@featureflip/mcp 0.1.6 → 0.1.8

package/dist/generated/api-types.d.ts

@@ -443,7 +443,8 @@ export interface paths {
          *     computed from the query result rather than an in-memory count. `type` is parsed
          *     leniently — an unrecognized value degrades to "no type filter" (matching
          *     Decode's "garbage input degrades gracefully" precedent)
-         *     rather than a 400, since it's a non-critical list filter, not a mutation.
+         *     rather than a 400, since it's a non-critical list filter, not a mutation. `owner` filters
+         *     by owner: an email (an active member, case-insensitive) or `none` for unowned flags.
          */
         get: {
             parameters: {
@@ -454,6 +455,7 @@ export interface paths {
                     archived?: boolean;
                     limit?: number;
                     cursor?: string;
+                    owner?: string;
                 };
                 header?: never;
                 path: {
@@ -980,7 +982,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/archive": {
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/expiry": {
         parameters: {
             query?: never;
             header?: never;
@@ -988,12 +990,14 @@ export interface paths {
             cookie?: never;
         };
         get?: never;
-        put?: never;
         /**
-         * Archives a flag.
-         * @description Requires at least Member.
+         * Sets the flag's advisory expiry date.
+         * @description Evaluation never changes when it passes — the flag is
+         *     reported stale so it can be cleaned up. Requires at least Member. The date must be in the
+         *     future (400 `EXPIRY_IN_PAST`) and the flag-expiration feature must be enabled
+         *     (400 `FEATURE_NOT_ENABLED`).
          */
-        post: {
+        put: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -1004,7 +1008,13 @@ export interface paths {
                 };
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicSetFlagExpiryRequest"];
+                    "text/json": components["schemas"]["PublicSetFlagExpiryRequest"];
+                    "application/*+json": components["schemas"]["PublicSetFlagExpiryRequest"];
+                };
+            };
             responses: {
                 /** @description No Content */
                 204: {
@@ -1016,6 +1026,18 @@ export interface paths {
                     };
                     content?: never;
                 };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
                     headers: {
@@ -1068,26 +1090,13 @@ export interface paths {
                 };
             };
         };
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/restore": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
+        post?: never;
         /**
-         * Restores a previously archived flag.
-         * @description Requires at least Member.
+         * Removes the flag's expiry date.
+         * @description Requires at least Member. Always allowed, even when
+         *      the flag-expiration feature is disabled.
          */
-        post: {
+        delete: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -1162,21 +1171,26 @@ export interface paths {
                 };
             };
         };
-        delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments": {
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/owner": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /** Gets the resolved flag's config in every environment of the resolved project. */
-        get: {
+        get?: never;
+        /**
+         * Assigns the flag's owner by email.
+         * @description Requires at least Member. The email must belong to an
+         *     active member of the organization (400 `OWNER_NOT_MEMBER`) and the flag-ownership feature
+         *     must be enabled (400 `FEATURE_NOT_ENABLED`).
+         */
+        put: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -1187,10 +1201,26 @@ export interface paths {
                 };
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicSetFlagOwnerRequest"];
+                    "text/json": components["schemas"]["PublicSetFlagOwnerRequest"];
+                    "application/*+json": components["schemas"]["PublicSetFlagOwnerRequest"];
+                };
+            };
             responses: {
-                /** @description OK */
-                200: {
+                /** @description No Content */
+                204: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Bad Request */
+                400: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
@@ -1198,7 +1228,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicFlagEnvConfigResponse"][];
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -1213,6 +1243,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Not Found */
                 404: {
                     headers: {
@@ -1241,29 +1283,13 @@ export interface paths {
                 };
             };
         };
-        put?: never;
         post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
         /**
-         * Gets the resolved flag's config in a single resolved environment.
-         * @description There is no
-         *     single-environment query on the Application side, so this dispatches the same
-         *     GetFlagEnvironmentConfigurationsQuery as GetAll and finds the
-         *     resolved environment by id.
+         * Leaves the flag unowned.
+         * @description Requires at least Member. Always allowed, even when the
+         *      flag-ownership feature is disabled.
          */
-        get: {
+        delete: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -1271,23 +1297,20 @@ export interface paths {
                     org: string;
                     project: string;
                     flag: string;
-                    env: string;
                 };
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description OK */
-                200: {
+                /** @description No Content */
+                204: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
                         "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
                         [name: string]: unknown;
                     };
-                    content: {
-                        "application/json": components["schemas"]["PublicFlagEnvConfigResponse"];
-                    };
+                    content?: never;
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
@@ -1301,6 +1324,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Not Found */
                 404: {
                     headers: {
@@ -1329,31 +1364,43 @@ export interface paths {
                 };
             };
         };
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/archive": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
         /**
-         * Updates the resolved flag's default variation, strategy, and (optionally) prerequisites in a resolved environment.
-         * @description Requires at least Member. A null
-         *     Prerequisites leaves prerequisites untouched;
-         *     a non-null list replaces them wholesale.
+         * Archives a flag.
+         * @description Requires at least Member.
          */
-        put: {
+        post: {
             parameters: {
-                query?: never;
+                query?: {
+                    /**
+                     * @description Archive even though live traffic is still evaluating the flag. Without it the request is
+                     *     refused with `FLAG_RECENTLY_EVALUATED` naming the environments still reading it — which
+                     *     usually means the removal has merged but not yet deployed.
+                     */
+                    force?: boolean;
+                };
                 header?: never;
                 path: {
                     org: string;
                     project: string;
                     flag: string;
-                    env: string;
                 };
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["PublicUpdateFlagEnvConfigRequest"];
-                    "text/json": components["schemas"]["PublicUpdateFlagEnvConfigRequest"];
-                    "application/*+json": components["schemas"]["PublicUpdateFlagEnvConfigRequest"];
-                };
-            };
+            requestBody?: never;
             responses: {
                 /** @description No Content */
                 204: {
@@ -1429,14 +1476,13 @@ export interface paths {
                 };
             };
         };
-        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/toggle": {
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/restore": {
         parameters: {
             query?: never;
             header?: never;
@@ -1446,7 +1492,7 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * Enables or disables the resolved flag in a resolved environment.
+         * Restores a previously archived flag.
          * @description Requires at least Member.
          */
         post: {
@@ -1457,17 +1503,10 @@ export interface paths {
                     org: string;
                     project: string;
                     flag: string;
-                    env: string;
                 };
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["PublicToggleFlagRequest"];
-                    "text/json": components["schemas"]["PublicToggleFlagRequest"];
-                    "application/*+json": components["schemas"]["PublicToggleFlagRequest"];
-                };
-            };
+            requestBody?: never;
             responses: {
                 /** @description No Content */
                 204: {
@@ -1479,18 +1518,6 @@ export interface paths {
                     };
                     content?: never;
                 };
-                /** @description Bad Request */
-                400: {
-                    headers: {
-                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
-                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
-                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
-                    };
-                };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
                     headers: {
@@ -1549,20 +1576,14 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/targeting": {
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /**
-         * Gets the resolved flag's full targeting configuration (enabled flag + ordered rules) in the resolved environment.
