@zitadel/api 0.1.0-alpha.15 → 0.1.0-alpha.17

package/src/generated/endpoints/zitadelNextGen.msw.ts

@@ -45,6 +45,8 @@ import type {
   ListSchemas200Item,
   ListSessions200,
   ListUsers200Item,
+  PatchProject200,
+  QueryProjects200,
   SubmitFlowStep200,
   UpdateFlowDefinition200,
   VerifyChallengeProof200,
@@ -1157,6 +1159,7 @@ export const getCreateProjectResponseMock = (
   overrideResponse: Partial<Extract<CreateProject201, object>> = {},
 ): CreateProject201 => ({
   id: faker.string.alpha({ length: { min: 10, max: 20 } }),
+  name: faker.string.alpha({ length: { min: 10, max: 20 } }),
   projectSecret: faker.string.alpha({ length: { min: 10, max: 20 } }),
   previewSecret: faker.string.alpha({ length: { min: 10, max: 20 } }),
   previewOrigins: Array.from(
@@ -1167,10 +1170,57 @@ export const getCreateProjectResponseMock = (
   ...overrideResponse,
 });
 
+export const getQueryProjectsResponseMock = (
+  overrideResponse: Partial<Extract<QueryProjects200, object>> = {},
+): QueryProjects200 => ({
+  projects: Array.from({ length: faker.number.int({ min: 1, max: 10 }) }, (_, i) => i + 1).map(
+    () => ({
+      id: faker.string.alpha({ length: { min: 10, max: 20 } }),
+      name: faker.string.alpha({ length: { min: 10, max: 20 } }),
+      previewOrigins: faker.helpers.arrayElement([
+        Array.from({ length: faker.number.int({ min: 1, max: 10 }) }, (_, i) => i + 1).map(() =>
+          faker.string.alpha({ length: { min: 10, max: 20 } }),
+        ),
+        undefined,
+      ]),
+      createdAt: faker.date.past().toISOString().slice(0, 19) + "Z",
+      updatedAt: faker.date.past().toISOString().slice(0, 19) + "Z",
+    }),
+  ),
+  next_page_token: faker.helpers.arrayElement([
+    faker.helpers.arrayElement([faker.string.alpha({ length: { min: 10, max: 20 } }), null]),
+    undefined,
+  ]),
+  ...overrideResponse,
+});
+
 export const getGetProjectResponseMock = (
   overrideResponse: Partial<Extract<GetProject200, object>> = {},
 ): GetProject200 => ({
   id: faker.string.alpha({ length: { min: 10, max: 20 } }),
+  name: faker.string.alpha({ length: { min: 10, max: 20 } }),
+  previewOrigins: faker.helpers.arrayElement([
+    Array.from({ length: faker.number.int({ min: 1, max: 10 }) }, (_, i) => i + 1).map(() =>
+      faker.string.alpha({ length: { min: 10, max: 20 } }),
+    ),
+    undefined,
+  ]),
+  createdAt: faker.date.past().toISOString().slice(0, 19) + "Z",
+  updatedAt: faker.date.past().toISOString().slice(0, 19) + "Z",
+  ...overrideResponse,
+});
+
+export const getPatchProjectResponseMock = (
+  overrideResponse: Partial<Extract<PatchProject200, object>> = {},
+): PatchProject200 => ({
+  id: faker.string.alpha({ length: { min: 10, max: 20 } }),
+  name: faker.string.alpha({ length: { min: 10, max: 20 } }),
+  previewOrigins: faker.helpers.arrayElement([
+    Array.from({ length: faker.number.int({ min: 1, max: 10 }) }, (_, i) => i + 1).map(() =>
+      faker.string.alpha({ length: { min: 10, max: 20 } }),
+    ),
+    undefined,
+  ]),
   createdAt: faker.date.past().toISOString().slice(0, 19) + "Z",
   updatedAt: faker.date.past().toISOString().slice(0, 19) + "Z",
   ...overrideResponse,
@@ -1187,6 +1237,14 @@ export const getCreateSessionResponseMock = (
       faker.helpers.arrayElement([faker.helpers.fromRegExp("^user_[a-zA-Z0-9_-]+$"), null]),
       undefined,
     ]),
+    name: faker.helpers.arrayElement([
+      faker.string.alpha({ length: { min: 10, max: 20 } }),
+      undefined,
+    ]),
+    email: faker.helpers.arrayElement([
+      faker.string.alpha({ length: { min: 10, max: 20 } }),
+      undefined,
+    ]),
     factors: Array.from({ length: faker.number.int({ min: 1, max: 10 }) }, (_, i) => i + 1).map(
