@zitadel/api 0.0.0

package/dist/generated/model/exchangeHandoffDefaultDetails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchangeHandoffDefaultDetails.d.ts","sourceRoot":"","sources":["../../../src/generated/model/exchangeHandoffDefaultDetails.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,MAAM,6BAA6B,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC"}

package/dist/generated/model/exchangeHandoffParams.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+export type ExchangeHandoffParams = {
+    /**
+     * The unique identifier of the project
+     * @pattern ^[a-zA-Z0-9_-]+$
+     */
+    project_id: string;
+};
+//# sourceMappingURL=exchangeHandoffParams.d.ts.map

package/dist/generated/model/exchangeHandoffParams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchangeHandoffParams.d.ts","sourceRoot":"","sources":["../../../src/generated/model/exchangeHandoffParams.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,qBAAqB,GAAG;IAClC;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC"}

package/dist/generated/model/getAuthAttempt200.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { GetAuthAttempt200ChallengesItem } from "./getAuthAttempt200ChallengesItem";
+import type { GetAuthAttempt200CompletedFactorsItem } from "./getAuthAttempt200CompletedFactorsItem";
+import type { GetAuthAttempt200RequiredFactorsItem } from "./getAuthAttempt200RequiredFactorsItem";
+import type { GetAuthAttempt200State } from "./getAuthAttempt200State";
+/**
+ * The current state of an authentication attempt.
+
+An attempt is an ephemeral state machine (15-minute TTL) that drives a single authentication round.
+It accepts factor challenges, verifies proofs, and completes into a handoff token.
+Clients drive the attempt by:
+1. Issuing challenges: POST /auth_attempts/{attempt_id}/challenges
+2. Verifying proofs: POST /auth_attempts/{attempt_id}/challenges/{challenge_id}/verify
+3. Completing: POST /auth_attempts/{attempt_id}/handoff
+
+ */
+export type GetAuthAttempt200 = {
+    /**
+     * Unique identifier for this authentication attempt
+     * @pattern ^[a-zA-Z0-9_-]+$
+     */
+    attempt_id: string;
+    /** @pattern ^[a-zA-Z0-9_-]+$ */
+    project_id: string;
+    /** Overall state of the authentication attempt:
+    - `in_progress`: factors are still being collected; continue issuing challenges.
+    - `completed`: all required factors have been verified; the attempt is ready for handoff.
+    - `failed`: the attempt has failed (e.g. too many failed proofs) and cannot be continued.
+    - `expired`: the 15-minute TTL has been exceeded.
+     */
+    state: GetAuthAttempt200State;
+    /** The session being authenticated into. Either newly created or passed in on POST.
+    For step-up (re-auth), this is the existing session_id provided on creation.
+     */
+    session_id?: string | null;
+    /** The user ID, if known at this point in the flow.
+    Null until an identifier challenge has been verified.
+     */
+    user_id?: string | null;
+    /** The authentication factor methods that the project policy requires in order
+    to complete this attempt. Computed by the server from the project's auth policy.
+    Clients should use this to determine which challenges still need to be issued.
+     */
+    required_factors?: GetAuthAttempt200RequiredFactorsItem[];
+    /** The factors that have been successfully verified in this attempt so far.
+    Each item includes method-specific metadata in the payload field.
+  
+    The flow engine uses verified_at timestamps to enforce time-based policies, such as
+    requiring password verification within the last 5 minutes for step-up auth to
+    access sensitive operations.
+  
+    A factor appears here once its challenge reaches `verified` state.
+     */
+    completed_factors?: GetAuthAttempt200CompletedFactorsItem[];
+    /** All challenges issued within this attempt, in creation order.
+    Use this to track the state of each factor challenge (pending, verified, failed, expired).
+     */
+    challenges?: GetAuthAttempt200ChallengesItem[];
+    /** When this attempt expires (15-minute TTL from creation) */
+    expires_at?: string;
+    /** When this attempt was created */
+    created_at: string;
+};
+//# sourceMappingURL=getAuthAttempt200.d.ts.map