-         * @description GetTargetingConfigurationQuery returns null when
-         *     no `FlagEnvironmentConfiguration` exists yet for this flag/environment pair — treated
-         *     as 404 here (rather than an empty PublicTargetingConfigResponse) for
-         *     consistency with every other resolved-resource 404 on this surface.
-         */
+        /** Gets the resolved flag's config in every environment of the resolved project. */
         get: {
             parameters: {
                 query?: never;
@@ -1571,7 +1592,6 @@ export interface paths {
                     org: string;
                     project: string;
                     flag: string;
-                    env: string;
                 };
                 cookie?: never;
             };
@@ -1586,7 +1606,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicTargetingConfigResponse"];
+                        "application/json": components["schemas"]["PublicFlagEnvConfigResponse"][];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -1629,13 +1649,29 @@ export interface paths {
                 };
             };
         };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
         /**
-         * Declaratively replaces the resolved flag's entire targeting rule set in the resolved environment.
-         * @description The ordered Rules list is applied in
-         *     array order (= evaluation order); an empty or omitted list clears all rules. Segment-scoped
-         *     rules are supported. The replace is atomic. Requires at least Member.
+         * Gets the resolved flag's config in a single resolved environment.
+         * @description There is no
+         *     single-environment query on the Application side, so this dispatches the same
+         *     GetFlagEnvironmentConfigurationsQuery as GetAll and finds the
+         *     resolved environment by id.
          */
-        put: {
+        get: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -1647,26 +1683,10 @@ export interface paths {
                 };
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["PublicPutTargetingRequest"];
-                    "text/json": components["schemas"]["PublicPutTargetingRequest"];
-                    "application/*+json": components["schemas"]["PublicPutTargetingRequest"];
-                };
-            };
+            requestBody?: never;
             responses: {
-                /** @description No Content */
-                204: {
-                    headers: {
-                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
-                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
-                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
-                        [name: string]: unknown;
-                    };
-                    content?: never;
-                };
-                /** @description Bad Request */
-                400: {
+                /** @description OK */
+                200: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
@@ -1674,7 +1694,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                        "application/json": components["schemas"]["PublicFlagEnvConfigResponse"];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -1689,20 +1709,8 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
-                /** @description Forbidden */
-                403: {
-                    headers: {
-                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
-                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
-                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
-                    };
-                };
-                /** @description Not Found */
-                404: {
+                /** @description Not Found */
+                404: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
@@ -1729,30 +1737,13 @@ export interface paths {
                 };
             };
         };
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/rules": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
         /**
-         * Creates a targeting rule on the resolved flag in the resolved environment.
-         * @description Requires at
-         *     least Member. Re-fetches via GetTargetingRuleQuery using the id returned
-         *     from CreateTargetingRuleCommand so the response reflects exactly what was
-         *     persisted (e.g. server-assigned priority and condition/group ids).
+         * Updates the resolved flag's default variation, strategy, and (optionally) prerequisites in a resolved environment.
+         * @description Requires at least Member. A null
+         *     Prerequisites leaves prerequisites untouched;
+         *     a non-null list replaces them wholesale.
          */
-        post: {
+        put: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -1766,23 +1757,21 @@ export interface paths {
             };
             requestBody?: {
                 content: {
-                    "application/json": components["schemas"]["PublicCreateTargetingRuleRequest"];
-                    "text/json": components["schemas"]["PublicCreateTargetingRuleRequest"];
-                    "application/*+json": components["schemas"]["PublicCreateTargetingRuleRequest"];
+                    "application/json": components["schemas"]["PublicUpdateFlagEnvConfigRequest"];
+                    "text/json": components["schemas"]["PublicUpdateFlagEnvConfigRequest"];
+                    "application/*+json": components["schemas"]["PublicUpdateFlagEnvConfigRequest"];
                 };
             };
             responses: {
-                /** @description Created */
-                201: {
+                /** @description No Content */
+                204: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
                         "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
                         [name: string]: unknown;
                     };
-                    content: {
-                        "application/json": components["schemas"]["PublicTargetingRuleResponse"];
-                    };
+                    content?: never;
                 };
                 /** @description Bad Request */
                 400: {
@@ -1848,92 +1837,27 @@ export interface paths {
                 };
             };
         };
+        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/rules/{ruleId}": {
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/toggle": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /** Gets a single targeting rule on the resolved flag in the resolved environment by id. */
-        get: {
-            parameters: {
-                query?: never;
-                header?: never;
-                path: {
-                    org: string;
-                    project: string;
-                    flag: string;
-                    env: string;
-                    ruleId: string;
-                };
-                cookie?: never;
-            };
-            requestBody?: never;
-            responses: {
-                /** @description OK */
-                200: {
-                    headers: {
-                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
-                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
-                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["PublicTargetingRuleResponse"];
-                    };
-                };
-                /** @description Authentication is required, or the supplied API token is invalid or expired. */
-                401: {
-                    headers: {
-                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
-                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
-                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
-                    };
-                };
-                /** @description Not Found */
-                404: {
-                    headers: {
-                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
-                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
-                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
-                    };
-                };
-                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
-                429: {
-                    headers: {
-                        /** @description Number of seconds to wait before retrying the request. */
-                        "Retry-After"?: number;
-                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
-                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
-                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
-                    };
-                };
-            };
-        };
+        get?: never;
+        put?: never;
         /**
-         * Updates a targeting rule's variation/description/rollout/segment/conditions wholesale.
+         * Enables or disables the resolved flag in a resolved environment.
          * @description Requires at least Member.
          */
-        put: {
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -1942,15 +1866,14 @@ export interface paths {
                     project: string;
                     flag: string;
                     env: string;
-                    ruleId: string;
                 };
                 cookie?: never;
             };
             requestBody?: {
                 content: {
-                    "application/json": components["schemas"]["PublicUpdateTargetingRuleRequest"];
-                    "text/json": components["schemas"]["PublicUpdateTargetingRuleRequest"];
-                    "application/*+json": components["schemas"]["PublicUpdateTargetingRuleRequest"];
+                    "application/json": components["schemas"]["PublicToggleFlagRequest"];
+                    "text/json": components["schemas"]["PublicToggleFlagRequest"];
+                    "application/*+json": components["schemas"]["PublicToggleFlagRequest"];
                 };
             };
             responses: {
@@ -2028,12 +1951,27 @@ export interface paths {
                 };
             };
         };
-        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/targeting": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
         /**
-         * Deletes a targeting rule from the resolved flag in the resolved environment.
-         * @description Requires at least Member.
+         * Gets the resolved flag's full targeting configuration (enabled flag + ordered rules) in the resolved environment.
+         * @description GetTargetingConfigurationQuery returns null when
+         *     no `FlagEnvironmentConfiguration` exists yet for this flag/environment pair — treated
+         *     as 404 here (rather than an empty PublicTargetingConfigResponse) for
+         *     consistency with every other resolved-resource 404 on this surface.
