@zitadel/api 0.1.0-alpha.11 → 0.1.0-alpha.13

package/dist/generated/endpoints/zitadelNextGen.zod.mjs

@@ -243,6 +243,7 @@ cookie. The browser sends it automatically on subsequent requests.
 */
 const createFlowBodyProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const createFlowBodyFlowDefinitionNameRegExp = /* @__PURE__ */ new RegExp("^[a-z][a-z0-9-]*$");
+const createFlowBodyDryRunDefault = false;
 const createFlowBodySchemaVersionRegExp = /* @__PURE__ */ new RegExp("^\\d+\\.\\d+\\.\\d+$");
 const CreateFlowBody = zod.object({
 	project_id: zod.string().regex(createFlowBodyProjectIdRegExp),
@@ -255,6 +256,7 @@ const CreateFlowBody = zod.object({
 		"link_account"
 	]),
 	flow_definition_name: zod.string().regex(createFlowBodyFlowDefinitionNameRegExp).optional().describe("Name of a specific flow definition to use.\nWhen omitted, the engine selects the best-matching definition\nbased on purpose + audience context.\n"),
+	dry_run: zod.boolean().default(false).describe("Set to true to simulate the flow without actually creating any\nuser or session. Useful for testing and validation of flow definitions.\nThis requires setting the `flow_definition_name` property as well.\n"),
 	schema_version: zod.string().regex(createFlowBodySchemaVersionRegExp).optional().describe("Semver version of the flow definition JSON Schema to use.\nWhen omitted, the latest version is used.\n"),
 	challenge_nonce: zod.string().optional().describe("Origin-bound, single-use nonce obtained from `POST /bootstrap/challenge`.\nBinds the request to the browser that initiated the flow, preventing\ncross-origin replay.\n"),
 	session_id: zod.string().optional().describe("Existing session to attach to (for step-up / reauth).\nOmit to let the flow create a new session implicitly.\n"),
@@ -327,9 +329,16 @@ const GetFlowStepResponse = zod.object({
 		}).describe("A data input capability. Describes what the user must provide.\nDoes not contain display text — only a `text_key` resolved client-side.\n")).default(getFlowStepResponseStepFieldsDefault).describe("Ordered list of input fields to collect. Field metadata (type, validation)\nis resolved by the engine from the flow's user schema. The LiquidJS\ntemplate iterates this array; for keyed lookup it builds a name-indexed\nmap locally.\n"),
 		actions: zod.array(zod.object({
 			name: zod.string().describe("Action identifier. Sent back in the submit request as `action`."),
+			kind: zod.enum([
+				"submit",
+				"passkey",
+				"passkey_register",
+				"navigate",
+				"back"
+			]).describe("Classifies how the engine handles this action:\n- `submit`: collect the step's fields and run validate/dispatch/on_success.\n- `passkey`: issue a WebAuthn assertion challenge; the matching transition\n  fires once the returned assertion verifies.\n- `passkey_register`: issue a WebAuthn registration challenge; the matching\n  transition fires once the returned attestation verifies.\n- `navigate`: route through the transition without running the input\n  pipeline. Used for pure-routing actions declared in the flow definition.\n- `back`: return the user to the previous step. Surfaced by the engine\n  when going back is available.\n"),
 			primary: zod.boolean().default(false).describe("Marks this as the default/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n"),
 			text_key: zod.string().optional().describe("Optional localization key override for the action's label. When\nomitted, the engine derives a key from the step and action names.\nDisplay text is resolved client-side from a locale dictionary, never\nby the engine.\n")
-		}).describe("Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`.\n")).default(getFlowStepResponseStepActionsDefault).describe("Ordered list of available user actions. The LiquidJS template iterates\nthis array and builds a name-indexed map locally for keyed lookup.\n"),
+		}).describe("Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`; the engine resolves the action's\ndeclared `kind` to decide how to handle the submission.\n")).default(getFlowStepResponseStepActionsDefault).describe("Ordered list of available user actions. The LiquidJS template iterates\nthis array and builds a name-indexed map locally for keyed lookup.\n"),
 		gates: zod.record(zod.string(), zod.object({
 			kind: zod.enum(["captcha"]).describe("The gate category. Only `captcha` is currently defined. Authenticator\nceremonies (e.g. passkey) are modelled as credential auth_attempts via\n`x-credential` on a field, not as gates.\n"),
 			provider: zod.string().describe("Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,\n`hcaptcha`. The engine looks up an implementation in its provider\nregistry.\n"),
@@ -341,7 +350,7 @@ const GetFlowStepResponse = zod.object({
 			template: zod.string().describe("Template hint for rendering (logo, colors).")
 		}).describe("An available SSO identity provider.")).default(getFlowStepResponseStepSsoProvidersDefault).describe("Available SSO identity providers for this step."),
 		challenge: zod.object({
-			method: zod.enum(["passkey"]).optional().describe("Challenge method. Determines which component handles the ceremony."),
+			method: zod.enum(["passkey", "passkey_register"]).optional().describe("Challenge method. Determines which component handles the ceremony."),
 			challenge_id: zod.string().optional().describe("Server-side challenge identifier. Included in the proof submission\nso the server can match the response to the original challenge.\n"),
 			options: zod.record(zod.string(), zod.unknown()).optional().describe("Protocol-specific challenge options. For passkey, this is the\n`PublicKeyCredentialRequestOptions` (authenticate) or\n`PublicKeyCredentialCreationOptions` (register). Passed directly\nto the browser's `navigator.credentials` API.\n")
 		}).optional().describe("A pending authentication challenge issued by the server. Present when the\nflow engine has issued a challenge via auth_attempts (e.g., after the user\nsubmits `action: \"passkey\"`). The `<zl-passkey>` component reads this and\ntriggers the appropriate WebAuthn ceremony.\n\nThe challenge is NOT present on the initial step — it appears only after\nthe user explicitly selects a ceremony-based action.\n")
@@ -455,9 +464,16 @@ const SubmitFlowStepResponse = zod.object({
 		}).describe("A data input capability. Describes what the user must provide.\nDoes not contain display text — only a `text_key` resolved client-side.\n")).default(submitFlowStepResponseStepFieldsDefault).describe("Ordered list of input fields to collect. Field metadata (type, validation)\nis resolved by the engine from the flow's user schema. The LiquidJS\ntemplate iterates this array; for keyed lookup it builds a name-indexed\nmap locally.\n"),
 		actions: zod.array(zod.object({
 			name: zod.string().describe("Action identifier. Sent back in the submit request as `action`."),
+			kind: zod.enum([
+				"submit",
+				"passkey",
+				"passkey_register",
+				"navigate",
+				"back"
+			]).describe("Classifies how the engine handles this action:\n- `submit`: collect the step's fields and run validate/dispatch/on_success.\n- `passkey`: issue a WebAuthn assertion challenge; the matching transition\n  fires once the returned assertion verifies.\n- `passkey_register`: issue a WebAuthn registration challenge; the matching\n  transition fires once the returned attestation verifies.\n- `navigate`: route through the transition without running the input\n  pipeline. Used for pure-routing actions declared in the flow definition.\n- `back`: return the user to the previous step. Surfaced by the engine\n  when going back is available.\n"),
 			primary: zod.boolean().default(false).describe("Marks this as the default/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n"),
 			text_key: zod.string().optional().describe("Optional localization key override for the action's label. When\nomitted, the engine derives a key from the step and action names.\nDisplay text is resolved client-side from a locale dictionary, never\nby the engine.\n")
-		}).describe("Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`.\n")).default(submitFlowStepResponseStepActionsDefault).describe("Ordered list of available user actions. The LiquidJS template iterates\nthis array and builds a name-indexed map locally for keyed lookup.\n"),
+		}).describe("Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`; the engine resolves the action's\ndeclared `kind` to decide how to handle the submission.\n")).default(submitFlowStepResponseStepActionsDefault).describe("Ordered list of available user actions. The LiquidJS template iterates\nthis array and builds a name-indexed map locally for keyed lookup.\n"),
 		gates: zod.record(zod.string(), zod.object({
 			kind: zod.enum(["captcha"]).describe("The gate category. Only `captcha` is currently defined. Authenticator\nceremonies (e.g. passkey) are modelled as credential auth_attempts via\n`x-credential` on a field, not as gates.\n"),
 			provider: zod.string().describe("Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,\n`hcaptcha`. The engine looks up an implementation in its provider\nregistry.\n"),
@@ -469,7 +485,7 @@ const SubmitFlowStepResponse = zod.object({
 			template: zod.string().describe("Template hint for rendering (logo, colors).")