package/dist/generated/model/getAuthAttempt200.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAuthAttempt200.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getAuthAttempt200.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACzF,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,yCAAyC,CAAC;AACrG,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,wCAAwC,CAAC;AACnG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAEvE;;;;;;;;;;GAUG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,KAAK,EAAE,sBAAsB,CAAC;IAC9B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,oCAAoC,EAAE,CAAC;IAC1D;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,qCAAqC,EAAE,CAAC;IAC5D;;OAEG;IACH,UAAU,CAAC,EAAE,+BAA+B,EAAE,CAAC;IAC/C,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC"}

package/dist/generated/model/getAuthAttempt200ChallengesItem.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { GetAuthAttempt200ChallengesItemMethod } from "./getAuthAttempt200ChallengesItemMethod";
+import type { GetAuthAttempt200ChallengesItemPayload } from "./getAuthAttempt200ChallengesItemPayload";
+import type { GetAuthAttempt200ChallengesItemState } from "./getAuthAttempt200ChallengesItemState";
+/**
+ * A factor challenge issued within an authentication attempt.
+
+A challenge presents a single-factor verification prompt (password entry, TOTP code, passkey assertion, etc.).
+The client verifies the proof by POST /auth_attempts/{attempt_id}/challenges/{challenge_id}/verify.
+
+ */
+export type GetAuthAttempt200ChallengesItem = {
+    /**
+     * Unique identifier for this challenge
+     * @pattern ^[a-zA-Z0-9_-]+$
+     */
+    challenge_id: string;
+    /** An authentication factor method. */
+    method: GetAuthAttempt200ChallengesItemMethod;
+    /** Current state of this challenge:
+    - `pending`: awaiting proof submission
+    - `failed`: proof rejected (invalid credential, wrong code, etc.)
+    - `expired`: challenge TTL exceeded without verification
+     */
+    state: GetAuthAttempt200ChallengesItemState;
+    /** When this challenge was issued */
+    created_at: string;
+    /** When this challenge expires */
+    expires_at?: string | null;
+    /** Method-specific challenge data. Structure depends on the `method` field.
+    - `identifier`, `password`: null (no additional data needed)
+    - `passkey`: WebAuthn challenge and credential options
+    - `idp`: Authorization URL and provider information
+     */
+    payload?: GetAuthAttempt200ChallengesItemPayload;
+};
+//# sourceMappingURL=getAuthAttempt200ChallengesItem.d.ts.map

package/dist/generated/model/getAuthAttempt200ChallengesItem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAuthAttempt200ChallengesItem.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getAuthAttempt200ChallengesItem.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,yCAAyC,CAAC;AACrG,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,0CAA0C,CAAC;AACvG,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,wCAAwC,CAAC;AAEnG;;;;;;GAMG;AACH,MAAM,MAAM,+BAA+B,GAAG;IAC5C;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,MAAM,EAAE,qCAAqC,CAAC;IAC9C;;;;OAIG;IACH,KAAK,EAAE,oCAAoC,CAAC;IAC5C,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;OAIG;IACH,OAAO,CAAC,EAAE,sCAAsC,CAAC;CAClD,CAAC"}

package/dist/generated/model/getAuthAttempt200ChallengesItemMethod.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * An authentication factor method.
+ */
+export type GetAuthAttempt200ChallengesItemMethod = (typeof GetAuthAttempt200ChallengesItemMethod)[keyof typeof GetAuthAttempt200ChallengesItemMethod];
+export declare const GetAuthAttempt200ChallengesItemMethod: {
+    readonly identifier: "identifier";
+    readonly password: "password";
+    readonly passkey: "passkey";
+};
+//# sourceMappingURL=getAuthAttempt200ChallengesItemMethod.d.ts.map

package/dist/generated/model/getAuthAttempt200ChallengesItemMethod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAuthAttempt200ChallengesItemMethod.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getAuthAttempt200ChallengesItemMethod.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,MAAM,qCAAqC,GAC/C,CAAC,OAAO,qCAAqC,CAAC,CAAC,MAAM,OAAO,qCAAqC,CAAC,CAAC;AAErG,eAAO,MAAM,qCAAqC;aAChD,UAAU,EAAE,YAAY;aACxB,QAAQ,EAAE,UAAU;aACpB,OAAO,EAAE,SAAS;CACV,CAAC"}

