@featureflip/mcp 0.1.7 → 0.1.9

package/dist/generated/api-types.d.ts

@@ -443,7 +443,8 @@ export interface paths {
          *     computed from the query result rather than an in-memory count. `type` is parsed
          *     leniently — an unrecognized value degrades to "no type filter" (matching
          *     Decode's "garbage input degrades gracefully" precedent)
-         *     rather than a 400, since it's a non-critical list filter, not a mutation.
+         *     rather than a 400, since it's a non-critical list filter, not a mutation. `owner` filters
+         *     by owner: an email (an active member, case-insensitive) or `none` for unowned flags.
          */
         get: {
             parameters: {
@@ -454,6 +455,7 @@ export interface paths {
                     archived?: boolean;
                     limit?: number;
                     cursor?: string;
+                    owner?: string;
                 };
                 header?: never;
                 path: {
@@ -980,7 +982,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/archive": {
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/expiry": {
         parameters: {
             query?: never;
             header?: never;
@@ -988,21 +990,18 @@ export interface paths {
             cookie?: never;
         };
         get?: never;
-        put?: never;
         /**
-         * Archives a flag.
-         * @description Requires at least Member.
+         * Sets the flag's advisory expiry date.
+         * @description Evaluation never changes when it passes — the flag is
+         *     reported stale so it can be cleaned up. Requires at least Member. `expiresAtUtc` takes a
+         *     date (`2026-12-01`), which means the end of that day in UTC, the same as picking it in the
+         *     dashboard, or a full ISO-8601 timestamp, which is stored exactly. It must be in the future
+         *     (400 `EXPIRY_IN_PAST`), so today's date is accepted, and the flag-expiration feature must
+         *     be enabled (400 `FEATURE_NOT_ENABLED`).
          */
-        post: {
+        put: {
             parameters: {
-                query?: {
-                    /**
-                     * @description Archive even though live traffic is still evaluating the flag. Without it the request is
-                     *     refused with `FLAG_RECENTLY_EVALUATED` naming the environments still reading it — which
-                     *     usually means the removal has merged but not yet deployed.
-                     */
-                    force?: boolean;
-                };
+                query?: never;
                 header?: never;
                 path: {
                     org: string;
@@ -1011,7 +1010,13 @@ export interface paths {
                 };
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicSetFlagExpiryRequest"];
+                    "text/json": components["schemas"]["PublicSetFlagExpiryRequest"];
+                    "application/*+json": components["schemas"]["PublicSetFlagExpiryRequest"];
+                };
+            };
             responses: {
                 /** @description No Content */
                 204: {
@@ -1087,26 +1092,13 @@ export interface paths {
                 };
             };
         };
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/restore": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
+        post?: never;
         /**
-         * Restores a previously archived flag.
-         * @description Requires at least Member.
+         * Removes the flag's expiry date.
+         * @description Requires at least Member. Always allowed, even when
+         *      the flag-expiration feature is disabled.
          */
-        post: {
+        delete: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -1181,21 +1173,26 @@ export interface paths {
                 };
             };
         };
-        delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments": {
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/owner": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /** Gets the resolved flag's config in every environment of the resolved project. */
-        get: {
+        get?: never;
+        /**
+         * Assigns the flag's owner by email.
+         * @description Requires at least Member. The email must belong to an
+         *     active member of the organization (400 `OWNER_NOT_MEMBER`) and the flag-ownership feature
+         *     must be enabled (400 `FEATURE_NOT_ENABLED`).
+         */
+        put: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -1206,10 +1203,26 @@ export interface paths {
                 };
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicSetFlagOwnerRequest"];
+                    "text/json": components["schemas"]["PublicSetFlagOwnerRequest"];
+                    "application/*+json": components["schemas"]["PublicSetFlagOwnerRequest"];
+                };
+            };
             responses: {
-                /** @description OK */
-                200: {
+                /** @description No Content */
+                204: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Bad Request */
+                400: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
@@ -1217,7 +1230,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicFlagEnvConfigResponse"][];
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -1232,6 +1245,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Not Found */
                 404: {
                     headers: {
@@ -1260,29 +1285,13 @@ export interface paths {
                 };
             };
         };
-        put?: never;
         post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
         /**
-         * Gets the resolved flag's config in a single resolved environment.
