@zitadel/api 0.1.0-alpha.9 → 1.0.0-alpha.21

package/src/generated/model/{getToken4xx.ts → getEvent401.ts}

@@ -5,16 +5,16 @@
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
-import type { GetToken4xxDetails } from "./getToken4xxDetails";
+import type { GetEvent401Details } from "./getEvent401Details";
 
 /**
  * Standard error payload returned for failed API requests.
  */
-export type GetToken4xx = {
+export type GetEvent401 = {
   /** Stable machine-readable error code. */
   code: string;
   /** Human-readable explanation of the error. */
   message: string;
   /** Additional error-specific context. */
-  details?: GetToken4xxDetails;
+  details?: GetEvent401Details;
 };

package/src/generated/model/{getToken4xxDetails.ts → getEvent401Details.ts}

@@ -9,4 +9,4 @@
 /**
  * Additional error-specific context.
  */
-export type GetToken4xxDetails = { [key: string]: unknown };
+export type GetEvent401Details = { [key: string]: unknown };

package/src/generated/model/{getKeys4xx.ts → getEvent403.ts}

@@ -5,16 +5,16 @@
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
-import type { GetKeys4xxDetails } from "./getKeys4xxDetails";
+import type { GetEvent403Details } from "./getEvent403Details";
 
 /**
  * Standard error payload returned for failed API requests.
  */
-export type GetKeys4xx = {
+export type GetEvent403 = {
   /** Stable machine-readable error code. */
   code: string;
   /** Human-readable explanation of the error. */
   message: string;
   /** Additional error-specific context. */
-  details?: GetKeys4xxDetails;
+  details?: GetEvent403Details;
 };

package/src/generated/model/{getKeys4xxDetails.ts → getEvent403Details.ts}

@@ -9,4 +9,4 @@
 /**
  * Additional error-specific context.
  */
-export type GetKeys4xxDetails = { [key: string]: unknown };
+export type GetEvent403Details = { [key: string]: unknown };

package/src/generated/model/{listUsers500.ts → getEvent404.ts}

@@ -5,16 +5,16 @@
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
-import type { ListUsers500Details } from "./listUsers500Details";
+import type { GetEvent404Details } from "./getEvent404Details";
 
 /**
  * Standard error payload returned for failed API requests.
  */
-export type ListUsers500 = {
+export type GetEvent404 = {
   /** Stable machine-readable error code. */
   code: string;
   /** Human-readable explanation of the error. */
   message: string;
   /** Additional error-specific context. */
-  details?: ListUsers500Details;
+  details?: GetEvent404Details;
 };

package/src/generated/model/{listUsers400Details.ts → getEvent404Details.ts}

@@ -9,4 +9,4 @@
 /**
  * Additional error-specific context.
  */
-export type ListUsers400Details = { [key: string]: unknown };
+export type GetEvent404Details = { [key: string]: unknown };

package/src/generated/model/{authorizeGet400.ts → getEventDefault.ts}

@@ -5,16 +5,16 @@
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
-import type { AuthorizeGet400Details } from "./authorizeGet400Details";
+import type { GetEventDefaultDetails } from "./getEventDefaultDetails";
 
 /**
  * Standard error payload returned for failed API requests.
  */
-export type AuthorizeGet400 = {
+export type GetEventDefault = {
   /** Stable machine-readable error code. */
   code: string;
   /** Human-readable explanation of the error. */
   message: string;
   /** Additional error-specific context. */
-  details?: AuthorizeGet400Details;
+  details?: GetEventDefaultDetails;
 };

package/src/generated/model/{authorizeGet400Details.ts → getEventDefaultDetails.ts}

@@ -9,4 +9,4 @@
 /**
  * Additional error-specific context.
  */
-export type AuthorizeGet400Details = { [key: string]: unknown };
+export type GetEventDefaultDetails = { [key: string]: unknown };

package/src/generated/model/{getTeamParams.ts → getEventParams.ts}

@@ -6,7 +6,7 @@
  * OpenAPI spec version: 0.0.1
  */
 
-export type GetTeamParams = {
+export type GetEventParams = {
   /**
    * The unique identifier of the project
    * @pattern ^[a-zA-Z0-9_-]+$

package/src/generated/model/getFlowDefinition200.ts

@@ -6,14 +6,13 @@
  * OpenAPI spec version: 0.0.1
  */
 import type { GetFlowDefinition200FlowDefinition } from "./getFlowDefinition200FlowDefinition";
+import type { GetFlowDefinition200UserSchema } from "./getFlowDefinition200UserSchema";
 