package/dist/generated/model/getAuthAttempt200ChallengesItemPayload.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Method-specific challenge data. Structure depends on the `method` field.
+- `identifier`, `password`: null (no additional data needed)
+- `passkey`: WebAuthn challenge and credential options
+- `idp`: Authorization URL and provider information
+
+ */
+export type GetAuthAttempt200ChallengesItemPayload = {
+    [key: string]: unknown;
+} | {
+    /** Contains the options for the Assertion Generation (dictionary PublicKeyCredentialRequestOptions).
+See also: https://www.w3.org/TR/webauthn/#dictdef-publickeycredentialrequestoptions
+ */
+    public_key: {
+        /** Base64-encoded WebAuthn challenge */
+        challenge: string;
+        /** List of credential IDs that can be used for this authentication */
+        allowed_credentials?: {
+            /** Base64-encoded credential ID */
+            id: string;
+            type: "public-key";
+        }[];
+        /** User verification requirement for this challenge */
+        user_verification?: "required" | "preferred" | "discouraged";
+        /** Relying Party ID for WebAuthn */
+        rp_id?: string;
+    };
+};
+//# sourceMappingURL=getAuthAttempt200ChallengesItemPayload.d.ts.map

package/dist/generated/model/getAuthAttempt200ChallengesItemPayload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAuthAttempt200ChallengesItemPayload.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getAuthAttempt200ChallengesItemPayload.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,sCAAsC,GAC9C;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GAC1B;IACE;;GAED;IACC,UAAU,EAAE;QACV,wCAAwC;QACxC,SAAS,EAAE,MAAM,CAAC;QAClB,sEAAsE;QACtE,mBAAmB,CAAC,EAAE;YACpB,mCAAmC;YACnC,EAAE,EAAE,MAAM,CAAC;YACX,IAAI,EAAE,YAAY,CAAC;SACpB,EAAE,CAAC;QACJ,uDAAuD;QACvD,iBAAiB,CAAC,EAAE,UAAU,GAAG,WAAW,GAAG,aAAa,CAAC;QAC7D,oCAAoC;QACpC,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH,CAAC"}

package/dist/generated/model/getAuthAttempt200ChallengesItemState.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Current state of this challenge:
+- `pending`: awaiting proof submission
+- `failed`: proof rejected (invalid credential, wrong code, etc.)
+- `expired`: challenge TTL exceeded without verification
+
+ */
+export type GetAuthAttempt200ChallengesItemState = (typeof GetAuthAttempt200ChallengesItemState)[keyof typeof GetAuthAttempt200ChallengesItemState];
+export declare const GetAuthAttempt200ChallengesItemState: {
+    readonly pending: "pending";
+    readonly failed: "failed";
+    readonly expired: "expired";
+};
+//# sourceMappingURL=getAuthAttempt200ChallengesItemState.d.ts.map

package/dist/generated/model/getAuthAttempt200ChallengesItemState.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAuthAttempt200ChallengesItemState.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getAuthAttempt200ChallengesItemState.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,oCAAoC,GAC9C,CAAC,OAAO,oCAAoC,CAAC,CAAC,MAAM,OAAO,oCAAoC,CAAC,CAAC;AAEnG,eAAO,MAAM,oCAAoC;aAC/C,OAAO,EAAE,SAAS;aAClB,MAAM,EAAE,QAAQ;aAChB,OAAO,EAAE,SAAS;CACV,CAAC"}

package/dist/generated/model/getAuthAttempt200CompletedFactorsItem.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { GetAuthAttempt200CompletedFactorsItemMethod } from "./getAuthAttempt200CompletedFactorsItemMethod";
+import type { GetAuthAttempt200CompletedFactorsItemPayload } from "./getAuthAttempt200CompletedFactorsItemPayload";
+/**
+ * A successfully verified authentication factor with verification metadata.
+Method-specific details are included in the `payload` field.
+
+ */
+export type GetAuthAttempt200CompletedFactorsItem = {
+    /** An authentication factor method. */
+    method: GetAuthAttempt200CompletedFactorsItemMethod;
+    /** When this factor was successfully verified */
+    verified_at: string;
+    /** Method-specific factor metadata. Structure depends on the `method` field.
+    - `identifier`: includes user_id
+    - `password`: no additional data
+    - `passkey`: includes credential details and verification flags
+     */
+    payload?: GetAuthAttempt200CompletedFactorsItemPayload;
+};
+//# sourceMappingURL=getAuthAttempt200CompletedFactorsItem.d.ts.map