          */
-        delete: {
+        get: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -2042,24 +1980,13 @@ export interface paths {
                     project: string;
                     flag: string;
                     env: string;
-                    ruleId: string;
                 };
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description No Content */
-                204: {
-                    headers: {
-                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
-                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
-                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
-                        [name: string]: unknown;
-                    };
-                    content?: never;
-                };
-                /** @description Authentication is required, or the supplied API token is invalid or expired. */
-                401: {
+                /** @description OK */
+                200: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
@@ -2067,11 +1994,11 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                        "application/json": components["schemas"]["PublicTargetingConfigResponse"];
                     };
                 };
-                /** @description Forbidden */
-                403: {
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
@@ -2110,23 +2037,11 @@ export interface paths {
                 };
             };
         };
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/rules/reorder": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
         /**
-         * Reorders the resolved flag's targeting rules in the resolved environment by priority.
-         * @description Requires at least Member. Must include every existing rule id exactly once — see the
-         *     type-level remarks on the dup/omission 500 wart.
+         * Declaratively replaces the resolved flag's entire targeting rule set in the resolved environment.
+         * @description The ordered Rules list is applied in
+         *     array order (= evaluation order); an empty or omitted list clears all rules. Segment-scoped
+         *     rules are supported. The replace is atomic. Requires at least Member.
          */
         put: {
             parameters: {
@@ -2142,9 +2057,9 @@ export interface paths {
             };
             requestBody?: {
                 content: {
-                    "application/json": components["schemas"]["PublicReorderRulesRequest"];
-                    "text/json": components["schemas"]["PublicReorderRulesRequest"];
-                    "application/*+json": components["schemas"]["PublicReorderRulesRequest"];
+                    "application/json": components["schemas"]["PublicPutTargetingRequest"];
+                    "text/json": components["schemas"]["PublicPutTargetingRequest"];
+                    "application/*+json": components["schemas"]["PublicPutTargetingRequest"];
                 };
             };
             responses: {
@@ -2158,6 +2073,18 @@ export interface paths {
                     };
                     content?: never;
                 };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
                     headers: {
@@ -2217,7 +2144,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/variations": {
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/rules": {
         parameters: {
             query?: never;
             header?: never;
@@ -2227,10 +2154,11 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * Adds a variation to the resolved flag.
-         * @description Requires at least Member. Re-fetches the flag via
-         *     GetFeatureFlagQuery and locates the new variation by the id returned from
-         *     AddVariationCommand so the response reflects exactly what was persisted.
+         * Creates a targeting rule on the resolved flag in the resolved environment.
+         * @description Requires at
+         *     least Member. Re-fetches via GetTargetingRuleQuery using the id returned
+         *     from CreateTargetingRuleCommand so the response reflects exactly what was
+         *     persisted (e.g. server-assigned priority and condition/group ids).
          */
         post: {
             parameters: {
@@ -2240,14 +2168,15 @@ export interface paths {
                     org: string;
                     project: string;
                     flag: string;
+                    env: string;
                 };
                 cookie?: never;
             };
             requestBody?: {
                 content: {
-                    "application/json": components["schemas"]["PublicAddVariationRequest"];
-                    "text/json": components["schemas"]["PublicAddVariationRequest"];
-                    "application/*+json": components["schemas"]["PublicAddVariationRequest"];
+                    "application/json": components["schemas"]["PublicCreateTargetingRuleRequest"];
+                    "text/json": components["schemas"]["PublicCreateTargetingRuleRequest"];
+                    "application/*+json": components["schemas"]["PublicCreateTargetingRuleRequest"];
                 };
             };
             responses: {
@@ -2260,7 +2189,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicVariationResponse"];
+                        "application/json": components["schemas"]["PublicTargetingRuleResponse"];
                     };
                 };
                 /** @description Bad Request */
@@ -2333,19 +2262,15 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/variations/{variationId}": {
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/rules/{ruleId}": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        get?: never;
-        /**
-         * Updates a variation's name/value/description.
-         * @description Requires at least Member. The variation's key is immutable via this endpoint.
-         */
-        put: {
+        /** Gets a single targeting rule on the resolved flag in the resolved environment by id. */
+        get: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -2353,15 +2278,1111 @@ export interface paths {
                     org: string;
                     project: string;
                     flag: string;
-                    variationId: string;
+                    env: string;
+                    ruleId: string;
                 };
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["PublicUpdateVariationRequest"];
-                    "text/json": components["schemas"]["PublicUpdateVariationRequest"];
-                    "application/*+json": components["schemas"]["PublicUpdateVariationRequest"];
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicTargetingRuleResponse"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        /**
+         * Updates a targeting rule's variation/description/rollout/segment/conditions wholesale.
+         * @description Requires at least Member.
+         */
+        put: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    flag: string;
+                    env: string;
+                    ruleId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicUpdateTargetingRuleRequest"];
+                    "text/json": components["schemas"]["PublicUpdateTargetingRuleRequest"];
+                    "application/*+json": components["schemas"]["PublicUpdateTargetingRuleRequest"];
+                };
+            };
+            responses: {
+                /** @description No Content */
+                204: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        post?: never;
+        /**
+         * Deletes a targeting rule from the resolved flag in the resolved environment.
+         * @description Requires at least Member.
+         */
+        delete: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    flag: string;
+                    env: string;
+                    ruleId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description No Content */
+                204: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/rules/reorder": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Reorders the resolved flag's targeting rules in the resolved environment by priority.
+         * @description Requires at least Member. Must include every existing rule id exactly once — see the
+         *     type-level remarks on the dup/omission 500 wart.
+         */
+        put: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    flag: string;
+                    env: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicReorderRulesRequest"];
+                    "text/json": components["schemas"]["PublicReorderRulesRequest"];
+                    "application/*+json": components["schemas"]["PublicReorderRulesRequest"];
+                };
+            };
+            responses: {
+                /** @description No Content */
+                204: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/variations": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Adds a variation to the resolved flag.
+         * @description Requires at least Member. Re-fetches the flag via
+         *     GetFeatureFlagQuery and locates the new variation by the id returned from
+         *     AddVariationCommand so the response reflects exactly what was persisted.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    flag: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicAddVariationRequest"];
+                    "text/json": components["schemas"]["PublicAddVariationRequest"];
+                    "application/*+json": components["schemas"]["PublicAddVariationRequest"];
+                };
+            };
+            responses: {
+                /** @description Created */
+                201: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicVariationResponse"];
+                    };
+                };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/variations/{variationId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Updates a variation's name/value/description.
+         * @description Requires at least Member. The variation's key is immutable via this endpoint.
+         */
+        put: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    flag: string;
+                    variationId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicUpdateVariationRequest"];
+                    "text/json": components["schemas"]["PublicUpdateVariationRequest"];
+                    "application/*+json": components["schemas"]["PublicUpdateVariationRequest"];
+                };
+            };
+            responses: {
+                /** @description No Content */
+                204: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        post?: never;
+        /**
+         * Removes a variation from the resolved flag.
+         * @description Requires at least Member. A variation with
+         *     dependents (used as default variation, referenced by a targeting rule, or flagged
+         *     `VARIATION_HAS_DEPENDENTS`) throws the existing
+         *     ValidationException, which the
+         *     exception filter maps to a 400 `validation_failed` envelope — this action doesn't
+         *     special-case it.
