@zitadel/api 0.1.0-alpha.18 → 0.1.0-alpha.19

package/src/generated/model/listEvents400.ts

@@ -0,0 +1,20 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { ListEvents400Details } from "./listEvents400Details";
+
+/**
+ * Standard error payload returned for failed API requests.
+ */
+export type ListEvents400 = {
+  /** Stable machine-readable error code. */
+  code: string;
+  /** Human-readable explanation of the error. */
+  message: string;
+  /** Additional error-specific context. */
+  details?: ListEvents400Details;
+};

package/src/generated/model/listEvents400Details.ts

@@ -0,0 +1,12 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Additional error-specific context.
+ */
+export type ListEvents400Details = { [key: string]: unknown };

package/src/generated/model/listEvents401.ts

@@ -0,0 +1,20 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { ListEvents401Details } from "./listEvents401Details";
+
+/**
+ * Standard error payload returned for failed API requests.
+ */
+export type ListEvents401 = {
+  /** Stable machine-readable error code. */
+  code: string;
+  /** Human-readable explanation of the error. */
+  message: string;
+  /** Additional error-specific context. */
+  details?: ListEvents401Details;
+};

package/src/generated/model/listEvents401Details.ts

@@ -0,0 +1,12 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Additional error-specific context.
+ */
+export type ListEvents401Details = { [key: string]: unknown };

package/src/generated/model/listEvents403.ts

@@ -0,0 +1,20 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { ListEvents403Details } from "./listEvents403Details";
+
+/**
+ * Standard error payload returned for failed API requests.
+ */
+export type ListEvents403 = {
+  /** Stable machine-readable error code. */
+  code: string;
+  /** Human-readable explanation of the error. */
+  message: string;
+  /** Additional error-specific context. */
+  details?: ListEvents403Details;
+};

package/src/generated/model/listEvents403Details.ts

@@ -0,0 +1,12 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Additional error-specific context.
+ */
+export type ListEvents403Details = { [key: string]: unknown };

package/src/generated/model/listEventsCategoryItem.ts

@@ -0,0 +1,19 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+export type ListEventsCategoryItem =
+  (typeof ListEventsCategoryItem)[keyof typeof ListEventsCategoryItem];
+
+export const ListEventsCategoryItem = {
+  request: "request",
+  auth: "auth",
+  session: "session",
+  admin: "admin",
+  entity: "entity",
+  signal: "signal",
+} as const;

package/src/generated/model/listEventsDefault.ts

@@ -0,0 +1,20 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { ListEventsDefaultDetails } from "./listEventsDefaultDetails";
+
+/**
+ * Standard error payload returned for failed API requests.
+ */
+export type ListEventsDefault = {
+  /** Stable machine-readable error code. */
+  code: string;
+  /** Human-readable explanation of the error. */
+  message: string;
+  /** Additional error-specific context. */
+  details?: ListEventsDefaultDetails;
+};

package/src/generated/model/{getFlowDefinitionParams.ts → listEventsDefaultDetails.ts}

@@ -6,10 +6,7 @@
  * OpenAPI spec version: 0.0.1
  */
 
-export type GetFlowDefinitionParams = {
-  /**
-   * The project id to filter by.
-   * @pattern ^[a-zA-Z0-9_-]+$
-   */
-  project_id: string;
-};
+/**
+ * Additional error-specific context.
+ */
+export type ListEventsDefaultDetails = { [key: string]: unknown };

package/src/generated/model/{getBrandingByIdParams.ts → listEventsOrder.ts}

@@ -6,10 +6,9 @@
  * OpenAPI spec version: 0.0.1
  */
 
-export type GetBrandingByIdParams = {
-  /**
-   * The unique identifier of the project
-   * @pattern ^[a-zA-Z0-9_-]+$
-   */
-  project_id: string;
-};
+export type ListEventsOrder = (typeof ListEventsOrder)[keyof typeof ListEventsOrder];
+
+export const ListEventsOrder = {
+  asc: "asc",
+  desc: "desc",
+} as const;

