorizeDevice400.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { AuthorizeDevice400Details } from "./authorizeDevice400Details";
+/**
+ * Standard error payload returned for failed API requests.
+ */
+export type AuthorizeDevice400 = {
+    /** Stable machine-readable error code. */
+    code: string;
+    /** Human-readable explanation of the error. */
+    message: string;
+    /** Additional error-specific context. */
+    details?: AuthorizeDevice400Details;
+};
+//# sourceMappingURL=authorizeDevice400.d.ts.map

package/dist/generated/model/authorizeDevice400.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizeDevice400.d.ts","sourceRoot":"","sources":["../../../src/generated/model/authorizeDevice400.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAE7E;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,OAAO,CAAC,EAAE,yBAAyB,CAAC;CACrC,CAAC"}

package/dist/generated/model/authorizeDevice400Details.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Additional error-specific context.
+ */
+export type AuthorizeDevice400Details = {
+    [key: string]: unknown;
+};
+//# sourceMappingURL=authorizeDevice400Details.d.ts.map

package/dist/generated/model/authorizeDevice400Details.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizeDevice400Details.d.ts","sourceRoot":"","sources":["../../../src/generated/model/authorizeDevice400Details.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,MAAM,yBAAyB,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC"}

package/dist/generated/model/authorizeDeviceDefault.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { AuthorizeDeviceDefaultDetails } from "./authorizeDeviceDefaultDetails";
+/**
+ * Standard error payload returned for failed API requests.
+ */
+export type AuthorizeDeviceDefault = {
+    /** Stable machine-readable error code. */
+    code: string;
+    /** Human-readable explanation of the error. */
+    message: string;
+    /** Additional error-specific context. */
+    details?: AuthorizeDeviceDefaultDetails;
+};
+//# sourceMappingURL=authorizeDeviceDefault.d.ts.map

package/dist/generated/model/authorizeDeviceDefault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizeDeviceDefault.d.ts","sourceRoot":"","sources":["../../../src/generated/model/authorizeDeviceDefault.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAErF;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,OAAO,CAAC,EAAE,6BAA6B,CAAC;CACzC,CAAC"}

package/dist/generated/model/authorizeDeviceDefaultDetails.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Additional error-specific context.
+ */
+export type AuthorizeDeviceDefaultDetails = {
+    [key: string]: unknown;
+};
+//# sourceMappingURL=authorizeDeviceDefaultDetails.d.ts.map

package/dist/generated/model/authorizeDeviceDefaultDetails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizeDeviceDefaultDetails.d.ts","sourceRoot":"","sources":["../../../src/generated/model/authorizeDeviceDefaultDetails.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,MAAM,6BAA6B,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC"}

package/dist/generated/model/authorizeDeviceParams.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+export type AuthorizeDeviceParams = {
+    /**
+   * The client ID of the application that is requesting authorization.
+  This is a required parameter and must match the client ID of a
+  registered application.
+  
+   */
+    client_id: string;
+    /**
+   * The scope parameter is used to specify the permissions that the client
+  is requesting. This is a space delimited list of scopes. For example,
+  you could use this to request access to the user's profile information or
+  to request permission to access certain APIs on behalf of the user.
+  
+   */
+    scope?: string;
+};
+//# sourceMappingURL=authorizeDeviceParams.d.ts.map

package/dist/generated/model/authorizeDeviceParams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizeDeviceParams.d.ts","sourceRoot":"","sources":["../../../src/generated/model/authorizeDeviceParams.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,qBAAqB,GAAG;IAClC;;;;;KAKC;IACD,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;KAMC;IACD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC"}

package/dist/generated/model/authorizeGet400.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { AuthorizeGet400Details } from "./authorizeGet400Details";
+/**
+ * Standard error payload returned for failed API requests.
+ */
+export type AuthorizeGet400 = {
+    /** Stable machine-readable error code. */
+    code: string;
+    /** Human-readable explanation of the error. */
+    message: string;
+    /** Additional error-specific context. */
+    details?: AuthorizeGet400Details;
+};
+//# sourceMappingURL=authorizeGet400.d.ts.map

package/dist/generated/model/authorizeGet400.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizeGet400.d.ts","sourceRoot":"","sources":["../../../src/generated/model/authorizeGet400.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAEvE;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,OAAO,CAAC,EAAE,sBAAsB,CAAC;CAClC,CAAC"}