 		}).describe("An available SSO identity provider.")).default(submitFlowStepResponseStepSsoProvidersDefault).describe("Available SSO identity providers for this step."),
 		challenge: zod.object({
-			method: zod.enum(["passkey"]).optional().describe("Challenge method. Determines which component handles the ceremony."),
+			method: zod.enum(["passkey", "passkey_register"]).optional().describe("Challenge method. Determines which component handles the ceremony."),
 			challenge_id: zod.string().optional().describe("Server-side challenge identifier. Included in the proof submission\nso the server can match the response to the original challenge.\n"),
 			options: zod.record(zod.string(), zod.unknown()).optional().describe("Protocol-specific challenge options. For passkey, this is the\n`PublicKeyCredentialRequestOptions` (authenticate) or\n`PublicKeyCredentialCreationOptions` (register). Passed directly\nto the browser's `navigator.credentials` API.\n")
 		}).optional().describe("A pending authentication challenge issued by the server. Present when the\nflow engine has issued a challenge via auth_attempts (e.g., after the user\nsubmits `action: \"passkey\"`). The `<zl-passkey>` component reads this and\ntriggers the appropriate WebAuthn ceremony.\n\nThe challenge is NOT present on the initial step — it appears only after\nthe user explicitly selects a ceremony-based action.\n")
@@ -1186,7 +1202,7 @@ const GetSchemaByIdResponse = zod.object({
 Flow definitions are templates that define the sequence of steps (capabilities)
 for a particular user journey (e.g., registration, login, password reset).
 
-Flow definitions are created based on the flow meta schema, which includes the flow's purpose, audience, and the steps involved.
+Flow definitions are created based on the flow definition schema, which includes the flow's purpose, audience, and the steps involved.
 
 * @summary Create a new flow definition
 */
@@ -1202,6 +1218,7 @@ const CreateFlowDefinitionBody = zod.object({
 	schema_uri: zod.url().optional().describe("URI of the server-published flow definition schema this definition was\nauthored against. The server uses this to validate the definition.\nIf not provided, the engine will use the latest schema version for validation.\n"),
 	flow_definition: zod.object({
 		name: zod.string().regex(createFlowDefinitionBodyFlowDefinitionNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Renaming is not supported — the\n`name` is part of the public contract another definition may\nreference. Acts as the human display label as well; no separate slug.\n"),
+		status: zod.enum(["active", "draft"]).describe("The lifecycle state of this flow definition. \n\nactive: The flow definition is ready to be used. The flow engine can select it for new flows.\ndraft: The engine will not select it for new flows, and existing flows must handle it gracefully if they reference this definition.\n\nAllowed transitions:\n- draft -> active: To activate the flow definition.\n- active -> draft: To remove the flow definition from active use immediately.\n"),
 		user_schema: zod.url().describe("User schema this flow operates on. Step `fields` reference properties\ndefined in this schema. The engine resolves field types, validation,\nand implicit outcomes from schema annotations at runtime.\n"),
 		purposes: zod.record(zod.string(), zod.string()).describe("Maps each purpose this definition handles to its entry-point step.\nKeys are purpose names; values must match a `name` in `steps`. A\ndefinition can serve multiple purposes (e.g. a combined login/register\nflow) by listing one entry per purpose.\n"),
 		audience: zod.object({
@@ -1213,9 +1230,16 @@ const CreateFlowDefinitionBody = zod.object({
 			fields: zod.array(zod.string()).default(createFlowDefinitionBodyFlowDefinitionStepsItemFieldsDefault).describe("Schema property names to collect from the user. Each entry references\na property in the flow's user schema. The engine resolves field type,\nvalidation rules, and implicit outcomes from schema annotations\n(e.g. a property with `x-unique` set implies a `user_not_found`\ntransition outcome).\n"),
 			actions: zod.array(zod.object({
 				name: zod.string().describe("Action identifier. Sent back in the submit request as `action`."),
+				kind: zod.enum([
+					"submit",
+					"passkey",
+					"passkey_register",
+					"navigate",
+					"back"
+				]).describe("Classifies how the engine handles this action:\n- `submit`: collect the step's fields and run validate/dispatch/on_success.\n- `passkey`: issue a WebAuthn assertion challenge; the matching transition\n  fires once the returned assertion verifies.\n- `passkey_register`: issue a WebAuthn registration challenge; the matching\n  transition fires once the returned attestation verifies.\n- `navigate`: route through the transition without running the input\n  pipeline. Used for pure-routing actions declared in the flow definition.\n- `back`: return the user to the previous step. Surfaced by the engine\n  when going back is available.\n"),
 				primary: zod.boolean().default(false).describe("Marks this as the default/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n"),
 				text_key: zod.string().optional().describe("Optional localization key override for the action's label. When\nomitted, the engine derives a key from the step and action names.\nDisplay text is resolved client-side from a locale dictionary, never\nby the engine.\n")
-			}).describe("Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`.\n")).default(createFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault).describe("Ordered list of actions the user can take. The action name is what the\nfrontend sends back in the submit request. If omitted, the engine\nprovides a default `submit` action.\n"),
+			}).describe("Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`; the engine resolves the action's\ndeclared `kind` to decide how to handle the submission.\n")).default(createFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault).describe("Ordered list of actions the user can take. The action name is what the\nfrontend sends back in the submit request. If omitted, the engine\nprovides a default `submit` action.\n"),
 			gates: zod.record(zod.string(), zod.object({
 				kind: zod.enum(["captcha"]).describe("The gate category. Only `captcha` is currently defined. Authenticator\nceremonies (e.g. passkey) are modelled as credential auth_attempts via\n`x-credential` on a field, not as gates.\n"),
 				provider: zod.string().describe("Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,\n`hcaptcha`. The engine looks up an implementation in its provider\nregistry.\n"),
@@ -1234,7 +1258,7 @@ const CreateFlowDefinitionBody = zod.object({
 			})).optional().describe("Maps action/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` array. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n")
 		}).describe("A step in a flow definition. This is the admin-authored configuration,\nnot the runtime payload sent to the frontend.\n\nSteps are schema-driven: `fields` references properties from the flow's\nuser schema, and the engine resolves field metadata (type, validation,\nimplicit outcomes) from schema annotations at runtime.\n\nA step with only `complete` set is a terminal step. All other steps are\nrendered to the frontend as capability payloads.\n")).min(1).describe("Ordered list of steps in this flow. The order is for human readability —\nactual step sequencing is determined by transitions.\n")
 	}).describe("A flow definition is the server-side configuration that describes a complete\nauthentication or identity flow. It is NOT sent to the frontend — the flow\nengine evaluates it and produces FlowResponse payloads (steps with capability\ndictionaries) for the client.\n\nFlow definitions are created by administrators and stored in the project/team\nconfiguration hierarchy. The engine selects the matching definition based on\nthe purpose + audience when a flow is created via POST /flow.\n")
-});
+}).describe("Creates a flow definition.\nThe flow definition is created in an `active` state by default.\nThe status can also be set via the `status` attribute in the flow definition payload.\n");
 /**
 * Retrieves a list of all flow definitions.
 This endpoint can be used to view existing flow definitions and their configurations.
