@zitadel/api 0.0.0

package/dist/generated/endpoints/zitadelNextGen.zod.d.mts

@@ -0,0 +1,1532 @@
+import * as zod from "zod";
+
+//#region src/generated/endpoints/zitadelNextGen.zod.d.ts
+/**
+ * Retrieve the OpenID Connect configuration
+ * @summary Get OpenID Connect configuration
+ */
+declare const getOpenIDConfigurationResponseClaimsParameterSupportedDefault = false;
+declare const getOpenIDConfigurationResponseRequestParameterSupportedDefault = false;
+declare const getOpenIDConfigurationResponseRequestUriParameterSupportedDefault = true;
+declare const getOpenIDConfigurationResponseRequireRequestUriRegistrationDefault = false;
+declare const GetOpenIDConfigurationResponse: zod.ZodObject<{
+  issuer: zod.ZodURL;
+  authorization_endpoint: zod.ZodURL;
+  token_endpoint: zod.ZodOptional<zod.ZodURL>;
+  userinfo_endpoint: zod.ZodOptional<zod.ZodURL>;
+  jwks_uri: zod.ZodURL;
+  registration_endpoint: zod.ZodOptional<zod.ZodURL>;
+  scopes_supported: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  response_types_supported: zod.ZodArray<zod.ZodString>;
+  response_modes_supported: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  grant_types_supported: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  acr_values_supported: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  subject_types_supported: zod.ZodArray<zod.ZodEnum<{
+    public: "public";
+    pairwise: "pairwise";
+  }>>;
+  id_token_signing_alg_values_supported: zod.ZodArray<zod.ZodString>;
+  id_token_encryption_alg_values_supported: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  id_token_encryption_enc_values_supported: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  userinfo_signing_alg_values_supported: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  userinfo_encryption_alg_values_supported: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  userinfo_encryption_enc_values_supported: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  request_object_signing_alg_values_supported: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  request_object_encryption_alg_values_supported: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  request_object_encryption_enc_values_supported: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  token_endpoint_auth_methods_supported: zod.ZodOptional<zod.ZodArray<zod.ZodEnum<{
+    client_secret_post: "client_secret_post";
+    client_secret_basic: "client_secret_basic";
+    client_secret_jwt: "client_secret_jwt";
+    private_key_jwt: "private_key_jwt";
+  }>>>;
+  token_endpoint_auth_signing_alg_values_supported: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  display_values_supported: zod.ZodOptional<zod.ZodArray<zod.ZodEnum<{
+    page: "page";
+    popup: "popup";
+    touch: "touch";
+    wap: "wap";
+  }>>>;
+  claim_types_supported: zod.ZodOptional<zod.ZodArray<zod.ZodEnum<{
+    normal: "normal";
+    aggregated: "aggregated";
+    distributed: "distributed";
+  }>>>;
+  claims_supported: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  service_documentation: zod.ZodOptional<zod.ZodURL>;
+  claims_locales_supported: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  ui_locales_supported: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  claims_parameter_supported: zod.ZodDefault<zod.ZodBoolean>;
+  request_parameter_supported: zod.ZodDefault<zod.ZodBoolean>;
+  request_uri_parameter_supported: zod.ZodDefault<zod.ZodBoolean>;
+  require_request_uri_registration: zod.ZodDefault<zod.ZodBoolean>;
+  op_policy_uri: zod.ZodOptional<zod.ZodURL>;
+  op_tos_uri: zod.ZodOptional<zod.ZodURL>;
+}, zod.z.core.$strip>;
+/**
+ * @summary Authorize a user
+ */
+declare const AuthorizeGetQueryParams: zod.ZodObject<{
+  acr_values: zod.ZodOptional<zod.ZodString>;
+  client_id: zod.ZodString;
+  code_challenge: zod.ZodOptional<zod.ZodString>;
+  code_challenge_method: zod.ZodOptional<zod.ZodString>;
+  display: zod.ZodOptional<zod.ZodString>;
+  id_token_hint: zod.ZodOptional<zod.ZodString>;
+  login_hint: zod.ZodOptional<zod.ZodString>;
+  max_age: zod.ZodOptional<zod.ZodNumber>;
+  nonce: zod.ZodOptional<zod.ZodString>;
+  prompt: zod.ZodOptional<zod.ZodString>;
+  redirect_uri: zod.ZodOptional<zod.ZodString>;
+  response_mode: zod.ZodOptional<zod.ZodString>;
+  response_type: zod.ZodString;
+  scope: zod.ZodOptional<zod.ZodString>;
+  state: zod.ZodOptional<zod.ZodString>;
+  ui_locales: zod.ZodOptional<zod.ZodString>;
+}, zod.z.core.$strict>;
+/**
+ * @summary Authorize a device
+ */
+declare const AuthorizeDeviceQueryParams: zod.ZodObject<{
+  client_id: zod.ZodString;
+  scope: zod.ZodOptional<zod.ZodString>;
+}, zod.z.core.$strict>;
+declare const AuthorizeDeviceResponse: zod.ZodObject<{
+  device_code: zod.ZodOptional<zod.ZodString>;
+  expires_in: zod.ZodOptional<zod.ZodNumber>;
+  interval: zod.ZodOptional<zod.ZodNumber>;
+  user_code: zod.ZodOptional<zod.ZodString>;
+  verification_uri: zod.ZodOptional<zod.ZodString>;
+  verification_uri_complete: zod.ZodOptional<zod.ZodString>;
+}, zod.z.core.$strip>;
+/**
+ * @summary End a session
+ */
+declare const EndSessionQueryParams: zod.ZodObject<{
+  client_id: zod.ZodOptional<zod.ZodString>;
+  id_token_hint: zod.ZodOptional<zod.ZodString>;
+  logout_hint: zod.ZodOptional<zod.ZodString>;
+  post_logout_redirect_uri: zod.ZodOptional<zod.ZodString>;
+  state: zod.ZodOptional<zod.ZodString>;
+  ui_locales: zod.ZodOptional<zod.ZodString>;
+}, zod.z.core.$strict>;
+/**
+ * @summary Introspect a token
+ */
+declare const IntrospectResponse: zod.ZodObject<{
+  active: zod.ZodOptional<zod.ZodBoolean>;
+  aud: zod.ZodOptional<zod.ZodString>;
+  client_id: zod.ZodOptional<zod.ZodString>;
+  exp: zod.ZodOptional<zod.ZodNumber>;
+  iat: zod.ZodOptional<zod.ZodNumber>;
+  iss: zod.ZodOptional<zod.ZodString>;
+  jti: zod.ZodOptional<zod.ZodString>;
+  nbf: zod.ZodOptional<zod.ZodNumber>;
+  scope: zod.ZodOptional<zod.ZodString>;
+  sub: zod.ZodOptional<zod.ZodString>;
+  token_type: zod.ZodOptional<zod.ZodString>;
+  username: zod.ZodOptional<zod.ZodString>;
+}, zod.z.core.$strip>;
+/**
+ * @summary Get public keys
+ */
+declare const GetKeysResponse: zod.ZodObject<{
+  keys: zod.ZodOptional<zod.ZodArray<zod.ZodObject<{
+    use: zod.ZodOptional<zod.ZodString>;
+    kty: zod.ZodOptional<zod.ZodString>;
+    kid: zod.ZodOptional<zod.ZodString>;
+    crv: zod.ZodOptional<zod.ZodString>;
+    alg: zod.ZodOptional<zod.ZodString>;
+    k: zod.ZodOptional<zod.ZodString>;
+    x: zod.ZodOptional<zod.ZodString>;
+    y: zod.ZodOptional<zod.ZodString>;
+    n: zod.ZodOptional<zod.ZodString>;
+    e: zod.ZodOptional<zod.ZodString>;
+    d: zod.ZodOptional<zod.ZodString>;
+    p: zod.ZodOptional<zod.ZodString>;
+    q: zod.ZodOptional<zod.ZodString>;
+    dp: zod.ZodOptional<zod.ZodString>;
+    dq: zod.ZodOptional<zod.ZodString>;
+    qi: zod.ZodOptional<zod.ZodString>;
+    x5c: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+    x5u: zod.ZodOptional<zod.ZodString>;
+    x5t: zod.ZodOptional<zod.ZodString>;
+    x5tS256: zod.ZodOptional<zod.ZodString>;
+  }, zod.z.core.$strip>>>;
+}, zod.z.core.$strip>;
+/**
+ * @summary Get accesstoken
+ */
+declare const GetTokenResponse: zod.ZodObject<{
+  access_token: zod.ZodOptional<zod.ZodString>;
+  token_type: zod.ZodOptional<zod.ZodString>;
+  expires_in: zod.ZodOptional<zod.ZodNumber>;
+  refresh_token: zod.ZodOptional<zod.ZodString>;
+}, zod.z.core.$strip>;
+/**
+ * @summary Get user info
+ */
+declare const GetUserInfoResponse: zod.ZodObject<{
+  sub: zod.ZodOptional<zod.ZodString>;
+  name: zod.ZodOptional<zod.ZodString>;
+  email: zod.ZodOptional<zod.ZodEmail>;
+  preferred_username: zod.ZodOptional<zod.ZodString>;
+  picture: zod.ZodOptional<zod.ZodURL>;
+  given_name: zod.ZodOptional<zod.ZodString>;
+  family_name: zod.ZodOptional<zod.ZodString>;
+}, zod.z.core.$strip>;
+/**
+ * @summary Create user
+ */
+declare const createUserQueryProjectIdRegExp: RegExp;
+declare const createUserQueryTeamIdRegExp: RegExp;
+declare const CreateUserQueryParams: zod.ZodObject<{
+  project_id: zod.ZodString;
+  team_id: zod.ZodOptional<zod.ZodString>;
+}, zod.z.core.$strict>;
+declare const CreateUserBody: zod.ZodRecord<zod.ZodString, zod.ZodUnknown>;
+/**
+ * @summary List users
+ */
+declare const listUsersQueryOffsetDefault = 0;
+declare const listUsersQueryOffsetMin = 0;
+declare const listUsersQueryLimitDefault = 20;
+declare const listUsersQueryLimitMax = 100;
+declare const ListUsersQueryParams: zod.ZodObject<{
+  offset: zod.ZodDefault<zod.ZodNumber>;
+  limit: zod.ZodDefault<zod.ZodNumber>;
+}, zod.z.core.$strict>;
+declare const ListUsersResponseItem: zod.ZodRecord<zod.ZodString, zod.ZodUnknown>;
+declare const ListUsersResponse: zod.ZodArray<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
+/**
+ * @summary Get user by ID
+ */
+declare const getUserByIDPathUserIdRegExp: RegExp;
+declare const GetUserByIDParams: zod.ZodObject<{
+  user_id: zod.ZodString;
+}, zod.z.core.$strip>;
+declare const getUserByIDQueryProjectIdRegExp: RegExp;
+declare const getUserByIDQueryTeamIdRegExp: RegExp;
+declare const GetUserByIDQueryParams: zod.ZodObject<{
+  project_id: zod.ZodString;
+  team_id: zod.ZodOptional<zod.ZodString>;
+}, zod.z.core.$strict>;
+declare const GetUserByIDResponse: zod.ZodRecord<zod.ZodString, zod.ZodUnknown>;
+/**
+ * Resolves a flow definition based on purpose + audience context and returns
+the first capability step. Creates a new session implicitly unless
+`session_id` is provided (for step-up / reauth on an existing session).
