@zitadel/api 0.1.0-alpha.9 → 1.0.0-alpha.21

package/src/generated/model/submitFlowStepDefault.ts

@@ -5,16 +5,265 @@
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
-import type { SubmitFlowStepDefaultDetails } from "./submitFlowStepDefaultDetails";
 
-/**
- * Standard error payload returned for failed API requests.
- */
-export type SubmitFlowStepDefault = {
-  /** Stable machine-readable error code. */
-  code: string;
-  /** Human-readable explanation of the error. */
-  message: string;
-  /** Additional error-specific context. */
-  details?: SubmitFlowStepDefaultDetails;
-};
+export type SubmitFlowStepDefault =
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "att.already_handed_off";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "att.invalid_request";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "att.invalid_state";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "att.not_completed";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "att.not_found";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "att.proof_rejected";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "att.stale_challenge";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "enc_key.decrypt_failed";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "enc_key.encrypt_failed";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "enc_key.not_found";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "evt.invalid";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "flow.cookie_expired";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "flow.cookie_invalid";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "flow.integrity";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "flow.invalid_action";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "flow.not_found";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "flow.unsupported";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "internal";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "tkn.invalid";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "not_implemented";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "req.invalid";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "enc_key.unknown_alg";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "unavailable";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "user.already_exists";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "user.invalid";
+    })
+  | ({
+      /** Stable machine-readable error code. */
+      code: string;
+      /** Human-readable explanation of the error. */
+      message: string;
+      /** Additional error-specific context. */
+      details?: { [key: string]: unknown };
+    } & {
+      code: "user.not_found";
+    });

package/src/generated/model/updateFlowDefinition200.ts

@@ -6,14 +6,13 @@
  * OpenAPI spec version: 0.0.1
  */
 import type { UpdateFlowDefinition200FlowDefinition } from "./updateFlowDefinition200FlowDefinition";
+import type { UpdateFlowDefinition200UserSchema } from "./updateFlowDefinition200UserSchema";
 
 export type UpdateFlowDefinition200 = {
   /** Unique identifier for the flow definition. */
   id: string;
   /** Identifier of the project this flow definition belongs to. */
   project_id: string;
-  /** Status of the flow definition. */
-  status: string;
   /** A flow definition is the server-side configuration that describes a complete
   authentication or identity flow. It is NOT sent to the frontend — the flow
   engine evaluates it and produces FlowResponse payloads (steps with capability
@@ -24,6 +23,12 @@ export type UpdateFlowDefinition200 = {
   the purpose + audience when a flow is created via POST /flow.
    */
   flow_definition: UpdateFlowDefinition200FlowDefinition;
+  /** The user schema this flow operates on: the same object
+  `GET /schemas/{id}` returns. Present only when the request asked for it
+  with `expand=user_schema`; `null` when it was requested but the
+  referenced schema no longer resolves or the caller may not read it.
+   */
+  readonly user_schema?: UpdateFlowDefinition200UserSchema;
   created_at: string;
   updated_at: string;
 };

package/src/generated/model/updateFlowDefinition200FlowDefinition.ts

@@ -6,6 +6,7 @@
  * OpenAPI spec version: 0.0.1
  */
 import type { UpdateFlowDefinition200FlowDefinitionAudience } from "./updateFlowDefinition200FlowDefinitionAudience";
+import type { UpdateFlowDefinition200FlowDefinitionStatus } from "./updateFlowDefinition200FlowDefinitionStatus";
 import type { UpdateFlowDefinition200FlowDefinitionStepsItem } from "./updateFlowDefinition200FlowDefinitionStepsItem";
 
 /**
@@ -29,9 +30,21 @@ export type UpdateFlowDefinition200FlowDefinition = {
      * @pattern ^[a-z][a-z0-9-]*$
      */
   name: string;
-  /** User schema this flow operates on. Step `fields` reference properties
-  defined in this schema. The engine resolves field types, validation,
-  and implicit outcomes from schema annotations at runtime.
+  /** The lifecycle state of this flow definition.
+
+  active: The flow definition is ready to be used. The flow engine can select it for new flows.
+  draft: The engine will not select it for new flows, and existing flows must handle it gracefully if they reference this definition.
+
+  Allowed transitions:
+  - draft -> active: To activate the flow definition.
+  - active -> draft: To remove the flow definition from active use immediately.
+   */
+  status: UpdateFlowDefinition200FlowDefinitionStatus;
+  /** Server-assigned identifier of the user schema this flow operates on,
+  as returned by `POST /schemas`. Opaque to the client — the shape is a
+  server implementation detail. Step `fields` reference properties
+  defined in the resolved schema; the engine resolves field types, validation, and
+  implicit outcomes from schema annotations at runtime.
    */
   user_schema: string;
   /** Maps each purpose this definition handles to its entry-point step.

