@zitadel/api 0.0.0

package/src/generated/model/submitFlowStep400.ts

@@ -0,0 +1,42 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { SubmitFlowStep400Branding } from "./submitFlowStep400Branding";
+import type { SubmitFlowStep400Step } from "./submitFlowStep400Step";
+
+export type SubmitFlowStep400 = {
+  /** Flow handle. Use this as the path parameter for subsequent
+  submit/event calls. May change between responses when a
+  flow pivot or pop occurs.
+   */
+  id: string;
+  /** Underlying session ID. Stable across all stacked flows. */
+  session_id: string;
+  /** Reserved for future rotation. The sealed `_zflow` cookie carries the flow state today. */
+  session_token?: string;
+  /** A step contains unordered capability dictionaries: what to collect (fields),
+  what the user can do (actions), and what security gates must be satisfied (gates).
+  Layout and element ordering are controlled by the LiquidJS template in `branding.liquid_template`.
+   */
+  step: SubmitFlowStep400Step;
+  /** Resolved branding configuration. Inherited from the app → team → project
+  hierarchy at flow creation time (most specific wins). Read-only projection —
+  branding is configured via the Team/App Branding API, not the Flow API.
+   */
+  branding?: SubmitFlowStep400Branding;
+  /** Present when `step.complete` is `redirect`. */
+  redirect_uri?: string;
+  /** Short-lived, audience-bound token produced on flow completion.
+  Exchange it for a session via `POST /sessions/exchange`.
+  Only present when `step.complete` is set.
+   */
+  handoff_token?: string;
+  /** Expiry timestamp for `handoff_token`. Only present when
+  `handoff_token` is set.
+   */
+  handoff_token_expires_at?: string;
+};

package/src/generated/model/submitFlowStep400Branding.ts

@@ -0,0 +1,33 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { SubmitFlowStep400BrandingLayout } from "./submitFlowStep400BrandingLayout";
+
+/**
+ * Resolved branding configuration. Inherited from the app → team → project
+hierarchy at flow creation time (most specific wins). Read-only projection —
+branding is configured via the Team/App Branding API, not the Flow API.
+
+ */
+export type SubmitFlowStep400Branding = {
+  /** Layout preset selector. The default.liquid master template uses this
+  to branch into layout variants. Customers who eject the template
+  can ignore this field entirely.
+   */
+  layout?: SubmitFlowStep400BrandingLayout;
+  /** The LiquidJS template string for rendering this step. The orchestrator
+  parses this template, injects the capability dictionaries as context,
+  and renders the output HTML into its Shadow DOM.
+   */
+  liquid_template?: string;
+  /** Team logo URL. */
+  logo_url?: string;
+  /** Custom font URL (e.g., Google Fonts CSS). */
+  font_url?: string;
+  /** Hero/background image URL (used by split layout). */
+  hero_url?: string;
+};

package/src/generated/model/submitFlowStep400BrandingLayout.ts

@@ -0,0 +1,21 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Layout preset selector. The default.liquid master template uses this
+to branch into layout variants. Customers who eject the template
+can ignore this field entirely.
+
+ */
+export type SubmitFlowStep400BrandingLayout =
+  (typeof SubmitFlowStep400BrandingLayout)[keyof typeof SubmitFlowStep400BrandingLayout];
+
+export const SubmitFlowStep400BrandingLayout = {
+  centered: "centered",
+  split: "split",
+} as const;

