@zitadel/config 0.1.0-alpha.17 → 0.1.0-alpha.19

package/meta-schemas/user-property.json

@@ -14,17 +14,6 @@
       "const": "https://json-schema.org/draft/2020-12/schema",
       "description": "The JSON Schema version used for this schema."
     },
-    "x-verify": {
-      "oneOf": [
-        {
-          "type": "string"
-        },
-        {
-          "type": "null"
-        }
-      ],
-      "description": "The verification method for this property, if applicable"
-    },
     "x-unique": {
       "oneOf": [
         {
@@ -52,25 +41,20 @@
       ],
       "description": "The claim name for this property, if applicable"
     },
-    "x-editable": {
-      "type": "boolean",
-      "default": true,
-      "description": "Whether this property is editable by the user or not"
-    },
-    "x-sensitive": {
-      "type": "boolean",
-      "default": false,
-      "description": "Whether this property contains sensitive information or not"
-    },
-    "x-mfa": {
+    "x-audit": {
       "type": "boolean",
       "default": false,
-      "description": "Whether this property is used for multi-factor authentication or not"
+      "description": "Whether this property's value may appear in audit event payloads. Audit payloads are deny-by-default: a property without this annotation contributes its key but never its value."
     },
     "properties": {
       "type": "object",
       "description": "A map of additional properties for the user definition, where the key is the property name and the value is the property schema",
-      "additionalProperties": true
+      "propertyNames": {
+        "$ref": "property-name.json"
+      },
+      "additionalProperties": {
+        "$ref": "user-property.json"
+      }
     }
   }
 }

package/meta-schemas/user-schema.json

@@ -42,9 +42,12 @@
     "properties": {
       "type": "object",
       "description": "A map of additional properties for the user definition, where the key is the property name and the value is the property schema",
+      "propertyNames": {
+        "$ref": "property-name.json"
+      },
       "additionalProperties": {
         "$ref": "user-property.json"
       }
     }
   }
-}
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zitadel/config",
-  "version": "0.1.0-alpha.17",
+  "version": "0.1.0-alpha.19",
   "description": "Versioned Zitadel local config schemas and defaults",
   "homepage": "https://github.com/zitadel/nextgen/tree/main/packages/config#readme",
   "bugs": {
@@ -17,6 +17,7 @@
     "defaults/*.json",
     "defaults/*.md",
     "defaults/presets/*/*.json",
+    "defaults/branding/*/*.liquid",
     "meta-schemas/*.json",
     "LICENSE"
   ],
@@ -37,6 +38,11 @@
       "types": "./dist/schemas.d.mts",
       "import": "./dist/schemas.mjs"
     },
+    "./branding-url": {
+      "@zitadel/source": "./src/branding-url.ts",
+      "types": "./dist/branding-url.d.mts",
+      "import": "./dist/branding-url.mjs"
+    },
     "./normalize": {
       "@zitadel/source": "./src/normalize.ts",
       "types": "./dist/normalize.d.mts",
@@ -52,6 +58,11 @@
       "types": "./dist/meta-schemas.d.mts",
       "import": "./dist/meta-schemas.mjs"
     },
+    "./template": {
+      "@zitadel/source": "./src/template.ts",
+      "types": "./dist/template.d.mts",
+      "import": "./dist/template.mjs"
+    },
     "./defaults/default-human-user.json": "./defaults/default-human-user.json",
     "./defaults/default-login.json": "./defaults/default-login.json",
     "./package.json": "./package.json"
@@ -60,17 +71,19 @@
     "access": "public"
   },
   "dependencies": {
-    "@zitadel/api": "0.1.0-alpha.17"
+    "liquidjs": "^10.27.2",
+    "zod": "^4.3.6",
+    "@zitadel/api": "0.1.0-alpha.19"
   },
   "devDependencies": {
     "ajv": "^8.20.0",
     "tsdown": "^0.21.10",
     "tslib": "^2.8.1",
-    "vitest": "^4.1.7"
+    "vitest": "^4.1.9"
   },
   "scripts": {
     "build": "tsdown",
-    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "typecheck": "tsc --build tsconfig.json",
     "test": "vitest run --passWithNoTests",
     "lint": "oxlint ."
