@zitadel/api 1.0.0-alpha.20 → 1.0.0-alpha.22

package/dist/{index-BpCgp2NY.d.mts → index-DtExHu2p.d.mts}

@@ -443,13 +443,7 @@ type CompleteClaim409 = {
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
-/**
- * The claim challenge has expired
-
-Error code: proj.claim_expired
-
- */
-type CompleteClaim410 = {
+type CompleteClaim410 = ({
   /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
   message: string; /** Additional error-specific context. */
   details?: {
@@ -457,7 +451,15 @@ type CompleteClaim410 = {
   };
 } & {
   code: "proj.claim_expired";
-};
+}) | ({
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: {
+    [key: string]: unknown;
+  };
+} & {
+  code: "proj.claim_window_expired";
+});
 //#endregion
 //#region src/generated/model/completeClaim429Details.d.ts
 /**
@@ -2157,9 +2159,11 @@ the purpose + audience when a flow is created via POST /flow.
 type CreateFlowDefinition201FlowDefinition = {
   /**
      * Stable identifier for this flow, used as the target of cross-flow
-  `switch` and `pivot` transitions. Renaming is not supported — the
-  `name` is part of the public contract another definition may
-  reference. Acts as the human display label as well; no separate slug.
+  `switch` and `pivot` transitions. Every revision of a flow shares its
+  `name`; publishing a definition under an existing `name` adds a
+  revision to that flow. Renaming is not supported — the `name` is part
+  of the public contract another definition may reference. Acts as the
+  human display label as well; no separate slug.
         * @pattern ^[a-z][a-z0-9-]*$
      */
   name: string;
@@ -2337,31 +2341,6 @@ type CreateFlowDefinition400 = {
   details?: CreateFlowDefinition400Details;
 };
 //#endregion
-//#region src/generated/model/createFlowDefinition409Details.d.ts
-/**
- * Generated by orval v8.10.0 🍺
- * Do not edit manually.
- * Zitadel NextGen
- * This is the next generation of the Zitadel identity platform.
- * OpenAPI spec version: 0.0.1
- */
-/**
- * Additional error-specific context.
- */
-type CreateFlowDefinition409Details = {
-  [key: string]: unknown;
-};
-//#endregion
-//#region src/generated/model/createFlowDefinition409.d.ts
-/**
- * Standard error payload returned for failed API requests.
- */
-type CreateFlowDefinition409 = {
-  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
-  message: string; /** Additional error-specific context. */
-  details?: CreateFlowDefinition409Details;
-};
-//#endregion
 //#region src/generated/model/createFlowDefinitionBodyFlowDefinitionAudience.d.ts
 /**
  * Generated by orval v8.10.0 🍺
@@ -2709,9 +2688,11 @@ the purpose + audience when a flow is created via POST /flow.
 type CreateFlowDefinitionBodyFlowDefinition = {
   /**
      * Stable identifier for this flow, used as the target of cross-flow
-  `switch` and `pivot` transitions. Renaming is not supported — the
-  `name` is part of the public contract another definition may
-  reference. Acts as the human display label as well; no separate slug.
+  `switch` and `pivot` transitions. Every revision of a flow shares its
+  `name`; publishing a definition under an existing `name` adds a
+  revision to that flow. Renaming is not supported — the `name` is part
+  of the public contract another definition may reference. Acts as the
+  human display label as well; no separate slug.
         * @pattern ^[a-z][a-z0-9-]*$
      */
   name: string;
@@ -2805,14 +2786,6 @@ type CreateFlowDefinitionDefault = ({
   details?: {
     [key: string]: unknown;
   };
-} & {
-  code: "flowdef.already_exists";
-}) | ({
-  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
-  message: string; /** Additional error-specific context. */
-  details?: {
-    [key: string]: unknown;
-  };
 } & {
   code: "flowdef.invalid";
 }) | ({
@@ -2881,6 +2854,132 @@ declare const CreateGrant201ObjectType: {
   readonly project: "project";
 };
 //#endregion
+//#region src/generated/model/createGrant201Principal.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * The principal named by `principal_id`, present only when the request
+asked for it with `expand: ["principal"]` (ADR 059). Absent means it
+was not requested; `null` means the principal cannot be loaded
+(deleted or missing). GET and create never set this field.
+
+When present, the body is the same representation `GET /users/{id}`
+serves for `principal_type=user`, or `GET /teams/{id}` for
+`principal_type=team`. Discriminate with the grant's existing
+`principal_type`.
+
+Requires `user.read` and `team.read` in addition to `project.read`.
+Both are checked on the whole request before the list.
+
+ */
+type CreateGrant201Principal = {
+  /** @pattern ^user_[a-zA-Z0-9_-]+$ */id: string;
+  /** The schema that defines the content of `attributes`. These schemas can be
+  created using the `/schemas` endpoint. A default schema is provided.
+  This schema can be retrieved using the same endpoint.
+  */
+  schema: string;
+  /** The user's content, satisfying the schema named by `schema`. Property
+  names and types are determined entirely by that schema.
+  */
+  attributes: {
+    [key: string]: unknown;
+  };
+  metadata: {
+    /** The time when the user was created. */created_at: string; /** The time when the user was last updated. */
+    updated_at: string; /** The status of the user. */
+    status: "active" | "suspended" | "deactivated" | "pending_purge";
+    /** The team that owns this user's identity lifecycle, or `null` when the
+    user is self-owned. This is a single team and a different concept from
+    the user's team memberships: it decides who may deprovision the user, not
+    which teams the user collaborates in. Memberships are their own paginated
+    resource — `GET /users/{user_id}/teams`.
+    */
+    lifecycle_owner_team_id?: string | null;
+    /** The team named by `lifecycle_owner_team_id`, present only when the
+    request asked for it with `expand: ["lifecycle_owner_team"]` (ADR 059).
+    Absent means it was not requested; `null` means the user is self-owned
+    and there is no owner to resolve.
+    Requesting it does not guarantee it is present on every user. Today
+    `team.read` is checked once for the whole request, so it is; once that
+    check is per team, a page may contain a user whose owner the caller may
+    not read, and such a row answers with neither the team nor `null` —
+    `null` already means self-owned. What it answers with instead is decided
+    with the granular scopes (#420); do not read the two cases above as the
+    complete set.
+    This is the same representation `GET /teams/{team_id}` serves. It is a
+    single team, not a collection, so it carries no cap and no truncation
+    flag.
+    */
+    readonly lifecycle_owner_team?: {
+      /** The unique identifier of the team. */id: string; /** The name of the team. */
+      name: string;
+      /** The lifecycle state of a team.
+      active: The team is available for use.
+      deactivated: The team is no longer active but is retained for historical and audit purposes.
+      */
+      status: "active" | "deactivated"; /** The time when the team was created. */
+      created_at: string; /** The time when the team was last updated. */
+      updated_at: string;
+    } | null;
+  };
+  /** The current value of the user schema's designated identifier
+  (`x-identifier`), resolved live at read time. Absent when the schema
+  designates no identifier or the user carries no value for it.
+  */
+  readonly identifier?: string;
+  /** The schema property `identifier` came from, so clients can reach the
+  property's schema for semantics (a mailto link, a field label)
+  instead of guessing from the value. Present exactly when
+  `identifier` is.
+  */
+  readonly identifier_property?: string;
+  /** The `x-display` rendering — the designated properties' values joined
+  in list order, resolved live at read time. Purely presentational.
+  Absent when the schema designates no display properties or the user
+  carries no values for them. Clients render `display`, falling back
+  to `identifier`, then `id`.
+  */
+  readonly display?: string;
+  /** The user's team memberships, present only when the request asked for them with
+  `expand: ["teams"]` (ADR 059). Absent means it was not requested; `[]`
+  means the user has none.
+  Deliberately outside `metadata`: memberships are a related collection, not
+  part of the server-owned envelope, and it is a different concept from
+  `metadata.lifecycle_owner_team_id` (ADR 024).
+  */
+  readonly teams?: readonly {
+    /** The unique identifier of the team. */id: string; /** The name of the team. */
+    name: string;
+    /** The user's participation state on this team. Memberships the user was
+    removed from are not returned.
+    */
+    membership_status: "pending" | "active" | "inactive"; /** The time when the user joined this team. */
+    created_at: string; /** The time when this membership was last changed. */
+    updated_at: string;
+  }[];
+  /** True when the user is on more teams than the embedded list carries. The
+  embedded list is capped and cannot be paged; read them all at
+  `GET /users/{user_id}/teams`. Present only alongside `teams`.
+  */
+  readonly teams_truncated?: boolean;
+} | {
+  /** The unique identifier of the team. */id: string; /** The name of the team. */
+  name: string;
+  /** The lifecycle state of a team.
+  active: The team is available for use.
+  deactivated: The team is no longer active but is retained for historical and audit purposes.
+  */
+  status: "active" | "deactivated"; /** The time when the team was created. */
+  created_at: string; /** The time when the team was last updated. */
+  updated_at: string;
+} | null;
+//#endregion
 //#region src/generated/model/createGrant201PrincipalType.d.ts
 /**
  * Generated by orval v8.10.0 🍺
@@ -2916,6 +3015,65 @@ declare const CreateGrant201Relation: {
   readonly admin: "admin";
 };
 //#endregion
+//#region src/generated/model/createGrant201Team.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * A resolved reference to a team. Carries the team's id and name so a grant
+list is readable without embedding the full Team body. Id and display ride
+`project.read` (ADR 059 rule 8): a reference field carrying only the
+target's id and display strings needs no gate of its own. Missing or
+deleted teams degrade to `team_id` only.
+
+ */
+type CreateGrant201Team = {
+  /** The referenced team's id (`team_<opaque>`). Always present. */team_id: string; /** The team's name. Absent when the team can no longer be loaded. */
+  name?: string;
+};
+//#endregion
+//#region src/generated/model/createGrant201User.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * A resolved reference to a user (ADR 058 §3). Fields are role-named, not
+property-named, so responses can mix users from different schemas.
+`identifier` and `display` are resolved independently from the user
+schema's `x-identifier` and `x-display` designations, live at read time.
+Clients render `display`, falling back to `identifier`, then `user_id`.
+Missing or deleted users degrade to `user_id` only.
+
+ */
+type CreateGrant201User = {
+  /** @pattern ^user_[a-zA-Z0-9_-]+$ */user_id: string;
+  /** The current value of the schema's designated identifier
+  (`x-identifier`). Absent when the schema designates no identifier or
+  the user carries no value for it.
+   */
+  identifier?: string;
+  /** The schema property `identifier` came from, so clients can reach the
+  property's schema for semantics (a mailto link, a field label)
+  instead of guessing from the value. Present exactly when
+  `identifier` is.
+   */
+  identifier_property?: string;
+  /** The `x-display` rendering — the designated properties' values joined
+  in list order. Purely presentational, with no source attribution.
+  Absent when the schema designates no display properties or the user
+  carries no values for them.
+   */
+  display?: string;
+};
+//#endregion
 //#region src/generated/model/createGrant201.d.ts
 /**
  * A collaboration grant binding a principal to a project relation.
@@ -2932,6 +3090,33 @@ type CreateGrant201 = {
   returns expired unrevoked grants; authorization ignores them.
    */
   expires_at?: string | null;
+  /** A resolved reference to a user (ADR 058 §3). Fields are role-named, not
+  property-named, so responses can mix users from different schemas.
+  `identifier` and `display` are resolved independently from the user
+  schema's `x-identifier` and `x-display` designations, live at read time.
+  Clients render `display`, falling back to `identifier`, then `user_id`.
+  Missing or deleted users degrade to `user_id` only.
+   */
+  user?: CreateGrant201User;
+  /** A resolved reference to a team. Carries the team's id and name so a grant
+  list is readable without embedding the full Team body. Id and display ride
+  `project.read` (ADR 059 rule 8): a reference field carrying only the
+  target's id and display strings needs no gate of its own. Missing or
+  deleted teams degrade to `team_id` only.
+   */
+  team?: CreateGrant201Team;
+  /** The principal named by `principal_id`, present only when the request
+  asked for it with `expand: ["principal"]` (ADR 059). Absent means it
+  was not requested; `null` means the principal cannot be loaded
+  (deleted or missing). GET and create never set this field.
+     When present, the body is the same representation `GET /users/{id}`
+  serves for `principal_type=user`, or `GET /teams/{id}` for
+  `principal_type=team`. Discriminate with the grant's existing
+  `principal_type`.
+     Requires `user.read` and `team.read` in addition to `project.read`.
+  Both are checked on the whole request before the list.
+   */
+  readonly principal?: CreateGrant201Principal;
 };
 //#endregion
 //#region src/generated/model/createGrant400Details.d.ts
@@ -4220,6 +4405,44 @@ declare const CreateSession201SessionState: {
   readonly expired: "expired";
 };
 //#endregion
+//#region src/generated/model/createSession201SessionUser.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * A resolved reference to a user (ADR 058 §3). Fields are role-named, not
+property-named, so responses can mix users from different schemas.
+`identifier` and `display` are resolved independently from the user
+schema's `x-identifier` and `x-display` designations, live at read time.
+Clients render `display`, falling back to `identifier`, then `user_id`.
+Missing or deleted users degrade to `user_id` only.
+
+ */
+type CreateSession201SessionUser = {
+  /** @pattern ^user_[a-zA-Z0-9_-]+$ */user_id: string;
+  /** The current value of the schema's designated identifier
+  (`x-identifier`). Absent when the schema designates no identifier or
+  the user carries no value for it.
+   */
+  identifier?: string;
+  /** The schema property `identifier` came from, so clients can reach the
+  property's schema for semantics (a mailto link, a field label)
+  instead of guessing from the value. Present exactly when
+  `identifier` is.
+   */
+  identifier_property?: string;
+  /** The `x-display` rendering — the designated properties' values joined
+  in list order. Purely presentational, with no source attribution.
+  Absent when the schema designates no display properties or the user
+  carries no values for them.
+   */
+  display?: string;
+};
+//#endregion
 //#region src/generated/model/createSession201SessionUserAgent.d.ts
 /**
  * Generated by orval v8.10.0 🍺
@@ -4264,23 +4487,14 @@ type CreateSession201Session = {
   factor has been verified through an `auth_attempt`.
    */
   user_id?: string | null;
-  /** Human-readable name of the authenticated user, resolved from the
-  conventional user-schema properties: `name` when defined, otherwise
-  the given and family name parts joined — `givenName`/`familyName`
-  (the shipped presets' spelling) or `given_name`/`family_name`. Only
-  present on reads that hydrate the user's identity
-  (`GET /sessions/me`) and only when the session has an authenticated
-  user whose schema carries those properties; clients fall back to
-  `email`, then `user_id`.
-   */
-  name?: string;
-  /** Email address of the authenticated user, resolved from the
-  conventional `email` user-schema property. Only present on reads
-  that hydrate the user's identity (`GET /sessions/me`) and only when
-  the session has an authenticated user whose schema carries that
-  property.
-   */
-  email?: string;
+  /** A resolved reference to a user (ADR 058 §3). Fields are role-named, not
+  property-named, so responses can mix users from different schemas.
+  `identifier` and `display` are resolved independently from the user
+  schema's `x-identifier` and `x-display` designations, live at read time.
+  Clients render `display`, falling back to `identifier`, then `user_id`.
+  Missing or deleted users degrade to `user_id` only.
+   */
+  user?: CreateSession201SessionUser;
   /** Verified authentication factors accumulated by this session.
   Each key is a factor type (e.g. `password`, `totp`, `passkey`).
   Each value is a factor event object with at least `verified_at` and
@@ -4890,6 +5104,24 @@ type CreateUser201 = {
    */
   attributes: CreateUser201Attributes;
   metadata: CreateUser201Metadata;
+  /** The current value of the user schema's designated identifier
+  (`x-identifier`), resolved live at read time. Absent when the schema
+  designates no identifier or the user carries no value for it.
+   */
+  readonly identifier?: string;
+  /** The schema property `identifier` came from, so clients can reach the
+  property's schema for semantics (a mailto link, a field label)
+  instead of guessing from the value. Present exactly when
+  `identifier` is.
+   */
+  readonly identifier_property?: string;
+  /** The `x-display` rendering — the designated properties' values joined
+  in list order, resolved live at read time. Purely presentational.
+  Absent when the schema designates no display properties or the user
+  carries no values for them. Clients render `display`, falling back
+  to `identifier`, then `id`.
+   */
+  readonly display?: string;
   /** The user's team memberships, present only when the request asked for them with
   `expand: ["teams"]` (ADR 059). Absent means it was not requested; `[]`
   means the user has none.
@@ -5734,6 +5966,44 @@ declare const ExchangeHandoff200SessionState: {
   readonly expired: "expired";
 };
 //#endregion
+//#region src/generated/model/exchangeHandoff200SessionUser.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * A resolved reference to a user (ADR 058 §3). Fields are role-named, not
+property-named, so responses can mix users from different schemas.
+`identifier` and `display` are resolved independently from the user
+schema's `x-identifier` and `x-display` designations, live at read time.
+Clients render `display`, falling back to `identifier`, then `user_id`.
+Missing or deleted users degrade to `user_id` only.
+
+ */
+type ExchangeHandoff200SessionUser = {
+  /** @pattern ^user_[a-zA-Z0-9_-]+$ */user_id: string;
+  /** The current value of the schema's designated identifier
+  (`x-identifier`). Absent when the schema designates no identifier or
+  the user carries no value for it.
+   */
+  identifier?: string;
+  /** The schema property `identifier` came from, so clients can reach the
+  property's schema for semantics (a mailto link, a field label)
+  instead of guessing from the value. Present exactly when
+  `identifier` is.
+   */
+  identifier_property?: string;
+  /** The `x-display` rendering — the designated properties' values joined
+  in list order. Purely presentational, with no source attribution.
+  Absent when the schema designates no display properties or the user
+  carries no values for them.
+   */
+  display?: string;
+};
+//#endregion
 //#region src/generated/model/exchangeHandoff200SessionUserAgent.d.ts
 /**
  * Generated by orval v8.10.0 🍺
@@ -5778,23 +6048,14 @@ type ExchangeHandoff200Session = {
   factor has been verified through an `auth_attempt`.
    */
   user_id?: string | null;
-  /** Human-readable name of the authenticated user, resolved from the
-  conventional user-schema properties: `name` when defined, otherwise
-  the given and family name parts joined — `givenName`/`familyName`
-  (the shipped presets' spelling) or `given_name`/`family_name`. Only
-  present on reads that hydrate the user's identity
-  (`GET /sessions/me`) and only when the session has an authenticated
-  user whose schema carries those properties; clients fall back to
-  `email`, then `user_id`.
-   */
-  name?: string;
-  /** Email address of the authenticated user, resolved from the
-  conventional `email` user-schema property. Only present on reads
-  that hydrate the user's identity (`GET /sessions/me`) and only when
-  the session has an authenticated user whose schema carries that
-  property.
-   */
-  email?: string;
+  /** A resolved reference to a user (ADR 058 §3). Fields are role-named, not
+  property-named, so responses can mix users from different schemas.