package/dist/generated/model/getAuthAttempt200CompletedFactorsItem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAuthAttempt200CompletedFactorsItem.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getAuthAttempt200CompletedFactorsItem.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,2CAA2C,EAAE,MAAM,+CAA+C,CAAC;AACjH,OAAO,KAAK,EAAE,4CAA4C,EAAE,MAAM,gDAAgD,CAAC;AAEnH;;;;GAIG;AACH,MAAM,MAAM,qCAAqC,GAAG;IAClD,uCAAuC;IACvC,MAAM,EAAE,2CAA2C,CAAC;IACpD,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,OAAO,CAAC,EAAE,4CAA4C,CAAC;CACxD,CAAC"}

package/dist/generated/model/getAuthAttempt200CompletedFactorsItemMethod.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * An authentication factor method.
+ */
+export type GetAuthAttempt200CompletedFactorsItemMethod = (typeof GetAuthAttempt200CompletedFactorsItemMethod)[keyof typeof GetAuthAttempt200CompletedFactorsItemMethod];
+export declare const GetAuthAttempt200CompletedFactorsItemMethod: {
+    readonly identifier: "identifier";
+    readonly password: "password";
+    readonly passkey: "passkey";
+};
+//# sourceMappingURL=getAuthAttempt200CompletedFactorsItemMethod.d.ts.map

package/dist/generated/model/getAuthAttempt200CompletedFactorsItemMethod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAuthAttempt200CompletedFactorsItemMethod.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getAuthAttempt200CompletedFactorsItemMethod.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,MAAM,2CAA2C,GACrD,CAAC,OAAO,2CAA2C,CAAC,CAAC,MAAM,OAAO,2CAA2C,CAAC,CAAC;AAEjH,eAAO,MAAM,2CAA2C;aACtD,UAAU,EAAE,YAAY;aACxB,QAAQ,EAAE,UAAU;aACpB,OAAO,EAAE,SAAS;CACV,CAAC"}

package/dist/generated/model/getAuthAttempt200CompletedFactorsItemPayload.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Method-specific factor metadata. Structure depends on the `method` field.
+- `identifier`: includes user_id
+- `password`: no additional data
+- `passkey`: includes credential details and verification flags
+
+ */
+export type GetAuthAttempt200CompletedFactorsItemPayload = {
+    /** @pattern ^user_[a-zA-Z0-9_-]+$ */
+    user_id: string;
+} | {
+    [key: string]: unknown;
+} | {
+    /** The credential ID that was used */
+    credential_id: string;
+    /** Whether user verification was performed (PIN/biometric) */
+    user_verified: boolean;
+    /** Whether the credential is backup eligible (can be synced) */
+    backup_eligible?: boolean;
+    /** Whether the credential is currently backed up */
+    backup_state?: boolean;
+    /** Authenticator attachment modality */
+    authenticator_attachment?: "platform" | "cross-platform";
+};
+//# sourceMappingURL=getAuthAttempt200CompletedFactorsItemPayload.d.ts.map

package/dist/generated/model/getAuthAttempt200CompletedFactorsItemPayload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAuthAttempt200CompletedFactorsItemPayload.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getAuthAttempt200CompletedFactorsItemPayload.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,4CAA4C,GACpD;IACE,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;CACjB,GACD;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GAC1B;IACE,sCAAsC;IACtC,aAAa,EAAE,MAAM,CAAC;IACtB,8DAA8D;IAC9D,aAAa,EAAE,OAAO,CAAC;IACvB,gEAAgE;IAChE,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,oDAAoD;IACpD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,wCAAwC;IACxC,wBAAwB,CAAC,EAAE,UAAU,GAAG,gBAAgB,CAAC;CAC1D,CAAC"}

package/dist/generated/model/getAuthAttempt200RequiredFactorsItem.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * An authentication factor method.
+ */
+export type GetAuthAttempt200RequiredFactorsItem = (typeof GetAuthAttempt200RequiredFactorsItem)[keyof typeof GetAuthAttempt200RequiredFactorsItem];
+export declare const GetAuthAttempt200RequiredFactorsItem: {
+    readonly identifier: "identifier";
+    readonly password: "password";
+    readonly passkey: "passkey";
+};
+//# sourceMappingURL=getAuthAttempt200RequiredFactorsItem.d.ts.map