   }

package/dist/defaults-BQej3KIY.mjs

@@ -1,388 +0,0 @@
-import { readFileSync } from "node:fs";
-import { fileURLToPath } from "node:url";
-//#region defaults/default-human-user.json
-var default_human_user_default = {
-	title: "DefaultHumanUserSchema",
-	$schema: "https://json-schema.org/draft/2020-12/schema",
-	metaSchema: "${SERVER_URL}/user-schema.json",
-	$id: "${USER_SCHEMA_URL}",
-	objectType: "human-user",
-	kind: "user-schema",
-	type: "object",
-	description: "The default editable schema for human users.",
-	"x-auth-methods": {
-		"password": {
-			"enabled": true,
-			"position": 1
-		},
-		"passkey": {
-			"enabled": true,
-			"position": 2
-		}
-	},
-	required: ["email"],
-	properties: {
-		"email": {
-			"type": "string",
-			"format": "email",
-			"x-unique": "project",
-			"description": "The user's email address."
-		},
-		"givenName": {
-			"type": "string",
-			"maxLength": 50,
-			"description": "The user's given (first) name."
-		},
-		"familyName": {
-			"type": "string",
-			"maxLength": 50,
-			"description": "The user's family (last) name."
-		},
-		"dateOfBirth": {
-			"type": "string",
-			"format": "date",
-			"description": "The user's date of birth (ISO 8601, YYYY-MM-DD)."
-		}
-	}
-};
-//#endregion
-//#region defaults/default-login.json
-var default_login_default = {
-	$schema: "../meta/flow-definition.json",
-	name: "default-login",
-	status: "active",
-	user_schema: "${USER_SCHEMA_URL}",
-	purposes: {
-		"login": "identifier",
-		"register": "register"
-	},
-	steps: [
-		{
-			"name": "identifier",
-			"fields": ["email"],
-			"actions": [{
-				"name": "submit",
-				"kind": "submit",
-				"primary": true,
-				"text_key": "identifier.action.continue"
-			}, {
-				"name": "passkey",
-				"kind": "passkey",
-				"primary": false,
-				"text_key": "identifier.action.passkey"
-			}],
-			"transitions": {
-				"submit": { "target": "password" },
-				"passkey": { "target": "done" },
-				"user_not_found": { "target": "register" }
-			}
-		},
-		{
-			"name": "password",
-			"fields": ["x-auth-methods#password"],
-			"actions": [{
-				"name": "submit",
-				"kind": "submit",
-				"primary": true,
-				"text_key": "password.action.signin"
-			}, {
-				"name": "passkey",
-				"kind": "passkey",
-				"primary": false,
-				"text_key": "password.action.passkey"
-			}],
-			"transitions": {
-				"submit": { "target": "done" },
-				"passkey": { "target": "done" }
-			}
-		},
-		{
-			"name": "register",
-			"fields": [
-				"email",
-				"givenName",
-				"familyName",
-				"dateOfBirth"
-			],
-			"actions": [{
-				"name": "submit",
-				"kind": "submit",
-				"primary": true,
-				"text_key": "register.action.password"
-			}, {
-				"name": "passkey_register",
-				"kind": "passkey_register",
-				"primary": false,
-				"text_key": "register.action.passkey"
-			}],
-			"transitions": {
-				"submit": { "target": "register-password" },
-				"passkey_register": { "target": "done" },
-				"user_already_exists": { "target": "password" }
-			}
-		},
-		{
-			"name": "register-password",
-			"fields": ["x-auth-methods#password"],
-			"actions": [{
-				"name": "submit",
-				"kind": "submit",
-				"primary": true,
-				"text_key": "register-password.action.submit"
-			}],
-			"on_success": "create_user",
-			"transitions": {
-				"submit": { "target": "done" },
-				"user_already_exists": { "target": "password" }
-			}
-		},
-		{
-			"name": "done",
-			"complete": "show"
-		}
-	]
-};
-//#endregion
-//#region defaults/presets/passkey-first/human-user.json
-var human_user_default = {
-	title: "DefaultHumanUserSchema",
-	$schema: "https://json-schema.org/draft/2020-12/schema",
-	metaSchema: "${SERVER_URL}/user-schema.json",
-	$id: "${USER_SCHEMA_URL}",
-	objectType: "human-user",
-	kind: "user-schema",
-	type: "object",
-	description: "The default editable schema for human users (passkey-first sign-in).",
-	"x-auth-methods": {
-		"passkey": {
-			"enabled": true,
-			"position": 1
-		},
-		"password": {
-			"enabled": true,
-			"position": 2
-		}
-	},
-	required: ["email"],
-	properties: {
-		"email": {
-			"type": "string",
-			"format": "email",
-			"x-unique": "project",
-			"description": "The user's email address."
