@zitadel/api 0.0.0

package/dist/generated/model/updateFlowDefinitionBodyStepsItem.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { UpdateFlowDefinitionBodyStepsItemActions } from "./updateFlowDefinitionBodyStepsItemActions";
+import type { UpdateFlowDefinitionBodyStepsItemComplete } from "./updateFlowDefinitionBodyStepsItemComplete";
+import type { UpdateFlowDefinitionBodyStepsItemGates } from "./updateFlowDefinitionBodyStepsItemGates";
+import type { UpdateFlowDefinitionBodyStepsItemOnSuccess } from "./updateFlowDefinitionBodyStepsItemOnSuccess";
+import type { UpdateFlowDefinitionBodyStepsItemSsoProvidersItem } from "./updateFlowDefinitionBodyStepsItemSsoProvidersItem";
+import type { UpdateFlowDefinitionBodyStepsItemTransitions } from "./updateFlowDefinitionBodyStepsItemTransitions";
+/**
+ * A step in a flow definition. This is the admin-authored configuration,
+not the runtime payload sent to the frontend.
+
+Steps are schema-driven: `fields` references properties from the flow's
+user schema, and the engine resolves field metadata (type, validation,
+implicit outcomes) from schema annotations at runtime.
+
+A step with only `complete` set is a terminal step. All other steps are
+rendered to the frontend as capability payloads.
+
+ */
+export type UpdateFlowDefinitionBodyStepsItem = {
+    /** Unique step identifier within this flow. Used as transition targets
+    and returned in the API response as `step.name`.
+     */
+    name: string;
+    /** Schema property names to collect from the user. Each entry references
+    a property in the flow's user schema. The engine resolves field type,
+    validation rules, and implicit outcomes from schema annotations
+    (e.g. a property with `x-unique` set implies a `user_not_found`
+    transition outcome).
+     */
+    fields?: string[];
+    /** Actions the user can take. Keyed by action name.
+    The action name is what the frontend sends back in the submit request.
+    If omitted, the engine provides a default `submit` action.
+     */
+    actions?: UpdateFlowDefinitionBodyStepsItemActions;
+    /** Security gates that must be satisfied before submission. Keyed by gate
+    name. Each gate selects a kind (e.g. "captcha") and provider-specific
+    configuration. The engine may also inject gates dynamically based on
+    policy.
+     */
+    gates?: UpdateFlowDefinitionBodyStepsItemGates;
+    /** Available SSO identity providers for this step. */
+    sso_providers?: UpdateFlowDefinitionBodyStepsItemSsoProvidersItem[];
+    /** Server-side mutation to execute when this step completes successfully.
+    Runs after field validation passes, before the transition fires.
+  
+    - create_user: creates the user record (registration flows)
+     */
+    on_success?: UpdateFlowDefinitionBodyStepsItemOnSuccess;
+    /** Marks this as a terminal step. Tells the frontend what to do:
+    - redirect: navigate to redirect_uri (OIDC/SAML callback done)
+    - show: render as a success/info screen
+     */
+    complete?: UpdateFlowDefinitionBodyStepsItemComplete;
+    /** Maps action/outcome names to their transition descriptor.
+  
+    Keys match action names from the `actions` dict. Additional keys
+    come from implicit outcomes based on schema annotations
+    (e.g. `user_not_found` from `x-unique` fields) and engine
+    events (e.g. `sso`, `callback`).
+     */
+    transitions?: UpdateFlowDefinitionBodyStepsItemTransitions;
+};
+//# sourceMappingURL=updateFlowDefinitionBodyStepsItem.d.ts.map