+  `identifier` and `display` are resolved independently from the user
+  schema's `x-identifier` and `x-display` designations, live at read time.
+  Clients render `display`, falling back to `identifier`, then `user_id`.
+  Missing or deleted users degrade to `user_id` only.
+   */
+  user?: ExchangeHandoff200SessionUser;
   /** Verified authentication factors accumulated by this session.
   Each key is a factor type (e.g. `password`, `totp`, `passkey`).
   Each value is a factor event object with at least `verified_at` and
@@ -6913,13 +7174,7 @@ type GetClaimStatus404 = {
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
-/**
- * The claim challenge has expired
-
-Error code: proj.claim_expired
-
- */
-type GetClaimStatus410 = {
+type GetClaimStatus410 = ({
   /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
   message: string; /** Additional error-specific context. */
   details?: {
@@ -6927,7 +7182,15 @@ type GetClaimStatus410 = {
   };
 } & {
   code: "proj.claim_expired";
-};
+}) | ({
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: {
+    [key: string]: unknown;
+  };
+} & {
+  code: "proj.claim_window_expired";
+});
 //#endregion
 //#region src/generated/model/getClaimStatus429Details.d.ts
 /**
@@ -6995,7 +7258,7 @@ type GetClaimStatusParams = {
   challenge_id: string;
 };
 //#endregion
-//#region src/generated/model/getEnvironmentByName200.d.ts
+//#region src/generated/model/getClaimWindow200.d.ts
 /**
  * Generated by orval v8.10.0 🍺
  * Do not edit manually.
@@ -7004,31 +7267,21 @@ type GetClaimStatusParams = {
  * OpenAPI spec version: 0.0.1
  */
 /**
- * A runtime slot on a project (ADR 035).
-
-This is identity only. The release an environment currently runs, and its
-deployment history, arrive with the deployments endpoints; environment
-lifecycle (create, rename, retire) arrives with its own ADR. Until then
-every project is seeded with a fixed set of environments at creation and
-the set cannot be changed.
+ * How long the project can still be claimed. Derived from the project's
+creation time and the fixed 14-day claim window (ADR 046); it does not
+depend on the challenge, which has its own much shorter expiry.
 
  */
-type GetEnvironmentByName200 = {
-  /** The opaque, immutable resource id. */readonly id: string; /** @pattern ^[a-zA-Z0-9_-]+$ */
-  project_id: string;
-  /**
-     * An environment's public handle, unique within its project and immutable.
-     It addresses the environment on the wire and names a deploy target in the
-  CLI, so it is a lowercase DNS-style label: letters, digits, and hyphens
-  between them.
-        * @maxLength 63
-     * @pattern ^[a-z0-9]([a-z0-9-]*[a-z0-9])?$
-     */
-  name: string; /** When the environment was created. */
-  readonly created_at: string;
+type GetClaimWindow200 = {
+  /** The time when the project's claim window closes. */expires_at: string;
+  /** Whether the window has already closed. Reported alongside `expires_at`
+  rather than left to the client so a skewed browser clock cannot show a
+  claimable project as expired, or the reverse.
+   */
+  expired: boolean;
 };
 //#endregion
-//#region src/generated/model/getEnvironmentByNameDefault.d.ts
+//#region src/generated/model/getClaimWindow404Details.d.ts
 /**
  * Generated by orval v8.10.0 🍺
  * Do not edit manually.
@@ -7036,49 +7289,24 @@ type GetEnvironmentByName200 = {
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
-type GetEnvironmentByNameDefault = ({
-  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
-  message: string; /** Additional error-specific context. */
-  details?: {
-    [key: string]: unknown;
-  };
-} & {
-  code: "auth.unauthorized";
-}) | ({
-  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
-  message: string; /** Additional error-specific context. */
-  details?: {
-    [key: string]: unknown;
-  };
-} & {
-  code: "env.not_found";
-}) | ({
-  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
-  message: string; /** Additional error-specific context. */
-  details?: {
-    [key: string]: unknown;
-  };
-} & {
-  code: "env.permission_denied";
-}) | ({
-  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
-  message: string; /** Additional error-specific context. */
-  details?: {
-    [key: string]: unknown;
-  };
-} & {
-  code: "internal";
-}) | ({
+/**
+ * Additional error-specific context.
+ */
+type GetClaimWindow404Details = {
+  [key: string]: unknown;
+};
+//#endregion
+//#region src/generated/model/getClaimWindow404.d.ts
+/**
+ * Standard error payload returned for failed API requests.
+ */
+type GetClaimWindow404 = {
   /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
   message: string; /** Additional error-specific context. */
-  details?: {
-    [key: string]: unknown;
-  };
-} & {
-  code: "req.invalid";
-});
+  details?: GetClaimWindow404Details;
+};
 //#endregion
-//#region src/generated/model/getEnvironmentByNameParams.d.ts
+//#region src/generated/model/getClaimWindow429Details.d.ts
 /**
  * Generated by orval v8.10.0 🍺
  * Do not edit manually.
@@ -7086,12 +7314,161 @@ type GetEnvironmentByNameDefault = ({
  * This is the next generation of the Zitadel identity platform.
  * OpenAPI spec version: 0.0.1
  */
-type GetEnvironmentByNameParams = {
-  /**
-   * The unique identifier of the project
-   * @pattern ^[a-zA-Z0-9_-]+$
-   */
-  project_id: string;
+/**
+ * Additional error-specific context.
+ */
+type GetClaimWindow429Details = {
+  [key: string]: unknown;
+};
+//#endregion
+//#region src/generated/model/getClaimWindow429.d.ts
+/**
+ * Standard error payload returned for failed API requests.
+ */
+type GetClaimWindow429 = {
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: GetClaimWindow429Details;
+};
+//#endregion
+//#region src/generated/model/getClaimWindowDefaultDetails.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Additional error-specific context.
+ */
+type GetClaimWindowDefaultDetails = {
+  [key: string]: unknown;
+};
+//#endregion
+//#region src/generated/model/getClaimWindowDefault.d.ts
+/**
+ * Standard error payload returned for failed API requests.
+ */
+type GetClaimWindowDefault = {
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: GetClaimWindowDefaultDetails;
+};
+//#endregion
+//#region src/generated/model/getClaimWindowParams.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+type GetClaimWindowParams = {
+  /**
+   * Unique identifier for this challenge (dialect-minted prefixed opaque string).
+   * @pattern ^ch_[a-zA-Z0-9_-]+$
+   */
+  challenge_id: string;
+};
+//#endregion
+//#region src/generated/model/getEnvironmentByName200.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * A runtime slot on a project (ADR 035).
+
+This is identity only. The release an environment currently runs, and its
+deployment history, arrive with the deployments endpoints; environment
+lifecycle (create, rename, retire) arrives with its own ADR. Until then
+every project is seeded with a fixed set of environments at creation and
+the set cannot be changed.
+
+ */
+type GetEnvironmentByName200 = {
+  /** The opaque, immutable resource id. */readonly id: string; /** @pattern ^[a-zA-Z0-9_-]+$ */
+  project_id: string;
+  /**
+     * An environment's public handle, unique within its project and immutable.
+     It addresses the environment on the wire and names a deploy target in the
+  CLI, so it is a lowercase DNS-style label: letters, digits, and hyphens
+  between them.
+        * @maxLength 63
+     * @pattern ^[a-z0-9]([a-z0-9-]*[a-z0-9])?$
+     */
+  name: string; /** When the environment was created. */
+  readonly created_at: string;
+};
+//#endregion
+//#region src/generated/model/getEnvironmentByNameDefault.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+type GetEnvironmentByNameDefault = ({
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: {
+    [key: string]: unknown;
+  };
+} & {
+  code: "auth.unauthorized";
+}) | ({
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: {
+    [key: string]: unknown;
+  };
+} & {
+  code: "env.not_found";
+}) | ({
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: {
+    [key: string]: unknown;
+  };
+} & {
+  code: "env.permission_denied";
+}) | ({
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: {
+    [key: string]: unknown;
+  };
+} & {
+  code: "internal";
+}) | ({
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: {
+    [key: string]: unknown;
+  };
+} & {
+  code: "req.invalid";
+});
+//#endregion
+//#region src/generated/model/getEnvironmentByNameParams.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+type GetEnvironmentByNameParams = {
+  /**
+   * The unique identifier of the project
+   * @pattern ^[a-zA-Z0-9_-]+$
+   */
+  project_id: string;
 };
 //#endregion
 //#region src/generated/model/getEvent200.d.ts
@@ -7952,6 +8329,59 @@ type GetEvent200 = ({
     };
     [key: string]: unknown;
   };
+} & {
+  event_type: "release.created";
+  /** Allowlisted fields for `release.created`. The release id is already the
+  event's `entity_id`; the pinned set is repeated here so the audit stream
+  answers what a release contained without reading the release itself.
+  */
+  payload: {
+    content_hash?: string;
+    message?: string;
+    git_sha?: string;
+    git_dirty?: boolean;
+    pointers?: {
+      kind?: string;
+      handle?: string;
+      revision_id?: string;
+    }[];
+  };
+}) | ({
+  /** Managed event id (`evt_<opaque>`). */id: string; /** @pattern ^[a-zA-Z0-9_-]+$ */
+  project_id: string; /** Emit-time team scope, when the actor operated under a team. */
+  team_id?: string | null;
+  /** Semantic event name (dot-separated). Discriminator for the Event union —
+  see docs/design/api/events-catalog.md.
+  */
+  event_type: string; /** Wide-event category. */
+  category: "request" | "auth" | "session" | "admin" | "entity" | "signal"; /** When the action happened (server/storage clock, dialect-owned). */
+  occurred_at: string; /** When the row was inserted (server/storage clock, dialect-owned). */
+  created_at: string; /** Who triggered the event. */
+  actor_id?: string | null; /** Actor kind. */
+  actor_type?: "human" | "service" | "system" | "agent" | null; /** Resource type affected. */
+  entity_type?: string | null; /** Resource id affected. */
+  entity_id?: string | null; /** Application or agent that produced the event. */
+  client_id: string; /** Token id present at emit time, when any. */
+  token_id?: string; /** Delegation kind (omit when unset). */
+  delegation_type?: "direct" | "delegated" | "pat_shared" | "exchanged";
+  delegation_id?: string;
+  grantor?: string; /** Device fingerprint correlation id. */
+  fingerprint?: string; /** HTTP request correlation id. */
+  request_id?: string | null; /** Session correlation id. */
+  session_id?: string | null; /** Login flow correlation id. */
+  flow_id?: string | null;
+  /** Emit-time metadata, already redacted at write. Path A request.api may
+  set client (ip, user_agent, origin) for SIEM join on request_id. Not a
+  live risk-evaluator input.
+  */
+  metadata?: {
+    /** Observed HTTP requestor context on Path A request.api only. */client?: {
+      /** Client IP from the first X-Forwarded-For hop or RemoteAddr. */ip?: string; /** Observed User-Agent header. */
+      user_agent?: string; /** Origin header when present. */
+      origin?: string;
+    };
+    [key: string]: unknown;
+  };
 } & {
   event_type: "request.api"; /** Payload for `request.api` events. */
   payload: {
@@ -8829,9 +9259,11 @@ the purpose + audience when a flow is created via POST /flow.
 type GetFlowDefinition200FlowDefinition = {
   /**
      * Stable identifier for this flow, used as the target of cross-flow
-  `switch` and `pivot` transitions. Renaming is not supported — the
-  `name` is part of the public contract another definition may
-  reference. Acts as the human display label as well; no separate slug.
+  `switch` and `pivot` transitions. Every revision of a flow shares its
+  `name`; publishing a definition under an existing `name` adds a
+  revision to that flow. Renaming is not supported — the `name` is part
+  of the public contract another definition may reference. Acts as the
+  human display label as well; no separate slug.
         * @pattern ^[a-z][a-z0-9-]*$
      */
   name: string;
@@ -9737,6 +10169,132 @@ declare const GetGrant200ObjectType: {
   readonly project: "project";
 };
 //#endregion
+//#region src/generated/model/getGrant200Principal.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * The principal named by `principal_id`, present only when the request
+asked for it with `expand: ["principal"]` (ADR 059). Absent means it
+was not requested; `null` means the principal cannot be loaded
+(deleted or missing). GET and create never set this field.
+
+When present, the body is the same representation `GET /users/{id}`
+serves for `principal_type=user`, or `GET /teams/{id}` for
+`principal_type=team`. Discriminate with the grant's existing
+`principal_type`.
+
+Requires `user.read` and `team.read` in addition to `project.read`.
+Both are checked on the whole request before the list.
+
+ */
+type GetGrant200Principal = {
+  /** @pattern ^user_[a-zA-Z0-9_-]+$ */id: string;
+  /** The schema that defines the content of `attributes`. These schemas can be
+  created using the `/schemas` endpoint. A default schema is provided.
+  This schema can be retrieved using the same endpoint.
+  */
+  schema: string;
+  /** The user's content, satisfying the schema named by `schema`. Property
+  names and types are determined entirely by that schema.
+  */
+  attributes: {
+    [key: string]: unknown;
+  };
+  metadata: {
+    /** The time when the user was created. */created_at: string; /** The time when the user was last updated. */
+    updated_at: string; /** The status of the user. */
+    status: "active" | "suspended" | "deactivated" | "pending_purge";
+    /** The team that owns this user's identity lifecycle, or `null` when the
+    user is self-owned. This is a single team and a different concept from
+    the user's team memberships: it decides who may deprovision the user, not
+    which teams the user collaborates in. Memberships are their own paginated
+    resource — `GET /users/{user_id}/teams`.
+    */
+    lifecycle_owner_team_id?: string | null;
+    /** The team named by `lifecycle_owner_team_id`, present only when the
+    request asked for it with `expand: ["lifecycle_owner_team"]` (ADR 059).
+    Absent means it was not requested; `null` means the user is self-owned
+    and there is no owner to resolve.
+    Requesting it does not guarantee it is present on every user. Today
+    `team.read` is checked once for the whole request, so it is; once that
+    check is per team, a page may contain a user whose owner the caller may
+    not read, and such a row answers with neither the team nor `null` —
+    `null` already means self-owned. What it answers with instead is decided
+    with the granular scopes (#420); do not read the two cases above as the
+    complete set.
+    This is the same representation `GET /teams/{team_id}` serves. It is a
+    single team, not a collection, so it carries no cap and no truncation
+    flag.
+    */
+    readonly lifecycle_owner_team?: {
+      /** The unique identifier of the team. */id: string; /** The name of the team. */
+      name: string;
+      /** The lifecycle state of a team.
+      active: The team is available for use.
+      deactivated: The team is no longer active but is retained for historical and audit purposes.
+      */
+      status: "active" | "deactivated"; /** The time when the team was created. */
+      created_at: string; /** The time when the team was last updated. */
+      updated_at: string;
+    } | null;
+  };
+  /** The current value of the user schema's designated identifier
+  (`x-identifier`), resolved live at read time. Absent when the schema
+  designates no identifier or the user carries no value for it.
+  */
+  readonly identifier?: string;
+  /** The schema property `identifier` came from, so clients can reach the
+  property's schema for semantics (a mailto link, a field label)
+  instead of guessing from the value. Present exactly when
+  `identifier` is.
+  */
+  readonly identifier_property?: string;
+  /** The `x-display` rendering — the designated properties' values joined
+  in list order, resolved live at read time. Purely presentational.
+  Absent when the schema designates no display properties or the user
+  carries no values for them. Clients render `display`, falling back
+  to `identifier`, then `id`.
+  */
+  readonly display?: string;
+  /** The user's team memberships, present only when the request asked for them with
+  `expand: ["teams"]` (ADR 059). Absent means it was not requested; `[]`
+  means the user has none.
+  Deliberately outside `metadata`: memberships are a related collection, not
+  part of the server-owned envelope, and it is a different concept from
+  `metadata.lifecycle_owner_team_id` (ADR 024).
+  */
+  readonly teams?: readonly {
+    /** The unique identifier of the team. */id: string; /** The name of the team. */
+    name: string;
+    /** The user's participation state on this team. Memberships the user was
+    removed from are not returned.
+    */
+    membership_status: "pending" | "active" | "inactive"; /** The time when the user joined this team. */
+    created_at: string; /** The time when this membership was last changed. */
+    updated_at: string;
+  }[];
+  /** True when the user is on more teams than the embedded list carries. The
+  embedded list is capped and cannot be paged; read them all at
+  `GET /users/{user_id}/teams`. Present only alongside `teams`.
+  */
+  readonly teams_truncated?: boolean;
+} | {
+  /** The unique identifier of the team. */id: string; /** The name of the team. */
+  name: string;
+  /** The lifecycle state of a team.
+  active: The team is available for use.
+  deactivated: The team is no longer active but is retained for historical and audit purposes.
+  */
+  status: "active" | "deactivated"; /** The time when the team was created. */
+  created_at: string; /** The time when the team was last updated. */
+  updated_at: string;
+} | null;
+//#endregion
 //#region src/generated/model/getGrant200PrincipalType.d.ts
 /**
  * Generated by orval v8.10.0 🍺
@@ -9772,25 +10330,7 @@ declare const GetGrant200Relation: {
   readonly admin: "admin";
 };
 //#endregion
-//#region src/generated/model/getGrant200.d.ts
-/**
- * A collaboration grant binding a principal to a project relation.
- */
-type GetGrant200 = {
-  /** Managed assignment id (`asgn_<opaque>`). */id: string; /** Project this grant is scoped to. */
-  project_id: string; /** Kind of principal bound by this grant. */
-  principal_type: GetGrant200PrincipalType; /** Principal id (`user_<opaque>` or `team_<opaque>`). */
-  principal_id: string; /** Catalog object type. Always `project` for this API. */
-  object_type: GetGrant200ObjectType; /** Catalog relation on the project. */
-  relation: GetGrant200Relation; /** When the grant was created. */
-  created_at: string;
-  /** When the grant expires. Null when it does not expire. GET still
-  returns expired unrevoked grants; authorization ignores them.
-   */
-  expires_at?: string | null;
-};
-//#endregion
-//#region src/generated/model/getGrant401Details.d.ts
+//#region src/generated/model/getGrant200Team.d.ts
 /**
  * Generated by orval v8.10.0 🍺
  * Do not edit manually.
@@ -9799,10 +10339,114 @@ type GetGrant200 = {
  * OpenAPI spec version: 0.0.1
  */
 /**
- * Additional error-specific context.
+ * A resolved reference to a team. Carries the team's id and name so a grant
+list is readable without embedding the full Team body. Id and display ride
+`project.read` (ADR 059 rule 8): a reference field carrying only the
+target's id and display strings needs no gate of its own. Missing or
+deleted teams degrade to `team_id` only.
+
  */
-type GetGrant401Details = {
-  [key: string]: unknown;
+type GetGrant200Team = {
+  /** The referenced team's id (`team_<opaque>`). Always present. */team_id: string; /** The team's name. Absent when the team can no longer be loaded. */
+  name?: string;
+};
+//#endregion
+//#region src/generated/model/getGrant200User.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * A resolved reference to a user (ADR 058 §3). Fields are role-named, not
+property-named, so responses can mix users from different schemas.