package/dist/generated/model/authorizeGet400Details.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Additional error-specific context.
+ */
+export type AuthorizeGet400Details = {
+    [key: string]: unknown;
+};
+//# sourceMappingURL=authorizeGet400Details.d.ts.map

package/dist/generated/model/authorizeGet400Details.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizeGet400Details.d.ts","sourceRoot":"","sources":["../../../src/generated/model/authorizeGet400Details.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC"}

package/dist/generated/model/authorizeGetDefault.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { AuthorizeGetDefaultDetails } from "./authorizeGetDefaultDetails";
+/**
+ * Standard error payload returned for failed API requests.
+ */
+export type AuthorizeGetDefault = {
+    /** Stable machine-readable error code. */
+    code: string;
+    /** Human-readable explanation of the error. */
+    message: string;
+    /** Additional error-specific context. */
+    details?: AuthorizeGetDefaultDetails;
+};
+//# sourceMappingURL=authorizeGetDefault.d.ts.map

package/dist/generated/model/authorizeGetDefault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizeGetDefault.d.ts","sourceRoot":"","sources":["../../../src/generated/model/authorizeGetDefault.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE/E;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,OAAO,CAAC,EAAE,0BAA0B,CAAC;CACtC,CAAC"}

package/dist/generated/model/authorizeGetDefaultDetails.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Additional error-specific context.
+ */
+export type AuthorizeGetDefaultDetails = {
+    [key: string]: unknown;
+};
+//# sourceMappingURL=authorizeGetDefaultDetails.d.ts.map

package/dist/generated/model/authorizeGetDefaultDetails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizeGetDefaultDetails.d.ts","sourceRoot":"","sources":["../../../src/generated/model/authorizeGetDefaultDetails.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC"}

package/dist/generated/model/authorizeGetParams.d.ts

@@ -0,0 +1,136 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+export type AuthorizeGetParams = {
+    /**
+   * A space delimited list of Authentication Class References. This can be
+  used to specify certain authentication methods or level of assurance
+  that is required for the authentication. For example, you could use
+  this to require multi-factor authentication.
+  
+   */
+    acr_values?: string;
+    /**
+   * The client ID of the application that is requesting authorization.
+  This is a required parameter and must match the client ID of a
+  registered application.
+  
+   */
+    client_id: string;
+    /**
+   * The code challenge is a cryptographic string used in the PKCE (Proof
+  Key for Code Exchange) flow to enhance security.
+  
+   */
+    code_challenge?: string;
+    /**
+   * The code challenge method is used in conjunction with the code challenge
+  in the PKCE flow. It specifies the method used to generate the code
+  challenge. Common values are "S256" for SHA-256 hashing and "plain"
+  for no hashing.
+  
+   */
+    code_challenge_method?: string;
+    /**
+   * The display parameter is used to specify how the authorization server
+  should display the authentication and consent user interface. Common
+  values include "page" for a full-page display, "popup" for a popup
+  window, and "touch" for a mobile-optimized display.
+  
+   */
+    display?: string;
+    /**
+   * The ID token hint is a previously issued ID token that can be used to
+  pre-fill the authentication form or to provide information about the
+  user to the authorization server. This can be useful for single sign-on
+  scenarios or for providing a smoother user experience.
+  
+   */
+    id_token_hint?: string;
+    /**
+   * The login hint is a hint to the authorization server about the login
+  identifier of the user. This can be used to pre-fill the username or
+  email field in the authentication form, making it easier for the user
+  to log in.
+  
+   */
+    login_hint?: string;
+    /**
+   * The max age parameter specifies the maximum amount of time in seconds
+  that has passed since the user last authenticated. If the user has not
+  authenticated within this time frame, they will be required to re-authenticate.
+  
+   */
+    max_age?: number;
+    /**
+   * The nonce parameter is a random string that is used to associate a client
+  session with an ID token and to mitigate replay attacks. The authorization
+  server should include this value in the ID token that it issues, and the
+  client should verify that the value in the ID token matches the value it
+  sent in the authorization request.
+  
+   */
+    nonce?: string;
+    /**
+   * The prompt parameter is used to specify whether the authorization server
+  should prompt the user for re-authentication and consent. Common values
+  include "none" for no prompts, "login" to prompt for re-authentication,
+  "consent" to prompt for user consent, and "select_account" to prompt
+  the user to select an account if they are logged in with multiple accounts.
+  
+   */
+    prompt?: string;
+    /**
+   * The redirect URI is the URI to which the authorization server will redirect
+  the user after they have authorized or denied the request. This must match
+  one of the redirect URIs registered for the client application.
+  
+   */
+    redirect_uri?: string;
+    /**
+   * The response mode parameter specifies how the authorization server should
+  return the authorization response. Common values include "query" to return
+  parameters in the query string, "fragment" to return parameters in the URL
+  fragment, and "form_post" to return parameters in an HTTP POST request.
+  
+   */
+    response_mode?: string;
+    /**
+   * The response type parameter specifies the type of response that the client
+  is expecting from the authorization server. Common values include "code"
+  for the authorization code flow, "token" for the implicit flow, and "id_token"
+  for OpenID Connect authentication.
+  
+   */
+    response_type: string;
+    /**
+   * The scope parameter is used to specify the permissions that the client is
+  requesting from the user. This is a space-delimited list of scope values,
+  and the authorization server will use this information to determine what
+  access to grant to the client application.
+  
+   */
+    scope?: string;
+    /**
+   * The state parameter is a random string that is used to maintain state between
+  the authorization request and the callback. It is used to prevent cross-site
+  request forgery (CSRF) attacks by ensuring that the response received from the
+  authorization server corresponds to the request that was sent.
+  
+   */
+    state?: string;
+    /**
+   * The ui_locales parameter is used to specify the preferred languages and scripts
+  for the user interface that the authorization server should display. This is a
+  space-delimited list of BCP47 language tag values, and it can be used to provide
+  a localized user experience for users from different regions and language
+  preferences.
+  
+   */
+    ui_locales?: string;
+};
+//# sourceMappingURL=authorizeGetParams.d.ts.map