@@ -1264,7 +1288,7 @@ const ListFlowDefinitionsResponse = zod.object({
 		name: zod.string().regex(listFlowDefinitionsResponseFlowDefinitionsItemNameRegExp).describe("Stable identifier for this flow (echoed from the request).\n"),
 		project_id: zod.string().describe("Identifier of the project this flow definition belongs to."),
 		schema_uri: zod.url().optional().describe("URI of the flow definition schema this definition was authored against.\nIf the schema_uri was not provided in the request, the flow definition is validated against the latest version of the schema, and the response includes the schema_uri of the latest version.\n"),
-		status: zod.string().describe("Status of the flow definition."),
+		status: zod.enum(["active", "draft"]).describe("The lifecycle state of this flow definition. \n\nactive: The flow definition is ready to be used. The flow engine can select it for new flows.\ndraft: The engine will not select it for new flows, and existing flows must handle it gracefully if they reference this definition.\n\nAllowed transitions:\n- draft -> active: To activate the flow definition.\n- active -> draft: To remove the flow definition from active use immediately.\n"),
 		created_at: zod.iso.datetime({ offset: true }).describe("Timestamp when the flow definition was created."),
 		updated_at: zod.iso.datetime({ offset: true }).describe("Timestamp when the flow definition was last updated.")
 	}).describe("Response object for a flow definition after creation.\n")),
@@ -1286,9 +1310,9 @@ const getFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault = [];
 const GetFlowDefinitionResponse = zod.object({
 	id: zod.string().describe("Unique identifier for the flow definition."),
 	project_id: zod.string().describe("Identifier of the project this flow definition belongs to."),
-	status: zod.string().describe("Status of the flow definition."),
 	flow_definition: zod.object({
 		name: zod.string().regex(getFlowDefinitionResponseFlowDefinitionNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Renaming is not supported — the\n`name` is part of the public contract another definition may\nreference. Acts as the human display label as well; no separate slug.\n"),
+		status: zod.enum(["active", "draft"]).describe("The lifecycle state of this flow definition. \n\nactive: The flow definition is ready to be used. The flow engine can select it for new flows.\ndraft: The engine will not select it for new flows, and existing flows must handle it gracefully if they reference this definition.\n\nAllowed transitions:\n- draft -> active: To activate the flow definition.\n- active -> draft: To remove the flow definition from active use immediately.\n"),
 		user_schema: zod.url().describe("User schema this flow operates on. Step `fields` reference properties\ndefined in this schema. The engine resolves field types, validation,\nand implicit outcomes from schema annotations at runtime.\n"),
 		purposes: zod.record(zod.string(), zod.string()).describe("Maps each purpose this definition handles to its entry-point step.\nKeys are purpose names; values must match a `name` in `steps`. A\ndefinition can serve multiple purposes (e.g. a combined login/register\nflow) by listing one entry per purpose.\n"),
 		audience: zod.object({
@@ -1300,9 +1324,16 @@ const GetFlowDefinitionResponse = zod.object({
 			fields: zod.array(zod.string()).default(getFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault).describe("Schema property names to collect from the user. Each entry references\na property in the flow's user schema. The engine resolves field type,\nvalidation rules, and implicit outcomes from schema annotations\n(e.g. a property with `x-unique` set implies a `user_not_found`\ntransition outcome).\n"),
 			actions: zod.array(zod.object({
 				name: zod.string().describe("Action identifier. Sent back in the submit request as `action`."),
+				kind: zod.enum([
+					"submit",
+					"passkey",
+					"passkey_register",
+					"navigate",
+					"back"
+				]).describe("Classifies how the engine handles this action:\n- `submit`: collect the step's fields and run validate/dispatch/on_success.\n- `passkey`: issue a WebAuthn assertion challenge; the matching transition\n  fires once the returned assertion verifies.\n- `passkey_register`: issue a WebAuthn registration challenge; the matching\n  transition fires once the returned attestation verifies.\n- `navigate`: route through the transition without running the input\n  pipeline. Used for pure-routing actions declared in the flow definition.\n- `back`: return the user to the previous step. Surfaced by the engine\n  when going back is available.\n"),
 				primary: zod.boolean().default(false).describe("Marks this as the default/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n"),
 				text_key: zod.string().optional().describe("Optional localization key override for the action's label. When\nomitted, the engine derives a key from the step and action names.\nDisplay text is resolved client-side from a locale dictionary, never\nby the engine.\n")
-			}).describe("Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`.\n")).default(getFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault).describe("Ordered list of actions the user can take. The action name is what the\nfrontend sends back in the submit request. If omitted, the engine\nprovides a default `submit` action.\n"),
+			}).describe("Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`; the engine resolves the action's\ndeclared `kind` to decide how to handle the submission.\n")).default(getFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault).describe("Ordered list of actions the user can take. The action name is what the\nfrontend sends back in the submit request. If omitted, the engine\nprovides a default `submit` action.\n"),
 			gates: zod.record(zod.string(), zod.object({
 				kind: zod.enum(["captcha"]).describe("The gate category. Only `captcha` is currently defined. Authenticator\nceremonies (e.g. passkey) are modelled as credential auth_attempts via\n`x-credential` on a field, not as gates.\n"),
 				provider: zod.string().describe("Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,\n`hcaptcha`. The engine looks up an implementation in its provider\nregistry.\n"),
@@ -1325,50 +1356,65 @@ const GetFlowDefinitionResponse = zod.object({
 	updated_at: zod.iso.datetime({ offset: true })
 });
 /**
-* Update a flow definition by id
+* Update a flow definition by id. This endpoint replaces the existing flow definition.
+If `flow_definition.status` is omitted, the current status is preserved
+
 * @summary Update a flow definition by id
 */
 const UpdateFlowDefinitionParams = zod.object({ id: zod.string().describe("The id returned by the POST /flow_definitions endpoint.\n") });
 const updateFlowDefinitionQueryProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const UpdateFlowDefinitionQueryParams = zod.strictObject({ project_id: zod.string().regex(updateFlowDefinitionQueryProjectIdRegExp).describe("The project id to filter by.") });
-const updateFlowDefinitionBodyStepsItemFieldsDefault = [];
-const updateFlowDefinitionBodyStepsItemActionsItemPrimaryDefault = false;
-const updateFlowDefinitionBodyStepsItemActionsDefault = [];
-const updateFlowDefinitionBodyStepsItemGatesDefault = {};
-const updateFlowDefinitionBodyStepsItemSsoProvidersDefault = [];
+const updateFlowDefinitionBodyFlowDefinitionNameRegExp = /* @__PURE__ */ new RegExp("^[a-z][a-z0-9-]*$");
+const updateFlowDefinitionBodyFlowDefinitionStepsItemFieldsDefault = [];
+const updateFlowDefinitionBodyFlowDefinitionStepsItemActionsItemPrimaryDefault = false;
+const updateFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault = [];
+const updateFlowDefinitionBodyFlowDefinitionStepsItemGatesDefault = {};
+const updateFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersDefault = [];
 const UpdateFlowDefinitionBody = zod.object({
-	user_schema: zod.url().optional().describe("User schema this flow operates on. Replaces the current value if provided.\n"),
-	purposes: zod.record(zod.string(), zod.string()).optional().describe("Replaces the full purpose-to-entry-step map if provided. Keys are\npurpose names; values must match a `name` in `steps`.\n"),
-	audience: zod.object({
-		team_ids: zod.array(zod.string()).optional().describe("Restrict to specific teams (organizations). Empty means no team restriction."),
-		app_ids: zod.array(zod.string()).optional().describe("Restrict to specific applications. Empty means no app restriction.")
