@zitadel/api 0.1.0-alpha.16 → 0.1.0-alpha.18

package/dist/{zitadelNextGen-CXFZoHGo.d.mts → zitadelNextGen-BCljAZpG.d.mts}

@@ -1,55 +1,9 @@
-import { $r as IntrospectBody, $t as SetUserPasswordBody, Ai as GetTeam200, An as QueryProjectsBody, As as CreateUserParams, Ca as GetMyUser200, Cc as CreateProjectBody, Ci as GetTeamParams, Cs as DeactivateFlowDefinitionParams, Ec as CreateProject201, Gn as QueryProjects200, Ha as GetKeys200, Hs as CreateUser201, Ia as GetLiveDefault, Il as CreateAuthAttemptBody, Jl as AuthorizeGetDefault, Ka as GetHealthDefault, Ks as CreateTeamBody, Li as GetSession200, Ll as CreateAuthAttempt201, Mr as ListSchemas200Item, Nr as ListFlowDefinitionsParams, Ns as CreateUserBody, Oc as CreateHandoff200, P as UpdateFlowDefinition200, Qi as GetReadyDefault, Ql as AuthorizeDeviceParams, Qo as ExchangeHandoffBody, St as SubmitFlowStep200, Ur as IssueChallengeBody, Us as CreateTeamParams, Ut as SubmitFlowEventBody, Wi as GetSchemaByIdParams, X as SubmitFlowStepBody, Xt as SetUserPasswordParams, Yc as CreateFlowDefinition201, Yn as PatchProjectBody, Yo as ExchangeHandoffParams, Zi as GetSchemaById200, Zs as CreateTeam201, ai as GetUserInfo200, as as ExchangeHandoff200, bc as CreateSchema201, bi as GetToken200, ca as GetProject200, ci as GetUserByIDParams, cn as RevokeTokenBody, da as GetOpenIDConfiguration200, dl as CreateFlowBody, dn as RevokeSessionParams, dr as ListSessionsParams, ec as CreateSessionBody, fc as CreateSchemaParams, g as UpdateFlowDefinitionBody, gl as CreateFlow201, hc as CreateSchemaBody, hi as GetUserByID200, ic as CreateSession201, iu as ActivateFlowDefinitionParams, jc as CreateFlowDefinitionBody, ji as GetSessionParams, ka as GetMySession200, kr as ListSchemasParams, n as VerifyChallengeProofBody, ni as Introspect200, no as GetFlowStep200, nr as PatchProject200, p as UpdateFlowDefinitionParams, ps as EndSessionParams, ql as AuthorizeGetParams, qr as IssueChallenge201, r as VerifyChallengeProof200, rr as ListUsersParams, ru as AuthorizeDevice200, ur as ListUsers200Item, vi as GetTokenBody, vs as DeleteFlowDefinitionParams, wo as GetFlowDefinition200, xo as GetFlowDefinitionParams, xr as ListSessions200, zo as GetAuthAttempt200, zr as ListFlowDefinitions200 } from "./index-oloR8wb4.mjs";
+import { Al as CreateFlowDefinitionBody, As as GetAuthAttempt200, Bs as ExchangeHandoffParams, Bu as CreateBranding201, Cl as CreateProjectBody, D as UpdateTeam200, Da as GetSession200, Ei as ListFlowDefinitionsParams, El as CreateProject201, Er as QueryProjects200, Es as GetBrandingById200, Fc as CreateUser201, Gu as CreateAuthAttempt201, Ha as GetReadyDefault, Hs as ExchangeHandoffBody, Ic as CreateTeamParams, Ir as PatchProject200, It as SubmitFlowStep200, Iu as CreateBrandingBody, Jl as CreateFlowDefinition201, Li as ListBranding200Item, Lr as ListUserTeamsParams, Nu as CreateBrandingParams, Ol as CreateHandoff200, Oo as GetFlowStep200, Pa as GetSchemaByIdParams, Pi as ListBrandingParams, Qc as CreateTeam201, Qr as ListUsersParams, Rn as QueryTeams200, Sc as CreateUserParams, Si as ListSchemasParams, Ti as ListSchemas200Item, Ui as IssueChallenge201, Un as QuerySessionsBody, Va as GetSchemaById200, Vn as QuerySessionsParams, Wu as CreateAuthAttemptBody, Y as UpdateFlowDefinition200, Yo as GetFlowDefinition200, Yr as ListUserTeams200, Ys as ExchangeHandoff200, Za as GetProject200, _a as GetTeam200, al as CreateSession201, bi as ListUserPasskeys200, bs as GetClaimStatus200, ci as ListUserPasskeysParams, co as GetMySession200, dr as QueryProjectsBody, ea as InitClaim201, g as UpdateTeamBody, gl as CreateSchemaBody, ho as GetLiveDefault, ii as ListUsers200, j as UpdateFlowDefinitionBody, ji as ListFlowDefinitions200, k as UpdateFlowDefinitionParams, kr as PatchProjectBody, lc as DeleteTeamParams, ls as GetClaimStatusParams, lu as CreateFlowBody, md as CompleteClaim200, mu as CreateFlow201, n as VerifyChallengeProofBody, no as GetMyUser200, nr as QuerySessions200, p as UpdateTeamParams, pl as CreateSchemaParams, qo as GetFlowDefinitionParams, r as VerifyChallengeProof200, rc as DeleteUserByIDParams, rd as CompleteClaimBody, rn as SetUserPasswordBody, sa as GetUserByID200, ta as GetUserByIDParams, tl as CreateSessionBody, tn as SetUserPasswordParams, ua as GetTeamParams, un as RevokeSessionParams, ut as SubmitFlowStepBody, vc as DeleteFlowDefinitionParams, vn as QueryTeamsParams, wc as CreateUserBody, xl as CreateSchema201, xn as QueryTeamsBody, xs as GetBrandingByIdParams, ya as GetSessionParams, yo as GetHealthDefault, zc as CreateTeamBody, zi as IssueChallengeBody } from "./index-D6qIOslB.mjs";
 