-		},
-		"givenName": {
-			"type": "string",
-			"maxLength": 50,
-			"description": "The user's given (first) name."
-		},
-		"familyName": {
-			"type": "string",
-			"maxLength": 50,
-			"description": "The user's family (last) name."
-		},
-		"dateOfBirth": {
-			"type": "string",
-			"format": "date",
-			"description": "The user's date of birth (ISO 8601, YYYY-MM-DD)."
-		}
-	}
-};
-//#endregion
-//#region defaults/presets/passkey-first/login.json
-var login_default = {
-	$schema: "../meta/flow-definition.json",
-	name: "default-login",
-	status: "active",
-	user_schema: "${USER_SCHEMA_URL}",
-	purposes: {
-		"login": "passkey-first",
-		"register": "register"
-	},
-	steps: [
-		{
-			"name": "passkey-first",
-			"fields": [],
-			"actions": [{
-				"name": "passkey",
-				"kind": "passkey",
-				"primary": true,
-				"text_key": "passkey-first.action.passkey"
-			}, {
-				"name": "email_fallback",
-				"kind": "navigate",
-				"primary": false,
-				"text_key": "passkey-first.action.email_fallback"
-			}],
-			"transitions": {
-				"passkey": { "target": "done" },
-				"email_fallback": { "target": "identifier" },
-				"user_not_found": { "target": "register" }
-			}
-		},
-		{
-			"name": "identifier",
-			"fields": ["email"],
-			"actions": [{
-				"name": "submit",
-				"kind": "submit",
-				"primary": true,
-				"text_key": "identifier.action.continue"
-			}, {
-				"name": "passkey",
-				"kind": "passkey",
-				"primary": false,
-				"text_key": "identifier.action.passkey"
-			}],
-			"transitions": {
-				"submit": { "target": "password" },
-				"passkey": { "target": "done" },
-				"user_not_found": { "target": "register" }
-			}
-		},
-		{
-			"name": "password",
-			"fields": ["x-auth-methods#password"],
-			"actions": [{
-				"name": "submit",
-				"kind": "submit",
-				"primary": true,
-				"text_key": "password.action.signin"
-			}, {
-				"name": "passkey",
-				"kind": "passkey",
-				"primary": false,
-				"text_key": "password.action.passkey"
-			}],
-			"transitions": {
-				"submit": { "target": "done" },
-				"passkey": { "target": "done" }
-			}
-		},
-		{
-			"name": "register",
-			"fields": [
-				"email",
-				"givenName",
-				"familyName",
-				"dateOfBirth"
-			],
-			"actions": [{
-				"name": "passkey_register",
-				"kind": "passkey_register",
-				"primary": true,
-				"text_key": "register.action.passkey"
-			}, {
-				"name": "submit",
-				"kind": "submit",
-				"primary": false,
-				"text_key": "register.action.password"
-			}],
-			"transitions": {
-				"passkey_register": { "target": "done" },
-				"submit": { "target": "register-password" },
-				"user_already_exists": { "target": "password" }
-			}
-		},
-		{
-			"name": "register-password",
-			"fields": ["x-auth-methods#password"],
-			"actions": [{
-				"name": "submit",
-				"kind": "submit",
-				"primary": true,
-				"text_key": "register-password.action.submit"
-			}],
-			"on_success": "create_user",
-			"transitions": {
-				"submit": { "target": "done" },
-				"user_already_exists": { "target": "password" }
-			}
-		},
-		{
-			"name": "done",
-			"complete": "show"
-		}
-	]
-};
-//#endregion
-//#region src/readmes.ts
-/**
-* README content the CLI copies to `.zitadel/schemas/README.md` during setup.
-* Source of truth is `packages/config/defaults/README-schemas.md`; the Go
-* server-side embed reads the same file (see `defaults.go`).
-*/
-function schemasReadmeContent() {
-	return readFileSync(readmeUrl("README-schemas.md"), "utf8");
-}
-/**
-* README content the CLI copies to `.zitadel/flows/README.md` during setup.
-* Source of truth is `packages/config/defaults/README-flows.md`.