+
+The response contains an `id` field — the flow handle. Use it as the path
+parameter for all subsequent `/flow/{id}/submit` and `/flow/{id}/event` calls.
+
+The response also sets an encrypted `HttpOnly` cookie (`_zflow`) containing
+the flow's orchestration state (current step, collected data, history).
+The server is stateless between requests — all flow state lives in this
+cookie. The browser sends it automatically on subsequent requests.
+
+ * @summary Start a new flow
+ */
+declare const createFlowBodyProjectIdRegExp: RegExp;
+declare const createFlowBodyFlowDefinitionNameRegExp: RegExp;
+declare const createFlowBodySchemaVersionRegExp: RegExp;
+declare const CreateFlowBody: zod.ZodObject<{
+  project_id: zod.ZodString;
+  purpose: zod.ZodEnum<{
+    login: "login";
+    register: "register";
+    recovery: "recovery";
+    profiling: "profiling";
+    reauth: "reauth";
+    link_account: "link_account";
+  }>;
+  flow_definition_name: zod.ZodOptional<zod.ZodString>;
+  schema_version: zod.ZodOptional<zod.ZodString>;
+  challenge_nonce: zod.ZodOptional<zod.ZodString>;
+  session_id: zod.ZodOptional<zod.ZodString>;
+  auth_request_id: zod.ZodOptional<zod.ZodString>;
+  redirect_uri: zod.ZodOptional<zod.ZodURL>;
+  hint: zod.ZodOptional<zod.ZodObject<{
+    login_name: zod.ZodOptional<zod.ZodString>;
+    team_id: zod.ZodOptional<zod.ZodString>;
+    user_schema_id: zod.ZodOptional<zod.ZodString>;
+    app_id: zod.ZodOptional<zod.ZodString>;
+  }, zod.z.core.$strip>>;
+}, zod.z.core.$strip>;
+/**
+ * Returns the current capability step without advancing the state machine.
+Useful for page reloads or re-rendering after a network error.
+
+ * @summary Get current step (re-render)
+ */
+declare const GetFlowStepParams: zod.ZodObject<{
+  id: zod.ZodString;
+}, zod.z.core.$strip>;
+declare const getFlowStepResponseStepFieldsRequiredDefault = false;
+declare const getFlowStepResponseStepFieldsValidationMinLengthMin = 0;
+declare const getFlowStepResponseStepFieldsValidationMaxLengthMin = 0;
+declare const getFlowStepResponseStepFieldsDefault: {};
+declare const getFlowStepResponseStepActionsPrimaryDefault = false;
+declare const getFlowStepResponseStepActionsDefault: {};
+declare const getFlowStepResponseStepGatesDefault: {};
+declare const getFlowStepResponseStepSsoProvidersDefault: never[];
+declare const getFlowStepResponseBrandingLayoutDefault = "centered";
+declare const GetFlowStepResponse: zod.ZodObject<{
+  id: zod.ZodString;
+  session_id: zod.ZodString;
+  session_token: zod.ZodOptional<zod.ZodString>;
+  step: zod.ZodObject<{
+    name: zod.ZodString;
+    texts: zod.ZodOptional<zod.ZodObject<{
+      title_key: zod.ZodOptional<zod.ZodString>;
+      description_key: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodNull]>>;
+    }, zod.z.core.$strip>>;
+    error: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodNull]>>;
+    complete: zod.ZodOptional<zod.ZodEnum<{
+      redirect: "redirect";
+      show: "show";
+    }>>;
+    redirect_url: zod.ZodOptional<zod.ZodURL>;
+    fields: zod.ZodDefault<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+      type: zod.ZodEnum<{
+        number: "number";
+        url: "url";
+        date: "date";
+        email: "email";
+        text: "text";
+        password: "password";
+        tel: "tel";
+        hidden: "hidden";
+      }>;
+      text_key: zod.ZodString;
+      required: zod.ZodDefault<zod.ZodBoolean>;
+      value: zod.ZodOptional<zod.ZodUnknown>;
+      validation: zod.ZodOptional<zod.ZodObject<{
+        format: zod.ZodOptional<zod.ZodEnum<{
+          email: "email";
+          "date-time": "date-time";
+          uuid: "uuid";
+          uri: "uri";
+        }>>;
+        min_length: zod.ZodOptional<zod.ZodNumber>;
+        max_length: zod.ZodOptional<zod.ZodNumber>;
+      }, zod.z.core.$strip>>;
+    }, zod.z.core.$strip>>>;
+    actions: zod.ZodDefault<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+      primary: zod.ZodDefault<zod.ZodBoolean>;
+      text_key: zod.ZodOptional<zod.ZodString>;
+    }, zod.z.core.$strip>>>;
+    gates: zod.ZodDefault<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+      kind: zod.ZodEnum<{
+        captcha: "captcha";
+      }>;
+      provider: zod.ZodString;
+      config: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
+    }, zod.z.core.$strip>>>;
+    sso_providers: zod.ZodDefault<zod.ZodArray<zod.ZodObject<{
+      id: zod.ZodString;
+      name: zod.ZodString;
+      template: zod.ZodString;
+    }, zod.z.core.$strip>>>;
+    challenge: zod.ZodOptional<zod.ZodObject<{
+      method: zod.ZodOptional<zod.ZodEnum<{
+        passkey: "passkey";
+      }>>;
+      challenge_id: zod.ZodOptional<zod.ZodString>;
+      options: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
+    }, zod.z.core.$strip>>;
+  }, zod.z.core.$strip>;
+  branding: zod.ZodOptional<zod.ZodObject<{
+    layout: zod.ZodDefault<zod.ZodEnum<{
+      centered: "centered";
+      split: "split";
+    }>>;
+    liquid_template: zod.ZodOptional<zod.ZodString>;
+    logo_url: zod.ZodOptional<zod.ZodURL>;
+    font_url: zod.ZodOptional<zod.ZodURL>;
+    hero_url: zod.ZodOptional<zod.ZodURL>;
+  }, zod.z.core.$strip>>;
+  redirect_uri: zod.ZodOptional<zod.ZodURL>;
+  handoff_token: zod.ZodOptional<zod.ZodString>;
+  handoff_token_expires_at: zod.ZodOptional<zod.z.ZodISODateTime>;
+}, zod.z.core.$strip>;
+/**
+ * Submits user input for the current step. The server validates,
+processes (e.g., verifies a credential), advances the state machine
+through any invisible steps, and returns the next visible step.
+
+The response sets an updated encrypted `HttpOnly` cookie (`_zflow`)
+with the new flow state. The server is stateless — all orchestration
+state is carried in this cookie between requests.
+
+**Important:** The `id` in the response may differ from the `id` used in
+the request. This happens when a flow pivots (pushes a new flow onto the
+stack) or when a stacked flow completes (auto-pops to the parent flow).
+Always use the `id` from the latest response for the next request.
+
+## Flow completion
+
+When `step.type` is `complete`, the flow is terminal. The `step.behavior`
+field tells the frontend what to do:
+
+| `behavior`   | Action                                                     |
+|------------- |------------------------------------------------------------|
+| `redirect`   | Navigate to `redirect_uri` (OIDC/SAML auth request done). |
+| `show`       | Render the step as a success screen (e.g., registration).  |
+
+A `complete` step is only returned when the **entire flow stack** is done.
+If a stacked flow (e.g., recovery pivoted from login) finishes, the server
+auto-pops to the parent flow and returns the parent's next step — the
+frontend never sees a `complete` for intermediate flows.