 //#region src/generated/endpoints/zitadelNextGen.d.ts
 declare namespace zitadelNextGen_d_exports {
-  export { activateFlowDefinition, authorizeDevice, authorizeGet, createAuthAttempt, createFlow, createFlowDefinition, createHandoff, createProject, createSchema, createSession, createTeam, createUser, deactivateFlowDefinition, deleteFlowDefinition, endSession, exchangeHandoff, getActivateFlowDefinitionUrl, getAuthAttempt, getAuthorizeDeviceUrl, getAuthorizeGetUrl, getCreateAuthAttemptUrl, getCreateFlowDefinitionUrl, getCreateFlowUrl, getCreateHandoffUrl, getCreateProjectUrl, getCreateSchemaUrl, getCreateSessionUrl, getCreateTeamUrl, getCreateUserUrl, getDeactivateFlowDefinitionUrl, getDeleteFlowDefinitionUrl, getEndSessionUrl, getExchangeHandoffUrl, getFlowDefinition, getFlowStep, getGetAuthAttemptUrl, getGetFlowDefinitionUrl, getGetFlowStepUrl, getGetHealthUrl, getGetKeysUrl, getGetLiveUrl, getGetMySessionUrl, getGetMyUserUrl, getGetOpenIDConfigurationUrl, getGetProjectUrl, getGetReadyUrl, getGetSchemaByIdUrl, getGetSessionUrl, getGetTeamUrl, getGetTokenUrl, getGetUserByIDUrl, getGetUserInfoUrl, getHealth, getIntrospectUrl, getIssueChallengeUrl, getKeys, getListFlowDefinitionsUrl, getListSchemasUrl, getListSessionsUrl, getListUsersUrl, getLive, getMySession, getMyUser, getOpenIDConfiguration, getPatchProjectUrl, getProject, getQueryProjectsUrl, getReady, getRevokeMySessionUrl, getRevokeSessionUrl, getRevokeTokenUrl, getSchemaById, getSession, getSetUserPasswordUrl, getSubmitFlowEventUrl, getSubmitFlowStepUrl, getTeam, getToken, getUpdateFlowDefinitionUrl, getUserByID, getUserInfo, getVerifyChallengeProofUrl, introspect, issueChallenge, listFlowDefinitions, listSchemas, listSessions, listUsers, patchProject, queryProjects, revokeMySession, revokeSession, revokeToken, setUserPassword, submitFlowEvent, submitFlowStep, updateFlowDefinition, verifyChallengeProof };
+  export { completeClaim, createAuthAttempt, createBranding, createFlow, createFlowDefinition, createHandoff, createProject, createSchema, createSession, createTeam, createUser, deleteFlowDefinition, deleteTeam, deleteUserByID, exchangeHandoff, getAuthAttempt, getBrandingById, getClaimStatus, getCompleteClaimUrl, getCreateAuthAttemptUrl, getCreateBrandingUrl, getCreateFlowDefinitionUrl, getCreateFlowUrl, getCreateHandoffUrl, getCreateProjectUrl, getCreateSchemaUrl, getCreateSessionUrl, getCreateTeamUrl, getCreateUserUrl, getDeleteFlowDefinitionUrl, getDeleteTeamUrl, getDeleteUserByIDUrl, getExchangeHandoffUrl, getFlowDefinition, getFlowStep, getGetAuthAttemptUrl, getGetBrandingByIdUrl, getGetClaimStatusUrl, getGetFlowDefinitionUrl, getGetFlowStepUrl, getGetHealthUrl, getGetLiveUrl, getGetMySessionUrl, getGetMyUserUrl, getGetProjectUrl, getGetReadyUrl, getGetSchemaByIdUrl, getGetSessionUrl, getGetTeamUrl, getGetUserByIDUrl, getHealth, getInitClaimUrl, getIssueChallengeUrl, getListBrandingUrl, getListFlowDefinitionsUrl, getListSchemasUrl, getListUserPasskeysUrl, getListUserTeamsUrl, getListUsersUrl, getLive, getMySession, getMyUser, getPatchProjectUrl, getProject, getQueryProjectsUrl, getQuerySessionsUrl, getQueryTeamsUrl, getReady, getRevokeMySessionUrl, getRevokeSessionUrl, getSchemaById, getSession, getSetUserPasswordUrl, getSubmitFlowStepUrl, getTeam, getUpdateFlowDefinitionUrl, getUpdateTeamUrl, getUserByID, getVerifyChallengeProofUrl, initClaim, issueChallenge, listBranding, listFlowDefinitions, listSchemas, listUserPasskeys, listUserTeams, listUsers, patchProject, queryProjects, querySessions, queryTeams, revokeMySession, revokeSession, setUserPassword, submitFlowStep, updateFlowDefinition, updateTeam, verifyChallengeProof };
 }
-declare const getGetOpenIDConfigurationUrl: () => string;
-/**
- * Retrieve the OpenID Connect configuration
- * @summary Get OpenID Connect configuration
- */
-declare const getOpenIDConfiguration: (options?: RequestInit) => Promise<GetOpenIDConfiguration200>;
-declare const getAuthorizeGetUrl: (params: AuthorizeGetParams) => string;
-/**
- * @summary Authorize a user
- */
-declare const authorizeGet: (params: AuthorizeGetParams, options?: RequestInit) => Promise<AuthorizeGetDefault>;
-declare const getAuthorizeDeviceUrl: (params: AuthorizeDeviceParams) => string;
-/**
- * @summary Authorize a device
- */
-declare const authorizeDevice: (params: AuthorizeDeviceParams, options?: RequestInit) => Promise<AuthorizeDevice200>;
-declare const getEndSessionUrl: (params?: EndSessionParams) => string;
-/**
- * @summary End a session
- */
-declare const endSession: (params?: EndSessionParams, options?: RequestInit) => Promise<void>;
-declare const getIntrospectUrl: () => string;
-/**
- * @summary Introspect a token
- */
-declare const introspect: (introspectBody: IntrospectBody, options?: RequestInit) => Promise<Introspect200>;
-declare const getGetKeysUrl: () => string;
-/**
- * @summary Get public keys
- */
-declare const getKeys: (options?: RequestInit) => Promise<GetKeys200>;
-declare const getRevokeTokenUrl: () => string;
-/**
- * @summary Revoke an access token or refresh token
- */
-declare const revokeToken: (revokeTokenBody: RevokeTokenBody, options?: RequestInit) => Promise<void>;
-declare const getGetTokenUrl: () => string;
-/**
- * @summary Get access token
- */
-declare const getToken: (getTokenBody: GetTokenBody, options?: RequestInit) => Promise<GetToken200>;
-declare const getGetUserInfoUrl: () => string;
-/**
- * @summary Get user info
- */
-declare const getUserInfo: (options?: RequestInit) => Promise<GetUserInfo200>;
 declare const getGetHealthUrl: () => string;
 /**
  * Check whether the server is healthy
@@ -77,17 +31,40 @@ declare const getListUsersUrl: (params?: ListUsersParams) => string;
 /**
  * @summary List users
  */
-declare const listUsers: (params?: ListUsersParams, options?: RequestInit) => Promise<ListUsers200Item[]>;
+declare const listUsers: (params?: ListUsersParams, options?: RequestInit) => Promise<ListUsers200>;
 declare const getGetUserByIDUrl: (userId: string, params: GetUserByIDParams) => string;
 /**
  * @summary Get user by ID
  */
 declare const getUserByID: (userId: string, params: GetUserByIDParams, options?: RequestInit) => Promise<GetUserByID200>;
+declare const getDeleteUserByIDUrl: (userId: string, params: DeleteUserByIDParams) => string;
+/**
+ * @summary Delete user by ID
+ */
+declare const deleteUserByID: (userId: string, params: DeleteUserByIDParams, options?: RequestInit) => Promise<void>;
+declare const getListUserPasskeysUrl: (userId: string, params: ListUserPasskeysParams) => string;
+/**
+ * @summary List user passkeys
+ */
+declare const listUserPasskeys: (userId: string, params: ListUserPasskeysParams, options?: RequestInit) => Promise<ListUserPasskeys200>;
 declare const getSetUserPasswordUrl: (userId: string, params: SetUserPasswordParams) => string;
 /**
  * @summary Set user password
  */
 declare const setUserPassword: (userId: string, setUserPasswordBody: SetUserPasswordBody, params: SetUserPasswordParams, options?: RequestInit) => Promise<void>;
+declare const getListUserTeamsUrl: (userId: string, params: ListUserTeamsParams) => string;
+/**
+ * The user's team roster, ordered by team name. Each entry carries the
+team's name, so a client renders a page without resolving ids one by one.
+
+This is the N:N roster and it is not lifecycle ownership: the single team
+that owns the user's lifecycle is reported as `metadata.lifecycle_owner_team_id`
+on the user read endpoints. Memberships the user was removed from are not
+returned.
+
+ * @summary List the teams a user belongs to
+ */
+declare const listUserTeams: (userId: string, params: ListUserTeamsParams, options?: RequestInit) => Promise<ListUserTeams200>;
 declare const getGetMyUserUrl: () => string;
 /**
  * @summary Get my user information
@@ -100,7 +77,7 @@ the first capability step. Creates a new session implicitly unless
 `session_id` is provided (for step-up / reauth on an existing session).
 