package/src/generated/model/updateFlowDefinition200FlowDefinitionStatus.ts

@@ -0,0 +1,26 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * The lifecycle state of this flow definition.
+
+active: The flow definition is ready to be used. The flow engine can select it for new flows.
+draft: The engine will not select it for new flows, and existing flows must handle it gracefully if they reference this definition.
+
+Allowed transitions:
+- draft -> active: To activate the flow definition.
+- active -> draft: To remove the flow definition from active use immediately.
+
+ */
+export type UpdateFlowDefinition200FlowDefinitionStatus =
+  (typeof UpdateFlowDefinition200FlowDefinitionStatus)[keyof typeof UpdateFlowDefinition200FlowDefinitionStatus];
+
+export const UpdateFlowDefinition200FlowDefinitionStatus = {
+  active: "active",
+  draft: "draft",
+} as const;

package/src/generated/model/updateFlowDefinition200FlowDefinitionStepsItemActionsItem.ts

@@ -5,15 +5,29 @@
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
+import type { UpdateFlowDefinition200FlowDefinitionStepsItemActionsItemKind } from "./updateFlowDefinition200FlowDefinitionStepsItemActionsItemKind";
 
 /**
  * Configuration for a user-invokable action on a step. The `name` is sent
-back in the submit request as `action`.
+back in the submit request as `action`; the engine resolves the action's
+declared `kind` to decide how to handle the submission.
 
  */
 export type UpdateFlowDefinition200FlowDefinitionStepsItemActionsItem = {
   /** Action identifier. Sent back in the submit request as `action`. */
   name: string;
+  /** Classifies how the engine handles this action:
+  - `submit`: collect the step's fields and run validate/dispatch/on_success.
+  - `passkey`: issue a WebAuthn assertion challenge; the matching transition
+    fires once the returned assertion verifies.
+  - `passkey_register`: issue a WebAuthn registration challenge; the matching
+    transition fires once the returned attestation verifies.
+  - `navigate`: route through the transition without running the input
+    pipeline. Used for pure-routing actions declared in the flow definition.
+  - `back`: return the user to the previous step. Surfaced by the engine
+    when going back is available.
+   */
+  kind: UpdateFlowDefinition200FlowDefinitionStepsItemActionsItemKind;
   /** Marks this as the default/primary action. The runtime template uses
   this hint to choose visual emphasis. At most one action per step
   should be primary; this is not enforced here.

package/src/generated/model/updateFlowDefinition200FlowDefinitionStepsItemActionsItemKind.ts

@@ -0,0 +1,31 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * Classifies how the engine handles this action:
+- `submit`: collect the step's fields and run validate/dispatch/on_success.
+- `passkey`: issue a WebAuthn assertion challenge; the matching transition
+  fires once the returned assertion verifies.
+- `passkey_register`: issue a WebAuthn registration challenge; the matching
+  transition fires once the returned attestation verifies.
+- `navigate`: route through the transition without running the input
+  pipeline. Used for pure-routing actions declared in the flow definition.
+- `back`: return the user to the previous step. Surfaced by the engine
+  when going back is available.
+
+ */
+export type UpdateFlowDefinition200FlowDefinitionStepsItemActionsItemKind =
+  (typeof UpdateFlowDefinition200FlowDefinitionStepsItemActionsItemKind)[keyof typeof UpdateFlowDefinition200FlowDefinitionStepsItemActionsItemKind];
+
+export const UpdateFlowDefinition200FlowDefinitionStepsItemActionsItemKind = {
+  submit: "submit",
+  passkey: "passkey",
+  passkey_register: "passkey_register",
+  navigate: "navigate",
+  back: "back",
+} as const;

package/src/generated/model/updateFlowDefinition200FlowDefinitionStepsItemTransitions.ts