-	}).optional().describe("Scopes which teams or apps this flow definition applies to. Empty or\nomitted fields mean \"no restriction\"; when both are empty the definition\nmatches every request in the project. The engine picks the most specific\nmatching definition: app > team > project-wide.\n"),
-	steps: zod.array(zod.object({
-		name: zod.string().describe("Unique step identifier within this flow. Used as transition targets\nand returned in the API response as `step.name`.\n"),
-		fields: zod.array(zod.string()).default(updateFlowDefinitionBodyStepsItemFieldsDefault).describe("Schema property names to collect from the user. Each entry references\na property in the flow's user schema. The engine resolves field type,\nvalidation rules, and implicit outcomes from schema annotations\n(e.g. a property with `x-unique` set implies a `user_not_found`\ntransition outcome).\n"),
-		actions: zod.array(zod.object({
-			name: zod.string().describe("Action identifier. Sent back in the submit request as `action`."),
-			primary: zod.boolean().default(false).describe("Marks this as the default/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n"),
-			text_key: zod.string().optional().describe("Optional localization key override for the action's label. When\nomitted, the engine derives a key from the step and action names.\nDisplay text is resolved client-side from a locale dictionary, never\nby the engine.\n")
-		}).describe("Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`.\n")).default(updateFlowDefinitionBodyStepsItemActionsDefault).describe("Ordered list of actions the user can take. The action name is what the\nfrontend sends back in the submit request. If omitted, the engine\nprovides a default `submit` action.\n"),
-		gates: zod.record(zod.string(), zod.object({
-			kind: zod.enum(["captcha"]).describe("The gate category. Only `captcha` is currently defined. Authenticator\nceremonies (e.g. passkey) are modelled as credential auth_attempts via\n`x-credential` on a field, not as gates.\n"),
-			provider: zod.string().describe("Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,\n`hcaptcha`. The engine looks up an implementation in its provider\nregistry.\n"),
-			config: zod.record(zod.string(), zod.unknown()).optional().describe("Provider-specific configuration consumed by the implementation when\nissuing the per-render challenge. Opaque to the engine.\n")
-		}).describe("A security challenge that must be satisfied before this step's submission\nis accepted. The engine may also inject gates at runtime based on policy\nor risk evaluation.\n")).default(updateFlowDefinitionBodyStepsItemGatesDefault).describe("Security gates that must be satisfied before submission. Keyed by gate\nname. Each gate selects a kind (e.g. \"captcha\") and provider-specific\nconfiguration. The engine may also inject gates dynamically based on\npolicy.\n"),
-		sso_providers: zod.array(zod.object({
-			id: zod.string().describe("Provider instance identifier."),
-			name: zod.string().describe("Display name for the provider."),
-			template: zod.string().describe("Template hint for rendering (logo, colors).")
-		}).describe("An available SSO identity provider.")).default(updateFlowDefinitionBodyStepsItemSsoProvidersDefault).describe("Available SSO identity providers for this step."),
-		on_success: zod.enum(["create_user"]).optional().describe("Server-side mutation to execute when this step completes successfully.\nRuns after field validation passes, before the transition fires.\n\n- create_user: creates the user record (registration flows)\n"),
-		complete: zod.enum(["redirect", "show"]).optional().describe("Marks this as a terminal step. Tells the frontend what to do:\n- redirect: navigate to redirect_uri (OIDC/SAML callback done)\n- show: render as a success/info screen\n"),
-		transitions: zod.record(zod.string(), zod.object({
-			target: zod.string().describe("Step name within this flow (when `action` is null), or the name\nof another flow (when `action` is `switch` or `pivot`).\n"),
-			action: zod.union([zod.enum(["switch", "pivot"]), zod.null()]).optional().describe("How to interpret `target`:\n- null (omitted): transition to a step in the current flow.\n- switch: replace the current flow with the target flow.\n  No return — the current flow is discarded.\n  Example: login ↔ register.\n- pivot: push the target flow onto the stack. The current flow\n  is paused and resumes when the target flow completes (auto-pop).\n  Example: login → recovery → back to login.\n")
-		})).optional().describe("Maps action/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` array. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n")
-	}).describe("A step in a flow definition. This is the admin-authored configuration,\nnot the runtime payload sent to the frontend.\n\nSteps are schema-driven: `fields` references properties from the flow's\nuser schema, and the engine resolves field metadata (type, validation,\nimplicit outcomes) from schema annotations at runtime.\n\nA step with only `complete` set is a terminal step. All other steps are\nrendered to the frontend as capability payloads.\n")).min(1).optional().describe("Replaces the full steps array if provided. Partial step lists are not\nsupported — supply all steps when updating this field.\n")
-}).describe("Partial update for a flow definition. Only provided fields are replaced;\nomitted fields retain their current server-side values.\n\nCollection fields (`steps`, `purposes`) are treated atomically: if\nprovided, the entire array/object is replaced. If omitted, the current\nvalue is preserved unchanged.\n\n`name` is a stable identifier and cannot be changed after creation.\n");
+	schema_uri: zod.url().optional().describe("URI of the server-published flow definition schema this definition was\nauthored against. The server uses this to validate the definition.\nIf not provided, the engine will use the latest schema version for validation.\n"),
+	flow_definition: zod.object({
+		name: zod.string().regex(updateFlowDefinitionBodyFlowDefinitionNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Renaming is not supported — the\n`name` is part of the public contract another definition may\nreference. Acts as the human display label as well; no separate slug.\n"),
+		status: zod.enum(["active", "draft"]).describe("The lifecycle state of this flow definition. \n\nactive: The flow definition is ready to be used. The flow engine can select it for new flows.\ndraft: The engine will not select it for new flows, and existing flows must handle it gracefully if they reference this definition.\n\nAllowed transitions:\n- draft -> active: To activate the flow definition.\n- active -> draft: To remove the flow definition from active use immediately.\n"),
+		user_schema: zod.url().describe("User schema this flow operates on. Step `fields` reference properties\ndefined in this schema. The engine resolves field types, validation,\nand implicit outcomes from schema annotations at runtime.\n"),
+		purposes: zod.record(zod.string(), zod.string()).describe("Maps each purpose this definition handles to its entry-point step.\nKeys are purpose names; values must match a `name` in `steps`. A\ndefinition can serve multiple purposes (e.g. a combined login/register\nflow) by listing one entry per purpose.\n"),
+		audience: zod.object({
+			team_ids: zod.array(zod.string()).optional().describe("Restrict to specific teams (organizations). Empty means no team restriction."),
+			app_ids: zod.array(zod.string()).optional().describe("Restrict to specific applications. Empty means no app restriction.")
