@zitadel/api 0.1.0-alpha.4 → 0.1.0-alpha.8

package/src/generated/endpoints/zitadelNextGen.zod.ts

@@ -700,14 +700,14 @@ export const GetFlowStepParams = zod.object({
     ),
 });
 
-export const getFlowStepResponseStepFieldsRequiredDefault = false;
-export const getFlowStepResponseStepFieldsValidationMinLengthMin = 0;
+export const getFlowStepResponseStepFieldsItemRequiredDefault = false;
+export const getFlowStepResponseStepFieldsItemValidationMinLengthMin = 0;
 
-export const getFlowStepResponseStepFieldsValidationMaxLengthMin = 0;
+export const getFlowStepResponseStepFieldsItemValidationMaxLengthMin = 0;
 
-export const getFlowStepResponseStepFieldsDefault = {} as const;
-export const getFlowStepResponseStepActionsPrimaryDefault = false;
-export const getFlowStepResponseStepActionsDefault = {} as const;
+export const getFlowStepResponseStepFieldsDefault = [];
+export const getFlowStepResponseStepActionsItemPrimaryDefault = false;
+export const getFlowStepResponseStepActionsDefault = [];
 export const getFlowStepResponseStepGatesDefault = {} as const;
 export const getFlowStepResponseStepSsoProvidersDefault = [];
 export const getFlowStepResponseBrandingLayoutDefault = `centered`;
@@ -755,19 +755,34 @@ export const GetFlowStepResponse = zod.object({
         .optional()
         .describe("URL to navigate to (e.g., SSO provider redirect)."),
       fields: zod
-        .record(
-          zod.string(),
+        .array(
           zod
             .object({
+              name: zod
+                .string()
+                .describe(
+                  "Field name, matching a property in the flow's user schema. Carries\nthe submitted value back to the engine.\n",
+                ),
               type: zod
-                .enum(["text", "email", "password", "tel", "number", "url", "date", "hidden"])
+                .enum([
+                  "text",
+                  "email",
+                  "password",
+                  "tel",
+                  "number",
+                  "url",
+                  "date",
+                  "hidden",
+                  "checkbox",
+                  "select",
+                ])
                 .describe(
-                  "The input kind the client should render. Encodes the formats that\nhave a matching HTML input type (email, url, date). For other\nformats (e.g. uuid) the type is `text` and `validation.format`\ncarries the rule.\n",
+                  "The input kind the client should render. Encodes the formats and\nJSON types that map to a familiar HTML input: `email`, `url`,\n`date` come from `format`; `checkbox` from JSON `type: boolean`;\n`select` from a closed `enum`. For other formats (e.g. uuid) the\ntype is `text` and `validation.format` carries the rule.\n",
                 ),
               text_key: zod.string().describe("Localization key for the field label."),
               required: zod
                 .boolean()
-                .default(getFlowStepResponseStepFieldsRequiredDefault)
+                .default(getFlowStepResponseStepFieldsItemRequiredDefault)
                 .describe(
                   "The field MUST be present and non-empty on submit. Mirrors the\nschema's top-level `required` array.\n",
                 ),
@@ -785,14 +800,20 @@ export const GetFlowStepResponse = zod.object({
                     ),
                   min_length: zod
                     .number()
-                    .min(getFlowStepResponseStepFieldsValidationMinLengthMin)
+                    .min(getFlowStepResponseStepFieldsItemValidationMinLengthMin)
                     .optional()
                     .describe("Minimum length in characters (inclusive). Mirrors `minLength`."),
                   max_length: zod
                     .number()
-                    .min(getFlowStepResponseStepFieldsValidationMaxLengthMin)
+                    .min(getFlowStepResponseStepFieldsItemValidationMaxLengthMin)
                     .optional()
                     .describe("Maximum length in characters (inclusive). Mirrors `maxLength`."),
+                  enum: zod
+                    .array(zod.string())
+                    .optional()
+                    .describe(
+                      "Closed list of allowed values. Mirrors the JSON Schema `enum`\nkeyword on the underlying user property. When `type` is\n`select` the client renders these as options; for other types\nthe rule still applies as a membership check.\n",
+                    ),
                 })
                 .optional()
                 .describe(
@@ -805,16 +826,18 @@ export const GetFlowStepResponse = zod.object({
         )
         .default(getFlowStepResponseStepFieldsDefault)
         .describe(
-          "Unordered dictionary of input fields to collect. Keyed by field name.\nThe LiquidJS template controls which fields appear and in what order.\nField metadata (type, validation) is resolved by the engine from the\nflow's user schema.\n",
+          "Ordered list of input fields to collect. Field metadata (type, validation)\nis resolved by the engine from the flow's user schema. The LiquidJS\ntemplate iterates this array; for keyed lookup it builds a name-indexed\nmap locally.\n",
         ),
       actions: zod
-        .record(
-          zod.string(),
+        .array(
           zod
             .object({
+              name: zod
+                .string()
+                .describe("Action identifier. Sent back in the submit request as `action`."),
               primary: zod
                 .boolean()
-                .default(getFlowStepResponseStepActionsPrimaryDefault)
+                .default(getFlowStepResponseStepActionsItemPrimaryDefault)
                 .describe(
                   "Marks this as the default\/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n",
                 ),
@@ -826,12 +849,12 @@ export const GetFlowStepResponse = zod.object({
                 ),
             })
             .describe(
-              "Configuration for a user-invokable action on a step. Keyed by action name\nin the parent dictionary. The action name is sent back in the submit\nrequest as `action`.\n",
+              "Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`.\n",
             ),
         )
         .default(getFlowStepResponseStepActionsDefault)
         .describe(
-          "Unordered dictionary of available user actions. Keyed by action name.\nThe LiquidJS template controls positioning and presentation.\n",
+          "Ordered list of available user actions. The LiquidJS template iterates\nthis array and builds a name-indexed map locally for keyed lookup.\n",
         ),
       gates: zod
         .record(
@@ -900,7 +923,7 @@ export const GetFlowStepResponse = zod.object({
         ),
     })
     .describe(
-      "A step contains unordered capability dictionaries: what to collect (fields),\nwhat the user can do (actions), and what security gates must be satisfied (gates).\nLayout and element ordering are controlled by the LiquidJS template in `branding.liquid_template`.\n",
+      "A step contains ordered capability arrays: what to collect (fields),\nwhat the user can do (actions), and what security gates must be satisfied (gates).\nThe LiquidJS template in `branding.liquid_template` iterates these arrays in order\nand builds name-keyed indexes locally for lookup.\n",
     ),
   branding: zod
     .object({
@@ -1038,14 +1061,14 @@ export const SubmitFlowStepBody = zod.object({
     ),
 });
 