package/dist/generated/model/updateFlowDefinitionBodyStepsItem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinitionBodyStepsItem.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinitionBodyStepsItem.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,4CAA4C,CAAC;AAC3G,OAAO,KAAK,EAAE,yCAAyC,EAAE,MAAM,6CAA6C,CAAC;AAC7G,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,0CAA0C,CAAC;AACvG,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC/G,OAAO,KAAK,EAAE,iDAAiD,EAAE,MAAM,qDAAqD,CAAC;AAC7H,OAAO,KAAK,EAAE,4CAA4C,EAAE,MAAM,gDAAgD,CAAC;AAEnH;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,iCAAiC,GAAG;IAC9C;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;OAGG;IACH,OAAO,CAAC,EAAE,wCAAwC,CAAC;IACnD;;;;OAIG;IACH,KAAK,CAAC,EAAE,sCAAsC,CAAC;IAC/C,sDAAsD;IACtD,aAAa,CAAC,EAAE,iDAAiD,EAAE,CAAC;IACpE;;;;OAIG;IACH,UAAU,CAAC,EAAE,0CAA0C,CAAC;IACxD;;;OAGG;IACH,QAAQ,CAAC,EAAE,yCAAyC,CAAC;IACrD;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,4CAA4C,CAAC;CAC5D,CAAC"}

package/dist/generated/model/updateFlowDefinitionBodyStepsItemActions.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Actions the user can take. Keyed by action name.
+The action name is what the frontend sends back in the submit request.
+If omitted, the engine provides a default `submit` action.
+
+ */
+export type UpdateFlowDefinitionBodyStepsItemActions = {
+    [key: string]: {
+        /** Marks this as the default/primary action. The runtime template uses
+      this hint to choose visual emphasis. At most one action per step
+      should be primary; this is not enforced here.
+       */
+        primary?: boolean;
+        /** Optional localization key override for the action's label. When
+      omitted, the engine derives a key from the step and action names.
+      Display text is resolved client-side from a locale dictionary, never
+      by the engine.
+       */
+        text_key?: string;
+    };
+};
+//# sourceMappingURL=updateFlowDefinitionBodyStepsItemActions.d.ts.map

package/dist/generated/model/updateFlowDefinitionBodyStepsItemActions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinitionBodyStepsItemActions.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinitionBodyStepsItemActions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;GAKG;AACH,MAAM,MAAM,wCAAwC,GAAG;IACrD,CAAC,GAAG,EAAE,MAAM,GAAG;QACb;;;SAGC;QACD,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB;;;;SAIC;QACD,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH,CAAC"}

package/dist/generated/model/updateFlowDefinitionBodyStepsItemComplete.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Marks this as a terminal step. Tells the frontend what to do:
+- redirect: navigate to redirect_uri (OIDC/SAML callback done)
+- show: render as a success/info screen
+
+ */
+export type UpdateFlowDefinitionBodyStepsItemComplete = (typeof UpdateFlowDefinitionBodyStepsItemComplete)[keyof typeof UpdateFlowDefinitionBodyStepsItemComplete];
+export declare const UpdateFlowDefinitionBodyStepsItemComplete: {
+    readonly redirect: "redirect";
+    readonly show: "show";
+};
+//# sourceMappingURL=updateFlowDefinitionBodyStepsItemComplete.d.ts.map

package/dist/generated/model/updateFlowDefinitionBodyStepsItemComplete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinitionBodyStepsItemComplete.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinitionBodyStepsItemComplete.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;GAKG;AACH,MAAM,MAAM,yCAAyC,GACnD,CAAC,OAAO,yCAAyC,CAAC,CAAC,MAAM,OAAO,yCAAyC,CAAC,CAAC;AAE7G,eAAO,MAAM,yCAAyC;aACpD,QAAQ,EAAE,UAAU;aACpB,IAAI,EAAE,MAAM;CACJ,CAAC"}