package/src/generated/model/listEventsParams.ts

@@ -0,0 +1,67 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { ListEventsCategoryItem } from "./listEventsCategoryItem";
+import type { ListEventsOrder } from "./listEventsOrder";
+
+export type ListEventsParams = {
+  /**
+   * The unique identifier of the project
+   * @pattern ^[a-zA-Z0-9_-]+$
+   */
+  project_id: string;
+  /**
+ * Filter by wide-event category. Repeatable (OR within the parameter).
+
+ */
+  category?: ListEventsCategoryItem[];
+  /**
+ * Exact-match filter on `event_type`. Repeatable (OR within the parameter).
+
+ */
+  event_type?: string[];
+  actor_id?: string;
+  client_id?: string;
+  session_id?: string;
+  flow_id?: string;
+  request_id?: string;
+  fingerprint?: string;
+  entity_type?: string;
+  entity_id?: string;
+  /**
+   * Filter by emit-time team scope stored on the event.
+   */
+  team_id?: string;
+  /**
+   * Inclusive lower bound on `created_at` (RFC 3339).
+   */
+  created_after?: string;
+  /**
+   * Exclusive upper bound on `created_at` (RFC 3339).
+   */
+  created_before?: string;
+  /**
+ * Sort direction on `(created_at, id)`. Default `desc` (newest first)
+for audit UI. Pass `asc` for oldest-first.
+
+ */
+  order?: ListEventsOrder;
+  /**
+ * Token for fetching the next page of results.
+Obtain this value from `next_page_token` in the previous response.
+Omit to start from the beginning.
+Its format is opaque and may change between releases.
+
+ */
+  page_token?: string;
+  /**
+   * Maximum number of items to return.
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+};

package/src/generated/model/listUserPasskeysParams.ts

@@ -21,9 +21,4 @@ Its format is opaque and may change between releases.
 
  */
   page_token?: string;
-  /**
-   * The unique identifier of the project
-   * @pattern ^[a-zA-Z0-9_-]+$
-   */
-  project_id: string;
 };

package/src/generated/model/listUserTeamsDefault.ts

@@ -37,26 +37,6 @@ export type ListUserTeamsDefault =
     } & {
       code: "req.invalid";
     })
-  | ({
-      /** Stable machine-readable error code. */
-      code: string;
-      /** Human-readable explanation of the error. */
-      message: string;
-      /** Additional error-specific context. */
-      details?: { [key: string]: unknown };
-    } & {
-      code: "team.team_not_found";
-    })
-  | ({
-      /** Stable machine-readable error code. */
-      code: string;
-      /** Human-readable explanation of the error. */
-      message: string;
-      /** Additional error-specific context. */
-      details?: { [key: string]: unknown };
-    } & {
-      code: "team.permission_denied";
-    })
   | ({
       /** Stable machine-readable error code. */
       code: string;

package/src/generated/model/listUserTeamsParams.ts

@@ -21,9 +21,4 @@ Its format is opaque and may change between releases.
 
  */
   page_token?: string;
-  /**
-   * The unique identifier of the project
-   * @pattern ^[a-zA-Z0-9_-]+$
-   */
-  project_id: string;
 };

package/src/generated/model/listUsers200UsersItem.ts

@@ -5,21 +5,34 @@
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
+import type { ListUsers200UsersItemAttributes } from "./listUsers200UsersItemAttributes";
 import type { ListUsers200UsersItemMetadata } from "./listUsers200UsersItemMetadata";
 
 /**
  * A user represents an individual identity in the system. It can be used to
 represent a human user, but also a service account or any other type of
-identity. The content of a user is determined by the configured schema for
-users, this is only a base schema.
+identity.
 
