@zitadel/api 1.0.0-alpha.20 → 1.0.0-alpha.22

package/dist/generated/endpoints/zitadelNextGen.zod.mjs

@@ -96,6 +96,9 @@ const QueryUsersResponse = zod.object({
 				updated_at: zod.iso.datetime({ offset: true }).describe("The time when the team was last updated.")
 			}).describe("Details of a team."), zod.null()]).optional().describe("The team named by `lifecycle_owner_team_id`, present only when the\nrequest asked for it with `expand: [\"lifecycle_owner_team\"]` (ADR 059).\nAbsent means it was not requested; `null` means the user is self-owned\nand there is no owner to resolve.\n\nRequesting it does not guarantee it is present on every user. Today\n`team.read` is checked once for the whole request, so it is; once that\ncheck is per team, a page may contain a user whose owner the caller may\nnot read, and such a row answers with neither the team nor `null` —\n`null` already means self-owned. What it answers with instead is decided\nwith the granular scopes (#420); do not read the two cases above as the\ncomplete set.\n\nThis is the same representation `GET /teams/{team_id}` serves. It is a\nsingle team, not a collection, so it carries no cap and no truncation\nflag.\n")
 		}),
+		identifier: zod.string().optional().describe("The current value of the user schema's designated identifier\n(`x-identifier`), resolved live at read time. Absent when the schema\ndesignates no identifier or the user carries no value for it.\n"),
+		identifier_property: zod.string().optional().describe("The schema property `identifier` came from, so clients can reach the\nproperty's schema for semantics (a mailto link, a field label)\ninstead of guessing from the value. Present exactly when\n`identifier` is.\n"),
+		display: zod.string().optional().describe("The `x-display` rendering — the designated properties' values joined\nin list order, resolved live at read time. Purely presentational.\nAbsent when the schema designates no display properties or the user\ncarries no values for them. Clients render `display`, falling back\nto `identifier`, then `id`.\n"),
 		teams: zod.array(zod.object({
 			id: zod.string().describe("The unique identifier of the team."),
 			name: zod.string().describe("The name of the team."),
@@ -141,6 +144,9 @@ const GetUserByIDResponse = zod.object({
 			updated_at: zod.iso.datetime({ offset: true }).describe("The time when the team was last updated.")
 		}).describe("Details of a team."), zod.null()]).optional().describe("The team named by `lifecycle_owner_team_id`, present only when the\nrequest asked for it with `expand: [\"lifecycle_owner_team\"]` (ADR 059).\nAbsent means it was not requested; `null` means the user is self-owned\nand there is no owner to resolve.\n\nRequesting it does not guarantee it is present on every user. Today\n`team.read` is checked once for the whole request, so it is; once that\ncheck is per team, a page may contain a user whose owner the caller may\nnot read, and such a row answers with neither the team nor `null` —\n`null` already means self-owned. What it answers with instead is decided\nwith the granular scopes (#420); do not read the two cases above as the\ncomplete set.\n\nThis is the same representation `GET /teams/{team_id}` serves. It is a\nsingle team, not a collection, so it carries no cap and no truncation\nflag.\n")
 	}),
+	identifier: zod.string().optional().describe("The current value of the user schema's designated identifier\n(`x-identifier`), resolved live at read time. Absent when the schema\ndesignates no identifier or the user carries no value for it.\n"),
+	identifier_property: zod.string().optional().describe("The schema property `identifier` came from, so clients can reach the\nproperty's schema for semantics (a mailto link, a field label)\ninstead of guessing from the value. Present exactly when\n`identifier` is.\n"),
+	display: zod.string().optional().describe("The `x-display` rendering — the designated properties' values joined\nin list order, resolved live at read time. Purely presentational.\nAbsent when the schema designates no display properties or the user\ncarries no values for them. Clients render `display`, falling back\nto `identifier`, then `id`.\n"),
 	teams: zod.array(zod.object({
 		id: zod.string().describe("The unique identifier of the team."),
 		name: zod.string().describe("The name of the team."),
@@ -282,6 +288,9 @@ const GetMyUserResponse = zod.object({
 			updated_at: zod.iso.datetime({ offset: true }).describe("The time when the team was last updated.")
 		}).describe("Details of a team."), zod.null()]).optional().describe("The team named by `lifecycle_owner_team_id`, present only when the\nrequest asked for it with `expand: [\"lifecycle_owner_team\"]` (ADR 059).\nAbsent means it was not requested; `null` means the user is self-owned\nand there is no owner to resolve.\n\nRequesting it does not guarantee it is present on every user. Today\n`team.read` is checked once for the whole request, so it is; once that\ncheck is per team, a page may contain a user whose owner the caller may\nnot read, and such a row answers with neither the team nor `null` —\n`null` already means self-owned. What it answers with instead is decided\nwith the granular scopes (#420); do not read the two cases above as the\ncomplete set.\n\nThis is the same representation `GET /teams/{team_id}` serves. It is a\nsingle team, not a collection, so it carries no cap and no truncation\nflag.\n")
 	}),
+	identifier: zod.string().optional().describe("The current value of the user schema's designated identifier\n(`x-identifier`), resolved live at read time. Absent when the schema\ndesignates no identifier or the user carries no value for it.\n"),
+	identifier_property: zod.string().optional().describe("The schema property `identifier` came from, so clients can reach the\nproperty's schema for semantics (a mailto link, a field label)\ninstead of guessing from the value. Present exactly when\n`identifier` is.\n"),
+	display: zod.string().optional().describe("The `x-display` rendering — the designated properties' values joined\nin list order, resolved live at read time. Purely presentational.\nAbsent when the schema designates no display properties or the user\ncarries no values for them. Clients render `display`, falling back\nto `identifier`, then `id`.\n"),
 	teams: zod.array(zod.object({
 		id: zod.string().describe("The unique identifier of the team."),
 		name: zod.string().describe("The name of the team."),
@@ -925,7 +934,11 @@ const InitClaimParams = zod.object({ project_id: zod.string().regex(initClaimPat
 * Polled by the CLI while a browser completes the claim. Authorized by the
 project secret that initiated the challenge. Returns `pending`, or
 `completed` with the owning team, the claim timestamp, and the dashboard
-URL once the browser leg has finished.
+URL once the project is claimed. The claim grant, not the polled
+challenge, is the source of truth: a project claimed through another
+concurrent challenge also reports `completed`, and a completed claim
+keeps reporting `completed` past this challenge's expiry and past the
+project's claim window.
 
 * @summary Get claim status
 */
@@ -960,6 +973,24 @@ const CompleteClaimResponse = zod.object({
 	claimed_at: zod.iso.datetime({ offset: true }).describe("The time when the project was claimed.")
 }).describe("The result of a completed project claim.");
 /**
+* Read by the claim page in the browser to show how long is left to claim the
+project. Unauthenticated by design: the claim page runs this before the
+developer has signed in, and holding the `challenge_id` from the claim URL
+is the authorization — the same capability `claim/complete` accepts. It
+reveals only the window, never the project itself, and unlike
+`claim/complete` it spends nothing, so a reload is free.
+
+* @summary Get the claim window for a project
+*/
+const getClaimWindowPathProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
+const GetClaimWindowParams = zod.object({ project_id: zod.string().regex(getClaimWindowPathProjectIdRegExp) });
+const getClaimWindowQueryChallengeIdRegExp = /* @__PURE__ */ new RegExp("^ch_[a-zA-Z0-9_-]+$");
+const GetClaimWindowQueryParams = zod.strictObject({ challenge_id: zod.string().regex(getClaimWindowQueryChallengeIdRegExp).describe("The challenge from the claim URL.") });
+const GetClaimWindowResponse = zod.object({
+	expires_at: zod.iso.datetime({ offset: true }).describe("The time when the project's claim window closes."),
+	expired: zod.boolean().describe("Whether the window has already closed. Reported alongside `expires_at`\nrather than left to the client so a skewed browser clock cannot show a\nclaimable project as expired, or the reverse.\n")
+}).describe("How long the project can still be claimed. Derived from the project's\ncreation time and the fixed 14-day claim window (ADR 046); it does not\ndepend on the challenge, which has its own much shorter expiry.\n");
+/**
 * Creates an anonymous session shell with no user and no factors (`state: building`).
 
 This is optional — an `auth_attempt` will create a session implicitly if none is provided.
@@ -1038,6 +1069,7 @@ const QuerySessionsBody = zod.object({
 const querySessionsResponseSessionsItemSessionIdRegExp = /* @__PURE__ */ new RegExp("^sess_[a-zA-Z0-9_-]+$");
 const querySessionsResponseSessionsItemProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const querySessionsResponseSessionsItemUserIdOneRegExp = /* @__PURE__ */ new RegExp("^user_[a-zA-Z0-9_-]+$");
+const querySessionsResponseSessionsItemUserUserIdRegExp = /* @__PURE__ */ new RegExp("^user_[a-zA-Z0-9_-]+$");
 const querySessionsResponseSessionsItemFactorsItemPayloadOneUserIdRegExp = /* @__PURE__ */ new RegExp("^user_[a-zA-Z0-9_-]+$");
 const QuerySessionsResponse = zod.object({
 	sessions: zod.array(zod.object({
@@ -1049,8 +1081,12 @@ const QuerySessionsResponse = zod.object({
 			"expired"
 		]).describe("Current lifecycle state of the session:\n- `building`: no verified authentication factors yet\n- `active`: has at least one verified authentication factor; `assurance_levels[]` may shrink as factors age\n- `expired`: TTL elapsed\n"),
 		user_id: zod.union([zod.string().regex(querySessionsResponseSessionsItemUserIdOneRegExp), zod.null()]).optional().describe("The authenticated user. Null for anonymous sessions and until the `user`\nfactor has been verified through an `auth_attempt`.\n"),
-		name: zod.string().optional().describe("Human-readable name of the authenticated user, resolved from the\nconventional user-schema properties: `name` when defined, otherwise\nthe given and family name parts joined — `givenName`/`familyName`\n(the shipped presets' spelling) or `given_name`/`family_name`. Only\npresent on reads that hydrate the user's identity\n(`GET /sessions/me`) and only when the session has an authenticated\nuser whose schema carries those properties; clients fall back to\n`email`, then `user_id`.\n"),
-		email: zod.string().optional().describe("Email address of the authenticated user, resolved from the\nconventional `email` user-schema property. Only present on reads\nthat hydrate the user's identity (`GET /sessions/me`) and only when\nthe session has an authenticated user whose schema carries that\nproperty.\n"),
+		user: zod.object({
+			user_id: zod.string().regex(querySessionsResponseSessionsItemUserUserIdRegExp),
+			identifier: zod.string().optional().describe("The current value of the schema's designated identifier\n(`x-identifier`). Absent when the schema designates no identifier or\nthe user carries no value for it.\n"),
+			identifier_property: zod.string().optional().describe("The schema property `identifier` came from, so clients can reach the\nproperty's schema for semantics (a mailto link, a field label)\ninstead of guessing from the value. Present exactly when\n`identifier` is.\n"),
+			display: zod.string().optional().describe("The `x-display` rendering — the designated properties' values joined\nin list order. Purely presentational, with no source attribution.\nAbsent when the schema designates no display properties or the user\ncarries no values for them.\n")
+		}).optional().describe("A resolved reference to a user (ADR 058 §3). Fields are role-named, not\nproperty-named, so responses can mix users from different schemas.\n`identifier` and `display` are resolved independently from the user\nschema's `x-identifier` and `x-display` designations, live at read time.\nClients render `display`, falling back to `identifier`, then `user_id`.\nMissing or deleted users degrade to `user_id` only.\n"),
 		factors: zod.array(zod.object({
 			method: zod.enum([
 				"identifier",
@@ -1112,6 +1148,7 @@ const ExchangeHandoffBody = zod.object({
 const exchangeHandoffResponseSessionSessionIdRegExp = /* @__PURE__ */ new RegExp("^sess_[a-zA-Z0-9_-]+$");
 const exchangeHandoffResponseSessionProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const exchangeHandoffResponseSessionUserIdOneRegExp = /* @__PURE__ */ new RegExp("^user_[a-zA-Z0-9_-]+$");
+const exchangeHandoffResponseSessionUserUserIdRegExp = /* @__PURE__ */ new RegExp("^user_[a-zA-Z0-9_-]+$");
 const exchangeHandoffResponseSessionFactorsItemPayloadOneUserIdRegExp = /* @__PURE__ */ new RegExp("^user_[a-zA-Z0-9_-]+$");
 const ExchangeHandoffResponse = zod.object({
 	session: zod.object({
@@ -1123,8 +1160,12 @@ const ExchangeHandoffResponse = zod.object({
 			"expired"
 		]).describe("Current lifecycle state of the session:\n- `building`: no verified authentication factors yet\n- `active`: has at least one verified authentication factor; `assurance_levels[]` may shrink as factors age\n- `expired`: TTL elapsed\n"),
 		user_id: zod.union([zod.string().regex(exchangeHandoffResponseSessionUserIdOneRegExp), zod.null()]).optional().describe("The authenticated user. Null for anonymous sessions and until the `user`\nfactor has been verified through an `auth_attempt`.\n"),
-		name: zod.string().optional().describe("Human-readable name of the authenticated user, resolved from the\nconventional user-schema properties: `name` when defined, otherwise\nthe given and family name parts joined — `givenName`/`familyName`\n(the shipped presets' spelling) or `given_name`/`family_name`. Only\npresent on reads that hydrate the user's identity\n(`GET /sessions/me`) and only when the session has an authenticated\nuser whose schema carries those properties; clients fall back to\n`email`, then `user_id`.\n"),
-		email: zod.string().optional().describe("Email address of the authenticated user, resolved from the\nconventional `email` user-schema property. Only present on reads\nthat hydrate the user's identity (`GET /sessions/me`) and only when\nthe session has an authenticated user whose schema carries that\nproperty.\n"),
+		user: zod.object({
+			user_id: zod.string().regex(exchangeHandoffResponseSessionUserUserIdRegExp),
+			identifier: zod.string().optional().describe("The current value of the schema's designated identifier\n(`x-identifier`). Absent when the schema designates no identifier or\nthe user carries no value for it.\n"),
+			identifier_property: zod.string().optional().describe("The schema property `identifier` came from, so clients can reach the\nproperty's schema for semantics (a mailto link, a field label)\ninstead of guessing from the value. Present exactly when\n`identifier` is.\n"),
+			display: zod.string().optional().describe("The `x-display` rendering — the designated properties' values joined\nin list order. Purely presentational, with no source attribution.\nAbsent when the schema designates no display properties or the user\ncarries no values for them.\n")
+		}).optional().describe("A resolved reference to a user (ADR 058 §3). Fields are role-named, not\nproperty-named, so responses can mix users from different schemas.\n`identifier` and `display` are resolved independently from the user\nschema's `x-identifier` and `x-display` designations, live at read time.\nClients render `display`, falling back to `identifier`, then `user_id`.\nMissing or deleted users degrade to `user_id` only.\n"),
 		factors: zod.array(zod.object({
 			method: zod.enum([
 				"identifier",
@@ -1170,6 +1211,7 @@ const GetSessionParams = zod.object({ session_id: zod.string().regex(getSessionP
 const getSessionResponseSessionIdRegExp = /* @__PURE__ */ new RegExp("^sess_[a-zA-Z0-9_-]+$");
 const getSessionResponseProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const getSessionResponseUserIdOneRegExp = /* @__PURE__ */ new RegExp("^user_[a-zA-Z0-9_-]+$");
+const getSessionResponseUserUserIdRegExp = /* @__PURE__ */ new RegExp("^user_[a-zA-Z0-9_-]+$");
 const getSessionResponseFactorsItemPayloadOneUserIdRegExp = /* @__PURE__ */ new RegExp("^user_[a-zA-Z0-9_-]+$");
 const GetSessionResponse = zod.object({
 	session_id: zod.string().regex(getSessionResponseSessionIdRegExp).describe("Unique identifier for this session (dialect-minted prefixed opaque string)."),
@@ -1180,8 +1222,12 @@ const GetSessionResponse = zod.object({
 		"expired"
 	]).describe("Current lifecycle state of the session:\n- `building`: no verified authentication factors yet\n- `active`: has at least one verified authentication factor; `assurance_levels[]` may shrink as factors age\n- `expired`: TTL elapsed\n"),
 	user_id: zod.union([zod.string().regex(getSessionResponseUserIdOneRegExp), zod.null()]).optional().describe("The authenticated user. Null for anonymous sessions and until the `user`\nfactor has been verified through an `auth_attempt`.\n"),
-	name: zod.string().optional().describe("Human-readable name of the authenticated user, resolved from the\nconventional user-schema properties: `name` when defined, otherwise\nthe given and family name parts joined — `givenName`/`familyName`\n(the shipped presets' spelling) or `given_name`/`family_name`. Only\npresent on reads that hydrate the user's identity\n(`GET /sessions/me`) and only when the session has an authenticated\nuser whose schema carries those properties; clients fall back to\n`email`, then `user_id`.\n"),
-	email: zod.string().optional().describe("Email address of the authenticated user, resolved from the\nconventional `email` user-schema property. Only present on reads\nthat hydrate the user's identity (`GET /sessions/me`) and only when\nthe session has an authenticated user whose schema carries that\nproperty.\n"),
+	user: zod.object({
+		user_id: zod.string().regex(getSessionResponseUserUserIdRegExp),
+		identifier: zod.string().optional().describe("The current value of the schema's designated identifier\n(`x-identifier`). Absent when the schema designates no identifier or\nthe user carries no value for it.\n"),
+		identifier_property: zod.string().optional().describe("The schema property `identifier` came from, so clients can reach the\nproperty's schema for semantics (a mailto link, a field label)\ninstead of guessing from the value. Present exactly when\n`identifier` is.\n"),
+		display: zod.string().optional().describe("The `x-display` rendering — the designated properties' values joined\nin list order. Purely presentational, with no source attribution.\nAbsent when the schema designates no display properties or the user\ncarries no values for them.\n")
+	}).optional().describe("A resolved reference to a user (ADR 058 §3). Fields are role-named, not\nproperty-named, so responses can mix users from different schemas.\n`identifier` and `display` are resolved independently from the user\nschema's `x-identifier` and `x-display` designations, live at read time.\nClients render `display`, falling back to `identifier`, then `user_id`.\nMissing or deleted users degrade to `user_id` only.\n"),
 	factors: zod.array(zod.object({
 		method: zod.enum([
 			"identifier",
@@ -1238,6 +1284,7 @@ against the same `session_id`) to restore a dropped assurance level.