package/dist/generated/model/updateFlowDefinitionBodyStepsItemGates.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { UpdateFlowDefinitionBodyStepsItemGatesConfig } from "./updateFlowDefinitionBodyStepsItemGatesConfig";
+import type { UpdateFlowDefinitionBodyStepsItemGatesKind } from "./updateFlowDefinitionBodyStepsItemGatesKind";
+/**
+ * Security gates that must be satisfied before submission. Keyed by gate
+name. Each gate selects a kind (e.g. "captcha") and provider-specific
+configuration. The engine may also inject gates dynamically based on
+policy.
+
+ */
+export type UpdateFlowDefinitionBodyStepsItemGates = {
+    [key: string]: {
+        /** The gate category. Only `captcha` is currently defined. Authenticator
+      ceremonies (e.g. passkey) are modelled as credential auth_attempts via
+      `x-credential` on a field, not as gates.
+       */
+        kind: UpdateFlowDefinitionBodyStepsItemGatesKind;
+        /** Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,
+      `hcaptcha`. The engine looks up an implementation in its provider
+      registry.
+       */
+        provider: string;
+        /** Provider-specific configuration consumed by the implementation when
+      issuing the per-render challenge. Opaque to the engine.
+       */
+        config?: UpdateFlowDefinitionBodyStepsItemGatesConfig;
+    };
+};
+//# sourceMappingURL=updateFlowDefinitionBodyStepsItemGates.d.ts.map

package/dist/generated/model/updateFlowDefinitionBodyStepsItemGates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinitionBodyStepsItemGates.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinitionBodyStepsItemGates.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,4CAA4C,EAAE,MAAM,gDAAgD,CAAC;AACnH,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE/G;;;;;;GAMG;AACH,MAAM,MAAM,sCAAsC,GAAG;IACnD,CAAC,GAAG,EAAE,MAAM,GAAG;QACb;;;SAGC;QACD,IAAI,EAAE,0CAA0C,CAAC;QACjD;;;SAGC;QACD,QAAQ,EAAE,MAAM,CAAC;QACjB;;SAEC;QACD,MAAM,CAAC,EAAE,4CAA4C,CAAC;KACvD,CAAC;CACH,CAAC"}

package/dist/generated/model/updateFlowDefinitionBodyStepsItemGatesConfig.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Provider-specific configuration consumed by the implementation when
+issuing the per-render challenge. Opaque to the engine.
+
+ */
+export type UpdateFlowDefinitionBodyStepsItemGatesConfig = {
+    [key: string]: unknown;
+};
+//# sourceMappingURL=updateFlowDefinitionBodyStepsItemGatesConfig.d.ts.map

package/dist/generated/model/updateFlowDefinitionBodyStepsItemGatesConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinitionBodyStepsItemGatesConfig.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinitionBodyStepsItemGatesConfig.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;GAIG;AACH,MAAM,MAAM,4CAA4C,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC"}

package/dist/generated/model/updateFlowDefinitionBodyStepsItemGatesKind.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * The gate category. Only `captcha` is currently defined. Authenticator
+ceremonies (e.g. passkey) are modelled as credential auth_attempts via
+`x-credential` on a field, not as gates.
+
+ */
+export type UpdateFlowDefinitionBodyStepsItemGatesKind = (typeof UpdateFlowDefinitionBodyStepsItemGatesKind)[keyof typeof UpdateFlowDefinitionBodyStepsItemGatesKind];
+export declare const UpdateFlowDefinitionBodyStepsItemGatesKind: {
+    readonly captcha: "captcha";
+};
+//# sourceMappingURL=updateFlowDefinitionBodyStepsItemGatesKind.d.ts.map

package/dist/generated/model/updateFlowDefinitionBodyStepsItemGatesKind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinitionBodyStepsItemGatesKind.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinitionBodyStepsItemGatesKind.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;GAKG;AACH,MAAM,MAAM,0CAA0C,GACpD,CAAC,OAAO,0CAA0C,CAAC,CAAC,MAAM,OAAO,0CAA0C,CAAC,CAAC;AAE/G,eAAO,MAAM,0CAA0C;aACrD,OAAO,EAAE,SAAS;CACV,CAAC"}