-export const submitFlowStepResponseStepFieldsRequiredDefault = false;
-export const submitFlowStepResponseStepFieldsValidationMinLengthMin = 0;
+export const submitFlowStepResponseStepFieldsItemRequiredDefault = false;
+export const submitFlowStepResponseStepFieldsItemValidationMinLengthMin = 0;
 
-export const submitFlowStepResponseStepFieldsValidationMaxLengthMin = 0;
+export const submitFlowStepResponseStepFieldsItemValidationMaxLengthMin = 0;
 
-export const submitFlowStepResponseStepFieldsDefault = {} as const;
-export const submitFlowStepResponseStepActionsPrimaryDefault = false;
-export const submitFlowStepResponseStepActionsDefault = {} as const;
+export const submitFlowStepResponseStepFieldsDefault = [];
+export const submitFlowStepResponseStepActionsItemPrimaryDefault = false;
+export const submitFlowStepResponseStepActionsDefault = [];
 export const submitFlowStepResponseStepGatesDefault = {} as const;
 export const submitFlowStepResponseStepSsoProvidersDefault = [];
 export const submitFlowStepResponseBrandingLayoutDefault = `centered`;
@@ -1093,19 +1116,34 @@ export const SubmitFlowStepResponse = zod.object({
         .optional()
         .describe("URL to navigate to (e.g., SSO provider redirect)."),
       fields: zod
-        .record(
-          zod.string(),
+        .array(
           zod
             .object({
+              name: zod
+                .string()
+                .describe(
+                  "Field name, matching a property in the flow's user schema. Carries\nthe submitted value back to the engine.\n",
+                ),
               type: zod
-                .enum(["text", "email", "password", "tel", "number", "url", "date", "hidden"])
+                .enum([
+                  "text",
+                  "email",
+                  "password",
+                  "tel",
+                  "number",
+                  "url",
+                  "date",
+                  "hidden",
+                  "checkbox",
+                  "select",
+                ])
                 .describe(
-                  "The input kind the client should render. Encodes the formats that\nhave a matching HTML input type (email, url, date). For other\nformats (e.g. uuid) the type is `text` and `validation.format`\ncarries the rule.\n",
+                  "The input kind the client should render. Encodes the formats and\nJSON types that map to a familiar HTML input: `email`, `url`,\n`date` come from `format`; `checkbox` from JSON `type: boolean`;\n`select` from a closed `enum`. For other formats (e.g. uuid) the\ntype is `text` and `validation.format` carries the rule.\n",
                 ),
               text_key: zod.string().describe("Localization key for the field label."),
               required: zod
                 .boolean()
-                .default(submitFlowStepResponseStepFieldsRequiredDefault)
+                .default(submitFlowStepResponseStepFieldsItemRequiredDefault)
                 .describe(
                   "The field MUST be present and non-empty on submit. Mirrors the\nschema's top-level `required` array.\n",
                 ),
@@ -1123,14 +1161,20 @@ export const SubmitFlowStepResponse = zod.object({
                     ),
                   min_length: zod
                     .number()
-                    .min(submitFlowStepResponseStepFieldsValidationMinLengthMin)
+                    .min(submitFlowStepResponseStepFieldsItemValidationMinLengthMin)
                     .optional()
                     .describe("Minimum length in characters (inclusive). Mirrors `minLength`."),
                   max_length: zod
                     .number()
-                    .min(submitFlowStepResponseStepFieldsValidationMaxLengthMin)
+                    .min(submitFlowStepResponseStepFieldsItemValidationMaxLengthMin)
                     .optional()
                     .describe("Maximum length in characters (inclusive). Mirrors `maxLength`."),
+                  enum: zod
+                    .array(zod.string())
+                    .optional()
+                    .describe(