+
+ * @summary Submit step data and advance
+ */
+declare const SubmitFlowStepParams: zod.ZodObject<{
+  id: zod.ZodString;
+}, zod.z.core.$strip>;
+declare const SubmitFlowStepBody: zod.ZodObject<{
+  session_token: zod.ZodOptional<zod.ZodString>;
+  action: zod.ZodString;
+  fields: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
+  gate_proofs: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodString>>;
+  challenge_response: zod.ZodOptional<zod.ZodObject<{
+    challenge_id: zod.ZodOptional<zod.ZodString>;
+    method: zod.ZodOptional<zod.ZodString>;
+    proof: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
+  }, zod.z.core.$strip>>;
+  sso_provider_id: zod.ZodOptional<zod.ZodString>;
+}, zod.z.core.$strip>;
+declare const submitFlowStepResponseStepFieldsRequiredDefault = false;
+declare const submitFlowStepResponseStepFieldsValidationMinLengthMin = 0;
+declare const submitFlowStepResponseStepFieldsValidationMaxLengthMin = 0;
+declare const submitFlowStepResponseStepFieldsDefault: {};
+declare const submitFlowStepResponseStepActionsPrimaryDefault = false;
+declare const submitFlowStepResponseStepActionsDefault: {};
+declare const submitFlowStepResponseStepGatesDefault: {};
+declare const submitFlowStepResponseStepSsoProvidersDefault: never[];
+declare const submitFlowStepResponseBrandingLayoutDefault = "centered";
+declare const SubmitFlowStepResponse: zod.ZodObject<{
+  id: zod.ZodString;
+  session_id: zod.ZodString;
+  session_token: zod.ZodOptional<zod.ZodString>;
+  step: zod.ZodObject<{
+    name: zod.ZodString;
+    texts: zod.ZodOptional<zod.ZodObject<{
+      title_key: zod.ZodOptional<zod.ZodString>;
+      description_key: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodNull]>>;
+    }, zod.z.core.$strip>>;
+    error: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodNull]>>;
+    complete: zod.ZodOptional<zod.ZodEnum<{
+      redirect: "redirect";
+      show: "show";
+    }>>;
+    redirect_url: zod.ZodOptional<zod.ZodURL>;
+    fields: zod.ZodDefault<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+      type: zod.ZodEnum<{
+        number: "number";
+        url: "url";
+        date: "date";
+        email: "email";
+        text: "text";
+        password: "password";
+        tel: "tel";
+        hidden: "hidden";
+      }>;
+      text_key: zod.ZodString;
+      required: zod.ZodDefault<zod.ZodBoolean>;
+      value: zod.ZodOptional<zod.ZodUnknown>;
+      validation: zod.ZodOptional<zod.ZodObject<{
+        format: zod.ZodOptional<zod.ZodEnum<{
+          email: "email";
+          "date-time": "date-time";
+          uuid: "uuid";
+          uri: "uri";
+        }>>;
+        min_length: zod.ZodOptional<zod.ZodNumber>;
+        max_length: zod.ZodOptional<zod.ZodNumber>;
+      }, zod.z.core.$strip>>;
+    }, zod.z.core.$strip>>>;
+    actions: zod.ZodDefault<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+      primary: zod.ZodDefault<zod.ZodBoolean>;
+      text_key: zod.ZodOptional<zod.ZodString>;
+    }, zod.z.core.$strip>>>;
+    gates: zod.ZodDefault<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+      kind: zod.ZodEnum<{
+        captcha: "captcha";
+      }>;
+      provider: zod.ZodString;
+      config: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
+    }, zod.z.core.$strip>>>;
+    sso_providers: zod.ZodDefault<zod.ZodArray<zod.ZodObject<{
+      id: zod.ZodString;
+      name: zod.ZodString;
+      template: zod.ZodString;
+    }, zod.z.core.$strip>>>;
+    challenge: zod.ZodOptional<zod.ZodObject<{
+      method: zod.ZodOptional<zod.ZodEnum<{
+        passkey: "passkey";
+      }>>;
+      challenge_id: zod.ZodOptional<zod.ZodString>;
+      options: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
+    }, zod.z.core.$strip>>;
+  }, zod.z.core.$strip>;
+  branding: zod.ZodOptional<zod.ZodObject<{
+    layout: zod.ZodDefault<zod.ZodEnum<{
+      centered: "centered";
+      split: "split";
+    }>>;
+    liquid_template: zod.ZodOptional<zod.ZodString>;
+    logo_url: zod.ZodOptional<zod.ZodURL>;
+    font_url: zod.ZodOptional<zod.ZodURL>;
+    hero_url: zod.ZodOptional<zod.ZodURL>;
+  }, zod.z.core.$strip>>;
+  redirect_uri: zod.ZodOptional<zod.ZodURL>;
+  handoff_token: zod.ZodOptional<zod.ZodString>;
+  handoff_token_expires_at: zod.ZodOptional<zod.z.ZodISODateTime>;
+}, zod.z.core.$strip>;
+/**
+ * Submits telemetry or fingerprint data from the frontend.
+Does not advance the state machine. Used for risk evaluation.
+
+ * @summary Submit client-side event
+ */
+declare const SubmitFlowEventParams: zod.ZodObject<{
+  id: zod.ZodString;
+}, zod.z.core.$strip>;
+declare const SubmitFlowEventBody: zod.ZodObject<{
+  session_token: zod.ZodOptional<zod.ZodString>;
+  type: zod.ZodEnum<{
+    fingerprint: "fingerprint";
+    telemetry: "telemetry";
+  }>;
+  payload: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
+}, zod.z.core.$strip>;
+/**
+ * Starts a new authentication attempt. This is the entry point for the auth_attempts state machine.
+
+An attempt is an ephemeral (15-minute TTL) state machine that drives a single authentication round.
+It accepts factor challenges, verifies proofs, and completes into a session or handoff token.
+
+Accepts a project_id and challenge_nonce (from POST /bootstrap/challenge). For step-up re-auth,
+also include session_id to add factors to an existing session.
+
+ * @summary Create a new authentication attempt
+ */
+declare const createAuthAttemptBodyProjectIdRegExp: RegExp;
+declare const createAuthAttemptBodySessionIdOneRegExp: RegExp;
+declare const CreateAuthAttemptBody: zod.ZodObject<{
+  project_id: zod.ZodString;
+  challenge_nonce: zod.ZodOptional<zod.ZodString>;
+  session_id: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodNull]>>;
+}, zod.z.core.$strip>;
+/**
+ * Polls the current state of an authentication attempt.
+
+Returns the attempt's state, available factors for the next challenge,
+challenges issued so far, and any errors preventing progress.
+
+Use this for polling during long-running factor verifications (e.g., waiting for
+a federated IdP callback or a device flow).
+
+ * @summary Get authentication attempt state
+ */
+declare const getAuthAttemptPathAttemptIdRegExp: RegExp;
+declare const GetAuthAttemptParams: zod.ZodObject<{
+  attempt_id: zod.ZodString;
+}, zod.z.core.$strip>;
+declare const getAuthAttemptResponseAttemptIdRegExp: RegExp;
+declare const getAuthAttemptResponseProjectIdRegExp: RegExp;
+declare const getAuthAttemptResponseSessionIdOneRegExp: RegExp;
+declare const getAuthAttemptResponseUserIdOneRegExp: RegExp;
+declare const getAuthAttemptResponseCompletedFactorsItemPayloadOneUserIdRegExp: RegExp;
+declare const getAuthAttemptResponseChallengesItemChallengeIdRegExp: RegExp;
+declare const GetAuthAttemptResponse: zod.ZodObject<{
+  attempt_id: zod.ZodString;
+  project_id: zod.ZodString;
+  state: zod.ZodEnum<{
+    in_progress: "in_progress";
+    completed: "completed";
+    failed: "failed";
+    expired: "expired";
+  }>;
+  session_id: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodNull]>>;
+  user_id: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodNull]>>;
+  required_factors: zod.ZodOptional<zod.ZodArray<zod.ZodEnum<{
+    password: "password";
+    passkey: "passkey";
+    identifier: "identifier";
+  }>>>;
+  completed_factors: zod.ZodOptional<zod.ZodArray<zod.ZodObject<{
+    method: zod.ZodEnum<{
+      password: "password";
+      passkey: "passkey";
+      identifier: "identifier";
+    }>;
+    verified_at: zod.z.ZodISODateTime;
+    payload: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodObject<{
+      user_id: zod.ZodString;
+    }, zod.z.core.$strip>, zod.ZodObject<{}, zod.z.core.$strip>, zod.ZodObject<{
+      credential_id: zod.ZodString;
+      user_verified: zod.ZodBoolean;
+      backup_eligible: zod.ZodOptional<zod.ZodBoolean>;
+      backup_state: zod.ZodOptional<zod.ZodBoolean>;
+      authenticator_attachment: zod.ZodOptional<zod.ZodEnum<{
+        platform: "platform";
+        "cross-platform": "cross-platform";
+      }>>;
+    }, zod.z.core.$strip>]>>;
+  }, zod.z.core.$strip>>>;
+  challenges: zod.ZodOptional<zod.ZodArray<zod.ZodObject<{
+    challenge_id: zod.ZodString;
+    method: zod.ZodEnum<{
+      password: "password";
+      passkey: "passkey";
+      identifier: "identifier";
+    }>;
+    state: zod.ZodEnum<{
+      failed: "failed";
+      expired: "expired";
+      pending: "pending";
+    }>;
+    created_at: zod.z.ZodISODateTime;
+    expires_at: zod.ZodOptional<zod.ZodUnion<readonly [zod.z.ZodISODateTime, zod.ZodNull]>>;
+    payload: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodObject<{}, zod.z.core.$strip>, zod.ZodObject<{}, zod.z.core.$strip>, zod.ZodObject<{
+      public_key: zod.ZodObject<{
+        challenge: zod.ZodString;
+        allowed_credentials: zod.ZodOptional<zod.ZodArray<zod.ZodObject<{
+          id: zod.ZodString;
+          type: zod.ZodEnum<{
+            "public-key": "public-key";
+          }>;
+        }, zod.z.core.$strip>>>;
+        user_verification: zod.ZodOptional<zod.ZodEnum<{
+          required: "required";
+          preferred: "preferred";
+          discouraged: "discouraged";
+        }>>;
+        rp_id: zod.ZodOptional<zod.ZodString>;
+      }, zod.z.core.$strip>;
+    }, zod.z.core.$strip>]>>;
+  }, zod.z.core.$strip>>>;
+  expires_at: zod.ZodOptional<zod.z.ZodISODateTime>;
+  created_at: zod.z.ZodISODateTime;
+}, zod.z.core.$strip>;
+/**
+ * Issues a single-factor verification challenge within an auth attempt.
+
+This advances the authentication state machine by requesting a specific factor method
+(password, passkey, TOTP, OTP via SMS, etc.). The server responds with challenge details
+including method, metadata, and any UI hints. The client then verifies the proof
+by calling POST /auth_attempts/{attempt_id}/challenges/{challenge_id}/verify.
+
+ * @summary Issue a factor challenge
+ */
+declare const issueChallengePathAttemptIdRegExp: RegExp;
+declare const IssueChallengeParams: zod.ZodObject<{
+  attempt_id: zod.ZodString;
+}, zod.z.core.$strip>;
+declare const IssueChallengeBody: zod.ZodObject<{
+  method: zod.ZodEnum<{
+    password: "password";
+    passkey: "passkey";
+    identifier: "identifier";
+  }>;
+  passkey_options: zod.ZodOptional<zod.ZodObject<{
+    rp_id: zod.ZodOptional<zod.ZodString>;
+    rp_origins: zod.ZodOptional<zod.ZodArray<zod.ZodURL>>;
+    user_verification: zod.ZodOptional<zod.ZodEnum<{
+      required: "required";
+      preferred: "preferred";
+      discouraged: "discouraged";
+    }>>;
+  }, zod.z.core.$strip>>;
+}, zod.z.core.$strip>;
+/**
+ * Submits a proof (credential, code, assertion) to verify a factor challenge.