 export type GetFlowDefinition200 = {
   /** Unique identifier for the flow definition. */
   id: string;
   /** Identifier of the project this flow definition belongs to. */
   project_id: string;
-  /** Status of the flow definition. */
-  status: string;
   /** A flow definition is the server-side configuration that describes a complete
   authentication or identity flow. It is NOT sent to the frontend — the flow
   engine evaluates it and produces FlowResponse payloads (steps with capability
@@ -24,6 +23,12 @@ export type GetFlowDefinition200 = {
   the purpose + audience when a flow is created via POST /flow.
    */
   flow_definition: GetFlowDefinition200FlowDefinition;
+  /** The user schema this flow operates on: the same object
+  `GET /schemas/{id}` returns. Present only when the request asked for it
+  with `expand=user_schema`; `null` when it was requested but the
+  referenced schema no longer resolves or the caller may not read it.
+   */
+  readonly user_schema?: GetFlowDefinition200UserSchema;
   created_at: string;
   updated_at: string;
 };

package/src/generated/model/getFlowDefinition200FlowDefinition.ts

@@ -6,6 +6,7 @@
  * OpenAPI spec version: 0.0.1
  */
 import type { GetFlowDefinition200FlowDefinitionAudience } from "./getFlowDefinition200FlowDefinitionAudience";
+import type { GetFlowDefinition200FlowDefinitionStatus } from "./getFlowDefinition200FlowDefinitionStatus";
 import type { GetFlowDefinition200FlowDefinitionStepsItem } from "./getFlowDefinition200FlowDefinitionStepsItem";
 
 /**
@@ -29,9 +30,21 @@ export type GetFlowDefinition200FlowDefinition = {
      * @pattern ^[a-z][a-z0-9-]*$
      */
   name: string;
-  /** User schema this flow operates on. Step `fields` reference properties
-  defined in this schema. The engine resolves field types, validation,
-  and implicit outcomes from schema annotations at runtime.
+  /** The lifecycle state of this flow definition.
+
+  active: The flow definition is ready to be used. The flow engine can select it for new flows.
+  draft: The engine will not select it for new flows, and existing flows must handle it gracefully if they reference this definition.
+
+  Allowed transitions:
+  - draft -> active: To activate the flow definition.
+  - active -> draft: To remove the flow definition from active use immediately.
+   */
+  status: GetFlowDefinition200FlowDefinitionStatus;
+  /** Server-assigned identifier of the user schema this flow operates on,
+  as returned by `POST /schemas`. Opaque to the client — the shape is a
+  server implementation detail. Step `fields` reference properties
+  defined in the resolved schema; the engine resolves field types, validation, and
+  implicit outcomes from schema annotations at runtime.
    */
   user_schema: string;
   /** Maps each purpose this definition handles to its entry-point step.

package/src/generated/model/getFlowDefinition200FlowDefinitionStatus.ts

@@ -0,0 +1,26 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * The lifecycle state of this flow definition.
+
+active: The flow definition is ready to be used. The flow engine can select it for new flows.
+draft: The engine will not select it for new flows, and existing flows must handle it gracefully if they reference this definition.
+
+Allowed transitions:
+- draft -> active: To activate the flow definition.
+- active -> draft: To remove the flow definition from active use immediately.
+
+ */
+export type GetFlowDefinition200FlowDefinitionStatus =
+  (typeof GetFlowDefinition200FlowDefinitionStatus)[keyof typeof GetFlowDefinition200FlowDefinitionStatus];
+
+export const GetFlowDefinition200FlowDefinitionStatus = {
+  active: "active",
+  draft: "draft",
+} as const;

package/src/generated/model/getFlowDefinition200FlowDefinitionStepsItemActionsItem.ts

@@ -5,15 +5,29 @@
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
+import type { GetFlowDefinition200FlowDefinitionStepsItemActionsItemKind } from "./getFlowDefinition200FlowDefinitionStepsItemActionsItemKind";
 
 /**
  * Configuration for a user-invokable action on a step. The `name` is sent
-back in the submit request as `action`.
+back in the submit request as `action`; the engine resolves the action's
+declared `kind` to decide how to handle the submission.
 