@@ -31,5 +31,16 @@ export type UpdateFlowDefinition200FlowDefinitionStepsItemTransitions = {
     Example: login → recovery → back to login.
    */
     action?: "switch" | "pivot" | null;
+    /** Local re-purposing. When set, taking this transition changes the
+  flow's current purpose to this value — the dispatch mode a step's
+  challenges run under — while the flow's original purpose stays
+  pinned. Must be a purpose this definition serves, and `target`
+  must be that purpose's entry step. Mutually exclusive with
+  `action`: a transition either re-purposes within this flow or
+  targets another flow, never both.
+  Example: a "Sign up" navigation on the login identifier step
+  (`{ target: register, purpose: register }`).
+   */
+    purpose?: "login" | "register" | "recovery" | "profiling" | "reauth" | "link_account" | null;
   };
 };

package/src/generated/model/updateFlowDefinition200UserSchema.ts

@@ -0,0 +1,103 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+
+/**
+ * The user schema this flow operates on: the same object
+`GET /schemas/{id}` returns. Present only when the request asked for it
+with `expand=user_schema`; `null` when it was requested but the
+referenced schema no longer resolves or the caller may not read it.
+
+ */
+export type UpdateFlowDefinition200UserSchema = {
+  /** The resource id: the server-minted `sch_*` identifier, or the
+  customer-supplied `$id` URI when the document declared one at creation.
+   */
+  readonly id: string;
+  /** The customer-authored JSON Schema document, served verbatim. */
+  schema: {
+    /**
+     * The type of user this schema describes. This is a customer chosen name.
+
+     * @maxLength 256
+     */
+    objectType?: string;
+    /** Discriminator value for a user schema create request. */
+    kind: "user-schema";
+    /** The user Schema version used for this schema. */
+    metaSchema: string;
+    /** A list of authentication methods supported by the user definition. */
+    "x-auth-methods": {
+      password?: {
+        /** Whether the authentication method is enabled or not */
+        enabled: boolean;
+      };
+      passkey?: {
+        /** Whether the authentication method is enabled or not */
+        enabled: boolean;
+      };
+      magic_link?: {
+        /** Whether the authentication method is enabled or not */
+        enabled: boolean;
+      };
+      sso?: {
+        /** Whether the authentication method is enabled or not */
+        enabled: boolean;
+      };
+      otp?: {
+        /** Whether the authentication method is enabled or not */
+        enabled: boolean;
+      };
+    };
+    /**
+     * Path of the leaf property whose value identifies a user (nested leaves
+  are addressed by their dot-joined attribute path). The property must
+  carry `x-unique` "project". Required when an auth method needing
+  identifier-first dispatch (password) is enabled. Passkey is exempt:
+  discoverable credentials identify the user through the assertion
+  itself, so passkey-only and API-managed schemas may designate nothing;
+  flows using identifier-first passkey are validated at the flow level
+  instead.
+
+     * @minLength 1
+     */
+    "x-identifier"?: string;
+    /**
+     * Ordered leaf property paths whose values, joined with a space, render
+  the user's display name.
+
+     * @minItems 1
+     */
+    "x-display"?: string[];
+    /** A map of additional properties for the user definition, where the
+  key is the property name and the value is the property schema
+   */
+    properties?: {
+      [key: string]: {
+        /** The level of uniqueness for this property, if applicable */
+        "x-unique"?: "unspecified" | "project" | "team" | null;
+        /** The claim name for this property, if applicable */
+        "x-claim"?: string | null;
+        /** Whether this property's value may appear in audit event payloads. Audit
+  payloads are deny-by-default: a property without this annotation
+  contributes its key but never its value.
+   */
+        "x-audit"?: boolean;
+        /** A map of additional properties for the user definition, where the key is
+  the property name and the value is the property schema.
+   */
+        properties?: { [key: string]: unknown };
+        [key: string]: unknown;
+      };
+    };
+    [key: string]: unknown;
+  };
+  metadata: {
+    /** The time when the schema was created. */
+    created_at: string;
+  };
+} | null;

package/src/generated/model/updateFlowDefinitionBody.ts

@@ -5,41 +5,26 @@
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
-import type { UpdateFlowDefinitionBodyAudience } from "./updateFlowDefinitionBodyAudience";
-import type { UpdateFlowDefinitionBodyStepsItem } from "./updateFlowDefinitionBodyStepsItem";
+import type { UpdateFlowDefinitionBodyFlowDefinition } from "./updateFlowDefinitionBodyFlowDefinition";
 
 /**
- * Partial update for a flow definition. Only provided fields are replaced;
-omitted fields retain their current server-side values.
-
-Collection fields (`steps`, `purposes`) are treated atomically: if
-provided, the entire array/object is replaced. If omitted, the current
-value is preserved unchanged.
-
-`name` is a stable identifier and cannot be changed after creation.
+ * Replaces the existing flow definition.
 