       () => ({
         method: faker.helpers.arrayElement(["identifier", "password", "passkey"] as const),
@@ -1251,6 +1309,14 @@ export const getListSessionsResponseMock = (
         faker.helpers.arrayElement([faker.helpers.fromRegExp("^user_[a-zA-Z0-9_-]+$"), null]),
         undefined,
       ]),
+      name: faker.helpers.arrayElement([
+        faker.string.alpha({ length: { min: 10, max: 20 } }),
+        undefined,
+      ]),
+      email: faker.helpers.arrayElement([
+        faker.string.alpha({ length: { min: 10, max: 20 } }),
+        undefined,
+      ]),
       factors: Array.from({ length: faker.number.int({ min: 1, max: 10 }) }, (_, i) => i + 1).map(
         () => ({
           method: faker.helpers.arrayElement(["identifier", "password", "passkey"] as const),
@@ -1318,6 +1384,14 @@ export const getExchangeHandoffResponseMock = (
       faker.helpers.arrayElement([faker.helpers.fromRegExp("^user_[a-zA-Z0-9_-]+$"), null]),
       undefined,
     ]),
+    name: faker.helpers.arrayElement([
+      faker.string.alpha({ length: { min: 10, max: 20 } }),
+      undefined,
+    ]),
+    email: faker.helpers.arrayElement([
+      faker.string.alpha({ length: { min: 10, max: 20 } }),
+      undefined,
+    ]),
     factors: Array.from({ length: faker.number.int({ min: 1, max: 10 }) }, (_, i) => i + 1).map(
       () => ({
         method: faker.helpers.arrayElement(["identifier", "password", "passkey"] as const),
@@ -1380,6 +1454,14 @@ export const getGetSessionResponseMock = (
     faker.helpers.arrayElement([faker.helpers.fromRegExp("^user_[a-zA-Z0-9_-]+$"), null]),
     undefined,
   ]),
+  name: faker.helpers.arrayElement([
+    faker.string.alpha({ length: { min: 10, max: 20 } }),
+    undefined,
+  ]),
+  email: faker.helpers.arrayElement([
+    faker.string.alpha({ length: { min: 10, max: 20 } }),
+    undefined,
+  ]),
   factors: Array.from({ length: faker.number.int({ min: 1, max: 10 }) }, (_, i) => i + 1).map(
     () => ({
       method: faker.helpers.arrayElement(["identifier", "password", "passkey"] as const),
@@ -1440,6 +1522,14 @@ export const getGetMySessionResponseMock = (
     faker.helpers.arrayElement([faker.helpers.fromRegExp("^user_[a-zA-Z0-9_-]+$"), null]),
     undefined,
   ]),
+  name: faker.helpers.arrayElement([
+    faker.string.alpha({ length: { min: 10, max: 20 } }),
+    undefined,
+  ]),
+  email: faker.helpers.arrayElement([
+    faker.string.alpha({ length: { min: 10, max: 20 } }),
+    undefined,
+  ]),
   factors: Array.from({ length: faker.number.int({ min: 1, max: 10 }) }, (_, i) => i + 1).map(
     () => ({
       method: faker.helpers.arrayElement(["identifier", "password", "passkey"] as const),
@@ -2516,6 +2606,30 @@ export const getCreateProjectMockHandler = (
   );
 };
 
+export const getQueryProjectsMockHandler = (
+  overrideResponse?:
+    | QueryProjects200
+    | ((
+        info: Parameters<Parameters<typeof http.post>[1]>[0],
+      ) => Promise<QueryProjects200> | QueryProjects200),
+  options?: RequestHandlerOptions,
+) => {
+  return http.post(
+    "*/projects/query",
+    async (info: Parameters<Parameters<typeof http.post>[1]>[0]) => {
+      return HttpResponse.json(
+        overrideResponse !== undefined
+          ? typeof overrideResponse === "function"
+            ? await overrideResponse(info)
+            : overrideResponse
+          : getQueryProjectsResponseMock(),
+        { status: 200 },
+      );
+    },
+    options,
+  );
+};
+
 export const getGetProjectMockHandler = (
   overrideResponse?:
     | GetProject200
@@ -2540,6 +2654,30 @@ export const getGetProjectMockHandler = (
   );
 };
 