+                      "Closed list of allowed values. Mirrors the JSON Schema `enum`\nkeyword on the underlying user property. When `type` is\n`select` the client renders these as options; for other types\nthe rule still applies as a membership check.\n",
+                    ),
                 })
                 .optional()
                 .describe(
@@ -1143,16 +1187,18 @@ export const SubmitFlowStepResponse = zod.object({
         )
         .default(submitFlowStepResponseStepFieldsDefault)
         .describe(
-          "Unordered dictionary of input fields to collect. Keyed by field name.\nThe LiquidJS template controls which fields appear and in what order.\nField metadata (type, validation) is resolved by the engine from the\nflow's user schema.\n",
+          "Ordered list of input fields to collect. Field metadata (type, validation)\nis resolved by the engine from the flow's user schema. The LiquidJS\ntemplate iterates this array; for keyed lookup it builds a name-indexed\nmap locally.\n",
         ),
       actions: zod
-        .record(
-          zod.string(),
+        .array(
           zod
             .object({
+              name: zod
+                .string()
+                .describe("Action identifier. Sent back in the submit request as `action`."),
               primary: zod
                 .boolean()
-                .default(submitFlowStepResponseStepActionsPrimaryDefault)
+                .default(submitFlowStepResponseStepActionsItemPrimaryDefault)
                 .describe(
                   "Marks this as the default\/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n",
                 ),
@@ -1164,12 +1210,12 @@ export const SubmitFlowStepResponse = zod.object({
                 ),
             })
             .describe(
-              "Configuration for a user-invokable action on a step. Keyed by action name\nin the parent dictionary. The action name is sent back in the submit\nrequest as `action`.\n",
+              "Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`.\n",
             ),
         )
         .default(submitFlowStepResponseStepActionsDefault)
         .describe(
-          "Unordered dictionary of available user actions. Keyed by action name.\nThe LiquidJS template controls positioning and presentation.\n",
+          "Ordered list of available user actions. The LiquidJS template iterates\nthis array and builds a name-indexed map locally for keyed lookup.\n",
         ),
       gates: zod
         .record(
@@ -1238,7 +1284,7 @@ export const SubmitFlowStepResponse = zod.object({
         ),
     })
     .describe(
-      "A step contains unordered capability dictionaries: what to collect (fields),\nwhat the user can do (actions), and what security gates must be satisfied (gates).\nLayout and element ordering are controlled by the LiquidJS template in `branding.liquid_template`.\n",
+      "A step contains ordered capability arrays: what to collect (fields),\nwhat the user can do (actions), and what security gates must be satisfied (gates).\nThe LiquidJS template in `branding.liquid_template` iterates these arrays in order\nand builds name-keyed indexes locally for lookup.\n",
     ),
   branding: zod
     .object({
@@ -2971,8 +3017,8 @@ Flow definitions are created based on the flow meta schema, which includes the f
 export const createFlowDefinitionBodyProjectIdRegExp = new RegExp("^[a-zA-Z0-9_-]+$");
 export const createFlowDefinitionBodyFlowDefinitionNameRegExp = new RegExp("^[a-z][a-z0-9-]\*$");
 export const createFlowDefinitionBodyFlowDefinitionStepsItemFieldsDefault = [];
-export const createFlowDefinitionBodyFlowDefinitionStepsItemActionsPrimaryDefault = false;
-export const createFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault = {} as const;
+export const createFlowDefinitionBodyFlowDefinitionStepsItemActionsItemPrimaryDefault = false;
+export const createFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault = [];
 export const createFlowDefinitionBodyFlowDefinitionStepsItemGatesDefault = {} as const;
 export const createFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersDefault = [];
 