 const getMySessionResponseSessionIdRegExp = /* @__PURE__ */ new RegExp("^sess_[a-zA-Z0-9_-]+$");
 const getMySessionResponseProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const getMySessionResponseUserIdOneRegExp = /* @__PURE__ */ new RegExp("^user_[a-zA-Z0-9_-]+$");
+const getMySessionResponseUserUserIdRegExp = /* @__PURE__ */ new RegExp("^user_[a-zA-Z0-9_-]+$");
 const getMySessionResponseFactorsItemPayloadOneUserIdRegExp = /* @__PURE__ */ new RegExp("^user_[a-zA-Z0-9_-]+$");
 const GetMySessionResponse = zod.object({
 	session_id: zod.string().regex(getMySessionResponseSessionIdRegExp).describe("Unique identifier for this session (dialect-minted prefixed opaque string)."),
@@ -1248,8 +1295,12 @@ const GetMySessionResponse = zod.object({
 		"expired"
 	]).describe("Current lifecycle state of the session:\n- `building`: no verified authentication factors yet\n- `active`: has at least one verified authentication factor; `assurance_levels[]` may shrink as factors age\n- `expired`: TTL elapsed\n"),
 	user_id: zod.union([zod.string().regex(getMySessionResponseUserIdOneRegExp), zod.null()]).optional().describe("The authenticated user. Null for anonymous sessions and until the `user`\nfactor has been verified through an `auth_attempt`.\n"),
-	name: zod.string().optional().describe("Human-readable name of the authenticated user, resolved from the\nconventional user-schema properties: `name` when defined, otherwise\nthe given and family name parts joined — `givenName`/`familyName`\n(the shipped presets' spelling) or `given_name`/`family_name`. Only\npresent on reads that hydrate the user's identity\n(`GET /sessions/me`) and only when the session has an authenticated\nuser whose schema carries those properties; clients fall back to\n`email`, then `user_id`.\n"),
-	email: zod.string().optional().describe("Email address of the authenticated user, resolved from the\nconventional `email` user-schema property. Only present on reads\nthat hydrate the user's identity (`GET /sessions/me`) and only when\nthe session has an authenticated user whose schema carries that\nproperty.\n"),
+	user: zod.object({
+		user_id: zod.string().regex(getMySessionResponseUserUserIdRegExp),
+		identifier: zod.string().optional().describe("The current value of the schema's designated identifier\n(`x-identifier`). Absent when the schema designates no identifier or\nthe user carries no value for it.\n"),
+		identifier_property: zod.string().optional().describe("The schema property `identifier` came from, so clients can reach the\nproperty's schema for semantics (a mailto link, a field label)\ninstead of guessing from the value. Present exactly when\n`identifier` is.\n"),
+		display: zod.string().optional().describe("The `x-display` rendering — the designated properties' values joined\nin list order. Purely presentational, with no source attribution.\nAbsent when the schema designates no display properties or the user\ncarries no values for them.\n")
+	}).optional().describe("A resolved reference to a user (ADR 058 §3). Fields are role-named, not\nproperty-named, so responses can mix users from different schemas.\n`identifier` and `display` are resolved independently from the user\nschema's `x-identifier` and `x-display` designations, live at read time.\nClients render `display`, falling back to `identifier`, then `user_id`.\nMissing or deleted users degrade to `user_id` only.\n"),
 	factors: zod.array(zod.object({
 		method: zod.enum([
 			"identifier",
@@ -1419,12 +1470,17 @@ const GetSchemaByIdResponse = zod.object({
 	metadata: zod.object({ created_at: zod.iso.datetime({ offset: true }).describe("The time when the schema was created.") })
 }).describe("A schema resource: the server-owned envelope around a customer-authored\nJSON Schema document.\n\n`schema` is the customer-authored document, served verbatim: its keys and\ncontents are defined entirely by its author. The rest of the object — `id`,\n`metadata` — is the server-owned envelope. Keeping the two apart means the\ndocument may declare any property (including `id` or `metadata`) without\ncolliding with the envelope, and the resource `id` stays distinguishable\nfrom the document's own `$id`.\n");
 /**
-* Creates a new flow definition.
+* Publishes a new flow definition revision.
 Flow definitions are templates that define the sequence of steps (capabilities)
 for a particular user journey (e.g., registration, login, password reset).
 
 Flow definitions are created based on the flow definition schema, which includes the flow's purpose, audience, and the steps involved.
 
+Every call allocates a new opaque id. Revisions of one flow share its
+`name`; posting a definition under an existing `name` publishes a new
+revision of that flow, it is not a conflict. List with `name` to see a
+flow's revisions, newest by creation time first.
+
 * @summary Create a new flow definition
 */
 const createFlowDefinitionBodyProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
@@ -1438,7 +1494,7 @@ const CreateFlowDefinitionBody = zod.object({
 	project_id: zod.string().regex(createFlowDefinitionBodyProjectIdRegExp),
 	schema_uri: zod.url().optional().describe("URI of the server-published flow definition schema this definition was\nauthored against. The server uses this to validate the definition.\nIf not provided, the engine will use the latest schema version for validation.\n"),
 	flow_definition: zod.object({
-		name: zod.string().regex(createFlowDefinitionBodyFlowDefinitionNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Renaming is not supported — the\n`name` is part of the public contract another definition may\nreference. Acts as the human display label as well; no separate slug.\n"),
+		name: zod.string().regex(createFlowDefinitionBodyFlowDefinitionNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Every revision of a flow shares its\n`name`; publishing a definition under an existing `name` adds a\nrevision to that flow. Renaming is not supported — the `name` is part\nof the public contract another definition may reference. Acts as the\nhuman display label as well; no separate slug.\n"),
 		status: zod.enum(["active", "draft"]).describe("The lifecycle state of this flow definition. \n\nactive: The flow definition is ready to be used. The flow engine can select it for new flows.\ndraft: The engine will not select it for new flows, and existing flows must handle it gracefully if they reference this definition.\n\nAllowed transitions:\n- draft -> active: To activate the flow definition.\n- active -> draft: To remove the flow definition from active use immediately.\n"),
 		user_schema: zod.string().describe("Server-assigned identifier of the user schema this flow operates on,\nas returned by `POST /schemas`. Opaque to the client — the shape is a\nserver implementation detail. Step `fields` reference properties\ndefined in the resolved schema; the engine resolves field types, validation, and\nimplicit outcomes from schema annotations at runtime.\n"),
 		purposes: zod.record(zod.string(), zod.string()).describe("Maps each purpose this definition handles to its entry-point step.\nKeys are purpose names; values must match a `name` in `steps`. A\ndefinition can serve multiple purposes (e.g. a combined login/register\nflow) by listing one entry per purpose.\n"),
@@ -1489,14 +1545,16 @@ const CreateFlowDefinitionBody = zod.object({
 	}).describe("A flow definition is the server-side configuration that describes a complete\nauthentication or identity flow. It is NOT sent to the frontend — the flow\nengine evaluates it and produces FlowResponse payloads (steps with capability\ndictionaries) for the client.\n\nFlow definitions are created by administrators and stored in the project/team\nconfiguration hierarchy. The engine selects the matching definition based on\nthe purpose + audience when a flow is created via POST /flow.\n")
 }).describe("Creates a flow definition.\nThe flow definition is created in an `active` state by default.\nThe status can also be set via the `status` attribute in the flow definition payload.\n");
 /**
-* Retrieves a list of all flow definitions.
+* Retrieves a list of all flow definitions, newest by creation time first.
 This endpoint can be used to view existing flow definitions and their configurations.
+Filter by `name` to list the revisions of one flow.
 
 * @summary List flow definitions
 */
 const listFlowDefinitionsQueryLimitDefault = 20;
 const listFlowDefinitionsQueryLimitMax = 100;
 const listFlowDefinitionsQueryProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
+const listFlowDefinitionsQueryNameRegExp = /* @__PURE__ */ new RegExp("^[a-z][a-z0-9-]*$");
 const ListFlowDefinitionsQueryParams = zod.strictObject({
 	limit: zod.number().min(1).max(100).default(20).describe("Maximum number of items to return."),
 	page_token: zod.string().optional().describe("Token for fetching the next page of results.\nObtain this value from `next_page_token` in the previous response.\nOmit to start from the beginning.\nIts format is opaque and may change between releases.\n"),
@@ -1509,6 +1567,7 @@ const ListFlowDefinitionsQueryParams = zod.strictObject({
 		"reauth",
 		"link_account"
 	]).optional().describe("Filter flow definitions by purpose (e.g., registration, login)."),
+	name: zod.string().regex(listFlowDefinitionsQueryNameRegExp).optional().describe("The flow name to filter by. Every revision of a flow shares its\n`name`, so the result is that flow's revisions, newest by creation\ntime first.\n"),
 	expand: zod.array(zod.enum(["user_schema"]).describe("A related entity to embed on each returned flow definition.\n\n- `user_schema`: the user schema the flow operates on, embedded as\n  `user_schema` on each entry: the same object `GET /schemas/{id}` returns.\n  The property is omitted entirely when not requested and `null` when the\n  referenced schema no longer resolves or the caller may not read it, so\n  \"did not ask\" stays distinguishable from \"cannot resolve\". Requesting it\n  requires read access to schemas.\n")).optional().describe("Related entities to embed on each returned flow definition.")
 });
 const listFlowDefinitionsResponseFlowDefinitionsItemFlowDefinitionNameRegExp = /* @__PURE__ */ new RegExp("^[a-z][a-z0-9-]*$");
@@ -1524,7 +1583,7 @@ const ListFlowDefinitionsResponse = zod.object({
 		id: zod.string().describe("Unique identifier for the flow definition."),
 		project_id: zod.string().describe("Identifier of the project this flow definition belongs to."),
 		flow_definition: zod.object({
-			name: zod.string().regex(listFlowDefinitionsResponseFlowDefinitionsItemFlowDefinitionNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Renaming is not supported — the\n`name` is part of the public contract another definition may\nreference. Acts as the human display label as well; no separate slug.\n"),
+			name: zod.string().regex(listFlowDefinitionsResponseFlowDefinitionsItemFlowDefinitionNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Every revision of a flow shares its\n`name`; publishing a definition under an existing `name` adds a\nrevision to that flow. Renaming is not supported — the `name` is part\nof the public contract another definition may reference. Acts as the\nhuman display label as well; no separate slug.\n"),
 			status: zod.enum(["active", "draft"]).describe("The lifecycle state of this flow definition. \n\nactive: The flow definition is ready to be used. The flow engine can select it for new flows.\ndraft: The engine will not select it for new flows, and existing flows must handle it gracefully if they reference this definition.\n\nAllowed transitions:\n- draft -> active: To activate the flow definition.\n- active -> draft: To remove the flow definition from active use immediately.\n"),
 			user_schema: zod.string().describe("Server-assigned identifier of the user schema this flow operates on,\nas returned by `POST /schemas`. Opaque to the client — the shape is a\nserver implementation detail. Step `fields` reference properties\ndefined in the resolved schema; the engine resolves field types, validation, and\nimplicit outcomes from schema annotations at runtime.\n"),
 			purposes: zod.record(zod.string(), zod.string()).describe("Maps each purpose this definition handles to its entry-point step.\nKeys are purpose names; values must match a `name` in `steps`. A\ndefinition can serve multiple purposes (e.g. a combined login/register\nflow) by listing one entry per purpose.\n"),
@@ -1605,7 +1664,7 @@ const ListFlowDefinitionsResponse = zod.object({
 		updated_at: zod.iso.datetime({ offset: true })
 	})),
 	next_page_token: zod.union([zod.string(), zod.null()]).optional().describe("The token to retrieve the next page of results. Absent if there are no more results.")