+`identifier` and `display` are resolved independently from the user
+schema's `x-identifier` and `x-display` designations, live at read time.
+Clients render `display`, falling back to `identifier`, then `user_id`.
+Missing or deleted users degrade to `user_id` only.
+
+ */
+type GetGrant200User = {
+  /** @pattern ^user_[a-zA-Z0-9_-]+$ */user_id: string;
+  /** The current value of the schema's designated identifier
+  (`x-identifier`). Absent when the schema designates no identifier or
+  the user carries no value for it.
+   */
+  identifier?: string;
+  /** The schema property `identifier` came from, so clients can reach the
+  property's schema for semantics (a mailto link, a field label)
+  instead of guessing from the value. Present exactly when
+  `identifier` is.
+   */
+  identifier_property?: string;
+  /** The `x-display` rendering — the designated properties' values joined
+  in list order. Purely presentational, with no source attribution.
+  Absent when the schema designates no display properties or the user
+  carries no values for them.
+   */
+  display?: string;
+};
+//#endregion
+//#region src/generated/model/getGrant200.d.ts
+/**
+ * A collaboration grant binding a principal to a project relation.
+ */
+type GetGrant200 = {
+  /** Managed assignment id (`asgn_<opaque>`). */id: string; /** Project this grant is scoped to. */
+  project_id: string; /** Kind of principal bound by this grant. */
+  principal_type: GetGrant200PrincipalType; /** Principal id (`user_<opaque>` or `team_<opaque>`). */
+  principal_id: string; /** Catalog object type. Always `project` for this API. */
+  object_type: GetGrant200ObjectType; /** Catalog relation on the project. */
+  relation: GetGrant200Relation; /** When the grant was created. */
+  created_at: string;
+  /** When the grant expires. Null when it does not expire. GET still
+  returns expired unrevoked grants; authorization ignores them.
+   */
+  expires_at?: string | null;
+  /** A resolved reference to a user (ADR 058 §3). Fields are role-named, not
+  property-named, so responses can mix users from different schemas.
+  `identifier` and `display` are resolved independently from the user
+  schema's `x-identifier` and `x-display` designations, live at read time.
+  Clients render `display`, falling back to `identifier`, then `user_id`.
+  Missing or deleted users degrade to `user_id` only.
+   */
+  user?: GetGrant200User;
+  /** A resolved reference to a team. Carries the team's id and name so a grant
+  list is readable without embedding the full Team body. Id and display ride
+  `project.read` (ADR 059 rule 8): a reference field carrying only the
+  target's id and display strings needs no gate of its own. Missing or
+  deleted teams degrade to `team_id` only.
+   */
+  team?: GetGrant200Team;
+  /** The principal named by `principal_id`, present only when the request
+  asked for it with `expand: ["principal"]` (ADR 059). Absent means it
+  was not requested; `null` means the principal cannot be loaded
+  (deleted or missing). GET and create never set this field.
+     When present, the body is the same representation `GET /users/{id}`
+  serves for `principal_type=user`, or `GET /teams/{id}` for
+  `principal_type=team`. Discriminate with the grant's existing
+  `principal_type`.
+     Requires `user.read` and `team.read` in addition to `project.read`.
+  Both are checked on the whole request before the list.
+   */
+  readonly principal?: GetGrant200Principal;
+};
+//#endregion
+//#region src/generated/model/getGrant401Details.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Additional error-specific context.
+ */
+type GetGrant401Details = {
+  [key: string]: unknown;
 };
 //#endregion
 //#region src/generated/model/getGrant401.d.ts
@@ -10130,6 +10774,44 @@ declare const GetMySession200State: {
   readonly expired: "expired";
 };
 //#endregion
+//#region src/generated/model/getMySession200User.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * A resolved reference to a user (ADR 058 §3). Fields are role-named, not
+property-named, so responses can mix users from different schemas.
+`identifier` and `display` are resolved independently from the user
+schema's `x-identifier` and `x-display` designations, live at read time.
+Clients render `display`, falling back to `identifier`, then `user_id`.
+Missing or deleted users degrade to `user_id` only.
+
+ */
+type GetMySession200User = {
+  /** @pattern ^user_[a-zA-Z0-9_-]+$ */user_id: string;
+  /** The current value of the schema's designated identifier
+  (`x-identifier`). Absent when the schema designates no identifier or
+  the user carries no value for it.
+   */
+  identifier?: string;
+  /** The schema property `identifier` came from, so clients can reach the
+  property's schema for semantics (a mailto link, a field label)
+  instead of guessing from the value. Present exactly when
+  `identifier` is.
+   */
+  identifier_property?: string;
+  /** The `x-display` rendering — the designated properties' values joined
+  in list order. Purely presentational, with no source attribution.
+  Absent when the schema designates no display properties or the user
+  carries no values for them.
+   */
+  display?: string;
+};
+//#endregion
 //#region src/generated/model/getMySession200UserAgent.d.ts
 /**
  * Generated by orval v8.10.0 🍺
@@ -10174,23 +10856,14 @@ type GetMySession200 = {
   factor has been verified through an `auth_attempt`.
    */
   user_id?: string | null;
-  /** Human-readable name of the authenticated user, resolved from the
-  conventional user-schema properties: `name` when defined, otherwise
-  the given and family name parts joined — `givenName`/`familyName`
-  (the shipped presets' spelling) or `given_name`/`family_name`. Only
-  present on reads that hydrate the user's identity
-  (`GET /sessions/me`) and only when the session has an authenticated
-  user whose schema carries those properties; clients fall back to
-  `email`, then `user_id`.
-   */
-  name?: string;
-  /** Email address of the authenticated user, resolved from the
-  conventional `email` user-schema property. Only present on reads
-  that hydrate the user's identity (`GET /sessions/me`) and only when
-  the session has an authenticated user whose schema carries that
-  property.
-   */
-  email?: string;
+  /** A resolved reference to a user (ADR 058 §3). Fields are role-named, not
+  property-named, so responses can mix users from different schemas.
+  `identifier` and `display` are resolved independently from the user
+  schema's `x-identifier` and `x-display` designations, live at read time.
+  Clients render `display`, falling back to `identifier`, then `user_id`.
+  Missing or deleted users degrade to `user_id` only.
+   */
+  user?: GetMySession200User;
   /** Verified authentication factors accumulated by this session.
   Each key is a factor type (e.g. `password`, `totp`, `passkey`).
   Each value is a factor event object with at least `verified_at` and
@@ -10476,6 +11149,24 @@ type GetMyUser200 = {
    */
   attributes: GetMyUser200Attributes;
   metadata: GetMyUser200Metadata;
+  /** The current value of the user schema's designated identifier
+  (`x-identifier`), resolved live at read time. Absent when the schema
+  designates no identifier or the user carries no value for it.
+   */
+  readonly identifier?: string;
+  /** The schema property `identifier` came from, so clients can reach the
+  property's schema for semantics (a mailto link, a field label)
+  instead of guessing from the value. Present exactly when
+  `identifier` is.
+   */
+  readonly identifier_property?: string;
+  /** The `x-display` rendering — the designated properties' values joined
+  in list order, resolved live at read time. Purely presentational.
+  Absent when the schema designates no display properties or the user
+  carries no values for them. Clients render `display`, falling back
+  to `identifier`, then `id`.
+   */
+  readonly display?: string;
   /** The user's team memberships, present only when the request asked for them with
   `expand: ["teams"]` (ADR 059). Absent means it was not requested; `[]`
   means the user has none.
@@ -11270,6 +11961,44 @@ declare const GetSession200State: {
   readonly expired: "expired";
 };
 //#endregion
+//#region src/generated/model/getSession200User.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * A resolved reference to a user (ADR 058 §3). Fields are role-named, not
+property-named, so responses can mix users from different schemas.
+`identifier` and `display` are resolved independently from the user
+schema's `x-identifier` and `x-display` designations, live at read time.
+Clients render `display`, falling back to `identifier`, then `user_id`.
+Missing or deleted users degrade to `user_id` only.
+
+ */
+type GetSession200User = {
+  /** @pattern ^user_[a-zA-Z0-9_-]+$ */user_id: string;
+  /** The current value of the schema's designated identifier
+  (`x-identifier`). Absent when the schema designates no identifier or
+  the user carries no value for it.
+   */
+  identifier?: string;
+  /** The schema property `identifier` came from, so clients can reach the
+  property's schema for semantics (a mailto link, a field label)
+  instead of guessing from the value. Present exactly when
+  `identifier` is.
+   */
+  identifier_property?: string;
+  /** The `x-display` rendering — the designated properties' values joined
+  in list order. Purely presentational, with no source attribution.
+  Absent when the schema designates no display properties or the user
+  carries no values for them.
+   */
+  display?: string;
+};
+//#endregion
 //#region src/generated/model/getSession200UserAgent.d.ts
 /**
  * Generated by orval v8.10.0 🍺
@@ -11314,23 +12043,14 @@ type GetSession200 = {
   factor has been verified through an `auth_attempt`.
    */
   user_id?: string | null;
-  /** Human-readable name of the authenticated user, resolved from the
-  conventional user-schema properties: `name` when defined, otherwise
-  the given and family name parts joined — `givenName`/`familyName`
-  (the shipped presets' spelling) or `given_name`/`family_name`. Only
-  present on reads that hydrate the user's identity
-  (`GET /sessions/me`) and only when the session has an authenticated
-  user whose schema carries those properties; clients fall back to
-  `email`, then `user_id`.
-   */
-  name?: string;
-  /** Email address of the authenticated user, resolved from the
-  conventional `email` user-schema property. Only present on reads
-  that hydrate the user's identity (`GET /sessions/me`) and only when
-  the session has an authenticated user whose schema carries that
-  property.
-   */
-  email?: string;
+  /** A resolved reference to a user (ADR 058 §3). Fields are role-named, not
+  property-named, so responses can mix users from different schemas.
+  `identifier` and `display` are resolved independently from the user
+  schema's `x-identifier` and `x-display` designations, live at read time.
+  Clients render `display`, falling back to `identifier`, then `user_id`.
+  Missing or deleted users degrade to `user_id` only.
+   */
+  user?: GetSession200User;
   /** Verified authentication factors accumulated by this session.
   Each key is a factor type (e.g. `password`, `totp`, `passkey`).
   Each value is a factor event object with at least `verified_at` and
@@ -11763,6 +12483,24 @@ type GetUserByID200 = {
    */
   attributes: GetUserByID200Attributes;
   metadata: GetUserByID200Metadata;
+  /** The current value of the user schema's designated identifier
+  (`x-identifier`), resolved live at read time. Absent when the schema
+  designates no identifier or the user carries no value for it.
+   */
+  readonly identifier?: string;
+  /** The schema property `identifier` came from, so clients can reach the
+  property's schema for semantics (a mailto link, a field label)
+  instead of guessing from the value. Present exactly when
+  `identifier` is.
+   */
+  readonly identifier_property?: string;
+  /** The `x-display` rendering — the designated properties' values joined
+  in list order, resolved live at read time. Purely presentational.
+  Absent when the schema designates no display properties or the user
+  carries no values for them. Clients render `display`, falling back
+  to `identifier`, then `id`.
+   */
+  readonly display?: string;
   /** The user's team memberships, present only when the request asked for them with
   `expand: ["teams"]` (ADR 059). Absent means it was not requested; `[]`
   means the user has none.
@@ -12006,6 +12744,30 @@ type InitClaim409 = {
   details: InitClaim409Details;
 };
 //#endregion
+//#region src/generated/model/initClaim410.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * The project was not claimed within 14 days of creation and can no longer be claimed
+
+Error code: proj.claim_window_expired
+
+ */
+type InitClaim410 = {
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: {
+    [key: string]: unknown;
+  };
+} & {
+  code: "proj.claim_window_expired";
+};
+//#endregion
 //#region src/generated/model/initClaimDefaultDetails.d.ts
 /**
  * Generated by orval v8.10.0 🍺
@@ -13295,6 +14057,59 @@ type ListEvents200DataItem = ({
     };
     [key: string]: unknown;
   };
+} & {
+  event_type: "release.created";
+  /** Allowlisted fields for `release.created`. The release id is already the
+  event's `entity_id`; the pinned set is repeated here so the audit stream
+  answers what a release contained without reading the release itself.
+  */
+  payload: {
+    content_hash?: string;
+    message?: string;
+    git_sha?: string;
+    git_dirty?: boolean;
+    pointers?: {
+      kind?: string;
+      handle?: string;
+      revision_id?: string;
+    }[];
+  };
+}) | ({
+  /** Managed event id (`evt_<opaque>`). */id: string; /** @pattern ^[a-zA-Z0-9_-]+$ */
+  project_id: string; /** Emit-time team scope, when the actor operated under a team. */
+  team_id?: string | null;
+  /** Semantic event name (dot-separated). Discriminator for the Event union —
+  see docs/design/api/events-catalog.md.
+  */
+  event_type: string; /** Wide-event category. */
+  category: "request" | "auth" | "session" | "admin" | "entity" | "signal"; /** When the action happened (server/storage clock, dialect-owned). */
+  occurred_at: string; /** When the row was inserted (server/storage clock, dialect-owned). */
+  created_at: string; /** Who triggered the event. */
+  actor_id?: string | null; /** Actor kind. */
+  actor_type?: "human" | "service" | "system" | "agent" | null; /** Resource type affected. */
+  entity_type?: string | null; /** Resource id affected. */
+  entity_id?: string | null; /** Application or agent that produced the event. */
+  client_id: string; /** Token id present at emit time, when any. */
+  token_id?: string; /** Delegation kind (omit when unset). */
+  delegation_type?: "direct" | "delegated" | "pat_shared" | "exchanged";
+  delegation_id?: string;
+  grantor?: string; /** Device fingerprint correlation id. */
+  fingerprint?: string; /** HTTP request correlation id. */
+  request_id?: string | null; /** Session correlation id. */
+  session_id?: string | null; /** Login flow correlation id. */
+  flow_id?: string | null;
+  /** Emit-time metadata, already redacted at write. Path A request.api may
+  set client (ip, user_agent, origin) for SIEM join on request_id. Not a
+  live risk-evaluator input.
+  */
+  metadata?: {
+    /** Observed HTTP requestor context on Path A request.api only. */client?: {
+      /** Client IP from the first X-Forwarded-For hop or RemoteAddr. */ip?: string; /** Observed User-Agent header. */
+      user_agent?: string; /** Origin header when present. */
+      origin?: string;
+    };
+    [key: string]: unknown;
+  };
 } & {
   event_type: "request.api"; /** Payload for `request.api` events. */
   payload: {
@@ -14255,9 +15070,11 @@ the purpose + audience when a flow is created via POST /flow.
 type ListFlowDefinitions200FlowDefinitionsItemFlowDefinition = {
   /**
      * Stable identifier for this flow, used as the target of cross-flow
-  `switch` and `pivot` transitions. Renaming is not supported — the
-  `name` is part of the public contract another definition may
-  reference. Acts as the human display label as well; no separate slug.
+  `switch` and `pivot` transitions. Every revision of a flow shares its
+  `name`; publishing a definition under an existing `name` adds a
+  revision to that flow. Renaming is not supported — the `name` is part
+  of the public contract another definition may reference. Acts as the
+  human display label as well; no separate slug.
         * @pattern ^[a-z][a-z0-9-]*$
      */
   name: string;
@@ -14411,6 +15228,9 @@ type ListFlowDefinitions200FlowDefinitionsItem = {
 };
 //#endregion
 //#region src/generated/model/listFlowDefinitions200.d.ts
+/**
+ * List of flow definitions, newest by creation time first.
+ */
 type ListFlowDefinitions200 = {
   flow_definitions: ListFlowDefinitions200FlowDefinitionsItem[]; /** The token to retrieve the next page of results. Absent if there are no more results. */
   next_page_token?: string | null;
@@ -14589,6 +15409,13 @@ type ListFlowDefinitionsParams = {
    * Filter flow definitions by purpose (e.g., registration, login).
    */
   purpose?: ListFlowDefinitionsPurpose;
+  /**
+  * The flow name to filter by. Every revision of a flow shares its
+  `name`, so the result is that flow's revisions, newest by creation
+  time first.
+    * @pattern ^[a-z][a-z0-9-]*$
+  */
+  name?: string;
   /**
    * Related entities to embed on each returned flow definition.
    */
@@ -15615,7 +16442,7 @@ type PatchProjectDefault = ({
   code: "req.invalid";
 });
 //#endregion
-//#region src/generated/model/queryProjects200ProjectsItem.d.ts
+//#region src/generated/model/queryGrants200GrantsItemObjectType.d.ts
 /**
  * Generated by orval v8.10.0 🍺
  * Do not edit manually.
@@ -15624,32 +16451,14 @@ type PatchProjectDefault = ({
  * OpenAPI spec version: 0.0.1
  */
 /**
- * The current state of a project.
- */
-type QueryProjects200ProjectsItem = {
-  /** The unique identifier of the project. */id: string; /** The name of the project. */
-  name: string;
-  /** Origins which are allowed for previewing and testing the project.
-   */
-  preview_origins?: string[]; /** The time when the project was created. */
-  created_at: string; /** The time when the project was last updated. */
-  updated_at: string;
-};
-//#endregion
-//#region src/generated/model/queryProjects200.d.ts
-/**
- * Paginated list of projects.
+ * Catalog object type. Always `project` for this API.
  */
-type QueryProjects200 = {
-  projects: QueryProjects200ProjectsItem[];
-  /** Token to pass as `page_token` in the next request to fetch the following page.
-  Absent when there are no more results. The follow-up request must repeat the
-  same `sorting` that produced this token (omit only when both pages use the default).
-   */
-  next_page_token?: string | null;
+type QueryGrants200GrantsItemObjectType = (typeof QueryGrants200GrantsItemObjectType)[keyof typeof QueryGrants200GrantsItemObjectType];
+declare const QueryGrants200GrantsItemObjectType: {
+  readonly project: "project";
 };
 //#endregion
-//#region src/generated/model/queryProjects400Details.d.ts
+//#region src/generated/model/queryGrants200GrantsItemPrincipal.d.ts
 /**
  * Generated by orval v8.10.0 🍺
  * Do not edit manually.
@@ -15658,23 +16467,124 @@ type QueryProjects200 = {
  * OpenAPI spec version: 0.0.1
  */
 /**
- * Additional error-specific context.
- */
-type QueryProjects400Details = {
-  [key: string]: unknown;
-};
-//#endregion
-//#region src/generated/model/queryProjects400.d.ts
-/**
- * Standard error payload returned for failed API requests.
+ * The principal named by `principal_id`, present only when the request
+asked for it with `expand: ["principal"]` (ADR 059). Absent means it
+was not requested; `null` means the principal cannot be loaded
+(deleted or missing). GET and create never set this field.