-*/
-function flowsReadmeContent() {
-	return readFileSync(readmeUrl("README-flows.md"), "utf8");
-}
-function readmeUrl(filename) {
-	return fileURLToPath(new URL(`../defaults/${filename}`, import.meta.url));
-}
-//#endregion
-//#region src/defaults.ts
-const DEFAULT_BUILTIN_SCHEMA_BASE = "https://nextgen.com/api/schemas";
-const DEFAULT_FLOW_SCHEMA_URI = "https://nextgen.com/flow-definition.json";
-const DEFAULT_SCHEMA_CONFIG_PATH = ".zitadel/schemas/default-human-user.json";
-const DEFAULT_FLOW_CONFIG_PATH = ".zitadel/flows/default-login.json";
-/**
-* Named schema+flow bundles `zitadel setup` can scaffold (#448: the prompt
-* fires before any `.zitadel/` file is written; each preset maps to a
-* pre-defined bundle the CLI copies on first setup). `password-first` is
-* today's default; `passkey-first` puts a passkey ceremony on the login
-* entry step with an email→password fallback path.
-*/
-const SETUP_PRESETS = ["password-first", "passkey-first"];
-const DEFAULT_SETUP_PRESET = "password-first";
-const PRESET_TEMPLATES = {
-	"password-first": {
-		schema: default_human_user_default,
-		flow: default_login_default
-	},
-	"passkey-first": {
-		schema: human_user_default,
-		flow: login_default
-	}
-};
-function presetTemplates(preset) {
-	if (!Object.hasOwn(PRESET_TEMPLATES, preset)) throw new Error(`unknown setup preset ${JSON.stringify(preset)} (known presets: ${SETUP_PRESETS.join(", ")})`);
-	return PRESET_TEMPLATES[preset];
-}
-function defaultHumanUserSchemaUrl(builtinSchemaBase = DEFAULT_BUILTIN_SCHEMA_BASE) {
-	return `${trimTrailingSlash(builtinSchemaBase)}/default-human-user.json`;
-}
-function getDefaultHumanUserSchema(options = {}) {
-	const builtinSchemaBase = trimTrailingSlash(options.builtinSchemaBase ?? "https://nextgen.com/api/schemas");
-	return renderTemplate(presetTemplates(options.preset ?? "password-first").schema, {
-		SERVER_URL: builtinSchemaBase,
-		USER_SCHEMA_URL: options.userSchemaUrl ?? defaultHumanUserSchemaUrl(builtinSchemaBase)
-	});
-}
-function getDefaultLoginFlow(options = {}) {
-	const builtinSchemaBase = trimTrailingSlash(options.builtinSchemaBase ?? "https://nextgen.com/api/schemas");
-	return renderTemplate(presetTemplates(options.preset ?? "password-first").flow, {
-		SERVER_URL: builtinSchemaBase,
-		USER_SCHEMA_URL: options.userSchemaUrl ?? defaultHumanUserSchemaUrl(builtinSchemaBase)
-	});
-}
-function renderTemplate(value, replacements) {
-	if (Array.isArray(value)) return value.map((item) => renderTemplate(item, replacements));
-	if (value !== null && typeof value === "object") return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, renderTemplate(item, replacements)]));
-	if (typeof value === "string") return value.replaceAll(/\$\{([A-Z_]+)\}/g, (match, name) => {
-		return replacements[name] ?? match;
-	});
-	return value;
-}
-function trimTrailingSlash(value) {
-	return value.replace(/\/+$/u, "");
-}
-//#endregion
-export { DEFAULT_SETUP_PRESET as a, getDefaultHumanUserSchema as c, schemasReadmeContent as d, DEFAULT_SCHEMA_CONFIG_PATH as i, getDefaultLoginFlow as l, DEFAULT_FLOW_CONFIG_PATH as n, SETUP_PRESETS as o, DEFAULT_FLOW_SCHEMA_URI as r, defaultHumanUserSchemaUrl as s, DEFAULT_BUILTIN_SCHEMA_BASE as t, flowsReadmeContent as u };
-
-//# sourceMappingURL=defaults-BQej3KIY.mjs.map

