@zitadel/api 0.1.0-alpha.17 → 0.1.0-alpha.19

package/dist/zitadelNextGen-BkDpEAS9.d.mts

@@ -0,0 +1,539 @@
+import { $i as IssueChallenge201, Bl as CreateSchema201, Ci as ListFlowDefinitionsParams, Da as GetTeam200, Ds as GetEvent200, E as UpdateTeam200, Fl as CreateSchemaBody, Gl as CreateProject201, Gr as ListUserTeams200, Hi as ListEvents200, Hl as CreateProjectBody, Ia as GetSession200, Jr as ListUsersParams, Js as GetAuthAttempt200, Lc as CreateUserParams, Ln as QuerySessionsParams, Ml as CreateSchemaParams, Mr as PatchProject200, Nd as CompleteClaim200, Nr as ListUserTeamsParams, Nu as CreateFlow201, Oi as ListFlowDefinitions200, Os as GetClaimStatusParams, Ou as CreateFlowBody, Pn as QueryTeams200, Pt as SubmitFlowStep200, Qn as QuerySessions200, Qu as CreateBrandingParams, Ro as GetFlowStep200, Sd as CompleteClaimBody, Si as ListSchemas200Item, Sr as QueryProjects200, To as GetLiveDefault, Tr as PatchProjectBody, Ua as GetSchemaByIdParams, Wi as ListBrandingParams, Ws as GetBrandingById200, Xa as GetSchemaById200, Yi as IssueChallengeBody, Yl as CreateFlowDefinitionBody, Za as GetReadyDefault, Zc as CreateUser201, _a as GetUserByID200, _i as ListUserPasskeys200, _l as CreateTeam201, _n as QueryTeamsBody, ad as CreateBranding201, ai as ListUserPasskeysParams, bl as CreateSessionBody, ct as SubmitFlowStepBody, da as GetUserByIDParams, do as GetMyUser200, ei as ListUsers200, en as SetUserPasswordBody, h as UpdateTeamBody, ic as ExchangeHandoffParams, il as CreateTeamBody, is as GetFlowDefinition200, ji as ListEventsParams, k as UpdateFlowDefinitionBody, ko as GetHealthDefault, ld as CreateAuthAttemptBody, mn as QueryTeamsParams, n as VerifyChallengeProofBody, oc as ExchangeHandoffBody, oo as GetProject200, pc as ExchangeHandoff200, pu as CreateFlowDefinition201, q as UpdateFlowDefinition200, qi as ListBranding200Item, ql as CreateHandoff200, r as VerifyChallengeProof200, sr as QueryProjectsBody, td as CreateBrandingBody, tl as CreateTeamParams, ua as InitClaim201, ud as CreateAuthAttempt201, vo as GetMySession200, vs as GetEventParams, wl as CreateSession201, yi as ListSchemasParams, zc as CreateUserBody, zn as QuerySessionsBody, zs as GetClaimStatus200 } from "./index-Dt_0fSH9.mjs";
+
+//#region src/generated/endpoints/zitadelNextGen.d.ts
+declare namespace zitadelNextGen_d_exports {
+  export { completeClaim, createAuthAttempt, createBranding, createFlow, createFlowDefinition, createHandoff, createProject, createSchema, createSession, createTeam, createUser, deleteFlowDefinition, deleteTeam, deleteUserByID, exchangeHandoff, getAuthAttempt, getBrandingById, getClaimStatus, getCompleteClaimUrl, getCreateAuthAttemptUrl, getCreateBrandingUrl, getCreateFlowDefinitionUrl, getCreateFlowUrl, getCreateHandoffUrl, getCreateProjectUrl, getCreateSchemaUrl, getCreateSessionUrl, getCreateTeamUrl, getCreateUserUrl, getDeleteFlowDefinitionUrl, getDeleteTeamUrl, getDeleteUserByIDUrl, getEvent, getExchangeHandoffUrl, getFlowDefinition, getFlowStep, getGetAuthAttemptUrl, getGetBrandingByIdUrl, getGetClaimStatusUrl, getGetEventUrl, getGetFlowDefinitionUrl, getGetFlowStepUrl, getGetHealthUrl, getGetLiveUrl, getGetMySessionUrl, getGetMyUserUrl, getGetProjectUrl, getGetReadyUrl, getGetSchemaByIdUrl, getGetSessionUrl, getGetTeamUrl, getGetUserByIDUrl, getHealth, getInitClaimUrl, getIssueChallengeUrl, getListBrandingUrl, getListEventsUrl, getListFlowDefinitionsUrl, getListSchemasUrl, getListUserPasskeysUrl, getListUserTeamsUrl, getListUsersUrl, getLive, getMySession, getMyUser, getPatchProjectUrl, getProject, getQueryProjectsUrl, getQuerySessionsUrl, getQueryTeamsUrl, getReady, getRevokeMySessionUrl, getRevokeSessionUrl, getSchemaById, getSession, getSetUserPasswordUrl, getSubmitFlowStepUrl, getTeam, getUpdateFlowDefinitionUrl, getUpdateTeamUrl, getUserByID, getVerifyChallengeProofUrl, initClaim, issueChallenge, listBranding, listEvents, listFlowDefinitions, listSchemas, listUserPasskeys, listUserTeams, listUsers, patchProject, queryProjects, querySessions, queryTeams, revokeMySession, revokeSession, setUserPassword, submitFlowStep, updateFlowDefinition, updateTeam, verifyChallengeProof };
+}
+declare const getGetHealthUrl: () => string;
+/**
+ * Check whether the server is healthy
+ * @summary Check server health
+ */
+declare const getHealth: (options?: RequestInit) => Promise<GetHealthDefault>;
+declare const getGetLiveUrl: () => string;
+/**
+ * Check whether the server is started
+ * @summary Check server liveness
+ */
+declare const getLive: (options?: RequestInit) => Promise<GetLiveDefault>;
+declare const getGetReadyUrl: () => string;
+/**
+ * Check whether the server is ready to accept requests
+ * @summary Check server readiness
+ */
+declare const getReady: (options?: RequestInit) => Promise<GetReadyDefault>;
+declare const getCreateUserUrl: (params: CreateUserParams) => string;
+/**
+ * @summary Create user
+ */
+declare const createUser: (createUserBody: CreateUserBody, params: CreateUserParams, options?: RequestInit) => Promise<CreateUser201>;
+declare const getListUsersUrl: (params?: ListUsersParams) => string;
+/**
+ * @summary List users
+ */