+export const getPatchProjectMockHandler = (
+  overrideResponse?:
+    | PatchProject200
+    | ((
+        info: Parameters<Parameters<typeof http.patch>[1]>[0],
+      ) => Promise<PatchProject200> | PatchProject200),
+  options?: RequestHandlerOptions,
+) => {
+  return http.patch(
+    "*/projects/:projectId",
+    async (info: Parameters<Parameters<typeof http.patch>[1]>[0]) => {
+      return HttpResponse.json(
+        overrideResponse !== undefined
+          ? typeof overrideResponse === "function"
+            ? await overrideResponse(info)
+            : overrideResponse
+          : getPatchProjectResponseMock(),
+        { status: 200 },
+      );
+    },
+    options,
+  );
+};
+
 export const getCreateSessionMockHandler = (
   overrideResponse?:
     | CreateSession201
@@ -2996,7 +3134,9 @@ export const getZitadelNextGenMock = () => [
   getVerifyChallengeProofMockHandler(),
   getCreateHandoffMockHandler(),
   getCreateProjectMockHandler(),
+  getQueryProjectsMockHandler(),
   getGetProjectMockHandler(),
+  getPatchProjectMockHandler(),
   getCreateSessionMockHandler(),
   getListSessionsMockHandler(),
   getExchangeHandoffMockHandler(),

package/src/generated/endpoints/zitadelNextGen.ts

@@ -74,6 +74,10 @@ import type {
   ListSessionsParams,
   ListUsers200Item,
   ListUsersParams,
+  PatchProject200,
+  PatchProjectBody,
+  QueryProjects200,
+  QueryProjectsBody,
   RevokeSessionParams,
   RevokeTokenBody,
   SetUserPasswordBody,
@@ -777,6 +781,25 @@ export const createProject = async (
   });
 };
 
+export const getQueryProjectsUrl = () => {
+  return `${getProxyPath()}/projects/query`;
+};
+
+/**
+ * @summary Query projects
+ */
+export const queryProjects = async (
+  queryProjectsBody: QueryProjectsBody,
+  options?: RequestInit,
+): Promise<QueryProjects200> => {
+  return customFetch<QueryProjects200>(getQueryProjectsUrl(), {
+    ...options,
+    method: "POST",
+    headers: { "Content-Type": "application/json", ...options?.headers },
+    body: JSON.stringify(queryProjectsBody),
+  });
+};
+
 export const getGetProjectUrl = (projectId: string) => {
   return `${getProxyPath()}/projects/${projectId}`;
 };
@@ -796,6 +819,28 @@ export const getProject = async (
   });
 };
 
+export const getPatchProjectUrl = (projectId: string) => {
+  return `${getProxyPath()}/projects/${projectId}`;
+};
+
+/**
+ * Updates the state of a project.
+
+ * @summary Update project
+ */
+export const patchProject = async (
+  projectId: string,
+  patchProjectBody: PatchProjectBody,
+  options?: RequestInit,
+): Promise<PatchProject200> => {
+  return customFetch<PatchProject200>(getPatchProjectUrl(projectId), {
+    ...options,
+    method: "PATCH",
+    headers: { "Content-Type": "application/json", ...options?.headers },
+    body: JSON.stringify(patchProjectBody),
+  });
+};
+
 export const getCreateSessionUrl = () => {
   return `${getProxyPath()}/sessions`;
 };