package/src/generated/model/submitFlowStep400Step.ts

@@ -0,0 +1,64 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { SubmitFlowStep400StepActions } from "./submitFlowStep400StepActions";
+import type { SubmitFlowStep400StepChallenge } from "./submitFlowStep400StepChallenge";
+import type { SubmitFlowStep400StepComplete } from "./submitFlowStep400StepComplete";
+import type { SubmitFlowStep400StepFields } from "./submitFlowStep400StepFields";
+import type { SubmitFlowStep400StepGates } from "./submitFlowStep400StepGates";
+import type { SubmitFlowStep400StepSsoProvidersItem } from "./submitFlowStep400StepSsoProvidersItem";
+import type { SubmitFlowStep400StepTexts } from "./submitFlowStep400StepTexts";
+
+/**
+ * A step contains unordered capability dictionaries: what to collect (fields),
+what the user can do (actions), and what security gates must be satisfied (gates).
+Layout and element ordering are controlled by the LiquidJS template in `branding.liquid_template`.
+
+ */
+export type SubmitFlowStep400Step = {
+  /** Step name from the flow definition. */
+  name: string;
+  /** Step-level localization keys. Resolved client-side via the `| t` LiquidJS filter.
+  The backend never sends display text — only semantic keys.
+   */
+  texts?: SubmitFlowStep400StepTexts;
+  /** Error message from a previous failed submission. */
+  error?: string | null;
+  /** Present only on terminal steps. Tells the frontend what to do:
+  - redirect: navigate to redirect_uri immediately (OIDC/SAML done)
+  - show: render the step as a success screen (e.g., registration confirmed)
+   */
+  complete?: SubmitFlowStep400StepComplete;
+  /** URL to navigate to (e.g., SSO provider redirect). */
+  redirect_url?: string;
+  /** Unordered dictionary of input fields to collect. Keyed by field name.
+  The LiquidJS template controls which fields appear and in what order.
+  Field metadata (type, validation) is resolved by the engine from the
+  flow's user schema.
+   */
+  fields: SubmitFlowStep400StepFields;
+  /** Unordered dictionary of available user actions. Keyed by action name.
+  The LiquidJS template controls positioning and presentation.
+   */
+  actions: SubmitFlowStep400StepActions;
+  /** Security gates that must be satisfied before the step can be submitted.
+  The engine injects gates dynamically based on policy, even if they
+  are not declared in the flow definition.
+   */
+  gates: SubmitFlowStep400StepGates;
+  /** Available SSO identity providers for this step. */
+  sso_providers?: SubmitFlowStep400StepSsoProvidersItem[];
+  /** A pending authentication challenge issued by the server. Present when the
+  flow engine has issued a challenge via auth_attempts (e.g., after the user
+  submits `action: "passkey"`). The `<zl-passkey>` component reads this and
+  triggers the appropriate WebAuthn ceremony.
+
+  The challenge is NOT present on the initial step — it appears only after
+  the user explicitly selects a ceremony-based action.
+   */
+  challenge?: SubmitFlowStep400StepChallenge;
+};

package/src/generated/model/submitFlowStep400StepActions.ts

@@ -0,0 +1,28 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Unordered dictionary of available user actions. Keyed by action name.
+The LiquidJS template controls positioning and presentation.
+
+ */
+export type SubmitFlowStep400StepActions = {
+  [key: string]: {
+    /** Marks this as the default/primary action. The runtime template uses
+  this hint to choose visual emphasis. At most one action per step
+  should be primary; this is not enforced here.
+   */
+    primary?: boolean;
+    /** Optional localization key override for the action's label. When
+  omitted, the engine derives a key from the step and action names.
+  Display text is resolved client-side from a locale dictionary, never
+  by the engine.
+   */
+    text_key?: string;
+  };
+};

package/src/generated/model/submitFlowStep400StepChallenge.ts

@@ -0,0 +1,34 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { SubmitFlowStep400StepChallengeMethod } from "./submitFlowStep400StepChallengeMethod";
+import type { SubmitFlowStep400StepChallengeOptions } from "./submitFlowStep400StepChallengeOptions";
+
+/**
+ * A pending authentication challenge issued by the server. Present when the
+flow engine has issued a challenge via auth_attempts (e.g., after the user
+submits `action: "passkey"`). The `<zl-passkey>` component reads this and
+triggers the appropriate WebAuthn ceremony.
+
+The challenge is NOT present on the initial step — it appears only after
+the user explicitly selects a ceremony-based action.
+
+ */
+export type SubmitFlowStep400StepChallenge = {
+  /** Challenge method. Determines which component handles the ceremony. */
+  method?: SubmitFlowStep400StepChallengeMethod;
+  /** Server-side challenge identifier. Included in the proof submission
+  so the server can match the response to the original challenge.
+   */
+  challenge_id?: string;
+  /** Protocol-specific challenge options. For passkey, this is the
+  `PublicKeyCredentialRequestOptions` (authenticate) or
+  `PublicKeyCredentialCreationOptions` (register). Passed directly
+  to the browser's `navigator.credentials` API.
+   */
+  options?: SubmitFlowStep400StepChallengeOptions;
+};