+         */
+        delete: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    flag: string;
+                    variationId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description No Content */
+                204: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/me": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Returns the authenticated caller's public identity (see MeResponse). */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["MeResponse"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Lists the caller's organizations, cursor-paginated. */
+        get: {
+            parameters: {
+                query?: {
+                    limit?: number;
+                    cursor?: string;
+                };
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["OrganizationResponsePagedResult"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Gets one of the caller's organizations by slug or id. */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["OrganizationResponse"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/projects": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Lists projects in the resolved organization, cursor-paginated. */
+        get: {
+            parameters: {
+                query?: {
+                    limit?: number;
+                    cursor?: string;
+                };
+                header?: never;
+                path: {
+                    org: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProjectResponsePagedResult"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        /**
+         * Creates a project in the resolved organization.
+         * @description Requires at least Member.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicCreateProjectRequest"];
+                    "text/json": components["schemas"]["PublicCreateProjectRequest"];
+                    "application/*+json": components["schemas"]["PublicCreateProjectRequest"];
+                };
+            };
+            responses: {
+                /** @description Created */
+                201: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProjectResponse"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/projects/{project}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Gets a project in the resolved organization by key or id. */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProjectResponse"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        /**
+         * Updates a project's name/description.
+         * @description Requires at least Member.
+         */
+        put: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicUpdateProjectRequest"];
+                    "text/json": components["schemas"]["PublicUpdateProjectRequest"];
+                    "application/*+json": components["schemas"]["PublicUpdateProjectRequest"];
                 };
             };
             responses: {
@@ -2429,37 +3450,206 @@ export interface paths {
         };
         post?: never;
         /**
-         * Removes a variation from the resolved flag.
-         * @description Requires at least Member. A variation with
-         *     dependents (used as default variation, referenced by a targeting rule, or flagged
-         *     `VARIATION_HAS_DEPENDENTS`) throws the existing
-         *     ValidationException, which the
-         *     exception filter maps to a 400 `validation_failed` envelope — this action doesn't
-         *     special-case it.
+         * Deletes a project.
+         * @description Requires at least Member.
+         */
+        delete: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description No Content */
+                204: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/projects/{project}/environments/{env}/sdk-keys": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Lists SDK keys in the resolved environment, cursor-paginated.
+         * @description Like
+         *     List, ListSdkKeysQuery has no
+         *     `Skip`/`Take` (an environment's key count is small), so this fetches the full
+         *     set and pages in-memory to still expose the standard cursor contract.
+         */
+        get: {
+            parameters: {
+                query?: {
+                    limit?: number;
+                    cursor?: string;
+                };
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    env: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicSdkKeyResponsePagedResult"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        /**
+         * Creates an SDK key in the resolved environment.
+         * @description Requires at least Member. Returns the
+         *     plaintext key exactly once — see the type-level remarks.
          */
-        delete: {
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
                     org: string;
                     project: string;
-                    flag: string;
-                    variationId: string;
+                    env: string;
                 };
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicCreateSdkKeyRequest"];
+                    "text/json": components["schemas"]["PublicCreateSdkKeyRequest"];
+                    "application/*+json": components["schemas"]["PublicCreateSdkKeyRequest"];
+                };
+            };
             responses: {
-                /** @description No Content */
-                204: {
+                /** @description Created */
+                201: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
                         "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
                         [name: string]: unknown;
                     };
-                    content?: never;
+                    content: {
+                        "application/json": components["schemas"]["PublicCreateSdkKeyResponse"];
+                    };
                 };
                 /** @description Bad Request */
                 400: {
@@ -2525,24 +3715,30 @@ export interface paths {
                 };
             };
         };
+        delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/v1/me": {
+    "/api/v1/orgs/{org}/projects/{project}/environments/{env}/sdk-keys/{sdkKey}": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /** Returns the authenticated caller's public identity (see MeResponse). */
+        /** Gets an SDK key in the resolved environment by id (guid-only — see the type-level remarks). */
         get: {
             parameters: {
                 query?: never;
                 header?: never;
-                path?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    env: string;
+                    sdkKey: string;
+                };
                 cookie?: never;
             };
             requestBody?: never;
@@ -2556,10 +3752,10 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["MeResponse"];
+                        "application/json": components["schemas"]["PublicSdkKeyResponse"];
                     };
                 };
-                /** @description Unauthorized */
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
@@ -2571,6 +3767,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
                 429: {
                     headers: {
@@ -2587,45 +3795,39 @@ export interface paths {
                 };
             };
         };
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/api/v1/orgs": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /** Lists the caller's organizations, cursor-paginated. */
-        get: {
+        /**
+         * Updates an SDK key's name/description.
+         * @description Requires at least Member. Type and key material are immutable via this endpoint.
+         */
+        put: {
             parameters: {
-                query?: {
-                    limit?: number;
-                    cursor?: string;
-                };
+                query?: never;
                 header?: never;
-                path?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    env: string;
+                    sdkKey: string;
+                };
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicUpdateSdkKeyRequest"];
+                    "text/json": components["schemas"]["PublicUpdateSdkKeyRequest"];
+                    "application/*+json": components["schemas"]["PublicUpdateSdkKeyRequest"];
+                };
+            };
             responses: {
-                /** @description OK */
-                200: {
+                /** @description No Content */
+                204: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
                         "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
                         [name: string]: unknown;
                     };
-                    content: {
-                        "application/json": components["schemas"]["OrganizationResponsePagedResult"];
-                    };
+                    content?: never;
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
@@ -2639,6 +3841,30 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
                 429: {
                     headers: {
@@ -2655,7 +3881,6 @@ export interface paths {
                 };
             };
         };
-        put?: never;
         post?: never;
         delete?: never;
         options?: never;
@@ -2663,36 +3888,42 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}": {
+    "/api/v1/orgs/{org}/projects/{project}/environments/{env}/sdk-keys/{sdkKey}/revoke": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /** Gets one of the caller's organizations by slug or id. */
-        get: {
+        get?: never;
+        put?: never;
+        /**
+         * Revokes an SDK key.
+         * @description Requires at least Member.
+         */
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
                     org: string;
+                    project: string;
+                    env: string;
+                    sdkKey: string;
                 };
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description OK */
-                200: {
+                /** @description No Content */
+                204: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
                         "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
                         [name: string]: unknown;
                     };
-                    content: {
-                        "application/json": components["schemas"]["OrganizationResponse"];
-                    };
+                    content?: never;
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
@@ -2706,6 +3937,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Not Found */
                 404: {
                     headers: {
@@ -2734,22 +3977,26 @@ export interface paths {
                 };
             };
         };
-        put?: never;
-        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects": {
+    "/api/v1/orgs/{org}/projects/{project}/segments": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /** Lists projects in the resolved organization, cursor-paginated. */
+        /**
+         * Lists user segments in the resolved project, cursor-paginated.
+         * @description Like
+         *     List, ListUserSegmentsQuery has no
+         *     `Skip`/`Take` (a project's segment count is small), so this fetches the full set
+         *     and pages in-memory to still expose the standard cursor contract.
+         */
         get: {
             parameters: {
                 query?: {
@@ -2759,6 +4006,7 @@ export interface paths {
                 header?: never;
                 path: {
                     org: string;
+                    project: string;
                 };
                 cookie?: never;
             };
@@ -2773,7 +4021,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ProjectResponsePagedResult"];
+                        "application/json": components["schemas"]["PublicSegmentResponsePagedResult"];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -2788,6 +4036,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
                 429: {
                     headers: {
@@ -2806,8 +4066,12 @@ export interface paths {
         };
         put?: never;
         /**
-         * Creates a project in the resolved organization.