package/dist/generated/model/authorizeGetParams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizeGetParams.d.ts","sourceRoot":"","sources":["../../../src/generated/model/authorizeGetParams.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,kBAAkB,GAAG;IAC/B;;;;;;KAMC;IACD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;KAKC;IACD,SAAS,EAAE,MAAM,CAAC;IAClB;;;;KAIC;IACD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;KAMC;IACD,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;KAMC;IACD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;KAMC;IACD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;KAMC;IACD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;KAKC;IACD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;KAOC;IACD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;KAOC;IACD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;KAKC;IACD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;KAMC;IACD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;KAMC;IACD,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;KAMC;IACD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;KAMC;IACD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;KAOC;IACD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC"}

package/dist/generated/model/createAuthAttempt201.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { CreateAuthAttempt201ChallengesItem } from "./createAuthAttempt201ChallengesItem";
+import type { CreateAuthAttempt201CompletedFactorsItem } from "./createAuthAttempt201CompletedFactorsItem";
+import type { CreateAuthAttempt201RequiredFactorsItem } from "./createAuthAttempt201RequiredFactorsItem";
+import type { CreateAuthAttempt201State } from "./createAuthAttempt201State";
+/**
+ * The current state of an authentication attempt.
+
+An attempt is an ephemeral state machine (15-minute TTL) that drives a single authentication round.
+It accepts factor challenges, verifies proofs, and completes into a handoff token.
+Clients drive the attempt by:
+1. Issuing challenges: POST /auth_attempts/{attempt_id}/challenges
+2. Verifying proofs: POST /auth_attempts/{attempt_id}/challenges/{challenge_id}/verify
+3. Completing: POST /auth_attempts/{attempt_id}/handoff
+
+ */
+export type CreateAuthAttempt201 = {
+    /**
+     * Unique identifier for this authentication attempt
+     * @pattern ^[a-zA-Z0-9_-]+$
+     */
+    attempt_id: string;
+    /** @pattern ^[a-zA-Z0-9_-]+$ */
+    project_id: string;
+    /** Overall state of the authentication attempt:
+    - `in_progress`: factors are still being collected; continue issuing challenges.
+    - `completed`: all required factors have been verified; the attempt is ready for handoff.
+    - `failed`: the attempt has failed (e.g. too many failed proofs) and cannot be continued.
+    - `expired`: the 15-minute TTL has been exceeded.
+     */
+    state: CreateAuthAttempt201State;
+    /** The session being authenticated into. Either newly created or passed in on POST.
+    For step-up (re-auth), this is the existing session_id provided on creation.
+     */
+    session_id?: string | null;
+    /** The user ID, if known at this point in the flow.
+    Null until an identifier challenge has been verified.
+     */
+    user_id?: string | null;
+    /** The authentication factor methods that the project policy requires in order
+    to complete this attempt. Computed by the server from the project's auth policy.
+    Clients should use this to determine which challenges still need to be issued.
+     */
+    required_factors?: CreateAuthAttempt201RequiredFactorsItem[];
+    /** The factors that have been successfully verified in this attempt so far.
+    Each item includes method-specific metadata in the payload field.
+  
+    The flow engine uses verified_at timestamps to enforce time-based policies, such as
+    requiring password verification within the last 5 minutes for step-up auth to
+    access sensitive operations.
+  
+    A factor appears here once its challenge reaches `verified` state.
+     */
+    completed_factors?: CreateAuthAttempt201CompletedFactorsItem[];
+    /** All challenges issued within this attempt, in creation order.
+    Use this to track the state of each factor challenge (pending, verified, failed, expired).
+     */
+    challenges?: CreateAuthAttempt201ChallengesItem[];
+    /** When this attempt expires (15-minute TTL from creation) */
+    expires_at?: string;
+    /** When this attempt was created */
+    created_at: string;
+};
+//# sourceMappingURL=createAuthAttempt201.d.ts.map