package/dist/generated/model/updateFlowDefinitionBodyStepsItemOnSuccess.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Server-side mutation to execute when this step completes successfully.
+Runs after field validation passes, before the transition fires.
+
+- create_user: creates the user record (registration flows)
+
+ */
+export type UpdateFlowDefinitionBodyStepsItemOnSuccess = (typeof UpdateFlowDefinitionBodyStepsItemOnSuccess)[keyof typeof UpdateFlowDefinitionBodyStepsItemOnSuccess];
+export declare const UpdateFlowDefinitionBodyStepsItemOnSuccess: {
+    readonly create_user: "create_user";
+};
+//# sourceMappingURL=updateFlowDefinitionBodyStepsItemOnSuccess.d.ts.map

package/dist/generated/model/updateFlowDefinitionBodyStepsItemOnSuccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinitionBodyStepsItemOnSuccess.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinitionBodyStepsItemOnSuccess.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,0CAA0C,GACpD,CAAC,OAAO,0CAA0C,CAAC,CAAC,MAAM,OAAO,0CAA0C,CAAC,CAAC;AAE/G,eAAO,MAAM,0CAA0C;aACrD,WAAW,EAAE,aAAa;CAClB,CAAC"}

package/dist/generated/model/updateFlowDefinitionBodyStepsItemSsoProvidersItem.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * An available SSO identity provider.
+ */
+export type UpdateFlowDefinitionBodyStepsItemSsoProvidersItem = {
+    /** Provider instance identifier. */
+    id: string;
+    /** Display name for the provider. */
+    name: string;
+    /** Template hint for rendering (logo, colors). */
+    template: string;
+};
+//# sourceMappingURL=updateFlowDefinitionBodyStepsItemSsoProvidersItem.d.ts.map

package/dist/generated/model/updateFlowDefinitionBodyStepsItemSsoProvidersItem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinitionBodyStepsItemSsoProvidersItem.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinitionBodyStepsItemSsoProvidersItem.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,MAAM,iDAAiD,GAAG;IAC9D,oCAAoC;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC"}

package/dist/generated/model/updateFlowDefinitionBodyStepsItemTransitions.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Maps action/outcome names to their transition descriptor.
+
+Keys match action names from the `actions` dict. Additional keys
+come from implicit outcomes based on schema annotations
+(e.g. `user_not_found` from `x-unique` fields) and engine
+events (e.g. `sso`, `callback`).
+
+ */
+export type UpdateFlowDefinitionBodyStepsItemTransitions = {
+    [key: string]: {
+        /** Step name within this flow (when `action` is null), or the name
+      of another flow (when `action` is `switch` or `pivot`).
+       */
+        target: string;
+        /** How to interpret `target`:
+      - null (omitted): transition to a step in the current flow.
+      - switch: replace the current flow with the target flow.
+        No return — the current flow is discarded.
+        Example: login ↔ register.
+      - pivot: push the target flow onto the stack. The current flow
+        is paused and resumes when the target flow completes (auto-pop).
+        Example: login → recovery → back to login.
+       */
+        action?: "switch" | "pivot" | null;
+    };
+};
+//# sourceMappingURL=updateFlowDefinitionBodyStepsItemTransitions.d.ts.map

package/dist/generated/model/updateFlowDefinitionBodyStepsItemTransitions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinitionBodyStepsItemTransitions.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinitionBodyStepsItemTransitions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;GAQG;AACH,MAAM,MAAM,4CAA4C,GAAG;IACzD,CAAC,GAAG,EAAE,MAAM,GAAG;QACb;;SAEC;QACD,MAAM,EAAE,MAAM,CAAC;QACf;;;;;;;;SAQC;QACD,MAAM,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,IAAI,CAAC;KACpC,CAAC;CACH,CAAC"}

package/dist/generated/model/updateFlowDefinitionDefault.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { UpdateFlowDefinitionDefaultDetails } from "./updateFlowDefinitionDefaultDetails";
+/**
+ * Standard error payload returned for failed API requests.
+ */
+export type UpdateFlowDefinitionDefault = {
+    /** Stable machine-readable error code. */
+    code: string;
+    /** Human-readable explanation of the error. */
+    message: string;
+    /** Additional error-specific context. */
+    details?: UpdateFlowDefinitionDefaultDetails;
+};
+//# sourceMappingURL=updateFlowDefinitionDefault.d.ts.map