+
+The proof format depends on the challenge method. For example:
+- `password` method: { password: "…" }
+- `totp` method: { totp: { code: "123456" } }
+- `passkey` method: { passkey: { assertion: "…" } }
+- `recovery_code` method: { recovery_code: "…" }
+
+On successful verification, the factor is written to the auth attempt.
+The attempt moves to the next pending challenge or completes if all required factors are verified.
+
+ * @summary Verify a factor proof
+ */
+declare const verifyChallengeProofPathAttemptIdRegExp: RegExp;
+declare const verifyChallengeProofPathChallengeIdRegExp: RegExp;
+declare const VerifyChallengeProofParams: zod.ZodObject<{
+  attempt_id: zod.ZodString;
+  challenge_id: zod.ZodString;
+}, zod.z.core.$strip>;
+declare const VerifyChallengeProofHeader: zod.ZodObject<{
+  "Idempotency-Key": zod.ZodOptional<zod.ZodString>;
+}, zod.z.core.$strict>;
+declare const VerifyChallengeProofBody: zod.ZodUnion<readonly [zod.ZodObject<{
+  login_name: zod.ZodString;
+}, zod.z.core.$strip>, zod.ZodObject<{
+  password: zod.ZodString;
+}, zod.z.core.$strip>, zod.ZodObject<{
+  passkey: zod.ZodObject<{
+    assertion: zod.ZodRecord<zod.ZodString, zod.ZodUnknown>;
+  }, zod.z.core.$strip>;
+}, zod.z.core.$strip>]>;
+declare const verifyChallengeProofResponseAttemptIdRegExp: RegExp;
+declare const verifyChallengeProofResponseProjectIdRegExp: RegExp;
+declare const verifyChallengeProofResponseSessionIdOneRegExp: RegExp;
+declare const verifyChallengeProofResponseUserIdOneRegExp: RegExp;
+declare const verifyChallengeProofResponseCompletedFactorsItemPayloadOneUserIdRegExp: RegExp;
+declare const verifyChallengeProofResponseChallengesItemChallengeIdRegExp: RegExp;
+declare const VerifyChallengeProofResponse: zod.ZodObject<{
+  attempt_id: zod.ZodString;
+  project_id: zod.ZodString;
+  state: zod.ZodEnum<{
+    in_progress: "in_progress";
+    completed: "completed";
+    failed: "failed";
+    expired: "expired";
+  }>;
+  session_id: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodNull]>>;
+  user_id: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodNull]>>;
+  required_factors: zod.ZodOptional<zod.ZodArray<zod.ZodEnum<{
+    password: "password";
+    passkey: "passkey";
+    identifier: "identifier";
+  }>>>;
+  completed_factors: zod.ZodOptional<zod.ZodArray<zod.ZodObject<{
+    method: zod.ZodEnum<{
+      password: "password";
+      passkey: "passkey";
+      identifier: "identifier";
+    }>;
+    verified_at: zod.z.ZodISODateTime;
+    payload: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodObject<{
+      user_id: zod.ZodString;
+    }, zod.z.core.$strip>, zod.ZodObject<{}, zod.z.core.$strip>, zod.ZodObject<{
+      credential_id: zod.ZodString;
+      user_verified: zod.ZodBoolean;
+      backup_eligible: zod.ZodOptional<zod.ZodBoolean>;
+      backup_state: zod.ZodOptional<zod.ZodBoolean>;
+      authenticator_attachment: zod.ZodOptional<zod.ZodEnum<{
+        platform: "platform";
+        "cross-platform": "cross-platform";
+      }>>;
+    }, zod.z.core.$strip>]>>;
+  }, zod.z.core.$strip>>>;
+  challenges: zod.ZodOptional<zod.ZodArray<zod.ZodObject<{
+    challenge_id: zod.ZodString;
+    method: zod.ZodEnum<{
+      password: "password";
+      passkey: "passkey";
+      identifier: "identifier";
+    }>;
+    state: zod.ZodEnum<{
+      failed: "failed";
+      expired: "expired";
+      pending: "pending";
+    }>;
+    created_at: zod.z.ZodISODateTime;
+    expires_at: zod.ZodOptional<zod.ZodUnion<readonly [zod.z.ZodISODateTime, zod.ZodNull]>>;
+    payload: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodObject<{}, zod.z.core.$strip>, zod.ZodObject<{}, zod.z.core.$strip>, zod.ZodObject<{
+      public_key: zod.ZodObject<{
+        challenge: zod.ZodString;
+        allowed_credentials: zod.ZodOptional<zod.ZodArray<zod.ZodObject<{
+          id: zod.ZodString;
+          type: zod.ZodEnum<{
+            "public-key": "public-key";
+          }>;
+        }, zod.z.core.$strip>>>;
+        user_verification: zod.ZodOptional<zod.ZodEnum<{
+          required: "required";
+          preferred: "preferred";
+          discouraged: "discouraged";
+        }>>;
+        rp_id: zod.ZodOptional<zod.ZodString>;
+      }, zod.z.core.$strip>;
+    }, zod.z.core.$strip>]>>;
+  }, zod.z.core.$strip>>>;
+  expires_at: zod.ZodOptional<zod.z.ZodISODateTime>;
+  created_at: zod.z.ZodISODateTime;
+}, zod.z.core.$strip>;
+/**
+ * Completes the authentication attempt and mints a `handoff_token`.
+
+Call this after all required factors have been verified and the attempt is in `completed` state.
+The handoff token is short-lived (≤60 seconds) and must be exchanged at
+POST /sessions/exchange to receive the final session and session_token.
+
+The handoff token is:
+- Single-use (atomic exchange, no retry)
+- Audience-bound (requires matching project key for exchange)
+- Idempotency-safe within a 5-minute window (see conventions)
+
+ * @summary Complete authentication and create handoff token
+ */
+declare const createHandoffPathAttemptIdRegExp: RegExp;
+declare const CreateHandoffParams: zod.ZodObject<{
+  attempt_id: zod.ZodString;
+}, zod.z.core.$strip>;
+declare const CreateHandoffHeader: zod.ZodObject<{
+  "Idempotency-Key": zod.ZodOptional<zod.ZodString>;
+}, zod.z.core.$strict>;
+declare const CreateHandoffResponse: zod.ZodObject<{
+  handoff_token: zod.ZodString;
+  expires_at: zod.z.ZodISODateTime;
+}, zod.z.core.$strip>;
+/**
+ * @summary Create project
+ */
+declare const CreateProjectBody: zod.ZodObject<{
+  previewOrigins: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+}, zod.z.core.$strip>;
+/**
+ * Returns the current state of a project.
+
+ * @summary Get project
+ */
+declare const getProjectPathProjectIdRegExp: RegExp;
+declare const GetProjectParams: zod.ZodObject<{
+  project_id: zod.ZodString;
+}, zod.z.core.$strip>;
+declare const GetProjectResponse: zod.ZodObject<{
+  id: zod.ZodString;
+  createdAt: zod.z.ZodISODateTime;
+  updatedAt: zod.z.ZodISODateTime;
+}, zod.z.core.$strip>;
+/**
+ * Creates an anonymous session shell with no user and no factors (`state: building`).
+
+This is optional — an `auth_attempt` will create a session implicitly if none is provided.
+Use this explicitly when you want to:
+- Pre-allocate a `session_id` before the user is known, so device/telemetry signals
+  can be correlated with the eventual authenticated session from the start.
+- Track anonymous state (bot detection, device fingerprint) that survives until authentication.
+
+The returned `session_token` authorises GET and DELETE on this session.
+It is superseded when a handoff exchange completes — clients must replace it at that point.
+
+Anonymous sessions expire aggressively (10-minute TTL). The TTL resets to the configured
+full session TTL when the first authentication factor is written via a completing `auth_attempt`.
+
+ * @summary Create an anonymous session shell
+ */
+declare const createSessionBodyProjectIdRegExp: RegExp;
+declare const CreateSessionBody: zod.ZodObject<{
+  project_id: zod.ZodString;
+  user_agent: zod.ZodOptional<zod.ZodObject<{
+    fingerprint: zod.ZodOptional<zod.ZodString>;
+    ip: zod.ZodOptional<zod.ZodString>;
+  }, zod.z.core.$strip>>;
+}, zod.z.core.$strip>;
+/**
+ * Returns a paginated list of sessions for a project.
+Requires a project service key (OAuth2 client credentials).
+
+ * @summary List sessions
+ */
+declare const listSessionsQueryLimitDefault = 20;
+declare const listSessionsQueryLimitMax = 100;
+declare const listSessionsQueryProjectIdRegExp: RegExp;
+declare const listSessionsQueryUserIdRegExp: RegExp;
+declare const ListSessionsQueryParams: zod.ZodObject<{
+  limit: zod.ZodDefault<zod.ZodNumber>;
+  page_token: zod.ZodOptional<zod.ZodString>;
+  project_id: zod.ZodString;
+  state: zod.ZodOptional<zod.ZodEnum<{
+    active: "active";
+    expired: "expired";
+    building: "building";
+    revoked: "revoked";
+  }>>;
+  user_id: zod.ZodOptional<zod.ZodString>;
+}, zod.z.core.$strict>;
+declare const listSessionsResponseSessionsItemSessionIdRegExp: RegExp;
+declare const listSessionsResponseSessionsItemProjectIdRegExp: RegExp;
+declare const listSessionsResponseSessionsItemUserIdOneRegExp: RegExp;
+declare const listSessionsResponseSessionsItemFactorsItemPayloadOneUserIdRegExp: RegExp;
+declare const ListSessionsResponse: zod.ZodObject<{
+  sessions: zod.ZodArray<zod.ZodObject<{
+    session_id: zod.ZodString;
+    project_id: zod.ZodString;
+    state: zod.ZodEnum<{
+      active: "active";
+      expired: "expired";
+      building: "building";
+      revoked: "revoked";
+    }>;
+    user_id: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodNull]>>;
+    factors: zod.ZodArray<zod.ZodObject<{
+      method: zod.ZodEnum<{
+        password: "password";
+        passkey: "passkey";
+        identifier: "identifier";
+      }>;
+      verified_at: zod.z.ZodISODateTime;
+      payload: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodObject<{
+        user_id: zod.ZodString;
+      }, zod.z.core.$strip>, zod.ZodObject<{}, zod.z.core.$strip>, zod.ZodObject<{
+        credential_id: zod.ZodString;
+        user_verified: zod.ZodBoolean;
+        backup_eligible: zod.ZodOptional<zod.ZodBoolean>;
+        backup_state: zod.ZodOptional<zod.ZodBoolean>;
+        authenticator_attachment: zod.ZodOptional<zod.ZodEnum<{
+          platform: "platform";
+          "cross-platform": "cross-platform";
+        }>>;
+      }, zod.z.core.$strip>]>>;
+    }, zod.z.core.$strip>>;
+    assurance_levels: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+    metadata: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodRecord<zod.ZodString, zod.ZodUnknown>, zod.ZodNull]>>;
+    user_agent: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodObject<{
+      fingerprint: zod.ZodOptional<zod.ZodString>;
+      ip: zod.ZodOptional<zod.ZodString>;
+    }, zod.z.core.$strip>, zod.ZodNull]>>;
+    created_at: zod.z.ZodISODateTime;
+    expires_at: zod.z.ZodISODateTime;
+  }, zod.z.core.$strip>>;
+  next_page_token: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodNull]>>;
+}, zod.z.core.$strip>;
+/**
+ * Consumes a one-time `handoff_token` minted by `POST /auth_attempts/{id}/handoff`
+and returns the resulting session and a `session_token`.