-});
+}).describe("List of flow definitions, newest by creation time first.");
 /**
 * Get a flow definition by id
 * @summary Get a flow definition by id
@@ -1623,7 +1682,7 @@ const GetFlowDefinitionResponse = zod.object({
 	id: zod.string().describe("Unique identifier for the flow definition."),
 	project_id: zod.string().describe("Identifier of the project this flow definition belongs to."),
 	flow_definition: zod.object({
-		name: zod.string().regex(getFlowDefinitionResponseFlowDefinitionNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Renaming is not supported — the\n`name` is part of the public contract another definition may\nreference. Acts as the human display label as well; no separate slug.\n"),
+		name: zod.string().regex(getFlowDefinitionResponseFlowDefinitionNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Every revision of a flow shares its\n`name`; publishing a definition under an existing `name` adds a\nrevision to that flow. Renaming is not supported — the `name` is part\nof the public contract another definition may reference. Acts as the\nhuman display label as well; no separate slug.\n"),
 		status: zod.enum(["active", "draft"]).describe("The lifecycle state of this flow definition. \n\nactive: The flow definition is ready to be used. The flow engine can select it for new flows.\ndraft: The engine will not select it for new flows, and existing flows must handle it gracefully if they reference this definition.\n\nAllowed transitions:\n- draft -> active: To activate the flow definition.\n- active -> draft: To remove the flow definition from active use immediately.\n"),
 		user_schema: zod.string().describe("Server-assigned identifier of the user schema this flow operates on,\nas returned by `POST /schemas`. Opaque to the client — the shape is a\nserver implementation detail. Step `fields` reference properties\ndefined in the resolved schema; the engine resolves field types, validation, and\nimplicit outcomes from schema annotations at runtime.\n"),
 		purposes: zod.record(zod.string(), zod.string()).describe("Maps each purpose this definition handles to its entry-point step.\nKeys are purpose names; values must match a `name` in `steps`. A\ndefinition can serve multiple purposes (e.g. a combined login/register\nflow) by listing one entry per purpose.\n"),
@@ -1719,7 +1778,7 @@ const updateFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersDefault = [];
 const UpdateFlowDefinitionBody = zod.object({
 	schema_uri: zod.url().optional().describe("URI of the server-published flow definition schema this definition was\nauthored against. The server uses this to validate the definition.\nIf not provided, the engine will use the latest schema version for validation.\n"),
 	flow_definition: zod.object({
-		name: zod.string().regex(updateFlowDefinitionBodyFlowDefinitionNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Renaming is not supported — the\n`name` is part of the public contract another definition may\nreference. Acts as the human display label as well; no separate slug.\n"),
+		name: zod.string().regex(updateFlowDefinitionBodyFlowDefinitionNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Every revision of a flow shares its\n`name`; publishing a definition under an existing `name` adds a\nrevision to that flow. Renaming is not supported — the `name` is part\nof the public contract another definition may reference. Acts as the\nhuman display label as well; no separate slug.\n"),
 		status: zod.enum(["active", "draft"]).describe("The lifecycle state of this flow definition. \n\nactive: The flow definition is ready to be used. The flow engine can select it for new flows.\ndraft: The engine will not select it for new flows, and existing flows must handle it gracefully if they reference this definition.\n\nAllowed transitions:\n- draft -> active: To activate the flow definition.\n- active -> draft: To remove the flow definition from active use immediately.\n"),
 		user_schema: zod.string().describe("Server-assigned identifier of the user schema this flow operates on,\nas returned by `POST /schemas`. Opaque to the client — the shape is a\nserver implementation detail. Step `fields` reference properties\ndefined in the resolved schema; the engine resolves field types, validation, and\nimplicit outcomes from schema annotations at runtime.\n"),
 		purposes: zod.record(zod.string(), zod.string()).describe("Maps each purpose this definition handles to its entry-point step.\nKeys are purpose names; values must match a `name` in `steps`. A\ndefinition can serve multiple purposes (e.g. a combined login/register\nflow) by listing one entry per purpose.\n"),
@@ -1781,7 +1840,7 @@ const UpdateFlowDefinitionResponse = zod.object({
 	id: zod.string().describe("Unique identifier for the flow definition."),
 	project_id: zod.string().describe("Identifier of the project this flow definition belongs to."),
 	flow_definition: zod.object({
-		name: zod.string().regex(updateFlowDefinitionResponseFlowDefinitionNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Renaming is not supported — the\n`name` is part of the public contract another definition may\nreference. Acts as the human display label as well; no separate slug.\n"),
+		name: zod.string().regex(updateFlowDefinitionResponseFlowDefinitionNameRegExp).describe("Stable identifier for this flow, used as the target of cross-flow\n`switch` and `pivot` transitions. Every revision of a flow shares its\n`name`; publishing a definition under an existing `name` adds a\nrevision to that flow. Renaming is not supported — the `name` is part\nof the public contract another definition may reference. Acts as the\nhuman display label as well; no separate slug.\n"),
 		status: zod.enum(["active", "draft"]).describe("The lifecycle state of this flow definition. \n\nactive: The flow definition is ready to be used. The flow engine can select it for new flows.\ndraft: The engine will not select it for new flows, and existing flows must handle it gracefully if they reference this definition.\n\nAllowed transitions:\n- draft -> active: To activate the flow definition.\n- active -> draft: To remove the flow definition from active use immediately.\n"),
 		user_schema: zod.string().describe("Server-assigned identifier of the user schema this flow operates on,\nas returned by `POST /schemas`. Opaque to the client — the shape is a\nserver implementation detail. Step `fields` reference properties\ndefined in the resolved schema; the engine resolves field types, validation, and\nimplicit outcomes from schema annotations at runtime.\n"),
 		purposes: zod.record(zod.string(), zod.string()).describe("Maps each purpose this definition handles to its entry-point step.\nKeys are purpose names; values must match a `name` in `steps`. A\ndefinition can serve multiple purposes (e.g. a combined login/register\nflow) by listing one entry per purpose.\n"),
@@ -2265,6 +2324,135 @@ const CreateGrantBody = zod.object({
 	expires_at: zod.iso.datetime({ offset: true }).optional().describe("Optional expiry. Must be in the future when set. Expiry stops\nauthorization but does not free the unique binding; DELETE the grant\nbefore posting the same principal and relation again.\n")
 });
 /**
+* Returns the collaboration grants of a project, paginated with a cursor.
+Only unrevoked grants this API manages are listed (user or team bound to
+viewer, editor, or admin), including expired grants so a client can
+DELETE before re-granting. Project-secret setup (`sk_proj`) and
+owning-team (`relation=team`) rows are not returned. Grants are not in
+`resource_scope_index`; project scope is required on the query (same as
+get). Requires `project.read`. `expand: ["principal"]` additionally
+requires `user.read` and `team.read` (documented on the expand enum;
+those scopes cannot be ANDed onto this security block because they are
+body-conditional).
+
+* @summary Query grants
+*/
+const queryGrantsQueryProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
+const QueryGrantsQueryParams = zod.strictObject({ project_id: zod.string().regex(queryGrantsQueryProjectIdRegExp).describe("The unique identifier of the project") });
+const queryGrantsBodyLimitDefault = 20;
+const queryGrantsBodyLimitMax = 100;
+const QueryGrantsBody = zod.object({
+	limit: zod.number().min(1).max(100).default(20),
+	page_token: zod.union([zod.string(), zod.null()]).optional().describe("Token to retrieve the next page of results. Must be sent with the same\n`sorting` as the request that issued the token. Omitting `sorting` reuses\nthe default sort and only succeeds when that default matches the token.\n"),
+	expand: zod.array(zod.enum(["principal"]).describe("A related object to embed on each returned grant (ADR 059).\n\n- `principal`: the principal named by `principal_id`, as `principal` on\n  each grant. The property is omitted entirely when not requested. When\n  requested, it is the same body `GET /users/{id}` serves for\n  `principal_type=user`, or `GET /teams/{id}` for `principal_type=team`,\n  and `null` when that principal cannot be loaded. Discriminate with the\n  grant's existing `principal_type`.\n\n  Requires `user.read` and `team.read` in addition to `project.read`.\n  Both are checked on the whole request before the list, because a mixed\n  page is the common case. A caller who may not read either resource\n  receives 403 rather than a silently missing `principal`.\n")).optional().describe("Related objects to embed on each grant (ADR 059). Omit it and no\nembedded object is returned. An unrecognised value is rejected.\n"),
+	sorting: zod.object({
+		field: zod.enum([
+			"created_at",
+			"expires_at",
+			"id"
+		]).describe("Field to sort grants by. Default is `created_at` ascending with `id` as\nthe tiebreaker.\n"),
+		direction: zod.enum(["asc", "desc"])
+	}).optional(),
+	filter: zod.array(zod.object({
+		field: zod.enum([
+			"created_at",
+			"principal_type",
+			"principal_id",
+			"relation",
+			"expires_at"
+		]).describe("Field to filter grants by:\n- `created_at`: RFC3339 timestamp\n- `principal_type`: `user` or `team`\n- `principal_id`: principal id (`user_<opaque>` or `team_<opaque>`)\n- `relation`: `viewer`, `editor`, or `admin`\n- `expires_at`: RFC3339 timestamp (null when the grant does not expire)\n"),
+		value: zod.union([
+			zod.string(),
+			zod.number(),
+			zod.boolean(),
+			zod.null()
+		]).optional().describe("Filter-value specifies which values can be filtered by a query endpoint. This\nis a union of types. When a value is specified which is not assignable to the\nfield which is being filtered, a 400 error will be returned.\n"),
+		operation: zod.enum([
+			"equals",
+			"not_equals",
+			"contains",
+			"not_contains",
+			"less_than",
+			"less_than_or_equal",
+			"greater_than",
+			"greater_than_or_equal"
+		]).describe("Filter operation defines the operations which can be used when filtering on a\nquery endpoint.\n\nOn text fields, `contains` is a case-insensitive substring match. `equals`\ncompares the whole value and is case-sensitive unless the field documents\notherwise.\n")
+	})).optional().describe("Filter criteria for querying grants. Combined with AND.")
+}).describe("Request to query the grants of a project.");
+const queryGrantsResponseGrantsItemUserUserIdRegExp = /* @__PURE__ */ new RegExp("^user_[a-zA-Z0-9_-]+$");
+const queryGrantsResponseGrantsItemPrincipalOneOneOneIdRegExp = /* @__PURE__ */ new RegExp("^user_[a-zA-Z0-9_-]+$");
+const QueryGrantsResponse = zod.object({
+	grants: zod.array(zod.object({
+		id: zod.string().describe("Managed assignment id (`asgn_<opaque>`)."),
+		project_id: zod.string().describe("Project this grant is scoped to."),
+		principal_type: zod.enum(["user", "team"]).describe("Kind of principal bound by this grant."),
+		principal_id: zod.string().describe("Principal id (`user_<opaque>` or `team_<opaque>`)."),
+		object_type: zod.enum(["project"]).describe("Catalog object type. Always `project` for this API."),
+		relation: zod.enum([
+			"viewer",
+			"editor",
+			"admin"
+		]).describe("Catalog relation on the project."),
+		created_at: zod.iso.datetime({ offset: true }).describe("When the grant was created."),
+		expires_at: zod.union([zod.iso.datetime({ offset: true }), zod.null()]).optional().describe("When the grant expires. Null when it does not expire. GET still\nreturns expired unrevoked grants; authorization ignores them.\n"),
+		user: zod.object({
+			user_id: zod.string().regex(queryGrantsResponseGrantsItemUserUserIdRegExp),
+			identifier: zod.string().optional().describe("The current value of the schema's designated identifier\n(`x-identifier`). Absent when the schema designates no identifier or\nthe user carries no value for it.\n"),
+			identifier_property: zod.string().optional().describe("The schema property `identifier` came from, so clients can reach the\nproperty's schema for semantics (a mailto link, a field label)\ninstead of guessing from the value. Present exactly when\n`identifier` is.\n"),
+			display: zod.string().optional().describe("The `x-display` rendering — the designated properties' values joined\nin list order. Purely presentational, with no source attribution.\nAbsent when the schema designates no display properties or the user\ncarries no values for them.\n")
+		}).optional().describe("A resolved reference to a user (ADR 058 §3). Fields are role-named, not\nproperty-named, so responses can mix users from different schemas.\n`identifier` and `display` are resolved independently from the user\nschema's `x-identifier` and `x-display` designations, live at read time.\nClients render `display`, falling back to `identifier`, then `user_id`.\nMissing or deleted users degrade to `user_id` only.\n"),
+		team: zod.object({
+			team_id: zod.string().describe("The referenced team's id (`team_<opaque>`). Always present."),
+			name: zod.string().optional().describe("The team's name. Absent when the team can no longer be loaded.")
+		}).optional().describe("A resolved reference to a team. Carries the team's id and name so a grant\nlist is readable without embedding the full Team body. Id and display ride\n`project.read` (ADR 059 rule 8): a reference field carrying only the\ntarget's id and display strings needs no gate of its own. Missing or\ndeleted teams degrade to `team_id` only.\n"),
+		principal: zod.union([zod.union([zod.object({
+			id: zod.string().regex(queryGrantsResponseGrantsItemPrincipalOneOneOneIdRegExp),
+			schema: zod.string().describe("The schema that defines the content of `attributes`. These schemas can be\ncreated using the `/schemas` endpoint. A default schema is provided.\nThis schema can be retrieved using the same endpoint.\n"),
+			attributes: zod.record(zod.string(), zod.unknown()).describe("The user's content, satisfying the schema named by `schema`. Property\nnames and types are determined entirely by that schema.\n"),
+			metadata: zod.object({
+				created_at: zod.iso.datetime({ offset: true }).describe("The time when the user was created."),
+				updated_at: zod.iso.datetime({ offset: true }).describe("The time when the user was last updated."),
+				status: zod.enum([
+					"active",
+					"suspended",
+					"deactivated",
+					"pending_purge"
+				]).describe("The status of the user."),
+				lifecycle_owner_team_id: zod.union([zod.string(), zod.null()]).optional().describe("The team that owns this user's identity lifecycle, or `null` when the\nuser is self-owned. This is a single team and a different concept from\nthe user's team memberships: it decides who may deprovision the user, not\nwhich teams the user collaborates in. Memberships are their own paginated\nresource — `GET /users/{user_id}/teams`.\n"),
+				lifecycle_owner_team: zod.union([zod.object({
+					id: zod.string().describe("The unique identifier of the team."),
+					name: zod.string().describe("The name of the team."),
+					status: zod.enum(["active", "deactivated"]).describe("The lifecycle state of a team.\n\nactive: The team is available for use.\ndeactivated: The team is no longer active but is retained for historical and audit purposes.\n"),
+					created_at: zod.iso.datetime({ offset: true }).describe("The time when the team was created."),
+					updated_at: zod.iso.datetime({ offset: true }).describe("The time when the team was last updated.")