-The server assigns the resource primary key (`id`) on create. Clients must
-not send `id` in the create body; it is returned in the create response.
+`attributes` is the document that satisfies the user schema named by
+`schema`: its property names and types are defined entirely by that schema,
+and it is what the schema validates. The rest of the object — `id`,
+`schema`, `metadata` — is the server-owned envelope. Keeping the two apart
+means a schema may name a property `id` or `metadata` without colliding with
+the envelope, and closed-world keywords (`additionalProperties: false`,
+`propertyNames`, `unevaluatedProperties`) behave as their author expects.
 
  */
 export type ListUsers200UsersItem = {
   /** @pattern ^user_[a-zA-Z0-9_-]+$ */
-  id?: string;
-  metadata?: ListUsers200UsersItemMetadata;
-  [key: string]: unknown;
+  id: string;
+  /** The schema that defines the content of `attributes`. These schemas can be
+  created using the `/schemas` endpoint. A default schema is provided.
+  This schema can be retrieved using the same endpoint.
+   */
+  schema: string;
+  /** The user's content, satisfying the schema named by `schema`. Property
+  names and types are determined entirely by that schema.
+   */
+  attributes: ListUsers200UsersItemAttributes;
+  metadata: ListUsers200UsersItemMetadata;
 };

package/src/generated/model/listUsers200UsersItemAttributes.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * The user's content, satisfying the schema named by `schema`. Property
+names and types are determined entirely by that schema.
+
+ */
+export type ListUsers200UsersItemAttributes = { [key: string]: unknown };

package/src/generated/model/patchProjectDefault.ts

@@ -17,6 +17,16 @@ export type PatchProjectDefault =
     } & {
       code: "auth.unauthorized";
     })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "evt.invalid";
+    })
   | ({
       /** Stable machine-readable error code. */
       code: string;

package/src/generated/model/queryProjectsBodyFilterItem.ts

@@ -17,6 +17,10 @@ export type QueryProjectsBodyFilterItem = {
   value?: string | number | boolean | null;
   /** Filter operation defines the operations which can be used when filtering on a
   query endpoint.
+
+  On text fields, `contains` is a case-insensitive substring match. `equals`
+  compares the whole value and is case-sensitive unless the field documents
+  otherwise.
    */
   operation: QueryProjectsBodyFilterItemOperation;
 };

package/src/generated/model/queryProjectsBodyFilterItemOperation.ts

@@ -10,6 +10,10 @@
  * Filter operation defines the operations which can be used when filtering on a
 query endpoint.
 
+On text fields, `contains` is a case-insensitive substring match. `equals`
+compares the whole value and is case-sensitive unless the field documents
+otherwise.
+
  */
 export type QueryProjectsBodyFilterItemOperation =
   (typeof QueryProjectsBodyFilterItemOperation)[keyof typeof QueryProjectsBodyFilterItemOperation];

package/src/generated/model/querySessions200SessionsItem.ts

@@ -28,7 +28,7 @@ export type QuerySessions200SessionsItem = {
   /** @pattern ^[a-zA-Z0-9_-]+$ */
   project_id: string;
   /** Current lifecycle state of the session:
-  - `building`: has a user factor but is still gathering authentication factors
+  - `building`: no verified authentication factors yet
   - `active`: has at least one verified authentication factor; `assurance_levels[]` may shrink as factors age
   - `expired`: TTL elapsed
    */

package/src/generated/model/querySessions200SessionsItemState.ts

@@ -8,7 +8,7 @@
 
 /**
  * Current lifecycle state of the session:
-- `building`: has a user factor but is still gathering authentication factors
+- `building`: no verified authentication factors yet
 - `active`: has at least one verified authentication factor; `assurance_levels[]` may shrink as factors age
 - `expired`: TTL elapsed
 