-         * @description There is no
-         *     single-environment query on the Application side, so this dispatches the same
-         *     GetFlagEnvironmentConfigurationsQuery as GetAll and finds the
-         *     resolved environment by id.
+         * Leaves the flag unowned.
+         * @description Requires at least Member. Always allowed, even when the
+         *      flag-ownership feature is disabled.
          */
-        get: {
+        delete: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -1290,23 +1299,20 @@ export interface paths {
                     org: string;
                     project: string;
                     flag: string;
-                    env: string;
                 };
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description OK */
-                200: {
+                /** @description No Content */
+                204: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
                         "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
                         [name: string]: unknown;
                     };
-                    content: {
-                        "application/json": components["schemas"]["PublicFlagEnvConfigResponse"];
-                    };
+                    content?: never;
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
@@ -1320,6 +1326,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Not Found */
                 404: {
                     headers: {
@@ -1348,11 +1366,23 @@ export interface paths {
                 };
             };
         };
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/removal-pr": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
         /**
-         * Updates the resolved flag's default variation, strategy, and (optionally) prerequisites in a resolved environment.
-         * @description Requires at least Member. A null
-         *     Prerequisites leaves prerequisites untouched;
-         *     a non-null list replaces them wholesale.
+         * Records the pull request that removes this flag from code, so the flag's owner is sent a link to it.
+         * @description Called by the Featureflip Flag Cleanup Action. Requires at least Member. The URL
+         *     must be an https pull request URL (400 `validation_failed`).
          */
         put: {
             parameters: {
@@ -1362,15 +1392,14 @@ export interface paths {
                     org: string;
                     project: string;
                     flag: string;
-                    env: string;
                 };
                 cookie?: never;
             };
             requestBody?: {
                 content: {
-                    "application/json": components["schemas"]["PublicUpdateFlagEnvConfigRequest"];
-                    "text/json": components["schemas"]["PublicUpdateFlagEnvConfigRequest"];
-                    "application/*+json": components["schemas"]["PublicUpdateFlagEnvConfigRequest"];
+                    "application/json": components["schemas"]["PublicSetFlagRemovalPrRequest"];
+                    "text/json": components["schemas"]["PublicSetFlagRemovalPrRequest"];
+                    "application/*+json": components["schemas"]["PublicSetFlagRemovalPrRequest"];
                 };
             };
             responses: {
@@ -1449,26 +1478,11 @@ export interface paths {
             };
         };
         post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/toggle": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
         /**
-         * Enables or disables the resolved flag in a resolved environment.
+         * Forgets the flag's removal pull request.
          * @description Requires at least Member.
          */
-        post: {
+        delete: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -1476,17 +1490,10 @@ export interface paths {
                     org: string;
                     project: string;
                     flag: string;
-                    env: string;
                 };
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["PublicToggleFlagRequest"];
-                    "text/json": components["schemas"]["PublicToggleFlagRequest"];
-                    "application/*+json": components["schemas"]["PublicToggleFlagRequest"];
-                };
-            };
+            requestBody?: never;
             responses: {
                 /** @description No Content */
                 204: {
@@ -1498,18 +1505,6 @@ export interface paths {
                     };
                     content?: never;
                 };
-                /** @description Bad Request */
-                400: {
-                    headers: {
-                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
-                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
-                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
-                    };
-                };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
                     headers: {
@@ -1562,42 +1557,56 @@ export interface paths {
                 };
             };
         };
-        delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/targeting": {
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/archive": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
+        get?: never;
+        put?: never;
         /**
-         * Gets the resolved flag's full targeting configuration (enabled flag + ordered rules) in the resolved environment.