+declare const listUsers: (params?: ListUsersParams, options?: RequestInit) => Promise<ListUsers200>;
+declare const getGetUserByIDUrl: (userId: string, params?: GetUserByIDParams) => string;
+/**
+ * @summary Get user by ID
+ */
+declare const getUserByID: (userId: string, params?: GetUserByIDParams, options?: RequestInit) => Promise<GetUserByID200>;
+declare const getDeleteUserByIDUrl: (userId: string) => string;
+/**
+ * @summary Delete user by ID
+ */
+declare const deleteUserByID: (userId: string, options?: RequestInit) => Promise<void>;
+declare const getListUserPasskeysUrl: (userId: string, params?: ListUserPasskeysParams) => string;
+/**
+ * @summary List user passkeys
+ */
+declare const listUserPasskeys: (userId: string, params?: ListUserPasskeysParams, options?: RequestInit) => Promise<ListUserPasskeys200>;
+declare const getSetUserPasswordUrl: (userId: string) => string;
+/**
+ * @summary Set user password
+ */
+declare const setUserPassword: (userId: string, setUserPasswordBody: SetUserPasswordBody, options?: RequestInit) => Promise<void>;
+declare const getListUserTeamsUrl: (userId: string, params?: ListUserTeamsParams) => string;
+/**
+ * The user's team roster, ordered by team name. Each entry carries the
+team's name, so a client renders a page without resolving ids one by one.
+
+This is the N:N roster and it is not lifecycle ownership: the single team
+that owns the user's lifecycle is reported as `metadata.lifecycle_owner_team_id`
+on the user read endpoints. Memberships the user was removed from are not
+returned.
+
+ * @summary List the teams a user belongs to
+ */
+declare const listUserTeams: (userId: string, params?: ListUserTeamsParams, options?: RequestInit) => Promise<ListUserTeams200>;
+declare const getGetMyUserUrl: () => string;
+/**
+ * @summary Get my user information
+ */
+declare const getMyUser: (options?: RequestInit) => Promise<GetMyUser200>;
+declare const getCreateFlowUrl: () => string;
+/**
+ * Resolves a flow definition based on purpose + audience context and returns
+the first capability step. Creates a new session implicitly unless
+`session_id` is provided (for step-up / reauth on an existing session).
+
+The response contains an `id` field — the flow handle. Use it as the path
+parameter for all subsequent `/flow/{id}/submit` calls.
+
+The response also sets an encrypted `HttpOnly` cookie (`_zflow`) containing
+the flow's orchestration state (current step, collected data, history).
+The server is stateless between requests — all flow state lives in this
+cookie. The browser sends it automatically on subsequent requests.
+
+ * @summary Start a new flow
+ */
+declare const createFlow: (createFlowBody: CreateFlowBody, options?: RequestInit) => Promise<CreateFlow201>;
+declare const getGetFlowStepUrl: (id: string) => string;
+/**
+ * Returns the current capability step without advancing the state machine.
+Useful for page reloads or re-rendering after a network error.
+
+ * @summary Get current step (re-render)
+ */
+declare const getFlowStep: (id: string, options?: RequestInit) => Promise<GetFlowStep200>;
+declare const getSubmitFlowStepUrl: (id: string) => string;
+/**
+ * Submits user input for the current step. The server validates,
+processes (e.g., verifies a credential), advances the state machine
+through any invisible steps, and returns the next visible step.
+
+The response sets an updated encrypted `HttpOnly` cookie (`_zflow`)
+with the new flow state. The server is stateless — all orchestration
+state is carried in this cookie between requests.
+
+**Important:** The `id` in the response may differ from the `id` used in
+the request. This happens when a flow pivots (pushes a new flow onto the
+stack) or when a stacked flow completes (auto-pops to the parent flow).
+Always use the `id` from the latest response for the next request.
+
+## Flow completion
+
+When `step.type` is `complete`, the flow is terminal. The `step.behavior`
+field tells the frontend what to do:
+
+| `behavior`   | Action                                                     |
+|------------- |------------------------------------------------------------|
+| `redirect`   | Navigate to `redirect_uri` (OIDC/SAML auth request done). |
+| `show`       | Render the step as a success screen (e.g., registration).  |
+
+A `complete` step is only returned when the **entire flow stack** is done.
+If a stacked flow (e.g., recovery pivoted from login) finishes, the server
+auto-pops to the parent flow and returns the parent's next step — the
+frontend never sees a `complete` for intermediate flows.
+
+ * @summary Submit step data and advance
+ */
+declare const submitFlowStep: (id: string, submitFlowStepBody: SubmitFlowStepBody, options?: RequestInit) => Promise<SubmitFlowStep200>;
+declare const getCreateAuthAttemptUrl: () => string;
+/**
+ * Starts a new authentication attempt. This is the entry point for the auth_attempts state machine.
+
+An attempt is an ephemeral (15-minute TTL) state machine that drives a single authentication round.
+It accepts factor challenges, verifies proofs, and completes into a session or handoff token.
