@zitadel/api 1.0.0-alpha.21 → 1.0.0-alpha.22

package/src/generated/endpoints/zitadelNextGen.ts

@@ -52,6 +52,8 @@ import type {
   GetBrandingById200,
   GetClaimStatus200,
   GetClaimStatusParams,
+  GetClaimWindow200,
+  GetClaimWindowParams,
   GetEnvironmentByName200,
   GetEnvironmentByNameParams,
   GetEvent200,
@@ -95,6 +97,9 @@ import type {
   ListUserTeamsParams,
   PatchProject200,
   PatchProjectBody,
+  QueryGrants200,
+  QueryGrantsBody,
+  QueryGrantsParams,
   QueryProjects200,
   QueryProjectsBody,
   QuerySessions200,
@@ -778,7 +783,11 @@ export const getGetClaimStatusUrl = (projectId: string, params: GetClaimStatusPa
  * Polled by the CLI while a browser completes the claim. Authorized by the
 project secret that initiated the challenge. Returns `pending`, or
 `completed` with the owning team, the claim timestamp, and the dashboard
-URL once the browser leg has finished.
+URL once the project is claimed. The claim grant, not the polled
+challenge, is the source of truth: a project claimed through another
+concurrent challenge also reports `completed`, and a completed claim
+keeps reporting `completed` past this challenge's expiry and past the
+project's claim window.
 
  * @summary Get claim status
  */
@@ -818,6 +827,43 @@ export const completeClaim = async (
   });
 };
 
+export const getGetClaimWindowUrl = (projectId: string, params: GetClaimWindowParams) => {
+  const normalizedParams = new URLSearchParams();
+
+  Object.entries(params || {}).forEach(([key, value]) => {
+    if (value !== undefined) {
+      normalizedParams.append(key, value === null ? "null" : value.toString());
+    }
+  });
+
+  const stringifiedParams = normalizedParams.toString();
+
+  return stringifiedParams.length > 0
+    ? `${getProxyPath()}/projects/${projectId}/claim/window?${stringifiedParams}`
+    : `${getProxyPath()}/projects/${projectId}/claim/window`;
+};
+
+/**
+ * Read by the claim page in the browser to show how long is left to claim the
+project. Unauthenticated by design: the claim page runs this before the
+developer has signed in, and holding the `challenge_id` from the claim URL
+is the authorization — the same capability `claim/complete` accepts. It
+reveals only the window, never the project itself, and unlike
+`claim/complete` it spends nothing, so a reload is free.
+
+ * @summary Get the claim window for a project
+ */
+export const getClaimWindow = async (
+  projectId: string,
+  params: GetClaimWindowParams,
+  options?: RequestInit,
+): Promise<GetClaimWindow200> => {
+  return customFetch<GetClaimWindow200>(getGetClaimWindowUrl(projectId, params), {
+    ...options,
+    method: "GET",
+  });
+};
+
 export const getCreateSessionUrl = () => {
   return `${getProxyPath()}/sessions`;
 };
@@ -1148,12 +1194,17 @@ export const getCreateFlowDefinitionUrl = () => {
 };
 
 /**
- * Creates a new flow definition.
+ * Publishes a new flow definition revision.
 Flow definitions are templates that define the sequence of steps (capabilities)
 for a particular user journey (e.g., registration, login, password reset).
 
 Flow definitions are created based on the flow definition schema, which includes the flow's purpose, audience, and the steps involved.
 
+Every call allocates a new opaque id. Revisions of one flow share its
+`name`; posting a definition under an existing `name` publishes a new
+revision of that flow, it is not a conflict. List with `name` to see a
+flow's revisions, newest by creation time first.
+
  * @summary Create a new flow definition
  */
 export const createFlowDefinition = async (
@@ -1185,8 +1236,9 @@ export const getListFlowDefinitionsUrl = (params: ListFlowDefinitionsParams) =>
 };
 
 /**
- * Retrieves a list of all flow definitions.
+ * Retrieves a list of all flow definitions, newest by creation time first.
 This endpoint can be used to view existing flow definitions and their configurations.
+Filter by `name` to list the revisions of one flow.
 
  * @summary List flow definitions
  */
@@ -1709,6 +1761,49 @@ export const createGrant = async (
   });
 };
 
+export const getQueryGrantsUrl = (params: QueryGrantsParams) => {
+  const normalizedParams = new URLSearchParams();
+
+  Object.entries(params || {}).forEach(([key, value]) => {
+    if (value !== undefined) {
+      normalizedParams.append(key, value === null ? "null" : value.toString());
+    }
+  });
+
+  const stringifiedParams = normalizedParams.toString();
+
+  return stringifiedParams.length > 0
+    ? `${getProxyPath()}/grants/query?${stringifiedParams}`
+    : `${getProxyPath()}/grants/query`;
+};
+
+/**
+ * Returns the collaboration grants of a project, paginated with a cursor.
+Only unrevoked grants this API manages are listed (user or team bound to
+viewer, editor, or admin), including expired grants so a client can
+DELETE before re-granting. Project-secret setup (`sk_proj`) and
+owning-team (`relation=team`) rows are not returned. Grants are not in
+`resource_scope_index`; project scope is required on the query (same as
+get). Requires `project.read`. `expand: ["principal"]` additionally
+requires `user.read` and `team.read` (documented on the expand enum;
+those scopes cannot be ANDed onto this security block because they are
+body-conditional).
+
+ * @summary Query grants
+ */
+export const queryGrants = async (
+  queryGrantsBody: QueryGrantsBody,
+  params: QueryGrantsParams,
+  options?: RequestInit,
+): Promise<QueryGrants200> => {
+  return customFetch<QueryGrants200>(getQueryGrantsUrl(params), {
+    ...options,
+    method: "POST",
+    headers: { "Content-Type": "application/json", ...options?.headers },
+    body: JSON.stringify(queryGrantsBody),
+  });
+};
+
 export const getGetGrantUrl = (id: string, params: GetGrantParams) => {
   const normalizedParams = new URLSearchParams();