  */
 export type GetFlowDefinition200FlowDefinitionStepsItemActionsItem = {
   /** Action identifier. Sent back in the submit request as `action`. */
   name: string;
+  /** Classifies how the engine handles this action:
+  - `submit`: collect the step's fields and run validate/dispatch/on_success.
+  - `passkey`: issue a WebAuthn assertion challenge; the matching transition
+    fires once the returned assertion verifies.
+  - `passkey_register`: issue a WebAuthn registration challenge; the matching
+    transition fires once the returned attestation verifies.
+  - `navigate`: route through the transition without running the input
+    pipeline. Used for pure-routing actions declared in the flow definition.
+  - `back`: return the user to the previous step. Surfaced by the engine
+    when going back is available.
+   */
+  kind: GetFlowDefinition200FlowDefinitionStepsItemActionsItemKind;
   /** Marks this as the default/primary action. The runtime template uses
   this hint to choose visual emphasis. At most one action per step
   should be primary; this is not enforced here.

package/src/generated/model/getFlowDefinition200FlowDefinitionStepsItemActionsItemKind.ts

@@ -0,0 +1,31 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Classifies how the engine handles this action:
+- `submit`: collect the step's fields and run validate/dispatch/on_success.
+- `passkey`: issue a WebAuthn assertion challenge; the matching transition
+  fires once the returned assertion verifies.
+- `passkey_register`: issue a WebAuthn registration challenge; the matching
+  transition fires once the returned attestation verifies.
+- `navigate`: route through the transition without running the input
+  pipeline. Used for pure-routing actions declared in the flow definition.
+- `back`: return the user to the previous step. Surfaced by the engine
+  when going back is available.
+
+ */
+export type GetFlowDefinition200FlowDefinitionStepsItemActionsItemKind =
+  (typeof GetFlowDefinition200FlowDefinitionStepsItemActionsItemKind)[keyof typeof GetFlowDefinition200FlowDefinitionStepsItemActionsItemKind];
+
+export const GetFlowDefinition200FlowDefinitionStepsItemActionsItemKind = {
+  submit: "submit",
+  passkey: "passkey",
+  passkey_register: "passkey_register",
+  navigate: "navigate",
+  back: "back",
+} as const;

package/src/generated/model/getFlowDefinition200FlowDefinitionStepsItemTransitions.ts

@@ -31,5 +31,16 @@ export type GetFlowDefinition200FlowDefinitionStepsItemTransitions = {
     Example: login → recovery → back to login.
    */
     action?: "switch" | "pivot" | null;
+    /** Local re-purposing. When set, taking this transition changes the
+  flow's current purpose to this value — the dispatch mode a step's
+  challenges run under — while the flow's original purpose stays
+  pinned. Must be a purpose this definition serves, and `target`
+  must be that purpose's entry step. Mutually exclusive with
+  `action`: a transition either re-purposes within this flow or
+  targets another flow, never both.
+  Example: a "Sign up" navigation on the login identifier step
+  (`{ target: register, purpose: register }`).
+   */
+    purpose?: "login" | "register" | "recovery" | "profiling" | "reauth" | "link_account" | null;
   };
 };

package/src/generated/model/getFlowDefinition200UserSchema.ts

@@ -0,0 +1,103 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * The user schema this flow operates on: the same object
+`GET /schemas/{id}` returns. Present only when the request asked for it
+with `expand=user_schema`; `null` when it was requested but the
+referenced schema no longer resolves or the caller may not read it.
+
+ */
+export type GetFlowDefinition200UserSchema = {
+  /** The resource id: the server-minted `sch_*` identifier, or the
+  customer-supplied `$id` URI when the document declared one at creation.
+   */
+  readonly id: string;
+  /** The customer-authored JSON Schema document, served verbatim. */
+  schema: {
+    /**
+     * The type of user this schema describes. This is a customer chosen name.
+
+     * @maxLength 256
+     */
+    objectType?: string;
+    /** Discriminator value for a user schema create request. */
+    kind: "user-schema";
+    /** The user Schema version used for this schema. */
+    metaSchema: string;
+    /** A list of authentication methods supported by the user definition. */
+    "x-auth-methods": {
+      password?: {
+        /** Whether the authentication method is enabled or not */
+        enabled: boolean;
+      };
+      passkey?: {
+        /** Whether the authentication method is enabled or not */
+        enabled: boolean;
+      };
+      magic_link?: {
+        /** Whether the authentication method is enabled or not */
+        enabled: boolean;
+      };
+      sso?: {
+        /** Whether the authentication method is enabled or not */
+        enabled: boolean;
+      };
+      otp?: {
+        /** Whether the authentication method is enabled or not */
+        enabled: boolean;
+      };
+    };
+    /**
+     * Path of the leaf property whose value identifies a user (nested leaves
+  are addressed by their dot-joined attribute path). The property must
+  carry `x-unique` "project". Required when an auth method needing
+  identifier-first dispatch (password) is enabled. Passkey is exempt:
+  discoverable credentials identify the user through the assertion
+  itself, so passkey-only and API-managed schemas may designate nothing;
+  flows using identifier-first passkey are validated at the flow level
+  instead.
+
+     * @minLength 1
+     */
+    "x-identifier"?: string;
+    /**
+     * Ordered leaf property paths whose values, joined with a space, render
+  the user's display name.
+
+     * @minItems 1
+     */
+    "x-display"?: string[];
+    /** A map of additional properties for the user definition, where the
+  key is the property name and the value is the property schema
+   */
+    properties?: {
+      [key: string]: {
+        /** The level of uniqueness for this property, if applicable */
+        "x-unique"?: "unspecified" | "project" | "team" | null;
+        /** The claim name for this property, if applicable */
+        "x-claim"?: string | null;
+        /** Whether this property's value may appear in audit event payloads. Audit
+  payloads are deny-by-default: a property without this annotation
+  contributes its key but never its value.
+   */
+        "x-audit"?: boolean;
+        /** A map of additional properties for the user definition, where the key is
+  the property name and the value is the property schema.
+   */
+        properties?: { [key: string]: unknown };
+        [key: string]: unknown;
+      };
+    };
+    [key: string]: unknown;
+  };
+  metadata: {
+    /** The time when the schema was created. */
+    created_at: string;
+  };
+} | null;