package/dist/defaults-BQej3KIY.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"defaults-BQej3KIY.mjs","names":["defaultHumanUserSchemaTemplate","defaultLoginFlowTemplate","passkeyFirstHumanUserSchemaTemplate","passkeyFirstLoginFlowTemplate"],"sources":["../defaults/default-human-user.json","../defaults/default-login.json","../defaults/presets/passkey-first/human-user.json","../defaults/presets/passkey-first/login.json","../src/readmes.ts","../src/defaults.ts"],"sourcesContent":["","","","","import { readFileSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\n\n/**\n * README content the CLI copies to `.zitadel/schemas/README.md` during setup.\n * Source of truth is `packages/config/defaults/README-schemas.md`; the Go\n * server-side embed reads the same file (see `defaults.go`).\n */\nexport function schemasReadmeContent(): string {\n  return readFileSync(readmeUrl(\"README-schemas.md\"), \"utf8\");\n}\n\n/**\n * README content the CLI copies to `.zitadel/flows/README.md` during setup.\n * Source of truth is `packages/config/defaults/README-flows.md`.\n */\nexport function flowsReadmeContent(): string {\n  return readFileSync(readmeUrl(\"README-flows.md\"), \"utf8\");\n}\n\nfunction readmeUrl(filename: string): string {\n  return fileURLToPath(new URL(`../defaults/${filename}`, import.meta.url));\n}\n","import type {\n  CreateFlowDefinitionBodyFlowDefinition,\n  CreateSchemaBody,\n} from \"@zitadel/api/generated/model\";\n\nimport defaultHumanUserSchemaTemplate from \"../defaults/default-human-user.json\" with {\n  type: \"json\",\n};\nimport defaultLoginFlowTemplate from \"../defaults/default-login.json\" with {\n  type: \"json\",\n};\nimport passkeyFirstHumanUserSchemaTemplate from \"../defaults/presets/passkey-first/human-user.json\" with {\n  type: \"json\",\n};\nimport passkeyFirstLoginFlowTemplate from \"../defaults/presets/passkey-first/login.json\" with {\n  type: \"json\",\n};\n\nexport { flowsReadmeContent, schemasReadmeContent } from \"./readmes.js\";\n\nexport const DEFAULT_BUILTIN_SCHEMA_BASE = \"https://nextgen.com/api/schemas\";\nexport const DEFAULT_FLOW_SCHEMA_URI = \"https://nextgen.com/flow-definition.json\";\nexport const DEFAULT_SCHEMA_CONFIG_PATH = \".zitadel/schemas/default-human-user.json\";\nexport const DEFAULT_FLOW_CONFIG_PATH = \".zitadel/flows/default-login.json\";\n\n/**\n * Named schema+flow bundles `zitadel setup` can scaffold (#448: the prompt\n * fires before any `.zitadel/` file is written; each preset maps to a\n * pre-defined bundle the CLI copies on first setup). `password-first` is\n * today's default; `passkey-first` puts a passkey ceremony on the login\n * entry step with an email→password fallback path.\n */\nexport const SETUP_PRESETS = [\"password-first\", \"passkey-first\"] as const;\n\nexport type SetupPreset = (typeof SETUP_PRESETS)[number];\n\nexport const DEFAULT_SETUP_PRESET: SetupPreset = \"password-first\";\n\nconst PRESET_TEMPLATES: Record<SetupPreset, { schema: unknown; flow: unknown }> = {\n  \"password-first\": {\n    schema: defaultHumanUserSchemaTemplate,\n    flow: defaultLoginFlowTemplate,\n  },\n  \"passkey-first\": {\n    schema: passkeyFirstHumanUserSchemaTemplate,\n    flow: passkeyFirstLoginFlowTemplate,\n  },\n};\n\nfunction presetTemplates(preset: string): { schema: unknown; flow: unknown } {\n  // Own-property check: indexing a plain object with an arbitrary string\n  // would let \"__proto__\"/\"constructor\" resolve via the prototype chain\n  // and bypass the unknown-preset error.