 The response contains an `id` field — the flow handle. Use it as the path
-parameter for all subsequent `/flow/{id}/submit` and `/flow/{id}/event` calls.
+parameter for all subsequent `/flow/{id}/submit` calls.
 
 The response also sets an encrypted `HttpOnly` cookie (`_zflow`) containing
 the flow's orchestration state (current step, collected data, history).
@@ -151,14 +128,6 @@ frontend never sees a `complete` for intermediate flows.
  * @summary Submit step data and advance
  */
 declare const submitFlowStep: (id: string, submitFlowStepBody: SubmitFlowStepBody, options?: RequestInit) => Promise<SubmitFlowStep200>;
-declare const getSubmitFlowEventUrl: (id: string) => string;
-/**
- * Submits telemetry or fingerprint data from the frontend.
-Does not advance the state machine. Used for risk evaluation.
-
- * @summary Submit client-side event
- */
-declare const submitFlowEvent: (id: string, submitFlowEventBody: SubmitFlowEventBody, options?: RequestInit) => Promise<void>;
 declare const getCreateAuthAttemptUrl: () => string;
 /**
  * Starts a new authentication attempt. This is the entry point for the auth_attempts state machine.
@@ -253,6 +222,37 @@ declare const getPatchProjectUrl: (projectId: string) => string;
  * @summary Update project
  */
 declare const patchProject: (projectId: string, patchProjectBody: PatchProjectBody, options?: RequestInit) => Promise<PatchProject200>;
+declare const getInitClaimUrl: (projectId: string) => string;
+/**
+ * Starts a claim challenge for an unclaimed project. Authenticated by the
+project secret, this mints a single-use, short-lived challenge and returns
+the `claim_url` the developer opens in a browser to complete the claim,
+together with the `challenge_id` the CLI polls with. The exact expiry is
+carried by `expires_at` on the response.
+
+ * @summary Initialize a project claim
+ */
+declare const initClaim: (projectId: string, options?: RequestInit) => Promise<InitClaim201>;
+declare const getGetClaimStatusUrl: (projectId: string, params: GetClaimStatusParams) => string;
+/**
+ * Polled by the CLI while a browser completes the claim. Authorized by the
+project secret that initiated the challenge. Returns `pending`, or
+`completed` with the owning team, the claim timestamp, and the dashboard
+URL once the browser leg has finished.
+
+ * @summary Get claim status
+ */
+declare const getClaimStatus: (projectId: string, params: GetClaimStatusParams, options?: RequestInit) => Promise<GetClaimStatus200>;
+declare const getCompleteClaimUrl: (projectId: string) => string;
+/**
+ * Called by the browser after the developer authenticates on the claim page.
+Authenticated by the `__nextgen_session` cookie, it attaches the project to
+the developer's personal team using the `challenge_id` from the claim URL as
+its single-use, browser-safe authorization.
+
+ * @summary Complete a project claim
+ */
+declare const completeClaim: (projectId: string, completeClaimBody: CompleteClaimBody, options?: RequestInit) => Promise<CompleteClaim200>;
 declare const getCreateSessionUrl: () => string;
 /**
  * Creates an anonymous session shell with no user and no factors (`state: building`).
@@ -263,8 +263,16 @@ Use this explicitly when you want to:
   can be correlated with the eventual authenticated session from the start.
 - Track anonymous state (bot detection, device fingerprint) that survives until authentication.
 