package/dist/generated/model/createAuthAttempt201.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createAuthAttempt201.d.ts","sourceRoot":"","sources":["../../../src/generated/model/createAuthAttempt201.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAC/F,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,4CAA4C,CAAC;AAC3G,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,2CAA2C,CAAC;AACzG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAE7E;;;;;;;;;;GAUG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,KAAK,EAAE,yBAAyB,CAAC;IACjC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,uCAAuC,EAAE,CAAC;IAC7D;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,wCAAwC,EAAE,CAAC;IAC/D;;OAEG;IACH,UAAU,CAAC,EAAE,kCAAkC,EAAE,CAAC;IAClD,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC"}

package/dist/generated/model/createAuthAttempt201ChallengesItem.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { CreateAuthAttempt201ChallengesItemMethod } from "./createAuthAttempt201ChallengesItemMethod";
+import type { CreateAuthAttempt201ChallengesItemPayload } from "./createAuthAttempt201ChallengesItemPayload";
+import type { CreateAuthAttempt201ChallengesItemState } from "./createAuthAttempt201ChallengesItemState";
+/**
+ * A factor challenge issued within an authentication attempt.
+
+A challenge presents a single-factor verification prompt (password entry, TOTP code, passkey assertion, etc.).
+The client verifies the proof by POST /auth_attempts/{attempt_id}/challenges/{challenge_id}/verify.
+
+ */
+export type CreateAuthAttempt201ChallengesItem = {
+    /**
+     * Unique identifier for this challenge
+     * @pattern ^[a-zA-Z0-9_-]+$
+     */
+    challenge_id: string;
+    /** An authentication factor method. */
+    method: CreateAuthAttempt201ChallengesItemMethod;
+    /** Current state of this challenge:
+    - `pending`: awaiting proof submission
+    - `failed`: proof rejected (invalid credential, wrong code, etc.)
+    - `expired`: challenge TTL exceeded without verification
+     */
+    state: CreateAuthAttempt201ChallengesItemState;
+    /** When this challenge was issued */
+    created_at: string;
+    /** When this challenge expires */
+    expires_at?: string | null;
+    /** Method-specific challenge data. Structure depends on the `method` field.
+    - `identifier`, `password`: null (no additional data needed)
+    - `passkey`: WebAuthn challenge and credential options
+    - `idp`: Authorization URL and provider information
+     */
+    payload?: CreateAuthAttempt201ChallengesItemPayload;
+};
+//# sourceMappingURL=createAuthAttempt201ChallengesItem.d.ts.map

package/dist/generated/model/createAuthAttempt201ChallengesItem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createAuthAttempt201ChallengesItem.d.ts","sourceRoot":"","sources":["../../../src/generated/model/createAuthAttempt201ChallengesItem.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,4CAA4C,CAAC;AAC3G,OAAO,KAAK,EAAE,yCAAyC,EAAE,MAAM,6CAA6C,CAAC;AAC7G,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,2CAA2C,CAAC;AAEzG;;;;;;GAMG;AACH,MAAM,MAAM,kCAAkC,GAAG;IAC/C;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,MAAM,EAAE,wCAAwC,CAAC;IACjD;;;;OAIG;IACH,KAAK,EAAE,uCAAuC,CAAC;IAC/C,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;OAIG;IACH,OAAO,CAAC,EAAE,yCAAyC,CAAC;CACrD,CAAC"}