-         * @description GetTargetingConfigurationQuery returns null when
-         *     no `FlagEnvironmentConfiguration` exists yet for this flag/environment pair — treated
-         *     as 404 here (rather than an empty PublicTargetingConfigResponse) for
-         *     consistency with every other resolved-resource 404 on this surface.
+         * Archives a flag.
+         * @description Requires at least Member.
          */
-        get: {
+        post: {
             parameters: {
-                query?: never;
+                query?: {
+                    /**
+                     * @description Archive even though live traffic is still evaluating the flag. Without it the request is
+                     *     refused with `FLAG_RECENTLY_EVALUATED` naming the environments still reading it — which
+                     *     usually means the removal has merged but not yet deployed.
+                     */
+                    force?: boolean;
+                };
                 header?: never;
                 path: {
                     org: string;
                     project: string;
                     flag: string;
-                    env: string;
                 };
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description OK */
-                200: {
+                /** @description No Content */
+                204: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Bad Request */
+                400: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
@@ -1605,7 +1614,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicTargetingConfigResponse"];
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -1620,6 +1629,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Not Found */
                 404: {
                     headers: {
@@ -1648,13 +1669,26 @@ export interface paths {
                 };
             };
         };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/restore": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
         /**
-         * Declaratively replaces the resolved flag's entire targeting rule set in the resolved environment.
-         * @description The ordered Rules list is applied in
-         *     array order (= evaluation order); an empty or omitted list clears all rules. Segment-scoped
-         *     rules are supported. The replace is atomic. Requires at least Member.
+         * Restores a previously archived flag.
+         * @description Requires at least Member.
          */
-        put: {
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -1662,17 +1696,10 @@ export interface paths {
                     org: string;
                     project: string;
                     flag: string;
-                    env: string;
                 };
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["PublicPutTargetingRequest"];
-                    "text/json": components["schemas"]["PublicPutTargetingRequest"];
-                    "application/*+json": components["schemas"]["PublicPutTargetingRequest"];
-                };
-            };
+            requestBody?: never;
             responses: {
                 /** @description No Content */
                 204: {
@@ -1684,18 +1711,6 @@ export interface paths {
                     };
                     content?: never;
                 };
-                /** @description Bad Request */
-                400: {
-                    headers: {
-                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
-                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
-                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
-                    };
-                };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
                     headers: {
@@ -1748,30 +1763,21 @@ export interface paths {
                 };
             };
         };
-        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/rules": {
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        get?: never;
-        put?: never;
-        /**
-         * Creates a targeting rule on the resolved flag in the resolved environment.
-         * @description Requires at
-         *     least Member. Re-fetches via GetTargetingRuleQuery using the id returned
-         *     from CreateTargetingRuleCommand so the response reflects exactly what was
-         *     persisted (e.g. server-assigned priority and condition/group ids).
-         */
-        post: {
+        /** Gets the resolved flag's config in every environment of the resolved project. */
+        get: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -1779,32 +1785,13 @@ export interface paths {
                     org: string;
                     project: string;
                     flag: string;
-                    env: string;
                 };
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["PublicCreateTargetingRuleRequest"];
-                    "text/json": components["schemas"]["PublicCreateTargetingRuleRequest"];
-                    "application/*+json": components["schemas"]["PublicCreateTargetingRuleRequest"];
-                };
-            };
+            requestBody?: never;
             responses: {
-                /** @description Created */
-                201: {
-                    headers: {
-                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
-                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
-                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["PublicTargetingRuleResponse"];
-                    };
-                };
-                /** @description Bad Request */
-                400: {
+                /** @description OK */
+                200: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
@@ -1812,7 +1799,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                        "application/json": components["schemas"]["PublicFlagEnvConfigResponse"][];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -1827,18 +1814,6 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
-                /** @description Forbidden */
-                403: {
-                    headers: {
-                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
-                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
-                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
-                    };
-                };
                 /** @description Not Found */
                 404: {
                     headers: {
@@ -1867,20 +1842,28 @@ export interface paths {
                 };
             };
         };
+        put?: never;
+        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/rules/{ruleId}": {
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /** Gets a single targeting rule on the resolved flag in the resolved environment by id. */
+        /**
+         * Gets the resolved flag's config in a single resolved environment.