+				}).describe("Details of a team."), zod.null()]).optional().describe("The team named by `lifecycle_owner_team_id`, present only when the\nrequest asked for it with `expand: [\"lifecycle_owner_team\"]` (ADR 059).\nAbsent means it was not requested; `null` means the user is self-owned\nand there is no owner to resolve.\n\nRequesting it does not guarantee it is present on every user. Today\n`team.read` is checked once for the whole request, so it is; once that\ncheck is per team, a page may contain a user whose owner the caller may\nnot read, and such a row answers with neither the team nor `null` —\n`null` already means self-owned. What it answers with instead is decided\nwith the granular scopes (#420); do not read the two cases above as the\ncomplete set.\n\nThis is the same representation `GET /teams/{team_id}` serves. It is a\nsingle team, not a collection, so it carries no cap and no truncation\nflag.\n")
+			}),
+			identifier: zod.string().optional().describe("The current value of the user schema's designated identifier\n(`x-identifier`), resolved live at read time. Absent when the schema\ndesignates no identifier or the user carries no value for it.\n"),
+			identifier_property: zod.string().optional().describe("The schema property `identifier` came from, so clients can reach the\nproperty's schema for semantics (a mailto link, a field label)\ninstead of guessing from the value. Present exactly when\n`identifier` is.\n"),
+			display: zod.string().optional().describe("The `x-display` rendering — the designated properties' values joined\nin list order, resolved live at read time. Purely presentational.\nAbsent when the schema designates no display properties or the user\ncarries no values for them. Clients render `display`, falling back\nto `identifier`, then `id`.\n"),
+			teams: zod.array(zod.object({
+				id: zod.string().describe("The unique identifier of the team."),
+				name: zod.string().describe("The name of the team."),
+				membership_status: zod.enum([
+					"pending",
+					"active",
+					"inactive"
+				]).describe("The user's participation state on this team. Memberships the user was\nremoved from are not returned.\n"),
+				created_at: zod.iso.datetime({ offset: true }).describe("The time when the user joined this team."),
+				updated_at: zod.iso.datetime({ offset: true }).describe("The time when this membership was last changed.")
+			}).describe("One entry of a user's team roster: a team the user belongs to, with the\nmembership's participation state. The team's `name` travels with the entry, so\na page renders without a follow-up `POST /teams/query` per row.\n\nRoster membership is not lifecycle ownership. A user can belong to many teams\nwhile still owning their own lifecycle — that single owning team is reported\nas `metadata.lifecycle_owner_team_id` on the user itself.\n")).optional().describe("The user's team memberships, present only when the request asked for them with\n`expand: [\"teams\"]` (ADR 059). Absent means it was not requested; `[]`\nmeans the user has none.\n\nDeliberately outside `metadata`: memberships are a related collection, not\npart of the server-owned envelope, and it is a different concept from\n`metadata.lifecycle_owner_team_id` (ADR 024).\n"),
+			teams_truncated: zod.boolean().optional().describe("True when the user is on more teams than the embedded list carries. The\nembedded list is capped and cannot be paged; read them all at\n`GET /users/{user_id}/teams`. Present only alongside `teams`.\n")
+		}).describe("A user represents an individual identity in the system. It can be used to\nrepresent a human user, but also a service account or any other type of\nidentity.\n\n`attributes` is the document that satisfies the user schema named by\n`schema`: its property names and types are defined entirely by that schema,\nand it is what the schema validates. The rest of the object — `id`,\n`schema`, `metadata` — is the server-owned envelope. Keeping the two apart\nmeans a schema may name a property `id` or `metadata` without colliding with\nthe envelope, and closed-world keywords (`additionalProperties: false`,\n`propertyNames`, `unevaluatedProperties`) behave as their author expects.\n"), zod.object({
+			id: zod.string().describe("The unique identifier of the team."),
+			name: zod.string().describe("The name of the team."),
+			status: zod.enum(["active", "deactivated"]).describe("The lifecycle state of a team.\n\nactive: The team is available for use.\ndeactivated: The team is no longer active but is retained for historical and audit purposes.\n"),
+			created_at: zod.iso.datetime({ offset: true }).describe("The time when the team was created."),
+			updated_at: zod.iso.datetime({ offset: true }).describe("The time when the team was last updated.")
+		}).describe("Details of a team.")]).describe("The principal bound by a grant: the User body when `principal_type` is\n`user`, or the Team body when `principal_type` is `team`. Same\nrepresentation as `GET /users/{id}` and `GET /teams/{id}` respectively.\nClients discriminate with the grant's existing `principal_type`.\n"), zod.null()]).optional().describe("The principal named by `principal_id`, present only when the request\nasked for it with `expand: [\"principal\"]` (ADR 059). Absent means it\nwas not requested; `null` means the principal cannot be loaded\n(deleted or missing). GET and create never set this field.\n\nWhen present, the body is the same representation `GET /users/{id}`\nserves for `principal_type=user`, or `GET /teams/{id}` for\n`principal_type=team`. Discriminate with the grant's existing\n`principal_type`.\n\nRequires `user.read` and `team.read` in addition to `project.read`.\nBoth are checked on the whole request before the list.\n")
+	}).describe("A collaboration grant binding a principal to a project relation.")),
+	next_page_token: zod.union([zod.string(), zod.null()]).optional().describe("Token to pass as `page_token` in the next request to fetch the following page.\nAbsent when there are no more results. The follow-up request must repeat the\nsame `sorting` that produced this token (omit only when both pages use the default).\n")
+}).describe("Paginated list of grants.");
+/**
 * Loads a grant by `(project_id, id)` that this API manages (user or team
 bound to viewer, editor, or admin) and that has not been revoked.
 "Active" here means not revoked: expired grants stay visible so the
@@ -2279,6 +2467,8 @@ owning-team (`relation=team`) rows, and cross-project ids return 404.
 const GetGrantParams = zod.object({ id: zod.string().describe("Managed assignment id (`asgn_<opaque>`).") });
 const getGrantQueryProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const GetGrantQueryParams = zod.strictObject({ project_id: zod.string().regex(getGrantQueryProjectIdRegExp).describe("The unique identifier of the project") });
+const getGrantResponseUserUserIdRegExp = /* @__PURE__ */ new RegExp("^user_[a-zA-Z0-9_-]+$");
+const getGrantResponsePrincipalOneOneOneIdRegExp = /* @__PURE__ */ new RegExp("^user_[a-zA-Z0-9_-]+$");
 const GetGrantResponse = zod.object({
 	id: zod.string().describe("Managed assignment id (`asgn_<opaque>`)."),
 	project_id: zod.string().describe("Project this grant is scoped to."),
@@ -2291,7 +2481,61 @@ const GetGrantResponse = zod.object({
 		"admin"
 	]).describe("Catalog relation on the project."),
 	created_at: zod.iso.datetime({ offset: true }).describe("When the grant was created."),
-	expires_at: zod.union([zod.iso.datetime({ offset: true }), zod.null()]).optional().describe("When the grant expires. Null when it does not expire. GET still\nreturns expired unrevoked grants; authorization ignores them.\n")
+	expires_at: zod.union([zod.iso.datetime({ offset: true }), zod.null()]).optional().describe("When the grant expires. Null when it does not expire. GET still\nreturns expired unrevoked grants; authorization ignores them.\n"),
+	user: zod.object({
+		user_id: zod.string().regex(getGrantResponseUserUserIdRegExp),
+		identifier: zod.string().optional().describe("The current value of the schema's designated identifier\n(`x-identifier`). Absent when the schema designates no identifier or\nthe user carries no value for it.\n"),
+		identifier_property: zod.string().optional().describe("The schema property `identifier` came from, so clients can reach the\nproperty's schema for semantics (a mailto link, a field label)\ninstead of guessing from the value. Present exactly when\n`identifier` is.\n"),
+		display: zod.string().optional().describe("The `x-display` rendering — the designated properties' values joined\nin list order. Purely presentational, with no source attribution.\nAbsent when the schema designates no display properties or the user\ncarries no values for them.\n")
+	}).optional().describe("A resolved reference to a user (ADR 058 §3). Fields are role-named, not\nproperty-named, so responses can mix users from different schemas.\n`identifier` and `display` are resolved independently from the user\nschema's `x-identifier` and `x-display` designations, live at read time.\nClients render `display`, falling back to `identifier`, then `user_id`.\nMissing or deleted users degrade to `user_id` only.\n"),
+	team: zod.object({
+		team_id: zod.string().describe("The referenced team's id (`team_<opaque>`). Always present."),
+		name: zod.string().optional().describe("The team's name. Absent when the team can no longer be loaded.")
+	}).optional().describe("A resolved reference to a team. Carries the team's id and name so a grant\nlist is readable without embedding the full Team body. Id and display ride\n`project.read` (ADR 059 rule 8): a reference field carrying only the\ntarget's id and display strings needs no gate of its own. Missing or\ndeleted teams degrade to `team_id` only.\n"),
+	principal: zod.union([zod.union([zod.object({
+		id: zod.string().regex(getGrantResponsePrincipalOneOneOneIdRegExp),
+		schema: zod.string().describe("The schema that defines the content of `attributes`. These schemas can be\ncreated using the `/schemas` endpoint. A default schema is provided.\nThis schema can be retrieved using the same endpoint.\n"),
+		attributes: zod.record(zod.string(), zod.unknown()).describe("The user's content, satisfying the schema named by `schema`. Property\nnames and types are determined entirely by that schema.\n"),
+		metadata: zod.object({
+			created_at: zod.iso.datetime({ offset: true }).describe("The time when the user was created."),
+			updated_at: zod.iso.datetime({ offset: true }).describe("The time when the user was last updated."),
+			status: zod.enum([
+				"active",
+				"suspended",
+				"deactivated",
+				"pending_purge"
+			]).describe("The status of the user."),
+			lifecycle_owner_team_id: zod.union([zod.string(), zod.null()]).optional().describe("The team that owns this user's identity lifecycle, or `null` when the\nuser is self-owned. This is a single team and a different concept from\nthe user's team memberships: it decides who may deprovision the user, not\nwhich teams the user collaborates in. Memberships are their own paginated\nresource — `GET /users/{user_id}/teams`.\n"),
+			lifecycle_owner_team: zod.union([zod.object({
+				id: zod.string().describe("The unique identifier of the team."),
+				name: zod.string().describe("The name of the team."),
+				status: zod.enum(["active", "deactivated"]).describe("The lifecycle state of a team.\n\nactive: The team is available for use.\ndeactivated: The team is no longer active but is retained for historical and audit purposes.\n"),
+				created_at: zod.iso.datetime({ offset: true }).describe("The time when the team was created."),
+				updated_at: zod.iso.datetime({ offset: true }).describe("The time when the team was last updated.")
+			}).describe("Details of a team."), zod.null()]).optional().describe("The team named by `lifecycle_owner_team_id`, present only when the\nrequest asked for it with `expand: [\"lifecycle_owner_team\"]` (ADR 059).\nAbsent means it was not requested; `null` means the user is self-owned\nand there is no owner to resolve.\n\nRequesting it does not guarantee it is present on every user. Today\n`team.read` is checked once for the whole request, so it is; once that\ncheck is per team, a page may contain a user whose owner the caller may\nnot read, and such a row answers with neither the team nor `null` —\n`null` already means self-owned. What it answers with instead is decided\nwith the granular scopes (#420); do not read the two cases above as the\ncomplete set.\n\nThis is the same representation `GET /teams/{team_id}` serves. It is a\nsingle team, not a collection, so it carries no cap and no truncation\nflag.\n")
+		}),
+		identifier: zod.string().optional().describe("The current value of the user schema's designated identifier\n(`x-identifier`), resolved live at read time. Absent when the schema\ndesignates no identifier or the user carries no value for it.\n"),
+		identifier_property: zod.string().optional().describe("The schema property `identifier` came from, so clients can reach the\nproperty's schema for semantics (a mailto link, a field label)\ninstead of guessing from the value. Present exactly when\n`identifier` is.\n"),
+		display: zod.string().optional().describe("The `x-display` rendering — the designated properties' values joined\nin list order, resolved live at read time. Purely presentational.\nAbsent when the schema designates no display properties or the user\ncarries no values for them. Clients render `display`, falling back\nto `identifier`, then `id`.\n"),
+		teams: zod.array(zod.object({
+			id: zod.string().describe("The unique identifier of the team."),
+			name: zod.string().describe("The name of the team."),
+			membership_status: zod.enum([
+				"pending",
+				"active",
+				"inactive"
+			]).describe("The user's participation state on this team. Memberships the user was\nremoved from are not returned.\n"),
+			created_at: zod.iso.datetime({ offset: true }).describe("The time when the user joined this team."),
+			updated_at: zod.iso.datetime({ offset: true }).describe("The time when this membership was last changed.")
+		}).describe("One entry of a user's team roster: a team the user belongs to, with the\nmembership's participation state. The team's `name` travels with the entry, so\na page renders without a follow-up `POST /teams/query` per row.\n\nRoster membership is not lifecycle ownership. A user can belong to many teams\nwhile still owning their own lifecycle — that single owning team is reported\nas `metadata.lifecycle_owner_team_id` on the user itself.\n")).optional().describe("The user's team memberships, present only when the request asked for them with\n`expand: [\"teams\"]` (ADR 059). Absent means it was not requested; `[]`\nmeans the user has none.\n\nDeliberately outside `metadata`: memberships are a related collection, not\npart of the server-owned envelope, and it is a different concept from\n`metadata.lifecycle_owner_team_id` (ADR 024).\n"),
+		teams_truncated: zod.boolean().optional().describe("True when the user is on more teams than the embedded list carries. The\nembedded list is capped and cannot be paged; read them all at\n`GET /users/{user_id}/teams`. Present only alongside `teams`.\n")
+	}).describe("A user represents an individual identity in the system. It can be used to\nrepresent a human user, but also a service account or any other type of\nidentity.\n\n`attributes` is the document that satisfies the user schema named by\n`schema`: its property names and types are defined entirely by that schema,\nand it is what the schema validates. The rest of the object — `id`,\n`schema`, `metadata` — is the server-owned envelope. Keeping the two apart\nmeans a schema may name a property `id` or `metadata` without colliding with\nthe envelope, and closed-world keywords (`additionalProperties: false`,\n`propertyNames`, `unevaluatedProperties`) behave as their author expects.\n"), zod.object({
+		id: zod.string().describe("The unique identifier of the team."),
+		name: zod.string().describe("The name of the team."),
+		status: zod.enum(["active", "deactivated"]).describe("The lifecycle state of a team.\n\nactive: The team is available for use.\ndeactivated: The team is no longer active but is retained for historical and audit purposes.\n"),
+		created_at: zod.iso.datetime({ offset: true }).describe("The time when the team was created."),
+		updated_at: zod.iso.datetime({ offset: true }).describe("The time when the team was last updated.")