package/dist/generated/model/createAuthAttempt201ChallengesItemMethod.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * An authentication factor method.
+ */
+export type CreateAuthAttempt201ChallengesItemMethod = (typeof CreateAuthAttempt201ChallengesItemMethod)[keyof typeof CreateAuthAttempt201ChallengesItemMethod];
+export declare const CreateAuthAttempt201ChallengesItemMethod: {
+    readonly identifier: "identifier";
+    readonly password: "password";
+    readonly passkey: "passkey";
+};
+//# sourceMappingURL=createAuthAttempt201ChallengesItemMethod.d.ts.map

package/dist/generated/model/createAuthAttempt201ChallengesItemMethod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createAuthAttempt201ChallengesItemMethod.d.ts","sourceRoot":"","sources":["../../../src/generated/model/createAuthAttempt201ChallengesItemMethod.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,MAAM,wCAAwC,GAClD,CAAC,OAAO,wCAAwC,CAAC,CAAC,MAAM,OAAO,wCAAwC,CAAC,CAAC;AAE3G,eAAO,MAAM,wCAAwC;aACnD,UAAU,EAAE,YAAY;aACxB,QAAQ,EAAE,UAAU;aACpB,OAAO,EAAE,SAAS;CACV,CAAC"}

package/dist/generated/model/createAuthAttempt201ChallengesItemPayload.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Method-specific challenge data. Structure depends on the `method` field.
+- `identifier`, `password`: null (no additional data needed)
+- `passkey`: WebAuthn challenge and credential options
+- `idp`: Authorization URL and provider information
+
+ */
+export type CreateAuthAttempt201ChallengesItemPayload = {
+    [key: string]: unknown;
+} | {
+    /** Contains the options for the Assertion Generation (dictionary PublicKeyCredentialRequestOptions).
+See also: https://www.w3.org/TR/webauthn/#dictdef-publickeycredentialrequestoptions
+ */
+    public_key: {
+        /** Base64-encoded WebAuthn challenge */
+        challenge: string;
+        /** List of credential IDs that can be used for this authentication */
+        allowed_credentials?: {
+            /** Base64-encoded credential ID */
+            id: string;
+            type: "public-key";
+        }[];
+        /** User verification requirement for this challenge */
+        user_verification?: "required" | "preferred" | "discouraged";
+        /** Relying Party ID for WebAuthn */
+        rp_id?: string;
+    };
+};
+//# sourceMappingURL=createAuthAttempt201ChallengesItemPayload.d.ts.map

package/dist/generated/model/createAuthAttempt201ChallengesItemPayload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createAuthAttempt201ChallengesItemPayload.d.ts","sourceRoot":"","sources":["../../../src/generated/model/createAuthAttempt201ChallengesItemPayload.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,yCAAyC,GACjD;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GAC1B;IACE;;GAED;IACC,UAAU,EAAE;QACV,wCAAwC;QACxC,SAAS,EAAE,MAAM,CAAC;QAClB,sEAAsE;QACtE,mBAAmB,CAAC,EAAE;YACpB,mCAAmC;YACnC,EAAE,EAAE,MAAM,CAAC;YACX,IAAI,EAAE,YAAY,CAAC;SACpB,EAAE,CAAC;QACJ,uDAAuD;QACvD,iBAAiB,CAAC,EAAE,UAAU,GAAG,WAAW,GAAG,aAAa,CAAC;QAC7D,oCAAoC;QACpC,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH,CAAC"}

package/dist/generated/model/createAuthAttempt201ChallengesItemState.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Current state of this challenge:
+- `pending`: awaiting proof submission
+- `failed`: proof rejected (invalid credential, wrong code, etc.)
+- `expired`: challenge TTL exceeded without verification
+
+ */
+export type CreateAuthAttempt201ChallengesItemState = (typeof CreateAuthAttempt201ChallengesItemState)[keyof typeof CreateAuthAttempt201ChallengesItemState];
+export declare const CreateAuthAttempt201ChallengesItemState: {
+    readonly pending: "pending";
+    readonly failed: "failed";
+    readonly expired: "expired";
+};
+//# sourceMappingURL=createAuthAttempt201ChallengesItemState.d.ts.map

package/dist/generated/model/createAuthAttempt201ChallengesItemState.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createAuthAttempt201ChallengesItemState.d.ts","sourceRoot":"","sources":["../../../src/generated/model/createAuthAttempt201ChallengesItemState.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,uCAAuC,GACjD,CAAC,OAAO,uCAAuC,CAAC,CAAC,MAAM,OAAO,uCAAuC,CAAC,CAAC;AAEzG,eAAO,MAAM,uCAAuC;aAClD,OAAO,EAAE,SAAS;aAClB,MAAM,EAAE,QAAQ;aAChB,OAAO,EAAE,SAAS;CACV,CAAC"}