+
+Accepts a project_id and challenge_nonce (from POST /bootstrap/challenge). For step-up re-auth,
+also include session_id to add factors to an existing session.
+
+ * @summary Create a new authentication attempt
+ */
+declare const createAuthAttempt: (createAuthAttemptBody: CreateAuthAttemptBody, options?: RequestInit) => Promise<CreateAuthAttempt201>;
+declare const getGetAuthAttemptUrl: (attemptId: string) => string;
+/**
+ * Polls the current state of an authentication attempt.
+
+Returns the attempt's state, available factors for the next challenge,
+challenges issued so far, and any errors preventing progress.
+
+Use this for polling during long-running factor verifications (e.g., waiting for
+a federated IdP callback or a device flow).
+
+ * @summary Get authentication attempt state
+ */
+declare const getAuthAttempt: (attemptId: string, options?: RequestInit) => Promise<GetAuthAttempt200>;
+declare const getIssueChallengeUrl: (attemptId: string) => string;
+/**
+ * Issues a single-factor verification challenge within an auth attempt.
+
+This advances the authentication state machine by requesting a specific factor method
+(password, passkey, TOTP, OTP via SMS, etc.). The server responds with challenge details
+including method, metadata, and any UI hints. The client then verifies the proof
+by calling POST /auth_attempts/{attempt_id}/challenges/{challenge_id}/verify.
+
+ * @summary Issue a factor challenge
+ */
+declare const issueChallenge: (attemptId: string, issueChallengeBody: IssueChallengeBody, options?: RequestInit) => Promise<IssueChallenge201>;
+declare const getVerifyChallengeProofUrl: (attemptId: string, challengeId: string) => string;
+/**
+ * Submits a proof (credential, code, assertion) to verify a factor challenge.
+
+The proof format depends on the challenge method. For example:
+- `password` method: { password: "…" }
+- `totp` method: { totp: { code: "123456" } }
+- `passkey` method: { passkey: { assertion: "…" } }
+- `recovery_code` method: { recovery_code: "…" }
+
+On successful verification, the factor is written to the auth attempt.
+The attempt moves to the next pending challenge or completes if all required factors are verified.
+
+ * @summary Verify a factor proof
+ */
+declare const verifyChallengeProof: (attemptId: string, challengeId: string, verifyChallengeProofBody: VerifyChallengeProofBody, options?: RequestInit) => Promise<VerifyChallengeProof200>;
+declare const getCreateHandoffUrl: (attemptId: string) => string;
+/**
+ * Completes the authentication attempt and mints a `handoff_token`.
+
+Call this after all required factors have been verified and the attempt is in `completed` state.
+The handoff token is short-lived (≤60 seconds) and must be exchanged at
+POST /sessions/exchange to receive the final session and session_token.
+
+The handoff token is:
+- Single-use (atomic exchange, no retry)
+- Audience-bound (requires matching project key for exchange)
+- Idempotency-safe within a 5-minute window (see conventions)
+
+ * @summary Complete authentication and create handoff token
+ */
+declare const createHandoff: (attemptId: string, options?: RequestInit) => Promise<CreateHandoff200>;
+declare const getCreateProjectUrl: () => string;
+/**
+ * @summary Create project
+ */
+declare const createProject: (createProjectBody: CreateProjectBody, options?: RequestInit) => Promise<CreateProject201>;
+declare const getQueryProjectsUrl: () => string;
+/**
+ * @summary Query projects
+ */
+declare const queryProjects: (queryProjectsBody: QueryProjectsBody, options?: RequestInit) => Promise<QueryProjects200>;
+declare const getGetProjectUrl: (projectId: string) => string;
+/**
+ * Returns the current state of a project.
+
+ * @summary Get project
+ */
+declare const getProject: (projectId: string, options?: RequestInit) => Promise<GetProject200>;
+declare const getPatchProjectUrl: (projectId: string) => string;
+/**
+ * Updates the state of a project.
+
+ * @summary Update project
+ */
+declare const patchProject: (projectId: string, patchProjectBody: PatchProjectBody, options?: RequestInit) => Promise<PatchProject200>;
+declare const getInitClaimUrl: (projectId: string) => string;
+/**
+ * Starts a claim challenge for an unclaimed project. Authenticated by the
+project secret, this mints a single-use, short-lived challenge and returns
+the `claim_url` the developer opens in a browser to complete the claim,
+together with the `challenge_id` the CLI polls with. The exact expiry is
+carried by `expires_at` on the response.
+
+ * @summary Initialize a project claim
+ */
+declare const initClaim: (projectId: string, options?: RequestInit) => Promise<InitClaim201>;
+declare const getGetClaimStatusUrl: (projectId: string, params: GetClaimStatusParams) => string;
+/**
+ * Polled by the CLI while a browser completes the claim. Authorized by the
+project secret that initiated the challenge. Returns `pending`, or
+`completed` with the owning team, the claim timestamp, and the dashboard
+URL once the browser leg has finished.
+
+ * @summary Get claim status
+ */
+declare const getClaimStatus: (projectId: string, params: GetClaimStatusParams, options?: RequestInit) => Promise<GetClaimStatus200>;
+declare const getCompleteClaimUrl: (projectId: string) => string;
+/**
+ * Called by the browser after the developer authenticates on the claim page.
+Authenticated by the `__nextgen_session` cookie, it attaches the project to
+the developer's personal team using the `challenge_id` from the claim URL as
+its single-use, browser-safe authorization.
+
+ * @summary Complete a project claim
+ */
+declare const completeClaim: (projectId: string, completeClaimBody: CompleteClaimBody, options?: RequestInit) => Promise<CompleteClaim200>;
+declare const getCreateSessionUrl: () => string;
+/**
+ * Creates an anonymous session shell with no user and no factors (`state: building`).