+
+When present, the body is the same representation `GET /users/{id}`
+serves for `principal_type=user`, or `GET /teams/{id}` for
+`principal_type=team`. Discriminate with the grant's existing
+`principal_type`.
+
+Requires `user.read` and `team.read` in addition to `project.read`.
+Both are checked on the whole request before the list.
+
  */
-type QueryProjects400 = {
-  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
-  message: string; /** Additional error-specific context. */
-  details?: QueryProjects400Details;
-};
+type QueryGrants200GrantsItemPrincipal = {
+  /** @pattern ^user_[a-zA-Z0-9_-]+$ */id: string;
+  /** The schema that defines the content of `attributes`. These schemas can be
+  created using the `/schemas` endpoint. A default schema is provided.
+  This schema can be retrieved using the same endpoint.
+  */
+  schema: string;
+  /** The user's content, satisfying the schema named by `schema`. Property
+  names and types are determined entirely by that schema.
+  */
+  attributes: {
+    [key: string]: unknown;
+  };
+  metadata: {
+    /** The time when the user was created. */created_at: string; /** The time when the user was last updated. */
+    updated_at: string; /** The status of the user. */
+    status: "active" | "suspended" | "deactivated" | "pending_purge";
+    /** The team that owns this user's identity lifecycle, or `null` when the
+    user is self-owned. This is a single team and a different concept from
+    the user's team memberships: it decides who may deprovision the user, not
+    which teams the user collaborates in. Memberships are their own paginated
+    resource — `GET /users/{user_id}/teams`.
+    */
+    lifecycle_owner_team_id?: string | null;
+    /** The team named by `lifecycle_owner_team_id`, present only when the
+    request asked for it with `expand: ["lifecycle_owner_team"]` (ADR 059).
+    Absent means it was not requested; `null` means the user is self-owned
+    and there is no owner to resolve.
+    Requesting it does not guarantee it is present on every user. Today
+    `team.read` is checked once for the whole request, so it is; once that
+    check is per team, a page may contain a user whose owner the caller may
+    not read, and such a row answers with neither the team nor `null` —
+    `null` already means self-owned. What it answers with instead is decided
+    with the granular scopes (#420); do not read the two cases above as the
+    complete set.
+    This is the same representation `GET /teams/{team_id}` serves. It is a
+    single team, not a collection, so it carries no cap and no truncation
+    flag.
+    */
+    readonly lifecycle_owner_team?: {
+      /** The unique identifier of the team. */id: string; /** The name of the team. */
+      name: string;
+      /** The lifecycle state of a team.
+      active: The team is available for use.
+      deactivated: The team is no longer active but is retained for historical and audit purposes.
+      */
+      status: "active" | "deactivated"; /** The time when the team was created. */
+      created_at: string; /** The time when the team was last updated. */
+      updated_at: string;
+    } | null;
+  };
+  /** The current value of the user schema's designated identifier
+  (`x-identifier`), resolved live at read time. Absent when the schema
+  designates no identifier or the user carries no value for it.
+  */
+  readonly identifier?: string;
+  /** The schema property `identifier` came from, so clients can reach the
+  property's schema for semantics (a mailto link, a field label)
+  instead of guessing from the value. Present exactly when
+  `identifier` is.
+  */
+  readonly identifier_property?: string;
+  /** The `x-display` rendering — the designated properties' values joined
+  in list order, resolved live at read time. Purely presentational.
+  Absent when the schema designates no display properties or the user
+  carries no values for them. Clients render `display`, falling back
+  to `identifier`, then `id`.
+  */
+  readonly display?: string;
+  /** The user's team memberships, present only when the request asked for them with
+  `expand: ["teams"]` (ADR 059). Absent means it was not requested; `[]`
+  means the user has none.
+  Deliberately outside `metadata`: memberships are a related collection, not
+  part of the server-owned envelope, and it is a different concept from
+  `metadata.lifecycle_owner_team_id` (ADR 024).
+  */
+  readonly teams?: readonly {
+    /** The unique identifier of the team. */id: string; /** The name of the team. */
+    name: string;
+    /** The user's participation state on this team. Memberships the user was
+    removed from are not returned.
+    */
+    membership_status: "pending" | "active" | "inactive"; /** The time when the user joined this team. */
+    created_at: string; /** The time when this membership was last changed. */
+    updated_at: string;
+  }[];
+  /** True when the user is on more teams than the embedded list carries. The
+  embedded list is capped and cannot be paged; read them all at
+  `GET /users/{user_id}/teams`. Present only alongside `teams`.
+  */
+  readonly teams_truncated?: boolean;
+} | {
+  /** The unique identifier of the team. */id: string; /** The name of the team. */
+  name: string;
+  /** The lifecycle state of a team.
+  active: The team is available for use.
+  deactivated: The team is no longer active but is retained for historical and audit purposes.
+  */
+  status: "active" | "deactivated"; /** The time when the team was created. */
+  created_at: string; /** The time when the team was last updated. */
+  updated_at: string;
+} | null;
 //#endregion
-//#region src/generated/model/queryProjects401Details.d.ts
+//#region src/generated/model/queryGrants200GrantsItemPrincipalType.d.ts
 /**
  * Generated by orval v8.10.0 🍺
  * Do not edit manually.
@@ -15683,23 +16593,15 @@ type QueryProjects400 = {
  * OpenAPI spec version: 0.0.1
  */
 /**
- * Additional error-specific context.
- */
-type QueryProjects401Details = {
-  [key: string]: unknown;
-};
-//#endregion
-//#region src/generated/model/queryProjects401.d.ts
-/**
- * Standard error payload returned for failed API requests.
+ * Kind of principal bound by this grant.
  */
-type QueryProjects401 = {
-  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
-  message: string; /** Additional error-specific context. */
-  details?: QueryProjects401Details;
+type QueryGrants200GrantsItemPrincipalType = (typeof QueryGrants200GrantsItemPrincipalType)[keyof typeof QueryGrants200GrantsItemPrincipalType];
+declare const QueryGrants200GrantsItemPrincipalType: {
+  readonly user: "user";
+  readonly team: "team";
 };
 //#endregion
-//#region src/generated/model/queryProjects403Details.d.ts
+//#region src/generated/model/queryGrants200GrantsItemRelation.d.ts
 /**
  * Generated by orval v8.10.0 🍺
  * Do not edit manually.
@@ -15708,9 +16610,575 @@ type QueryProjects401 = {
  * OpenAPI spec version: 0.0.1
  */
 /**
- * Additional error-specific context.
+ * Catalog relation on the project.
  */
-type QueryProjects403Details = {
+type QueryGrants200GrantsItemRelation = (typeof QueryGrants200GrantsItemRelation)[keyof typeof QueryGrants200GrantsItemRelation];
+declare const QueryGrants200GrantsItemRelation: {
+  readonly viewer: "viewer";
+  readonly editor: "editor";
+  readonly admin: "admin";
+};
+//#endregion
+//#region src/generated/model/queryGrants200GrantsItemTeam.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * A resolved reference to a team. Carries the team's id and name so a grant
+list is readable without embedding the full Team body. Id and display ride
+`project.read` (ADR 059 rule 8): a reference field carrying only the
+target's id and display strings needs no gate of its own. Missing or
+deleted teams degrade to `team_id` only.
+
+ */
+type QueryGrants200GrantsItemTeam = {
+  /** The referenced team's id (`team_<opaque>`). Always present. */team_id: string; /** The team's name. Absent when the team can no longer be loaded. */
+  name?: string;
+};
+//#endregion
+//#region src/generated/model/queryGrants200GrantsItemUser.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * A resolved reference to a user (ADR 058 §3). Fields are role-named, not
+property-named, so responses can mix users from different schemas.
+`identifier` and `display` are resolved independently from the user
+schema's `x-identifier` and `x-display` designations, live at read time.
+Clients render `display`, falling back to `identifier`, then `user_id`.
+Missing or deleted users degrade to `user_id` only.
+
+ */
+type QueryGrants200GrantsItemUser = {
+  /** @pattern ^user_[a-zA-Z0-9_-]+$ */user_id: string;
+  /** The current value of the schema's designated identifier
+  (`x-identifier`). Absent when the schema designates no identifier or
+  the user carries no value for it.
+   */
+  identifier?: string;
+  /** The schema property `identifier` came from, so clients can reach the
+  property's schema for semantics (a mailto link, a field label)
+  instead of guessing from the value. Present exactly when
+  `identifier` is.
+   */
+  identifier_property?: string;
+  /** The `x-display` rendering — the designated properties' values joined
+  in list order. Purely presentational, with no source attribution.
+  Absent when the schema designates no display properties or the user
+  carries no values for them.
+   */
+  display?: string;
+};
+//#endregion
+//#region src/generated/model/queryGrants200GrantsItem.d.ts
+/**
+ * A collaboration grant binding a principal to a project relation.
+ */
+type QueryGrants200GrantsItem = {
+  /** Managed assignment id (`asgn_<opaque>`). */id: string; /** Project this grant is scoped to. */
+  project_id: string; /** Kind of principal bound by this grant. */
+  principal_type: QueryGrants200GrantsItemPrincipalType; /** Principal id (`user_<opaque>` or `team_<opaque>`). */
+  principal_id: string; /** Catalog object type. Always `project` for this API. */
+  object_type: QueryGrants200GrantsItemObjectType; /** Catalog relation on the project. */
+  relation: QueryGrants200GrantsItemRelation; /** When the grant was created. */
+  created_at: string;
+  /** When the grant expires. Null when it does not expire. GET still
+  returns expired unrevoked grants; authorization ignores them.
+   */
+  expires_at?: string | null;
+  /** A resolved reference to a user (ADR 058 §3). Fields are role-named, not
+  property-named, so responses can mix users from different schemas.
+  `identifier` and `display` are resolved independently from the user
+  schema's `x-identifier` and `x-display` designations, live at read time.
+  Clients render `display`, falling back to `identifier`, then `user_id`.
+  Missing or deleted users degrade to `user_id` only.
+   */
+  user?: QueryGrants200GrantsItemUser;
+  /** A resolved reference to a team. Carries the team's id and name so a grant
+  list is readable without embedding the full Team body. Id and display ride
+  `project.read` (ADR 059 rule 8): a reference field carrying only the
+  target's id and display strings needs no gate of its own. Missing or
+  deleted teams degrade to `team_id` only.
+   */
+  team?: QueryGrants200GrantsItemTeam;
+  /** The principal named by `principal_id`, present only when the request
+  asked for it with `expand: ["principal"]` (ADR 059). Absent means it
+  was not requested; `null` means the principal cannot be loaded
+  (deleted or missing). GET and create never set this field.
+     When present, the body is the same representation `GET /users/{id}`
+  serves for `principal_type=user`, or `GET /teams/{id}` for
+  `principal_type=team`. Discriminate with the grant's existing
+  `principal_type`.
+     Requires `user.read` and `team.read` in addition to `project.read`.
+  Both are checked on the whole request before the list.
+   */
+  readonly principal?: QueryGrants200GrantsItemPrincipal;
+};
+//#endregion
+//#region src/generated/model/queryGrants200.d.ts
+/**
+ * Paginated list of grants.
+ */
+type QueryGrants200 = {
+  grants: QueryGrants200GrantsItem[];
+  /** Token to pass as `page_token` in the next request to fetch the following page.
+  Absent when there are no more results. The follow-up request must repeat the
+  same `sorting` that produced this token (omit only when both pages use the default).
+   */
+  next_page_token?: string | null;
+};
+//#endregion
+//#region src/generated/model/queryGrants400Details.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Additional error-specific context.
+ */
+type QueryGrants400Details = {
+  [key: string]: unknown;
+};
+//#endregion
+//#region src/generated/model/queryGrants400.d.ts
+/**
+ * Standard error payload returned for failed API requests.
+ */
+type QueryGrants400 = {
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: QueryGrants400Details;
+};
+//#endregion
+//#region src/generated/model/queryGrants401Details.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Additional error-specific context.
+ */
+type QueryGrants401Details = {
+  [key: string]: unknown;
+};
+//#endregion
+//#region src/generated/model/queryGrants401.d.ts
+/**
+ * Standard error payload returned for failed API requests.
+ */
+type QueryGrants401 = {
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: QueryGrants401Details;
+};
+//#endregion
+//#region src/generated/model/queryGrants403Details.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Additional error-specific context.
+ */
+type QueryGrants403Details = {
+  [key: string]: unknown;
+};
+//#endregion
+//#region src/generated/model/queryGrants403.d.ts
+/**
+ * Standard error payload returned for failed API requests.
+ */
+type QueryGrants403 = {
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: QueryGrants403Details;
+};
+//#endregion
+//#region src/generated/model/queryGrantsBodyExpandItem.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * A related object to embed on each returned grant (ADR 059).
+
+- `principal`: the principal named by `principal_id`, as `principal` on
+  each grant. The property is omitted entirely when not requested. When
+  requested, it is the same body `GET /users/{id}` serves for
+  `principal_type=user`, or `GET /teams/{id}` for `principal_type=team`,
+  and `null` when that principal cannot be loaded. Discriminate with the
+  grant's existing `principal_type`.
+
+  Requires `user.read` and `team.read` in addition to `project.read`.
+  Both are checked on the whole request before the list, because a mixed
+  page is the common case. A caller who may not read either resource
+  receives 403 rather than a silently missing `principal`.
+
+ */
+type QueryGrantsBodyExpandItem = (typeof QueryGrantsBodyExpandItem)[keyof typeof QueryGrantsBodyExpandItem];
+declare const QueryGrantsBodyExpandItem: {
+  readonly principal: "principal";
+};
+//#endregion
+//#region src/generated/model/queryGrantsBodyFilterItemField.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Field to filter grants by:
+- `created_at`: RFC3339 timestamp
+- `principal_type`: `user` or `team`
+- `principal_id`: principal id (`user_<opaque>` or `team_<opaque>`)
+- `relation`: `viewer`, `editor`, or `admin`
+- `expires_at`: RFC3339 timestamp (null when the grant does not expire)
+
+ */
+type QueryGrantsBodyFilterItemField = (typeof QueryGrantsBodyFilterItemField)[keyof typeof QueryGrantsBodyFilterItemField];
+declare const QueryGrantsBodyFilterItemField: {
+  readonly created_at: "created_at";
+  readonly principal_type: "principal_type";
+  readonly principal_id: "principal_id";
+  readonly relation: "relation";
+  readonly expires_at: "expires_at";
+};
+//#endregion
+//#region src/generated/model/queryGrantsBodyFilterItemOperation.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Filter operation defines the operations which can be used when filtering on a
+query endpoint.
+
+On text fields, `contains` is a case-insensitive substring match. `equals`
+compares the whole value and is case-sensitive unless the field documents
+otherwise.
+
+ */
+type QueryGrantsBodyFilterItemOperation = (typeof QueryGrantsBodyFilterItemOperation)[keyof typeof QueryGrantsBodyFilterItemOperation];
+declare const QueryGrantsBodyFilterItemOperation: {
+  readonly equals: "equals";
+  readonly not_equals: "not_equals";
+  readonly contains: "contains";
+  readonly not_contains: "not_contains";
+  readonly less_than: "less_than";
+  readonly less_than_or_equal: "less_than_or_equal";
+  readonly greater_than: "greater_than";
+  readonly greater_than_or_equal: "greater_than_or_equal";
+};
+//#endregion
+//#region src/generated/model/queryGrantsBodyFilterItem.d.ts
+type QueryGrantsBodyFilterItem = {
+  /** Field to filter grants by:
+  - `created_at`: RFC3339 timestamp
+  - `principal_type`: `user` or `team`
+  - `principal_id`: principal id (`user_<opaque>` or `team_<opaque>`)
+  - `relation`: `viewer`, `editor`, or `admin`
+  - `expires_at`: RFC3339 timestamp (null when the grant does not expire)
+   */
+  field: QueryGrantsBodyFilterItemField;
+  /** Filter-value specifies which values can be filtered by a query endpoint. This
+  is a union of types. When a value is specified which is not assignable to the
+  field which is being filtered, a 400 error will be returned.
+   */
+  value?: string | number | boolean | null;
+  /** Filter operation defines the operations which can be used when filtering on a
+  query endpoint.
+     On text fields, `contains` is a case-insensitive substring match. `equals`
+  compares the whole value and is case-sensitive unless the field documents
+  otherwise.
+   */
+  operation: QueryGrantsBodyFilterItemOperation;
+};
+//#endregion
+//#region src/generated/model/queryGrantsBodySortingDirection.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+type QueryGrantsBodySortingDirection = (typeof QueryGrantsBodySortingDirection)[keyof typeof QueryGrantsBodySortingDirection];
+declare const QueryGrantsBodySortingDirection: {
+  readonly asc: "asc";
+  readonly desc: "desc";
+};
+//#endregion
+//#region src/generated/model/queryGrantsBodySortingField.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Field to sort grants by. Default is `created_at` ascending with `id` as
+the tiebreaker.
+
+ */
+type QueryGrantsBodySortingField = (typeof QueryGrantsBodySortingField)[keyof typeof QueryGrantsBodySortingField];
+declare const QueryGrantsBodySortingField: {
+  readonly created_at: "created_at";
+  readonly expires_at: "expires_at";
+  readonly id: "id";
+};
+//#endregion
+//#region src/generated/model/queryGrantsBodySorting.d.ts
+type QueryGrantsBodySorting = {
+  /** Field to sort grants by. Default is `created_at` ascending with `id` as
+  the tiebreaker.
+   */
+  field: QueryGrantsBodySortingField;
+  direction: QueryGrantsBodySortingDirection;
+};
+//#endregion
+//#region src/generated/model/queryGrantsBody.d.ts
+/**
+ * Request to query the grants of a project.
+ */
+type QueryGrantsBody = {
+  /**
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+  /** Token to retrieve the next page of results. Must be sent with the same
+  `sorting` as the request that issued the token. Omitting `sorting` reuses
+  the default sort and only succeeds when that default matches the token.
+   */
+  page_token?: string | null;
+  /** Related objects to embed on each grant (ADR 059). Omit it and no
+  embedded object is returned. An unrecognised value is rejected.
+   */
+  expand?: QueryGrantsBodyExpandItem[];
+  sorting?: QueryGrantsBodySorting; /** Filter criteria for querying grants. Combined with AND. */
+  filter?: QueryGrantsBodyFilterItem[];
+};
+//#endregion
+//#region src/generated/model/queryGrantsDefault.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+type QueryGrantsDefault = ({
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: {
+    [key: string]: unknown;
+  };
+} & {
+  code: "auth.unauthorized";
+}) | ({
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: {
+    [key: string]: unknown;
+  };
+} & {
+  code: "grant.invalid";
+}) | ({
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: {
+    [key: string]: unknown;
+  };
+} & {
+  code: "grant.not_found";
+}) | ({
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: {
+    [key: string]: unknown;
+  };
+} & {
+  code: "grant.permission_denied";
+}) | ({
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: {
+    [key: string]: unknown;
+  };
+} & {
+  code: "internal";
+}) | ({
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: {
+    [key: string]: unknown;
+  };
+} & {
+  code: "not_implemented";
+}) | ({
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: {
+    [key: string]: unknown;
+  };
+} & {
+  code: "req.invalid";
+}) | ({
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: {
+    [key: string]: unknown;
+  };
+} & {
+  code: "team.permission_denied";
+}) | ({
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: {
+    [key: string]: unknown;
+  };
+} & {
+  code: "user.permission_denied";
+});
+//#endregion
+//#region src/generated/model/queryGrantsParams.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+type QueryGrantsParams = {
+  /**
+   * The unique identifier of the project
+   * @pattern ^[a-zA-Z0-9_-]+$
+   */
+  project_id: string;
+};
+//#endregion
+//#region src/generated/model/queryProjects200ProjectsItem.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * The current state of a project.