+         * @description There is no
+         *     single-environment query on the Application side, so this dispatches the same
+         *     GetFlagEnvironmentConfigurationsQuery as GetAll and finds the
+         *     resolved environment by id.
+         */
         get: {
             parameters: {
                 query?: never;
@@ -1890,7 +1873,6 @@ export interface paths {
                     project: string;
                     flag: string;
                     env: string;
-                    ruleId: string;
                 };
                 cookie?: never;
             };
@@ -1905,7 +1887,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicTargetingRuleResponse"];
+                        "application/json": components["schemas"]["PublicFlagEnvConfigResponse"];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -1949,8 +1931,10 @@ export interface paths {
             };
         };
         /**
-         * Updates a targeting rule's variation/description/rollout/segment/conditions wholesale.
-         * @description Requires at least Member.
+         * Updates the resolved flag's default variation, strategy, and (optionally) prerequisites in a resolved environment.
+         * @description Requires at least Member. A null
+         *     Prerequisites leaves prerequisites untouched;
+         *     a non-null list replaces them wholesale.
          */
         put: {
             parameters: {
@@ -1961,15 +1945,14 @@ export interface paths {
                     project: string;
                     flag: string;
                     env: string;
-                    ruleId: string;
                 };
                 cookie?: never;
             };
             requestBody?: {
                 content: {
-                    "application/json": components["schemas"]["PublicUpdateTargetingRuleRequest"];
-                    "text/json": components["schemas"]["PublicUpdateTargetingRuleRequest"];
-                    "application/*+json": components["schemas"]["PublicUpdateTargetingRuleRequest"];
+                    "application/json": components["schemas"]["PublicUpdateFlagEnvConfigRequest"];
+                    "text/json": components["schemas"]["PublicUpdateFlagEnvConfigRequest"];
+                    "application/*+json": components["schemas"]["PublicUpdateFlagEnvConfigRequest"];
                 };
             };
             responses: {
@@ -2048,11 +2031,26 @@ export interface paths {
             };
         };
         post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/toggle": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
         /**
-         * Deletes a targeting rule from the resolved flag in the resolved environment.
+         * Enables or disables the resolved flag in a resolved environment.
          * @description Requires at least Member.
          */
-        delete: {
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -2061,11 +2059,16 @@ export interface paths {
                     project: string;
                     flag: string;
                     env: string;
-                    ruleId: string;
                 };
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicToggleFlagRequest"];
+                    "text/json": components["schemas"]["PublicToggleFlagRequest"];
+                    "application/*+json": components["schemas"]["PublicToggleFlagRequest"];
+                };
+            };
             responses: {
                 /** @description No Content */
                 204: {
@@ -2077,6 +2080,18 @@ export interface paths {
                     };
                     content?: never;
                 };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
                     headers: {
@@ -2129,25 +2144,27 @@ export interface paths {
                 };
             };
         };
+        delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/rules/reorder": {
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/targeting": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        get?: never;
         /**
-         * Reorders the resolved flag's targeting rules in the resolved environment by priority.
-         * @description Requires at least Member. Must include every existing rule id exactly once — see the
-         *     type-level remarks on the dup/omission 500 wart.
+         * Gets the resolved flag's full targeting configuration (enabled flag + ordered rules) in the resolved environment.
+         * @description GetTargetingConfigurationQuery returns null when
+         *     no `FlagEnvironmentConfiguration` exists yet for this flag/environment pair — treated
+         *     as 404 here (rather than an empty PublicTargetingConfigResponse) for
+         *     consistency with every other resolved-resource 404 on this surface.