package/dist/generated/model/updateFlowDefinitionDefault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinitionDefault.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinitionDefault.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAE/F;;GAEG;AACH,MAAM,MAAM,2BAA2B,GAAG;IACxC,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,OAAO,CAAC,EAAE,kCAAkC,CAAC;CAC9C,CAAC"}

package/dist/generated/model/updateFlowDefinitionDefaultDetails.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Additional error-specific context.
+ */
+export type UpdateFlowDefinitionDefaultDetails = {
+    [key: string]: unknown;
+};
+//# sourceMappingURL=updateFlowDefinitionDefaultDetails.d.ts.map

package/dist/generated/model/updateFlowDefinitionDefaultDetails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateFlowDefinitionDefaultDetails.d.ts","sourceRoot":"","sources":["../../../src/generated/model/updateFlowDefinitionDefaultDetails.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,MAAM,kCAAkC,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC"}

package/dist/generated/model/verifyChallengeProof200.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { VerifyChallengeProof200ChallengesItem } from "./verifyChallengeProof200ChallengesItem";
+import type { VerifyChallengeProof200CompletedFactorsItem } from "./verifyChallengeProof200CompletedFactorsItem";
+import type { VerifyChallengeProof200RequiredFactorsItem } from "./verifyChallengeProof200RequiredFactorsItem";
+import type { VerifyChallengeProof200State } from "./verifyChallengeProof200State";
+/**
+ * The current state of an authentication attempt.
+
+An attempt is an ephemeral state machine (15-minute TTL) that drives a single authentication round.
+It accepts factor challenges, verifies proofs, and completes into a handoff token.
+Clients drive the attempt by:
+1. Issuing challenges: POST /auth_attempts/{attempt_id}/challenges
+2. Verifying proofs: POST /auth_attempts/{attempt_id}/challenges/{challenge_id}/verify
+3. Completing: POST /auth_attempts/{attempt_id}/handoff
+
+ */
+export type VerifyChallengeProof200 = {
+    /**
+     * Unique identifier for this authentication attempt
+     * @pattern ^[a-zA-Z0-9_-]+$
+     */
+    attempt_id: string;
+    /** @pattern ^[a-zA-Z0-9_-]+$ */
+    project_id: string;
+    /** Overall state of the authentication attempt:
+    - `in_progress`: factors are still being collected; continue issuing challenges.
+    - `completed`: all required factors have been verified; the attempt is ready for handoff.
+    - `failed`: the attempt has failed (e.g. too many failed proofs) and cannot be continued.
+    - `expired`: the 15-minute TTL has been exceeded.
+     */
+    state: VerifyChallengeProof200State;
+    /** The session being authenticated into. Either newly created or passed in on POST.
+    For step-up (re-auth), this is the existing session_id provided on creation.
+     */
+    session_id?: string | null;
+    /** The user ID, if known at this point in the flow.
+    Null until an identifier challenge has been verified.
+     */
+    user_id?: string | null;
+    /** The authentication factor methods that the project policy requires in order
+    to complete this attempt. Computed by the server from the project's auth policy.
+    Clients should use this to determine which challenges still need to be issued.
+     */
+    required_factors?: VerifyChallengeProof200RequiredFactorsItem[];
+    /** The factors that have been successfully verified in this attempt so far.
+    Each item includes method-specific metadata in the payload field.
+  
+    The flow engine uses verified_at timestamps to enforce time-based policies, such as
+    requiring password verification within the last 5 minutes for step-up auth to
+    access sensitive operations.
+  
+    A factor appears here once its challenge reaches `verified` state.
+     */
+    completed_factors?: VerifyChallengeProof200CompletedFactorsItem[];
+    /** All challenges issued within this attempt, in creation order.
+    Use this to track the state of each factor challenge (pending, verified, failed, expired).
+     */
+    challenges?: VerifyChallengeProof200ChallengesItem[];
+    /** When this attempt expires (15-minute TTL from creation) */
+    expires_at?: string;
+    /** When this attempt was created */
+    created_at: string;
+};
+//# sourceMappingURL=verifyChallengeProof200.d.ts.map