+ */
+type QueryProjects200ProjectsItem = {
+  /** The unique identifier of the project. */id: string; /** The name of the project. */
+  name: string;
+  /** Origins which are allowed for previewing and testing the project.
+   */
+  preview_origins?: string[]; /** The time when the project was created. */
+  created_at: string; /** The time when the project was last updated. */
+  updated_at: string;
+};
+//#endregion
+//#region src/generated/model/queryProjects200.d.ts
+/**
+ * Paginated list of projects.
+ */
+type QueryProjects200 = {
+  projects: QueryProjects200ProjectsItem[];
+  /** Token to pass as `page_token` in the next request to fetch the following page.
+  Absent when there are no more results. The follow-up request must repeat the
+  same `sorting` that produced this token (omit only when both pages use the default).
+   */
+  next_page_token?: string | null;
+};
+//#endregion
+//#region src/generated/model/queryProjects400Details.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Additional error-specific context.
+ */
+type QueryProjects400Details = {
+  [key: string]: unknown;
+};
+//#endregion
+//#region src/generated/model/queryProjects400.d.ts
+/**
+ * Standard error payload returned for failed API requests.
+ */
+type QueryProjects400 = {
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: QueryProjects400Details;
+};
+//#endregion
+//#region src/generated/model/queryProjects401Details.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Additional error-specific context.
+ */
+type QueryProjects401Details = {
+  [key: string]: unknown;
+};
+//#endregion
+//#region src/generated/model/queryProjects401.d.ts
+/**
+ * Standard error payload returned for failed API requests.
+ */
+type QueryProjects401 = {
+  /** Stable machine-readable error code. */code: string; /** Human-readable explanation of the error. */
+  message: string; /** Additional error-specific context. */
+  details?: QueryProjects401Details;
+};
+//#endregion
+//#region src/generated/model/queryProjects403Details.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * Additional error-specific context.
+ */
+type QueryProjects403Details = {
   [key: string]: unknown;
 };
 //#endregion
@@ -16025,6 +17493,44 @@ declare const QuerySessions200SessionsItemState: {
   readonly expired: "expired";
 };
 //#endregion
+//#region src/generated/model/querySessions200SessionsItemUser.d.ts
+/**
+ * Generated by orval v8.10.0 🍺
+ * Do not edit manually.
+ * Zitadel NextGen
+ * This is the next generation of the Zitadel identity platform.
+ * OpenAPI spec version: 0.0.1
+ */
+/**
+ * A resolved reference to a user (ADR 058 §3). Fields are role-named, not
+property-named, so responses can mix users from different schemas.
+`identifier` and `display` are resolved independently from the user
+schema's `x-identifier` and `x-display` designations, live at read time.
+Clients render `display`, falling back to `identifier`, then `user_id`.
+Missing or deleted users degrade to `user_id` only.
+
+ */
+type QuerySessions200SessionsItemUser = {
+  /** @pattern ^user_[a-zA-Z0-9_-]+$ */user_id: string;
+  /** The current value of the schema's designated identifier
+  (`x-identifier`). Absent when the schema designates no identifier or
+  the user carries no value for it.
+   */
+  identifier?: string;
+  /** The schema property `identifier` came from, so clients can reach the
+  property's schema for semantics (a mailto link, a field label)
+  instead of guessing from the value. Present exactly when
+  `identifier` is.
+   */
+  identifier_property?: string;
+  /** The `x-display` rendering — the designated properties' values joined
+  in list order. Purely presentational, with no source attribution.
+  Absent when the schema designates no display properties or the user
+  carries no values for them.
+   */
+  display?: string;
+};
+//#endregion
 //#region src/generated/model/querySessions200SessionsItemUserAgent.d.ts
 /**
  * Generated by orval v8.10.0 🍺
@@ -16069,23 +17575,14 @@ type QuerySessions200SessionsItem = {
   factor has been verified through an `auth_attempt`.
    */
   user_id?: string | null;
-  /** Human-readable name of the authenticated user, resolved from the
-  conventional user-schema properties: `name` when defined, otherwise
-  the given and family name parts joined — `givenName`/`familyName`
-  (the shipped presets' spelling) or `given_name`/`family_name`. Only
-  present on reads that hydrate the user's identity
-  (`GET /sessions/me`) and only when the session has an authenticated
-  user whose schema carries those properties; clients fall back to
-  `email`, then `user_id`.
-   */
-  name?: string;
-  /** Email address of the authenticated user, resolved from the
-  conventional `email` user-schema property. Only present on reads
-  that hydrate the user's identity (`GET /sessions/me`) and only when
-  the session has an authenticated user whose schema carries that
-  property.
-   */
-  email?: string;
+  /** A resolved reference to a user (ADR 058 §3). Fields are role-named, not
+  property-named, so responses can mix users from different schemas.
+  `identifier` and `display` are resolved independently from the user
+  schema's `x-identifier` and `x-display` designations, live at read time.
+  Clients render `display`, falling back to `identifier`, then `user_id`.
+  Missing or deleted users degrade to `user_id` only.
+   */
+  user?: QuerySessions200SessionsItemUser;
   /** Verified authentication factors accumulated by this session.
   Each key is a factor type (e.g. `password`, `totp`, `passkey`).
   Each value is a factor event object with at least `verified_at` and
@@ -16954,6 +18451,24 @@ type QueryUsers200UsersItem = {
    */
   attributes: QueryUsers200UsersItemAttributes;
   metadata: QueryUsers200UsersItemMetadata;
+  /** The current value of the user schema's designated identifier
+  (`x-identifier`), resolved live at read time. Absent when the schema
+  designates no identifier or the user carries no value for it.
+   */
+  readonly identifier?: string;
+  /** The schema property `identifier` came from, so clients can reach the
+  property's schema for semantics (a mailto link, a field label)
+  instead of guessing from the value. Present exactly when
+  `identifier` is.
+   */
+  readonly identifier_property?: string;
+  /** The `x-display` rendering — the designated properties' values joined
+  in list order, resolved live at read time. Purely presentational.
+  Absent when the schema designates no display properties or the user
+  carries no values for them. Clients render `display`, falling back
+  to `identifier`, then `id`.
+   */
+  readonly display?: string;
   /** The user's team memberships, present only when the request asked for them with
   `expand: ["teams"]` (ADR 059). Absent means it was not requested; `[]`
   means the user has none.
@@ -19421,9 +20936,11 @@ the purpose + audience when a flow is created via POST /flow.
 type UpdateFlowDefinition200FlowDefinition = {
   /**
      * Stable identifier for this flow, used as the target of cross-flow
-  `switch` and `pivot` transitions. Renaming is not supported — the
-  `name` is part of the public contract another definition may
-  reference. Acts as the human display label as well; no separate slug.
+  `switch` and `pivot` transitions. Every revision of a flow shares its
+  `name`; publishing a definition under an existing `name` adds a
+  revision to that flow. Renaming is not supported — the `name` is part
+  of the public contract another definition may reference. Acts as the
+  human display label as well; no separate slug.
         * @pattern ^[a-z][a-z0-9-]*$
      */
   name: string;
@@ -19973,9 +21490,11 @@ the purpose + audience when a flow is created via POST /flow.
 type UpdateFlowDefinitionBodyFlowDefinition = {
   /**
      * Stable identifier for this flow, used as the target of cross-flow
-  `switch` and `pivot` transitions. Renaming is not supported — the
-  `name` is part of the public contract another definition may
-  reference. Acts as the human display label as well; no separate slug.
+  `switch` and `pivot` transitions. Every revision of a flow shares its
+  `name`; publishing a definition under an existing `name` adds a
+  revision to that flow. Renaming is not supported — the `name` is part
+  of the public contract another definition may reference. Acts as the
+  human display label as well; no separate slug.
         * @pattern ^[a-z][a-z0-9-]*$
      */
   name: string;
@@ -20749,5 +22268,5 @@ type VerifyChallengeProofDefault = ({
   code: "user.invalid";
 });
 //#endregion
-export { UpdateFlowDefinition200FlowDefinitionStepsItemOnSuccess as $, GetUserByIDDefault as $a, GetClaimStatus403 as $c, CreateGrantBodyPrincipalType as $d, CreateFlowBodyHint as $f, ListFlowDefinitions200FlowDefinitionsItem as $i, DeleteUserByID404 as $l, QueryTeams403Details as $n, GetProjectDefault as $o, CompleteClaim403 as $p, PatchProject401Details as $r, GetFlowStep200StepTexts as $s, SubmitFlowStep200BrandingLayout as $t, CreateTeam403 as $u, UpdateFlowDefinitionBodyFlowDefinition as A, ListEnvironments200EnvironmentsItem as Aa, GetFlowDefinition200FlowDefinitionStatus as Ac, CreateReleaseDefault as Ad, CreateFlowDefinitionBodyFlowDefinitionAudience as Af, ListUserPasskeys200 as Ai, FinishUserPasskeyRegistration401 as Al, QueryUsers200 as An, GetSession200FactorsItem as Ao, CreateBranding201BrandingLayout as Ap, QueryProjectsDefault as Ar, GetHealthDefault as As, SubmitFlowStep400StepChallengeMethod as At, CreateUser403 as Au, UpdateFlowDefinitionBodyFlowDefinitionStepsItemActionsItemKind as B, IssueChallenge201 as Ba, GetEvent401Details as Bc, CreateRelease200PointersItemKind as Bd, CreateFlowDefinition201FlowDefinitionStepsItemSsoProvidersItem as Bf, ListSchemas200SchemasItemMetadata as Bi, ExchangeHandoff401 as Bl, QueryTeamsDefaultDetails as Bn, GetSchemaById200 as Bo, CreateAuthAttempt201ChallengesItemState as Bp, QueryProjects403 as Br, GetGrant401 as Bs, SubmitFlowStep200StepGatesKind as Bt, CreateUser201MetadataStatus as Bu, UpdateTeam401Details as C, ListEvents400 as Ca, GetFlowDefinition200FlowDefinitionStepsItemOnSuccess as Cc, CreateSchemaBody as Cd, CreateFlowDefinitionBodyFlowDefinitionStepsItemGates as Cf, ListUserPasskeys404Details as Ci, FinishUserPasskeyRegistrationBodyAttestation as Cl, QueryUsersBodyExpandItem as Cn, GetSession403Details as Co, CreateBrandingDefaultDetails as Cp, QuerySessions200SessionsItem as Cr, GetMySession200FactorsItem as Cs, SubmitFlowStep400StepFieldsItem as Ct, CreateUserDefault as Cu, UpdateTeam200Status as D, ListEnvironmentsParams as Da, GetFlowDefinition200FlowDefinitionStepsItemComplete as Dc, CreateSchema400Details as Dd, CreateFlowDefinitionBodyFlowDefinitionStepsItemActionsItem as Df, ListUserPasskeys401Details as Di, FinishUserPasskeyRegistration404Details as Dl, QueryUsers401Details as Dn, GetSession200UserAgent as Do, CreateBranding400Details as Dp, QuerySessions200SessionsItemFactorsItem as Dr, GetLiveDefaultDetails as Ds, SubmitFlowStep400StepComplete as Dt, CreateUser500Details as Du, UpdateTeam200 as E, ListEvents200DataItem as Ea, GetFlowDefinition200FlowDefinitionStepsItemGatesConfig as Ec, CreateSchema400 as Ed, CreateFlowDefinitionBodyFlowDefinitionStepsItemComplete as Ef, ListUserPasskeys401 as Ei, FinishUserPasskeyRegistration404 as El, QueryUsers401 as En, GetSession200 as Eo, CreateBranding400 as Ep, QuerySessions200SessionsItemMetadata as Er, GetLiveDefault as Es, SubmitFlowStep400StepFieldsItemType as Et, CreateUser500 as Eu, UpdateFlowDefinitionBodyFlowDefinitionStepsItemGates as F, IssueChallengeDefault as Fa, GetEvent404 as Fc, CreateRelease201PointersItem as Fd, CreateFlowDefinition201 as Ff, ListSchemasDefault as Fi, ExchangeHandoffParams as Fl, QueryUsers200UsersItemMetadataStatus as Fn, GetSchemaByIdDefaultDetails as Fo, CreateAuthAttempt201RequiredFactorsItem as Fp, QueryProjectsBodyFilterItem as Fr, GetGrantDefault as Fs, SubmitFlowStep200 as Ft, CreateUser400Details as Fu, UpdateFlowDefinition400 as G, InitClaimDefaultDetails as Ga, GetClaimStatusParams as Gc, CreateProject429Details as Gd, CreateFlowDefinition201FlowDefinitionStepsItemComplete as Gf, ListReleases200ReleasesItemMetadata as Gi, ExchangeHandoff200Session as Gl, QueryTeamsBodyFilterItem as Gn, GetReleaseById200 as Go, CompleteClaimBody as Gp, QueryProjects400Details as Gr, GetGrant200ObjectType as Gs, SubmitFlowStep200StepFieldsItemType as Gt, CreateTeamDefaultDetails as Gu, UpdateFlowDefinitionBodyFlowDefinitionAudience as H, IssueChallenge201Payload as Ha, GetEnvironmentByNameParams as Hc, CreateProjectDefault as Hd, CreateFlowDefinition201FlowDefinitionStepsItemGates as Hf, ListReleasesDefault as Hi, ExchangeHandoff400 as Hl, QueryTeamsBodySorting as Hn, GetSchemaById200Metadata as Ho, CreateAuthAttempt201ChallengesItemMethod as Hp, QueryProjects401 as Hr, GetGrant200 as Hs, SubmitFlowStep200StepFieldsItem as Ht, CreateUser201Attributes as Hu, UpdateFlowDefinitionBodyFlowDefinitionStepsItemGatesKind as I, IssueChallengeBody as Ia, GetEvent404Details as Ic, CreateRelease201PointersItemKind as Id, CreateFlowDefinition201UserSchema as If, ListSchemasDefaultDetails as Ii, ExchangeHandoffDefault as Il, QueryUsers200UsersItemMetadataLifecycleOwnerTeam as In, GetSchemaById404 as Io, CreateAuthAttempt201CompletedFactorsItem as Ip, QueryProjectsBodyFilterItemOperation as Ir, GetGrant404 as Is, SubmitFlowStep200Step as It, CreateUser201 as Iu, UpdateFlowDefinition200UserSchema as J, InitClaim404 as Ja, GetClaimStatus429 as Jc, CreateHandoff200 as Jd, CreateFlowDefinition201FlowDefinitionStatus as Jf, ListFlowDefinitionsExpandItem as Ji, ExchangeHandoff200SessionMetadata as Jl, QueryTeams429 as Jn, GetReleaseById200Metadata as Jo, CompleteClaim410 as Jp, PatchProjectDefault as Jr, GetFlowStep410Details as Js, SubmitFlowStep200StepChallengeOptions as Jt, CreateTeam429Details as Ju, UpdateFlowDefinition400Details as K, InitClaim409 as Ka, GetClaimStatusDefault as Kc, CreateProject201 as Kd, CreateFlowDefinition201FlowDefinitionStepsItemActionsItem as Kf, ListFlowDefinitionsParams as Ki, ExchangeHandoff200SessionUserAgent as Kl, QueryTeamsBodyFilterItemOperation as Kn, GetReleaseById200PointersItem as Ko, CompleteClaim429 as Kp, QueryProjects200 as Kr, GetFlowStepDefault as Ks, SubmitFlowStep200StepComplete as Kt, CreateTeamBody as Ku, UpdateFlowDefinitionBodyFlowDefinitionStepsItemGatesConfig as L, IssueChallengeBodyPasskeyOptions as La, GetEvent403 as Lc, CreateRelease201Metadata as Ld, CreateFlowDefinition201FlowDefinition as Lf, ListSchemas200 as Li, ExchangeHandoffBody as Ll, QueryUsers200UsersItemAttributes as Ln, GetSchemaById404Details as Lo, CreateAuthAttempt201CompletedFactorsItemPayload as Lp, QueryProjectsBodyFilterItemField as Lr, GetGrant404Details as Ls, SubmitFlowStep200StepTexts as Lt, CreateUser201TeamsItem as Lu, UpdateFlowDefinitionBodyFlowDefinitionStepsItemTransitions as M, ListBrandingDefault as Ma, GetEventParams as Mc, CreateReleaseBodyPointersItem as Md, CreateFlowDefinition409Details as Mf, ListSchemasParams as Mi, FinishUserPasskeyRegistration400 as Ml, QueryUsers200UsersItemTeamsItem as Mn, GetSession200FactorsItemMethod as Mo, CreateAuthAttemptBody as Mp, QueryProjectsBodySorting as Mr, GetHealth4xx as Ms, SubmitFlowStep400StepActionsItemKind as Mt, CreateUser401 as Mu, UpdateFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersItem as N, ListBrandingDefaultDetails as Na, GetEventDefault as Nc, CreateReleaseBodyPointersItemKind as Nd, CreateFlowDefinition400 as Nf, ListSchemasRevisions as Ni, FinishUserPasskeyRegistration400Details as Nl, QueryUsers200UsersItemTeamsItemMembershipStatus as Nn, GetSchemaByIdParams as No, CreateAuthAttempt201 as Np, QueryProjectsBodySortingField as