package/src/generated/model/querySessionsBodyFilterItem.ts

@@ -12,7 +12,8 @@ export type QuerySessionsBodyFilterItem = {
   /** Field to filter sessions by:
   - `created_at`: RFC3339 timestamp
   - `user_id`: user id
-  - `state`: one of `building`, `active`, `expired`
+  - `state`: one of `building`, `active`, `expired`. State is computed at read
+    time, so a session expiring mid-request can match `active` but return `expired`.
    */
   field: QuerySessionsBodyFilterItemField;
   /** Filter-value specifies which values can be filtered by a query endpoint. This
@@ -22,6 +23,10 @@ export type QuerySessionsBodyFilterItem = {
   value?: string | number | boolean | null;
   /** Filter operation defines the operations which can be used when filtering on a
   query endpoint.
+
+  On text fields, `contains` is a case-insensitive substring match. `equals`
+  compares the whole value and is case-sensitive unless the field documents
+  otherwise.
    */
   operation: QuerySessionsBodyFilterItemOperation;
 };

package/src/generated/model/querySessionsBodyFilterItemField.ts

@@ -10,7 +10,8 @@
  * Field to filter sessions by:
 - `created_at`: RFC3339 timestamp
 - `user_id`: user id
-- `state`: one of `building`, `active`, `expired`
+- `state`: one of `building`, `active`, `expired`. State is computed at read
+  time, so a session expiring mid-request can match `active` but return `expired`.
 
  */
 export type QuerySessionsBodyFilterItemField =

package/src/generated/model/querySessionsBodyFilterItemOperation.ts

@@ -10,6 +10,10 @@
  * Filter operation defines the operations which can be used when filtering on a
 query endpoint.
 
+On text fields, `contains` is a case-insensitive substring match. `equals`
+compares the whole value and is case-sensitive unless the field documents
+otherwise.
+
  */
 export type QuerySessionsBodyFilterItemOperation =
   (typeof QuerySessionsBodyFilterItemOperation)[keyof typeof QuerySessionsBodyFilterItemOperation];

package/src/generated/model/querySessionsDefault.ts

@@ -37,6 +37,16 @@ export type QuerySessionsDefault =
     } & {
       code: "not_implemented";
     })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "proj.missing_id";
+    })
   | ({
       /** Stable machine-readable error code. */
       code: string;

package/src/generated/model/queryTeamsBodyFilterItem.ts

@@ -9,6 +9,11 @@ import type { QueryTeamsBodyFilterItemField } from "./queryTeamsBodyFilterItemFi
 import type { QueryTeamsBodyFilterItemOperation } from "./queryTeamsBodyFilterItemOperation";
 
 export type QueryTeamsBodyFilterItem = {
+  /** Field to filter or sort teams by.
+
+  Team names are unique per project case-insensitively, so `name` is matched
+  case-insensitively by `equals` as well as by `contains`.
+   */
   field: QueryTeamsBodyFilterItemField;
   /** Filter-value specifies which values can be filtered by a query endpoint. This
   is a union of types. When a value is specified which is not assignable to the
@@ -17,6 +22,10 @@ export type QueryTeamsBodyFilterItem = {
   value?: string | number | boolean | null;
   /** Filter operation defines the operations which can be used when filtering on a
   query endpoint.
+
+  On text fields, `contains` is a case-insensitive substring match. `equals`
+  compares the whole value and is case-sensitive unless the field documents
+  otherwise.
    */
   operation: QueryTeamsBodyFilterItemOperation;
 };

package/src/generated/model/queryTeamsBodyFilterItemField.ts

@@ -6,9 +6,18 @@
  * OpenAPI spec version: 0.0.1
  */
 
+/**
+ * Field to filter or sort teams by.
+
+Team names are unique per project case-insensitively, so `name` is matched
+case-insensitively by `equals` as well as by `contains`.
+
+ */
 export type QueryTeamsBodyFilterItemField =
   (typeof QueryTeamsBodyFilterItemField)[keyof typeof QueryTeamsBodyFilterItemField];
 
 export const QueryTeamsBodyFilterItemField = {
   created_at: "created_at",
+  name: "name",
+  status: "status",
 } as const;

package/src/generated/model/queryTeamsBodyFilterItemOperation.ts

@@ -10,6 +10,10 @@
  * Filter operation defines the operations which can be used when filtering on a
 query endpoint.
 