package/dist/generated/model/verifyChallengeProof200.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyChallengeProof200.d.ts","sourceRoot":"","sources":["../../../src/generated/model/verifyChallengeProof200.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,yCAAyC,CAAC;AACrG,OAAO,KAAK,EAAE,2CAA2C,EAAE,MAAM,+CAA+C,CAAC;AACjH,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC/G,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAEnF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,KAAK,EAAE,4BAA4B,CAAC;IACpC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,0CAA0C,EAAE,CAAC;IAChE;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,2CAA2C,EAAE,CAAC;IAClE;;OAEG;IACH,UAAU,CAAC,EAAE,qCAAqC,EAAE,CAAC;IACrD,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC"}

package/dist/generated/model/verifyChallengeProof200ChallengesItem.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { VerifyChallengeProof200ChallengesItemMethod } from "./verifyChallengeProof200ChallengesItemMethod";
+import type { VerifyChallengeProof200ChallengesItemPayload } from "./verifyChallengeProof200ChallengesItemPayload";
+import type { VerifyChallengeProof200ChallengesItemState } from "./verifyChallengeProof200ChallengesItemState";
+/**
+ * A factor challenge issued within an authentication attempt.
+
+A challenge presents a single-factor verification prompt (password entry, TOTP code, passkey assertion, etc.).
+The client verifies the proof by POST /auth_attempts/{attempt_id}/challenges/{challenge_id}/verify.
+
+ */
+export type VerifyChallengeProof200ChallengesItem = {
+    /**
+     * Unique identifier for this challenge
+     * @pattern ^[a-zA-Z0-9_-]+$
+     */
+    challenge_id: string;
+    /** An authentication factor method. */
+    method: VerifyChallengeProof200ChallengesItemMethod;
+    /** Current state of this challenge:
+    - `pending`: awaiting proof submission
+    - `failed`: proof rejected (invalid credential, wrong code, etc.)
+    - `expired`: challenge TTL exceeded without verification
+     */
+    state: VerifyChallengeProof200ChallengesItemState;
+    /** When this challenge was issued */
+    created_at: string;
+    /** When this challenge expires */
+    expires_at?: string | null;
+    /** Method-specific challenge data. Structure depends on the `method` field.
+    - `identifier`, `password`: null (no additional data needed)
+    - `passkey`: WebAuthn challenge and credential options
+    - `idp`: Authorization URL and provider information
+     */
+    payload?: VerifyChallengeProof200ChallengesItemPayload;
+};
+//# sourceMappingURL=verifyChallengeProof200ChallengesItem.d.ts.map

package/dist/generated/model/verifyChallengeProof200ChallengesItem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyChallengeProof200ChallengesItem.d.ts","sourceRoot":"","sources":["../../../src/generated/model/verifyChallengeProof200ChallengesItem.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,2CAA2C,EAAE,MAAM,+CAA+C,CAAC;AACjH,OAAO,KAAK,EAAE,4CAA4C,EAAE,MAAM,gDAAgD,CAAC;AACnH,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE/G;;;;;;GAMG;AACH,MAAM,MAAM,qCAAqC,GAAG;IAClD;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,MAAM,EAAE,2CAA2C,CAAC;IACpD;;;;OAIG;IACH,KAAK,EAAE,0CAA0C,CAAC;IAClD,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;OAIG;IACH,OAAO,CAAC,EAAE,4CAA4C,CAAC;CACxD,CAAC"}