@@ -3035,14 +3081,18 @@ export const CreateFlowDefinitionBody = zod.object({
                   "Schema property names to collect from the user. Each entry references\na property in the flow's user schema. The engine resolves field type,\nvalidation rules, and implicit outcomes from schema annotations\n(e.g. a property with `x-unique` set implies a `user_not_found`\ntransition outcome).\n",
                 ),
               actions: zod
-                .record(
-                  zod.string(),
+                .array(
                   zod
                     .object({
+                      name: zod
+                        .string()
+                        .describe(
+                          "Action identifier. Sent back in the submit request as `action`.",
+                        ),
                       primary: zod
                         .boolean()
                         .default(
-                          createFlowDefinitionBodyFlowDefinitionStepsItemActionsPrimaryDefault,
+                          createFlowDefinitionBodyFlowDefinitionStepsItemActionsItemPrimaryDefault,
                         )
                         .describe(
                           "Marks this as the default\/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n",
@@ -3055,12 +3105,12 @@ export const CreateFlowDefinitionBody = zod.object({
                         ),
                     })
                     .describe(
-                      "Configuration for a user-invokable action on a step. Keyed by action name\nin the parent dictionary. The action name is sent back in the submit\nrequest as `action`.\n",
+                      "Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`.\n",
                     ),
                 )
                 .default(createFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault)
                 .describe(
-                  "Actions the user can take. Keyed by action name.\nThe action name is what the frontend sends back in the submit request.\nIf omitted, the engine provides a default `submit` action.\n",
+                  "Ordered list of actions the user can take. The action name is what the\nfrontend sends back in the submit request. If omitted, the engine\nprovides a default `submit` action.\n",
                 ),
               gates: zod
                 .record(
@@ -3137,7 +3187,7 @@ export const CreateFlowDefinitionBody = zod.object({
                 )
                 .optional()
                 .describe(
-                  "Maps action\/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` dict. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n",
+                  "Maps action\/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` array. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n",
                 ),
             })
             .describe(
@@ -3247,8 +3297,8 @@ export const GetFlowDefinitionQueryParams = zod.strictObject({
 
 export const getFlowDefinitionResponseFlowDefinitionNameRegExp = new RegExp("^[a-z][a-z0-9-]\*$");
 export const getFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault = [];
-export const getFlowDefinitionResponseFlowDefinitionStepsItemActionsPrimaryDefault = false;
-export const getFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault = {} as const;
+export const getFlowDefinitionResponseFlowDefinitionStepsItemActionsItemPrimaryDefault = false;
+export const getFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault = [];
 export const getFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault = {} as const;
 export const getFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault = [];
 