+		}).optional().describe("Scopes which teams or apps this flow definition applies to. Empty or\nomitted fields mean \"no restriction\"; when both are empty the definition\nmatches every request in the project. The engine picks the most specific\nmatching definition: app > team > project-wide.\n"),
+		steps: zod.array(zod.object({
+			name: zod.string().describe("Unique step identifier within this flow. Used as transition targets\nand returned in the API response as `step.name`.\n"),
+			fields: zod.array(zod.string()).default(updateFlowDefinitionBodyFlowDefinitionStepsItemFieldsDefault).describe("Schema property names to collect from the user. Each entry references\na property in the flow's user schema. The engine resolves field type,\nvalidation rules, and implicit outcomes from schema annotations\n(e.g. a property with `x-unique` set implies a `user_not_found`\ntransition outcome).\n"),
+			actions: zod.array(zod.object({
+				name: zod.string().describe("Action identifier. Sent back in the submit request as `action`."),
+				kind: zod.enum([
+					"submit",
+					"passkey",
+					"passkey_register",
+					"navigate",
+					"back"
+				]).describe("Classifies how the engine handles this action:\n- `submit`: collect the step's fields and run validate/dispatch/on_success.\n- `passkey`: issue a WebAuthn assertion challenge; the matching transition\n  fires once the returned assertion verifies.\n- `passkey_register`: issue a WebAuthn registration challenge; the matching\n  transition fires once the returned attestation verifies.\n- `navigate`: route through the transition without running the input\n  pipeline. Used for pure-routing actions declared in the flow definition.\n- `back`: return the user to the previous step. Surfaced by the engine\n  when going back is available.\n"),
+				primary: zod.boolean().default(false).describe("Marks this as the default/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n"),
+				text_key: zod.string().optional().describe("Optional localization key override for the action's label. When\nomitted, the engine derives a key from the step and action names.\nDisplay text is resolved client-side from a locale dictionary, never\nby the engine.\n")
+			}).describe("Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`; the engine resolves the action's\ndeclared `kind` to decide how to handle the submission.\n")).default(updateFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault).describe("Ordered list of actions the user can take. The action name is what the\nfrontend sends back in the submit request. If omitted, the engine\nprovides a default `submit` action.\n"),
+			gates: zod.record(zod.string(), zod.object({
+				kind: zod.enum(["captcha"]).describe("The gate category. Only `captcha` is currently defined. Authenticator\nceremonies (e.g. passkey) are modelled as credential auth_attempts via\n`x-credential` on a field, not as gates.\n"),
+				provider: zod.string().describe("Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,\n`hcaptcha`. The engine looks up an implementation in its provider\nregistry.\n"),
+				config: zod.record(zod.string(), zod.unknown()).optional().describe("Provider-specific configuration consumed by the implementation when\nissuing the per-render challenge. Opaque to the engine.\n")
+			}).describe("A security challenge that must be satisfied before this step's submission\nis accepted. The engine may also inject gates at runtime based on policy\nor risk evaluation.\n")).default(updateFlowDefinitionBodyFlowDefinitionStepsItemGatesDefault).describe("Security gates that must be satisfied before submission. Keyed by gate\nname. Each gate selects a kind (e.g. \"captcha\") and provider-specific\nconfiguration. The engine may also inject gates dynamically based on\npolicy.\n"),
+			sso_providers: zod.array(zod.object({
+				id: zod.string().describe("Provider instance identifier."),
+				name: zod.string().describe("Display name for the provider."),
+				template: zod.string().describe("Template hint for rendering (logo, colors).")
+			}).describe("An available SSO identity provider.")).default(updateFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersDefault).describe("Available SSO identity providers for this step."),
+			on_success: zod.enum(["create_user"]).optional().describe("Server-side mutation to execute when this step completes successfully.\nRuns after field validation passes, before the transition fires.\n\n- create_user: creates the user record (registration flows)\n"),
+			complete: zod.enum(["redirect", "show"]).optional().describe("Marks this as a terminal step. Tells the frontend what to do:\n- redirect: navigate to redirect_uri (OIDC/SAML callback done)\n- show: render as a success/info screen\n"),
+			transitions: zod.record(zod.string(), zod.object({
+				target: zod.string().describe("Step name within this flow (when `action` is null), or the name\nof another flow (when `action` is `switch` or `pivot`).\n"),
+				action: zod.union([zod.enum(["switch", "pivot"]), zod.null()]).optional().describe("How to interpret `target`:\n- null (omitted): transition to a step in the current flow.\n- switch: replace the current flow with the target flow.\n  No return — the current flow is discarded.\n  Example: login ↔ register.\n- pivot: push the target flow onto the stack. The current flow\n  is paused and resumes when the target flow completes (auto-pop).\n  Example: login → recovery → back to login.\n")
+			})).optional().describe("Maps action/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` array. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n")
+		}).describe("A step in a flow definition. This is the admin-authored configuration,\nnot the runtime payload sent to the frontend.\n\nSteps are schema-driven: `fields` references properties from the flow's\nuser schema, and the engine resolves field metadata (type, validation,\nimplicit outcomes) from schema annotations at runtime.\n\nA step with only `complete` set is a terminal step. All other steps are\nrendered to the frontend as capability payloads.\n")).min(1).describe("Ordered list of steps in this flow. The order is for human readability —\nactual step sequencing is determined by transitions.\n")
+	}).describe("A flow definition is the server-side configuration that describes a complete\nauthentication or identity flow. It is NOT sent to the frontend — the flow\nengine evaluates it and produces FlowResponse payloads (steps with capability\ndictionaries) for the client.\n\nFlow definitions are created by administrators and stored in the project/team\nconfiguration hierarchy. The engine selects the matching definition based on\nthe purpose + audience when a flow is created via POST /flow.\n")
+}).describe("Replaces the existing flow definition.\n");
 const updateFlowDefinitionResponseFlowDefinitionNameRegExp = /* @__PURE__ */ new RegExp("^[a-z][a-z0-9-]*$");
 const updateFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault = [];
 const updateFlowDefinitionResponseFlowDefinitionStepsItemActionsItemPrimaryDefault = false;
@@ -1378,9 +1424,9 @@ const updateFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault = [
 const UpdateFlowDefinitionResponse = zod.object({
 	id: zod.string().describe("Unique identifier for the flow definition."),
 	project_id: zod.string().describe("Identifier of the project this flow definition belongs to."),
-	status: zod.string().describe("Status of the flow definition."),
 	flow_definition: zod.object({
 		name: zod.string().regex(updateFlowDefinitionResponseFlowDefinitionNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Renaming is not supported — the\n`name` is part of the public contract another definition may\nreference. Acts as the human display label as well; no separate slug.\n"),
+		status: zod.enum(["active", "draft"]).describe("The lifecycle state of this flow definition. \n\nactive: The flow definition is ready to be used. The flow engine can select it for new flows.\ndraft: The engine will not select it for new flows, and existing flows must handle it gracefully if they reference this definition.\n\nAllowed transitions:\n- draft -> active: To activate the flow definition.\n- active -> draft: To remove the flow definition from active use immediately.\n"),
 		user_schema: zod.url().describe("User schema this flow operates on. Step `fields` reference properties\ndefined in this schema. The engine resolves field types, validation,\nand implicit outcomes from schema annotations at runtime.\n"),
 		purposes: zod.record(zod.string(), zod.string()).describe("Maps each purpose this definition handles to its entry-point step.\nKeys are purpose names; values must match a `name` in `steps`. A\ndefinition can serve multiple purposes (e.g. a combined login/register\nflow) by listing one entry per purpose.\n"),
 		audience: zod.object({
@@ -1392,9 +1438,16 @@ const UpdateFlowDefinitionResponse = zod.object({
 			fields: zod.array(zod.string()).default(updateFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault).describe("Schema property names to collect from the user. Each entry references\na property in the flow's user schema. The engine resolves field type,\nvalidation rules, and implicit outcomes from schema annotations\n(e.g. a property with `x-unique` set implies a `user_not_found`\ntransition outcome).\n"),
 			actions: zod.array(zod.object({
 				name: zod.string().describe("Action identifier. Sent back in the submit request as `action`."),
+				kind: zod.enum([
+					"submit",
+					"passkey",
+					"passkey_register",
+					"navigate",
+					"back"
+				]).describe("Classifies how the engine handles this action:\n- `submit`: collect the step's fields and run validate/dispatch/on_success.\n- `passkey`: issue a WebAuthn assertion challenge; the matching transition\n  fires once the returned assertion verifies.\n- `passkey_register`: issue a WebAuthn registration challenge; the matching\n  transition fires once the returned attestation verifies.\n- `navigate`: route through the transition without running the input\n  pipeline. Used for pure-routing actions declared in the flow definition.\n- `back`: return the user to the previous step. Surfaced by the engine\n  when going back is available.\n"),
 				primary: zod.boolean().default(false).describe("Marks this as the default/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n"),
 				text_key: zod.string().optional().describe("Optional localization key override for the action's label. When\nomitted, the engine derives a key from the step and action names.\nDisplay text is resolved client-side from a locale dictionary, never\nby the engine.\n")
-			}).describe("Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`.\n")).default(updateFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault).describe("Ordered list of actions the user can take. The action name is what the\nfrontend sends back in the submit request. If omitted, the engine\nprovides a default `submit` action.\n"),
+			}).describe("Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`; the engine resolves the action's\ndeclared `kind` to decide how to handle the submission.\n")).default(updateFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault).describe("Ordered list of actions the user can take. The action name is what the\nfrontend sends back in the submit request. If omitted, the engine\nprovides a default `submit` action.\n"),
 			gates: zod.record(zod.string(), zod.object({
 				kind: zod.enum(["captcha"]).describe("The gate category. Only `captcha` is currently defined. Authenticator\nceremonies (e.g. passkey) are modelled as credential auth_attempts via\n`x-credential` on a field, not as gates.\n"),
 				provider: zod.string().describe("Provider identifier within the gate kind — e.g. `altcha`, `turnstile`,\n`hcaptcha`. The engine looks up an implementation in its provider\nregistry.\n"),
@@ -1417,13 +1470,35 @@ const UpdateFlowDefinitionResponse = zod.object({
 	updated_at: zod.iso.datetime({ offset: true })
 });
 /**
-* Delete a flow definition by id
+* Delete a flow definition by id.