+
+This is optional — an `auth_attempt` will create a session implicitly if none is provided.
+Use this explicitly when you want to:
+- Pre-allocate a `session_id` before the user is known, so device/telemetry signals
+  can be correlated with the eventual authenticated session from the start.
+- Track anonymous state (bot detection, device fingerprint) that survives until authentication.
+
+Creating a session is an app-plane operation on the project credential
+(`session.write`). The returned `session_token` is a session credential for the
+end-user client, not a management scope: it is delivered as the
+`__nextgen_session` cookie and authorises the self-service operations
+`GET /sessions/me` and `DELETE /sessions/me` (`nextgenSession` scheme). The
+by-id operations `GET /sessions/{session_id}` and `DELETE /sessions/{session_id}`
+are operator endpoints and require `session.read` / `session.delete` instead.
+
+The `session_token` is superseded when a handoff exchange completes — clients must
+replace it at that point.
+
+Anonymous sessions expire aggressively (10-minute TTL). The TTL resets to the configured
+full session TTL when the first authentication factor is written via a completing `auth_attempt`.
+
+ * @summary Create an anonymous session shell
+ */
+declare const createSession: (createSessionBody: CreateSessionBody, options?: RequestInit) => Promise<CreateSession201>;
+declare const getQuerySessionsUrl: (params: QuerySessionsParams) => string;
+/**
+ * Returns the sessions of a project, paginated with a cursor.
+Sessions of every lifecycle state are returned; each carries its `state`.
+Requires `session.read` permission.
+
+ * @summary Query sessions
+ */
+declare const querySessions: (querySessionsBody: QuerySessionsBody, params: QuerySessionsParams, options?: RequestInit) => Promise<QuerySessions200>;
+declare const getExchangeHandoffUrl: (params: ExchangeHandoffParams) => string;
+/**
+ * Consumes a one-time `handoff_token` minted by `POST /auth_attempts/{id}/handoff`
+and returns the resulting session and a `session_token`.
+
+The server resolves the originating `auth_attempt` from the token and then:
+
+| Originating auth_attempt | Outcome |
+|---|---|
+| No `session_id` | A new authenticated session is **created**. |
+| `session_id` points to an anonymous shell | Existing session is **upgraded** — user and factors written in, TTL reset to full session TTL. |
+| `session_id` points to an active session (step-up) | Existing session is **upgraded** — new factors merged, `assurance_levels[]` expanded. |
+
+The response shape is identical in all three cases.
+
+The `session_token` supersedes any previously issued `session_token` for the same session.
+Clients must replace their stored token at this point.
+
+Requires a project service key (OAuth2 client credentials).
+
+ * @summary Exchange handoff token for a session
+ */
+declare const exchangeHandoff: (exchangeHandoffBody: ExchangeHandoffBody, params: ExchangeHandoffParams, options?: RequestInit) => Promise<ExchangeHandoff200>;
+declare const getGetSessionUrl: (sessionId: string) => string;
+/**
+ * Returns the current state of a session including its factors and all currently
+satisfied assurance levels.
+
+`assurance_levels[]` may shrink over time as factor freshness windows expire,
+without the session itself expiring. Use step-up authentication (a new `auth_attempt`
+against the same `session_id`) to restore a dropped assurance level.
+
+ * @summary Get session state
+ */
+declare const getSession: (sessionId: string, options?: RequestInit) => Promise<GetSession200>;
+declare const getRevokeSessionUrl: (sessionId: string) => string;
+/**
+ * Permanently deletes the session, terminating it immediately.
+
+This is the operator revoke path and requires the `session.delete` scope on a
+project-bound credential. End-user logout with the `__nextgen_session` cookie is
+`DELETE /sessions/me` (`nextgenSession` scheme).
+
+Idempotent: deleting a session that does not exist (or was already deleted)
+still returns 204. After deletion, any tokens derived from the session are
+invalidated.
+
+ * @summary Revoke session
+ */
+declare const revokeSession: (sessionId: string, options?: RequestInit) => Promise<void>;
+declare const getGetMySessionUrl: () => string;
+/**
+ * Returns the current state of the current session including its factors and all currently
+satisfied assurance levels.
+
+`assurance_levels[]` may shrink over time as factor freshness windows expire,
+without the session itself expiring. Use step-up authentication (a new `auth_attempt`
+against the same `session_id`) to restore a dropped assurance level.
+
+ * @summary Get my session state
+ */
+declare const getMySession: (options?: RequestInit) => Promise<GetMySession200>;
+declare const getRevokeMySessionUrl: () => string;
+/**
+ * Logs out by permanently deleting the session.
+
+The `__nextgen_session` cookie issued at creation (or superseded by a handoff
+exchange) is required. Idempotent: if the session is already gone this still
+returns 204. Any tokens derived from the session are invalidated, and the
+cookie itself is cleared in the response.
+
+ * @summary Revoke my session
+ */
+declare const revokeMySession: (options?: RequestInit) => Promise<void>;
+declare const getCreateSchemaUrl: (params: CreateSchemaParams) => string;
+/**
+ * Create a new schema. The optional `$id` field is the JSON Schema document
+URI used to identify the schema in future requests (GitOps-stable identity,
+not a free-form resource primary key). When `$id` is omitted, the server
+generates a `sch_*` URL. When provided, `$id` must be unique within the
+project and should ideally be a valid URI pointing at where the schema can
+be accessed.
+
+The schema can either be a concrete schema, e.g. a user schema, or a
+schema-url which will be resolved by the server.