Nr, GetHealth4xxDetails as Ns, SubmitFlowStep400Branding as Nt, CreateUser401Details as Nu, UpdateFlowDefinitionDefault as O, ListEnvironmentsDefault as Oa, GetFlowDefinition200FlowDefinitionStepsItemActionsItem as Oc, CreateSchema201 as Od, CreateFlowDefinitionBodyFlowDefinitionStepsItemActionsItemKind as Of, ListUserPasskeys400 as Oi, FinishUserPasskeyRegistration403 as Ol, QueryUsers400 as On, GetSession200State as Oo, CreateBranding201 as Op, QuerySessions200SessionsItemFactorsItemPayload as Or, GetLive4xx as Os, SubmitFlowStep400StepChallenge as Ot, CreateUser409 as Ou, UpdateFlowDefinitionBodyFlowDefinitionStepsItemOnSuccess as P, ListBranding200Item as Pa, GetEventDefaultDetails as Pc, CreateRelease201 as Pd, CreateFlowDefinition400Details as Pf, ListSchemasKind as Pi, FinishUserPasskeyRegistration201 as Pl, QueryUsers200UsersItemMetadata as Pn, GetSchemaByIdDefault as Po, CreateAuthAttempt201State as Pp, QueryProjectsBodySortingDirection as Pr, GetGrantParams as Ps, SubmitFlowStep400BrandingLayout as Pt, CreateUser400 as Pu, UpdateFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem as Q, GetUserByIDParams as Qa, GetClaimStatus404Details as Qc, CreateGrantBodyRelation as Qd, CreateFlowBodyPurpose as Qf, ListFlowDefinitions200 as Qi, DeleteUserByIDDefault as Ql, QueryTeams403 as Qn, GetReady4xxDetails as Qo, CompleteClaim404Details as Qp, PatchProject401 as Qr, GetFlowStep200Step as Qs, SubmitFlowStep200Branding as Qt, CreateTeam404Details as Qu, UpdateFlowDefinitionBodyFlowDefinitionStepsItemComplete as R, IssueChallengeBodyPasskeyOptionsUserVerification as Ra, GetEvent403Details as Rc, CreateRelease200 as Rd, CreateFlowDefinition201FlowDefinitionStepsItem as Rf, ListSchemas200SchemasItem as Ri, ExchangeHandoff410 as Rl, QueryTeamsParams as Rn, GetSchemaById400 as Ro, CreateAuthAttempt201CompletedFactorsItemMethod as Rp, QueryProjects429 as Rr, GetGrant403 as Rs, SubmitFlowStep200StepSsoProvidersItem as Rt, CreateUser201TeamsItemMembershipStatus as Ru, UpdateTeam401 as S, ListEvents401Details as Sa, GetFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem as Sc, CreateSchemaDefaultDetails as Sd, CreateFlowDefinitionBodyFlowDefinitionStepsItemOnSuccess as Sf, ListUserPasskeys404 as Si, FinishUserPasskeyRegistrationBody as Sl, QueryUsersBodyFilterItemField as Sn, GetSession403 as So, CreateBrandingDefault as Sp, QuerySessions200 as Sr, GetMySession200Metadata as Ss, SubmitFlowStep400StepGatesConfig as St, CreateUserParams as Su, UpdateTeam400Details as T, ListEvents200 as Ta, GetFlowDefinition200FlowDefinitionStepsItemGatesKind as Tc, CreateSchema409Details as Td, CreateFlowDefinitionBodyFlowDefinitionStepsItemGatesConfig as Tf, ListUserPasskeys403Details as Ti, FinishUserPasskeyRegistration500Details as Tl, QueryUsers403Details as Tn, GetSession401Details as To, CreateBrandingBodyLayout as Tp, QuerySessions200SessionsItemState as Tr, GetMySession200FactorsItemMethod as Ts, SubmitFlowStep400StepFieldsItemValidationFormat as Tt, CreateUserBodyAttributes as Tu, UpdateFlowDefinition404 as U, IssueChallenge201Method as Ua, GetEnvironmentByNameDefault as Uc, CreateProjectBody as Ud, CreateFlowDefinition201FlowDefinitionStepsItemGatesKind as Uf, ListReleases200 as Ui, ExchangeHandoff400Details as Ul, QueryTeamsBodySortingField as Un, GetReleaseByIdParams as Uo, CompleteClaimDefault as Up, QueryProjects401Details as Ur, GetGrant200Relation as Us, SubmitFlowStep200StepFieldsItemValidation as Ut, CreateTeamParams as Uu, UpdateFlowDefinitionBodyFlowDefinitionStatus as V, IssueChallenge201State as Va, GetEvent200 as Vc, CreateRelease200Metadata as Vd, CreateFlowDefinition201FlowDefinitionStepsItemOnSuccess as Vf, ListReleasesParams as Vi, ExchangeHandoff401Details as Vl, QueryTeamsBody as Vn, GetSchemaById200Schema as Vo, CreateAuthAttempt201ChallengesItemPayload as Vp, QueryProjects403Details as Vr, GetGrant401Details as Vs, SubmitFlowStep200StepGatesConfig as Vt, CreateUser201MetadataLifecycleOwnerTeam as Vu, UpdateFlowDefinition404Details as W, InitClaimDefault as Wa, GetEnvironmentByName200 as Wc, CreateProject429 as Wd, CreateFlowDefinition201FlowDefinitionStepsItemGatesConfig as Wf, ListReleases200ReleasesItem as Wi, ExchangeHandoff200 as Wl, QueryTeamsBodySortingDirection as Wn, GetReleaseByIdDefault as Wo, CompleteClaimDefaultDetails as Wp, QueryProjects400 as Wr, GetGrant200PrincipalType as Ws, SubmitFlowStep200StepFieldsItemValidationFormat as Wt, CreateTeamDefault as Wu, UpdateFlowDefinition200FlowDefinitionStepsItem as X, InitClaim401Details as Xa, GetClaimStatus410 as Xc, CreateGrantDefault as Xd, CreateFlowDefault as Xf, ListFlowDefinitions400 as Xi, ExchangeHandoff200SessionFactorsItemPayload as Xl, QueryTeams404 as Xn, GetReadyDefaultDetails as Xo, CompleteClaim409Details as Xp, PatchProject404 as Xr, GetFlowStep404Details as Xs, SubmitFlowStep200StepActionsItem as Xt, CreateTeam409Details as Xu, UpdateFlowDefinition200FlowDefinition as Y, InitClaim401 as Ya, GetClaimStatus429Details as Yc, CreateGrantParams as Yd, CreateFlowDefinition201FlowDefinitionAudience as Yf, ListFlowDefinitionsDefault as Yi, ExchangeHandoff200SessionFactorsItem as Yl, QueryTeams429Details as Yn, GetReadyDefault as Yo, CompleteClaim409 as Yp, PatchProjectBody as Yr, GetFlowStep404 as Ys, SubmitFlowStep200StepChallengeMethod as Yt, CreateTeam409 as Yu, UpdateFlowDefinition200FlowDefinitionStepsItemTransitions as Z, InitClaim201 as Za, GetClaimStatus404 as Zc, CreateGrantBody as Zd, CreateFlowBody as Zf, ListFlowDefinitions400Details as Zi, ExchangeHandoff200SessionFactorsItemMethod as Zl, QueryTeams404Details as Zn, GetReady4xx as Zo, CompleteClaim404 as Zp, PatchProject404Details as Zr, GetFlowStep200 as Zs, SubmitFlowStep200StepActionsItemKind as Zt, CreateTeam404 as Zu, UpdateTeam409Details as _, ListEventsDefaultDetails as _a, GetFlowDefinition200 as _c, CreateSession201SessionFactorsItem as _d, CreateFlowDefinitionBody as _f, ListUserTeams200TeamsItemMembershipStatus as _i, GetAuthAttempt200ChallengesItem as _l, BeginUserPasskeyRegistration201Options as _m, QueryUsersBodySorting as _n, GetTeam200 as _o, CreateFlow201StepActionsItem as _p, QuerySessions403Details as _r, GetMySession404 as _s, SubmitFlowStep400Step as _t, DeleteGrant401 as _u, VerifyChallengeProof200RequiredFactorsItem as a, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItemOnSuccess as aa, GetFlowStep200StepFieldsItemValidation as ac, CreateTeam201 as ad, CreateGrant404Details as af, ListUserTeams500 as ai, GetBrandingById404 as al, BeginUserPasskeyRegistrationBody as am, SetUserPassword404Details as an, GetUserByID200TeamsItem as ao, CreateFlow201StepSsoProvidersItem as ap, QueryTeams200TeamsItem as ar, GetMyUserDefault as as, UpdateFlowDefinition200FlowDefinitionStepsItemActionsItemKind as at, DeleteTeam403 as au, UpdateTeam403 as b, ListEvents403Details as ba, GetFlowDefinition200FlowDefinitionStepsItem as bc, CreateSchemaParams as bd, CreateFlowDefinitionBodyFlowDefinitionStepsItemTransitions as bf, ListUserPasskeys500 as bi, GetAuthAttempt200ChallengesItemMethod as bl, QueryUsersBodyFilterItem as bn, GetSession404 as bo, CreateFlow201BrandingLayout as bp, QuerySessions400 as br, GetMySession200UserAgent as bs, SubmitFlowStep400StepGates as bt, DeleteFlowDefinition409 as bu, VerifyChallengeProof200CompletedFactorsItemMethod as c, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItemGatesConfig as ca, GetFlowStep200StepComplete as cc, CreateSessionBody as cd, CreateGrant401 as cf, ListUserTeams404Details as ci, GetBrandingById200Branding as cl, BeginUserPasskeyRegistration404 as cm, RevokeSessionDefault as cn, GetUserByID200MetadataStatus as co, CreateFlow201StepGatesConfig as cp, QuerySessionsDefault as cr, GetMyUser401Details as cs, SubmitFlowStepDefault as ct, DeleteTeam401Details as cu, VerifyChallengeProof200ChallengesItemPayload as d, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItemActionsItemKind as da, GetFlowStep200StepChallengeMethod as dc, CreateSession400Details as dd, CreateGrant400Details as df, ListUserTeams401 as di, GetAuthAttempt200 as dl, BeginUserPasskeyRegistration403Details as dm, RevokeSession401 as dn, GetTeamDefault as do, CreateFlow201StepFieldsItemValidationFormat as dp, QuerySessionsBodySortingField as dr, GetMyUser200TeamsItemMembershipStatus as ds, SubmitFlowStepBodyFields as dt, DeleteGrantParams as du, ListFlowDefinitions200FlowDefinitionsItemUserSchema as ea, GetFlowStep200StepSsoProvidersItem as ec, CreateTeam403Details as ed, CreateGrant429 as ef, PatchProject400 as ei, GetClaimStatus401 as el, CompleteClaim401 as em, SetUserPasswordDefault as en, GetUserByID404 as eo, CreateFlow400 as ep, QueryTeams401 as er, GetProject404 as es, UpdateFlowDefinition200FlowDefinitionStepsItemGates as et, DeleteUserByID404Details as eu, VerifyChallengeProof200ChallengesItemMethod as f, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStatus as fa, GetFlowStep200StepActionsItem as fc, CreateSession201 as fd, CreateGrant201 as ff, ListUserTeams401Details as fi, GetAuthAttempt200State as fl, BeginUserPasskeyRegistration401 as fm, RevokeSession401Details as fn, GetTeamDefaultDetails as fo, CreateFlow201StepFieldsItemType as fp, QuerySessionsBodySortingDirection as fr, GetMyUser200Metadata as fs, SubmitFlowStepBodyChallengeResponse as ft, DeleteGrantDefault as fu, UpdateTeam409 as g, ListEventsDefault as ga, GetFlowDefinitionDefault as gc, CreateSession201SessionMetadata as gd, CreateFlowDefinitionDefault as gf, ListUserTeams200TeamsItem as gi, GetAuthAttempt200CompletedFactorsItemMethod as gl, BeginUserPasskeyRegistration201 as gm, QueryUsersBody as gn, GetTeam401Details as go, CreateFlow201StepChallengeMethod as gp, QuerySessions403 as gr, GetMySessionDefault as gs, SubmitFlowStep400 as gt, DeleteGrant403Details as gu, UpdateTeamBody as h, ListEventsOrder as ha, GetFlowStep200BrandingLayout as hc, CreateSession201SessionState as hd, CreateGrant201ObjectType as hf, ListUserTeams200 as hi, GetAuthAttempt200CompletedFactorsItemPayload as hl, BeginUserPasskeyRegistration400Details as hm, QueryUsersDefault as hn, GetTeam401 as ho, CreateFlow201StepChallengeOptions as hp, QuerySessionsBodyFilterItemField as hr, GetMyUser200Attributes as hs, SubmitFlowStep409Details as ht, DeleteGrant403 as hu, VerifyChallengeProof200State as i, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItemSsoProvidersItem as ia, GetFlowStep200StepFieldsItem as ic, CreateTeam400Details as id, CreateGrant404 as if, ListUserTeamsDefault as ii, GetBrandingByIdDefaultDetails as il, BeginUserPasskeyRegistrationDefault as im, SetUserPassword404 as in, GetUserByID200 as io, CreateFlow201StepTexts as ip, QueryTeams200 as ir, GetProject200 as is, UpdateFlowDefinition200FlowDefinitionStepsItemActionsItem as it, DeleteTeamDefaultDetails as iu, UpdateFlowDefinitionBodyFlowDefinitionStepsItem as j, ListBrandingParams as ja, GetFlowDefinition200FlowDefinitionAudience as jc, CreateReleaseBody as jd, CreateFlowDefinition409 as jf, ListUserPasskeys200PasskeysItem as ji, FinishUserPasskeyRegistration401Details as jl, QueryUsers200UsersItem as jn, GetSession200FactorsItemPayload as jo, CreateAuthAttemptDefault as jp, QueryProjectsBody as jr, GetHealthDefaultDetails as js, SubmitFlowStep400StepActionsItem as jt, CreateUser403Details as ju, UpdateFlowDefinitionBody as k, ListEnvironments200 as ka, GetFlowDefinition200FlowDefinitionStepsItemActionsItemKind as kc, CreateReleaseParams as kd, CreateFlowDefinitionBodyFlowDefinitionStatus as kf, ListUserPasskeys400Details as ki, FinishUserPasskeyRegistration403Details as kl, QueryUsers400Details as kn, GetSession200Metadata as ko, CreateBranding201Branding as kp, QuerySessions200SessionsItemFactorsItemMethod as kr, GetLive4xxDetails as ks, SubmitFlowStep400StepChallengeOptions as kt, CreateUser409Details as ku, VerifyChallengeProof200ChallengesItem as l, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItemComplete as la, GetFlowStep200StepChallenge as lc, CreateSessionBodyUserAgent as ld, CreateGrant401Details as lf, ListUserTeams403 as li, GetBrandingById200BrandingLayout as ll, BeginUserPasskeyRegistration404Details as lm, RevokeSession403 as ln, GetUserByID200MetadataLifecycleOwnerTeam as lo, CreateFlow201StepFieldsItem as lp, QuerySessionsBody as lr, GetMyUser200 as ls, SubmitFlowStepBody as lt, DeleteTeam400 as lu, UpdateTeamDefaultDetails as m, ListEventsParams as ma, GetFlowStep200Branding as mc, CreateSession201SessionUserAgent as md, CreateGrant201PrincipalType as mf, ListUserTeams400Details as mi, GetAuthAttempt200CompletedFactorsItem as ml, BeginUserPasskeyRegistration400 as mm, RevokeMySession401 as mn, GetTeam404Details as mo, CreateFlow201StepChallenge as mp, QuerySessionsBodyFilterItemOperation as mr, GetMyUser200MetadataLifecycleOwnerTeam as ms, SubmitFlowStep409 as mt, DeleteGrant404Details as mu, VerifyChallengeProofBody as n, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItem as na, GetFlowStep200StepGatesKind as nc, CreateTeam401Details as nd, CreateGrant409 as nf, PatchProject200 as ni, GetClaimStatus200 as nl, CompleteClaim400Details as nm, SetUserPassword500 as nn, GetUserByID401 as no, CreateFlow201 as np, QueryTeams400 as nr, GetProject401 as ns, UpdateFlowDefinition200FlowDefinitionStepsItemGatesConfig as nt, DeleteUserByID401Details as nu, VerifyChallengeProof200CompletedFactorsItem as o, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItemGates as oa, GetFlowStep200StepFieldsItemValidationFormat as oc, CreateTeam201Status as od, CreateGrant403 as of, ListUserTeams500Details as oi, GetBrandingById404Details as ol, BeginUserPasskeyRegistration500 as om, SetUserPassword400 as on, GetUserByID200TeamsItemMembershipStatus as oo, CreateFlow201StepGates as op, QueryTeams200TeamsItemStatus as or, GetMyUser404 as os, UpdateFlowDefinition200FlowDefinitionStatus as ot, DeleteTeam403Details as ou, UpdateTeamDefault as p, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionAudience as pa, GetFlowStep200StepActionsItemKind as pc, CreateSession201Session as pd, CreateGrant201Relation as pf, ListUserTeams400 as pi, GetAuthAttempt200RequiredFactorsItem as pl, BeginUserPasskeyRegistration401Details as pm, RevokeMySessionDefault as pn, GetTeam404 as po, CreateFlow201StepComplete as pp, QuerySessionsBodyFilterItem as pr, GetMyUser200MetadataStatus as ps, SubmitFlowStepBodyChallengeResponseProof as pt, DeleteGrant404 as pu, UpdateFlowDefinition200 as q, InitClaim409Details as qa, GetClaimStatusDefaultDetails as qc, CreateHandoffDefault as qd, CreateFlowDefinition201FlowDefinitionStepsItemActionsItemKind as qf, ListFlowDefinitionsPurpose as qi, ExchangeHandoff200SessionState as ql, QueryTeamsBodyFilterItemField as qn, GetReleaseById200PointersItemKind as qo, CompleteClaim429Details as qp, QueryProjects200ProjectsItem as qr, GetFlowStep410 as qs, SubmitFlowStep200StepChallenge as qt, CreateTeam429 as qu, VerifyChallengeProof200 as r, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItemTransitions as ra, GetFlowStep200StepGatesConfig as rc, CreateTeam400 as rd, CreateGrant409Details as rf, ListUserTeamsParams as ri, GetBrandingByIdDefault as rl, CompleteClaim200 as rm, SetUserPassword500Details as rn, GetUserByID401Details as ro, CreateFlow201Step as rp, QueryTeams400Details as rr, GetProject401Details as rs, UpdateFlowDefinition200FlowDefinitionStepsItemComplete as rt, DeleteTeamDefault as ru, VerifyChallengeProof200CompletedFactorsItemPayload as s, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItemGatesKind as sa, GetFlowStep200StepFieldsItemType as sc, CreateSessionDefault as sd, CreateGrant403Details as sf, ListUserTeams404 as si, GetBrandingById200 as sl, BeginUserPasskeyRegistration500Details as sm, SetUserPassword400Details as sn, GetUserByID200Metadata as so, CreateFlow201StepGatesKind as