+
+The server resolves the originating `auth_attempt` from the token and then:
+
+| Originating auth_attempt | Outcome |
+|---|---|
+| No `session_id` | A new authenticated session is **created**. |
+| `session_id` points to an anonymous shell | Existing session is **upgraded** — user and factors written in, TTL reset to full session TTL. |
+| `session_id` points to an active session (step-up) | Existing session is **upgraded** — new factors merged, `assurance_levels[]` expanded. |
+
+The response shape is identical in all three cases.
+
+The `session_token` supersedes any previously issued `session_token` for the same session.
+Clients must replace their stored token at this point.
+
+Requires a project service key (OAuth2 client credentials).
+
+ * @summary Exchange handoff token for a session
+ */
+declare const exchangeHandoffQueryProjectIdRegExp: RegExp;
+declare const ExchangeHandoffQueryParams: zod.ZodObject<{
+  project_id: zod.ZodString;
+}, zod.z.core.$strict>;
+declare const ExchangeHandoffHeader: zod.ZodObject<{
+  "Idempotency-Key": zod.ZodOptional<zod.ZodString>;
+}, zod.z.core.$strict>;
+declare const ExchangeHandoffBody: zod.ZodObject<{
+  handoff_token: zod.ZodString;
+  ttl: zod.ZodOptional<zod.ZodString>;
+}, zod.z.core.$strip>;
+declare const exchangeHandoffResponseSessionSessionIdRegExp: RegExp;
+declare const exchangeHandoffResponseSessionProjectIdRegExp: RegExp;
+declare const exchangeHandoffResponseSessionUserIdOneRegExp: RegExp;
+declare const exchangeHandoffResponseSessionFactorsItemPayloadOneUserIdRegExp: RegExp;
+declare const ExchangeHandoffResponse: zod.ZodObject<{
+  session: zod.ZodObject<{
+    session_id: zod.ZodString;
+    project_id: zod.ZodString;
+    state: zod.ZodEnum<{
+      active: "active";
+      expired: "expired";
+      building: "building";
+      revoked: "revoked";
+    }>;
+    user_id: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodNull]>>;
+    factors: zod.ZodArray<zod.ZodObject<{
+      method: zod.ZodEnum<{
+        password: "password";
+        passkey: "passkey";
+        identifier: "identifier";
+      }>;
+      verified_at: zod.z.ZodISODateTime;
+      payload: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodObject<{
+        user_id: zod.ZodString;
+      }, zod.z.core.$strip>, zod.ZodObject<{}, zod.z.core.$strip>, zod.ZodObject<{
+        credential_id: zod.ZodString;
+        user_verified: zod.ZodBoolean;
+        backup_eligible: zod.ZodOptional<zod.ZodBoolean>;
+        backup_state: zod.ZodOptional<zod.ZodBoolean>;
+        authenticator_attachment: zod.ZodOptional<zod.ZodEnum<{
+          platform: "platform";
+          "cross-platform": "cross-platform";
+        }>>;
+      }, zod.z.core.$strip>]>>;
+    }, zod.z.core.$strip>>;
+    assurance_levels: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+    metadata: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodRecord<zod.ZodString, zod.ZodUnknown>, zod.ZodNull]>>;
+    user_agent: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodObject<{
+      fingerprint: zod.ZodOptional<zod.ZodString>;
+      ip: zod.ZodOptional<zod.ZodString>;
+    }, zod.z.core.$strip>, zod.ZodNull]>>;
+    created_at: zod.z.ZodISODateTime;
+    expires_at: zod.z.ZodISODateTime;
+  }, zod.z.core.$strip>;
+  session_token: zod.ZodString;
+}, zod.z.core.$strip>;
+/**
+ * Returns the current state of a session including its factors and all currently
+satisfied assurance levels.
+
+`assurance_levels[]` may shrink over time as factor freshness windows expire,
+without the session itself expiring. Use step-up authentication (a new `auth_attempt`
+against the same `session_id`) to restore a dropped assurance level.
+
+ * @summary Get session state
+ */
+declare const getSessionPathSessionIdRegExp: RegExp;
+declare const GetSessionParams: zod.ZodObject<{
+  session_id: zod.ZodString;
+}, zod.z.core.$strip>;
+declare const getSessionQueryProjectIdRegExp: RegExp;
+declare const GetSessionQueryParams: zod.ZodObject<{
+  project_id: zod.ZodString;
+}, zod.z.core.$strict>;
+declare const getSessionResponseSessionIdRegExp: RegExp;
+declare const getSessionResponseProjectIdRegExp: RegExp;
+declare const getSessionResponseUserIdOneRegExp: RegExp;
+declare const getSessionResponseFactorsItemPayloadOneUserIdRegExp: RegExp;
+declare const GetSessionResponse: zod.ZodObject<{
+  session_id: zod.ZodString;
+  project_id: zod.ZodString;
+  state: zod.ZodEnum<{
+    active: "active";
+    expired: "expired";
+    building: "building";
+    revoked: "revoked";
+  }>;
+  user_id: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodNull]>>;
+  factors: zod.ZodArray<zod.ZodObject<{
+    method: zod.ZodEnum<{
+      password: "password";
+      passkey: "passkey";
+      identifier: "identifier";
+    }>;
+    verified_at: zod.z.ZodISODateTime;
+    payload: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodObject<{
+      user_id: zod.ZodString;
+    }, zod.z.core.$strip>, zod.ZodObject<{}, zod.z.core.$strip>, zod.ZodObject<{
+      credential_id: zod.ZodString;
+      user_verified: zod.ZodBoolean;
+      backup_eligible: zod.ZodOptional<zod.ZodBoolean>;
+      backup_state: zod.ZodOptional<zod.ZodBoolean>;
+      authenticator_attachment: zod.ZodOptional<zod.ZodEnum<{
+        platform: "platform";
+        "cross-platform": "cross-platform";
+      }>>;
+    }, zod.z.core.$strip>]>>;
+  }, zod.z.core.$strip>>;
+  assurance_levels: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  metadata: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodRecord<zod.ZodString, zod.ZodUnknown>, zod.ZodNull]>>;
+  user_agent: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodObject<{
+    fingerprint: zod.ZodOptional<zod.ZodString>;
+    ip: zod.ZodOptional<zod.ZodString>;
+  }, zod.z.core.$strip>, zod.ZodNull]>>;
+  created_at: zod.z.ZodISODateTime;
+  expires_at: zod.z.ZodISODateTime;
+}, zod.z.core.$strip>;
+/**
+ * Revokes the session immediately (`state: revoked`). This is the logout operation.
+
+The session_token issued at creation (or superseded by a handoff exchange) is required.
+After revocation, any tokens derived from this session are invalidated.
+
+ * @summary Revoke session
+ */
+declare const revokeSessionPathSessionIdRegExp: RegExp;
+declare const RevokeSessionParams: zod.ZodObject<{
+  session_id: zod.ZodString;
+}, zod.z.core.$strip>;
+declare const revokeSessionQueryProjectIdRegExp: RegExp;
+declare const RevokeSessionQueryParams: zod.ZodObject<{
+  project_id: zod.ZodString;
+}, zod.z.core.$strict>;
+/**
+ * Returns the current state of the current session including its factors and all currently
+satisfied assurance levels.
+
+`assurance_levels[]` may shrink over time as factor freshness windows expire,
+without the session itself expiring. Use step-up authentication (a new `auth_attempt`
+against the same `session_id`) to restore a dropped assurance level.
+
+ * @summary Get my session state
+ */
+declare const getMySessionResponseSessionIdRegExp: RegExp;
+declare const getMySessionResponseProjectIdRegExp: RegExp;
+declare const getMySessionResponseUserIdOneRegExp: RegExp;
+declare const getMySessionResponseFactorsItemPayloadOneUserIdRegExp: RegExp;
+declare const GetMySessionResponse: zod.ZodObject<{
+  session_id: zod.ZodString;
+  project_id: zod.ZodString;
+  state: zod.ZodEnum<{
+    active: "active";
+    expired: "expired";
+    building: "building";
+    revoked: "revoked";
+  }>;
+  user_id: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodNull]>>;
+  factors: zod.ZodArray<zod.ZodObject<{
+    method: zod.ZodEnum<{
+      password: "password";
+      passkey: "passkey";
+      identifier: "identifier";
+    }>;
+    verified_at: zod.z.ZodISODateTime;
+    payload: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodObject<{
+      user_id: zod.ZodString;
+    }, zod.z.core.$strip>, zod.ZodObject<{}, zod.z.core.$strip>, zod.ZodObject<{
+      credential_id: zod.ZodString;
+      user_verified: zod.ZodBoolean;
+      backup_eligible: zod.ZodOptional<zod.ZodBoolean>;
+      backup_state: zod.ZodOptional<zod.ZodBoolean>;
+      authenticator_attachment: zod.ZodOptional<zod.ZodEnum<{
+        platform: "platform";
+        "cross-platform": "cross-platform";
+      }>>;
+    }, zod.z.core.$strip>]>>;
+  }, zod.z.core.$strip>>;
+  assurance_levels: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  metadata: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodRecord<zod.ZodString, zod.ZodUnknown>, zod.ZodNull]>>;
+  user_agent: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodObject<{
+    fingerprint: zod.ZodOptional<zod.ZodString>;
+    ip: zod.ZodOptional<zod.ZodString>;
+  }, zod.z.core.$strip>, zod.ZodNull]>>;
+  created_at: zod.z.ZodISODateTime;
+  expires_at: zod.z.ZodISODateTime;
+}, zod.z.core.$strip>;
+/**
+ * Create a new schema. The schema definition must include a unique $id field,
+which will be used to identify the schema in future requests. The $id must
+be a valid URI and should ideally point to the location where the schema
+can be accessed.