package/src/generated/endpoints/zitadelNextGen.zod.ts

@@ -750,7 +750,9 @@ export const GetFlowStepResponse = zod.object({
       error: zod
         .union([zod.string(), zod.null()])
         .optional()
-        .describe("Error message from a previous failed submission."),
+        .describe(
+          'Error from a previous failed submission. Field-validation failures\ncarry localisation text keys: `error.<field>_<rule>` per violation\n(e.g. `error.email_required`; the `format` rule is spelled\n`error.<field>_invalid`), multiple violations joined with `\"; \"`.\nField names appear verbatim, so clients localise unknown keys via\nthe generic `error.field_<rule>` catalog entries. Other engine\nfailures carry `error.\*` catalog keys as well (e.g.\n`error.invalid_credentials`, `error.passkey_invalid`); a\nnon-`error.` payload is an outcome token (e.g. `user_not_found`)\nthat clients keep verbatim.\n',
+        ),
       complete: zod
         .enum(["redirect", "show"])
         .optional()
@@ -1116,7 +1118,9 @@ export const SubmitFlowStepResponse = zod.object({
       error: zod
         .union([zod.string(), zod.null()])
         .optional()
-        .describe("Error message from a previous failed submission."),
+        .describe(
+          'Error from a previous failed submission. Field-validation failures\ncarry localisation text keys: `error.<field>_<rule>` per violation\n(e.g. `error.email_required`; the `format` rule is spelled\n`error.<field>_invalid`), multiple violations joined with `\"; \"`.\nField names appear verbatim, so clients localise unknown keys via\nthe generic `error.field_<rule>` catalog entries. Other engine\nfailures carry `error.\*` catalog keys as well (e.g.\n`error.invalid_credentials`, `error.passkey_invalid`); a\nnon-`error.` payload is an outcome token (e.g. `user_not_found`)\nthat clients keep verbatim.\n',
+        ),
       complete: zod
         .enum(["redirect", "show"])
         .optional()
@@ -1981,6 +1985,7 @@ export const CreateHandoffResponse = zod
 export const createProjectBodySeedDefaultsDefault = true;
 
 export const CreateProjectBody = zod.object({
+  name: zod.string().describe("The name of the project."),
   previewOrigins: zod
     .array(zod.string())
     .optional()
@@ -1993,6 +1998,89 @@ export const CreateProjectBody = zod.object({
     ),
 });
 
+/**
+ * @summary Query projects
+ */
+export const queryProjectsBodyLimitDefault = 20;
+export const queryProjectsBodyLimitMax = 100;
+
+export const QueryProjectsBody = zod
+  .object({
+    limit: zod
+      .number()
+      .min(1)
+      .max(queryProjectsBodyLimitMax)
+      .default(queryProjectsBodyLimitDefault),
+    page_token: zod
+      .union([zod.string(), zod.null()])
+      .optional()
+      .describe("Token to retrieve the next page of results."),
+    sorting: zod
+      .object({
+        field: zod.enum(["name", "createdAt"]),
+        direction: zod.enum(["asc", "desc"]),
+      })
+      .optional(),
+    filter: zod
+      .array(
+        zod.object({
+          field: zod.enum(["name", "createdAt"]),
+          value: zod
+            .union([zod.string(), zod.number(), zod.boolean(), zod.null()])
+            .optional()
+            .describe(
+              "Filter-value specifies which values can be filtered by a query endpoint. This\nis a union of types. When a value is specified which is not assignable to the\nfield which is being filtered, a 400 error will be returned.\n",
+            ),
+          operation: zod
+            .enum([
+              "equals",
+              "not_equals",
+              "contains",
+              "not_contains",
+              "less_than",
+              "less_than_or_equal",
+              "greater_than",
+              "greater_than_or_equal",
+            ])
+            .describe(
+              "Filter operation defines the operations which can be used when filtering on a\nquery endpoint.\n",
+            ),
+        }),
+      )
+      .optional()
+      .describe("Filter criteria for querying projects."),
+  })
+  .describe("Request to query projects.");
+
+export const QueryProjectsResponse = zod
+  .object({
+    projects: zod.array(
+      zod
+        .object({
+          id: zod.string().describe("The unique identifier of the project."),
+          name: zod.string().describe("The name of the project."),
+          previewOrigins: zod
+            .array(zod.string())
+            .optional()
+            .describe("Origins which are allowed for previewing and testing the project.\n"),
+          createdAt: zod.iso
+            .datetime({ offset: true })
+            .describe("The time when the project was created."),
+          updatedAt: zod.iso
+            .datetime({ offset: true })
+            .describe("The time when the project was last updated."),
+        })
+        .describe("The current state of a project."),
+    ),
+    next_page_token: zod
+      .union([zod.string(), zod.null()])
+      .optional()
+      .describe(
+        "Token to pass as `page_token` in the next request to fetch the following page.\nAbsent when there are no more results.\n",
+      ),
+  })
+  .describe("Paginated list of projects.");
+
 /**
  * Returns the current state of a project.
 