sp, QuerySessionsParams as sr, GetMyUser401 as ss, UpdateFlowDefinition200FlowDefinitionAudience as st, DeleteTeam401 as su, VerifyChallengeProofDefault as t, ListFlowDefinitions200FlowDefinitionsItemFlowDefinition as ta, GetFlowStep200StepGates as tc, CreateTeam401 as td, CreateGrant429Details as tf, PatchProject400Details as ti, GetClaimStatus401Details as tl, CompleteClaim400 as tm, SetUserPasswordBody as tn, GetUserByID404Details as to, CreateFlow400Details as tp, QueryTeams401Details as tr, GetProject404Details as ts, UpdateFlowDefinition200FlowDefinitionStepsItemGatesKind as tt, DeleteUserByID401 as tu, VerifyChallengeProof200ChallengesItemState as u, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItemActionsItem as ua, GetFlowStep200StepChallengeOptions as uc, CreateSession400 as ud, CreateGrant400 as uf, ListUserTeams403Details as ui, GetAuthAttemptDefault as ul, BeginUserPasskeyRegistration403 as um, RevokeSession403Details as un, GetUserByID200Attributes as uo, CreateFlow201StepFieldsItemValidation as up, QuerySessionsBodySorting as ur, GetMyUser200TeamsItem as us, SubmitFlowStepBodyGateProofs as ut, DeleteTeam400Details as uu, UpdateTeam404 as v, ListEventsCategoryItem as va, GetFlowDefinition200UserSchema as vc, CreateSession201SessionFactorsItemPayload as vd, CreateFlowDefinitionBodyFlowDefinition as vf, ListUserPasskeysParams as vi, GetAuthAttempt200ChallengesItemState as vl, QueryUsersBodySortingField as vn, GetTeam200Status as vo, CreateFlow201StepActionsItemKind as vp, QuerySessions401 as vr, GetMySession401 as vs, SubmitFlowStep400StepTexts as vt, DeleteGrant401Details as vu, UpdateTeam400 as w, ListEvents400Details as wa, GetFlowDefinition200FlowDefinitionStepsItemGates as wc, CreateSchema409 as wd, CreateFlowDefinitionBodyFlowDefinitionStepsItemGatesKind as wf, ListUserPasskeys403 as wi, FinishUserPasskeyRegistration500 as wl, QueryUsers403 as wn, GetSession401 as wo, CreateBrandingBody as wp, QuerySessions200SessionsItemUserAgent as wr, GetMySession200FactorsItemPayload as ws, SubmitFlowStep400StepFieldsItemValidation as wt, CreateUserBody as wu, UpdateTeam403Details as x, ListEvents401 as xa, GetFlowDefinition200FlowDefinitionStepsItemTransitions as xc, CreateSchemaDefault as xd, CreateFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersItem as xf, ListUserPasskeys500Details as xi, FinishUserPasskeyRegistrationDefault as xl, QueryUsersBodyFilterItemOperation as xn, GetSession404Details as xo, CreateBrandingParams as xp, QuerySessions400Details as xr, GetMySession200State as xs, SubmitFlowStep400StepGatesKind as xt, DeleteFlowDefinition409Details as xu, UpdateTeam404Details as y, ListEvents403 as ya, GetFlowDefinition200FlowDefinition as yc, CreateSession201SessionFactorsItemMethod as yd, CreateFlowDefinitionBodyFlowDefinitionStepsItem as yf, ListUserPasskeysDefault as yi, GetAuthAttempt200ChallengesItemPayload as yl, QueryUsersBodySortingDirection as yn, GetSessionDefault as yo, CreateFlow201Branding as yp, QuerySessions401Details as yr, GetMySession200 as ys, SubmitFlowStep400StepSsoProvidersItem as yt, DeleteFlowDefinitionDefault as yu, UpdateFlowDefinitionBodyFlowDefinitionStepsItemActionsItem as z, IssueChallengeBodyMethod as za, GetEvent401 as zc, CreateRelease200PointersItem as zd, CreateFlowDefinition201FlowDefinitionStepsItemTransitions as zf, ListSchemas200SchemasItemSchema as zi, ExchangeHandoff410Details as zl, QueryTeamsDefault as zn, GetSchemaById400Details as zo, CreateAuthAttempt201ChallengesItem as zp, QueryProjects429Details as zr, GetGrant403Details as zs, SubmitFlowStep200StepGates as zt, CreateUser201Metadata as zu };
-//# sourceMappingURL=index-BpCgp2NY.d.mts.map
+export { UpdateFlowDefinition200FlowDefinitionStepsItemOnSuccess as $, ListEnvironmentsDefault as $a, GetFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem as $c, CreateSession201Session as $d, CreateGrant201 as $f, ListUserPasskeys400 as $i, GetAuthAttempt200CompletedFactorsItem as $l, BeginUserPasskeyRegistration403Details as $m, QueryTeams403Details as $n, GetSession200UserAgent as $o, CreateFlow201StepFieldsItemValidationFormat as $p, QueryGrantsBodySortingField as $r, GetMySession200FactorsItemMethod as $s, SubmitFlowStep200BrandingLayout as $t, DeleteGrant404 as $u, UpdateFlowDefinitionBodyFlowDefinition as A, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItemOnSuccess as Aa, GetFlowStep200StepTexts as Ac, CreateTeamDefault as Ad, CreateProjectBody as Af, ListUserTeams500 as Ai, GetClaimStatusParams as Al, CreateAuthAttempt201ChallengesItemMethod as Am, QueryUsers200 as An, GetUserByID200 as Ao, CreateFlowDefinition201FlowDefinitionStepsItemGates as Ap, QuerySessions200SessionsItemFactorsItemMethod as Ar, GetProject401Details as As, SubmitFlowStep400StepChallengeMethod as At, ExchangeHandoff200Session as Au, UpdateFlowDefinitionBodyFlowDefinitionStepsItemActionsItemKind as B, ListEventsOrder as Ba, GetFlowStep200StepChallenge as Bc, CreateTeam403Details as Bd, CreateGrantBodyPrincipalType as Bf, ListUserTeams200 as Bi, GetClaimStatus401Details as Bl, CompleteClaim404Details as Bm, QueryTeamsDefaultDetails as Bn, GetTeam404Details as Bo, CreateFlowBodyPurpose as Bp, QueryProjects429Details as Br, GetMyUser200MetadataStatus as Bs, SubmitFlowStep200StepGatesKind as Bt, DeleteUserByID404Details as Bu, UpdateTeam401Details as C, ListFlowDefinitions200 as Ca, GetFlowStepDefault as Cc, CreateUser201TeamsItem as Cd, CreateRelease201PointersItemKind as Cf, PatchProject401 as Ci, GetClaimWindowDefault as Cl, CreateAuthAttempt201RequiredFactorsItem as Cm, QueryUsersBodyExpandItem as Cn, InitClaim201 as Co, CreateFlowDefinition201 as Cp, QuerySessions200SessionsItem as Cr, GetReadyDefaultDetails as Cs, SubmitFlowStep400StepFieldsItem as Ct, ExchangeHandoff410 as Cu, UpdateTeam200Status as D, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItem as Da, GetFlowStep404Details as Dc, CreateUser201MetadataLifecycleOwnerTeam as Dd, CreateRelease200PointersItemKind as Df, PatchProject200 as Di, GetClaimWindow404 as Dl, CreateAuthAttempt201ChallengesItem as Dm, QueryUsers401Details as Dn, GetUserByID404Details as Do, CreateFlowDefinition201FlowDefinitionStepsItemTransitions as Dp, QuerySessions200SessionsItemMetadata as Dr, GetProject404 as Ds, SubmitFlowStep400StepComplete as Dt, ExchangeHandoff400 as Du, UpdateTeam200 as E, ListFlowDefinitions200FlowDefinitionsItemFlowDefinition as Ea, GetFlowStep404 as Ec, CreateUser201MetadataStatus as Ed, CreateRelease200PointersItem as Ef, PatchProject400Details as Ei, GetClaimWindow429Details as El, CreateAuthAttempt201CompletedFactorsItemMethod as Em, QueryUsers401 as En, GetUserByID404 as Eo, CreateFlowDefinition201FlowDefinitionStepsItem as Ep, QuerySessions200SessionsItemState as Er, GetProjectDefault as Es, SubmitFlowStep400StepFieldsItemType as Et, ExchangeHandoff401Details as Eu, UpdateFlowDefinitionBodyFlowDefinitionStepsItemGates as F, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItemActionsItem as Fa, GetFlowStep200StepFieldsItem as Fc, CreateTeam409 as Fd, CreateHandoff200 as Ff, ListUserTeams403Details as Fi, GetClaimStatus410 as Fl, CompleteClaim429Details as Fm, QueryUsers200UsersItemMetadataStatus as Fn, GetUserByID200MetadataLifecycleOwnerTeam as Fo, CreateFlowDefinition201FlowDefinitionStepsItemActionsItemKind as Fp, QueryProjectsBodySortingDirection as Fr, GetMyUser401Details as Fs, SubmitFlowStep200 as Ft, ExchangeHandoff200SessionFactorsItem as Fu, UpdateFlowDefinition400 as G, ListEvents403Details as Ga, GetFlowStep200Branding as Gc, CreateTeam201 as Gd, CreateGrant404 as Gf, ListUserPasskeys500 as Gi, GetBrandingById404Details as Gl, CompleteClaim200 as Gm, QueryTeamsBodyFilterItem as Gn, GetSessionDefault as Go, CreateFlow201Step as Gp, QueryProjects400 as Gr, GetMySession401 as Gs, SubmitFlowStep200StepFieldsItemType as Gt, DeleteTeam403 as Gu, UpdateFlowDefinitionBodyFlowDefinitionAudience as H, ListEventsDefaultDetails as Ha, GetFlowStep200StepChallengeMethod as Hc, CreateTeam401Details as Hd, CreateGrant429Details as Hf, ListUserTeams200TeamsItemMembershipStatus as Hi, GetBrandingByIdDefault as Hl, CompleteClaim401 as Hm, QueryTeamsBodySorting as Hn, GetTeam401Details as Ho, CreateFlow400 as Hp, QueryProjects403Details as Hr, GetMyUser200Attributes as Hs, SubmitFlowStep200StepFieldsItem as Ht, DeleteUserByID401Details as Hu, UpdateFlowDefinitionBodyFlowDefinitionStepsItemGatesKind as I, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItemActionsItemKind as Ia, GetFlowStep200StepFieldsItemValidation as Ic, CreateTeam409Details as Id, CreateGrantParams as If, ListUserTeams401 as Ii, GetClaimStatus404 as Il, CompleteClaim410 as Im, QueryUsers200UsersItemMetadataLifecycleOwnerTeam as In, GetUserByID200Attributes as Io, CreateFlowDefinition201FlowDefinitionStatus as Ip, QueryProjectsBodyFilterItem as Ir, GetMyUser200 as Is, SubmitFlowStep200Step as It, ExchangeHandoff200SessionFactorsItemPayload as Iu, UpdateFlowDefinition200UserSchema as J, ListEvents400 as Ja, GetFlowDefinition200 as Jc, CreateSessionBody as Jd, CreateGrant403Details as Jf, ListUserPasskeys404Details as Ji, GetBrandingById200BrandingLayout as Jl, BeginUserPasskeyRegistration500 as Jm, QueryTeams429 as Jn, GetSession403 as Jo, CreateFlow201StepGates as Jp, QueryProjects200ProjectsItem as Jr, GetMySession200User as Js, SubmitFlowStep200StepChallengeOptions as Jt, DeleteTeam401Details as Ju, UpdateFlowDefinition400Details as K, ListEvents401 as Ka, GetFlowStep200BrandingLayout as Kc, CreateTeam201Status as Kd, CreateGrant404Details as Kf, ListUserPasskeys500Details as Ki, GetBrandingById200 as Kl, BeginUserPasskeyRegistrationDefault as Km, QueryTeamsBodyFilterItemOperation as Kn, GetSession404 as Ko, CreateFlow201StepTexts as Kp, QueryProjects400Details as Kr, GetMySession200 as Ks, SubmitFlowStep200StepComplete as Kt, DeleteTeam403Details as Ku, UpdateFlowDefinitionBodyFlowDefinitionStepsItemGatesConfig as L, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStatus as La, GetFlowStep200StepFieldsItemValidationFormat as Lc, CreateTeam404 as Ld, CreateGrantDefault as Lf, ListUserTeams401Details as Li, GetClaimStatus404Details as Ll, CompleteClaim409 as Lm, QueryUsers200UsersItemAttributes as Ln, GetTeamDefault as Lo, CreateFlowDefinition201FlowDefinitionAudience as Lp, QueryProjectsBodyFilterItemOperation as Lr, GetMyUser200TeamsItem as Ls, SubmitFlowStep200StepTexts as Lt, ExchangeHandoff200SessionFactorsItemMethod as Lu, UpdateFlowDefinitionBodyFlowDefinitionStepsItemTransitions as M, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItemGatesKind as Ma, GetFlowStep200StepGates as Mc, CreateTeamBody as Md, CreateProject429Details as Mf, ListUserTeams404 as Mi, GetClaimStatusDefaultDetails as Ml, CompleteClaimDefaultDetails as Mm, QueryUsers200UsersItemTeamsItem as Mn, GetUserByID200TeamsItemMembershipStatus as Mo, CreateFlowDefinition201FlowDefinitionStepsItemGatesConfig as Mp, QueryProjectsBody as Mr, GetMyUserDefault as Ms, SubmitFlowStep400StepActionsItemKind as Mt, ExchangeHandoff200SessionUser as Mu, UpdateFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersItem as N, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItemGatesConfig as Na, GetFlowStep200StepGatesKind as Nc, CreateTeam429 as Nd, CreateProject201 as Nf, ListUserTeams404Details as Ni, GetClaimStatus429 as Nl, CompleteClaimBody as Nm, QueryUsers200UsersItemTeamsItemMembershipStatus as Nn, GetUserByID200Metadata as No, CreateFlowDefinition201FlowDefinitionStepsItemComplete as Np, QueryProjectsBodySorting as Nr, GetMyUser404 as Ns, SubmitFlowStep400Branding as Nt, ExchangeHandoff200SessionState as Nu, UpdateFlowDefinitionDefault as O, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItemTransitions as Oa, GetFlowStep200 as Oc, CreateUser201Attributes as Od, CreateRelease200Metadata as Of, ListUserTeamsParams as Oi, GetClaimWindow404Details as Ol, CreateAuthAttempt201ChallengesItemState as Om, QueryUsers400 as On, GetUserByID401 as Oo, CreateFlowDefinition201FlowDefinitionStepsItemSsoProvidersItem as Op, QuerySessions200SessionsItemFactorsItem as Or, GetProject404Details as Os, SubmitFlowStep400StepChallenge as Ot, ExchangeHandoff400Details as Ou, UpdateFlowDefinitionBodyFlowDefinitionStepsItemOnSuccess as P, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItemComplete as Pa, GetFlowStep200StepGatesConfig as Pc, CreateTeam429Details as Pd, CreateHandoffDefault as Pf, ListUserTeams403 as Pi, GetClaimStatus429Details as Pl, CompleteClaim429 as Pm, QueryUsers200UsersItemMetadata as Pn, GetUserByID200MetadataStatus as Po, CreateFlowDefinition201FlowDefinitionStepsItemActionsItem as Pp, QueryProjectsBodySortingField as Pr, GetMyUser401 as Ps, SubmitFlowStep400BrandingLayout as Pt, ExchangeHandoff200SessionMetadata as Pu, UpdateFlowDefinition200FlowDefinitionStepsItemSsoProvidersItem as Q, ListEnvironmentsParams as Qa, GetFlowDefinition200FlowDefinitionStepsItemTransitions as Qc, CreateSession201 as Qd, CreateGrant400Details as Qf, ListUserPasskeys401Details as Qi, GetAuthAttempt200RequiredFactorsItem as Ql, BeginUserPasskeyRegistration403 as Qm, QueryTeams403 as Qn, GetSession200 as Qo, CreateFlow201StepFieldsItemValidation as Qp, QueryGrantsBodySorting as Qr, GetMySession200FactorsItemPayload as Qs, SubmitFlowStep200Branding as Qt, DeleteGrantDefault as Qu, UpdateFlowDefinitionBodyFlowDefinitionStepsItemComplete as R, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionAudience as Ra, GetFlowStep200StepFieldsItemType as Rc, CreateTeam404Details as Rd, CreateGrantBody as Rf, ListUserTeams400 as Ri, GetClaimStatus403 as Rl, CompleteClaim409Details as Rm, QueryTeamsParams as Rn, GetTeamDefaultDetails as Ro, CreateFlowDefault as Rp, QueryProjectsBodyFilterItemField as Rr, GetMyUser200TeamsItemMembershipStatus as Rs, SubmitFlowStep200StepSsoProvidersItem as Rt, DeleteUserByIDDefault as Ru, UpdateTeam401 as S, ListFlowDefinitions400Details as Sa, GetGrant200ObjectType as Sc, CreateUser201 as Sd, CreateRelease201PointersItem as Sf, PatchProject404Details as Si, GetClaimWindowParams as Sl, CreateAuthAttempt201State as Sm, QueryUsersBodyFilterItemField as Sn, InitClaim401Details as So, CreateFlowDefinition400Details as Sp, QuerySessions200 as Sr, GetReadyDefault as Ss, SubmitFlowStep400StepGatesConfig as St, ExchangeHandoffBody as Su, UpdateTeam400Details as T, ListFlowDefinitions200FlowDefinitionsItemUserSchema as Ta, GetFlowStep410Details as Tc, CreateUser201Metadata as Td, CreateRelease200 as Tf, PatchProject400 as Ti, GetClaimWindow429 as Tl, CreateAuthAttempt201CompletedFactorsItemPayload as Tm, QueryUsers403Details as Tn, GetUserByIDDefault as To, CreateFlowDefinition201FlowDefinition as Tp, QuerySessions200SessionsItemUser as Tr, GetReady4xxDetails as Ts, SubmitFlowStep400StepFieldsItemValidationFormat as Tt, ExchangeHandoff401 as Tu, UpdateFlowDefinition404 as U, ListEventsCategoryItem as Ua, GetFlowStep200StepActionsItem as Uc, CreateTeam400 as Ud, CreateGrant409 as Uf, ListUserPasskeysParams as Ui, GetBrandingByIdDefaultDetails as Ul, CompleteClaim400 as Um, QueryTeamsBodySortingField as Un, GetTeam200 as Uo, CreateFlow400Details as Up, QueryProjects401 as Ur, GetMySessionDefault as Us, SubmitFlowStep200StepFieldsItemValidation as Ut, DeleteTeamDefault as Uu, UpdateFlowDefinitionBodyFlowDefinitionStatus as V, ListEventsDefault as Va, GetFlowStep200StepChallengeOptions as Vc, CreateTeam401 as Vd, CreateGrant429 as Vf, ListUserTeams200TeamsItem as Vi, GetClaimStatus200 as Vl, CompleteClaim403 as Vm, QueryTeamsBody as Vn, GetTeam401 as Vo, CreateFlowBodyHint as Vp, QueryProjects403 as Vr, GetMyUser200MetadataLifecycleOwnerTeam as Vs, SubmitFlowStep200StepGatesConfig as Vt, DeleteUserByID401 as Vu, UpdateFlowDefinition404Details as W, ListEvents403 as Wa, GetFlowStep200StepActionsItemKind as