\n  if (!Object.hasOwn(PRESET_TEMPLATES, preset)) {\n    throw new Error(\n      `unknown setup preset ${JSON.stringify(preset)} (known presets: ${SETUP_PRESETS.join(\", \")})`,\n    );\n  }\n  return PRESET_TEMPLATES[preset as SetupPreset];\n}\n\nexport type DefaultConfigRenderOptions = {\n  builtinSchemaBase?: string;\n  userSchemaUrl?: string;\n  /** Which bundle to render; defaults to {@link DEFAULT_SETUP_PRESET}. */\n  preset?: string;\n};\n\nexport function defaultHumanUserSchemaUrl(\n  builtinSchemaBase = DEFAULT_BUILTIN_SCHEMA_BASE,\n): string {\n  return `${trimTrailingSlash(builtinSchemaBase)}/default-human-user.json`;\n}\n\nexport function getDefaultHumanUserSchema(\n  options: DefaultConfigRenderOptions = {},\n): CreateSchemaBody {\n  const builtinSchemaBase = trimTrailingSlash(\n    options.builtinSchemaBase ?? DEFAULT_BUILTIN_SCHEMA_BASE,\n  );\n  return renderTemplate(presetTemplates(options.preset ?? DEFAULT_SETUP_PRESET).schema, {\n    SERVER_URL: builtinSchemaBase,\n    USER_SCHEMA_URL: options.userSchemaUrl ?? defaultHumanUserSchemaUrl(builtinSchemaBase),\n  }) as CreateSchemaBody;\n}\n\nexport function getDefaultLoginFlow(\n  options: DefaultConfigRenderOptions = {},\n): CreateFlowDefinitionBodyFlowDefinition {\n  const builtinSchemaBase = trimTrailingSlash(\n    options.builtinSchemaBase ?? DEFAULT_BUILTIN_SCHEMA_BASE,\n  );\n  return renderTemplate(presetTemplates(options.preset ?? DEFAULT_SETUP_PRESET).flow, {\n    SERVER_URL: builtinSchemaBase,\n    USER_SCHEMA_URL: options.userSchemaUrl ?? defaultHumanUserSchemaUrl(builtinSchemaBase),\n  }) as CreateFlowDefinitionBodyFlowDefinition;\n}\n\nfunction renderTemplate(value: unknown, replacements: Record<string, string>): unknown {\n  if (Array.isArray(value)) {\n    return value.map((item) => renderTemplate(item, replacements));\n  }\n  if (value !== null && typeof value === \"object\") {\n    return Object.fromEntries(\n      Object.entries(value).map(([key, item]) => [key, renderTemplate(item, replacements)]),\n    );\n  }\n  if (typeof value === \"string\") {\n    return value.replaceAll(/\\$\\{([A-Z_]+)\\}/g, (match, name: string) => {\n      return replacements[name] ?? match;\n    });\n  }\n  return value;\n}\n\nfunction trimTrailingSlash(value: string): string {\n  return value.replace(/\\/+$/u, \"\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AIQA,SAAgB,uBAA+B;AAC7C,QAAO,aAAa,UAAU,oBAAoB,EAAE,OAAO;;;;;;AAO7D,SAAgB,qBAA6B;AAC3C,QAAO,aAAa,UAAU,kBAAkB,EAAE,OAAO;;AAG3D,SAAS,UAAU,UAA0B;AAC3C,QAAO,cAAc,IAAI,IAAI,eAAe,YAAY,OAAO,KAAK,IAAI,CAAC;;;;ACD3E,MAAa,8BAA8B;AAC3C,MAAa,0BAA0B;AACvC,MAAa,6BAA6B;AAC1C,MAAa,2BAA2B;;;;;;;;AASxC,MAAa,gBAAgB,CAAC,kBAAkB,gBAAgB;AAIhE,MAAa,uBAAoC;AAEjD,MAAM,mBAA4E;CAChF,kBAAkB;EAChB,QAAQA;EACR,MAAMC;EACP;CACD,iBAAiB;EACf,QAAQC;EACR,MAAMC;EACP;CACF;AAED,SAAS,gBAAgB,QAAoD;AAI3E,KAAI,CAAC,OAAO,OAAO,kBAAkB,OAAO,CAC1C,OAAM,IAAI,MACR,wBAAwB,KAAK,UAAU,OAAO,CAAC,mBAAmB,cAAc,KAAK,KAAK,CAAC,GAC5F;AAEH,QAAO,iBAAiB;;AAU1B,SAAgB,0BACd,oBAAoB,6BACZ;AACR,QAAO,GAAG,kBAAkB,kBAAkB,CAAC;;AAGjD,SAAgB,0BACd,UAAsC,EAAE,EACtB;CAClB,MAAM,oBAAoB,kBACxB,QAAQ,qBAAA,kCACT;AACD,QAAO,eAAe,gBAAgB,QAAQ,UAAA,iBAA+B,CAAC,QAAQ;EACpF,YAAY;EACZ,iBAAiB,QAAQ,iBAAiB,0BAA0B,kBAAkB;EACvF,CAAC;;AAGJ,SAAgB,oBACd,UAAsC,EAAE,EACA;CACxC,MAAM,oBAAoB,kBACxB,QAAQ,qBAAA,kCACT;AACD,QAAO,eAAe,gBAAgB,QAAQ,UAAA,iBAA+B,CAAC,MAAM;EAClF,YAAY;EACZ,iBAAiB,QAAQ,iBAAiB,0BAA0B,kBAAkB;EACvF,CAAC;;AAGJ,SAAS,eAAe,OAAgB,cAA+C;AACrF,KAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,MAAM,KAAK,SAAS,eAAe,MAAM,aAAa,CAAC;AAEhE,KAAI,UAAU,QAAQ,OAAO,UAAU,SACrC,QAAO,OAAO,YACZ,OAAO,QAAQ,MAAM,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC,KAAK,eAAe,MAAM,aAAa,CAAC,CAAC,CACtF;AAEH,KAAI,OAAO,UAAU,SACnB,QAAO,MAAM,WAAW,qBAAqB,OAAO,SAAiB;AACnE,SAAO,aAAa,SAAS;GAC7B;AAEJ,QAAO;;AAGT,SAAS,kBAAkB,OAAuB;AAChD,QAAO,MAAM,QAAQ,SAAS,GAAG"}

package/dist/defaults-CSjBjBkQ.d.mts

@@ -1,41 +0,0 @@
-import { CreateFlowDefinitionBodyFlowDefinition, CreateSchemaBody } from "@zitadel/api/generated/model";
-
-//#region src/readmes.d.ts
-/**
- * README content the CLI copies to `.zitadel/schemas/README.md` during setup.
- * Source of truth is `packages/config/defaults/README-schemas.md`; the Go
- * server-side embed reads the same file (see `defaults.go`).
- */
-declare function schemasReadmeContent(): string;
-/**
- * README content the CLI copies to `.zitadel/flows/README.md` during setup.
- * Source of truth is `packages/config/defaults/README-flows.md`.
- */
-declare function flowsReadmeContent(): string;
-//#endregion
-//#region src/defaults.d.ts
-declare const DEFAULT_BUILTIN_SCHEMA_BASE = "https://nextgen.com/api/schemas";
-declare const DEFAULT_FLOW_SCHEMA_URI = "https://nextgen.com/flow-definition.json";
-declare const DEFAULT_SCHEMA_CONFIG_PATH = ".zitadel/schemas/default-human-user.json";
-declare const DEFAULT_FLOW_CONFIG_PATH = ".zitadel/flows/default-login.json";
-/**
- * Named schema+flow bundles `zitadel setup` can scaffold (#448: the prompt
- * fires before any `.zitadel/` file is written; each preset maps to a
- * pre-defined bundle the CLI copies on first setup). `password-first` is
- * today's default; `passkey-first` puts a passkey ceremony on the login
- * entry step with an email→password fallback path.
- */
-declare const SETUP_PRESETS: readonly ["password-first", "passkey-first"];
-type SetupPreset = (typeof SETUP_PRESETS)[number];
-declare const DEFAULT_SETUP_PRESET: SetupPreset;
-type DefaultConfigRenderOptions = {
-  builtinSchemaBase?: string;
-  userSchemaUrl?: string; /** Which bundle to render; defaults to {@link DEFAULT_SETUP_PRESET}. */
-  preset?: string;
-};
-declare function defaultHumanUserSchemaUrl(builtinSchemaBase?: string): string;
-declare function getDefaultHumanUserSchema(options?: DefaultConfigRenderOptions): CreateSchemaBody;
-declare function getDefaultLoginFlow(options?: DefaultConfigRenderOptions): CreateFlowDefinitionBodyFlowDefinition;
-//#endregion
-export { DEFAULT_SETUP_PRESET as a, SetupPreset as c, getDefaultLoginFlow as d, flowsReadmeContent as f, DEFAULT_SCHEMA_CONFIG_PATH as i, defaultHumanUserSchemaUrl as l, DEFAULT_FLOW_CONFIG_PATH as n, DefaultConfigRenderOptions as o, schemasReadmeContent as p, DEFAULT_FLOW_SCHEMA_URI as r, SETUP_PRESETS as s, DEFAULT_BUILTIN_SCHEMA_BASE as t, getDefaultHumanUserSchema as u };
-//# sourceMappingURL=defaults-CSjBjBkQ.d.mts.map