@@ -2007,6 +2095,43 @@ export const GetProjectParams = zod.object({
 export const GetProjectResponse = zod
   .object({
     id: zod.string().describe("The unique identifier of the project."),
+    name: zod.string().describe("The name of the project."),
+    previewOrigins: zod
+      .array(zod.string())
+      .optional()
+      .describe("Origins which are allowed for previewing and testing the project.\n"),
+    createdAt: zod.iso
+      .datetime({ offset: true })
+      .describe("The time when the project was created."),
+    updatedAt: zod.iso
+      .datetime({ offset: true })
+      .describe("The time when the project was last updated."),
+  })
+  .describe("The current state of a project.");
+
+/**
+ * Updates the state of a project.
+
+ * @summary Update project
+ */
+export const patchProjectPathProjectIdRegExp = new RegExp("^[a-zA-Z0-9_-]+$");
+
+export const PatchProjectParams = zod.object({
+  project_id: zod.string().regex(patchProjectPathProjectIdRegExp),
+});
+
+export const PatchProjectBody = zod.object({
+  name: zod.union([zod.null(), zod.string()]).optional().describe("The name of the project."),
+});
+
+export const PatchProjectResponse = zod
+  .object({
+    id: zod.string().describe("The unique identifier of the project."),
+    name: zod.string().describe("The name of the project."),
+    previewOrigins: zod
+      .array(zod.string())
+      .optional()
+      .describe("Origins which are allowed for previewing and testing the project.\n"),
     createdAt: zod.iso
       .datetime({ offset: true })
       .describe("The time when the project was created."),
@@ -2121,6 +2246,18 @@ export const ListSessionsResponse = zod
             .describe(
               "The authenticated user. Null for anonymous sessions and until the `user`\nfactor has been verified through an `auth_attempt`.\n",
             ),
+          name: zod
+            .string()
+            .optional()
+            .describe(
+              "Human-readable name of the authenticated user, resolved from the\nconventional user-schema properties: `name` when defined, otherwise\nthe given and family name parts joined — `givenName`\/`familyName`\n(the shipped presets' spelling) or `given_name`\/`family_name`. Only\npresent on reads that hydrate the user's identity\n(`GET \/sessions\/me`) and only when the session has an authenticated\nuser whose schema carries those properties; clients fall back to\n`email`, then `user_id`.\n",
+            ),
+          email: zod
+            .string()
+            .optional()
+            .describe(
+              "Email address of the authenticated user, resolved from the\nconventional `email` user-schema property. Only present on reads\nthat hydrate the user's identity (`GET \/sessions\/me`) and only when\nthe session has an authenticated user whose schema carries that\nproperty.\n",
+            ),
           factors: zod
             .array(
               zod
@@ -2310,6 +2447,18 @@ export const ExchangeHandoffResponse = zod
           .describe(
             "The authenticated user. Null for anonymous sessions and until the `user`\nfactor has been verified through an `auth_attempt`.\n",
           ),
+        name: zod
+          .string()
+          .optional()
+          .describe(
+            "Human-readable name of the authenticated user, resolved from the\nconventional user-schema properties: `name` when defined, otherwise\nthe given and family name parts joined — `givenName`\/`familyName`\n(the shipped presets' spelling) or `given_name`\/`family_name`. Only\npresent on reads that hydrate the user's identity\n(`GET \/sessions\/me`) and only when the session has an authenticated\nuser whose schema carries those properties; clients fall back to\n`email`, then `user_id`.\n",
+          ),
+        email: zod
+          .string()
+          .optional()
+          .describe(
+            "Email address of the authenticated user, resolved from the\nconventional `email` user-schema property. Only present on reads\nthat hydrate the user's identity (`GET \/sessions\/me`) and only when\nthe session has an authenticated user whose schema carries that\nproperty.\n",
+          ),
         factors: zod
           .array(
             zod
@@ -2462,6 +2611,18 @@ export const GetSessionResponse = zod
       .describe(
         "The authenticated user. Null for anonymous sessions and until the `user`\nfactor has been verified through an `auth_attempt`.\n",
       ),
+    name: zod
+      .string()
+      .optional()
+      .describe(
+        "Human-readable name of the authenticated user, resolved from the\nconventional user-schema properties: `name` when defined, otherwise\nthe given and family name parts joined — `givenName`\/`familyName`\n(the shipped presets' spelling) or `given_name`\/`family_name`. Only\npresent on reads that hydrate the user's identity\n(`GET \/sessions\/me`) and only when the session has an authenticated\nuser whose schema carries those properties; clients fall back to\n`email`, then `user_id`.\n",
+      ),
+    email: zod
+      .string()
+      .optional()
+      .describe(
+        "Email address of the authenticated user, resolved from the\nconventional `email` user-schema property. Only present on reads\nthat hydrate the user's identity (`GET \/sessions\/me`) and only when\nthe session has an authenticated user whose schema carries that\nproperty.\n",
+      ),
     factors: zod
       .array(
         zod
@@ -2613,6 +2774,18 @@ export const GetMySessionResponse = zod
       .describe(
         "The authenticated user. Null for anonymous sessions and until the `user`\nfactor has been verified through an `auth_attempt`.\n",
       ),
+    name: zod
+      .string()
+      .optional()
+      .describe(
+        "Human-readable name of the authenticated user, resolved from the\nconventional user-schema properties: `name` when defined, otherwise\nthe given and family name parts joined — `givenName`\/`familyName`\n(the shipped presets' spelling) or `given_name`\/`family_name`. Only\npresent on reads that hydrate the user's identity\n(`GET \/sessions\/me`) and only when the session has an authenticated\nuser whose schema carries those properties; clients fall back to\n`email`, then `user_id`.\n",
+      ),
+    email: zod
+      .string()
+      .optional()
+      .describe(
+        "Email address of the authenticated user, resolved from the\nconventional `email` user-schema property. Only present on reads\nthat hydrate the user's identity (`GET \/sessions\/me`) and only when\nthe session has an authenticated user whose schema carries that\nproperty.\n",
+      ),
     factors: zod
       .array(
         zod