+
+The schema can either be a concrete schema, e.g. a user schema, or a
+schema-url which will be resolved by the server.
+
+ * @summary Create new schema
+ */
+declare const createSchemaQueryProjectIdRegExp: RegExp;
+declare const createSchemaQueryTeamIdRegExp: RegExp;
+declare const CreateSchemaQueryParams: zod.ZodObject<{
+  project_id: zod.ZodString;
+  team_id: zod.ZodOptional<zod.ZodString>;
+}, zod.z.core.$strict>;
+declare const createSchemaBodyOneXAuthMethodsPasswordPositionMin = 0;
+declare const createSchemaBodyOneXAuthMethodsPasskeyPositionMin = 0;
+declare const createSchemaBodyOneXAuthMethodsMagicLinkPositionMin = 0;
+declare const createSchemaBodyOneXAuthMethodsSsoPositionMin = 0;
+declare const createSchemaBodyOneXAuthMethodsOtpPositionMin = 0;
+declare const createSchemaBodyOnePropertiesXEditableDefault = true;
+declare const createSchemaBodyOnePropertiesXSensitiveDefault = false;
+declare const createSchemaBodyOnePropertiesXMfaDefault = false;
+declare const CreateSchemaBody: zod.ZodUnion<readonly [zod.ZodObject<{
+  kind: zod.ZodLiteral<"user-schema">;
+  metaSchema: zod.ZodURL;
+  "x-auth-methods": zod.ZodObject<{
+    password: zod.ZodOptional<zod.ZodObject<{
+      enabled: zod.ZodBoolean;
+      position: zod.ZodNumber;
+    }, zod.z.core.$strip>>;
+    passkey: zod.ZodOptional<zod.ZodObject<{
+      enabled: zod.ZodBoolean;
+      position: zod.ZodNumber;
+    }, zod.z.core.$strip>>;
+    magic_link: zod.ZodOptional<zod.ZodObject<{
+      enabled: zod.ZodBoolean;
+      position: zod.ZodNumber;
+    }, zod.z.core.$strip>>;
+    sso: zod.ZodOptional<zod.ZodObject<{
+      enabled: zod.ZodBoolean;
+      position: zod.ZodNumber;
+    }, zod.z.core.$strip>>;
+    otp: zod.ZodOptional<zod.ZodObject<{
+      enabled: zod.ZodBoolean;
+      position: zod.ZodNumber;
+    }, zod.z.core.$strip>>;
+  }, zod.z.core.$strip>;
+  properties: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+    "x-verify": zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodNull]>>;
+    "x-unique": zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodEnum<{
+      unspecified: "unspecified";
+      project: "project";
+      team: "team";
+    }>, zod.ZodNull]>>;
+    "x-claim": zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodNull]>>;
+    "x-editable": zod.ZodDefault<zod.ZodBoolean>;
+    "x-sensitive": zod.ZodDefault<zod.ZodBoolean>;
+    "x-mfa": zod.ZodDefault<zod.ZodBoolean>;
+    properties: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
+  }, zod.z.core.$strip>>>;
+}, zod.z.core.$strip>, zod.ZodObject<{
+  kind: zod.ZodLiteral<"schema-url">;
+  url: zod.ZodURL;
+}, zod.z.core.$strip>]>;
+/**
+ * Get a schema by its ID. This will return the default revision of the schema.
+ * @summary Get schema by ID
+ */
+declare const GetSchemaByIdParams: zod.ZodObject<{
+  id: zod.ZodString;
+}, zod.z.core.$strip>;
+declare const getSchemaByIdQueryProjectIdRegExp: RegExp;
+declare const getSchemaByIdQueryTeamIdRegExp: RegExp;
+declare const GetSchemaByIdQueryParams: zod.ZodObject<{
+  project_id: zod.ZodString;
+  team_id: zod.ZodOptional<zod.ZodString>;
+}, zod.z.core.$strict>;
+declare const getSchemaByIdResponseOneXAuthMethodsPasswordPositionMin = 0;
+declare const getSchemaByIdResponseOneXAuthMethodsPasskeyPositionMin = 0;
+declare const getSchemaByIdResponseOneXAuthMethodsMagicLinkPositionMin = 0;
+declare const getSchemaByIdResponseOneXAuthMethodsSsoPositionMin = 0;
+declare const getSchemaByIdResponseOneXAuthMethodsOtpPositionMin = 0;
+declare const getSchemaByIdResponseOnePropertiesXEditableDefault = true;
+declare const getSchemaByIdResponseOnePropertiesXSensitiveDefault = false;
+declare const getSchemaByIdResponseOnePropertiesXMfaDefault = false;
+declare const GetSchemaByIdResponse: zod.ZodObject<{
+  kind: zod.ZodLiteral<"user-schema">;
+  metaSchema: zod.ZodURL;
+  "x-auth-methods": zod.ZodObject<{
+    password: zod.ZodOptional<zod.ZodObject<{
+      enabled: zod.ZodBoolean;
+      position: zod.ZodNumber;
+    }, zod.z.core.$strip>>;
+    passkey: zod.ZodOptional<zod.ZodObject<{
+      enabled: zod.ZodBoolean;
+      position: zod.ZodNumber;
+    }, zod.z.core.$strip>>;
+    magic_link: zod.ZodOptional<zod.ZodObject<{
+      enabled: zod.ZodBoolean;
+      position: zod.ZodNumber;
+    }, zod.z.core.$strip>>;
+    sso: zod.ZodOptional<zod.ZodObject<{
+      enabled: zod.ZodBoolean;
+      position: zod.ZodNumber;
+    }, zod.z.core.$strip>>;
+    otp: zod.ZodOptional<zod.ZodObject<{
+      enabled: zod.ZodBoolean;
+      position: zod.ZodNumber;
+    }, zod.z.core.$strip>>;
+  }, zod.z.core.$strip>;
+  properties: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+    "x-verify": zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodNull]>>;
+    "x-unique": zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodEnum<{
+      unspecified: "unspecified";
+      project: "project";
+      team: "team";
+    }>, zod.ZodNull]>>;
+    "x-claim": zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodNull]>>;
+    "x-editable": zod.ZodDefault<zod.ZodBoolean>;
+    "x-sensitive": zod.ZodDefault<zod.ZodBoolean>;
+    "x-mfa": zod.ZodDefault<zod.ZodBoolean>;
+    properties: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
+  }, zod.z.core.$strip>>>;
+}, zod.z.core.$strip>;
+/**
+ * Creates a new flow definition.
+Flow definitions are templates that define the sequence of steps (capabilities)
+for a particular user journey (e.g., registration, login, password reset).
+
+Flow definitions are created based on the flow meta schema, which includes the flow's purpose, audience, and the steps involved.
+
+ * @summary Create a new flow definition
+ */
+declare const createFlowDefinitionBodyProjectIdRegExp: RegExp;
+declare const createFlowDefinitionBodyFlowDefinitionNameRegExp: RegExp;
+declare const createFlowDefinitionBodyFlowDefinitionStepsItemFieldsDefault: never[];
+declare const createFlowDefinitionBodyFlowDefinitionStepsItemActionsPrimaryDefault = false;
+declare const createFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault: {};
+declare const createFlowDefinitionBodyFlowDefinitionStepsItemGatesDefault: {};
+declare const createFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersDefault: never[];
+declare const CreateFlowDefinitionBody: zod.ZodObject<{
+  project_id: zod.ZodString;
+  schema_uri: zod.ZodOptional<zod.ZodURL>;
+  flow_definition: zod.ZodObject<{
+    name: zod.ZodString;
+    user_schema: zod.ZodURL;
+    purposes: zod.ZodRecord<zod.ZodString, zod.ZodString>;
+    audience: zod.ZodOptional<zod.ZodObject<{
+      team_ids: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+      app_ids: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+    }, zod.z.core.$strip>>;
+    steps: zod.ZodArray<zod.ZodObject<{
+      name: zod.ZodString;
+      fields: zod.ZodDefault<zod.ZodArray<zod.ZodString>>;
+      actions: zod.ZodDefault<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+        primary: zod.ZodDefault<zod.ZodBoolean>;
+        text_key: zod.ZodOptional<zod.ZodString>;
+      }, zod.z.core.$strip>>>;
+      gates: zod.ZodDefault<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+        kind: zod.ZodEnum<{
+          captcha: "captcha";
+        }>;
+        provider: zod.ZodString;
+        config: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
+      }, zod.z.core.$strip>>>;
+      sso_providers: zod.ZodDefault<zod.ZodArray<zod.ZodObject<{
+        id: zod.ZodString;
+        name: zod.ZodString;
+        template: zod.ZodString;
+      }, zod.z.core.$strip>>>;
+      on_success: zod.ZodOptional<zod.ZodEnum<{
+        create_user: "create_user";
+      }>>;
+      complete: zod.ZodOptional<zod.ZodEnum<{
+        redirect: "redirect";
+        show: "show";
+      }>>;
+      transitions: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+        target: zod.ZodString;
+        action: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodEnum<{
+          switch: "switch";
+          pivot: "pivot";
+        }>, zod.ZodNull]>>;
+      }, zod.z.core.$strip>>>;
+    }, zod.z.core.$strip>>;
+  }, zod.z.core.$strip>;
+}, zod.z.core.$strip>;
+/**
+ * Retrieves a list of all flow definitions.