+If the flow definition is currently being used by a flow, the deletion will fail.
+If the flow definition is the last active flow definition for a given purpose, the deletion will fail to prevent disruption of new flows being started for that purpose.
+
 * @summary Delete a flow definition by id
 */
 const DeleteFlowDefinitionParams = zod.object({ id: zod.string().describe("The id returned by the POST /flow_definitions endpoint.\n") });
 const deleteFlowDefinitionQueryProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const DeleteFlowDefinitionQueryParams = zod.strictObject({ project_id: zod.string().regex(deleteFlowDefinitionQueryProjectIdRegExp).describe("The project id to filter by.") });
 /**
+* Activate a flow definition by transitioning it from a `draft` state to an `active` state.
+Alternatively, the status of a flow definition can also be set via the `POST /flow_definitions` and `PUT /flow_definitions/{id}` endpoints by setting the `status` attribute in the flow definition payload.
+
+* @summary Activate a flow definition by ID.
+*/
+const ActivateFlowDefinitionParams = zod.object({ id: zod.string().describe("The id returned by the POST /flow_definitions endpoint.\n") });
+const activateFlowDefinitionQueryProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
+const ActivateFlowDefinitionQueryParams = zod.strictObject({ project_id: zod.string().regex(activateFlowDefinitionQueryProjectIdRegExp).describe("The unique identifier of the project") });
+/**
+* Deactivates a flow definition in the `active` state by transitioning it to the `draft` state.
+Flow definitions in `draft` state cannot be used to start new flows. Existing flows that use the deactivated flow definition must gracefully handle this.
+Alternatively, the status of a flow definition can also be set via the `POST /flow_definitions` and `PUT /flow_definitions/{id}` endpoints by setting the `status` attribute in the flow definition payload.
+
+* @summary Deactivate a flow definition by ID.
+*/
+const DeactivateFlowDefinitionParams = zod.object({ id: zod.string().describe("The id returned by the POST /flow_definitions endpoint.\n") });
+const deactivateFlowDefinitionQueryProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
+const DeactivateFlowDefinitionQueryParams = zod.strictObject({ project_id: zod.string().regex(deactivateFlowDefinitionQueryProjectIdRegExp).describe("The unique identifier of the project") });
+/**
 * @summary Create team
 */
 const createTeamQueryProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
@@ -1444,6 +1519,6 @@ const GetTeamResponse = zod.object({
 	updatedAt: zod.iso.datetime({ offset: true }).describe("The time when the team was last updated.")
 }).describe("The current state of a team.");
 //#endregion
-export { AuthorizeDeviceQueryParams, AuthorizeDeviceResponse, AuthorizeGetQueryParams, CreateAuthAttemptBody, CreateFlowBody, CreateFlowDefinitionBody, CreateHandoffHeader, CreateHandoffParams, CreateHandoffResponse, CreateProjectBody, CreateSchemaBody, CreateSchemaQueryParams, CreateSessionBody, CreateTeamBody, CreateTeamQueryParams, CreateUserBody, CreateUserQueryParams, DeleteFlowDefinitionParams, DeleteFlowDefinitionQueryParams, EndSessionQueryParams, ExchangeHandoffBody, ExchangeHandoffHeader, ExchangeHandoffQueryParams, ExchangeHandoffResponse, GetAuthAttemptParams, GetAuthAttemptResponse, GetFlowDefinitionParams, GetFlowDefinitionQueryParams, GetFlowDefinitionResponse, GetFlowStepParams, GetFlowStepResponse, GetKeysResponse, GetMySessionResponse, GetMyUserResponse, GetOpenIDConfigurationResponse, GetProjectParams, GetProjectResponse, GetSchemaByIdParams, GetSchemaByIdQueryParams, GetSchemaByIdResponse, GetSessionParams, GetSessionQueryParams, GetSessionResponse, GetTeamParams, GetTeamQueryParams, GetTeamResponse, GetTokenResponse, GetUserByIDParams, GetUserByIDQueryParams, GetUserByIDResponse, GetUserInfoResponse, IntrospectResponse, IssueChallengeBody, IssueChallengeParams, ListFlowDefinitionsQueryParams, ListFlowDefinitionsResponse, ListSessionsQueryParams, ListSessionsResponse, ListUsersQueryParams, ListUsersResponse, ListUsersResponseItem, RevokeSessionParams, RevokeSessionQueryParams, SetUserPasswordBody, SetUserPasswordParams, SetUserPasswordQueryParams, SubmitFlowEventBody, SubmitFlowEventParams, SubmitFlowStepBody, SubmitFlowStepHeader, SubmitFlowStepParams, SubmitFlowStepResponse, UpdateFlowDefinitionBody, UpdateFlowDefinitionParams, UpdateFlowDefinitionQueryParams, UpdateFlowDefinitionResponse, VerifyChallengeProofBody, VerifyChallengeProofHeader, VerifyChallengeProofParams, VerifyChallengeProofResponse, createAuthAttemptBodyProjectIdRegExp, createAuthAttemptBodySessionIdOneRegExp, createFlowBodyFlowDefinitionNameRegExp, createFlowBodyProjectIdRegExp, createFlowBodySchemaVersionRegExp, createFlowDefinitionBodyFlowDefinitionNameRegExp, createFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault, createFlowDefinitionBodyFlowDefinitionStepsItemActionsItemPrimaryDefault, createFlowDefinitionBodyFlowDefinitionStepsItemFieldsDefault, createFlowDefinitionBodyFlowDefinitionStepsItemGatesDefault, createFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersDefault, createFlowDefinitionBodyProjectIdRegExp, createHandoffPathAttemptIdRegExp, createSchemaBodyOnePropertiesXEditableDefault, createSchemaBodyOnePropertiesXMfaDefault, createSchemaBodyOnePropertiesXSensitiveDefault, createSchemaBodyOneXAuthMethodsMagicLinkPositionMin, createSchemaBodyOneXAuthMethodsOtpPositionMin, createSchemaBodyOneXAuthMethodsPasskeyPositionMin, createSchemaBodyOneXAuthMethodsPasswordPositionMin, createSchemaBodyOneXAuthMethodsSsoPositionMin, createSchemaQueryProjectIdRegExp, createSchemaQueryTeamIdRegExp, createSessionBodyProjectIdRegExp, createTeamQueryProjectIdRegExp, createUserQueryProjectIdRegExp, createUserQueryTeamIdRegExp, deleteFlowDefinitionQueryProjectIdRegExp, exchangeHandoffQueryProjectIdRegExp, exchangeHandoffResponseSessionFactorsItemPayloadOneUserIdRegExp, exchangeHandoffResponseSessionProjectIdRegExp, exchangeHandoffResponseSessionSessionIdRegExp, exchangeHandoffResponseSessionUserIdOneRegExp, getAuthAttemptPathAttemptIdRegExp, getAuthAttemptResponseAttemptIdRegExp, getAuthAttemptResponseChallengesItemChallengeIdRegExp, getAuthAttemptResponseCompletedFactorsItemPayloadOneUserIdRegExp, getAuthAttemptResponseProjectIdRegExp, getAuthAttemptResponseSessionIdOneRegExp, getAuthAttemptResponseUserIdOneRegExp, getFlowDefinitionQueryProjectIdRegExp, getFlowDefinitionResponseFlowDefinitionNameRegExp, getFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault, getFlowDefinitionResponseFlowDefinitionStepsItemActionsItemPrimaryDefault, getFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault, getFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault, getFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault, getFlowStepResponseBrandingLayoutDefault, getFlowStepResponseStepActionsDefault, getFlowStepResponseStepActionsItemPrimaryDefault, getFlowStepResponseStepFieldsDefault, getFlowStepResponseStepFieldsItemRequiredDefault, getFlowStepResponseStepFieldsItemValidationMaxLengthMin, getFlowStepResponseStepFieldsItemValidationMinLengthMin, getFlowStepResponseStepGatesDefault, getFlowStepResponseStepSsoProvidersDefault, getMySessionResponseFactorsItemPayloadOneUserIdRegExp, getMySessionResponseProjectIdRegExp, getMySessionResponseSessionIdRegExp, getMySessionResponseUserIdOneRegExp, getOpenIDConfigurationResponseClaimsParameterSupportedDefault, getOpenIDConfigurationResponseRequestParameterSupportedDefault, getOpenIDConfigurationResponseRequestUriParameterSupportedDefault, getOpenIDConfigurationResponseRequireRequestUriRegistrationDefault, getProjectPathProjectIdRegExp, getSchemaByIdQueryProjectIdRegExp, getSchemaByIdQueryTeamIdRegExp, getSchemaByIdResponseOnePropertiesXEditableDefault, getSchemaByIdResponseOnePropertiesXMfaDefault, getSchemaByIdResponseOnePropertiesXSensitiveDefault, getSchemaByIdResponseOneXAuthMethodsMagicLinkPositionMin, getSchemaByIdResponseOneXAuthMethodsOtpPositionMin, getSchemaByIdResponseOneXAuthMethodsPasskeyPositionMin, getSchemaByIdResponseOneXAuthMethodsPasswordPositionMin, getSchemaByIdResponseOneXAuthMethodsSsoPositionMin, getSessionPathSessionIdRegExp, getSessionQueryProjectIdRegExp, getSessionResponseFactorsItemPayloadOneUserIdRegExp, getSessionResponseProjectIdRegExp, getSessionResponseSessionIdRegExp, getSessionResponseUserIdOneRegExp, getTeamPathTeamIdRegExp, getTeamQueryProjectIdRegExp, getUserByIDPathUserIdRegExp, getUserByIDQueryProjectIdRegExp, getUserByIDQueryTeamIdRegExp, issueChallengePathAttemptIdRegExp, listFlowDefinitionsQueryLimitDefault, listFlowDefinitionsQueryLimitMax, listFlowDefinitionsQueryProjectIdRegExp, listFlowDefinitionsResponseFlowDefinitionsItemNameRegExp, listSessionsQueryLimitDefault, listSessionsQueryLimitMax, listSessionsQueryProjectIdRegExp, listSessionsQueryUserIdRegExp, listSessionsResponseSessionsItemFactorsItemPayloadOneUserIdRegExp, listSessionsResponseSessionsItemProjectIdRegExp, listSessionsResponseSessionsItemSessionIdRegExp, listSessionsResponseSessionsItemUserIdOneRegExp, listUsersQueryLimitDefault, listUsersQueryLimitMax, listUsersQueryOffsetDefault, listUsersQueryOffsetMin, revokeSessionPathSessionIdRegExp, revokeSessionQueryProjectIdRegExp, setUserPasswordPathUserIdRegExp, setUserPasswordQueryProjectIdRegExp, submitFlowStepResponseBrandingLayoutDefault, submitFlowStepResponseStepActionsDefault, submitFlowStepResponseStepActionsItemPrimaryDefault, submitFlowStepResponseStepFieldsDefault, submitFlowStepResponseStepFieldsItemRequiredDefault, submitFlowStepResponseStepFieldsItemValidationMaxLengthMin, submitFlowStepResponseStepFieldsItemValidationMinLengthMin, submitFlowStepResponseStepGatesDefault, submitFlowStepResponseStepSsoProvidersDefault, updateFlowDefinitionBodyStepsItemActionsDefault, updateFlowDefinitionBodyStepsItemActionsItemPrimaryDefault, updateFlowDefinitionBodyStepsItemFieldsDefault, updateFlowDefinitionBodyStepsItemGatesDefault, updateFlowDefinitionBodyStepsItemSsoProvidersDefault, updateFlowDefinitionQueryProjectIdRegExp, updateFlowDefinitionResponseFlowDefinitionNameRegExp, updateFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemActionsItemPrimaryDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault, verifyChallengeProofPathAttemptIdRegExp, verifyChallengeProofPathChallengeIdRegExp, verifyChallengeProofResponseAttemptIdRegExp, verifyChallengeProofResponseChallengesItemChallengeIdRegExp, verifyChallengeProofResponseCompletedFactorsItemPayloadOneUserIdRegExp, verifyChallengeProofResponseProjectIdRegExp, verifyChallengeProofResponseSessionIdOneRegExp, verifyChallengeProofResponseUserIdOneRegExp };
+export { ActivateFlowDefinitionParams, ActivateFlowDefinitionQueryParams, AuthorizeDeviceQueryParams, AuthorizeDeviceResponse, AuthorizeGetQueryParams, CreateAuthAttemptBody, CreateFlowBody, CreateFlowDefinitionBody, CreateHandoffHeader, CreateHandoffParams, CreateHandoffResponse, CreateProjectBody, CreateSchemaBody, CreateSchemaQueryParams, CreateSessionBody, CreateTeamBody, CreateTeamQueryParams, CreateUserBody, CreateUserQueryParams, DeactivateFlowDefinitionParams, DeactivateFlowDefinitionQueryParams, DeleteFlowDefinitionParams, DeleteFlowDefinitionQueryParams, EndSessionQueryParams, ExchangeHandoffBody, ExchangeHandoffHeader, ExchangeHandoffQueryParams, ExchangeHandoffResponse, GetAuthAttemptParams, GetAuthAttemptResponse, GetFlowDefinitionParams, GetFlowDefinitionQueryParams, GetFlowDefinitionResponse, GetFlowStepParams, GetFlowStepResponse, GetKeysResponse, GetMySessionResponse, GetMyUserResponse, GetOpenIDConfigurationResponse, GetProjectParams, GetProjectResponse, GetSchemaByIdParams, GetSchemaByIdQueryParams, GetSchemaByIdResponse, GetSessionParams, GetSessionQueryParams, GetSessionResponse, GetTeamParams, GetTeamQueryParams, GetTeamResponse, GetTokenResponse, GetUserByIDParams, GetUserByIDQueryParams, GetUserByIDResponse, GetUserInfoResponse, IntrospectResponse, IssueChallengeBody, IssueChallengeParams, ListFlowDefinitionsQueryParams, ListFlowDefinitionsResponse, ListSessionsQueryParams, ListSessionsResponse, ListUsersQueryParams, ListUsersResponse, ListUsersResponseItem, RevokeSessionParams, RevokeSessionQueryParams, SetUserPasswordBody, SetUserPasswordParams, SetUserPasswordQueryParams, SubmitFlowEventBody, SubmitFlowEventParams, SubmitFlowStepBody, SubmitFlowStepHeader, SubmitFlowStepParams, SubmitFlowStepResponse, UpdateFlowDefinitionBody, UpdateFlowDefinitionParams, UpdateFlowDefinitionQueryParams, UpdateFlowDefinitionResponse, VerifyChallengeProofBody, VerifyChallengeProofHeader, VerifyChallengeProofParams, VerifyChallengeProofResponse, activateFlowDefinitionQueryProjectIdRegExp, createAuthAttemptBodyProjectIdRegExp, createAuthAttemptBodySessionIdOneRegExp, createFlowBodyDryRunDefault, createFlowBodyFlowDefinitionNameRegExp, createFlowBodyProjectIdRegExp, createFlowBodySchemaVersionRegExp, createFlowDefinitionBodyFlowDefinitionNameRegExp, createFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault, createFlowDefinitionBodyFlowDefinitionStepsItemActionsItemPrimaryDefault, createFlowDefinitionBodyFlowDefinitionStepsItemFieldsDefault, createFlowDefinitionBodyFlowDefinitionStepsItemGatesDefault, createFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersDefault, createFlowDefinitionBodyProjectIdRegExp, createHandoffPathAttemptIdRegExp, createSchemaBodyOnePropertiesXEditableDefault, createSchemaBodyOnePropertiesXMfaDefault, createSchemaBodyOnePropertiesXSensitiveDefault, createSchemaBodyOneXAuthMethodsMagicLinkPositionMin, createSchemaBodyOneXAuthMethodsOtpPositionMin, createSchemaBodyOneXAuthMethodsPasskeyPositionMin, createSchemaBodyOneXAuthMethodsPasswordPositionMin, createSchemaBodyOneXAuthMethodsSsoPositionMin, createSchemaQueryProjectIdRegExp, createSchemaQueryTeamIdRegExp, createSessionBodyProjectIdRegExp, createTeamQueryProjectIdRegExp, createUserQueryProjectIdRegExp, createUserQueryTeamIdRegExp, deactivateFlowDefinitionQueryProjectIdRegExp, deleteFlowDefinitionQueryProjectIdRegExp, exchangeHandoffQueryProjectIdRegExp, exchangeHandoffResponseSessionFactorsItemPayloadOneUserIdRegExp, exchangeHandoffResponseSessionProjectIdRegExp, exchangeHandoffResponseSessionSessionIdRegExp, exchangeHandoffResponseSessionUserIdOneRegExp, getAuthAttemptPathAttemptIdRegExp, getAuthAttemptResponseAttemptIdRegExp, getAuthAttemptResponseChallengesItemChallengeIdRegExp, getAuthAttemptResponseCompletedFactorsItemPayloadOneUserIdRegExp, getAuthAttemptResponseProjectIdRegExp, getAuthAttemptResponseSessionIdOneRegExp, getAuthAttemptResponseUserIdOneRegExp, getFlowDefinitionQueryProjectIdRegExp, getFlowDefinitionResponseFlowDefinitionNameRegExp, getFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault, getFlowDefinitionResponseFlowDefinitionStepsItemActionsItemPrimaryDefault, getFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault, getFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault, getFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault, getFlowStepResponseBrandingLayoutDefault, getFlowStepResponseStepActionsDefault, getFlowStepResponseStepActionsItemPrimaryDefault, getFlowStepResponseStepFieldsDefault, getFlowStepResponseStepFieldsItemRequiredDefault, getFlowStepResponseStepFieldsItemValidationMaxLengthMin, getFlowStepResponseStepFieldsItemValidationMinLengthMin, getFlowStepResponseStepGatesDefault, getFlowStepResponseStepSsoProvidersDefault, getMySessionResponseFactorsItemPayloadOneUserIdRegExp, getMySessionResponseProjectIdRegExp, getMySessionResponseSessionIdRegExp, getMySessionResponseUserIdOneRegExp, getOpenIDConfigurationResponseClaimsParameterSupportedDefault, getOpenIDConfigurationResponseRequestParameterSupportedDefault, getOpenIDConfigurationResponseRequestUriParameterSupportedDefault, getOpenIDConfigurationResponseRequireRequestUriRegistrationDefault, getProjectPathProjectIdRegExp, getSchemaByIdQueryProjectIdRegExp, getSchemaByIdQueryTeamIdRegExp, getSchemaByIdResponseOnePropertiesXEditableDefault, getSchemaByIdResponseOnePropertiesXMfaDefault, getSchemaByIdResponseOnePropertiesXSensitiveDefault, getSchemaByIdResponseOneXAuthMethodsMagicLinkPositionMin, getSchemaByIdResponseOneXAuthMethodsOtpPositionMin, getSchemaByIdResponseOneXAuthMethodsPasskeyPositionMin, getSchemaByIdResponseOneXAuthMethodsPasswordPositionMin, getSchemaByIdResponseOneXAuthMethodsSsoPositionMin, getSessionPathSessionIdRegExp, getSessionQueryProjectIdRegExp, getSessionResponseFactorsItemPayloadOneUserIdRegExp, getSessionResponseProjectIdRegExp, getSessionResponseSessionIdRegExp, getSessionResponseUserIdOneRegExp, getTeamPathTeamIdRegExp, getTeamQueryProjectIdRegExp, getUserByIDPathUserIdRegExp, getUserByIDQueryProjectIdRegExp, getUserByIDQueryTeamIdRegExp, issueChallengePathAttemptIdRegExp, listFlowDefinitionsQueryLimitDefault, listFlowDefinitionsQueryLimitMax, listFlowDefinitionsQueryProjectIdRegExp, listFlowDefinitionsResponseFlowDefinitionsItemNameRegExp, listSessionsQueryLimitDefault, listSessionsQueryLimitMax, listSessionsQueryProjectIdRegExp, listSessionsQueryUserIdRegExp, listSessionsResponseSessionsItemFactorsItemPayloadOneUserIdRegExp, listSessionsResponseSessionsItemProjectIdRegExp, listSessionsResponseSessionsItemSessionIdRegExp, listSessionsResponseSessionsItemUserIdOneRegExp, listUsersQueryLimitDefault, listUsersQueryLimitMax, listUsersQueryOffsetDefault, listUsersQueryOffsetMin, revokeSessionPathSessionIdRegExp, revokeSessionQueryProjectIdRegExp, setUserPasswordPathUserIdRegExp, setUserPasswordQueryProjectIdRegExp, submitFlowStepResponseBrandingLayoutDefault, submitFlowStepResponseStepActionsDefault, submitFlowStepResponseStepActionsItemPrimaryDefault, submitFlowStepResponseStepFieldsDefault, submitFlowStepResponseStepFieldsItemRequiredDefault, submitFlowStepResponseStepFieldsItemValidationMaxLengthMin, submitFlowStepResponseStepFieldsItemValidationMinLengthMin, submitFlowStepResponseStepGatesDefault, submitFlowStepResponseStepSsoProvidersDefault, updateFlowDefinitionBodyFlowDefinitionNameRegExp, updateFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault, updateFlowDefinitionBodyFlowDefinitionStepsItemActionsItemPrimaryDefault, updateFlowDefinitionBodyFlowDefinitionStepsItemFieldsDefault, updateFlowDefinitionBodyFlowDefinitionStepsItemGatesDefault, updateFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersDefault, updateFlowDefinitionQueryProjectIdRegExp, updateFlowDefinitionResponseFlowDefinitionNameRegExp, updateFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemActionsItemPrimaryDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault, verifyChallengeProofPathAttemptIdRegExp, verifyChallengeProofPathChallengeIdRegExp, verifyChallengeProofResponseAttemptIdRegExp, verifyChallengeProofResponseChallengesItemChallengeIdRegExp, verifyChallengeProofResponseCompletedFactorsItemPayloadOneUserIdRegExp, verifyChallengeProofResponseProjectIdRegExp, verifyChallengeProofResponseSessionIdOneRegExp, verifyChallengeProofResponseUserIdOneRegExp };
 
 //# sourceMappingURL=zitadelNextGen.zod.mjs.map