package/dist/generated/model/getAuthAttempt200RequiredFactorsItem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAuthAttempt200RequiredFactorsItem.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getAuthAttempt200RequiredFactorsItem.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,MAAM,oCAAoC,GAC9C,CAAC,OAAO,oCAAoC,CAAC,CAAC,MAAM,OAAO,oCAAoC,CAAC,CAAC;AAEnG,eAAO,MAAM,oCAAoC;aAC/C,UAAU,EAAE,YAAY;aACxB,QAAQ,EAAE,UAAU;aACpB,OAAO,EAAE,SAAS;CACV,CAAC"}

package/dist/generated/model/getAuthAttempt200State.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Overall state of the authentication attempt:
+- `in_progress`: factors are still being collected; continue issuing challenges.
+- `completed`: all required factors have been verified; the attempt is ready for handoff.
+- `failed`: the attempt has failed (e.g. too many failed proofs) and cannot be continued.
+- `expired`: the 15-minute TTL has been exceeded.
+
+ */
+export type GetAuthAttempt200State = (typeof GetAuthAttempt200State)[keyof typeof GetAuthAttempt200State];
+export declare const GetAuthAttempt200State: {
+    readonly in_progress: "in_progress";
+    readonly completed: "completed";
+    readonly failed: "failed";
+    readonly expired: "expired";
+};
+//# sourceMappingURL=getAuthAttempt200State.d.ts.map

package/dist/generated/model/getAuthAttempt200State.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAuthAttempt200State.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getAuthAttempt200State.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;GAOG;AACH,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,OAAO,sBAAsB,CAAC,CAAC;AAEvE,eAAO,MAAM,sBAAsB;aACjC,WAAW,EAAE,aAAa;aAC1B,SAAS,EAAE,WAAW;aACtB,MAAM,EAAE,QAAQ;aAChB,OAAO,EAAE,SAAS;CACV,CAAC"}

package/dist/generated/model/getAuthAttemptDefault.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+export type GetAuthAttemptDefault = ({
+    /** Stable machine-readable error code. */
+    code: string;
+    /** Human-readable explanation of the error. */
+    message: string;
+    /** Additional error-specific context. */
+    details?: {
+        [key: string]: unknown;
+    };
+} & {
+    code: "att.not_found";
+}) | ({
+    /** Stable machine-readable error code. */
+    code: string;
+    /** Human-readable explanation of the error. */
+    message: string;
+    /** Additional error-specific context. */
+    details?: {
+        [key: string]: unknown;
+    };
+} & {
+    code: "internal";
+});
+//# sourceMappingURL=getAuthAttemptDefault.d.ts.map

package/dist/generated/model/getAuthAttemptDefault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAuthAttemptDefault.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getAuthAttemptDefault.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,qBAAqB,GAC7B,CAAC;IACC,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,OAAO,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;CACtC,GAAG;IACF,IAAI,EAAE,eAAe,CAAC;CACvB,CAAC,GACF,CAAC;IACC,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,OAAO,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;CACtC,GAAG;IACF,IAAI,EAAE,UAAU,CAAC;CAClB,CAAC,CAAC"}