@@ -3307,14 +3357,18 @@ export const GetFlowDefinitionResponse = zod.object({
                   "Schema property names to collect from the user. Each entry references\na property in the flow's user schema. The engine resolves field type,\nvalidation rules, and implicit outcomes from schema annotations\n(e.g. a property with `x-unique` set implies a `user_not_found`\ntransition outcome).\n",
                 ),
               actions: zod
-                .record(
-                  zod.string(),
+                .array(
                   zod
                     .object({
+                      name: zod
+                        .string()
+                        .describe(
+                          "Action identifier. Sent back in the submit request as `action`.",
+                        ),
                       primary: zod
                         .boolean()
                         .default(
-                          getFlowDefinitionResponseFlowDefinitionStepsItemActionsPrimaryDefault,
+                          getFlowDefinitionResponseFlowDefinitionStepsItemActionsItemPrimaryDefault,
                         )
                         .describe(
                           "Marks this as the default\/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n",
@@ -3327,12 +3381,12 @@ export const GetFlowDefinitionResponse = zod.object({
                         ),
                     })
                     .describe(
-                      "Configuration for a user-invokable action on a step. Keyed by action name\nin the parent dictionary. The action name is sent back in the submit\nrequest as `action`.\n",
+                      "Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`.\n",
                     ),
                 )
                 .default(getFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault)
                 .describe(
-                  "Actions the user can take. Keyed by action name.\nThe action name is what the frontend sends back in the submit request.\nIf omitted, the engine provides a default `submit` action.\n",
+                  "Ordered list of actions the user can take. The action name is what the\nfrontend sends back in the submit request. If omitted, the engine\nprovides a default `submit` action.\n",
                 ),
               gates: zod
                 .record(
@@ -3409,7 +3463,7 @@ export const GetFlowDefinitionResponse = zod.object({
                 )
                 .optional()
                 .describe(
-                  "Maps action\/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` dict. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n",
+                  "Maps action\/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` array. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n",
                 ),
             })
             .describe(
@@ -3446,8 +3500,8 @@ export const UpdateFlowDefinitionQueryParams = zod.strictObject({
 });
 
 export const updateFlowDefinitionBodyStepsItemFieldsDefault = [];
-export const updateFlowDefinitionBodyStepsItemActionsPrimaryDefault = false;
-export const updateFlowDefinitionBodyStepsItemActionsDefault = {} as const;
+export const updateFlowDefinitionBodyStepsItemActionsItemPrimaryDefault = false;
+export const updateFlowDefinitionBodyStepsItemActionsDefault = [];
 export const updateFlowDefinitionBodyStepsItemGatesDefault = {} as const;
 export const updateFlowDefinitionBodyStepsItemSsoProvidersDefault = [];
 
@@ -3494,13 +3548,15 @@ export const UpdateFlowDefinitionBody = zod
                 "Schema property names to collect from the user. Each entry references\na property in the flow's user schema. The engine resolves field type,\nvalidation rules, and implicit outcomes from schema annotations\n(e.g. a property with `x-unique` set implies a `user_not_found`\ntransition outcome).\n",
               ),
             actions: zod
-              .record(
-                zod.string(),
+              .array(
                 zod
                   .object({
+                    name: zod
+                      .string()
+                      .describe("Action identifier. Sent back in the submit request as `action`."),
                     primary: zod
                       .boolean()
-                      .default(updateFlowDefinitionBodyStepsItemActionsPrimaryDefault)
+                      .default(updateFlowDefinitionBodyStepsItemActionsItemPrimaryDefault)
                       .describe(
                         "Marks this as the default\/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n",
                       ),
@@ -3512,12 +3568,12 @@ export const UpdateFlowDefinitionBody = zod
                       ),
                   })
                   .describe(
-                    "Configuration for a user-invokable action on a step. Keyed by action name\nin the parent dictionary. The action name is sent back in the submit\nrequest as `action`.\n",
+                    "Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`.\n",
                   ),
               )
               .default(updateFlowDefinitionBodyStepsItemActionsDefault)
               .describe(
-                "Actions the user can take. Keyed by action name.\nThe action name is what the frontend sends back in the submit request.\nIf omitted, the engine provides a default `submit` action.\n",
+                "Ordered list of actions the user can take. The action name is what the\nfrontend sends back in the submit request. If omitted, the engine\nprovides a default `submit` action.\n",
               ),
             gates: zod
               .record(
@@ -3592,7 +3648,7 @@ export const UpdateFlowDefinitionBody = zod
               )
               .optional()
               .describe(
-                "Maps action\/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` dict. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n",
+                "Maps action\/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` array. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n",
               ),
           })
           .describe(
@@ -3613,8 +3669,8 @@ export const updateFlowDefinitionResponseFlowDefinitionNameRegExp = new RegExp(
   "^[a-z][a-z0-9-]\*$",
 );
 export const updateFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault = [];
-export const updateFlowDefinitionResponseFlowDefinitionStepsItemActionsPrimaryDefault = false;
-export const updateFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault = {} as const;
+export const updateFlowDefinitionResponseFlowDefinitionStepsItemActionsItemPrimaryDefault = false;
+export const updateFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault = [];
 export const updateFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault = {} as const;
 export const updateFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault = [];
 