-The returned `session_token` authorises GET and DELETE on this session.
-It is superseded when a handoff exchange completes — clients must replace it at that point.
+Creating a session is an app-plane operation on the project credential
+(`session.write`). The returned `session_token` is a session credential for the
+end-user client, not a management scope: it is delivered as the
+`__nextgen_session` cookie and authorises the self-service operations
+`GET /sessions/me` and `DELETE /sessions/me` (`nextgenSession` scheme). The
+by-id operations `GET /sessions/{session_id}` and `DELETE /sessions/{session_id}`
+are operator endpoints and require `session.read` / `session.delete` instead.
+
+The `session_token` is superseded when a handoff exchange completes — clients must
+replace it at that point.
 
 Anonymous sessions expire aggressively (10-minute TTL). The TTL resets to the configured
 full session TTL when the first authentication factor is written via a completing `auth_attempt`.
@@ -272,14 +280,15 @@ full session TTL when the first authentication factor is written via a completin
  * @summary Create an anonymous session shell
  */
 declare const createSession: (createSessionBody: CreateSessionBody, options?: RequestInit) => Promise<CreateSession201>;
-declare const getListSessionsUrl: (params: ListSessionsParams) => string;
+declare const getQuerySessionsUrl: (params: QuerySessionsParams) => string;
 /**
- * Returns a paginated list of sessions for a project.
-Requires a project service key (OAuth2 client credentials).
+ * Returns the sessions of a project, paginated with a cursor.
+Sessions of every lifecycle state are returned; each carries its `state`.
+Requires `session.read` permission.
 
- * @summary List sessions
+ * @summary Query sessions
  */
-declare const listSessions: (params: ListSessionsParams, options?: RequestInit) => Promise<ListSessions200>;
+declare const querySessions: (querySessionsBody: QuerySessionsBody, params: QuerySessionsParams, options?: RequestInit) => Promise<QuerySessions200>;
 declare const getExchangeHandoffUrl: (params: ExchangeHandoffParams) => string;
 /**
  * Consumes a one-time `handoff_token` minted by `POST /auth_attempts/{id}/handoff`
@@ -317,10 +326,15 @@ against the same `session_id`) to restore a dropped assurance level.
 declare const getSession: (sessionId: string, params: GetSessionParams, options?: RequestInit) => Promise<GetSession200>;
 declare const getRevokeSessionUrl: (sessionId: string, params: RevokeSessionParams) => string;
 /**
- * Revokes the session immediately (`state: revoked`). This is the logout operation.
+ * Permanently deletes the session, terminating it immediately.
+
+This is the operator revoke path and requires the `session.delete` scope on a
+project-bound credential. End-user logout with the `__nextgen_session` cookie is
+`DELETE /sessions/me` (`nextgenSession` scheme).
 
-The session_token issued at creation (or superseded by a handoff exchange) is required.
-After revocation, any tokens derived from this session are invalidated.
+Idempotent: deleting a session that does not exist (or was already deleted)
+still returns 204. After deletion, any tokens derived from the session are
+invalidated.
 
  * @summary Revoke session
  */
@@ -339,20 +353,24 @@ against the same `session_id`) to restore a dropped assurance level.
 declare const getMySession: (options?: RequestInit) => Promise<GetMySession200>;
 declare const getRevokeMySessionUrl: () => string;
 /**
- * Revokes the session immediately (`state: revoked`). This is the logout operation.
+ * Logs out by permanently deleting the session.
 
-The __nextgen_session cookie issued at creation (or superseded by a handoff exchange) is required.
-After revocation, any tokens derived from this session are invalidated including the cookie itself, which is cleared in the response.
+The `__nextgen_session` cookie issued at creation (or superseded by a handoff
+exchange) is required. Idempotent: if the session is already gone this still
+returns 204. Any tokens derived from the session are invalidated, and the
+cookie itself is cleared in the response.
 
  * @summary Revoke my session
  */
 declare const revokeMySession: (options?: RequestInit) => Promise<void>;
 declare const getCreateSchemaUrl: (params: CreateSchemaParams) => string;
 /**
- * Create a new schema. The schema definition must include a unique $id field,
-which will be used to identify the schema in future requests. The $id must
-be a valid URI and should ideally point to the location where the schema
-can be accessed.
+ * Create a new schema. The optional `$id` field is the JSON Schema document
+URI used to identify the schema in future requests (GitOps-stable identity,
+not a free-form resource primary key). When `$id` is omitted, the server
+generates a `sch_*` URL. When provided, `$id` must be unique within the
+project and should ideally be a valid URI pointing at where the schema can
+be accessed.
 