package/dist/generated/model/verifyChallengeProof200ChallengesItemMethod.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * An authentication factor method.
+ */
+export type VerifyChallengeProof200ChallengesItemMethod = (typeof VerifyChallengeProof200ChallengesItemMethod)[keyof typeof VerifyChallengeProof200ChallengesItemMethod];
+export declare const VerifyChallengeProof200ChallengesItemMethod: {
+    readonly identifier: "identifier";
+    readonly password: "password";
+    readonly passkey: "passkey";
+};
+//# sourceMappingURL=verifyChallengeProof200ChallengesItemMethod.d.ts.map

package/dist/generated/model/verifyChallengeProof200ChallengesItemMethod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyChallengeProof200ChallengesItemMethod.d.ts","sourceRoot":"","sources":["../../../src/generated/model/verifyChallengeProof200ChallengesItemMethod.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,MAAM,2CAA2C,GACrD,CAAC,OAAO,2CAA2C,CAAC,CAAC,MAAM,OAAO,2CAA2C,CAAC,CAAC;AAEjH,eAAO,MAAM,2CAA2C;aACtD,UAAU,EAAE,YAAY;aACxB,QAAQ,EAAE,UAAU;aACpB,OAAO,EAAE,SAAS;CACV,CAAC"}

package/dist/generated/model/verifyChallengeProof200ChallengesItemPayload.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Method-specific challenge data. Structure depends on the `method` field.
+- `identifier`, `password`: null (no additional data needed)
+- `passkey`: WebAuthn challenge and credential options
+- `idp`: Authorization URL and provider information
+
+ */
+export type VerifyChallengeProof200ChallengesItemPayload = {
+    [key: string]: unknown;
+} | {
+    /** Contains the options for the Assertion Generation (dictionary PublicKeyCredentialRequestOptions).
+See also: https://www.w3.org/TR/webauthn/#dictdef-publickeycredentialrequestoptions
+ */
+    public_key: {
+        /** Base64-encoded WebAuthn challenge */
+        challenge: string;
+        /** List of credential IDs that can be used for this authentication */
+        allowed_credentials?: {
+            /** Base64-encoded credential ID */
+            id: string;
+            type: "public-key";
+        }[];
+        /** User verification requirement for this challenge */
+        user_verification?: "required" | "preferred" | "discouraged";
+        /** Relying Party ID for WebAuthn */
+        rp_id?: string;
+    };
+};
+//# sourceMappingURL=verifyChallengeProof200ChallengesItemPayload.d.ts.map

package/dist/generated/model/verifyChallengeProof200ChallengesItemPayload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyChallengeProof200ChallengesItemPayload.d.ts","sourceRoot":"","sources":["../../../src/generated/model/verifyChallengeProof200ChallengesItemPayload.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,4CAA4C,GACpD;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GAC1B;IACE;;GAED;IACC,UAAU,EAAE;QACV,wCAAwC;QACxC,SAAS,EAAE,MAAM,CAAC;QAClB,sEAAsE;QACtE,mBAAmB,CAAC,EAAE;YACpB,mCAAmC;YACnC,EAAE,EAAE,MAAM,CAAC;YACX,IAAI,EAAE,YAAY,CAAC;SACpB,EAAE,CAAC;QACJ,uDAAuD;QACvD,iBAAiB,CAAC,EAAE,UAAU,GAAG,WAAW,GAAG,aAAa,CAAC;QAC7D,oCAAoC;QACpC,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH,CAAC"}

package/dist/generated/model/verifyChallengeProof200ChallengesItemState.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Current state of this challenge:
+- `pending`: awaiting proof submission
+- `failed`: proof rejected (invalid credential, wrong code, etc.)
+- `expired`: challenge TTL exceeded without verification
+
+ */
+export type VerifyChallengeProof200ChallengesItemState = (typeof VerifyChallengeProof200ChallengesItemState)[keyof typeof VerifyChallengeProof200ChallengesItemState];
+export declare const VerifyChallengeProof200ChallengesItemState: {
+    readonly pending: "pending";
+    readonly failed: "failed";
+    readonly expired: "expired";
+};
+//# sourceMappingURL=verifyChallengeProof200ChallengesItemState.d.ts.map