package/src/generated/model/createFlow201Step.ts

@@ -27,7 +27,17 @@ export type CreateFlow201Step = {
   The backend never sends display text — only semantic keys.
    */
   texts?: CreateFlow201StepTexts;
-  /** Error message from a previous failed submission. */
+  /** Error from a previous failed submission. Field-validation failures
+  carry localisation text keys: `error.<field>_<rule>` per violation
+  (e.g. `error.email_required`; the `format` rule is spelled
+  `error.<field>_invalid`), multiple violations joined with `"; "`.
+  Field names appear verbatim, so clients localise unknown keys via
+  the generic `error.field_<rule>` catalog entries. Other engine
+  failures carry `error.*` catalog keys as well (e.g.
+  `error.invalid_credentials`, `error.passkey_invalid`); a
+  non-`error.` payload is an outcome token (e.g. `user_not_found`)
+  that clients keep verbatim.
+   */
   error?: string | null;
   /** Present only on terminal steps. Tells the frontend what to do:
   - redirect: navigate to redirect_uri immediately (OIDC/SAML done)

package/src/generated/model/createProject201.ts

@@ -9,6 +9,8 @@
 export type CreateProject201 = {
   /** The unique identifier of the project. */
   id: string;
+  /** The name of the project. */
+  name: string;
   /** Secret which can be used for authentication when modifying the project.
    */
   projectSecret: string;

package/src/generated/model/createProjectBody.ts

@@ -7,6 +7,8 @@
  */
 
 export type CreateProjectBody = {
+  /** The name of the project. */
+  name: string;
   /** Origins which are allowed for previewing and testing the project.
    */
   previewOrigins?: string[];