          */
-        put: {
+        get: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -2159,26 +2176,10 @@ export interface paths {
                 };
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["PublicReorderRulesRequest"];
-                    "text/json": components["schemas"]["PublicReorderRulesRequest"];
-                    "application/*+json": components["schemas"]["PublicReorderRulesRequest"];
-                };
-            };
+            requestBody?: never;
             responses: {
-                /** @description No Content */
-                204: {
-                    headers: {
-                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
-                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
-                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
-                        [name: string]: unknown;
-                    };
-                    content?: never;
-                };
-                /** @description Authentication is required, or the supplied API token is invalid or expired. */
-                401: {
+                /** @description OK */
+                200: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
@@ -2186,11 +2187,11 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                        "application/json": components["schemas"]["PublicTargetingConfigResponse"];
                     };
                 };
-                /** @description Forbidden */
-                403: {
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
@@ -2229,29 +2230,13 @@ export interface paths {
                 };
             };
         };
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/variations": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
         /**
-         * Adds a variation to the resolved flag.
-         * @description Requires at least Member. Re-fetches the flag via
-         *     GetFeatureFlagQuery and locates the new variation by the id returned from
-         *     AddVariationCommand so the response reflects exactly what was persisted.
+         * Declaratively replaces the resolved flag's entire targeting rule set in the resolved environment.
+         * @description The ordered Rules list is applied in
+         *     array order (= evaluation order); an empty or omitted list clears all rules. Segment-scoped
+         *     rules are supported. The replace is atomic. Requires at least Member.
          */
-        post: {
+        put: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -2259,28 +2244,27 @@ export interface paths {
                     org: string;
                     project: string;
                     flag: string;
+                    env: string;
                 };
                 cookie?: never;
             };
             requestBody?: {
                 content: {
-                    "application/json": components["schemas"]["PublicAddVariationRequest"];
-                    "text/json": components["schemas"]["PublicAddVariationRequest"];
-                    "application/*+json": components["schemas"]["PublicAddVariationRequest"];
+                    "application/json": components["schemas"]["PublicPutTargetingRequest"];
+                    "text/json": components["schemas"]["PublicPutTargetingRequest"];
+                    "application/*+json": components["schemas"]["PublicPutTargetingRequest"];
                 };
             };
             responses: {
-                /** @description Created */
-                201: {
+                /** @description No Content */
+                204: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
                         "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
                         [name: string]: unknown;
                     };
-                    content: {
-                        "application/json": components["schemas"]["PublicVariationResponse"];
-                    };
+                    content?: never;
                 };
                 /** @description Bad Request */
                 400: {
@@ -2346,13 +2330,14 @@ export interface paths {
                 };
             };
         };
+        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/variations/{variationId}": {
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/rules": {
         parameters: {
             query?: never;
             header?: never;
@@ -2360,11 +2345,15 @@ export interface paths {
             cookie?: never;
         };
         get?: never;
+        put?: never;
         /**
-         * Updates a variation's name/value/description.
-         * @description Requires at least Member. The variation's key is immutable via this endpoint.
+         * Creates a targeting rule on the resolved flag in the resolved environment.
+         * @description Requires at
+         *     least Member. Re-fetches via GetTargetingRuleQuery using the id returned
+         *     from CreateTargetingRuleCommand so the response reflects exactly what was
+         *     persisted (e.g. server-assigned priority and condition/group ids).