 The schema can either be a concrete schema, e.g. a user schema, or a
 schema-url which will be resolved by the server.
@@ -416,35 +434,79 @@ If the flow definition is the last active flow definition for a given purpose, t
  * @summary Delete a flow definition by id
  */
 declare const deleteFlowDefinition: (id: string, params: DeleteFlowDefinitionParams, options?: RequestInit) => Promise<void>;
-declare const getActivateFlowDefinitionUrl: (id: string, params: ActivateFlowDefinitionParams) => string;
+declare const getCreateTeamUrl: (params: CreateTeamParams) => string;
 /**
- * Activate a flow definition by transitioning it from a `draft` state to an `active` state.
-Alternatively, the status of a flow definition can also be set via the `POST /flow_definitions` and `PUT /flow_definitions/{id}` endpoints by setting the `status` attribute in the flow definition payload.
-
- * @summary Activate a flow definition by ID.
+ * @summary Create team
  */
-declare const activateFlowDefinition: (id: string, params: ActivateFlowDefinitionParams, options?: RequestInit) => Promise<void>;
-declare const getDeactivateFlowDefinitionUrl: (id: string, params: DeactivateFlowDefinitionParams) => string;
+declare const createTeam: (createTeamBody: CreateTeamBody, params: CreateTeamParams, options?: RequestInit) => Promise<CreateTeam201>;
+declare const getQueryTeamsUrl: (params: QueryTeamsParams) => string;
 /**
- * Deactivates a flow definition in the `active` state by transitioning it to the `draft` state.
-Flow definitions in `draft` state cannot be used to start new flows. Existing flows that use the deactivated flow definition must gracefully handle this.
-Alternatively, the status of a flow definition can also be set via the `POST /flow_definitions` and `PUT /flow_definitions/{id}` endpoints by setting the `status` attribute in the flow definition payload.
+ * Returns the teams of a project, paginated with a cursor.
+Teams of every lifecycle status are returned; each carries its `status`.
 
- * @summary Deactivate a flow definition by ID.
- */
-declare const deactivateFlowDefinition: (id: string, params: DeactivateFlowDefinitionParams, options?: RequestInit) => Promise<void>;
-declare const getCreateTeamUrl: (params: CreateTeamParams) => string;
-/**
- * @summary Create team
+ * @summary Query teams
  */
-declare const createTeam: (params: CreateTeamParams, createTeamBody?: CreateTeamBody, options?: RequestInit) => Promise<CreateTeam201>;
+declare const queryTeams: (queryTeamsBody: QueryTeamsBody, params: QueryTeamsParams, options?: RequestInit) => Promise<QueryTeams200>;
 declare const getGetTeamUrl: (teamId: string, params: GetTeamParams) => string;
 /**
- * Returns the current state of a team.
+ * Returns a Team by its id.
 