+	}).describe("Details of a team.")]).describe("The principal bound by a grant: the User body when `principal_type` is\n`user`, or the Team body when `principal_type` is `team`. Same\nrepresentation as `GET /users/{id}` and `GET /teams/{id}` respectively.\nClients discriminate with the grant's existing `principal_type`.\n"), zod.null()]).optional().describe("The principal named by `principal_id`, present only when the request\nasked for it with `expand: [\"principal\"]` (ADR 059). Absent means it\nwas not requested; `null` means the principal cannot be loaded\n(deleted or missing). GET and create never set this field.\n\nWhen present, the body is the same representation `GET /users/{id}`\nserves for `principal_type=user`, or `GET /teams/{id}` for\n`principal_type=team`. Discriminate with the grant's existing\n`principal_type`.\n\nRequires `user.read` and `team.read` in addition to `project.read`.\nBoth are checked on the whole request before the list.\n")
 }).describe("A collaboration grant binding a principal to a project relation.");
 /**
 * Soft-revokes a grant this API manages and emits `authz.revoked`.
@@ -2368,10 +2612,10 @@ const listEventsResponseDataItemOnesixOneProjectIdRegExp = /* @__PURE__ */ new R
 const listEventsResponseDataItemOnesevenOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const listEventsResponseDataItemOneeightOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const listEventsResponseDataItemOnenineOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
-const listEventsResponseDataItemOnenineTwoPayloadStatusMin = 100;
-const listEventsResponseDataItemOnenineTwoPayloadStatusMax = 599;
-const listEventsResponseDataItemOnenineTwoPayloadDurationMsMin = 0;
 const listEventsResponseDataItemTwozeroOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
+const listEventsResponseDataItemTwozeroTwoPayloadStatusMin = 100;
+const listEventsResponseDataItemTwozeroTwoPayloadStatusMax = 599;
+const listEventsResponseDataItemTwozeroTwoPayloadDurationMsMin = 0;
 const listEventsResponseDataItemTwooneOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const listEventsResponseDataItemTwotwoOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const listEventsResponseDataItemTwothreeOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
@@ -2380,6 +2624,7 @@ const listEventsResponseDataItemTwofiveOneProjectIdRegExp = /* @__PURE__ */ new
 const listEventsResponseDataItemTwosixOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const listEventsResponseDataItemTwosevenOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const listEventsResponseDataItemTwoeightOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
+const listEventsResponseDataItemTwonineOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const ListEventsResponse = zod.object({
 	data: zod.array(zod.union([
 		zod.object({
@@ -3322,6 +3567,63 @@ const ListEventsResponse = zod.object({
 				user_agent: zod.string().optional().describe("Observed User-Agent header."),
 				origin: zod.string().optional().describe("Origin header when present.")
 			}).optional().describe("Observed HTTP requestor context on Path A request.api only.") }).optional().describe("Emit-time metadata, already redacted at write. Path A request.api may\nset client (ip, user_agent, origin) for SIEM join on request_id. Not a\nlive risk-evaluator input.\n")
+		}).describe("Shared wide-event envelope (ADR 048 / ADR 049). Concrete events are\n`allOf` this schema plus a `const` `event_type` and a typed `payload`.\n").and(zod.object({
+			event_type: zod.literal("release.created"),
+			payload: zod.object({
+				content_hash: zod.string().optional(),
+				message: zod.string().optional(),
+				git_sha: zod.string().optional(),
+				git_dirty: zod.boolean().optional(),
+				pointers: zod.array(zod.object({
+					kind: zod.string().optional(),
+					handle: zod.string().optional(),
+					revision_id: zod.string().optional()
+				})).optional()
+			}).describe("Allowlisted fields for `release.created`. The release id is already the\nevent's `entity_id`; the pinned set is repeated here so the audit stream\nanswers what a release contained without reading the release itself.\n")
+		})).describe("Wide event with event_type=release.created.\n"),
+		zod.object({
+			id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
+			project_id: zod.string().regex(listEventsResponseDataItemTwozeroOneProjectIdRegExp),
+			team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
+			event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
+			category: zod.enum([
+				"request",
+				"auth",
+				"session",
+				"admin",
+				"entity",
+				"signal"
+			]).describe("Wide-event category."),
+			occurred_at: zod.iso.datetime({ offset: true }).describe("When the action happened (server/storage clock, dialect-owned)."),
+			created_at: zod.iso.datetime({ offset: true }).describe("When the row was inserted (server/storage clock, dialect-owned)."),
+			actor_id: zod.union([zod.string(), zod.null()]).optional().describe("Who triggered the event."),
+			actor_type: zod.union([zod.enum([
+				"human",
+				"service",
+				"system",
+				"agent"
+			]), zod.null()]).optional().describe("Actor kind."),
+			entity_type: zod.union([zod.string(), zod.null()]).optional().describe("Resource type affected."),
+			entity_id: zod.union([zod.string(), zod.null()]).optional().describe("Resource id affected."),
+			client_id: zod.string().describe("Application or agent that produced the event."),
+			token_id: zod.string().optional().describe("Token id present at emit time, when any."),
+			delegation_type: zod.enum([
+				"direct",
+				"delegated",
+				"pat_shared",
+				"exchanged"
+			]).optional().describe("Delegation kind (omit when unset)."),
+			delegation_id: zod.string().optional(),
+			grantor: zod.string().optional(),
+			fingerprint: zod.string().optional().describe("Device fingerprint correlation id."),
+			request_id: zod.union([zod.string(), zod.null()]).optional().describe("HTTP request correlation id."),
+			session_id: zod.union([zod.string(), zod.null()]).optional().describe("Session correlation id."),
+			flow_id: zod.union([zod.string(), zod.null()]).optional().describe("Login flow correlation id."),
+			metadata: zod.object({ client: zod.object({
+				ip: zod.string().optional().describe("Client IP from the first X-Forwarded-For hop or RemoteAddr."),
+				user_agent: zod.string().optional().describe("Observed User-Agent header."),
+				origin: zod.string().optional().describe("Origin header when present.")
+			}).optional().describe("Observed HTTP requestor context on Path A request.api only.") }).optional().describe("Emit-time metadata, already redacted at write. Path A request.api may\nset client (ip, user_agent, origin) for SIEM join on request_id. Not a\nlive risk-evaluator input.\n")
 		}).describe("Shared wide-event envelope (ADR 048 / ADR 049). Concrete events are\n`allOf` this schema plus a `const` `event_type` and a typed `payload`.\n").and(zod.object({
 			event_type: zod.literal("request.api"),
 			payload: zod.object({
@@ -3342,7 +3644,7 @@ const ListEventsResponse = zod.object({
 		})).describe("Wide event with event_type=request.api.\n"),
 		zod.object({
 			id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
-			project_id: zod.string().regex(listEventsResponseDataItemTwozeroOneProjectIdRegExp),
+			project_id: zod.string().regex(listEventsResponseDataItemTwooneOneProjectIdRegExp),
 			team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
 			event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
 			category: zod.enum([
@@ -3392,7 +3694,7 @@ const ListEventsResponse = zod.object({
 		})).describe("Wide event with event_type=schema.created.\n"),
 		zod.object({
 			id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
-			project_id: zod.string().regex(listEventsResponseDataItemTwooneOneProjectIdRegExp),
+			project_id: zod.string().regex(listEventsResponseDataItemTwotwoOneProjectIdRegExp),
 			team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
 			event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
 			category: zod.enum([
@@ -3439,7 +3741,7 @@ const ListEventsResponse = zod.object({
 		})).describe("Wide event with event_type=session.deleted.\n"),
 		zod.object({
 			id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
-			project_id: zod.string().regex(listEventsResponseDataItemTwotwoOneProjectIdRegExp),
+			project_id: zod.string().regex(listEventsResponseDataItemTwothreeOneProjectIdRegExp),
 			team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
 			event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
 			category: zod.enum([
@@ -3486,7 +3788,7 @@ const ListEventsResponse = zod.object({
 		})).describe("Wide event with event_type=session.established.\n"),
 		zod.object({
 			id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
-			project_id: zod.string().regex(listEventsResponseDataItemTwothreeOneProjectIdRegExp),
+			project_id: zod.string().regex(listEventsResponseDataItemTwofourOneProjectIdRegExp),
 			team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
 			event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
 			category: zod.enum([
@@ -3533,7 +3835,7 @@ const ListEventsResponse = zod.object({
 		})).describe("Wide event with event_type=team.created.\n"),
 		zod.object({
 			id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
-			project_id: zod.string().regex(listEventsResponseDataItemTwofourOneProjectIdRegExp),
+			project_id: zod.string().regex(listEventsResponseDataItemTwofiveOneProjectIdRegExp),
 			team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
 			event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
 			category: zod.enum([
@@ -3580,7 +3882,7 @@ const ListEventsResponse = zod.object({
 		})).describe("Wide event with event_type=team.deactivated.\n"),
 		zod.object({
 			id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
-			project_id: zod.string().regex(listEventsResponseDataItemTwofiveOneProjectIdRegExp),
+			project_id: zod.string().regex(listEventsResponseDataItemTwosixOneProjectIdRegExp),
 			team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
 			event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
 			category: zod.enum([
@@ -3627,7 +3929,7 @@ const ListEventsResponse = zod.object({
 		})).describe("Wide event with event_type=team.updated.\n"),
 		zod.object({
 			id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
-			project_id: zod.string().regex(listEventsResponseDataItemTwosixOneProjectIdRegExp),
+			project_id: zod.string().regex(listEventsResponseDataItemTwosevenOneProjectIdRegExp),
 			team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
 			event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
 			category: zod.enum([
@@ -3674,7 +3976,7 @@ const ListEventsResponse = zod.object({
 		})).describe("Wide event with event_type=user.create.failed.\n"),
 		zod.object({
 			id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
-			project_id: zod.string().regex(listEventsResponseDataItemTwosevenOneProjectIdRegExp),
+			project_id: zod.string().regex(listEventsResponseDataItemTwoeightOneProjectIdRegExp),
 			team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
 			event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
 			category: zod.enum([
@@ -3725,7 +4027,7 @@ const ListEventsResponse = zod.object({
 		})).describe("Wide event with event_type=user.created.\n"),
 		zod.object({
 			id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
-			project_id: zod.string().regex(listEventsResponseDataItemTwoeightOneProjectIdRegExp),
+			project_id: zod.string().regex(listEventsResponseDataItemTwonineOneProjectIdRegExp),
 			team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
 			event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
 			category: zod.enum([
@@ -3804,10 +4106,10 @@ const getEventResponseOnesixOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a
 const getEventResponseOnesevenOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const getEventResponseOneeightOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const getEventResponseOnenineOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
-const getEventResponseOnenineTwoPayloadStatusMin = 100;
-const getEventResponseOnenineTwoPayloadStatusMax = 599;
-const getEventResponseOnenineTwoPayloadDurationMsMin = 0;
 const getEventResponseTwozeroOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
+const getEventResponseTwozeroTwoPayloadStatusMin = 100;
+const getEventResponseTwozeroTwoPayloadStatusMax = 599;
+const getEventResponseTwozeroTwoPayloadDurationMsMin = 0;
 const getEventResponseTwooneOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const getEventResponseTwotwoOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const getEventResponseTwothreeOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
@@ -3816,6 +4118,7 @@ const getEventResponseTwofiveOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[
 const getEventResponseTwosixOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const getEventResponseTwosevenOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const getEventResponseTwoeightOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
+const getEventResponseTwonineOneProjectIdRegExp = /* @__PURE__ */ new RegExp("^[a-zA-Z0-9_-]+$");
 const GetEventResponse = zod.union([
 	zod.object({
 		id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
@@ -4757,6 +5060,63 @@ const GetEventResponse = zod.union([
 			user_agent: zod.string().optional().describe("Observed User-Agent header."),
 			origin: zod.string().optional().describe("Origin header when present.")
 		}).optional().describe("Observed HTTP requestor context on Path A request.api only.") }).optional().describe("Emit-time metadata, already redacted at write. Path A request.api may\nset client (ip, user_agent, origin) for SIEM join on request_id. Not a\nlive risk-evaluator input.\n")
+	}).describe("Shared wide-event envelope (ADR 048 / ADR 049). Concrete events are\n`allOf` this schema plus a `const` `event_type` and a typed `payload`.\n").and(zod.object({
+		event_type: zod.literal("release.created"),
+		payload: zod.object({
+			content_hash: zod.string().optional(),
+			message: zod.string().optional(),
+			git_sha: zod.string().optional(),
+			git_dirty: zod.boolean().optional(),
+			pointers: zod.array(zod.object({
+				kind: zod.string().optional(),
+				handle: zod.string().optional(),
+				revision_id: zod.string().optional()
+			})).optional()
+		}).describe("Allowlisted fields for `release.created`. The release id is already the\nevent's `entity_id`; the pinned set is repeated here so the audit stream\nanswers what a release contained without reading the release itself.\n")
+	})).describe("Wide event with event_type=release.created.\n"),
+	zod.object({
+		id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
+		project_id: zod.string().regex(getEventResponseTwozeroOneProjectIdRegExp),
+		team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
+		event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
+		category: zod.enum([
+			"request",
+			"auth",
+			"session",
+			"admin",
+			"entity",
+			"signal"
+		]).describe("Wide-event category."),
+		occurred_at: zod.iso.datetime({ offset: true }).describe("When the action happened (server/storage clock, dialect-owned)."),
+		created_at: zod.iso.datetime({ offset: true }).describe("When the row was inserted (server/storage clock, dialect-owned)."),
+		actor_id: zod.union([zod.string(), zod.null()]).optional().describe("Who triggered the event."),
+		actor_type: zod.union([zod.enum([
+			"human",
+			"service",
+			"system",
+			"agent"
+		]), zod.null()]).optional().describe("Actor kind."),
+		entity_type: zod.union([zod.string(), zod.null()]).optional().describe("Resource type affected."),
+		entity_id: zod.union([zod.string(), zod.null()]).optional().describe("Resource id affected."),
+		client_id: zod.string().describe("Application or agent that produced the event."),
+		token_id: zod.string().optional().describe("Token id present at emit time, when any."),
+		delegation_type: zod.enum([
+			"direct",
+			"delegated",
+			"pat_shared",
+			"exchanged"
+		]).optional().describe("Delegation kind (omit when unset)."),
+		delegation_id: zod.string().optional(),
+		grantor: zod.string().optional(),
+		fingerprint: zod.string().optional().describe("Device fingerprint correlation id."),
+		request_id: zod.union([zod.string(), zod.null()]).optional().describe("HTTP request correlation id."),
+		session_id: zod.union([zod.string(), zod.null()]).optional().describe("Session correlation id."),
+		flow_id: zod.union([zod.string(), zod.null()]).optional().describe("Login flow correlation id."),
+		metadata: zod.object({ client: zod.object({
+			ip: zod.string().optional().describe("Client IP from the first X-Forwarded-For hop or RemoteAddr."),
+			user_agent: zod.string().optional().describe("Observed User-Agent header."),
+			origin: zod.string().optional().describe("Origin header when present.")