package/src/generated/model/getFlowDefinitionDefault.ts

@@ -5,16 +5,75 @@
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
-import type { GetFlowDefinitionDefaultDetails } from "./getFlowDefinitionDefaultDetails";
 
-/**
- * Standard error payload returned for failed API requests.
- */
-export type GetFlowDefinitionDefault = {
-  /** Stable machine-readable error code. */
-  code: string;
-  /** Human-readable explanation of the error. */
-  message: string;
-  /** Additional error-specific context. */
-  details?: GetFlowDefinitionDefaultDetails;
-};
+export type GetFlowDefinitionDefault =
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "auth.unauthorized";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "flowdef.not_found";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "flowdef.permission_denied";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "internal";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "flowdef.missing_id";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "flowdef.missing_project_id";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "req.invalid";
+    });

package/src/generated/model/getFlowStep200.ts

@@ -24,9 +24,14 @@ export type GetFlowStep200 = {
   and builds name-keyed indexes locally for lookup.
    */
   step: GetFlowStep200Step;
-  /** Resolved branding configuration. Inherited from the app → team → project
-  hierarchy at flow creation time (most specific wins). Read-only projection —
-  branding is configured via the Team/App Branding API, not the Flow API.
+  /** Branding configuration. Appears in two places with one shape:
+
+  - On flow responses as a read-only projection: the server resolves the
+    latest branding revision for the project per step response (falling
+    back to built-in defaults when none is stored). Branding is configured
+    via the Branding API / `zitadel apply`, not the Flow API.
+  - As the request body of `POST /branding`, which publishes the same
+    shape as a new immutable revision (see ADR 040).
    */
   branding?: GetFlowStep200Branding;
   /** Present when `step.complete` is `redirect`. */

package/src/generated/model/getFlowStep200Branding.ts

@@ -8,25 +8,41 @@
 import type { GetFlowStep200BrandingLayout } from "./getFlowStep200BrandingLayout";
 
 /**
- * Resolved branding configuration. Inherited from the app → team → project
-hierarchy at flow creation time (most specific wins). Read-only projection —
-branding is configured via the Team/App Branding API, not the Flow API.
+ * Branding configuration. Appears in two places with one shape:
+
+- On flow responses as a read-only projection: the server resolves the
+  latest branding revision for the project per step response (falling
+  back to built-in defaults when none is stored). Branding is configured
+  via the Branding API / `zitadel apply`, not the Flow API.
+- As the request body of `POST /branding`, which publishes the same
+  shape as a new immutable revision (see ADR 040).
 
  */
 export type GetFlowStep200Branding = {
   /** Layout preset selector. The default.liquid master template uses this
   to branch into layout variants. Customers who eject the template
-  can ignore this field entirely.
+  can ignore this field entirely; it also serves as the degrade target
+  when a custom template fails component-side validation.
    */
   layout?: GetFlowStep200BrandingLayout;
-  /** The LiquidJS template string for rendering this step. The orchestrator
+  /**
+     * The LiquidJS template string for rendering this step. The orchestrator
   parses this template, injects the capability dictionaries as context,
   and renders the output HTML into its Shadow DOM.
-   */
+
+     * @maxLength 131072
+     */
   liquid_template?: string;
   /** Team logo URL. */
   logo_url?: string;
-  /** Custom font URL (e.g., Google Fonts CSS). */
+  /** Custom font stylesheet URL (e.g., Google Fonts CSS). Read-only in
+  v1: `POST /branding` rejects a non-empty value, because the login
+  component loads this stylesheet at document level (shadow-scoped
+  `@font-face` rules never register faces) and an arbitrary URL would
+  grant `branding.write` page-wide CSS control over the embedding
+  application. Safe tenant font delivery is an ADR 040 follow-up;
+  until then, load fonts from the embedding page.
+   */
   font_url?: string;
   /** Hero/background image URL (used by split layout). */
   hero_url?: string;