package/dist/generated/model/getFlowDefinition200.d.ts

@@ -0,0 +1,162 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+export type GetFlowDefinition200 = {
+    /**
+       * Stable identifier for this flow, used as the target of cross-flow
+    `switch` and `pivot` transitions. Renaming is not supported — the
+    `name` is part of the public contract another definition may
+    reference. Acts as the human display label as well; no separate slug.
+  
+       * @pattern ^[a-z][a-z0-9-]*$
+       */
+    name: string;
+    /** User schema this flow operates on. Step `fields` reference properties
+    defined in this schema. The engine resolves field types, validation,
+    and implicit outcomes from schema annotations at runtime.
+     */
+    user_schema: string;
+    /** Maps each purpose this definition handles to its entry-point step.
+    Keys are purpose names; values must match a `name` in `steps`. A
+    definition can serve multiple purposes (e.g. a combined login/register
+    flow) by listing one entry per purpose.
+     */
+    purposes: Partial<Record<"login" | "register" | "recovery" | "profiling" | "reauth" | "link_account", string>>;
+    /** Scopes which teams or apps this flow definition applies to. Empty or
+    omitted fields mean "no restriction"; when both are empty the definition
+    matches every request in the project. The engine picks the most specific
+    matching definition: app > team > project-wide.
+     */
+    audience?: {
+        /** Restrict to specific teams (organizations). Empty means no team restriction. */
+        team_ids?: string[];
+        /** Restrict to specific applications. Empty means no app restriction. */
+        app_ids?: string[];
+    };
+    /**
+       * Ordered list of steps in this flow. The order is for human readability —
+    actual step sequencing is determined by transitions.
+  
+       * @minItems 1
+       */
+    steps: {
+        /** Unique step identifier within this flow. Used as transition targets
+      and returned in the API response as `step.name`.
+       */
+        name: string;
+        /** Schema property names to collect from the user. Each entry references
+      a property in the flow's user schema. The engine resolves field type,
+      validation rules, and implicit outcomes from schema annotations
+      (e.g. a property with `x-unique` set implies a `user_not_found`
+      transition outcome).
+       */
+        fields?: string[];
+        /** Actions the user can take. Keyed by action name.
+      The action name is what the frontend sends back in the submit request.
+      If omitted, the engine provides a default `submit` action.
+       */
+        actions?: {
+            [key: string]: {
+                /** Marks this as the default/primary action. The runtime template uses
+          this hint to choose visual emphasis. At most one action per step
+          should be primary; this is not enforced here.
+           */
+                primary?: boolean;
+                /** Optional localization key override for the action's label. When
+          omitted, the engine derives a key from the step and action names.
+          Display text is resolved client-side from a locale dictionary, never
+          by the engine.
+           */
+                text_key?: string;
+            };
+        };
+        /** Security gates that must be satisfied before submission. Keyed by gate
+      name. Each gate selects a kind (e.g. "captcha") and provider-specific
+      configuration. The engine may also inject gates dynamically based on
+      policy.
+       */
+        gates?: {
+            [key: string]: {
+                /** The gate category. Only `captcha` is currently defined. Authenticator
+          ceremonies (e.g. passkey) are modelled as credential auth_attempts via
+          `x-credential` on a field, not as gates.
+           */
+                kind: "captcha";
+                /** Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,
+          `hcaptcha`. The engine looks up an implementation in its provider
+          registry.
+           */
+                provider: string;
+                /** Provider-specific configuration consumed by the implementation when
+          issuing the per-render challenge. Opaque to the engine.
+           */
+                config?: {
+                    [key: string]: unknown;
+                };
+            };
+        };
+        /** Available SSO identity providers for this step. */
+        sso_providers?: {
+            /** Provider instance identifier. */
+            id: string;
+            /** Display name for the provider. */
+            name: string;
+            /** Template hint for rendering (logo, colors). */
+            template: string;
+        }[];
+        /** Server-side mutation to execute when this step completes successfully.
+      Runs after field validation passes, before the transition fires.
+    
+      - create_user: creates the user record (registration flows)
+       */
+        on_success?: "create_user";
+        /** Marks this as a terminal step. Tells the frontend what to do:
+      - redirect: navigate to redirect_uri (OIDC/SAML callback done)
+      - show: render as a success/info screen
+       */
+        complete?: "redirect" | "show";
+        /** Maps action/outcome names to their transition descriptor.
+    
+      Keys match action names from the `actions` dict. Additional keys
+      come from implicit outcomes based on schema annotations
+      (e.g. `user_not_found` from `x-unique` fields) and engine
+      events (e.g. `sso`, `callback`).
+       */
+        transitions?: {
+            [key: string]: {
+                /** Step name within this flow (when `action` is null), or the name
+          of another flow (when `action` is `switch` or `pivot`).
+           */
+                target: string;
+                /** How to interpret `target`:
+          - null (omitted): transition to a step in the current flow.
+          - switch: replace the current flow with the target flow.
+            No return — the current flow is discarded.
+            Example: login ↔ register.
+          - pivot: push the target flow onto the stack. The current flow
+            is paused and resumes when the target flow completes (auto-pop).
+            Example: login → recovery → back to login.
+           */
+                action?: "switch" | "pivot" | null;
+            };
+        };
+    }[];
+} & {
+    /** Unique identifier for the flow definition. */
+    id: string;
+    /** Identifier of the project this flow definition belongs to. */
+    project_id: string;
+    /** URI of the flow definition schema this definition was authored against.
+    If the schema_uri was not provided in the request, the flow definition is validated against the latest version of the schema, and the response includes the schema_uri of the latest version.
+     */
+    schema_uri: string;
+    /** Status of the flow definition. */
+    status: string;
+    created_at: string;
+    updated_at: string;
+};
+//# sourceMappingURL=getFlowDefinition200.d.ts.map