  */
 export type UpdateFlowDefinitionBody = {
-  /** User schema this flow operates on. Replaces the current value if provided.
-   */
-  user_schema?: string;
-  /** Replaces the full purpose-to-entry-step map if provided. Keys are
-  purpose names; values must match a `name` in `steps`.
+  /** URI of the server-published flow definition schema this definition was
+  authored against. The server uses this to validate the definition.
+  If not provided, the engine will use the latest schema version for validation.
    */
-  purposes?: Partial<
-    Record<"login" | "register" | "recovery" | "profiling" | "reauth" | "link_account", string>
-  >;
-  /** Scopes which teams or apps this flow definition applies to. Empty or
-  omitted fields mean "no restriction"; when both are empty the definition
-  matches every request in the project. The engine picks the most specific
-  matching definition: app > team > project-wide.
-   */
-  audience?: UpdateFlowDefinitionBodyAudience;
-  /**
-     * Replaces the full steps array if provided. Partial step lists are not
-  supported — supply all steps when updating this field.
+  schema_uri?: string;
+  /** A flow definition is the server-side configuration that describes a complete
+  authentication or identity flow. It is NOT sent to the frontend — the flow
+  engine evaluates it and produces FlowResponse payloads (steps with capability
+  dictionaries) for the client.
 
-     * @minItems 1
-     */
-  steps?: UpdateFlowDefinitionBodyStepsItem[];
+  Flow definitions are created by administrators and stored in the project/team
+  configuration hierarchy. The engine selects the matching definition based on
+  the purpose + audience when a flow is created via POST /flow.
+   */
+  flow_definition: UpdateFlowDefinitionBodyFlowDefinition;
 };

package/src/generated/model/updateFlowDefinitionBodyFlowDefinition.ts

@@ -0,0 +1,71 @@
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+import type { UpdateFlowDefinitionBodyFlowDefinitionAudience } from "./updateFlowDefinitionBodyFlowDefinitionAudience";
+import type { UpdateFlowDefinitionBodyFlowDefinitionStatus } from "./updateFlowDefinitionBodyFlowDefinitionStatus";
+import type { UpdateFlowDefinitionBodyFlowDefinitionStepsItem } from "./updateFlowDefinitionBodyFlowDefinitionStepsItem";
+
+/**
+ * A flow definition is the server-side configuration that describes a complete
+authentication or identity flow. It is NOT sent to the frontend — the flow
+engine evaluates it and produces FlowResponse payloads (steps with capability
+dictionaries) for the client.
+
+Flow definitions are created by administrators and stored in the project/team
+configuration hierarchy. The engine selects the matching definition based on
+the purpose + audience when a flow is created via POST /flow.
+
+ */
+export type UpdateFlowDefinitionBodyFlowDefinition = {
+  /**
+     * Stable identifier for this flow, used as the target of cross-flow
+  `switch` and `pivot` transitions. Renaming is not supported — the
+  `name` is part of the public contract another definition may
+  reference. Acts as the human display label as well; no separate slug.
+
+     * @pattern ^[a-z][a-z0-9-]*$
+     */
+  name: string;
+  /** The lifecycle state of this flow definition.
+
+  active: The flow definition is ready to be used. The flow engine can select it for new flows.
+  draft: The engine will not select it for new flows, and existing flows must handle it gracefully if they reference this definition.
+
+  Allowed transitions:
+  - draft -> active: To activate the flow definition.
+  - active -> draft: To remove the flow definition from active use immediately.
+   */
+  status: UpdateFlowDefinitionBodyFlowDefinitionStatus;
+  /** Server-assigned identifier of the user schema this flow operates on,
+  as returned by `POST /schemas`. Opaque to the client — the shape is a
+  server implementation detail. Step `fields` reference properties
+  defined in the resolved schema; the engine resolves field types, validation, and
+  implicit outcomes from schema annotations at runtime.
+   */
+  user_schema: string;
+  /** Maps each purpose this definition handles to its entry-point step.
+  Keys are purpose names; values must match a `name` in `steps`. A
+  definition can serve multiple purposes (e.g. a combined login/register
+  flow) by listing one entry per purpose.
+   */
+  purposes: Partial<
+    Record<"login" | "register" | "recovery" | "profiling" | "reauth" | "link_account", string>
+  >;
+  /** Scopes which teams or apps this flow definition applies to. Empty or
+  omitted fields mean "no restriction"; when both are empty the definition
+  matches every request in the project. The engine picks the most specific
+  matching definition: app > team > project-wide.
+   */
+  audience?: UpdateFlowDefinitionBodyFlowDefinitionAudience;
+  /**
+     * Ordered list of steps in this flow. The order is for human readability —
+  actual step sequencing is determined by transitions.
+
+     * @minItems 1
+     */
+  steps: UpdateFlowDefinitionBodyFlowDefinitionStepsItem[];
+};