  * @summary Get team
  */
 declare const getTeam: (teamId: string, params: GetTeamParams, options?: RequestInit) => Promise<GetTeam200>;
+declare const getDeleteTeamUrl: (teamId: string, params: DeleteTeamParams) => string;
+/**
+ * Deactivates the team.
+
+The team is tombstoned rather than erased: it stays readable through
+getTeam with status `deactivated`. Its memberships are removed and the
+users whose lifecycle it owns are deactivated with it.
+
+The request is idempotent. Deleting a team that is already deactivated
+or doesn't exist succeeds without changing anything.
+
+ * @summary Delete team
+ */
+declare const deleteTeam: (teamId: string, params: DeleteTeamParams, options?: RequestInit) => Promise<void>;
+declare const getUpdateTeamUrl: (teamId: string, params: UpdateTeamParams) => string;
+/**
+ * Update team. Only active teams can be updated.
+
+ * @summary Update team
+ */
+declare const updateTeam: (teamId: string, updateTeamBody: UpdateTeamBody, params: UpdateTeamParams, options?: RequestInit) => Promise<UpdateTeam200>;
+declare const getCreateBrandingUrl: (params: CreateBrandingParams) => string;
+/**
+ * Publishes a new immutable branding revision for the project. Branding
+revisions cannot be updated or deleted; every edit publishes a new
+revision, and flow responses resolve the latest revision per project
+(see ADR 040).
+
+The `liquid_template` is validated lexically on save (size, encoding,
+banned patterns such as `<script>` tags, inline event handlers, and the
+`| raw` filter). Authoritative LiquidJS validation runs at authoring
+time via `zitadel plan` / `zitadel apply`.
+
+ * @summary Publish a new branding revision
+ */
+declare const createBranding: (createBrandingBody: CreateBrandingBody, params: CreateBrandingParams, options?: RequestInit) => Promise<CreateBranding201>;
+declare const getListBrandingUrl: (params: ListBrandingParams) => string;
+/**
+ * Lists branding revisions for the project, newest first, capped at the
+100 most recent. The first entry is the revision flow responses
+currently resolve. Deliberately unpaginated in v1 — list endpoints
+gain a real query mechanism together (ADR 031); advertising pagination
+parameters the server ignores would be worse than none.
+
+ * @summary List branding revisions
+ */
+declare const listBranding: (params: ListBrandingParams, options?: RequestInit) => Promise<ListBranding200Item[]>;
+declare const getGetBrandingByIdUrl: (id: string, params: GetBrandingByIdParams) => string;
+/**
+ * Retrieves a single branding revision, including its stored configuration.
+ * @summary Get a branding revision by ID
+ */
+declare const getBrandingById: (id: string, params: GetBrandingByIdParams, options?: RequestInit) => Promise<GetBrandingById200>;
 //#endregion
-export { getHealth as $, getDeactivateFlowDefinitionUrl as A, issueChallenge as At, getGetKeysUrl as B, setUserPassword as Bt, getCreateFlowUrl as C, getTeam as Ct, getCreateSessionUrl as D, getUserInfo as Dt, getCreateSchemaUrl as E, getUserByID as Et, getFlowStep as F, patchProject as Ft, getGetProjectUrl as G, zitadelNextGen_d_exports as Gt, getGetMySessionUrl as H, submitFlowStep as Ht, getGetAuthAttemptUrl as I, queryProjects as It, getGetSessionUrl as J, getGetReadyUrl as K, getGetFlowDefinitionUrl as L, revokeMySession as Lt, getEndSessionUrl as M, listSchemas as Mt, getExchangeHandoffUrl as N, listSessions as Nt, getCreateTeamUrl as O, getVerifyChallengeProofUrl as Ot, getFlowDefinition as P, listUsers as Pt, getGetUserInfoUrl as Q, getGetFlowStepUrl as R, revokeSession as Rt, getCreateFlowDefinitionUrl as S, getSubmitFlowStepUrl as St, getCreateProjectUrl as T, getUpdateFlowDefinitionUrl as Tt, getGetMyUserUrl as U, updateFlowDefinition as Ut, getGetLiveUrl as V, submitFlowEvent as Vt, getGetOpenIDConfigurationUrl as W, verifyChallengeProof as Wt, getGetTokenUrl as X, getGetTeamUrl as Y, getGetUserByIDUrl as Z, getActivateFlowDefinitionUrl as _, getRevokeTokenUrl as _t, createFlow as a, getListSessionsUrl as at, getAuthorizeGetUrl as b, getSetUserPasswordUrl as bt, createProject as c, getMySession as ct, createTeam as d, getPatchProjectUrl as dt, getIntrospectUrl as et, createUser as f, getProject as ft, exchangeHandoff as g, getRevokeSessionUrl as gt, endSession as h, getRevokeMySessionUrl as ht, createAuthAttempt as i, getListSchemasUrl as it, getDeleteFlowDefinitionUrl as j, listFlowDefinitions as jt, getCreateUserUrl as k, introspect as kt, createSchema as l, getMyUser as lt, deleteFlowDefinition as m, getReady as mt, authorizeDevice as n, getKeys as nt, createFlowDefinition as o, getListUsersUrl as ot, deactivateFlowDefinition as p, getQueryProjectsUrl as pt, getGetSchemaByIdUrl as q, authorizeGet as r, getListFlowDefinitionsUrl as rt, createHandoff as s, getLive as st, activateFlowDefinition as t, getIssueChallengeUrl as tt, createSession as u, getOpenIDConfiguration as ut, getAuthAttempt as v, getSchemaById as vt, getCreateHandoffUrl as w, getToken as wt, getCreateAuthAttemptUrl as x, getSubmitFlowEventUrl as xt, getAuthorizeDeviceUrl as y, getSession as yt, getGetHealthUrl as z, revokeToken as zt };
-//# sourceMappingURL=zitadelNextGen-CXFZoHGo.d.mts.map
+export { getIssueChallengeUrl as $, getDeleteFlowDefinitionUrl as A, listSchemas as At, getGetFlowStepUrl as B, setUserPassword as Bt, getCreateFlowUrl as C, getUpdateTeamUrl as Ct, getCreateSessionUrl as D, issueChallenge as Dt, getCreateSchemaUrl as E, initClaim as Et, getFlowStep as F, queryProjects as Ft, getGetProjectUrl as G, zitadelNextGen_d_exports as Gt, getGetLiveUrl as H, updateFlowDefinition as Ht, getGetAuthAttemptUrl as I, querySessions as It, getGetSessionUrl as J, getGetReadyUrl as K, getGetBrandingByIdUrl as L, queryTeams as Lt, getDeleteUserByIDUrl as M, listUserTeams as Mt, getExchangeHandoffUrl as N, listUsers as Nt, getCreateTeamUrl as O, listBranding as Ot, getFlowDefinition as P, patchProject as Pt, getInitClaimUrl as Q, getGetClaimStatusUrl as R, revokeMySession as Rt, getCreateFlowDefinitionUrl as S, getUpdateFlowDefinitionUrl as St, getCreateProjectUrl as T, getVerifyChallengeProofUrl as Tt, getGetMySessionUrl as U, updateTeam as Ut, getGetHealthUrl as V, submitFlowStep as Vt, getGetMyUserUrl as W, verifyChallengeProof as Wt, getGetUserByIDUrl as X, getGetTeamUrl as Y, getHealth as Z, getBrandingById as _, getSchemaById as _t, createFlowDefinition as a, getListUsersUrl as at, getCreateAuthAttemptUrl as b, getSubmitFlowStepUrl as bt, createSchema as c, getMyUser as ct, createUser as d, getQueryProjectsUrl as dt, getListBrandingUrl as et, deleteFlowDefinition as f, getQuerySessionsUrl as ft, getAuthAttempt as g, getRevokeSessionUrl as gt, exchangeHandoff as h, getRevokeMySessionUrl as ht, createFlow as i, getListUserTeamsUrl as it, getDeleteTeamUrl as j, listUserPasskeys as jt, getCreateUserUrl as k, listFlowDefinitions as kt, createSession as l, getPatchProjectUrl as lt, deleteUserByID as m, getReady as mt, createAuthAttempt as n, getListSchemasUrl as nt, createHandoff as o, getLive as ot, deleteTeam as p, getQueryTeamsUrl as pt, getGetSchemaByIdUrl as q, createBranding as r, getListUserPasskeysUrl as rt, createProject as s, getMySession as st, completeClaim as t, getListFlowDefinitionsUrl as tt, createTeam as u, getProject as ut, getClaimStatus as v, getSession as vt, getCreateHandoffUrl as w, getUserByID as wt, getCreateBrandingUrl as x, getTeam as xt, getCompleteClaimUrl as y, getSetUserPasswordUrl as yt, getGetFlowDefinitionUrl as z, revokeSession as zt };
+//# sourceMappingURL=zitadelNextGen-BCljAZpG.d.mts.map