+This endpoint can be used to view existing flow definitions and their configurations.
+
+ * @summary List flow definitions
+ */
+declare const listFlowDefinitionsQueryLimitDefault = 20;
+declare const listFlowDefinitionsQueryLimitMax = 100;
+declare const listFlowDefinitionsQueryProjectIdRegExp: RegExp;
+declare const ListFlowDefinitionsQueryParams: zod.ZodObject<{
+  limit: zod.ZodDefault<zod.ZodNumber>;
+  page_token: zod.ZodOptional<zod.ZodString>;
+  project_id: zod.ZodString;
+  purpose: zod.ZodOptional<zod.ZodEnum<{
+    login: "login";
+    register: "register";
+    recovery: "recovery";
+    profiling: "profiling";
+    reauth: "reauth";
+    link_account: "link_account";
+  }>>;
+}, zod.z.core.$strict>;
+declare const listFlowDefinitionsResponseFlowDefinitionsItemNameRegExp: RegExp;
+declare const ListFlowDefinitionsResponse: zod.ZodObject<{
+  flow_definitions: zod.ZodArray<zod.ZodObject<{
+    id: zod.ZodString;
+    name: zod.ZodString;
+    project_id: zod.ZodString;
+    schema_uri: zod.ZodURL;
+    status: zod.ZodString;
+    created_at: zod.z.ZodISODateTime;
+    updated_at: zod.z.ZodISODateTime;
+  }, zod.z.core.$strip>>;
+  next_page_token: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodNull]>>;
+}, zod.z.core.$strip>;
+/**
+ * Get a flow definition by id
+ * @summary Get a flow definition by id
+ */
+declare const GetFlowDefinitionParams: zod.ZodObject<{
+  id: zod.ZodString;
+}, zod.z.core.$strip>;
+declare const getFlowDefinitionResponseOneNameRegExp: RegExp;
+declare const getFlowDefinitionResponseOneStepsItemFieldsDefault: never[];
+declare const getFlowDefinitionResponseOneStepsItemActionsPrimaryDefault = false;
+declare const getFlowDefinitionResponseOneStepsItemActionsDefault: {};
+declare const getFlowDefinitionResponseOneStepsItemGatesDefault: {};
+declare const getFlowDefinitionResponseOneStepsItemSsoProvidersDefault: never[];
+declare const GetFlowDefinitionResponse: zod.ZodIntersection<zod.ZodObject<{
+  name: zod.ZodString;
+  user_schema: zod.ZodURL;
+  purposes: zod.ZodRecord<zod.ZodString, zod.ZodString>;
+  audience: zod.ZodOptional<zod.ZodObject<{
+    team_ids: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+    app_ids: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  }, zod.z.core.$strip>>;
+  steps: zod.ZodArray<zod.ZodObject<{
+    name: zod.ZodString;
+    fields: zod.ZodDefault<zod.ZodArray<zod.ZodString>>;
+    actions: zod.ZodDefault<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+      primary: zod.ZodDefault<zod.ZodBoolean>;
+      text_key: zod.ZodOptional<zod.ZodString>;
+    }, zod.z.core.$strip>>>;
+    gates: zod.ZodDefault<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+      kind: zod.ZodEnum<{
+        captcha: "captcha";
+      }>;
+      provider: zod.ZodString;
+      config: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
+    }, zod.z.core.$strip>>>;
+    sso_providers: zod.ZodDefault<zod.ZodArray<zod.ZodObject<{
+      id: zod.ZodString;
+      name: zod.ZodString;
+      template: zod.ZodString;
+    }, zod.z.core.$strip>>>;
+    on_success: zod.ZodOptional<zod.ZodEnum<{
+      create_user: "create_user";
+    }>>;
+    complete: zod.ZodOptional<zod.ZodEnum<{
+      redirect: "redirect";
+      show: "show";
+    }>>;
+    transitions: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+      target: zod.ZodString;
+      action: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodEnum<{
+        switch: "switch";
+        pivot: "pivot";
+      }>, zod.ZodNull]>>;
+    }, zod.z.core.$strip>>>;
+  }, zod.z.core.$strip>>;
+}, zod.z.core.$strip>, zod.ZodObject<{
+  id: zod.ZodString;
+  project_id: zod.ZodString;
+  schema_uri: zod.ZodURL;
+  status: zod.ZodString;
+  created_at: zod.z.ZodISODateTime;
+  updated_at: zod.z.ZodISODateTime;
+}, zod.z.core.$strip>>;
+/**
+ * Update a flow definition by id
+ * @summary Update a flow definition by id
+ */
+declare const UpdateFlowDefinitionParams: zod.ZodObject<{
+  id: zod.ZodString;
+}, zod.z.core.$strip>;
+declare const updateFlowDefinitionBodyStepsItemFieldsDefault: never[];
+declare const updateFlowDefinitionBodyStepsItemActionsPrimaryDefault = false;
+declare const updateFlowDefinitionBodyStepsItemActionsDefault: {};
+declare const updateFlowDefinitionBodyStepsItemGatesDefault: {};
+declare const updateFlowDefinitionBodyStepsItemSsoProvidersDefault: never[];
+declare const UpdateFlowDefinitionBody: zod.ZodObject<{
+  user_schema: zod.ZodOptional<zod.ZodURL>;
+  purposes: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodString>>;
+  audience: zod.ZodOptional<zod.ZodObject<{
+    team_ids: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+    app_ids: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  }, zod.z.core.$strip>>;
+  steps: zod.ZodOptional<zod.ZodArray<zod.ZodObject<{
+    name: zod.ZodString;
+    fields: zod.ZodDefault<zod.ZodArray<zod.ZodString>>;
+    actions: zod.ZodDefault<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+      primary: zod.ZodDefault<zod.ZodBoolean>;
+      text_key: zod.ZodOptional<zod.ZodString>;
+    }, zod.z.core.$strip>>>;
+    gates: zod.ZodDefault<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+      kind: zod.ZodEnum<{
+        captcha: "captcha";
+      }>;
+      provider: zod.ZodString;
+      config: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
+    }, zod.z.core.$strip>>>;
+    sso_providers: zod.ZodDefault<zod.ZodArray<zod.ZodObject<{
+      id: zod.ZodString;
+      name: zod.ZodString;
+      template: zod.ZodString;
+    }, zod.z.core.$strip>>>;
+    on_success: zod.ZodOptional<zod.ZodEnum<{
+      create_user: "create_user";
+    }>>;
+    complete: zod.ZodOptional<zod.ZodEnum<{
+      redirect: "redirect";
+      show: "show";
+    }>>;
+    transitions: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+      target: zod.ZodString;
+      action: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodEnum<{
+        switch: "switch";
+        pivot: "pivot";
+      }>, zod.ZodNull]>>;
+    }, zod.z.core.$strip>>>;
+  }, zod.z.core.$strip>>>;
+}, zod.z.core.$strip>;
+declare const updateFlowDefinitionResponseOneNameRegExp: RegExp;
+declare const updateFlowDefinitionResponseOneStepsItemFieldsDefault: never[];
+declare const updateFlowDefinitionResponseOneStepsItemActionsPrimaryDefault = false;
+declare const updateFlowDefinitionResponseOneStepsItemActionsDefault: {};
+declare const updateFlowDefinitionResponseOneStepsItemGatesDefault: {};
+declare const updateFlowDefinitionResponseOneStepsItemSsoProvidersDefault: never[];
+declare const UpdateFlowDefinitionResponse: zod.ZodIntersection<zod.ZodObject<{
+  name: zod.ZodString;
+  user_schema: zod.ZodURL;
+  purposes: zod.ZodRecord<zod.ZodString, zod.ZodString>;
+  audience: zod.ZodOptional<zod.ZodObject<{
+    team_ids: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+    app_ids: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+  }, zod.z.core.$strip>>;
+  steps: zod.ZodArray<zod.ZodObject<{
+    name: zod.ZodString;
+    fields: zod.ZodDefault<zod.ZodArray<zod.ZodString>>;
+    actions: zod.ZodDefault<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+      primary: zod.ZodDefault<zod.ZodBoolean>;
+      text_key: zod.ZodOptional<zod.ZodString>;
+    }, zod.z.core.$strip>>>;
+    gates: zod.ZodDefault<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+      kind: zod.ZodEnum<{
+        captcha: "captcha";
+      }>;
+      provider: zod.ZodString;
+      config: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
+    }, zod.z.core.$strip>>>;
+    sso_providers: zod.ZodDefault<zod.ZodArray<zod.ZodObject<{
+      id: zod.ZodString;
+      name: zod.ZodString;
+      template: zod.ZodString;
+    }, zod.z.core.$strip>>>;
+    on_success: zod.ZodOptional<zod.ZodEnum<{
+      create_user: "create_user";
+    }>>;
+    complete: zod.ZodOptional<zod.ZodEnum<{
+      redirect: "redirect";
+      show: "show";
+    }>>;
+    transitions: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodObject<{
+      target: zod.ZodString;
+      action: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodEnum<{
+        switch: "switch";
+        pivot: "pivot";
+      }>, zod.ZodNull]>>;
+    }, zod.z.core.$strip>>>;
+  }, zod.z.core.$strip>>;
+}, zod.z.core.$strip>, zod.ZodObject<{
+  id: zod.ZodString;
+  project_id: zod.ZodString;
+  schema_uri: zod.ZodURL;
+  status: zod.ZodString;
+  created_at: zod.z.ZodISODateTime;
+  updated_at: zod.z.ZodISODateTime;
+}, zod.z.core.$strip>>;
+/**
+ * Delete a flow definition by id
+ * @summary Delete a flow definition by id
+ */
+declare const DeleteFlowDefinitionParams: zod.ZodObject<{
+  id: zod.ZodString;
+}, zod.z.core.$strip>;
+/**
+ * @summary Create team
+ */
+declare const createTeamQueryProjectIdRegExp: RegExp;
+declare const CreateTeamQueryParams: zod.ZodObject<{
+  project_id: zod.ZodString;
+}, zod.z.core.$strict>;
+declare const CreateTeamBody: zod.ZodObject<{}, zod.z.core.$loose>;
+/**
+ * Returns the current state of a team.