          */
-        put: {
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -2372,27 +2361,1233 @@ export interface paths {
                     org: string;
                     project: string;
                     flag: string;
-                    variationId: string;
+                    env: string;
                 };
                 cookie?: never;
             };
             requestBody?: {
                 content: {
-                    "application/json": components["schemas"]["PublicUpdateVariationRequest"];
-                    "text/json": components["schemas"]["PublicUpdateVariationRequest"];
-                    "application/*+json": components["schemas"]["PublicUpdateVariationRequest"];
+                    "application/json": components["schemas"]["PublicCreateTargetingRuleRequest"];
+                    "text/json": components["schemas"]["PublicCreateTargetingRuleRequest"];
+                    "application/*+json": components["schemas"]["PublicCreateTargetingRuleRequest"];
                 };
             };
             responses: {
-                /** @description No Content */
-                204: {
+                /** @description Created */
+                201: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
                         "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
                         [name: string]: unknown;
                     };
-                    content?: never;
+                    content: {
+                        "application/json": components["schemas"]["PublicTargetingRuleResponse"];
+                    };
+                };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/rules/{ruleId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Gets a single targeting rule on the resolved flag in the resolved environment by id. */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    flag: string;
+                    env: string;
+                    ruleId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicTargetingRuleResponse"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        /**
+         * Updates a targeting rule's variation/description/rollout/segment/conditions wholesale.
+         * @description Requires at least Member.
+         */
+        put: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    flag: string;
+                    env: string;
+                    ruleId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicUpdateTargetingRuleRequest"];
+                    "text/json": components["schemas"]["PublicUpdateTargetingRuleRequest"];
+                    "application/*+json": components["schemas"]["PublicUpdateTargetingRuleRequest"];
+                };
+            };
+            responses: {
+                /** @description No Content */
+                204: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        post?: never;
+        /**
+         * Deletes a targeting rule from the resolved flag in the resolved environment.
+         * @description Requires at least Member.
+         */
+        delete: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    flag: string;
+                    env: string;
+                    ruleId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description No Content */
+                204: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/environments/{env}/rules/reorder": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Reorders the resolved flag's targeting rules in the resolved environment by priority.
+         * @description Requires at least Member. Must include every existing rule id exactly once — see the
+         *     type-level remarks on the dup/omission 500 wart.
+         */
+        put: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    flag: string;
+                    env: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicReorderRulesRequest"];
+                    "text/json": components["schemas"]["PublicReorderRulesRequest"];
+                    "application/*+json": components["schemas"]["PublicReorderRulesRequest"];
+                };
+            };
+            responses: {
+                /** @description No Content */
+                204: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/variations": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Adds a variation to the resolved flag.
+         * @description Requires at least Member. Re-fetches the flag via
+         *     GetFeatureFlagQuery and locates the new variation by the id returned from
+         *     AddVariationCommand so the response reflects exactly what was persisted.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    flag: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicAddVariationRequest"];
+                    "text/json": components["schemas"]["PublicAddVariationRequest"];
+                    "application/*+json": components["schemas"]["PublicAddVariationRequest"];
+                };
+            };
+            responses: {
+                /** @description Created */
+                201: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicVariationResponse"];
+                    };
+                };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/variations/{variationId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Updates a variation's name/value/description.
+         * @description Requires at least Member. The variation's key is immutable via this endpoint.
+         */
+        put: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    flag: string;
+                    variationId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicUpdateVariationRequest"];
+                    "text/json": components["schemas"]["PublicUpdateVariationRequest"];
+                    "application/*+json": components["schemas"]["PublicUpdateVariationRequest"];
+                };
+            };
+            responses: {
+                /** @description No Content */
+                204: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        post?: never;
+        /**
+         * Removes a variation from the resolved flag.
+         * @description Requires at least Member. A variation with
+         *     dependents (used as default variation, referenced by a targeting rule, or flagged
+         *     `VARIATION_HAS_DEPENDENTS`) throws the existing
+         *     ValidationException, which the
+         *     exception filter maps to a 400 `validation_failed` envelope — this action doesn't
+         *     special-case it.
+         */
+        delete: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    flag: string;
+                    variationId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description No Content */
+                204: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/me": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Returns the authenticated caller's public identity (see MeResponse). */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["MeResponse"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Lists the caller's organizations, cursor-paginated. */
+        get: {
+            parameters: {
+                query?: {
+                    limit?: number;
+                    cursor?: string;
+                };
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["OrganizationResponsePagedResult"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Gets one of the caller's organizations by slug or id. */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["OrganizationResponse"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/projects": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Lists projects in the resolved organization, cursor-paginated. */
+        get: {
+            parameters: {
+                query?: {
+                    limit?: number;
+                    cursor?: string;
+                };
+                header?: never;
+                path: {
+                    org: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProjectResponsePagedResult"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        /**
+         * Creates a project in the resolved organization.