@@ -3673,14 +3729,18 @@ export const UpdateFlowDefinitionResponse = zod.object({
                   "Schema property names to collect from the user. Each entry references\na property in the flow's user schema. The engine resolves field type,\nvalidation rules, and implicit outcomes from schema annotations\n(e.g. a property with `x-unique` set implies a `user_not_found`\ntransition outcome).\n",
                 ),
               actions: zod
-                .record(
-                  zod.string(),
+                .array(
                   zod
                     .object({
+                      name: zod
+                        .string()
+                        .describe(
+                          "Action identifier. Sent back in the submit request as `action`.",
+                        ),
                       primary: zod
                         .boolean()
                         .default(
-                          updateFlowDefinitionResponseFlowDefinitionStepsItemActionsPrimaryDefault,
+                          updateFlowDefinitionResponseFlowDefinitionStepsItemActionsItemPrimaryDefault,
                         )
                         .describe(
                           "Marks this as the default\/primary action. The runtime template uses\nthis hint to choose visual emphasis. At most one action per step\nshould be primary; this is not enforced here.\n",
@@ -3693,12 +3753,12 @@ export const UpdateFlowDefinitionResponse = zod.object({
                         ),
                     })
                     .describe(
-                      "Configuration for a user-invokable action on a step. Keyed by action name\nin the parent dictionary. The action name is sent back in the submit\nrequest as `action`.\n",
+                      "Configuration for a user-invokable action on a step. The `name` is sent\nback in the submit request as `action`.\n",
                     ),
                 )
                 .default(updateFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault)
                 .describe(
-                  "Actions the user can take. Keyed by action name.\nThe action name is what the frontend sends back in the submit request.\nIf omitted, the engine provides a default `submit` action.\n",
+                  "Ordered list of actions the user can take. The action name is what the\nfrontend sends back in the submit request. If omitted, the engine\nprovides a default `submit` action.\n",
                 ),
               gates: zod
                 .record(
@@ -3775,7 +3835,7 @@ export const UpdateFlowDefinitionResponse = zod.object({
                 )
                 .optional()
                 .describe(
-                  "Maps action\/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` dict. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n",
+                  "Maps action\/outcome names to their transition descriptor.\n\nKeys match action names from the `actions` array. Additional keys\ncome from implicit outcomes based on schema annotations\n(e.g. `user_not_found` from `x-unique` fields) and engine\nevents (e.g. `sso`, `callback`).\n",
                 ),
             })
             .describe(

package/src/generated/model/createFlow201.ts

@@ -18,9 +18,10 @@ export type CreateFlow201 = {
   session_id: string;
   /** Reserved for future rotation. The sealed `_zflow` cookie carries the flow state today. */
   session_token?: string;
-  /** A step contains unordered capability dictionaries: what to collect (fields),
+  /** A step contains ordered capability arrays: what to collect (fields),
   what the user can do (actions), and what security gates must be satisfied (gates).
-  Layout and element ordering are controlled by the LiquidJS template in `branding.liquid_template`.
+  The LiquidJS template in `branding.liquid_template` iterates these arrays in order
+  and builds name-keyed indexes locally for lookup.
    */
   step: CreateFlow201Step;
   /** Resolved branding configuration. Inherited from the app → team → project

package/src/generated/model/createFlow201Step.ts

@@ -5,18 +5,19 @@
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
-import type { CreateFlow201StepActions } from "./createFlow201StepActions";
+import type { CreateFlow201StepActionsItem } from "./createFlow201StepActionsItem";
 import type { CreateFlow201StepChallenge } from "./createFlow201StepChallenge";
 import type { CreateFlow201StepComplete } from "./createFlow201StepComplete";
-import type { CreateFlow201StepFields } from "./createFlow201StepFields";
+import type { CreateFlow201StepFieldsItem } from "./createFlow201StepFieldsItem";
 import type { CreateFlow201StepGates } from "./createFlow201StepGates";
 import type { CreateFlow201StepSsoProvidersItem } from "./createFlow201StepSsoProvidersItem";
 import type { CreateFlow201StepTexts } from "./createFlow201StepTexts";
 
 /**
- * A step contains unordered capability dictionaries: what to collect (fields),
+ * A step contains ordered capability arrays: what to collect (fields),
 what the user can do (actions), and what security gates must be satisfied (gates).
-Layout and element ordering are controlled by the LiquidJS template in `branding.liquid_template`.
+The LiquidJS template in `branding.liquid_template` iterates these arrays in order
+and builds name-keyed indexes locally for lookup.
 