+
+ * @summary Get team
+ */
+declare const getTeamPathTeamIdRegExp: RegExp;
+declare const GetTeamParams: zod.ZodObject<{
+  team_id: zod.ZodString;
+}, zod.z.core.$strip>;
+declare const getTeamQueryProjectIdRegExp: RegExp;
+declare const GetTeamQueryParams: zod.ZodObject<{
+  project_id: zod.ZodString;
+}, zod.z.core.$strict>;
+declare const GetTeamResponse: zod.ZodObject<{
+  id: zod.ZodString;
+  createdAt: zod.z.ZodISODateTime;
+  updatedAt: zod.z.ZodISODateTime;
+}, zod.z.core.$strip>;
+//#endregion
+export { AuthorizeDeviceQueryParams, AuthorizeDeviceResponse, AuthorizeGetQueryParams, CreateAuthAttemptBody, CreateFlowBody, CreateFlowDefinitionBody, CreateHandoffHeader, CreateHandoffParams, CreateHandoffResponse, CreateProjectBody, CreateSchemaBody, CreateSchemaQueryParams, CreateSessionBody, CreateTeamBody, CreateTeamQueryParams, CreateUserBody, CreateUserQueryParams, DeleteFlowDefinitionParams, EndSessionQueryParams, ExchangeHandoffBody, ExchangeHandoffHeader, ExchangeHandoffQueryParams, ExchangeHandoffResponse, GetAuthAttemptParams, GetAuthAttemptResponse, GetFlowDefinitionParams, GetFlowDefinitionResponse, GetFlowStepParams, GetFlowStepResponse, GetKeysResponse, GetMySessionResponse, GetOpenIDConfigurationResponse, GetProjectParams, GetProjectResponse, GetSchemaByIdParams, GetSchemaByIdQueryParams, GetSchemaByIdResponse, GetSessionParams, GetSessionQueryParams, GetSessionResponse, GetTeamParams, GetTeamQueryParams, GetTeamResponse, GetTokenResponse, GetUserByIDParams, GetUserByIDQueryParams, GetUserByIDResponse, GetUserInfoResponse, IntrospectResponse, IssueChallengeBody, IssueChallengeParams, ListFlowDefinitionsQueryParams, ListFlowDefinitionsResponse, ListSessionsQueryParams, ListSessionsResponse, ListUsersQueryParams, ListUsersResponse, ListUsersResponseItem, RevokeSessionParams, RevokeSessionQueryParams, SubmitFlowEventBody, SubmitFlowEventParams, SubmitFlowStepBody, SubmitFlowStepParams, SubmitFlowStepResponse, UpdateFlowDefinitionBody, UpdateFlowDefinitionParams, UpdateFlowDefinitionResponse, VerifyChallengeProofBody, VerifyChallengeProofHeader, VerifyChallengeProofParams, VerifyChallengeProofResponse, createAuthAttemptBodyProjectIdRegExp, createAuthAttemptBodySessionIdOneRegExp, createFlowBodyFlowDefinitionNameRegExp, createFlowBodyProjectIdRegExp, createFlowBodySchemaVersionRegExp, createFlowDefinitionBodyFlowDefinitionNameRegExp, createFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault, createFlowDefinitionBodyFlowDefinitionStepsItemActionsPrimaryDefault, createFlowDefinitionBodyFlowDefinitionStepsItemFieldsDefault, createFlowDefinitionBodyFlowDefinitionStepsItemGatesDefault, createFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersDefault, createFlowDefinitionBodyProjectIdRegExp, createHandoffPathAttemptIdRegExp, createSchemaBodyOnePropertiesXEditableDefault, createSchemaBodyOnePropertiesXMfaDefault, createSchemaBodyOnePropertiesXSensitiveDefault, createSchemaBodyOneXAuthMethodsMagicLinkPositionMin, createSchemaBodyOneXAuthMethodsOtpPositionMin, createSchemaBodyOneXAuthMethodsPasskeyPositionMin, createSchemaBodyOneXAuthMethodsPasswordPositionMin, createSchemaBodyOneXAuthMethodsSsoPositionMin, createSchemaQueryProjectIdRegExp, createSchemaQueryTeamIdRegExp, createSessionBodyProjectIdRegExp, createTeamQueryProjectIdRegExp, createUserQueryProjectIdRegExp, createUserQueryTeamIdRegExp, exchangeHandoffQueryProjectIdRegExp, exchangeHandoffResponseSessionFactorsItemPayloadOneUserIdRegExp, exchangeHandoffResponseSessionProjectIdRegExp, exchangeHandoffResponseSessionSessionIdRegExp, exchangeHandoffResponseSessionUserIdOneRegExp, getAuthAttemptPathAttemptIdRegExp, getAuthAttemptResponseAttemptIdRegExp, getAuthAttemptResponseChallengesItemChallengeIdRegExp, getAuthAttemptResponseCompletedFactorsItemPayloadOneUserIdRegExp, getAuthAttemptResponseProjectIdRegExp, getAuthAttemptResponseSessionIdOneRegExp, getAuthAttemptResponseUserIdOneRegExp, getFlowDefinitionResponseOneNameRegExp, getFlowDefinitionResponseOneStepsItemActionsDefault, getFlowDefinitionResponseOneStepsItemActionsPrimaryDefault, getFlowDefinitionResponseOneStepsItemFieldsDefault, getFlowDefinitionResponseOneStepsItemGatesDefault, getFlowDefinitionResponseOneStepsItemSsoProvidersDefault, getFlowStepResponseBrandingLayoutDefault, getFlowStepResponseStepActionsDefault, getFlowStepResponseStepActionsPrimaryDefault, getFlowStepResponseStepFieldsDefault, getFlowStepResponseStepFieldsRequiredDefault, getFlowStepResponseStepFieldsValidationMaxLengthMin, getFlowStepResponseStepFieldsValidationMinLengthMin, getFlowStepResponseStepGatesDefault, getFlowStepResponseStepSsoProvidersDefault, getMySessionResponseFactorsItemPayloadOneUserIdRegExp, getMySessionResponseProjectIdRegExp, getMySessionResponseSessionIdRegExp, getMySessionResponseUserIdOneRegExp, getOpenIDConfigurationResponseClaimsParameterSupportedDefault, getOpenIDConfigurationResponseRequestParameterSupportedDefault, getOpenIDConfigurationResponseRequestUriParameterSupportedDefault, getOpenIDConfigurationResponseRequireRequestUriRegistrationDefault, getProjectPathProjectIdRegExp, getSchemaByIdQueryProjectIdRegExp, getSchemaByIdQueryTeamIdRegExp, getSchemaByIdResponseOnePropertiesXEditableDefault, getSchemaByIdResponseOnePropertiesXMfaDefault, getSchemaByIdResponseOnePropertiesXSensitiveDefault, getSchemaByIdResponseOneXAuthMethodsMagicLinkPositionMin, getSchemaByIdResponseOneXAuthMethodsOtpPositionMin, getSchemaByIdResponseOneXAuthMethodsPasskeyPositionMin, getSchemaByIdResponseOneXAuthMethodsPasswordPositionMin, getSchemaByIdResponseOneXAuthMethodsSsoPositionMin, getSessionPathSessionIdRegExp, getSessionQueryProjectIdRegExp, getSessionResponseFactorsItemPayloadOneUserIdRegExp, getSessionResponseProjectIdRegExp, getSessionResponseSessionIdRegExp, getSessionResponseUserIdOneRegExp, getTeamPathTeamIdRegExp, getTeamQueryProjectIdRegExp, getUserByIDPathUserIdRegExp, getUserByIDQueryProjectIdRegExp, getUserByIDQueryTeamIdRegExp, issueChallengePathAttemptIdRegExp, listFlowDefinitionsQueryLimitDefault, listFlowDefinitionsQueryLimitMax, listFlowDefinitionsQueryProjectIdRegExp, listFlowDefinitionsResponseFlowDefinitionsItemNameRegExp, listSessionsQueryLimitDefault, listSessionsQueryLimitMax, listSessionsQueryProjectIdRegExp, listSessionsQueryUserIdRegExp, listSessionsResponseSessionsItemFactorsItemPayloadOneUserIdRegExp, listSessionsResponseSessionsItemProjectIdRegExp, listSessionsResponseSessionsItemSessionIdRegExp, listSessionsResponseSessionsItemUserIdOneRegExp, listUsersQueryLimitDefault, listUsersQueryLimitMax, listUsersQueryOffsetDefault, listUsersQueryOffsetMin, revokeSessionPathSessionIdRegExp, revokeSessionQueryProjectIdRegExp, submitFlowStepResponseBrandingLayoutDefault, submitFlowStepResponseStepActionsDefault, submitFlowStepResponseStepActionsPrimaryDefault, submitFlowStepResponseStepFieldsDefault, submitFlowStepResponseStepFieldsRequiredDefault, submitFlowStepResponseStepFieldsValidationMaxLengthMin, submitFlowStepResponseStepFieldsValidationMinLengthMin, submitFlowStepResponseStepGatesDefault, submitFlowStepResponseStepSsoProvidersDefault, updateFlowDefinitionBodyStepsItemActionsDefault, updateFlowDefinitionBodyStepsItemActionsPrimaryDefault, updateFlowDefinitionBodyStepsItemFieldsDefault, updateFlowDefinitionBodyStepsItemGatesDefault, updateFlowDefinitionBodyStepsItemSsoProvidersDefault, updateFlowDefinitionResponseOneNameRegExp, updateFlowDefinitionResponseOneStepsItemActionsDefault, updateFlowDefinitionResponseOneStepsItemActionsPrimaryDefault, updateFlowDefinitionResponseOneStepsItemFieldsDefault, updateFlowDefinitionResponseOneStepsItemGatesDefault, updateFlowDefinitionResponseOneStepsItemSsoProvidersDefault, verifyChallengeProofPathAttemptIdRegExp, verifyChallengeProofPathChallengeIdRegExp, verifyChallengeProofResponseAttemptIdRegExp, verifyChallengeProofResponseChallengesItemChallengeIdRegExp, verifyChallengeProofResponseCompletedFactorsItemPayloadOneUserIdRegExp, verifyChallengeProofResponseProjectIdRegExp, verifyChallengeProofResponseSessionIdOneRegExp, verifyChallengeProofResponseUserIdOneRegExp };
+//# sourceMappingURL=zitadelNextGen.zod.d.mts.map