-         * @description Requires at least Member.
+         * Creates a user segment in the resolved project.
+         * @description Requires at least Member. Re-fetches via
+         *     ListUserSegmentsQuery (there is no single-segment query) and locates the new
+         *     segment by the id returned from CreateUserSegmentCommand so the response
+         *     reflects exactly what was persisted (e.g. server-assigned condition ids, folded into the
+         *     public shape via FromDto).
          */
         post: {
             parameters: {
@@ -2815,14 +4079,15 @@ export interface paths {
                 header?: never;
                 path: {
                     org: string;
+                    project: string;
                 };
                 cookie?: never;
             };
             requestBody?: {
                 content: {
-                    "application/json": components["schemas"]["PublicCreateProjectRequest"];
-                    "text/json": components["schemas"]["PublicCreateProjectRequest"];
-                    "application/*+json": components["schemas"]["PublicCreateProjectRequest"];
+                    "application/json": components["schemas"]["PublicCreateSegmentRequest"];
+                    "text/json": components["schemas"]["PublicCreateSegmentRequest"];
+                    "application/*+json": components["schemas"]["PublicCreateSegmentRequest"];
                 };
             };
             responses: {
@@ -2835,7 +4100,19 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ProjectResponse"];
+                        "application/json": components["schemas"]["PublicSegmentResponse"];
+                    };
+                };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -2862,6 +4139,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
                 429: {
                     headers: {
@@ -2884,14 +4173,20 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}": {
+    "/api/v1/orgs/{org}/projects/{project}/segments/{segment}": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /** Gets a project in the resolved organization by key or id. */
+        /**
+         * Gets a user segment in the resolved project by key or id.
+         * @description There is no
+         *     ListUserSegments-adjacent single-item
+         *     query, so this resolves `{segment}` then dispatches ListUserSegmentsQuery
+         *     and finds the match — see the type-level remarks for why a list+find is acceptable here.
+         */
         get: {
             parameters: {
                 query?: never;
@@ -2899,6 +4194,7 @@ export interface paths {
                 path: {
                     org: string;
                     project: string;
+                    segment: string;
                 };
                 cookie?: never;
             };
@@ -2913,7 +4209,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ProjectResponse"];
+                        "application/json": components["schemas"]["PublicSegmentResponse"];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -2957,8 +4253,8 @@ export interface paths {
             };
         };
         /**
-         * Updates a project's name/description.
-         * @description Requires at least Member.
+         * Updates a segment's name/description/conditions.
+         * @description Requires at least Member. The segment's key is immutable via this endpoint.
          */
         put: {
             parameters: {
@@ -2967,14 +4263,15 @@ export interface paths {
                 path: {
                     org: string;
                     project: string;
+                    segment: string;
                 };
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["PublicUpdateProjectRequest"];
-                    "text/json": components["schemas"]["PublicUpdateProjectRequest"];
-                    "application/*+json": components["schemas"]["PublicUpdateProjectRequest"];
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicUpdateSegmentRequest"];
+                    "text/json": components["schemas"]["PublicUpdateSegmentRequest"];
+                    "application/*+json": components["schemas"]["PublicUpdateSegmentRequest"];
                 };
             };
             responses: {
@@ -2988,6 +4285,18 @@ export interface paths {
                     };
                     content?: never;
                 };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
                     headers: {
@@ -3042,7 +4351,7 @@ export interface paths {
         };
         post?: never;
         /**
-         * Deletes a project.
+         * Deletes a user segment.
          * @description Requires at least Member.
          */
         delete: {
@@ -3052,6 +4361,7 @@ export interface paths {
                 path: {
                     org: string;
                     project: string;
+                    segment: string;
                 };
                 cookie?: never;
             };
@@ -3124,7 +4434,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/environments/{env}/sdk-keys": {
+    "/api/v1/orgs/{org}/webhooks": {
         parameters: {
             query?: never;
             header?: never;
@@ -3132,11 +4442,8 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Lists SDK keys in the resolved environment, cursor-paginated.
-         * @description Like
-         *     List, ListSdkKeysQuery has no
-         *     `Skip`/`Take` (an environment's key count is small), so this fetches the full
-         *     set and pages in-memory to still expose the standard cursor contract.
+         * Lists the organization's webhook subscriptions, oldest first.
+         * @description Requires Admin.
          */
         get: {
             parameters: {
@@ -3147,8 +4454,6 @@ export interface paths {
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
-                    env: string;
                 };
                 cookie?: never;
             };
@@ -3163,7 +4468,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicSdkKeyResponsePagedResult"];
+                        "application/json": components["schemas"]["PublicWebhookSubscriptionResponsePagedResult"];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -3178,6 +4483,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Not Found */
                 404: {
                     headers: {
@@ -3208,9 +4525,9 @@ export interface paths {
         };
         put?: never;
         /**
-         * Creates an SDK key in the resolved environment.
-         * @description Requires at least Member. Returns the
-         *     plaintext key exactly once — see the type-level remarks.
+         * Creates a webhook subscription.
+         * @description Requires Admin. The response carries the signing secret,
+         *     which is never shown again. Supports the `Idempotency-Key` header.
          */
         post: {
             parameters: {
@@ -3218,16 +4535,14 @@ export interface paths {
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
-                    env: string;
                 };
                 cookie?: never;
             };
             requestBody?: {
                 content: {
-                    "application/json": components["schemas"]["PublicCreateSdkKeyRequest"];
-                    "text/json": components["schemas"]["PublicCreateSdkKeyRequest"];
-                    "application/*+json": components["schemas"]["PublicCreateSdkKeyRequest"];
+                    "application/json": components["schemas"]["PublicCreateWebhookSubscriptionRequest"];
+                    "text/json": components["schemas"]["PublicCreateWebhookSubscriptionRequest"];
+                    "application/*+json": components["schemas"]["PublicCreateWebhookSubscriptionRequest"];
                 };
             };
             responses: {
@@ -3240,7 +4555,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicCreateSdkKeyResponse"];
+                        "application/json": components["schemas"]["PublicCreateWebhookSubscriptionResponse"];
                     };
                 };
                 /** @description Bad Request */
@@ -3313,23 +4628,23 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/environments/{env}/sdk-keys/{sdkKey}": {
+    "/api/v1/orgs/{org}/webhooks/event-types": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /** Gets an SDK key in the resolved environment by id (guid-only — see the type-level remarks). */
+        /**
+         * Lists the event types a subscription can filter on.
+         * @description Requires Admin.
+         */
         get: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
-                    env: string;
-                    sdkKey: string;
                 };
                 cookie?: never;
             };
@@ -3344,7 +4659,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicSdkKeyResponse"];
+                        "application/json": string[];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -3359,6 +4674,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Not Found */
                 404: {
                     headers: {
@@ -3387,9 +4714,105 @@ export interface paths {
                 };
             };
         };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/webhooks/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
         /**
-         * Updates an SDK key's name/description.