package/src/generated/model/createSession201Session.ts

@@ -38,6 +38,23 @@ export type CreateSession201Session = {
   factor has been verified through an `auth_attempt`.
    */
   user_id?: string | null;
+  /** Human-readable name of the authenticated user, resolved from the
+  conventional user-schema properties: `name` when defined, otherwise
+  the given and family name parts joined — `givenName`/`familyName`
+  (the shipped presets' spelling) or `given_name`/`family_name`. Only
+  present on reads that hydrate the user's identity
+  (`GET /sessions/me`) and only when the session has an authenticated
+  user whose schema carries those properties; clients fall back to
+  `email`, then `user_id`.
+   */
+  name?: string;
+  /** Email address of the authenticated user, resolved from the
+  conventional `email` user-schema property. Only present on reads
+  that hydrate the user's identity (`GET /sessions/me`) and only when
+  the session has an authenticated user whose schema carries that
+  property.
+   */
+  email?: string;
   /** Verified authentication factors accumulated by this session.
   Each key is a factor type (e.g. `password`, `totp`, `passkey`).
   Each value is a factor event object with at least `verified_at` and

package/src/generated/model/exchangeHandoff200Session.ts

@@ -38,6 +38,23 @@ export type ExchangeHandoff200Session = {
   factor has been verified through an `auth_attempt`.
    */
   user_id?: string | null;
+  /** Human-readable name of the authenticated user, resolved from the
+  conventional user-schema properties: `name` when defined, otherwise
+  the given and family name parts joined — `givenName`/`familyName`
+  (the shipped presets' spelling) or `given_name`/`family_name`. Only
+  present on reads that hydrate the user's identity
+  (`GET /sessions/me`) and only when the session has an authenticated
+  user whose schema carries those properties; clients fall back to
+  `email`, then `user_id`.
+   */
+  name?: string;
+  /** Email address of the authenticated user, resolved from the
+  conventional `email` user-schema property. Only present on reads
+  that hydrate the user's identity (`GET /sessions/me`) and only when
+  the session has an authenticated user whose schema carries that
+  property.
+   */
+  email?: string;
   /** Verified authentication factors accumulated by this session.
   Each key is a factor type (e.g. `password`, `totp`, `passkey`).
   Each value is a factor event object with at least `verified_at` and

package/src/generated/model/getFlowStep200Step.ts

@@ -27,7 +27,17 @@ export type GetFlowStep200Step = {
   The backend never sends display text — only semantic keys.
    */
   texts?: GetFlowStep200StepTexts;
-  /** Error message from a previous failed submission. */
+  /** Error from a previous failed submission. Field-validation failures
+  carry localisation text keys: `error.<field>_<rule>` per violation
+  (e.g. `error.email_required`; the `format` rule is spelled
+  `error.<field>_invalid`), multiple violations joined with `"; "`.
+  Field names appear verbatim, so clients localise unknown keys via
+  the generic `error.field_<rule>` catalog entries. Other engine
+  failures carry `error.*` catalog keys as well (e.g.
+  `error.invalid_credentials`, `error.passkey_invalid`); a
+  non-`error.` payload is an outcome token (e.g. `user_not_found`)
+  that clients keep verbatim.
+   */
   error?: string | null;
   /** Present only on terminal steps. Tells the frontend what to do:
   - redirect: navigate to redirect_uri immediately (OIDC/SAML done)

package/src/generated/model/getMySession200.ts

@@ -38,6 +38,23 @@ export type GetMySession200 = {
   factor has been verified through an `auth_attempt`.
    */
   user_id?: string | null;
+  /** Human-readable name of the authenticated user, resolved from the
+  conventional user-schema properties: `name` when defined, otherwise
+  the given and family name parts joined — `givenName`/`familyName`
+  (the shipped presets' spelling) or `given_name`/`family_name`. Only
+  present on reads that hydrate the user's identity
+  (`GET /sessions/me`) and only when the session has an authenticated
+  user whose schema carries those properties; clients fall back to
+  `email`, then `user_id`.
+   */
+  name?: string;
+  /** Email address of the authenticated user, resolved from the
+  conventional `email` user-schema property. Only present on reads
+  that hydrate the user's identity (`GET /sessions/me`) and only when
+  the session has an authenticated user whose schema carries that
+  property.
+   */
+  email?: string;
   /** Verified authentication factors accumulated by this session.
   Each key is a factor type (e.g. `password`, `totp`, `passkey`).
   Each value is a factor event object with at least `verified_at` and