package/src/generated/model/submitFlowStep400StepChallengeMethod.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Challenge method. Determines which component handles the ceremony.
+ */
+export type SubmitFlowStep400StepChallengeMethod =
+  (typeof SubmitFlowStep400StepChallengeMethod)[keyof typeof SubmitFlowStep400StepChallengeMethod];
+
+export const SubmitFlowStep400StepChallengeMethod = {
+  passkey: "passkey",
+} as const;

package/src/generated/model/submitFlowStep400StepChallengeOptions.ts

@@ -0,0 +1,16 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Protocol-specific challenge options. For passkey, this is the
+`PublicKeyCredentialRequestOptions` (authenticate) or
+`PublicKeyCredentialCreationOptions` (register). Passed directly
+to the browser's `navigator.credentials` API.
+
+ */
+export type SubmitFlowStep400StepChallengeOptions = { [key: string]: unknown };

package/src/generated/model/submitFlowStep400StepComplete.ts

@@ -0,0 +1,21 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Present only on terminal steps. Tells the frontend what to do:
+- redirect: navigate to redirect_uri immediately (OIDC/SAML done)
+- show: render the step as a success screen (e.g., registration confirmed)
+
+ */
+export type SubmitFlowStep400StepComplete =
+  (typeof SubmitFlowStep400StepComplete)[keyof typeof SubmitFlowStep400StepComplete];
+
+export const SubmitFlowStep400StepComplete = {
+  redirect: "redirect",
+  show: "show",
+} as const;

package/src/generated/model/submitFlowStep400StepFields.ts

@@ -0,0 +1,45 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { SubmitFlowStep400StepFieldsType } from "./submitFlowStep400StepFieldsType";
+import type { SubmitFlowStep400StepFieldsValidation } from "./submitFlowStep400StepFieldsValidation";
+
+/**
+ * Unordered dictionary of input fields to collect. Keyed by field name.
+The LiquidJS template controls which fields appear and in what order.
+Field metadata (type, validation) is resolved by the engine from the
+flow's user schema.
+
+ */
+export type SubmitFlowStep400StepFields = {
+  [key: string]: {
+    /** The input kind the client should render. Encodes the formats that
+  have a matching HTML input type (email, url, date). For other
+  formats (e.g. uuid) the type is `text` and `validation.format`
+  carries the rule.
+   */
+    type: SubmitFlowStep400StepFieldsType;
+    /** Localization key for the field label. */
+    text_key: string;
+    /** The field MUST be present and non-empty on submit. Mirrors the
+  schema's top-level `required` array.
+   */
+    required?: boolean;
+    /** Pre-filled value (e.g., an identifier carried over from a pivot). */
+    value?: unknown;
+    /** Schema-derived rules the frontend SHOULD apply at input time. The
+  server runs the same rules on submit and is the only authority on
+  whether the step advances — these rules are a UX hint to reduce
+  round trips, not a contract guarantee.
+
+  Omitted entirely when the field has no rules beyond its `type`.
+  Each key mirrors a JSON Schema keyword on the underlying user
+  property; absent keys mean no rule.
+   */
+    validation?: SubmitFlowStep400StepFieldsValidation;
+  };
+};

package/src/generated/model/submitFlowStep400StepFieldsType.ts

@@ -0,0 +1,28 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * The input kind the client should render. Encodes the formats that
+have a matching HTML input type (email, url, date). For other
+formats (e.g. uuid) the type is `text` and `validation.format`
+carries the rule.
+
+ */
+export type SubmitFlowStep400StepFieldsType =
+  (typeof SubmitFlowStep400StepFieldsType)[keyof typeof SubmitFlowStep400StepFieldsType];
+
+export const SubmitFlowStep400StepFieldsType = {
+  text: "text",
+  email: "email",
+  password: "password",
+  tel: "tel",
+  number: "number",
+  url: "url",
+  date: "date",
+  hidden: "hidden",
+} as const;