+On text fields, `contains` is a case-insensitive substring match. `equals`
+compares the whole value and is case-sensitive unless the field documents
+otherwise.
+
  */
 export type QueryTeamsBodyFilterItemOperation =
   (typeof QueryTeamsBodyFilterItemOperation)[keyof typeof QueryTeamsBodyFilterItemOperation];

package/src/generated/model/queryTeamsBodySorting.ts

@@ -9,6 +9,11 @@ import type { QueryTeamsBodySortingDirection } from "./queryTeamsBodySortingDire
 import type { QueryTeamsBodySortingField } from "./queryTeamsBodySortingField";
 
 export type QueryTeamsBodySorting = {
+  /** Field to filter or sort teams by.
+
+  Team names are unique per project case-insensitively, so `name` is matched
+  case-insensitively by `equals` as well as by `contains`.
+   */
   field: QueryTeamsBodySortingField;
   direction: QueryTeamsBodySortingDirection;
 };

package/src/generated/model/queryTeamsBodySortingField.ts

@@ -6,9 +6,18 @@
  * OpenAPI spec version: 0.0.1
  */
 
+/**
+ * Field to filter or sort teams by.
+
+Team names are unique per project case-insensitively, so `name` is matched
+case-insensitively by `equals` as well as by `contains`.
+
+ */
 export type QueryTeamsBodySortingField =
   (typeof QueryTeamsBodySortingField)[keyof typeof QueryTeamsBodySortingField];
 
 export const QueryTeamsBodySortingField = {
   created_at: "created_at",
+  name: "name",
+  status: "status",
 } as const;

package/src/generated/model/revokeMySessionDefault.ts

@@ -17,6 +17,16 @@ export type RevokeMySessionDefault =
     } & {
       code: "auth.unauthorized";
     })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "evt.invalid";
+    })
   | ({
       /** Stable machine-readable error code. */
       code: string;

package/src/generated/model/revokeSessionDefault.ts

@@ -17,6 +17,16 @@ export type RevokeSessionDefault =
     } & {
       code: "auth.unauthorized";
     })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "evt.invalid";
+    })
   | ({
       /** Stable machine-readable error code. */
       code: string;

package/src/generated/model/setUserPasswordDefault.ts

@@ -17,6 +17,16 @@ export type SetUserPasswordDefault =
     } & {
       code: "auth.unauthorized";
     })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "evt.invalid";
+    })
   | ({
       /** Stable machine-readable error code. */
       code: string;

package/src/generated/model/submitFlowStepDefault.ts

@@ -107,6 +107,16 @@ export type SubmitFlowStepDefault =
     } & {
       code: "enc_key.not_found";
     })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "evt.invalid";
+    })
   | ({
       /** Stable machine-readable error code. */
       code: string;

package/src/generated/model/updateFlowDefinition200FlowDefinitionStepsItemTransitions.ts

@@ -31,5 +31,16 @@ export type UpdateFlowDefinition200FlowDefinitionStepsItemTransitions = {
     Example: login → recovery → back to login.
    */
     action?: "switch" | "pivot" | null;
+    /** Local re-purposing. When set, taking this transition changes the
+  flow's current purpose to this value — the dispatch mode a step's
+  challenges run under — while the flow's original purpose stays
+  pinned. Must be a purpose this definition serves, and `target`
+  must be that purpose's entry step. Mutually exclusive with
+  `action`: a transition either re-purposes within this flow or
+  targets another flow, never both.
+  Example: a "Sign up" navigation on the login identifier step
+  (`{ target: register, purpose: register }`).
+   */
+    purpose?: "login" | "register" | "recovery" | "profiling" | "reauth" | "link_account" | null;
   };
 };