  */
 export type CreateFlow201Step = {
@@ -35,16 +36,16 @@ export type CreateFlow201Step = {
   complete?: CreateFlow201StepComplete;
   /** URL to navigate to (e.g., SSO provider redirect). */
   redirect_url?: string;
-  /** Unordered dictionary of input fields to collect. Keyed by field name.
-  The LiquidJS template controls which fields appear and in what order.
-  Field metadata (type, validation) is resolved by the engine from the
-  flow's user schema.
+  /** Ordered list of input fields to collect. Field metadata (type, validation)
+  is resolved by the engine from the flow's user schema. The LiquidJS
+  template iterates this array; for keyed lookup it builds a name-indexed
+  map locally.
    */
-  fields: CreateFlow201StepFields;
-  /** Unordered dictionary of available user actions. Keyed by action name.
-  The LiquidJS template controls positioning and presentation.
+  fields: CreateFlow201StepFieldsItem[];
+  /** Ordered list of available user actions. The LiquidJS template iterates
+  this array and builds a name-indexed map locally for keyed lookup.
    */
-  actions: CreateFlow201StepActions;
+  actions: CreateFlow201StepActionsItem[];
   /** Security gates that must be satisfied before the step can be submitted.
   The engine injects gates dynamically based on policy, even if they
   are not declared in the flow definition.

package/src/generated/model/{createFlow201StepActions.ts → createFlow201StepActionsItem.ts}

@@ -7,22 +7,22 @@
  */
 
 /**
- * Unordered dictionary of available user actions. Keyed by action name.
-The LiquidJS template controls positioning and presentation.
+ * Configuration for a user-invokable action on a step. The `name` is sent
+back in the submit request as `action`.
 
  */
-export type CreateFlow201StepActions = {
-  [key: string]: {
-    /** Marks this as the default/primary action. The runtime template uses
+export type CreateFlow201StepActionsItem = {
+  /** Action identifier. Sent back in the submit request as `action`. */
+  name: string;
+  /** Marks this as the default/primary action. The runtime template uses
   this hint to choose visual emphasis. At most one action per step
   should be primary; this is not enforced here.
    */
-    primary?: boolean;
-    /** Optional localization key override for the action's label. When
+  primary?: boolean;
+  /** Optional localization key override for the action's label. When
   omitted, the engine derives a key from the step and action names.
   Display text is resolved client-side from a locale dictionary, never
   by the engine.
    */
-    text_key?: string;
-  };
+  text_key?: string;
 };

package/src/generated/model/createFlow201StepFieldsItem.ts

@@ -0,0 +1,46 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { CreateFlow201StepFieldsItemType } from "./createFlow201StepFieldsItemType";
+import type { CreateFlow201StepFieldsItemValidation } from "./createFlow201StepFieldsItemValidation";
+
+/**
+ * A data input capability. Describes what the user must provide.
+Does not contain display text — only a `text_key` resolved client-side.
+
+ */
+export type CreateFlow201StepFieldsItem = {
+  /** Field name, matching a property in the flow's user schema. Carries
+  the submitted value back to the engine.
+   */
+  name: string;
+  /** The input kind the client should render. Encodes the formats and
+  JSON types that map to a familiar HTML input: `email`, `url`,
+  `date` come from `format`; `checkbox` from JSON `type: boolean`;
+  `select` from a closed `enum`. For other formats (e.g. uuid) the
+  type is `text` and `validation.format` carries the rule.
+   */
+  type: CreateFlow201StepFieldsItemType;
+  /** Localization key for the field label. */
+  text_key: string;
+  /** The field MUST be present and non-empty on submit. Mirrors the
+  schema's top-level `required` array.
+   */
+  required?: boolean;
+  /** Pre-filled value (e.g., an identifier carried over from a pivot). */
+  value?: unknown;
+  /** Schema-derived rules the frontend SHOULD apply at input time. The
+  server runs the same rules on submit and is the only authority on
+  whether the step advances — these rules are a UX hint to reduce
+  round trips, not a contract guarantee.
+
+  Omitted entirely when the field has no rules beyond its `type`.
+  Each key mirrors a JSON Schema keyword on the underlying user
+  property; absent keys mean no rule.
+   */
+  validation?: CreateFlow201StepFieldsItemValidation;
+};