+
+ * @summary Create new schema
+ */
+declare const createSchema: (createSchemaBody: CreateSchemaBody, params: CreateSchemaParams, options?: RequestInit) => Promise<CreateSchema201>;
+declare const getListSchemasUrl: (params: ListSchemasParams) => string;
+/**
+ * Retrieve a list of all schemas available in the system. This endpoint
+supports pagination and filtering based on schema attributes.
+
+ * @summary List all schemas
+ */
+declare const listSchemas: (params: ListSchemasParams, options?: RequestInit) => Promise<ListSchemas200Item[]>;
+declare const getGetSchemaByIdUrl: (id: string, params?: GetSchemaByIdParams) => string;
+/**
+ * Get a schema by its ID. This will return the default revision of the schema.
+ * @summary Get schema by ID
+ */
+declare const getSchemaById: (id: string, params?: GetSchemaByIdParams, options?: RequestInit) => Promise<GetSchemaById200>;
+declare const getCreateFlowDefinitionUrl: () => string;
+/**
+ * Creates a new flow definition.
+Flow definitions are templates that define the sequence of steps (capabilities)
+for a particular user journey (e.g., registration, login, password reset).
+
+Flow definitions are created based on the flow definition schema, which includes the flow's purpose, audience, and the steps involved.
+
+ * @summary Create a new flow definition
+ */
+declare const createFlowDefinition: (createFlowDefinitionBody: CreateFlowDefinitionBody, options?: RequestInit) => Promise<CreateFlowDefinition201>;
+declare const getListFlowDefinitionsUrl: (params: ListFlowDefinitionsParams) => string;
+/**
+ * Retrieves a list of all flow definitions.
+This endpoint can be used to view existing flow definitions and their configurations.
+
+ * @summary List flow definitions
+ */
+declare const listFlowDefinitions: (params: ListFlowDefinitionsParams, options?: RequestInit) => Promise<ListFlowDefinitions200>;
+declare const getGetFlowDefinitionUrl: (id: string) => string;
+/**
+ * Get a flow definition by id
+ * @summary Get a flow definition by id
+ */
+declare const getFlowDefinition: (id: string, options?: RequestInit) => Promise<GetFlowDefinition200>;
+declare const getUpdateFlowDefinitionUrl: (id: string) => string;
+/**
+ * Update a flow definition by id. This endpoint replaces the existing flow definition.
+If `flow_definition.status` is omitted, the current status is preserved
+
+ * @summary Update a flow definition by id
+ */
+declare const updateFlowDefinition: (id: string, updateFlowDefinitionBody: UpdateFlowDefinitionBody, options?: RequestInit) => Promise<UpdateFlowDefinition200>;
+declare const getDeleteFlowDefinitionUrl: (id: string) => string;
+/**
+ * Delete a flow definition by id.
+If the flow definition is currently being used by a flow, the deletion will fail.
+If the flow definition is the last active flow definition for a given purpose, the deletion will fail to prevent disruption of new flows being started for that purpose.
+
+ * @summary Delete a flow definition by id
+ */
+declare const deleteFlowDefinition: (id: string, options?: RequestInit) => Promise<void>;
+declare const getCreateTeamUrl: (params: CreateTeamParams) => string;
+/**
+ * @summary Create team
+ */
+declare const createTeam: (createTeamBody: CreateTeamBody, params: CreateTeamParams, options?: RequestInit) => Promise<CreateTeam201>;
+declare const getQueryTeamsUrl: (params: QueryTeamsParams) => string;
+/**
+ * Returns the teams of a project, paginated with a cursor.
+
+ * @summary Query teams
+ */
+declare const queryTeams: (queryTeamsBody: QueryTeamsBody, params: QueryTeamsParams, options?: RequestInit) => Promise<QueryTeams200>;
+declare const getGetTeamUrl: (teamId: string) => string;
+/**
+ * Returns a Team by its id.
+
+ * @summary Get team
+ */
+declare const getTeam: (teamId: string, options?: RequestInit) => Promise<GetTeam200>;
+declare const getDeleteTeamUrl: (teamId: string) => string;
+/**
+ * Deactivates the team.
+
+The team is tombstoned rather than erased: it stays readable through
+getTeam with status `deactivated`. Its memberships are removed and the
+users whose lifecycle it owns are deactivated with it.
+
+The request is idempotent. Deleting a team that is already deactivated
+or doesn't exist succeeds without changing anything.
+
+ * @summary Delete team
+ */
+declare const deleteTeam: (teamId: string, options?: RequestInit) => Promise<void>;
+declare const getUpdateTeamUrl: (teamId: string) => string;
+/**
+ * Update team. Only active teams can be updated.
+
+ * @summary Update team
+ */
+declare const updateTeam: (teamId: string, updateTeamBody: UpdateTeamBody, options?: RequestInit) => Promise<UpdateTeam200>;
+declare const getCreateBrandingUrl: (params: CreateBrandingParams) => string;
+/**
+ * Publishes a new immutable branding revision for the project. Branding
+revisions cannot be updated or deleted; every edit publishes a new
+revision, and flow responses resolve the latest revision per project
+(see ADR 040).
+
+The `liquid_template` is validated lexically on save (size, encoding,
+banned patterns such as `<script>` tags, inline event handlers, and the
+`| raw` filter). Authoritative LiquidJS validation runs at authoring
+time via `zitadel plan` / `zitadel apply`.
+
+ * @summary Publish a new branding revision
+ */
+declare const createBranding: (createBrandingBody: CreateBrandingBody, params: CreateBrandingParams, options?: RequestInit) => Promise<CreateBranding201>;
+declare const getListBrandingUrl: (params: ListBrandingParams) => string;
+/**
+ * Lists branding revisions for the project, newest first, capped at the
+100 most recent. The first entry is the revision flow responses
+currently resolve. Deliberately unpaginated in v1 — list endpoints
+gain a real query mechanism together (ADR 031); advertising pagination
+parameters the server ignores would be worse than none.