package/src/generated/model/submitFlowStep400StepFieldsValidation.ts

@@ -0,0 +1,39 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { SubmitFlowStep400StepFieldsValidationFormat } from "./submitFlowStep400StepFieldsValidationFormat";
+
+/**
+ * Schema-derived rules the frontend SHOULD apply at input time. The
+server runs the same rules on submit and is the only authority on
+whether the step advances — these rules are a UX hint to reduce
+round trips, not a contract guarantee.
+
+Omitted entirely when the field has no rules beyond its `type`.
+Each key mirrors a JSON Schema keyword on the underlying user
+property; absent keys mean no rule.
+
+ */
+export type SubmitFlowStep400StepFieldsValidation = {
+  /** Semantic format the value must match. Values mirror the user
+  meta-schema. When `type` already encodes the format (email,
+  url, date), this key is informative and the input type is
+  sufficient for client-side validation. When `type` is `text`
+  (e.g. `format: uuid`), this key is the only signal.
+   */
+  format?: SubmitFlowStep400StepFieldsValidationFormat;
+  /**
+   * Minimum length in characters (inclusive). Mirrors `minLength`.
+   * @minimum 0
+   */
+  min_length?: number;
+  /**
+   * Maximum length in characters (inclusive). Mirrors `maxLength`.
+   * @minimum 0
+   */
+  max_length?: number;
+};

package/src/generated/model/submitFlowStep400StepFieldsValidationFormat.ts

@@ -0,0 +1,25 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Semantic format the value must match. Values mirror the user
+meta-schema. When `type` already encodes the format (email,
+url, date), this key is informative and the input type is
+sufficient for client-side validation. When `type` is `text`
+(e.g. `format: uuid`), this key is the only signal.
+
+ */
+export type SubmitFlowStep400StepFieldsValidationFormat =
+  (typeof SubmitFlowStep400StepFieldsValidationFormat)[keyof typeof SubmitFlowStep400StepFieldsValidationFormat];
+
+export const SubmitFlowStep400StepFieldsValidationFormat = {
+  email: "email",
+  "date-time": "date-time",
+  uuid: "uuid",
+  uri: "uri",
+} as const;

package/src/generated/model/submitFlowStep400StepGates.ts

@@ -0,0 +1,34 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { SubmitFlowStep400StepGatesConfig } from "./submitFlowStep400StepGatesConfig";
+import type { SubmitFlowStep400StepGatesKind } from "./submitFlowStep400StepGatesKind";
+
+/**
+ * Security gates that must be satisfied before the step can be submitted.
+The engine injects gates dynamically based on policy, even if they
+are not declared in the flow definition.
+
+ */
+export type SubmitFlowStep400StepGates = {
+  [key: string]: {
+    /** The gate category. Only `captcha` is currently defined. Authenticator
+  ceremonies (e.g. passkey) are modelled as credential auth_attempts via
+  `x-credential` on a field, not as gates.
+   */
+    kind: SubmitFlowStep400StepGatesKind;
+    /** Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,
+  `hcaptcha`. The engine looks up an implementation in its provider
+  registry.
+   */
+    provider: string;
+    /** Provider-specific configuration consumed by the implementation when
+  issuing the per-render challenge. Opaque to the engine.
+   */
+    config?: SubmitFlowStep400StepGatesConfig;
+  };
+};

package/src/generated/model/submitFlowStep400StepGatesConfig.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Provider-specific configuration consumed by the implementation when
+issuing the per-render challenge. Opaque to the engine.
+
+ */
+export type SubmitFlowStep400StepGatesConfig = { [key: string]: unknown };

package/src/generated/model/submitFlowStep400StepGatesKind.ts

@@ -0,0 +1,20 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * The gate category. Only `captcha` is currently defined. Authenticator
+ceremonies (e.g. passkey) are modelled as credential auth_attempts via
+`x-credential` on a field, not as gates.
+
+ */
+export type SubmitFlowStep400StepGatesKind =
+  (typeof SubmitFlowStep400StepGatesKind)[keyof typeof SubmitFlowStep400StepGatesKind];
+
+export const SubmitFlowStep400StepGatesKind = {
+  captcha: "captcha",
+} as const;

package/src/generated/model/submitFlowStep400StepSsoProvidersItem.ts

@@ -0,0 +1,19 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * An available SSO identity provider.
+ */
+export type SubmitFlowStep400StepSsoProvidersItem = {
+  /** Provider instance identifier. */
+  id: string;
+  /** Display name for the provider. */
+  name: string;
+  /** Template hint for rendering (logo, colors). */
+  template: string;
+};