package/dist/generated/model/verifyChallengeProof200ChallengesItemState.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyChallengeProof200ChallengesItemState.d.ts","sourceRoot":"","sources":["../../../src/generated/model/verifyChallengeProof200ChallengesItemState.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,0CAA0C,GACpD,CAAC,OAAO,0CAA0C,CAAC,CAAC,MAAM,OAAO,0CAA0C,CAAC,CAAC;AAE/G,eAAO,MAAM,0CAA0C;aACrD,OAAO,EAAE,SAAS;aAClB,MAAM,EAAE,QAAQ;aAChB,OAAO,EAAE,SAAS;CACV,CAAC"}

package/dist/generated/model/verifyChallengeProof200CompletedFactorsItem.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { VerifyChallengeProof200CompletedFactorsItemMethod } from "./verifyChallengeProof200CompletedFactorsItemMethod";
+import type { VerifyChallengeProof200CompletedFactorsItemPayload } from "./verifyChallengeProof200CompletedFactorsItemPayload";
+/**
+ * A successfully verified authentication factor with verification metadata.
+Method-specific details are included in the `payload` field.
+
+ */
+export type VerifyChallengeProof200CompletedFactorsItem = {
+    /** An authentication factor method. */
+    method: VerifyChallengeProof200CompletedFactorsItemMethod;
+    /** When this factor was successfully verified */
+    verified_at: string;
+    /** Method-specific factor metadata. Structure depends on the `method` field.
+    - `identifier`: includes user_id
+    - `password`: no additional data
+    - `passkey`: includes credential details and verification flags
+     */
+    payload?: VerifyChallengeProof200CompletedFactorsItemPayload;
+};
+//# sourceMappingURL=verifyChallengeProof200CompletedFactorsItem.d.ts.map

package/dist/generated/model/verifyChallengeProof200CompletedFactorsItem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyChallengeProof200CompletedFactorsItem.d.ts","sourceRoot":"","sources":["../../../src/generated/model/verifyChallengeProof200CompletedFactorsItem.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,iDAAiD,EAAE,MAAM,qDAAqD,CAAC;AAC7H,OAAO,KAAK,EAAE,kDAAkD,EAAE,MAAM,sDAAsD,CAAC;AAE/H;;;;GAIG;AACH,MAAM,MAAM,2CAA2C,GAAG;IACxD,uCAAuC;IACvC,MAAM,EAAE,iDAAiD,CAAC;IAC1D,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,OAAO,CAAC,EAAE,kDAAkD,CAAC;CAC9D,CAAC"}

package/dist/generated/model/verifyChallengeProof200CompletedFactorsItemMethod.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * An authentication factor method.
+ */
+export type VerifyChallengeProof200CompletedFactorsItemMethod = (typeof VerifyChallengeProof200CompletedFactorsItemMethod)[keyof typeof VerifyChallengeProof200CompletedFactorsItemMethod];
+export declare const VerifyChallengeProof200CompletedFactorsItemMethod: {
+    readonly identifier: "identifier";
+    readonly password: "password";
+    readonly passkey: "passkey";
+};
+//# sourceMappingURL=verifyChallengeProof200CompletedFactorsItemMethod.d.ts.map

package/dist/generated/model/verifyChallengeProof200CompletedFactorsItemMethod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyChallengeProof200CompletedFactorsItemMethod.d.ts","sourceRoot":"","sources":["../../../src/generated/model/verifyChallengeProof200CompletedFactorsItemMethod.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,MAAM,iDAAiD,GAC3D,CAAC,OAAO,iDAAiD,CAAC,CAAC,MAAM,OAAO,iDAAiD,CAAC,CAAC;AAE7H,eAAO,MAAM,iDAAiD;aAC5D,UAAU,EAAE,YAAY;aACxB,QAAQ,EAAE,UAAU;aACpB,OAAO,EAAE,SAAS;CACV,CAAC"}