package/dist/zitadelNextGen-BCljAZpG.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelNextGen-BCljAZpG.d.mts","names":[],"sources":["../src/generated/endpoints/zitadelNextGen.ts"],"mappings":";;;;;;cAuGa,eAAA;;;;;cAQA,SAAA,GAAmB,OAAA,GAAU,WAAA,KAAc,OAAA,CAAQ,gBAAA;AAAA,cAOnD,aAAA;;;;;cAQA,OAAA,GAAiB,OAAA,GAAU,WAAA,KAAc,OAAA,CAAQ,cAAA;AAAA,cAOjD,cAAA;;;;;cAQA,QAAA,GAAkB,OAAA,GAAU,WAAA,KAAc,OAAA,CAAQ,eAAA;AAAA,cAOlD,gBAAA,GAAoB,MAAA,EAAQ,gBAAA;;;;cAmB5B,UAAA,GACX,cAAA,EAAgB,cAAA,EAChB,MAAA,EAAQ,gBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,aAAA;AAAA,cASE,eAAA,GAAmB,MAAA,GAAS,eAAA;;;;cAmB5B,SAAA,GACX,MAAA,GAAS,eAAA,EACT,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,YAAA;AAAA,cAOE,iBAAA,GAAqB,MAAA,UAAgB,MAAA,EAAQ,iBAAA;;;;cAmB7C,WAAA,GACX,MAAA,UACA,MAAA,EAAQ,iBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,cAAA;AAAA,cAOE,oBAAA,GAAwB,MAAA,UAAgB,MAAA,EAAQ,oBAAA;;;;cAmBhD,cAAA,GACX,MAAA,UACA,MAAA,EAAQ,oBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA;AAAA,cAOU,sBAAA,GAA0B,MAAA,UAAgB,MAAA,EAAQ,sBAAA;;;;cAmBlD,gBAAA,GACX,MAAA,UACA,MAAA,EAAQ,sBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,mBAAA;AAAA,cAOE,qBAAA,GAAyB,MAAA,UAAgB,MAAA,EAAQ,qBAAA;;;;cAmBjD,eAAA,GACX,MAAA,UACA,mBAAA,EAAqB,mBAAA,EACrB,MAAA,EAAQ,qBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA;AAAA,cASU,mBAAA,GAAuB,MAAA,UAAgB,MAAA,EAAQ,mBAAA;;;;;;;;;;;;cA2B/C,aAAA,GACX,MAAA,UACA,MAAA,EAAQ,mBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,gBAAA;AAAA,cAOE,eAAA;;;;cAOA,SAAA,GAAmB,OAAA,GAAU,WAAA,KAAc,OAAA,CAAQ,YAAA;AAAA,cAOnD,gBAAA;;;;;;;;;;;;;;;;cAmBA,UAAA,GACX,cAAA,EAAgB,cAAA,EAChB,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,aAAA;AAAA,cASE,iBAAA,GAAqB,EAAA;;;;;;;cAUrB,WAAA,GAAqB,EAAA,UAAY,OAAA,GAAU,WAAA,KAAc,OAAA,CAAQ,cAAA;AAAA,cAOjE,oBAAA,GAAwB,EAAA;;;;;;;;;;;;AAzUrC;;;;;AAQA;;;;;;;;;;;;;;AAOA;cA6Va,cAAA,GACX,EAAA,UACA,kBAAA,EAAoB,kBAAA,EACpB,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,iBAAA;AAAA,cASE,uBAAA;;;AAlWb;;;;;;;;;cAiXa,iBAAA,GACX,qBAAA,EAAuB,qBAAA,EACvB,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,oBAAA;AAAA,cASE,oBAAA,GAAwB,SAAA;;;;AAtXrC;;;;;AAQA;;;cA6Xa,cAAA,GACX,SAAA,UACA,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,iBAAA;AAAA,cAOE,oBAAA,GAAwB,SAAA;;;;;;;;;;AAhYrC;cA8Ya,cAAA,GACX,SAAA,UACA,kBAAA,EAAoB,kBAAA,EACpB,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,iBAAA;AAAA,cASE,0BAAA,GAA8B,SAAA,UAAmB,WAAA;;;AAxY9D;;;;;;;;;;;;cA0Za,oBAAA,GACX,SAAA,UACA,WAAA,UACA,wBAAA,EAA0B,wBAAA,EAC1B,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,uBAAA;AAAA,cASE,mBAAA,GAAuB,SAAA;;;;;;;AA3ZpC;;;;;AAmBA;;;cA0Za,aAAA,GACX,SAAA,UACA,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,gBAAA;AAAA,cAOE,mBAAA;;;;cAOA,aAAA,GACX,iBAAA,EAAmB,iBAAA,EACnB,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,gBAAA;AAAA,cASE,mBAAA;;;;cAOA,aAAA,GACX,iBAAA,EAAmB,iBAAA,EACnB,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,gBAAA;AAAA,cASE,gBAAA,GAAoB,SAAA;;;AAhcjC;;;cAyca,UAAA,GACX,SAAA,UACA,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,aAAA;AAAA,cAOE,kBAAA,GAAsB,SAAA;;;;;AAhcnC;cAyca,YAAA,GACX,SAAA,UACA,gBAAA,EAAkB,gBAAA,EAClB,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,eAAA;AAAA,cASE,eAAA,GAAmB,SAAA;;;;;;;;;;cAanB,SAAA,GACX,SAAA,UACA,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,YAAA;AAAA,cAOE,oBAAA,GAAwB,SAAA,UAAmB,MAAA,EAAQ,oBAAA;;;;;AAlehE;;;;cA0fa,cAAA,GACX,SAAA,UACA,MAAA,EAAQ,oBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,iBAAA;AAAA,cAOE,mBAAA,GAAuB,SAAA;;;;AAlfpC;;;;;cA8fa,aAAA,GACX,SAAA,UACA,iBAAA,EAAmB,iBAAA,EACnB,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,gBAAA;AAAA,cASE,mBAAA;;;;;;;;;;AAhgBb;;;;;;;;;AAmBA;;;;;;;cA0gBa,aAAA,GACX,iBAAA,EAAmB,iBAAA,EACnB,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,gBAAA;AAAA,cASE,mBAAA,GAAuB,MAAA,EAAQ,mBAAA;;;;;;;;cAuB/B,aAAA,GACX,iBAAA,EAAmB,iBAAA,EACnB,MAAA,EAAQ,mBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,gBAAA;AAAA,cASE,qBAAA,GAAyB,MAAA,EAAQ,qBAAA;AA/iB9C;;;;;;;;;AAmBA;;;;;;;;;;;;AAnBA,cAolBa,eAAA,GACX,mBAAA,EAAqB,mBAAA,EACrB,MAAA,EAAQ,qBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,kBAAA;AAAA,cASE,gBAAA,GAAoB,SAAA,UAAmB,MAAA,EAAQ,gBAAA;;;;;;AAhkB5D;;;;;cA0lBa,UAAA,GACX,SAAA,UACA,MAAA,EAAQ,gBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,aAAA;AAAA,cAOE,mBAAA,GAAuB,SAAA,UAAmB,MAAA,EAAQ,mBAAA;;;AA1kB/D;;;;;;;;;;;cAumBa,aAAA,GACX,SAAA,UACA,MAAA,EAAQ,mBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA;AAAA,cAOU,kBAAA;;;;;;AAvmBb;;;;;cAqnBa,YAAA,GAAsB,OAAA,GAAU,WAAA,KAAc,OAAA,CAAQ,eAAA;AAAA,cAOtD,qBAAA;;;;;;;;;;;cAcA,eAAA,GAAyB,OAAA,GAAU,WAAA,KAAc,OAAA;AAAA,cAOjD,kBAAA,GAAsB,MAAA,EAAQ,kBAAA;AAnoB3C;;;;;AAmBA;;;;;;;;AAnBA,cAgqBa,YAAA,GACX,gBAAA,EAAkB,gBAAA,EAClB,MAAA,EAAQ,kBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,eAAA;AAAA,cASE,iBAAA,GAAqB,MAAA,EAAQ,iBAAA;;;;;;;cAsB7B,WAAA,GACX,MAAA,EAAQ,iBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,kBAAA;AAAA,cAOE,mBAAA,GAAuB,EAAA,UAAY,MAAA,EAAQ,mBAAA;;;;;cAoB3C,aAAA,GACX,EAAA,UACA,MAAA,EAAQ,mBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,gBAAA;AAAA,cAOE,0BAAA;;;;;;;;;;cAaA,oBAAA,GACX,wBAAA,EAA0B,wBAAA,EAC1B,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,uBAAA;AAAA,cASE,yBAAA,GAA6B,MAAA,EAAQ,yBAAA;;;AArtBlD;;;;cA2uBa,mBAAA,GACX,MAAA,EAAQ,yBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,sBAAA;AAAA,cAOE,uBAAA,GAA2B,EAAA,UAAY,MAAA,EAAQ,uBAAA;;;;;cAoB/C,iBAAA,GACX,EAAA,UACA,MAAA,EAAQ,uBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,oBAAA;AAAA,cAOE,0BAAA,GAA8B,EAAA,UAAY,MAAA,EAAQ,0BAAA;;;;;;;cAsBlD,oBAAA,GACX,EAAA,UACA,wBAAA,EAA0B,wBAAA,EAC1B,MAAA,EAAQ,0BAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,uBAAA;AAAA,cASE,0BAAA,GAA8B,EAAA,UAAY,MAAA,EAAQ,0BAAA;;;;AAxwB/D;;;;cA+xBa,oBAAA,GACX,EAAA,UACA,MAAA,EAAQ,0BAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA;AAAA,cAOU,gBAAA,GAAoB,MAAA,EAAQ,gBAAA;;;;cAmB5B,UAAA,GACX,cAAA,EAAgB,cAAA,EAChB,MAAA,EAAQ,gBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,aAAA;AAAA,cASE,gBAAA,GAAoB,MAAA,EAAQ,gBAAA;;;;;;;cAsB5B,UAAA,GACX,cAAA,EAAgB,cAAA,EAChB,MAAA,EAAQ,gBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,aAAA;AAAA,cASE,aAAA,GAAiB,MAAA,UAAgB,MAAA,EAAQ,aAAA;;;;AAl1BtD;;cAu2Ba,OAAA,GACX,MAAA,UACA,MAAA,EAAQ,aAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,UAAA;AAAA,cAOE,gBAAA,GAAoB,MAAA,UAAgB,MAAA,EAAQ,gBAAA;;AAn2BzD;;;;;;;;;;;cA+3Ba,UAAA,GACX,MAAA,UACA,MAAA,EAAQ,gBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA;AAAA,cAOU,gBAAA,GAAoB,MAAA,UAAgB,MAAA,EAAQ,gBAAA;;;AAh4BzD;;;cAq5Ba,UAAA,GACX,MAAA,UACA,cAAA,EAAgB,cAAA,EAChB,MAAA,EAAQ,gBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,aAAA;AAAA,cASE,oBAAA,GAAwB,MAAA,EAAQ,oBAAA;AAr5B7C;;;;;;;;;;;;;AAAA,cAk7Ba,cAAA,GACX,kBAAA,EAAoB,kBAAA,EACpB,MAAA,EAAQ,oBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,iBAAA;AAAA,cASE,kBAAA,GAAsB,MAAA,EAAQ,kBAAA;;;;AAl7B3C;;;;;AAkBA;cAy7Ba,YAAA,GACX,MAAA,EAAQ,kBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,mBAAA;AAAA,cAOE,qBAAA,GAAyB,EAAA,UAAY,MAAA,EAAQ,qBAAA;;;;;cAoB7C,eAAA,GACX,EAAA,UACA,MAAA,EAAQ,qBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,kBAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zitadel/api",
-  "version": "0.1.0-alpha.16",
+  "version": "0.1.0-alpha.18",
   "description": "Generated TypeScript API client for the pre-release Zitadel preview.",
   "homepage": "https://github.com/zitadel/nextgen/tree/main/packages/api#readme",
   "bugs": {