package/src/generated/model/submitFlowStep400StepTexts.ts

@@ -0,0 +1,19 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Step-level localization keys. Resolved client-side via the `| t` LiquidJS filter.
+The backend never sends display text — only semantic keys.
+
+ */
+export type SubmitFlowStep400StepTexts = {
+  /** Localization key for the step heading. */
+  title_key?: string;
+  /** Localization key for explanatory text. */
+  description_key?: string | null;
+};

package/src/generated/model/submitFlowStep409.ts

@@ -0,0 +1,20 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { SubmitFlowStep409Details } from "./submitFlowStep409Details";
+
+/**
+ * Standard error payload returned for failed API requests.
+ */
+export type SubmitFlowStep409 = {
+  /** Stable machine-readable error code. */
+  code: string;
+  /** Human-readable explanation of the error. */
+  message: string;
+  /** Additional error-specific context. */
+  details?: SubmitFlowStep409Details;
+};

package/src/generated/model/submitFlowStep409Details.ts

@@ -0,0 +1,12 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Additional error-specific context.
+ */
+export type SubmitFlowStep409Details = { [key: string]: unknown };

package/src/generated/model/submitFlowStepBody.ts

@@ -0,0 +1,36 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { SubmitFlowStepBodyChallengeResponse } from "./submitFlowStepBodyChallengeResponse";
+import type { SubmitFlowStepBodyFields } from "./submitFlowStepBodyFields";
+import type { SubmitFlowStepBodyGateProofs } from "./submitFlowStepBodyGateProofs";
+
+export type SubmitFlowStepBody = {
+  /** Reserved for future rotation. The sealed `_zflow` cookie carries the flow state today. */
+  session_token?: string;
+  /** Which action to take. Must be a key from the step's `actions` dictionary:
+  - A regular action (e.g., "submit", "register", "back")
+  - The reserved value "sso" — triggers SSO redirect (requires `sso_provider_id`)
+   */
+  action: string;
+  /** User input values. Keys match field names from the step's `fields` dictionary.
+   */
+  fields?: SubmitFlowStepBodyFields;
+  /** Solutions for security gates. Keys match gate names from the step's `gates` dictionary.
+  The orchestrator collects these from `<zl-captcha>` component events.
+   */
+  gate_proofs?: SubmitFlowStepBodyGateProofs;
+  /** Response to a pending challenge on the step. Required when the step has a
+  `challenge` property (e.g., after submitting a passkey action).
+  The `<zl-passkey>` component populates this after the WebAuthn ceremony.
+   */
+  challenge_response?: SubmitFlowStepBodyChallengeResponse;
+  /** ID of the selected SSO provider (from `sso_providers[].id`).
+  Required when `action` is "sso".
+   */
+  sso_provider_id?: string;
+};

package/src/generated/model/submitFlowStepBodyChallengeResponse.ts

@@ -0,0 +1,27 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { SubmitFlowStepBodyChallengeResponseProof } from "./submitFlowStepBodyChallengeResponseProof";
+
+/**
+ * Response to a pending challenge on the step. Required when the step has a
+`challenge` property (e.g., after submitting a passkey action).
+The `<zl-passkey>` component populates this after the WebAuthn ceremony.
+
+ */
+export type SubmitFlowStepBodyChallengeResponse = {
+  /** The challenge identifier from `step.challenge.challenge_id`.
+  Matches the server-side challenge for verification.
+   */
+  challenge_id?: string;
+  /** Which auth method this response is for (e.g., 'passkey'). */
+  method?: string;
+  /** Method-specific proof payload.
+  For passkeys, this is the WebAuthn JSON serialization of PublicKeyCredential.
+   */
+  proof?: SubmitFlowStepBodyChallengeResponseProof;
+};

package/src/generated/model/submitFlowStepBodyChallengeResponseProof.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Method-specific proof payload.
+For passkeys, this is the WebAuthn JSON serialization of PublicKeyCredential.
+
+ */
+export type SubmitFlowStepBodyChallengeResponseProof = { [key: string]: unknown };

package/src/generated/model/submitFlowStepBodyFields.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * User input values. Keys match field names from the step's `fields` dictionary.
+
+ */
+export type SubmitFlowStepBodyFields = { [key: string]: unknown };