package/src/generated/model/getFlowStep200BrandingLayout.ts

@@ -9,7 +9,8 @@
 /**
  * Layout preset selector. The default.liquid master template uses this
 to branch into layout variants. Customers who eject the template
-can ignore this field entirely.
+can ignore this field entirely; it also serves as the degrade target
+when a custom template fails component-side validation.
 
  */
 export type GetFlowStep200BrandingLayout =

package/src/generated/model/getFlowStep200Step.ts

@@ -27,7 +27,17 @@ export type GetFlowStep200Step = {
   The backend never sends display text — only semantic keys.
    */
   texts?: GetFlowStep200StepTexts;
-  /** Error message from a previous failed submission. */
+  /** Error from a previous failed submission. Field-validation failures
+  carry localisation text keys: `error.<field>_<rule>` per violation
+  (e.g. `error.email_required`; the `format` rule is spelled
+  `error.<field>_invalid`), multiple violations joined with `"; "`.
+  Field names appear verbatim, so clients localise unknown keys via
+  the generic `error.field_<rule>` catalog entries. Other engine
+  failures carry `error.*` catalog keys as well (e.g.
+  `error.invalid_credentials`, `error.passkey_invalid`); a
+  non-`error.` payload is an outcome token (e.g. `user_not_found`)
+  that clients keep verbatim.
+   */
   error?: string | null;
   /** Present only on terminal steps. Tells the frontend what to do:
   - redirect: navigate to redirect_uri immediately (OIDC/SAML done)

package/src/generated/model/getFlowStep200StepActionsItem.ts

@@ -5,15 +5,29 @@
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
+import type { GetFlowStep200StepActionsItemKind } from "./getFlowStep200StepActionsItemKind";
 
 /**
  * Configuration for a user-invokable action on a step. The `name` is sent
-back in the submit request as `action`.
+back in the submit request as `action`; the engine resolves the action's
+declared `kind` to decide how to handle the submission.
 
  */
 export type GetFlowStep200StepActionsItem = {
   /** Action identifier. Sent back in the submit request as `action`. */
   name: string;
+  /** Classifies how the engine handles this action:
+  - `submit`: collect the step's fields and run validate/dispatch/on_success.
+  - `passkey`: issue a WebAuthn assertion challenge; the matching transition
+    fires once the returned assertion verifies.
+  - `passkey_register`: issue a WebAuthn registration challenge; the matching
+    transition fires once the returned attestation verifies.
+  - `navigate`: route through the transition without running the input
+    pipeline. Used for pure-routing actions declared in the flow definition.
+  - `back`: return the user to the previous step. Surfaced by the engine
+    when going back is available.
+   */
+  kind: GetFlowStep200StepActionsItemKind;
   /** Marks this as the default/primary action. The runtime template uses
   this hint to choose visual emphasis. At most one action per step
   should be primary; this is not enforced here.

package/src/generated/model/getFlowStep200StepActionsItemKind.ts

@@ -0,0 +1,31 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Classifies how the engine handles this action:
+- `submit`: collect the step's fields and run validate/dispatch/on_success.
+- `passkey`: issue a WebAuthn assertion challenge; the matching transition
+  fires once the returned assertion verifies.
+- `passkey_register`: issue a WebAuthn registration challenge; the matching
+  transition fires once the returned attestation verifies.
+- `navigate`: route through the transition without running the input
+  pipeline. Used for pure-routing actions declared in the flow definition.
+- `back`: return the user to the previous step. Surfaced by the engine
+  when going back is available.
+
+ */
+export type GetFlowStep200StepActionsItemKind =
+  (typeof GetFlowStep200StepActionsItemKind)[keyof typeof GetFlowStep200StepActionsItemKind];
+
+export const GetFlowStep200StepActionsItemKind = {
+  submit: "submit",
+  passkey: "passkey",
+  passkey_register: "passkey_register",
+  navigate: "navigate",
+  back: "back",
+} as const;

package/src/generated/model/getFlowStep200StepChallengeMethod.ts

@@ -14,4 +14,5 @@ export type GetFlowStep200StepChallengeMethod =
 
 export const GetFlowStep200StepChallengeMethod = {
   passkey: "passkey",
+  passkey_register: "passkey_register",
 } as const;