+
+ * @summary List branding revisions
+ */
+declare const listBranding: (params: ListBrandingParams, options?: RequestInit) => Promise<ListBranding200Item[]>;
+declare const getGetBrandingByIdUrl: (id: string) => string;
+/**
+ * Retrieves a single branding revision, including its stored configuration.
+ * @summary Get a branding revision by ID
+ */
+declare const getBrandingById: (id: string, options?: RequestInit) => Promise<GetBrandingById200>;
+declare const getListEventsUrl: (params: ListEventsParams) => string;
+/**
+ * Returns project-scoped audit events, newest-first by keyset on
+`(created_at, id)` (ADR 027 / ADR 049). Pass `order=asc` for oldest-first.
+Requires `events.read`.
+
+Pre-claim projects return an empty list (events are stored but not
+visible until claim succeeds). Team-scoped credentials see only events
+whose emit-time `team_id` matches the credential team (enforced when
+team-scoped tokens exist).
+
+Clients discriminate each item via `event_type` (OpenAPI Event oneOf) —
+see docs/design/api/events-catalog.md.
+
+ * @summary List events
+ */
+declare const listEvents: (params: ListEventsParams, options?: RequestInit) => Promise<ListEvents200>;
+declare const getGetEventUrl: (id: string, params: GetEventParams) => string;
+/**
+ * Loads a single event by `(project_id, id)`. Requires `events.read`.
+Events are not registered in `resource_scope_index`; project scope is
+required on the query (ADR 049). Misses and cross-project ids return 404.
+
+Pre-claim projects return 404 (stored events stay invisible until claim).
+
+ * @summary Get event by ID
+ */
+declare const getEvent: (id: string, params: GetEventParams, options?: RequestInit) => Promise<GetEvent200>;
+//#endregion
+export { getHealth as $, getDeleteFlowDefinitionUrl as A, issueChallenge as At, getGetEventUrl as B, querySessions as Bt, getCreateFlowUrl as C, getSubmitFlowStepUrl as Ct, getCreateSessionUrl as D, getUserByID as Dt, getCreateSchemaUrl as E, getUpdateTeamUrl as Et, getFlowDefinition as F, listUserPasskeys as Ft, getGetMySessionUrl as G, submitFlowStep as Gt, getGetFlowStepUrl as H, revokeMySession as Ht, getFlowStep as I, listUserTeams as It, getGetReadyUrl as J, verifyChallengeProof as Jt, getGetMyUserUrl as K, updateFlowDefinition as Kt, getGetAuthAttemptUrl as L, listUsers as Lt, getDeleteUserByIDUrl as M, listEvents as Mt, getEvent as N, listFlowDefinitions as Nt, getCreateTeamUrl as O, getVerifyChallengeProofUrl as Ot, getExchangeHandoffUrl as P, listSchemas as Pt, getGetUserByIDUrl as Q, getGetBrandingByIdUrl as R, patchProject as Rt, getCreateFlowDefinitionUrl as S, getSetUserPasswordUrl as St, getCreateProjectUrl as T, getUpdateFlowDefinitionUrl as Tt, getGetHealthUrl as U, revokeSession as Ut, getGetFlowDefinitionUrl as V, queryTeams as Vt, getGetLiveUrl as W, setUserPassword as Wt, getGetSessionUrl as X, getGetSchemaByIdUrl as Y, zitadelNextGen_d_exports as Yt, getGetTeamUrl as Z, getBrandingById as _, getReady as _t, createFlowDefinition as a, getListSchemasUrl as at, getCreateAuthAttemptUrl as b, getSchemaById as bt, createSchema as c, getListUsersUrl as ct, createUser as d, getMyUser as dt, getInitClaimUrl as et, deleteFlowDefinition as f, getPatchProjectUrl as ft, getAuthAttempt as g, getQueryTeamsUrl as gt, exchangeHandoff as h, getQuerySessionsUrl as ht, createFlow as i, getListFlowDefinitionsUrl as it, getDeleteTeamUrl as j, listBranding as jt, getCreateUserUrl as k, initClaim as kt, createSession as l, getLive as lt, deleteUserByID as m, getQueryProjectsUrl as mt, createAuthAttempt as n, getListBrandingUrl as nt, createHandoff as o, getListUserPasskeysUrl as ot, deleteTeam as p, getProject as pt, getGetProjectUrl as q, updateTeam as qt, createBranding as r, getListEventsUrl as rt, createProject as s, getListUserTeamsUrl as st, completeClaim as t, getIssueChallengeUrl as tt, createTeam as u, getMySession as ut, getClaimStatus as v, getRevokeMySessionUrl as vt, getCreateHandoffUrl as w, getTeam as wt, getCreateBrandingUrl as x, getSession as xt, getCompleteClaimUrl as y, getRevokeSessionUrl as yt, getGetClaimStatusUrl as z, queryProjects as zt };