package/dist/generated/model/getFlowDefinition200.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFlowDefinition200.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getFlowDefinition200.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,oBAAoB,GAAG;IACjC;;;;;;;SAOK;IACL,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,QAAQ,EAAE,OAAO,CACf,MAAM,CAAC,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,GAAG,cAAc,EAAE,MAAM,CAAC,CAC5F,CAAC;IACF;;;;OAIG;IACH,QAAQ,CAAC,EAAE;QACT,mFAAmF;QACnF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,yEAAyE;QACzE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;KACpB,CAAC;IACF;;;;;SAKK;IACL,KAAK,EAAE;QACL;;SAEC;QACD,IAAI,EAAE,MAAM,CAAC;QACb;;;;;SAKC;QACD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB;;;SAGC;QACD,OAAO,CAAC,EAAE;YACR,CAAC,GAAG,EAAE,MAAM,GAAG;gBACb;;;aAGH;gBACG,OAAO,CAAC,EAAE,OAAO,CAAC;gBAClB;;;;aAIH;gBACG,QAAQ,CAAC,EAAE,MAAM,CAAC;aACnB,CAAC;SACH,CAAC;QACF;;;;SAIC;QACD,KAAK,CAAC,EAAE;YACN,CAAC,GAAG,EAAE,MAAM,GAAG;gBACb;;;aAGH;gBACG,IAAI,EAAE,SAAS,CAAC;gBAChB;;;aAGH;gBACG,QAAQ,EAAE,MAAM,CAAC;gBACjB;;aAEH;gBACG,MAAM,CAAC,EAAE;oBAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;iBAAE,CAAC;aACrC,CAAC;SACH,CAAC;QACF,sDAAsD;QACtD,aAAa,CAAC,EAAE;YACd,oCAAoC;YACpC,EAAE,EAAE,MAAM,CAAC;YACX,qCAAqC;YACrC,IAAI,EAAE,MAAM,CAAC;YACb,kDAAkD;YAClD,QAAQ,EAAE,MAAM,CAAC;SAClB,EAAE,CAAC;QACJ;;;;SAIC;QACD,UAAU,CAAC,EAAE,aAAa,CAAC;QAC3B;;;SAGC;QACD,QAAQ,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;QAC/B;;;;;;SAMC;QACD,WAAW,CAAC,EAAE;YACZ,CAAC,GAAG,EAAE,MAAM,GAAG;gBACb;;aAEH;gBACG,MAAM,EAAE,MAAM,CAAC;gBACf;;;;;;;;aAQH;gBACG,MAAM,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,IAAI,CAAC;aACpC,CAAC;SACH,CAAC;KACH,EAAE,CAAC;CACL,GAAG;IACF,iDAAiD;IACjD,EAAE,EAAE,MAAM,CAAC;IACX,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC"}

package/dist/generated/model/getFlowDefinition404.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { GetFlowDefinition404Details } from "./getFlowDefinition404Details";
+/**
+ * Standard error payload returned for failed API requests.
+ */
+export type GetFlowDefinition404 = {
+    /** Stable machine-readable error code. */
+    code: string;
+    /** Human-readable explanation of the error. */
+    message: string;
+    /** Additional error-specific context. */
+    details?: GetFlowDefinition404Details;
+};
+//# sourceMappingURL=getFlowDefinition404.d.ts.map

package/dist/generated/model/getFlowDefinition404.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFlowDefinition404.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getFlowDefinition404.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAEjF;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,OAAO,CAAC,EAAE,2BAA2B,CAAC;CACvC,CAAC"}

package/dist/generated/model/getFlowDefinition404Details.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Additional error-specific context.
+ */
+export type GetFlowDefinition404Details = {
+    [key: string]: unknown;
+};
+//# sourceMappingURL=getFlowDefinition404Details.d.ts.map

package/dist/generated/model/getFlowDefinition404Details.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFlowDefinition404Details.d.ts","sourceRoot":"","sources":["../../../src/generated/model/getFlowDefinition404Details.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,MAAM,2BAA2B,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC"}