-         * @description Requires at least Member. Type and key material are immutable via this endpoint.
+         * Gets a webhook subscription by id.
+         * @description Requires Admin. Never returns secret values.
+         */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicWebhookSubscriptionResponse"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        /**
+         * Replaces a webhook subscription's configuration.
+         * @description Requires Admin. Omitted lists become empty,
+         *     which means "all".
          */
         put: {
             parameters: {
@@ -3397,17 +4820,15 @@ export interface paths {
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
-                    env: string;
-                    sdkKey: string;
+                    id: string;
                 };
                 cookie?: never;
             };
             requestBody?: {
                 content: {
-                    "application/json": components["schemas"]["PublicUpdateSdkKeyRequest"];
-                    "text/json": components["schemas"]["PublicUpdateSdkKeyRequest"];
-                    "application/*+json": components["schemas"]["PublicUpdateSdkKeyRequest"];
+                    "application/json": components["schemas"]["PublicUpdateWebhookSubscriptionRequest"];
+                    "text/json": components["schemas"]["PublicUpdateWebhookSubscriptionRequest"];
+                    "application/*+json": components["schemas"]["PublicUpdateWebhookSubscriptionRequest"];
                 };
             };
             responses: {
@@ -3421,6 +4842,18 @@ export interface paths {
                     };
                     content?: never;
                 };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
                     headers: {
@@ -3474,34 +4907,17 @@ export interface paths {
             };
         };
         post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/api/v1/orgs/{org}/projects/{project}/environments/{env}/sdk-keys/{sdkKey}/revoke": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
         /**
-         * Revokes an SDK key.
-         * @description Requires at least Member.
+         * Deletes a webhook subscription with its secrets and delivery log.
+         * @description Requires Admin.
          */
-        post: {
+        delete: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
-                    env: string;
-                    sdkKey: string;
+                    id: string;
                 };
                 cookie?: never;
             };
@@ -3569,43 +4985,41 @@ export interface paths {
                 };
             };
         };
-        delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/segments": {
+    "/api/v1/orgs/{org}/webhooks/{id}/secrets": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
+        get?: never;
+        put?: never;
         /**
-         * Lists user segments in the resolved project, cursor-paginated.
-         * @description Like
-         *     List, ListUserSegmentsQuery has no
-         *     `Skip`/`Take` (a project's segment count is small), so this fetches the full set
-         *     and pages in-memory to still expose the standard cursor contract.
+         * Adds a new active signing secret.
+         * @description Requires Admin. The previous secret keeps signing until
+         *     you retire it, so receivers can switch over without dropping deliveries. The response
+         *     carries the new secret, which is never shown again. Supports the `Idempotency-Key`
+         *     header.
          */
-        get: {
+        post: {
             parameters: {
-                query?: {
-                    limit?: number;
-                    cursor?: string;
-                };
+                query?: never;
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
+                    id: string;
                 };
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description OK */
-                200: {
+                /** @description Created */
+                201: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
@@ -3613,7 +5027,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicSegmentResponsePagedResult"];
+                        "application/json": components["schemas"]["PublicRotateWebhookSecretResponse"];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -3628,6 +5042,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Not Found */
                 404: {
                     headers: {
@@ -3656,44 +5082,49 @@ export interface paths {
                 };
             };
         };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/webhooks/{id}/secrets/{secretId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
         put?: never;
-        /**
-         * Creates a user segment in the resolved project.
-         * @description Requires at least Member. Re-fetches via
-         *     ListUserSegmentsQuery (there is no single-segment query) and locates the new
-         *     segment by the id returned from CreateUserSegmentCommand so the response
-         *     reflects exactly what was persisted (e.g. server-assigned condition ids, folded into the
-         *     public shape via FromDto).
+        post?: never;
+        /**
+         * Retires a signing secret.
+         * @description Requires Admin. Refused with a 400 when it is the subscription's
+         *     last active secret — rotate first.
          */
-        post: {
+        delete: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
+                    id: string;
+                    secretId: string;
                 };
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["PublicCreateSegmentRequest"];
-                    "text/json": components["schemas"]["PublicCreateSegmentRequest"];
-                    "application/*+json": components["schemas"]["PublicCreateSegmentRequest"];
-                };
-            };
+            requestBody?: never;
             responses: {
-                /** @description Created */
-                201: {
+                /** @description No Content */
+                204: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
                         "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
                         [name: string]: unknown;
                     };
-                    content: {
-                        "application/json": components["schemas"]["PublicSegmentResponse"];
-                    };
+                    content?: never;
                 };
                 /** @description Bad Request */
                 400: {
@@ -3759,41 +5190,40 @@ export interface paths {
                 };
             };
         };
-        delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/segments/{segment}": {
+    "/api/v1/orgs/{org}/webhooks/{id}/test": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
+        get?: never;
+        put?: never;
         /**
-         * Gets a user segment in the resolved project by key or id.
-         * @description There is no
-         *     ListUserSegments-adjacent single-item
-         *     query, so this resolves `{segment}` then dispatches ListUserSegmentsQuery
-         *     and finds the match — see the type-level remarks for why a list+find is acceptable here.
+         * Queues one synthetic `flag.toggled` event for this subscription alone.
+         * @description Requires Admin.
+         *     Delivery is asynchronous — read the delivery log for the outcome. Refused with a 400 when
+         *     the subscription is disabled.
          */
-        get: {
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
-                    segment: string;
+                    id: string;
                 };
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description OK */
-                200: {
+                /** @description Accepted */
+                202: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
@@ -3801,7 +5231,19 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicSegmentResponse"];
+                        "application/json": components["schemas"]["PublicTestWebhookSubscriptionResponse"];
+                    };
+                };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -3816,6 +5258,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Not Found */
                 404: {
                     headers: {
@@ -3844,41 +5298,40 @@ export interface paths {
                 };
             };
         };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/webhooks/{id}/deliveries": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
         /**
-         * Updates a segment's name/description/conditions.
-         * @description Requires at least Member. The segment's key is immutable via this endpoint.
+         * Lists a subscription's delivery attempts, most recent first.
+         * @description Requires Admin.
          */
-        put: {
+        get: {
             parameters: {
-                query?: never;
+                query?: {
+                    limit?: number;
+                    cursor?: string;
+                };
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
-                    segment: string;
+                    id: string;
                 };
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["PublicUpdateSegmentRequest"];
-                    "text/json": components["schemas"]["PublicUpdateSegmentRequest"];
-                    "application/*+json": components["schemas"]["PublicUpdateSegmentRequest"];
-                };
-            };
+            requestBody?: never;
             responses: {
-                /** @description No Content */
-                204: {
-                    headers: {
-                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
-                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
-                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
-                        [name: string]: unknown;
-                    };
-                    content?: never;
-                };
-                /** @description Bad Request */
-                400: {
+                /** @description OK */
+                200: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
@@ -3886,7 +5339,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                        "application/json": components["schemas"]["PublicWebhookDeliveryResponsePagedResult"];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -3941,19 +5394,37 @@ export interface paths {
                 };
             };
         };
+        put?: never;
         post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/webhooks/{id}/deliveries/{deliveryId}/redeliver": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
         /**
-         * Deletes a user segment.
-         * @description Requires at least Member.