+		}).optional().describe("Observed HTTP requestor context on Path A request.api only.") }).optional().describe("Emit-time metadata, already redacted at write. Path A request.api may\nset client (ip, user_agent, origin) for SIEM join on request_id. Not a\nlive risk-evaluator input.\n")
 	}).describe("Shared wide-event envelope (ADR 048 / ADR 049). Concrete events are\n`allOf` this schema plus a `const` `event_type` and a typed `payload`.\n").and(zod.object({
 		event_type: zod.literal("request.api"),
 		payload: zod.object({
@@ -4777,7 +5137,7 @@ const GetEventResponse = zod.union([
 	})).describe("Wide event with event_type=request.api.\n"),
 	zod.object({
 		id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
-		project_id: zod.string().regex(getEventResponseTwozeroOneProjectIdRegExp),
+		project_id: zod.string().regex(getEventResponseTwooneOneProjectIdRegExp),
 		team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
 		event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
 		category: zod.enum([
@@ -4827,7 +5187,7 @@ const GetEventResponse = zod.union([
 	})).describe("Wide event with event_type=schema.created.\n"),
 	zod.object({
 		id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
-		project_id: zod.string().regex(getEventResponseTwooneOneProjectIdRegExp),
+		project_id: zod.string().regex(getEventResponseTwotwoOneProjectIdRegExp),
 		team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
 		event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
 		category: zod.enum([
@@ -4874,7 +5234,7 @@ const GetEventResponse = zod.union([
 	})).describe("Wide event with event_type=session.deleted.\n"),
 	zod.object({
 		id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
-		project_id: zod.string().regex(getEventResponseTwotwoOneProjectIdRegExp),
+		project_id: zod.string().regex(getEventResponseTwothreeOneProjectIdRegExp),
 		team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
 		event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
 		category: zod.enum([
@@ -4921,7 +5281,7 @@ const GetEventResponse = zod.union([
 	})).describe("Wide event with event_type=session.established.\n"),
 	zod.object({
 		id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
-		project_id: zod.string().regex(getEventResponseTwothreeOneProjectIdRegExp),
+		project_id: zod.string().regex(getEventResponseTwofourOneProjectIdRegExp),
 		team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
 		event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
 		category: zod.enum([
@@ -4968,7 +5328,7 @@ const GetEventResponse = zod.union([
 	})).describe("Wide event with event_type=team.created.\n"),
 	zod.object({
 		id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
-		project_id: zod.string().regex(getEventResponseTwofourOneProjectIdRegExp),
+		project_id: zod.string().regex(getEventResponseTwofiveOneProjectIdRegExp),
 		team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
 		event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
 		category: zod.enum([
@@ -5015,7 +5375,7 @@ const GetEventResponse = zod.union([
 	})).describe("Wide event with event_type=team.deactivated.\n"),
 	zod.object({
 		id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
-		project_id: zod.string().regex(getEventResponseTwofiveOneProjectIdRegExp),
+		project_id: zod.string().regex(getEventResponseTwosixOneProjectIdRegExp),
 		team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
 		event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
 		category: zod.enum([
@@ -5062,7 +5422,7 @@ const GetEventResponse = zod.union([
 	})).describe("Wide event with event_type=team.updated.\n"),
 	zod.object({
 		id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
-		project_id: zod.string().regex(getEventResponseTwosixOneProjectIdRegExp),
+		project_id: zod.string().regex(getEventResponseTwosevenOneProjectIdRegExp),
 		team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
 		event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
 		category: zod.enum([
@@ -5109,7 +5469,7 @@ const GetEventResponse = zod.union([
 	})).describe("Wide event with event_type=user.create.failed.\n"),
 	zod.object({
 		id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
-		project_id: zod.string().regex(getEventResponseTwosevenOneProjectIdRegExp),
+		project_id: zod.string().regex(getEventResponseTwoeightOneProjectIdRegExp),
 		team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
 		event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
 		category: zod.enum([
@@ -5160,7 +5520,7 @@ const GetEventResponse = zod.union([
 	})).describe("Wide event with event_type=user.created.\n"),
 	zod.object({
 		id: zod.string().describe("Managed event id (`evt_<opaque>`)."),
-		project_id: zod.string().regex(getEventResponseTwoeightOneProjectIdRegExp),
+		project_id: zod.string().regex(getEventResponseTwonineOneProjectIdRegExp),
 		team_id: zod.union([zod.string(), zod.null()]).optional().describe("Emit-time team scope, when the actor operated under a team."),
 		event_type: zod.string().describe("Semantic event name (dot-separated). Discriminator for the Event union —\nsee docs/design/api/events-catalog.md.\n"),
 		category: zod.enum([
@@ -5207,6 +5567,6 @@ const GetEventResponse = zod.union([
 	})).describe("Wide event with event_type=user.deleted.\n")
 ]).describe("Discriminated wide-event union (ADR 048 / ADR 049). Clients select the\nmember via event_type; each member carries a typed payload.\n");
 //#endregion
-export { BeginUserPasskeyRegistrationBody, BeginUserPasskeyRegistrationParams, CompleteClaimBody, CompleteClaimParams, CompleteClaimResponse, CreateAuthAttemptBody, CreateBrandingBody, CreateBrandingQueryParams, CreateFlowBody, CreateFlowDefinitionBody, CreateGrantBody, CreateGrantQueryParams, CreateHandoffHeader, CreateHandoffParams, CreateHandoffResponse, CreateProjectBody, CreateReleaseBody, CreateReleaseQueryParams, CreateReleaseResponse, CreateSchemaBody, CreateSchemaQueryParams, CreateSessionBody, CreateTeamBody, CreateTeamQueryParams, CreateUserBody, CreateUserQueryParams, DeleteFlowDefinitionParams, DeleteGrantParams, DeleteGrantQueryParams, DeleteTeamParams, DeleteUserByIDParams, ExchangeHandoffBody, ExchangeHandoffHeader, ExchangeHandoffQueryParams, ExchangeHandoffResponse, FinishUserPasskeyRegistrationBody, FinishUserPasskeyRegistrationParams, GetAuthAttemptParams, GetAuthAttemptResponse, GetBrandingByIdParams, GetBrandingByIdResponse, GetClaimStatusParams, GetClaimStatusQueryParams, GetClaimStatusResponse, GetEnvironmentByNameParams, GetEnvironmentByNameQueryParams, GetEnvironmentByNameResponse, GetEventParams, GetEventQueryParams, GetEventResponse, GetFlowDefinitionParams, GetFlowDefinitionResponse, GetFlowStepParams, GetFlowStepResponse, GetGrantParams, GetGrantQueryParams, GetGrantResponse, GetMySessionResponse, GetMyUserResponse, GetProjectParams, GetProjectResponse, GetReleaseByIdParams, GetReleaseByIdQueryParams, GetReleaseByIdResponse, GetSchemaByIdParams, GetSchemaByIdQueryParams, GetSchemaByIdResponse, GetSessionParams, GetSessionResponse, GetTeamParams, GetTeamResponse, GetUserByIDParams, GetUserByIDQueryParams, GetUserByIDResponse, InitClaimParams, IssueChallengeBody, IssueChallengeParams, ListBrandingQueryParams, ListBrandingResponse, ListBrandingResponseItem, ListEnvironmentsQueryParams, ListEnvironmentsResponse, ListEventsQueryParams, ListEventsResponse, ListFlowDefinitionsQueryParams, ListFlowDefinitionsResponse, ListReleasesQueryParams, ListReleasesResponse, ListSchemasQueryParams, ListSchemasResponse, ListUserPasskeysParams, ListUserPasskeysQueryParams, ListUserPasskeysResponse, ListUserTeamsParams, ListUserTeamsQueryParams, ListUserTeamsResponse, PatchProjectBody, PatchProjectParams, PatchProjectResponse, QueryProjectsBody, QueryProjectsResponse, QuerySessionsBody, QuerySessionsQueryParams, QuerySessionsResponse, QueryTeamsBody, QueryTeamsQueryParams, QueryTeamsResponse, QueryUsersBody, QueryUsersResponse, RevokeSessionParams, SetUserPasswordBody, SetUserPasswordParams, SubmitFlowStepBody, SubmitFlowStepHeader, SubmitFlowStepParams, SubmitFlowStepResponse, UpdateFlowDefinitionBody, UpdateFlowDefinitionParams, UpdateFlowDefinitionResponse, UpdateTeamBody, UpdateTeamParams, UpdateTeamResponse, VerifyChallengeProofBody, VerifyChallengeProofHeader, VerifyChallengeProofParams, VerifyChallengeProofResponse, beginUserPasskeyRegistrationPathUserIdRegExp, completeClaimBodyChallengeIdRegExp, completeClaimPathProjectIdRegExp, completeClaimResponseProjectIdRegExp, completeClaimResponseTeamIdRegExp, createAuthAttemptBodyProjectIdRegExp, createAuthAttemptBodySessionIdOneRegExp, createBrandingBodyLayoutDefault, createBrandingBodyLiquidTemplateMax, createBrandingQueryProjectIdRegExp, createFlowBodyDryRunDefault, createFlowBodyFlowDefinitionNameRegExp, createFlowBodyProjectIdRegExp, createFlowBodySchemaVersionRegExp, createFlowDefinitionBodyFlowDefinitionNameRegExp, createFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault, createFlowDefinitionBodyFlowDefinitionStepsItemActionsItemPrimaryDefault, createFlowDefinitionBodyFlowDefinitionStepsItemFieldsDefault, createFlowDefinitionBodyFlowDefinitionStepsItemGatesDefault, createFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersDefault, createFlowDefinitionBodyProjectIdRegExp, createGrantQueryProjectIdRegExp, createHandoffPathAttemptIdRegExp, createProjectBodySeedDefaultsDefault, createReleaseBodyGitDirtyDefault, createReleaseBodyGitShaMax, createReleaseBodyMessageMax, createReleaseBodyPointersItemRevisionIdMax, createReleaseQueryProjectIdRegExp, createReleaseResponseIdRegExp, createReleaseResponseMetadataGitDirtyDefault, createReleaseResponseMetadataGitShaOneMax, createReleaseResponseMetadataMessageOneMax, createReleaseResponsePointersItemHandleMax, createReleaseResponsePointersItemRevisionIdMax, createReleaseResponseProjectIdRegExp, createSchemaBodyOneObjectTypeMax, createSchemaBodyOnePropertiesXAuditDefault, createSchemaQueryProjectIdRegExp, createSchemaQueryTeamIdRegExp, createSessionBodyProjectIdRegExp, createTeamBodyNameMax, createTeamQueryProjectIdRegExp, createUserQueryProjectIdRegExp, createUserQueryTeamIdRegExp, deleteGrantQueryProjectIdRegExp, deleteTeamPathTeamIdRegExp, deleteUserByIDPathUserIdRegExp, exchangeHandoffQueryProjectIdRegExp, exchangeHandoffResponseSessionFactorsItemPayloadOneUserIdRegExp, exchangeHandoffResponseSessionProjectIdRegExp, exchangeHandoffResponseSessionSessionIdRegExp, exchangeHandoffResponseSessionUserIdOneRegExp, finishUserPasskeyRegistrationPathUserIdRegExp, getAuthAttemptPathAttemptIdRegExp, getAuthAttemptResponseAttemptIdRegExp, getAuthAttemptResponseChallengesItemChallengeIdRegExp, getAuthAttemptResponseCompletedFactorsItemPayloadOneUserIdRegExp, getAuthAttemptResponseProjectIdRegExp, getAuthAttemptResponseSessionIdOneRegExp, getAuthAttemptResponseUserIdOneRegExp, getBrandingByIdResponseBrandingLayoutDefault, getBrandingByIdResponseBrandingLiquidTemplateMax, getClaimStatusPathProjectIdRegExp, getClaimStatusQueryChallengeIdRegExp, getClaimStatusResponseTwoTeamIdRegExp, getEnvironmentByNamePathNameMax, getEnvironmentByNamePathNameRegExp, getEnvironmentByNameQueryProjectIdRegExp, getEnvironmentByNameResponseNameMax, getEnvironmentByNameResponseNameRegExp, getEnvironmentByNameResponseProjectIdRegExp, getEventQueryProjectIdRegExp, getEventResponseEightOneProjectIdRegExp, getEventResponseFiveOneProjectIdRegExp, getEventResponseFourOneProjectIdRegExp, getEventResponseNineOneProjectIdRegExp, getEventResponseOneOneProjectIdRegExp, getEventResponseOneeightOneProjectIdRegExp, getEventResponseOnefiveOneProjectIdRegExp, getEventResponseOnefourOneProjectIdRegExp, getEventResponseOnenineOneProjectIdRegExp, getEventResponseOnenineTwoPayloadDurationMsMin, getEventResponseOnenineTwoPayloadStatusMax, getEventResponseOnenineTwoPayloadStatusMin, getEventResponseOneoneOneProjectIdRegExp, getEventResponseOnesevenOneProjectIdRegExp, getEventResponseOnesixOneProjectIdRegExp, getEventResponseOnethreeOneProjectIdRegExp, getEventResponseOnetwoOneProjectIdRegExp, getEventResponseOnezeroOneProjectIdRegExp, getEventResponseSevenOneProjectIdRegExp, getEventResponseSixOneProjectIdRegExp, getEventResponseThreeOneProjectIdRegExp, getEventResponseTwoOneProjectIdRegExp, getEventResponseTwoeightOneProjectIdRegExp, getEventResponseTwofiveOneProjectIdRegExp, getEventResponseTwofourOneProjectIdRegExp, getEventResponseTwooneOneProjectIdRegExp, getEventResponseTwosevenOneProjectIdRegExp, getEventResponseTwosixOneProjectIdRegExp, getEventResponseTwothreeOneProjectIdRegExp, getEventResponseTwotwoOneProjectIdRegExp, getEventResponseTwozeroOneProjectIdRegExp, getFlowDefinitionResponseFlowDefinitionNameRegExp, getFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault, getFlowDefinitionResponseFlowDefinitionStepsItemActionsItemPrimaryDefault, getFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault, getFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault, getFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault, getFlowDefinitionResponseUserSchemaOneSchemaOneObjectTypeMax, getFlowDefinitionResponseUserSchemaOneSchemaOnePropertiesXAuditDefault, getFlowStepResponseBrandingLayoutDefault, getFlowStepResponseBrandingLiquidTemplateMax, getFlowStepResponseStepActionsDefault, getFlowStepResponseStepActionsItemPrimaryDefault, getFlowStepResponseStepFieldsDefault, getFlowStepResponseStepFieldsItemRequiredDefault, getFlowStepResponseStepFieldsItemValidationMaxLengthMin, getFlowStepResponseStepFieldsItemValidationMinLengthMin, getFlowStepResponseStepGatesDefault, getFlowStepResponseStepSsoProvidersDefault, getGrantQueryProjectIdRegExp, getMySessionResponseFactorsItemPayloadOneUserIdRegExp, getMySessionResponseProjectIdRegExp, getMySessionResponseSessionIdRegExp, getMySessionResponseUserIdOneRegExp, getMyUserResponseIdRegExp, getProjectPathProjectIdRegExp, getReleaseByIdPathReleaseIdRegExp, getReleaseByIdQueryProjectIdRegExp, getReleaseByIdResponseIdRegExp, getReleaseByIdResponseMetadataGitDirtyDefault, getReleaseByIdResponseMetadataGitShaOneMax, getReleaseByIdResponseMetadataMessageOneMax, getReleaseByIdResponsePointersItemHandleMax, getReleaseByIdResponsePointersItemRevisionIdMax, getReleaseByIdResponseProjectIdRegExp, getSchemaByIdQueryTeamIdRegExp, getSchemaByIdResponseSchemaOneObjectTypeMax, getSchemaByIdResponseSchemaOnePropertiesXAuditDefault, getSessionPathSessionIdRegExp, getSessionResponseFactorsItemPayloadOneUserIdRegExp, getSessionResponseProjectIdRegExp, getSessionResponseSessionIdRegExp, getSessionResponseUserIdOneRegExp, getTeamPathTeamIdRegExp, getUserByIDPathUserIdRegExp, getUserByIDQueryTeamIdRegExp, getUserByIDResponseIdRegExp, initClaimPathProjectIdRegExp, issueChallengePathAttemptIdRegExp, listBrandingQueryProjectIdRegExp, listEnvironmentsQueryLimitDefault, listEnvironmentsQueryLimitMax, listEnvironmentsQueryProjectIdRegExp, listEnvironmentsResponseEnvironmentsItemNameMax, listEnvironmentsResponseEnvironmentsItemNameRegExp, listEnvironmentsResponseEnvironmentsItemProjectIdRegExp, listEventsQueryLimitDefault, listEventsQueryLimitMax, listEventsQueryOrderDefault, listEventsQueryProjectIdRegExp, listEventsResponseDataItemEightOneProjectIdRegExp, listEventsResponseDataItemFiveOneProjectIdRegExp, listEventsResponseDataItemFourOneProjectIdRegExp, listEventsResponseDataItemNineOneProjectIdRegExp, listEventsResponseDataItemOneOneProjectIdRegExp, listEventsResponseDataItemOneeightOneProjectIdRegExp, listEventsResponseDataItemOnefiveOneProjectIdRegExp, listEventsResponseDataItemOnefourOneProjectIdRegExp, listEventsResponseDataItemOnenineOneProjectIdRegExp, listEventsResponseDataItemOnenineTwoPayloadDurationMsMin, listEventsResponseDataItemOnenineTwoPayloadStatusMax, listEventsResponseDataItemOnenineTwoPayloadStatusMin, listEventsResponseDataItemOneoneOneProjectIdRegExp, listEventsResponseDataItemOnesevenOneProjectIdRegExp, listEventsResponseDataItemOnesixOneProjectIdRegExp, listEventsResponseDataItemOnethreeOneProjectIdRegExp, listEventsResponseDataItemOnetwoOneProjectIdRegExp, listEventsResponseDataItemOnezeroOneProjectIdRegExp, listEventsResponseDataItemSevenOneProjectIdRegExp, listEventsResponseDataItemSixOneProjectIdRegExp, listEventsResponseDataItemThreeOneProjectIdRegExp, listEventsResponseDataItemTwoOneProjectIdRegExp, listEventsResponseDataItemTwoeightOneProjectIdRegExp, listEventsResponseDataItemTwofiveOneProjectIdRegExp, listEventsResponseDataItemTwofourOneProjectIdRegExp, listEventsResponseDataItemTwooneOneProjectIdRegExp, listEventsResponseDataItemTwosevenOneProjectIdRegExp, listEventsResponseDataItemTwosixOneProjectIdRegExp, listEventsResponseDataItemTwothreeOneProjectIdRegExp, listEventsResponseDataItemTwotwoOneProjectIdRegExp, listEventsResponseDataItemTwozeroOneProjectIdRegExp, listFlowDefinitionsQueryLimitDefault, listFlowDefinitionsQueryLimitMax, listFlowDefinitionsQueryProjectIdRegExp, listFlowDefinitionsResponseFlowDefinitionsItemFlowDefinitionNameRegExp, listFlowDefinitionsResponseFlowDefinitionsItemFlowDefinitionStepsItemActionsDefault, listFlowDefinitionsResponseFlowDefinitionsItemFlowDefinitionStepsItemActionsItemPrimaryDefault, listFlowDefinitionsResponseFlowDefinitionsItemFlowDefinitionStepsItemFieldsDefault, listFlowDefinitionsResponseFlowDefinitionsItemFlowDefinitionStepsItemGatesDefault, listFlowDefinitionsResponseFlowDefinitionsItemFlowDefinitionStepsItemSsoProvidersDefault, listFlowDefinitionsResponseFlowDefinitionsItemUserSchemaOneSchemaOneObjectTypeMax, listFlowDefinitionsResponseFlowDefinitionsItemUserSchemaOneSchemaOnePropertiesXAuditDefault, listReleasesQueryLimitDefault, listReleasesQueryLimitMax, listReleasesQueryProjectIdRegExp, listReleasesResponseReleasesItemIdRegExp, listReleasesResponseReleasesItemMetadataGitDirtyDefault, listReleasesResponseReleasesItemMetadataGitShaOneMax, listReleasesResponseReleasesItemMetadataMessageOneMax, listReleasesResponseReleasesItemProjectIdRegExp, listSchemasQueryLimitDefault, listSchemasQueryLimitMax, listSchemasQueryObjectTypeMax, listSchemasQueryProjectIdRegExp, listSchemasQueryRevisionsDefault, listSchemasResponseSchemasItemSchemaOneObjectTypeMax, listSchemasResponseSchemasItemSchemaOnePropertiesXAuditDefault, listUserPasskeysPathUserIdRegExp, listUserPasskeysQueryLimitDefault, listUserPasskeysQueryLimitMax, listUserTeamsPathUserIdRegExp, listUserTeamsQueryLimitDefault, listUserTeamsQueryLimitMax, patchProjectPathProjectIdRegExp, queryProjectsBodyLimitDefault, queryProjectsBodyLimitMax, querySessionsBodyLimitDefault, querySessionsBodyLimitMax, querySessionsQueryProjectIdRegExp, querySessionsResponseSessionsItemFactorsItemPayloadOneUserIdRegExp, querySessionsResponseSessionsItemProjectIdRegExp, querySessionsResponseSessionsItemSessionIdRegExp, querySessionsResponseSessionsItemUserIdOneRegExp, queryTeamsBodyLimitDefault, queryTeamsBodyLimitMax, queryTeamsQueryProjectIdRegExp, queryUsersBodyLimitDefault, queryUsersBodyLimitMax, queryUsersResponseUsersItemIdRegExp, revokeSessionPathSessionIdRegExp, setUserPasswordPathUserIdRegExp, submitFlowStepResponseBrandingLayoutDefault, submitFlowStepResponseBrandingLiquidTemplateMax, submitFlowStepResponseStepActionsDefault, submitFlowStepResponseStepActionsItemPrimaryDefault, submitFlowStepResponseStepFieldsDefault, submitFlowStepResponseStepFieldsItemRequiredDefault, submitFlowStepResponseStepFieldsItemValidationMaxLengthMin, submitFlowStepResponseStepFieldsItemValidationMinLengthMin, submitFlowStepResponseStepGatesDefault, submitFlowStepResponseStepSsoProvidersDefault, updateFlowDefinitionBodyFlowDefinitionNameRegExp, updateFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault, updateFlowDefinitionBodyFlowDefinitionStepsItemActionsItemPrimaryDefault, updateFlowDefinitionBodyFlowDefinitionStepsItemFieldsDefault, updateFlowDefinitionBodyFlowDefinitionStepsItemGatesDefault, updateFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersDefault, updateFlowDefinitionResponseFlowDefinitionNameRegExp, updateFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemActionsItemPrimaryDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault, updateFlowDefinitionResponseUserSchemaOneSchemaOneObjectTypeMax, updateFlowDefinitionResponseUserSchemaOneSchemaOnePropertiesXAuditDefault, updateTeamBodyNameMax, updateTeamPathTeamIdRegExp, verifyChallengeProofPathAttemptIdRegExp, verifyChallengeProofPathChallengeIdRegExp, verifyChallengeProofResponseAttemptIdRegExp, verifyChallengeProofResponseChallengesItemChallengeIdRegExp, verifyChallengeProofResponseCompletedFactorsItemPayloadOneUserIdRegExp, verifyChallengeProofResponseProjectIdRegExp, verifyChallengeProofResponseSessionIdOneRegExp, verifyChallengeProofResponseUserIdOneRegExp };
+export { BeginUserPasskeyRegistrationBody, BeginUserPasskeyRegistrationParams, CompleteClaimBody, CompleteClaimParams, CompleteClaimResponse, CreateAuthAttemptBody, CreateBrandingBody, CreateBrandingQueryParams, CreateFlowBody, CreateFlowDefinitionBody, CreateGrantBody, CreateGrantQueryParams, CreateHandoffHeader, CreateHandoffParams, CreateHandoffResponse, CreateProjectBody, CreateReleaseBody, CreateReleaseQueryParams, CreateReleaseResponse, CreateSchemaBody, CreateSchemaQueryParams, CreateSessionBody, CreateTeamBody, CreateTeamQueryParams, CreateUserBody, CreateUserQueryParams, DeleteFlowDefinitionParams, DeleteGrantParams, DeleteGrantQueryParams, DeleteTeamParams, DeleteUserByIDParams, ExchangeHandoffBody, ExchangeHandoffHeader, ExchangeHandoffQueryParams, ExchangeHandoffResponse, FinishUserPasskeyRegistrationBody, FinishUserPasskeyRegistrationParams, GetAuthAttemptParams, GetAuthAttemptResponse, GetBrandingByIdParams, GetBrandingByIdResponse, GetClaimStatusParams, GetClaimStatusQueryParams, GetClaimStatusResponse, GetClaimWindowParams, GetClaimWindowQueryParams, GetClaimWindowResponse, GetEnvironmentByNameParams, GetEnvironmentByNameQueryParams, GetEnvironmentByNameResponse, GetEventParams, GetEventQueryParams, GetEventResponse, GetFlowDefinitionParams, GetFlowDefinitionResponse, GetFlowStepParams, GetFlowStepResponse, GetGrantParams, GetGrantQueryParams, GetGrantResponse, GetMySessionResponse, GetMyUserResponse, GetProjectParams, GetProjectResponse, GetReleaseByIdParams, GetReleaseByIdQueryParams, GetReleaseByIdResponse, GetSchemaByIdParams, GetSchemaByIdQueryParams, GetSchemaByIdResponse, GetSessionParams, GetSessionResponse, GetTeamParams, GetTeamResponse, GetUserByIDParams, GetUserByIDQueryParams, GetUserByIDResponse, InitClaimParams, IssueChallengeBody, IssueChallengeParams, ListBrandingQueryParams, ListBrandingResponse, ListBrandingResponseItem, ListEnvironmentsQueryParams, ListEnvironmentsResponse, ListEventsQueryParams, ListEventsResponse, ListFlowDefinitionsQueryParams, ListFlowDefinitionsResponse, ListReleasesQueryParams, ListReleasesResponse, ListSchemasQueryParams, ListSchemasResponse, ListUserPasskeysParams, ListUserPasskeysQueryParams, ListUserPasskeysResponse, ListUserTeamsParams, ListUserTeamsQueryParams, ListUserTeamsResponse, PatchProjectBody, PatchProjectParams, PatchProjectResponse, QueryGrantsBody, QueryGrantsQueryParams, QueryGrantsResponse, QueryProjectsBody, QueryProjectsResponse, QuerySessionsBody, QuerySessionsQueryParams, QuerySessionsResponse, QueryTeamsBody, QueryTeamsQueryParams, QueryTeamsResponse, QueryUsersBody, QueryUsersResponse, RevokeSessionParams, SetUserPasswordBody, SetUserPasswordParams, SubmitFlowStepBody, SubmitFlowStepHeader, SubmitFlowStepParams, SubmitFlowStepResponse, UpdateFlowDefinitionBody, UpdateFlowDefinitionParams, UpdateFlowDefinitionResponse, UpdateTeamBody, UpdateTeamParams, UpdateTeamResponse, VerifyChallengeProofBody, VerifyChallengeProofHeader, VerifyChallengeProofParams, VerifyChallengeProofResponse, beginUserPasskeyRegistrationPathUserIdRegExp, completeClaimBodyChallengeIdRegExp, completeClaimPathProjectIdRegExp, completeClaimResponseProjectIdRegExp, completeClaimResponseTeamIdRegExp, createAuthAttemptBodyProjectIdRegExp, createAuthAttemptBodySessionIdOneRegExp, createBrandingBodyLayoutDefault, createBrandingBodyLiquidTemplateMax, createBrandingQueryProjectIdRegExp, createFlowBodyDryRunDefault, createFlowBodyFlowDefinitionNameRegExp, createFlowBodyProjectIdRegExp, createFlowBodySchemaVersionRegExp, createFlowDefinitionBodyFlowDefinitionNameRegExp, createFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault, createFlowDefinitionBodyFlowDefinitionStepsItemActionsItemPrimaryDefault, createFlowDefinitionBodyFlowDefinitionStepsItemFieldsDefault, createFlowDefinitionBodyFlowDefinitionStepsItemGatesDefault, createFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersDefault, createFlowDefinitionBodyProjectIdRegExp, createGrantQueryProjectIdRegExp, createHandoffPathAttemptIdRegExp, createProjectBodySeedDefaultsDefault, createReleaseBodyGitDirtyDefault, createReleaseBodyGitShaMax, createReleaseBodyMessageMax, createReleaseBodyPointersItemRevisionIdMax, createReleaseQueryProjectIdRegExp, createReleaseResponseIdRegExp, createReleaseResponseMetadataGitDirtyDefault, createReleaseResponseMetadataGitShaOneMax, createReleaseResponseMetadataMessageOneMax, createReleaseResponsePointersItemHandleMax, createReleaseResponsePointersItemRevisionIdMax, createReleaseResponseProjectIdRegExp, createSchemaBodyOneObjectTypeMax, createSchemaBodyOnePropertiesXAuditDefault, createSchemaQueryProjectIdRegExp, createSchemaQueryTeamIdRegExp, createSessionBodyProjectIdRegExp, createTeamBodyNameMax, createTeamQueryProjectIdRegExp, createUserQueryProjectIdRegExp, createUserQueryTeamIdRegExp, deleteGrantQueryProjectIdRegExp, deleteTeamPathTeamIdRegExp, deleteUserByIDPathUserIdRegExp, exchangeHandoffQueryProjectIdRegExp, exchangeHandoffResponseSessionFactorsItemPayloadOneUserIdRegExp, exchangeHandoffResponseSessionProjectIdRegExp, exchangeHandoffResponseSessionSessionIdRegExp, exchangeHandoffResponseSessionUserIdOneRegExp, exchangeHandoffResponseSessionUserUserIdRegExp, finishUserPasskeyRegistrationPathUserIdRegExp, getAuthAttemptPathAttemptIdRegExp, getAuthAttemptResponseAttemptIdRegExp, getAuthAttemptResponseChallengesItemChallengeIdRegExp, getAuthAttemptResponseCompletedFactorsItemPayloadOneUserIdRegExp, getAuthAttemptResponseProjectIdRegExp, getAuthAttemptResponseSessionIdOneRegExp, getAuthAttemptResponseUserIdOneRegExp, getBrandingByIdResponseBrandingLayoutDefault, getBrandingByIdResponseBrandingLiquidTemplateMax, getClaimStatusPathProjectIdRegExp, getClaimStatusQueryChallengeIdRegExp, getClaimStatusResponseTwoTeamIdRegExp, getClaimWindowPathProjectIdRegExp, getClaimWindowQueryChallengeIdRegExp, getEnvironmentByNamePathNameMax, getEnvironmentByNamePathNameRegExp, getEnvironmentByNameQueryProjectIdRegExp, getEnvironmentByNameResponseNameMax, getEnvironmentByNameResponseNameRegExp, getEnvironmentByNameResponseProjectIdRegExp, getEventQueryProjectIdRegExp, getEventResponseEightOneProjectIdRegExp, getEventResponseFiveOneProjectIdRegExp, getEventResponseFourOneProjectIdRegExp, getEventResponseNineOneProjectIdRegExp, getEventResponseOneOneProjectIdRegExp, getEventResponseOneeightOneProjectIdRegExp, getEventResponseOnefiveOneProjectIdRegExp, getEventResponseOnefourOneProjectIdRegExp, getEventResponseOnenineOneProjectIdRegExp, getEventResponseOneoneOneProjectIdRegExp, getEventResponseOnesevenOneProjectIdRegExp, getEventResponseOnesixOneProjectIdRegExp, getEventResponseOnethreeOneProjectIdRegExp, getEventResponseOnetwoOneProjectIdRegExp, getEventResponseOnezeroOneProjectIdRegExp, getEventResponseSevenOneProjectIdRegExp, getEventResponseSixOneProjectIdRegExp, getEventResponseThreeOneProjectIdRegExp, getEventResponseTwoOneProjectIdRegExp, getEventResponseTwoeightOneProjectIdRegExp, getEventResponseTwofiveOneProjectIdRegExp, getEventResponseTwofourOneProjectIdRegExp, getEventResponseTwonineOneProjectIdRegExp, getEventResponseTwooneOneProjectIdRegExp, getEventResponseTwosevenOneProjectIdRegExp, getEventResponseTwosixOneProjectIdRegExp, getEventResponseTwothreeOneProjectIdRegExp, getEventResponseTwotwoOneProjectIdRegExp, getEventResponseTwozeroOneProjectIdRegExp, getEventResponseTwozeroTwoPayloadDurationMsMin, getEventResponseTwozeroTwoPayloadStatusMax, getEventResponseTwozeroTwoPayloadStatusMin, getFlowDefinitionResponseFlowDefinitionNameRegExp, getFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault, getFlowDefinitionResponseFlowDefinitionStepsItemActionsItemPrimaryDefault, getFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault, getFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault, getFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault, getFlowDefinitionResponseUserSchemaOneSchemaOneObjectTypeMax, getFlowDefinitionResponseUserSchemaOneSchemaOnePropertiesXAuditDefault, getFlowStepResponseBrandingLayoutDefault, getFlowStepResponseBrandingLiquidTemplateMax, getFlowStepResponseStepActionsDefault, getFlowStepResponseStepActionsItemPrimaryDefault, getFlowStepResponseStepFieldsDefault, getFlowStepResponseStepFieldsItemRequiredDefault, getFlowStepResponseStepFieldsItemValidationMaxLengthMin, getFlowStepResponseStepFieldsItemValidationMinLengthMin, getFlowStepResponseStepGatesDefault, getFlowStepResponseStepSsoProvidersDefault, getGrantQueryProjectIdRegExp, getGrantResponsePrincipalOneOneOneIdRegExp, getGrantResponseUserUserIdRegExp, getMySessionResponseFactorsItemPayloadOneUserIdRegExp, getMySessionResponseProjectIdRegExp, getMySessionResponseSessionIdRegExp, getMySessionResponseUserIdOneRegExp, getMySessionResponseUserUserIdRegExp, getMyUserResponseIdRegExp, getProjectPathProjectIdRegExp, getReleaseByIdPathReleaseIdRegExp, getReleaseByIdQueryProjectIdRegExp, getReleaseByIdResponseIdRegExp, getReleaseByIdResponseMetadataGitDirtyDefault, getReleaseByIdResponseMetadataGitShaOneMax, getReleaseByIdResponseMetadataMessageOneMax, getReleaseByIdResponsePointersItemHandleMax, getReleaseByIdResponsePointersItemRevisionIdMax, getReleaseByIdResponseProjectIdRegExp, getSchemaByIdQueryTeamIdRegExp, getSchemaByIdResponseSchemaOneObjectTypeMax, getSchemaByIdResponseSchemaOnePropertiesXAuditDefault, getSessionPathSessionIdRegExp, getSessionResponseFactorsItemPayloadOneUserIdRegExp, getSessionResponseProjectIdRegExp, getSessionResponseSessionIdRegExp, getSessionResponseUserIdOneRegExp, getSessionResponseUserUserIdRegExp, getTeamPathTeamIdRegExp, getUserByIDPathUserIdRegExp, getUserByIDQueryTeamIdRegExp, getUserByIDResponseIdRegExp, initClaimPathProjectIdRegExp, issueChallengePathAttemptIdRegExp, listBrandingQueryProjectIdRegExp, listEnvironmentsQueryLimitDefault, listEnvironmentsQueryLimitMax, listEnvironmentsQueryProjectIdRegExp, listEnvironmentsResponseEnvironmentsItemNameMax, listEnvironmentsResponseEnvironmentsItemNameRegExp, listEnvironmentsResponseEnvironmentsItemProjectIdRegExp, listEventsQueryLimitDefault, listEventsQueryLimitMax, listEventsQueryOrderDefault, listEventsQueryProjectIdRegExp, listEventsResponseDataItemEightOneProjectIdRegExp, listEventsResponseDataItemFiveOneProjectIdRegExp, listEventsResponseDataItemFourOneProjectIdRegExp, listEventsResponseDataItemNineOneProjectIdRegExp, listEventsResponseDataItemOneOneProjectIdRegExp, listEventsResponseDataItemOneeightOneProjectIdRegExp, listEventsResponseDataItemOnefiveOneProjectIdRegExp, listEventsResponseDataItemOnefourOneProjectIdRegExp, listEventsResponseDataItemOnenineOneProjectIdRegExp, listEventsResponseDataItemOneoneOneProjectIdRegExp, listEventsResponseDataItemOnesevenOneProjectIdRegExp, listEventsResponseDataItemOnesixOneProjectIdRegExp, listEventsResponseDataItemOnethreeOneProjectIdRegExp, listEventsResponseDataItemOnetwoOneProjectIdRegExp, listEventsResponseDataItemOnezeroOneProjectIdRegExp, listEventsResponseDataItemSevenOneProjectIdRegExp, listEventsResponseDataItemSixOneProjectIdRegExp, listEventsResponseDataItemThreeOneProjectIdRegExp, listEventsResponseDataItemTwoOneProjectIdRegExp, listEventsResponseDataItemTwoeightOneProjectIdRegExp, listEventsResponseDataItemTwofiveOneProjectIdRegExp, listEventsResponseDataItemTwofourOneProjectIdRegExp, listEventsResponseDataItemTwonineOneProjectIdRegExp, listEventsResponseDataItemTwooneOneProjectIdRegExp, listEventsResponseDataItemTwosevenOneProjectIdRegExp, listEventsResponseDataItemTwosixOneProjectIdRegExp, listEventsResponseDataItemTwothreeOneProjectIdRegExp, listEventsResponseDataItemTwotwoOneProjectIdRegExp, listEventsResponseDataItemTwozeroOneProjectIdRegExp, listEventsResponseDataItemTwozeroTwoPayloadDurationMsMin, listEventsResponseDataItemTwozeroTwoPayloadStatusMax, listEventsResponseDataItemTwozeroTwoPayloadStatusMin, listFlowDefinitionsQueryLimitDefault, listFlowDefinitionsQueryLimitMax, listFlowDefinitionsQueryNameRegExp, listFlowDefinitionsQueryProjectIdRegExp, listFlowDefinitionsResponseFlowDefinitionsItemFlowDefinitionNameRegExp, listFlowDefinitionsResponseFlowDefinitionsItemFlowDefinitionStepsItemActionsDefault, listFlowDefinitionsResponseFlowDefinitionsItemFlowDefinitionStepsItemActionsItemPrimaryDefault, listFlowDefinitionsResponseFlowDefinitionsItemFlowDefinitionStepsItemFieldsDefault, listFlowDefinitionsResponseFlowDefinitionsItemFlowDefinitionStepsItemGatesDefault, listFlowDefinitionsResponseFlowDefinitionsItemFlowDefinitionStepsItemSsoProvidersDefault, listFlowDefinitionsResponseFlowDefinitionsItemUserSchemaOneSchemaOneObjectTypeMax, listFlowDefinitionsResponseFlowDefinitionsItemUserSchemaOneSchemaOnePropertiesXAuditDefault, listReleasesQueryLimitDefault, listReleasesQueryLimitMax, listReleasesQueryProjectIdRegExp, listReleasesResponseReleasesItemIdRegExp, listReleasesResponseReleasesItemMetadataGitDirtyDefault, listReleasesResponseReleasesItemMetadataGitShaOneMax, listReleasesResponseReleasesItemMetadataMessageOneMax, listReleasesResponseReleasesItemProjectIdRegExp, listSchemasQueryLimitDefault, listSchemasQueryLimitMax, listSchemasQueryObjectTypeMax, listSchemasQueryProjectIdRegExp, listSchemasQueryRevisionsDefault, listSchemasResponseSchemasItemSchemaOneObjectTypeMax, listSchemasResponseSchemasItemSchemaOnePropertiesXAuditDefault, listUserPasskeysPathUserIdRegExp, listUserPasskeysQueryLimitDefault, listUserPasskeysQueryLimitMax, listUserTeamsPathUserIdRegExp, listUserTeamsQueryLimitDefault, listUserTeamsQueryLimitMax, patchProjectPathProjectIdRegExp, queryGrantsBodyLimitDefault, queryGrantsBodyLimitMax, queryGrantsQueryProjectIdRegExp, queryGrantsResponseGrantsItemPrincipalOneOneOneIdRegExp, queryGrantsResponseGrantsItemUserUserIdRegExp, queryProjectsBodyLimitDefault, queryProjectsBodyLimitMax, querySessionsBodyLimitDefault, querySessionsBodyLimitMax, querySessionsQueryProjectIdRegExp, querySessionsResponseSessionsItemFactorsItemPayloadOneUserIdRegExp, querySessionsResponseSessionsItemProjectIdRegExp, querySessionsResponseSessionsItemSessionIdRegExp, querySessionsResponseSessionsItemUserIdOneRegExp, querySessionsResponseSessionsItemUserUserIdRegExp, queryTeamsBodyLimitDefault, queryTeamsBodyLimitMax, queryTeamsQueryProjectIdRegExp, queryUsersBodyLimitDefault, queryUsersBodyLimitMax, queryUsersResponseUsersItemIdRegExp, revokeSessionPathSessionIdRegExp, setUserPasswordPathUserIdRegExp, submitFlowStepResponseBrandingLayoutDefault, submitFlowStepResponseBrandingLiquidTemplateMax, submitFlowStepResponseStepActionsDefault, submitFlowStepResponseStepActionsItemPrimaryDefault, submitFlowStepResponseStepFieldsDefault, submitFlowStepResponseStepFieldsItemRequiredDefault, submitFlowStepResponseStepFieldsItemValidationMaxLengthMin, submitFlowStepResponseStepFieldsItemValidationMinLengthMin, submitFlowStepResponseStepGatesDefault, submitFlowStepResponseStepSsoProvidersDefault, updateFlowDefinitionBodyFlowDefinitionNameRegExp, updateFlowDefinitionBodyFlowDefinitionStepsItemActionsDefault, updateFlowDefinitionBodyFlowDefinitionStepsItemActionsItemPrimaryDefault, updateFlowDefinitionBodyFlowDefinitionStepsItemFieldsDefault, updateFlowDefinitionBodyFlowDefinitionStepsItemGatesDefault, updateFlowDefinitionBodyFlowDefinitionStepsItemSsoProvidersDefault, updateFlowDefinitionResponseFlowDefinitionNameRegExp, updateFlowDefinitionResponseFlowDefinitionStepsItemActionsDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemActionsItemPrimaryDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemFieldsDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemGatesDefault, updateFlowDefinitionResponseFlowDefinitionStepsItemSsoProvidersDefault, updateFlowDefinitionResponseUserSchemaOneSchemaOneObjectTypeMax, updateFlowDefinitionResponseUserSchemaOneSchemaOnePropertiesXAuditDefault, updateTeamBodyNameMax, updateTeamPathTeamIdRegExp, verifyChallengeProofPathAttemptIdRegExp, verifyChallengeProofPathChallengeIdRegExp, verifyChallengeProofResponseAttemptIdRegExp, verifyChallengeProofResponseChallengesItemChallengeIdRegExp, verifyChallengeProofResponseCompletedFactorsItemPayloadOneUserIdRegExp, verifyChallengeProofResponseProjectIdRegExp, verifyChallengeProofResponseSessionIdOneRegExp, verifyChallengeProofResponseUserIdOneRegExp };
 
 //# sourceMappingURL=zitadelNextGen.zod.mjs.map