package/dist/defaults-CSjBjBkQ.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"defaults-CSjBjBkQ.d.mts","names":[],"sources":["../src/readmes.ts","../src/defaults.ts"],"mappings":";;;;;;AAQA;;iBAAgB,oBAAA,CAAA;;;AAQhB;;iBAAgB,kBAAA,CAAA;;;cCIH,2BAAA;AAAA,cACA,uBAAA;AAAA,cACA,0BAAA;AAAA,cACA,wBAAA;;;ADPb;;;;;cCgBa,aAAA;AAAA,KAED,WAAA,WAAsB,aAAA;AAAA,cAErB,oBAAA,EAAsB,WAAA;AAAA,KAyBvB,0BAAA;EACV,iBAAA;EACA,aAAA,WA3CsC;EA6CtC,MAAA;AAAA;AAAA,iBAGc,yBAAA,CACd,iBAAA;AAAA,iBAKc,yBAAA,CACd,OAAA,GAAS,0BAAA,GACR,gBAAA;AAAA,iBAUa,mBAAA,CACd,OAAA,GAAS,0BAAA,GACR,sCAAA"}

package/dist/meta-schemas-8nlyVL7g.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"meta-schemas-8nlyVL7g.mjs","names":["flowDefinitionMetaSchema","userSchemaMetaSchema","userPropertyMetaSchema","authMethodsMetaSchema","authMethodMetaSchema"],"sources":["../meta-schemas/auth-method.json","../meta-schemas/auth-methods.json","../meta-schemas/flow-definition.json","../meta-schemas/user-property.json","../meta-schemas/user-schema.json","../src/meta-schemas.ts"],"sourcesContent":["","","","","","/**\n * The dialect meta-schemas `zitadel setup` copies into a project's\n * `.zitadel/meta/` so the flow/schema dialect is machine-readable offline:\n * editors validate flow files against `flow-definition.json` via a relative\n * `$schema` pointer, and agents read the dialect files before authoring\n * edits — no docs crawl, no hosted schema required.\n *\n * The files under `meta-schemas/` are committed copies of\n * `api/openapi/endpoints/schemas/*.json` (the source the server embeds);\n * a drift-audit test keeps them byte-identical in the monorepo.\n */\nimport authMethodMetaSchema from \"../meta-schemas/auth-method.json\" with {\n  type: \"json\",\n};\nimport authMethodsMetaSchema from \"../meta-schemas/auth-methods.json\" with {\n  type: \"json\",\n};\nimport flowDefinitionMetaSchema from \"../meta-schemas/flow-definition.json\" with {\n  type: \"json\",\n};\nimport userPropertyMetaSchema from \"../meta-schemas/user-property.json\" with {\n  type: \"json\",\n};\nimport userSchemaMetaSchema from \"../meta-schemas/user-schema.json\" with {\n  type: \"json\",\n};\n\n/** Project-relative directory setup writes the meta-schemas to. */\nexport const META_SCHEMA_DIR = \".zitadel/meta\";\n\n/**\n * The `$schema` value scaffolded flow files carry, relative to\n * `.zitadel/flows/` — resolves to `{@link META_SCHEMA_DIR}/flow-definition.json`.\n */\nexport const FLOW_FILE_SCHEMA_REF = \"../meta/flow-definition.json\";\n\nexport type MetaSchemaFile = { name: string; body: object };\n\n/**\n * The dialect files to materialize, in write order. `auth-methods.json` and\n * `auth-method.json` are pulled in by `user-schema.json`'s relative `$ref`s —\n * without them the copied dialect cannot resolve offline.\n */\nexport function metaSchemaFiles(): ReadonlyArray<MetaSchemaFile> {\n  return [\n    { name: \"flow-definition.json\", body: flowDefinitionMetaSchema as object },\n    { name: \"user-schema.json\", body: userSchemaMetaSchema as object },\n    { name: \"user-property.json\", body: userPropertyMetaSchema as object },\n    { name: \"auth-methods.json\", body: authMethodsMetaSchema as object },\n    { name: \"auth-method.json\", body: authMethodMetaSchema as object },\n  ];\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AK4BA,MAAa,kBAAkB;;;;;AAM/B,MAAa,uBAAuB;;;;;;AASpC,SAAgB,kBAAiD;AAC/D,QAAO;EACL;GAAE,MAAM;GAAwB,MAAMA;GAAoC;EAC1E;GAAE,MAAM;GAAoB,MAAMC;GAAgC;EAClE;GAAE,MAAM;GAAsB,MAAMC;GAAkC;EACtE;GAAE,MAAM;GAAqB,MAAMC;GAAiC;EACpE;GAAE,MAAM;GAAoB,MAAMC;GAAgC;EACnE"}