+         * Queues a finished delivery (succeeded or dead-lettered) to be sent again, restarting its retry schedule.
+         * @description Requires Admin. Refused with a 400 when the delivery is still pending, when
+         *     the subscription is disabled, or when the delivery's event belongs to a project the
+         *     subscription no longer covers.
          */
-        delete: {
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
-                    segment: string;
+                    id: string;
+                    deliveryId: string;
                 };
                 cookie?: never;
             };
@@ -3969,6 +5440,18 @@ export interface paths {
                     };
                     content?: never;
                 };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
                     headers: {
@@ -4021,6 +5504,7 @@ export interface paths {
                 };
             };
         };
+        delete?: never;
         options?: never;
         head?: never;
         patch?: never;
@@ -4271,7 +5755,12 @@ export interface components {
          *     schemaId-collision rationale (both controllers share one Swagger document). Type
          *     is passed through verbatim to Type, which itself takes a
          *     bare string (Boolean/String/Number/Json) rather than the domain enum — invalid values surface
-         *     as the handler's own validation failure, not a controller-level 400.
+         *     as the handler's own validation failure, not a controller-level 400. ExpiresAtUtc is
+         *     optional and advisory; it must be in the future and requires the flag-expiration feature
+         *     (400 `EXPIRY_IN_PAST` / `FEATURE_NOT_ENABLED`). OwnerEmail optionally names
+         *     the owner (an active member, matched case-insensitively; requires the flag-ownership feature —
+         *     400 `OWNER_NOT_MEMBER` / `FEATURE_NOT_ENABLED`). Omitted, the owner is the caller when
+         *     the caller is a member, so a service token creates an unowned flag.
          * @example {
          *       "key": "new-checkout-flow",
          *       "name": "New Checkout Flow",
@@ -4310,6 +5799,9 @@ export interface components {
             tags?: string[] | null;
             initialVariations?: components["schemas"]["PublicCreateVariationDto"][] | null;
             clientSideVisible?: boolean;
+            /** Format: date-time */
+            expiresAtUtc?: string | null;
+            ownerEmail?: string | null;
         };
         /**
          * @description Request body for `POST /api/v1/orgs/{org}/projects`. Named distinctly from the
@@ -4460,6 +5952,53 @@ export interface components {
             value?: string | null;
             description?: string | null;
         };
+        /**
+         * @description Creates a webhook subscription. `provider` is `GenericHttp`. Omit `eventTypes`,
+         *     `projectIds` or `environmentIds` (or send an empty list) to receive every event,
+         *     project or environment. A token restricted to specific projects must list at least one project,
+         *     all of them within its allowlist.
+         * @example {
+         *       "name": "Checkout flag changes to Slack relay",
+         *       "url": "https://hooks.acme.example/featureflip",
+         *       "provider": "GenericHttp",
+         *       "eventTypes": [
+         *         "flag.toggled",
+         *         "flag.updated"
+         *       ],
+         *       "projectIds": [
+         *         "0197b69f-1a2b-7c3d-8e4f-5a6b7c8d9e0f"
+         *       ],
+         *       "environmentIds": [
+         *         "0197b69f-2b3c-7d4e-9f5a-6b7c8d9e0f1a"
+         *       ]
+         *     }
+         */
+        PublicCreateWebhookSubscriptionRequest: {
+            name?: string | null;
+            url?: string | null;
+            /**
+             * @description Allowed values: GenericHttp.
+             * @enum {string|null}
+             */
+            provider?: "GenericHttp" | null;
+            eventTypes?: string[] | null;
+            projectIds?: string[] | null;
+            environmentIds?: string[] | null;
+        };
+        /**
+         * @description The created subscription's id and its signing secret. The secret is shown only here.
+         * @example {
+         *       "id": "0197b6a4-6f7a-7b8c-9d0e-1f2a3b4c5d6e",
+         *       "secret": "whsec_q2Vb8XJ1s0mYpZ4tK7wRr3uN9cL6aD5eF1gH2iJ3kL4=",
+         *       "warning": "Store this secret securely — it will not be shown again."
+         *     }
+         */
+        PublicCreateWebhookSubscriptionResponse: {
+            /** Format: uuid */
+            id?: string;
+            secret?: string | null;
+            warning?: string | null;
+        };
         /**
          * @description Public representation of an environment, returned by
          *     `GET /api/v1/orgs/{org}/projects/{project}/environments` (list),
@@ -4569,6 +6108,9 @@ export interface components {
             createdAt?: string;
             /** Format: date-time */
             updatedAt?: string;
+            /** Format: date-time */
+            expiresAtUtc?: string | null;
+            owner?: components["schemas"]["PublicFlagOwner"];
         };
         /**
          * @description A page of results plus an opaque cursor for the next page, or null when this is the last
@@ -4602,6 +6144,13 @@ export interface components {
                 [key: string]: components["schemas"]["ActionCapability"];
             };
         };
+        /** @description A flag's owner as returned on flag reads. Null means the flag is unowned. */
+        PublicFlagOwner: {
+            /** Format: uuid */
+            id?: string;
+            email?: string | null;
+            name?: string | null;
+        };
         /**
          * @description One dead flag the Featureflip Flag Cleanup Action should remove, returned by
          *     `GET .../flags/removal-candidates`. `Treatment` is the kill decision: true → keep the
@@ -4682,6 +6231,9 @@ export interface components {
             createdAt?: string;
             /** Format: date-time */
             updatedAt?: string;
+            /** Format: date-time */
+            expiresAtUtc?: string | null;
+            owner?: components["schemas"]["PublicFlagOwner"];
             /** @description Capability hints: which operations the authenticated caller may perform on this resource, each with allowed + optional reason. Computed from the caller's role and the resource's state. Injected at runtime; safe to ignore. Present only on top-level resource responses — nested occurrences (e.g. a rule inside a targeting-config response) do not carry it. */
             _actions?: {
                 [key: string]: components["schemas"]["ActionCapability"];
@@ -4719,6 +6271,13 @@ export interface components {
         PublicReorderRulesRequest: {
             ruleIds?: string[] | null;
         };
+        /** @description A newly added signing secret. The secret is shown only here. */
+        PublicRotateWebhookSecretResponse: {
+            /** Format: uuid */
+            secretId?: string;
+            secret?: string | null;
+            warning?: string | null;
+        };
         /**
          * @description Public representation of an SDK key, returned by
          *     `GET /api/v1/orgs/{org}/projects/{project}/environments/{env}/sdk-keys` (list) and
@@ -4843,6 +6402,25 @@ export interface components {
                 [key: string]: components["schemas"]["ActionCapability"];
             };
         };
+        /**
+         * @description Request body for `PUT /api/v1/orgs/{org}/projects/{project}/flags/{flag}/expiry`. Expiry is a
+         *     dedicated sub-resource, deliberately NOT a field on PublicUpdateFeatureFlagRequest: that
+         *     PUT is a full replace, so a new nullable field there would let any client that doesn't know about
+         *     expiry (the Terraform provider included) wipe it on every update.