Wc, CreateTeam400Details as Wd, CreateGrant409Details as Wf, ListUserPasskeysDefault as Wi, GetBrandingById404 as Wl, CompleteClaim400Details as Wm, QueryTeamsBodySortingDirection as Wn, GetTeam200Status as Wo, CreateFlow201 as Wp, QueryProjects401Details as Wr, GetMySession404 as Ws, SubmitFlowStep200StepFieldsItemValidationFormat as Wt, DeleteTeamDefaultDetails as Wu, UpdateFlowDefinition200FlowDefinitionStepsItem as X, ListEvents200 as Xa, GetFlowDefinition200FlowDefinition as Xc, CreateSession400 as Xd, CreateGrant401Details as Xf, ListUserPasskeys403Details as Xi, GetAuthAttempt200 as Xl, BeginUserPasskeyRegistration404 as Xm, QueryTeams404 as Xn, GetSession401 as Xo, CreateFlow201StepGatesConfig as Xp, QueryGrantsDefault as Xr, GetMySession200Metadata as Xs, SubmitFlowStep200StepActionsItem as Xt, DeleteTeam400Details as Xu, UpdateFlowDefinition200FlowDefinition as Y, ListEvents400Details as Ya, GetFlowDefinition200UserSchema as Yc, CreateSessionBodyUserAgent as Yd, CreateGrant401 as Yf, ListUserPasskeys403 as Yi, GetAuthAttemptDefault as Yl, BeginUserPasskeyRegistration500Details as Ym, QueryTeams429Details as Yn, GetSession403Details as Yo, CreateFlow201StepGatesKind as Yp, QueryGrantsParams as Yr, GetMySession200State as Ys, SubmitFlowStep200StepChallengeMethod as Yt, DeleteTeam400 as Yu, UpdateFlowDefinition200FlowDefinitionStepsItemTransitions as Z, ListEvents200DataItem as Za, GetFlowDefinition200FlowDefinitionStepsItem as Zc, CreateSession400Details as Zd, CreateGrant400 as Zf, ListUserPasskeys401 as Zi, GetAuthAttempt200State as Zl, BeginUserPasskeyRegistration404Details as Zm, QueryTeams404Details as Zn, GetSession401Details as Zo, CreateFlow201StepFieldsItem as Zp, QueryGrantsBody as Zr, GetMySession200FactorsItem as Zs, SubmitFlowStep200StepActionsItemKind as Zt, DeleteGrantParams as Zu, UpdateTeam409Details as _, ListFlowDefinitionsParams as _a, GetGrant200User as _c, CreateUser403Details as _d, CreateReleaseDefault as _f, QueryGrants200GrantsItemPrincipal as _i, GetEvent401Details as _l, CreateBranding201Branding as _m, QueryUsersBodySorting as _n, InitClaim410 as _o, CreateFlowDefinitionBodyFlowDefinitionStepsItemActionsItem as _p, QuerySessions403Details as _r, GetReleaseByIdDefault as _s, SubmitFlowStep400Step as _t, FinishUserPasskeyRegistration400 as _u, VerifyChallengeProof200RequiredFactorsItem as a, ListSchemasKind as aa, GetHealthDefaultDetails as ac, DeleteFlowDefinitionDefault as ad, CreateSession201SessionFactorsItemPayload as af, BeginUserPasskeyRegistration201Options as ah, QueryGrants403 as ai, GetFlowDefinition200FlowDefinitionStepsItemActionsItem as al, CreateFlow201StepActionsItem as am, SetUserPassword404Details as an, ListBranding200Item as ao, CreateGrant201ObjectType as ap, QueryTeams200TeamsItem as ar, GetSession200FactorsItemMethod as as, UpdateFlowDefinition200FlowDefinitionStepsItemActionsItemKind as at, GetAuthAttempt200ChallengesItemMethod as au, UpdateTeam403 as b, ListFlowDefinitionsDefault as ba, GetGrant200PrincipalType as bc, CreateUser400 as bd, CreateReleaseBodyPointersItemKind as bf, PatchProjectBody as bi, GetEnvironmentByNameDefault as bl, CreateAuthAttemptBody as bm, QueryUsersBodyFilterItem as bn, InitClaim404 as bo, CreateFlowDefinitionBodyFlowDefinitionAudience as bp, QuerySessions400 as br, GetReleaseById200PointersItemKind as bs, SubmitFlowStep400StepGates as bt, ExchangeHandoffParams as bu, VerifyChallengeProof200CompletedFactorsItemMethod as c, ListSchemas200 as ca, GetGrantParams as cc, CreateUserParams as cd, CreateSchemaDefault as cf, QueryGrants401Details as ci, GetFlowDefinition200FlowDefinitionAudience as cl, CreateFlow201BrandingLayout as cm, RevokeSessionDefault as cn, IssueChallengeBodyPasskeyOptions as co, CreateFlowDefinitionBodyFlowDefinition as cp, QuerySessionsDefault as cr, GetSchemaByIdDefaultDetails as cs, SubmitFlowStepDefault as ct, FinishUserPasskeyRegistrationBodyAttestation as cu, VerifyChallengeProof200ChallengesItemPayload as d, ListSchemas200SchemasItemMetadata as da, GetGrant404Details as dc, CreateUserBodyAttributes as dd, CreateSchema409 as df, QueryGrants200 as di, GetEventDefaultDetails as dl, CreateBrandingDefaultDetails as dm, RevokeSession401 as dn, IssueChallenge201 as do, CreateFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersItem as dp, QuerySessionsBodySortingField as dr, GetSchemaById400 as ds, SubmitFlowStepBodyFields as dt, FinishUserPasskeyRegistration404 as du, ListUserPasskeys400Details as ea, GetLiveDefault as ec, DeleteGrant404Details as ed, CreateSession201SessionUserAgent as ef, BeginUserPasskeyRegistration401 as eh, QueryGrantsBodySortingDirection as ei, GetFlowDefinition200FlowDefinitionStepsItemOnSuccess as el, CreateFlow201StepFieldsItemType as em, SetUserPasswordDefault as en, ListEnvironments200 as eo, CreateGrant201User as ep, QueryTeams401 as er, GetSession200User as es, UpdateFlowDefinition200FlowDefinitionStepsItemGates as et, GetAuthAttempt200CompletedFactorsItemPayload as eu, VerifyChallengeProof200ChallengesItemMethod as f, ListReleasesParams as fa, GetGrant403 as fc, CreateUser500 as fd, CreateSchema409Details as ff, QueryGrants200GrantsItem as fi, GetEvent404 as fl, CreateBrandingBody as fm, RevokeSession401Details as fn, IssueChallenge201State as fo, CreateFlowDefinitionBodyFlowDefinitionStepsItemOnSuccess as fp, QuerySessionsBodySortingDirection as fr, GetSchemaById400Details as fs, SubmitFlowStepBodyChallengeResponse as ft, FinishUserPasskeyRegistration404Details as fu, UpdateTeam409 as g, ListReleases200ReleasesItemMetadata as ga, GetGrant200 as gc, CreateUser403 as gd, CreateReleaseParams as gf, QueryGrants200GrantsItemPrincipalType as gi, GetEvent401 as gl, CreateBranding201 as gm, QueryUsersBody as gn, InitClaimDefaultDetails as go, CreateFlowDefinitionBodyFlowDefinitionStepsItemComplete as gp, QuerySessions403 as gr, GetReleaseByIdParams as gs, SubmitFlowStep400 as gt, FinishUserPasskeyRegistration401Details as gu, UpdateTeamBody as h, ListReleases200ReleasesItem as ha, GetGrant401Details as hc, CreateUser409Details as hd, CreateSchema201 as hf, QueryGrants200GrantsItemRelation as hi, GetEvent403Details as hl, CreateBranding400Details as hm, QueryUsersDefault as hn, InitClaimDefault as ho, CreateFlowDefinitionBodyFlowDefinitionStepsItemGatesConfig as hp, QuerySessionsBodyFilterItemField as hr, GetSchemaById200Metadata as hs, SubmitFlowStep409Details as ht, FinishUserPasskeyRegistration401 as hu, VerifyChallengeProof200State as i, ListSchemasRevisions as ia, GetHealthDefault as ic, DeleteGrant401Details as id, CreateSession201SessionFactorsItem as if, BeginUserPasskeyRegistration201 as ih, QueryGrantsBodyExpandItem as ii, GetFlowDefinition200FlowDefinitionStepsItemComplete as il, CreateFlow201StepChallengeMethod as im, SetUserPassword404 as in, ListBrandingDefaultDetails as io, CreateGrant201Principal as ip, QueryTeams200 as ir, GetSession200FactorsItemPayload as is, UpdateFlowDefinition200FlowDefinitionStepsItemActionsItem as it, GetAuthAttempt200ChallengesItemPayload as iu, UpdateFlowDefinitionBodyFlowDefinitionStepsItem as j, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItemGates as ja, GetFlowStep200StepSsoProvidersItem as jc, CreateTeamDefaultDetails as jd, CreateProject429 as jf, ListUserTeams500Details as ji, GetClaimStatusDefault as jl, CompleteClaimDefault as jm, QueryUsers200UsersItem as jn, GetUserByID200TeamsItem as jo, CreateFlowDefinition201FlowDefinitionStepsItemGatesKind as jp, QueryProjectsDefault as jr, GetProject200 as js, SubmitFlowStep400StepActionsItem as jt, ExchangeHandoff200SessionUserAgent as ju, UpdateFlowDefinitionBody as k, ListFlowDefinitions200FlowDefinitionsItemFlowDefinitionStepsItemSsoProvidersItem as ka, GetFlowStep200Step as kc, CreateTeamParams as kd, CreateProjectDefault as kf, ListUserTeamsDefault as ki, GetClaimWindow200 as kl, CreateAuthAttempt201ChallengesItemPayload as km, QueryUsers400Details as kn, GetUserByID401Details as ko, CreateFlowDefinition201FlowDefinitionStepsItemOnSuccess as kp, QuerySessions200SessionsItemFactorsItemPayload as kr, GetProject401 as ks, SubmitFlowStep400StepChallengeOptions as kt, ExchangeHandoff200 as ku, VerifyChallengeProof200ChallengesItem as l, ListSchemas200SchemasItem as la, GetGrantDefault as lc, CreateUserDefault as ld, CreateSchemaDefaultDetails as lf, QueryGrants400 as li, GetEventParams as ll, CreateBrandingParams as lm, RevokeSession403 as ln, IssueChallengeBodyPasskeyOptionsUserVerification as lo, CreateFlowDefinitionBodyFlowDefinitionStepsItem as lp, QuerySessionsBody as lr, GetSchemaById404 as ls, SubmitFlowStepBody as lt, FinishUserPasskeyRegistration500 as lu, UpdateTeamDefaultDetails as m, ListReleases200 as ma, GetGrant401 as mc, CreateUser409 as md, CreateSchema400Details as mf, QueryGrants200GrantsItemTeam as mi, GetEvent403 as ml, CreateBranding400 as mm, RevokeMySession401 as mn, IssueChallenge201Method as mo, CreateFlowDefinitionBodyFlowDefinitionStepsItemGatesKind as mp, QuerySessionsBodyFilterItemOperation as mr, GetSchemaById200Schema as ms, SubmitFlowStep409 as mt, FinishUserPasskeyRegistration403Details as mu, VerifyChallengeProofBody as n, ListUserPasskeys200PasskeysItem as na, GetLive4xx as nc, DeleteGrant403Details as nd, CreateSession201SessionState as nf, BeginUserPasskeyRegistration400 as nh, QueryGrantsBodyFilterItemOperation as ni, GetFlowDefinition200FlowDefinitionStepsItemGatesKind as nl, CreateFlow201StepChallenge as nm, SetUserPassword500 as nn, ListBrandingParams as no, CreateGrant201Relation as np, QueryTeams400 as nr, GetSession200Metadata as ns, UpdateFlowDefinition200FlowDefinitionStepsItemGatesConfig as nt, GetAuthAttempt200ChallengesItem as nu, VerifyChallengeProof200CompletedFactorsItem as o, ListSchemasDefault as oa, GetHealth4xx as oc, DeleteFlowDefinition409 as od, CreateSession201SessionFactorsItemMethod as of, QueryGrants403Details as oi, GetFlowDefinition200FlowDefinitionStepsItemActionsItemKind as ol, CreateFlow201StepActionsItemKind as om, SetUserPassword400 as on, IssueChallengeDefault as oo, CreateFlowDefinitionDefault as op, QueryTeams200TeamsItemStatus as or, GetSchemaByIdParams as os, UpdateFlowDefinition200FlowDefinitionStatus as ot, FinishUserPasskeyRegistrationDefault as ou, UpdateTeamDefault as p, ListReleasesDefault as pa, GetGrant403Details as pc, CreateUser500Details as pd, CreateSchema400 as pf, QueryGrants200GrantsItemUser as pi, GetEvent404Details as pl, CreateBrandingBodyLayout as pm, RevokeMySessionDefault as pn, IssueChallenge201Payload as po, CreateFlowDefinitionBodyFlowDefinitionStepsItemGates as pp, QuerySessionsBodyFilterItem as pr, GetSchemaById200 as ps, SubmitFlowStepBodyChallengeResponseProof as pt, FinishUserPasskeyRegistration403 as pu, UpdateFlowDefinition200 as q, ListEvents401Details as qa, GetFlowDefinitionDefault as qc, CreateSessionDefault as qd, CreateGrant403 as qf, ListUserPasskeys404 as qi, GetBrandingById200Branding as ql, BeginUserPasskeyRegistrationBody as qm, QueryTeamsBodyFilterItemField as qn, GetSession404Details as qo, CreateFlow201StepSsoProvidersItem as qp, QueryProjects200 as qr, GetMySession200UserAgent as qs, SubmitFlowStep200StepChallenge as qt, DeleteTeam401 as qu, VerifyChallengeProof200 as r, ListSchemasParams as ra, GetLive4xxDetails as rc, DeleteGrant401 as rd, CreateSession201SessionMetadata as rf, BeginUserPasskeyRegistration400Details as rh, QueryGrantsBodyFilterItemField as ri, GetFlowDefinition200FlowDefinitionStepsItemGatesConfig as rl, CreateFlow201StepChallengeOptions as rm, SetUserPassword500Details as rn, ListBrandingDefault as ro, CreateGrant201PrincipalType as rp, QueryTeams400Details as rr, GetSession200FactorsItem as rs, UpdateFlowDefinition200FlowDefinitionStepsItemComplete as rt, GetAuthAttempt200ChallengesItemState as ru, VerifyChallengeProof200CompletedFactorsItemPayload as s, ListSchemasDefaultDetails as sa, GetHealth4xxDetails as sc, DeleteFlowDefinition409Details as sd, CreateSchemaParams as sf, QueryGrants401 as si, GetFlowDefinition200FlowDefinitionStatus as sl, CreateFlow201Branding as sm, SetUserPassword400Details as sn, IssueChallengeBody as so, CreateFlowDefinitionBody as sp, QuerySessionsParams as sr, GetSchemaByIdDefault as ss, UpdateFlowDefinition200FlowDefinitionAudience as st, FinishUserPasskeyRegistrationBody as su, VerifyChallengeProofDefault as t, ListUserPasskeys200 as ta, GetLiveDefaultDetails as tc, DeleteGrant403 as td, CreateSession201SessionUser as tf, BeginUserPasskeyRegistration401Details as th, QueryGrantsBodyFilterItem as ti, GetFlowDefinition200FlowDefinitionStepsItemGates as tl, CreateFlow201StepComplete as tm, SetUserPasswordBody as tn, ListEnvironments200EnvironmentsItem as to, CreateGrant201Team as tp, QueryTeams401Details as tr, GetSession200State as ts, UpdateFlowDefinition200FlowDefinitionStepsItemGatesKind as tt, GetAuthAttempt200CompletedFactorsItemMethod as tu, VerifyChallengeProof200ChallengesItemState as u, ListSchemas200SchemasItemSchema as ua, GetGrant404 as uc, CreateUserBody as ud, CreateSchemaBody as uf, QueryGrants400Details as ui, GetEventDefault as ul, CreateBrandingDefault as um, RevokeSession403Details as un, IssueChallengeBodyMethod as uo, CreateFlowDefinitionBodyFlowDefinitionStepsItemTransitions as up, QuerySessionsBodySorting as ur, GetSchemaById404Details as us, SubmitFlowStepBodyGateProofs as ut, FinishUserPasskeyRegistration500Details as uu, UpdateTeam404 as v, ListFlowDefinitionsPurpose as va, GetGrant200Team as vc, CreateUser401 as vd, CreateReleaseBody as vf, QueryGrants200GrantsItemObjectType as vi, GetEvent200 as vl, CreateBranding201BrandingLayout as vm, QueryUsersBodySortingField as vn, InitClaim409 as vo, CreateFlowDefinitionBodyFlowDefinitionStepsItemActionsItemKind as vp, QuerySessions401 as vr, GetReleaseById200 as vs, SubmitFlowStep400StepTexts as vt, FinishUserPasskeyRegistration400Details as vu, UpdateTeam400 as w, ListFlowDefinitions200FlowDefinitionsItem as wa, GetFlowStep410 as wc, CreateUser201TeamsItemMembershipStatus as wd, CreateRelease201Metadata as wf, PatchProject401Details as wi, GetClaimWindowDefaultDetails as wl, CreateAuthAttempt201CompletedFactorsItem as wm, QueryUsers403 as wn, GetUserByIDParams as wo, CreateFlowDefinition201UserSchema as wp, QuerySessions200SessionsItemUserAgent as wr, GetReady4xx as ws, SubmitFlowStep400StepFieldsItemValidation as wt, ExchangeHandoff410Details as wu, UpdateTeam403Details as x, ListFlowDefinitions400 as xa, GetGrant200Principal as xc, CreateUser400Details as xd, CreateRelease201 as xf, PatchProject404 as xi, GetEnvironmentByName200 as xl, CreateAuthAttempt201 as xm, QueryUsersBodyFilterItemOperation as xn, InitClaim401 as xo, CreateFlowDefinition400 as xp, QuerySessions400Details as xr, GetReleaseById200Metadata as xs, SubmitFlowStep400StepGatesKind as xt, ExchangeHandoffDefault as xu, UpdateTeam404Details as y, ListFlowDefinitionsExpandItem as ya, GetGrant200Relation as yc, CreateUser401Details as yd, CreateReleaseBodyPointersItem as yf, PatchProjectDefault as yi, GetEnvironmentByNameParams as yl, CreateAuthAttemptDefault as ym, QueryUsersBodySortingDirection as yn, InitClaim409Details as yo, CreateFlowDefinitionBodyFlowDefinitionStatus as yp, QuerySessions401Details as yr, GetReleaseById200PointersItem as ys, SubmitFlowStep400StepSsoProvidersItem as yt, FinishUserPasskeyRegistration201 as yu, UpdateFlowDefinitionBodyFlowDefinitionStepsItemActionsItem as z, ListEventsParams as za, GetFlowStep200StepComplete as zc, CreateTeam403 as zd, CreateGrantBodyRelation as zf, ListUserTeams400Details as zi, GetClaimStatus401 as zl, CompleteClaim404 as zm, QueryTeamsDefault as zn, GetTeam404 as zo, CreateFlowBody as zp, QueryProjects429 as zr, GetMyUser200Metadata as zs, SubmitFlowStep200StepGates as zt, DeleteUserByID404 as zu };
+//# sourceMappingURL=index-DtExHu2p.d.mts.map