+//# sourceMappingURL=zitadelNextGen-BkDpEAS9.d.mts.map

package/dist/zitadelNextGen-BkDpEAS9.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelNextGen-BkDpEAS9.d.mts","names":[],"sources":["../src/generated/endpoints/zitadelNextGen.ts"],"mappings":";;;;;;cAgGa,eAAA;;;;;cAQA,SAAA,GAAmB,OAAA,GAAU,WAAA,KAAc,OAAA,CAAQ,gBAAA;AAAA,cAOnD,aAAA;;;;;cAQA,OAAA,GAAiB,OAAA,GAAU,WAAA,KAAc,OAAA,CAAQ,cAAA;AAAA,cAOjD,cAAA;;;;;cAQA,QAAA,GAAkB,OAAA,GAAU,WAAA,KAAc,OAAA,CAAQ,eAAA;AAAA,cAOlD,gBAAA,GAAoB,MAAA,EAAQ,gBAAA;;;;cAmB5B,UAAA,GACX,cAAA,EAAgB,cAAA,EAChB,MAAA,EAAQ,gBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,aAAA;AAAA,cASE,eAAA,GAAmB,MAAA,GAAS,eAAA;;;;cAmB5B,SAAA,GACX,MAAA,GAAS,eAAA,EACT,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,YAAA;AAAA,cAOE,iBAAA,GAAqB,MAAA,UAAgB,MAAA,GAAS,iBAAA;;;;cAmB9C,WAAA,GACX,MAAA,UACA,MAAA,GAAS,iBAAA,EACT,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,cAAA;AAAA,cAOE,oBAAA,GAAwB,MAAA;;;;cAOxB,cAAA,GAAwB,MAAA,UAAgB,OAAA,GAAU,WAAA,KAAc,OAAA;AAAA,cAOhE,sBAAA,GAA0B,MAAA,UAAgB,MAAA,GAAS,sBAAA;;;;cAmBnD,gBAAA,GACX,MAAA,UACA,MAAA,GAAS,sBAAA,EACT,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,mBAAA;AAAA,cAOE,qBAAA,GAAyB,MAAA;;;;cAOzB,eAAA,GACX,MAAA,UACA,mBAAA,EAAqB,mBAAA,EACrB,OAAA,GAAU,WAAA,KACT,OAAA;AAAA,cASU,mBAAA,GAAuB,MAAA,UAAgB,MAAA,GAAS,mBAAA;;;;;;;;;;;;cA2BhD,aAAA,GACX,MAAA,UACA,MAAA,GAAS,mBAAA,EACT,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,gBAAA;AAAA,cAOE,eAAA;;;;cAOA,SAAA,GAAmB,OAAA,GAAU,WAAA,KAAc,OAAA,CAAQ,YAAA;AAAA,cAOnD,gBAAA;;;;;;;;;;;;;;;;cAmBA,UAAA,GACX,cAAA,EAAgB,cAAA,EAChB,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,aAAA;AAAA,cASE,iBAAA,GAAqB,EAAA;;;;;;;cAUrB,WAAA,GAAqB,EAAA,UAAY,OAAA,GAAU,WAAA,KAAc,OAAA,CAAQ,cAAA;AAAA,cAOjE,oBAAA,GAAwB,EAAA;;;;;;;;;;;;;;;;AA5SrC;;;;;AAQA;;;;;;;;;;;cAuUa,cAAA,GACX,EAAA,UACA,kBAAA,EAAoB,kBAAA,EACpB,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,iBAAA;AAAA,cASE,uBAAA;;AA7Ub;;;;;AAQA;;;;;cAoVa,iBAAA,GACX,qBAAA,EAAuB,qBAAA,EACvB,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,oBAAA;AAAA,cASE,oBAAA,GAAwB,SAAA;;;;;;;;AAzVrC;;;;cAwWa,cAAA,GACX,SAAA,UACA,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,iBAAA;AAAA,cAOE,oBAAA,GAAwB,SAAA;;;;;;;;;;;cAcxB,cAAA,GACX,SAAA,UACA,kBAAA,EAAoB,kBAAA,EACpB,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,iBAAA;AAAA,cASE,0BAAA,GAA8B,SAAA,UAAmB,WAAA;;AA9X9D;;;;;AAmBA;;;;;;;;cA6Xa,oBAAA,GACX,SAAA,UACA,WAAA,UACA,wBAAA,EAA0B,wBAAA,EAC1B,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,uBAAA;AAAA,cASE,mBAAA,GAAuB,SAAA;;;;;;;;;;;AA9XpC;;;;cAgZa,aAAA,GACX,SAAA,UACA,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,gBAAA;AAAA,cAOE,mBAAA;;;;cAOA,aAAA,GACX,iBAAA,EAAmB,iBAAA,EACnB,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,gBAAA;AAAA,cASE,mBAAA;;;;cAOA,aAAA,GACX,iBAAA,EAAmB,iBAAA,EACnB,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,gBAAA;AAAA,cASE,gBAAA,GAAoB,SAAA;;;;;;cASpB,UAAA,GACX,SAAA,UACA,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,aAAA;AAAA,cAOE,kBAAA,GAAsB,SAAA;;;;;;cAStB,YAAA,GACX,SAAA,UACA,gBAAA,EAAkB,gBAAA,EAClB,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,eAAA;AAAA,cASE,eAAA,GAAmB,SAAA;;AAzbhC;;;;;;;;cAsca,SAAA,GACX,SAAA,UACA,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,YAAA;AAAA,cAOE,oBAAA,GAAwB,SAAA,UAAmB,MAAA,EAAQ,oBAAA;;;;;;;;;cAwBnD,cAAA,GACX,SAAA,UACA,MAAA,EAAQ,oBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,iBAAA;AAAA,cAOE,mBAAA,GAAuB,SAAA;;;;AAjepC;;;;;cA6ea,aAAA,GACX,SAAA,UACA,iBAAA,EAAmB,iBAAA,EACnB,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,gBAAA;AAAA,cASE,mBAAA;;;;AAnfb;;;;;;;;;AAmBA;;;;;;;;;;;;;cA6fa,aAAA,GACX,iBAAA,EAAmB,iBAAA,EACnB,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,gBAAA;AAAA,cASE,mBAAA,GAAuB,MAAA,EAAQ,mBAAA;;;;AA9f5C;;;;cAqhBa,aAAA,GACX,iBAAA,EAAmB,iBAAA,EACnB,MAAA,EAAQ,mBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,gBAAA;AAAA,cASE,qBAAA,GAAyB,MAAA,EAAQ,qBAAA;;;;;;;;;;;;;;;;AA9gB9C;;;;;;cAmjBa,eAAA,GACX,mBAAA,EAAqB,mBAAA,EACrB,MAAA,EAAQ,qBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,kBAAA;AAAA,cASE,gBAAA,GAAoB,SAAA;;AAriBjC;;;;;;;;;cAmjBa,UAAA,GACX,SAAA,UACA,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,aAAA;AAAA,cAOE,mBAAA,GAAuB,SAAA;;;;;;;;AAljBpC;;;;;AAOA;cA4jBa,aAAA,GAAuB,SAAA,UAAmB,OAAA,GAAU,WAAA,KAAc,OAAA;AAAA,cAOlE,kBAAA;;;;;;;;;;;cAcA,YAAA,GAAsB,OAAA,GAAU,WAAA,KAAc,OAAA,CAAQ,eAAA;AAAA,cAOtD,qBAAA;;;;;AA9jBb;;;;;;cA4kBa,eAAA,GAAyB,OAAA,GAAU,WAAA,KAAc,OAAA;AAAA,cAOjD,kBAAA,GAAsB,MAAA,EAAQ,kBAAA;;;;;;;;;;AAvkB3C;;;;cAomBa,YAAA,GACX,gBAAA,EAAkB,gBAAA,EAClB,MAAA,EAAQ,kBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,eAAA;AAAA,cASE,iBAAA,GAAqB,MAAA,EAAQ,iBAAA;;;;;;;cAsB7B,WAAA,GACX,MAAA,EAAQ,iBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,kBAAA;AAAA,cAOE,mBAAA,GAAuB,EAAA,UAAY,MAAA,GAAS,mBAAA;;;;;cAoB5C,aAAA,GACX,EAAA,UACA,MAAA,GAAS,mBAAA,EACT,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,gBAAA;AAAA,cAOE,0BAAA;AA/pBb;;;;;AAmCA;;;;AAnCA,cA4qBa,oBAAA,GACX,wBAAA,EAA0B,wBAAA,EAC1B,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,uBAAA;AAAA,cASE,yBAAA,GAA6B,MAAA,EAAQ,yBAAA;;;;;;;cAsBrC,mBAAA,GACX,MAAA,EAAQ,yBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,sBAAA;AAAA,cAOE,uBAAA,GAA2B,EAAA;;;;;cAQ3B,iBAAA,GACX,EAAA,UACA,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,oBAAA;AAAA,cAOE,0BAAA,GAA8B,EAAA;;;;AA3qB3C;;;cAqrBa,oBAAA,GACX,EAAA,UACA,wBAAA,EAA0B,wBAAA,EAC1B,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,uBAAA;AAAA,cASE,0BAAA,GAA8B,EAAA;;;;;;;;cAW9B,oBAAA,GAA8B,EAAA,UAAY,OAAA,GAAU,WAAA,KAAc,OAAA;AAAA,cAOlE,gBAAA,GAAoB,MAAA,EAAQ,gBAAA;;;;cAmB5B,UAAA,GACX,cAAA,EAAgB,cAAA,EAChB,MAAA,EAAQ,gBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,aAAA;AAAA,cASE,gBAAA,GAAoB,MAAA,EAAQ,gBAAA;;;;AAztBzC;;cA8uBa,UAAA,GACX,cAAA,EAAgB,cAAA,EAChB,MAAA,EAAQ,gBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,aAAA;AAAA,cASE,aAAA,GAAiB,MAAA;;;;;;cASjB,OAAA,GAAiB,MAAA,UAAgB,OAAA,GAAU,WAAA,KAAc,OAAA,CAAQ,UAAA;AAAA,cAOjE,gBAAA,GAAoB,MAAA;;;;;AAjwBjC;;;;;AAcA;;;cAmwBa,UAAA,GAAoB,MAAA,UAAgB,OAAA,GAAU,WAAA,KAAc,OAAA;AAAA,cAO5D,gBAAA,GAAoB,MAAA;;;;;;cASpB,UAAA,GACX,MAAA,UACA,cAAA,EAAgB,cAAA,EAChB,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,aAAA;AAAA,cASE,oBAAA,GAAwB,MAAA,EAAQ,oBAAA;;;;;;;AAnxB7C;;;;;AAkBA;;cA8xBa,cAAA,GACX,kBAAA,EAAoB,kBAAA,EACpB,MAAA,EAAQ,oBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,iBAAA;AAAA,cASE,kBAAA,GAAsB,MAAA,EAAQ,kBAAA;;;;;;;;;;cAyB9B,YAAA,GACX,MAAA,EAAQ,kBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,mBAAA;AAAA,cAOE,qBAAA,GAAyB,EAAA;;;;;cAQzB,eAAA,GACX,EAAA,UACA,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,kBAAA;AAAA,cAOE,gBAAA,GAAoB,MAAA,EAAQ,gBAAA;;;;AAh0BzC;;;;;;;;;;;;cAw2Ba,UAAA,GACX,MAAA,EAAQ,gBAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,aAAA;AAAA,cAOE,cAAA,GAAkB,EAAA,UAAY,MAAA,EAAQ,cAAA;;AAx2BnD;;;;;AAOA;;;cA03Ba,QAAA,GACX,EAAA,UACA,MAAA,EAAQ,cAAA,EACR,OAAA,GAAU,WAAA,KACT,OAAA,CAAQ,WAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zitadel/api",
-  "version": "0.1.0-alpha.17",
+  "version": "0.1.0-alpha.19",
   "description": "Generated TypeScript API client for the pre-release Zitadel preview.",
   "homepage": "https://github.com/zitadel/nextgen/tree/main/packages/api#readme",
   "bugs": {