package/dist/generated/model/createAuthAttempt201CompletedFactorsItem.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { CreateAuthAttempt201CompletedFactorsItemMethod } from "./createAuthAttempt201CompletedFactorsItemMethod";
+import type { CreateAuthAttempt201CompletedFactorsItemPayload } from "./createAuthAttempt201CompletedFactorsItemPayload";
+/**
+ * A successfully verified authentication factor with verification metadata.
+Method-specific details are included in the `payload` field.
+
+ */
+export type CreateAuthAttempt201CompletedFactorsItem = {
+    /** An authentication factor method. */
+    method: CreateAuthAttempt201CompletedFactorsItemMethod;
+    /** When this factor was successfully verified */
+    verified_at: string;
+    /** Method-specific factor metadata. Structure depends on the `method` field.
+    - `identifier`: includes user_id
+    - `password`: no additional data
+    - `passkey`: includes credential details and verification flags
+     */
+    payload?: CreateAuthAttempt201CompletedFactorsItemPayload;
+};
+//# sourceMappingURL=createAuthAttempt201CompletedFactorsItem.d.ts.map

package/dist/generated/model/createAuthAttempt201CompletedFactorsItem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createAuthAttempt201CompletedFactorsItem.d.ts","sourceRoot":"","sources":["../../../src/generated/model/createAuthAttempt201CompletedFactorsItem.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,8CAA8C,EAAE,MAAM,kDAAkD,CAAC;AACvH,OAAO,KAAK,EAAE,+CAA+C,EAAE,MAAM,mDAAmD,CAAC;AAEzH;;;;GAIG;AACH,MAAM,MAAM,wCAAwC,GAAG;IACrD,uCAAuC;IACvC,MAAM,EAAE,8CAA8C,CAAC;IACvD,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,OAAO,CAAC,EAAE,+CAA+C,CAAC;CAC3D,CAAC"}

package/dist/generated/model/createAuthAttempt201CompletedFactorsItemMethod.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * An authentication factor method.
+ */
+export type CreateAuthAttempt201CompletedFactorsItemMethod = (typeof CreateAuthAttempt201CompletedFactorsItemMethod)[keyof typeof CreateAuthAttempt201CompletedFactorsItemMethod];
+export declare const CreateAuthAttempt201CompletedFactorsItemMethod: {
+    readonly identifier: "identifier";
+    readonly password: "password";
+    readonly passkey: "passkey";
+};
+//# sourceMappingURL=createAuthAttempt201CompletedFactorsItemMethod.d.ts.map

package/dist/generated/model/createAuthAttempt201CompletedFactorsItemMethod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createAuthAttempt201CompletedFactorsItemMethod.d.ts","sourceRoot":"","sources":["../../../src/generated/model/createAuthAttempt201CompletedFactorsItemMethod.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,MAAM,8CAA8C,GACxD,CAAC,OAAO,8CAA8C,CAAC,CAAC,MAAM,OAAO,8CAA8C,CAAC,CAAC;AAEvH,eAAO,MAAM,8CAA8C;aACzD,UAAU,EAAE,YAAY;aACxB,QAAQ,EAAE,UAAU;aACpB,OAAO,EAAE,SAAS;CACV,CAAC"}

package/dist/generated/model/createAuthAttempt201CompletedFactorsItemPayload.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Method-specific factor metadata. Structure depends on the `method` field.
+- `identifier`: includes user_id
+- `password`: no additional data
+- `passkey`: includes credential details and verification flags
+
+ */
+export type CreateAuthAttempt201CompletedFactorsItemPayload = {
+    /** @pattern ^user_[a-zA-Z0-9_-]+$ */
+    user_id: string;
+} | {
+    [key: string]: unknown;
+} | {
+    /** The credential ID that was used */
+    credential_id: string;
+    /** Whether user verification was performed (PIN/biometric) */
+    user_verified: boolean;
+    /** Whether the credential is backup eligible (can be synced) */
+    backup_eligible?: boolean;
+    /** Whether the credential is currently backed up */
+    backup_state?: boolean;
+    /** Authenticator attachment modality */
+    authenticator_attachment?: "platform" | "cross-platform";
+};
+//# sourceMappingURL=createAuthAttempt201CompletedFactorsItemPayload.d.ts.map