+         */
+        PublicSetFlagExpiryRequest: {
+            /** Format: date-time */
+            expiresAtUtc?: string;
+        };
+        /**
+         * @description Request body for `PUT /api/v1/orgs/{org}/projects/{project}/flags/{flag}/owner`. A dedicated
+         *     sub-resource for the same reason as expiry: the main flag PUT is a full replace, so an owner field
+         *     there would let every client that doesn't know about owners wipe one. `email` must belong
+         *     to an active member of the organization (case-insensitive).
+         */
+        PublicSetFlagOwnerRequest: {
+            email?: string | null;
+        };
         /**
          * @description The full targeting configuration for a flag in a single environment, returned by
          *     `GET .../targeting`. Maps 1:1 onto TargetingConfigurationDto — including
@@ -4906,6 +6484,13 @@ export interface components {
                 [key: string]: components["schemas"]["ActionCapability"];
             };
         };
+        /** @description The queued test event and its delivery. Poll the delivery log for the outcome. */
+        PublicTestWebhookSubscriptionResponse: {
+            /** Format: uuid */
+            webhookEventId?: string;
+            /** Format: uuid */
+            webhookDeliveryId?: string;
+        };
         /**
          * @description Request body for `POST .../flags/{flag}/environments/{env}/toggle`. Named distinctly from
          *     the dashboard's own `ToggleFlagInEnvironmentRequest`
@@ -5030,6 +6615,18 @@ export interface components {
             value?: string | null;
             description?: string | null;
         };
+        /**
+         * @description Replaces a subscription's configuration (full replace — omitted lists become empty, meaning
+         *     "all"). `isEnabled` is required. The provider cannot be changed.
+         */
+        PublicUpdateWebhookSubscriptionRequest: {
+            name?: string | null;
+            url?: string | null;
+            eventTypes?: string[] | null;
+            projectIds?: string[] | null;
+            environmentIds?: string[] | null;
+            isEnabled?: boolean | null;
+        };
         /**
          * @description A single variation on a flag, as returned in Variations.
          * @example {
@@ -5052,6 +6649,121 @@ export interface components {
                 [key: string]: components["schemas"]["ActionCapability"];
             };
         };
+        /**
+         * @description One delivery attempt record. `status` is `Pending` (awaiting its first attempt,
+         *     backing off, or in flight), `Succeeded` or `DeadLettered`.
+         */
+        PublicWebhookDeliveryResponse: {
+            /** Format: uuid */
+            id?: string;
+            /** Format: uuid */
+            webhookEventId?: string;
+            /**
+             * @description Allowed values: Pending, Succeeded, DeadLettered.
+             * @enum {string|null}
+             */
+            status?: "Pending" | "Succeeded" | "DeadLettered" | null;
+            /** Format: int32 */
+            attemptCount?: number;
+            /** Format: date-time */
+            nextAttemptAt?: string;
+            /** Format: int32 */
+            lastResponseStatusCode?: number | null;
+            lastError?: string | null;
+            /** Format: date-time */
+            completedAt?: string | null;
+            /** Format: date-time */
+            createdAt?: string;
+        };
+        /**
+         * @description A page of results plus an opaque cursor for the next page, or null when this is the last
+         *     page. Wire keys are frozen: `items` (already lowercase under the camelCase policy) and
+         *     `next_cursor` (pinned explicitly — the policy alone would emit `nextCursor`).
+         */
+        PublicWebhookDeliveryResponsePagedResult: {
+            items?: components["schemas"]["PublicWebhookDeliveryResponse"][] | null;
+            next_cursor?: string | null;
+        };
+        /** @description A signing secret's id and lifecycle. A secret with no `retiredAt` is active and signs every delivery. */
+        PublicWebhookSecretResponse: {
+            /** Format: uuid */
+            id?: string;
+            /** Format: date-time */
+            createdAt?: string;
+            /** Format: date-time */
+            retiredAt?: string | null;
+        };
+        /**
+         * @description A webhook subscription. Never carries secret material: signing secrets are listed by id and
+         *     lifecycle only — the value itself is returned once, when it is created or rotated.
+         * @example {
+         *       "id": "0197b6a4-6f7a-7b8c-9d0e-1f2a3b4c5d6e",
+         *       "name": "Checkout flag changes to Slack relay",
+         *       "url": "https://hooks.acme.example/featureflip",
+         *       "provider": "GenericHttp",
+         *       "isEnabled": true,
+         *       "eventTypes": [
+         *         "flag.toggled",
+         *         "flag.updated"
+         *       ],
+         *       "projectIds": [
+         *         "0197b69f-1a2b-7c3d-8e4f-5a6b7c8d9e0f"
+         *       ],
+         *       "environmentIds": [
+         *         "0197b69f-2b3c-7d4e-9f5a-6b7c8d9e0f1a"
+         *       ],
+         *       "consecutiveFailureCount": 0,
+         *       "createdAt": "2026-06-01T12:00:00Z",
+         *       "updatedAt": "2026-06-15T08:30:00Z",
+         *       "secrets": [
+         *         {
+         *           "id": "0197b6a4-7a8b-7c9d-8e0f-2a3b4c5d6e7f",
+         *           "createdAt": "2026-06-01T12:00:00Z"
+         *         }
+         *       ]
+         *     }
+         */
+        PublicWebhookSubscriptionResponse: {
+            /** Format: uuid */
+            id?: string;
+            name?: string | null;
+            url?: string | null;
+            /**
+             * @description Allowed values: GenericHttp.
+             * @enum {string|null}
+             */
+            provider?: "GenericHttp" | null;
+            isEnabled?: boolean;
+            eventTypes?: string[] | null;
+            projectIds?: string[] | null;
+            environmentIds?: string[] | null;
+            /** Format: int32 */
+            consecutiveFailureCount?: number;
+            /** Format: date-time */
+            autoDisabledAt?: string | null;
+            /** Format: date-time */
+            createdAt?: string;
+            /** Format: date-time */
+            updatedAt?: string;
+            secrets?: components["schemas"]["PublicWebhookSecretResponse"][] | null;
+            /** @description Capability hints: which operations the authenticated caller may perform on this resource, each with allowed + optional reason. Computed from the caller's role and the resource's state. Injected at runtime; safe to ignore. Present only on top-level resource responses — nested occurrences (e.g. a rule inside a targeting-config response) do not carry it. */
+            _actions?: {
+                [key: string]: components["schemas"]["ActionCapability"];
+            };
+        };
+        /**
+         * @description A page of results plus an opaque cursor for the next page, or null when this is the last
+         *     page. Wire keys are frozen: `items` (already lowercase under the camelCase policy) and
+         *     `next_cursor` (pinned explicitly — the policy alone would emit `nextCursor`).
+         */
+        PublicWebhookSubscriptionResponsePagedResult: {
+            items?: components["schemas"]["PublicWebhookSubscriptionResponse"][] | null;
+            next_cursor?: string | null;
+            /** @description Capability hints: which operations the authenticated caller may perform on this resource, each with allowed + optional reason. Computed from the caller's role and the resource's state. Injected at runtime; safe to ignore. Present only on top-level resource responses — nested occurrences (e.g. a rule inside a targeting-config response) do not carry it. */
+            _actions?: {
+                [key: string]: components["schemas"]["ActionCapability"];
+            };
+        };
     };
     responses: never;
     parameters: never;