+         * @description Requires at least Member.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicCreateProjectRequest"];
+                    "text/json": components["schemas"]["PublicCreateProjectRequest"];
+                    "application/*+json": components["schemas"]["PublicCreateProjectRequest"];
+                };
+            };
+            responses: {
+                /** @description Created */
+                201: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProjectResponse"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/projects/{project}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Gets a project in the resolved organization by key or id. */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProjectResponse"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        /**
+         * Updates a project's name/description.
+         * @description Requires at least Member.
+         */
+        put: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicUpdateProjectRequest"];
+                    "text/json": components["schemas"]["PublicUpdateProjectRequest"];
+                    "application/*+json": components["schemas"]["PublicUpdateProjectRequest"];
+                };
+            };
+            responses: {
+                /** @description No Content */
+                204: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content?: never;
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
@@ -2448,37 +3643,206 @@ export interface paths {
         };
         post?: never;
         /**
-         * Removes a variation from the resolved flag.
-         * @description Requires at least Member. A variation with
-         *     dependents (used as default variation, referenced by a targeting rule, or flagged
-         *     `VARIATION_HAS_DEPENDENTS`) throws the existing
-         *     ValidationException, which the
-         *     exception filter maps to a 400 `validation_failed` envelope — this action doesn't
-         *     special-case it.
+         * Deletes a project.
+         * @description Requires at least Member.
+         */
+        delete: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description No Content */
+                204: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/projects/{project}/environments/{env}/sdk-keys": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Lists SDK keys in the resolved environment, cursor-paginated.
+         * @description Like
+         *     List, ListSdkKeysQuery has no
+         *     `Skip`/`Take` (an environment's key count is small), so this fetches the full
+         *     set and pages in-memory to still expose the standard cursor contract.
+         */
+        get: {
+            parameters: {
+                query?: {
+                    limit?: number;
+                    cursor?: string;
+                };
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    env: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicSdkKeyResponsePagedResult"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        /**
+         * Creates an SDK key in the resolved environment.
+         * @description Requires at least Member. Returns the
+         *     plaintext key exactly once — see the type-level remarks.
          */
-        delete: {
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
                     org: string;
                     project: string;
-                    flag: string;
-                    variationId: string;
+                    env: string;
                 };
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicCreateSdkKeyRequest"];
+                    "text/json": components["schemas"]["PublicCreateSdkKeyRequest"];
+                    "application/*+json": components["schemas"]["PublicCreateSdkKeyRequest"];
+                };
+            };
             responses: {
-                /** @description No Content */
-                204: {
+                /** @description Created */
+                201: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
                         "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
                         [name: string]: unknown;
                     };
-                    content?: never;
+                    content: {
+                        "application/json": components["schemas"]["PublicCreateSdkKeyResponse"];
+                    };
                 };
                 /** @description Bad Request */
                 400: {
@@ -2544,24 +3908,30 @@ export interface paths {
                 };
             };
         };
+        delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/v1/me": {
+    "/api/v1/orgs/{org}/projects/{project}/environments/{env}/sdk-keys/{sdkKey}": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /** Returns the authenticated caller's public identity (see MeResponse). */
+        /** Gets an SDK key in the resolved environment by id (guid-only — see the type-level remarks). */
         get: {
             parameters: {
                 query?: never;
                 header?: never;
-                path?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    env: string;
+                    sdkKey: string;
+                };
                 cookie?: never;
             };
             requestBody?: never;
@@ -2575,10 +3945,10 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["MeResponse"];
+                        "application/json": components["schemas"]["PublicSdkKeyResponse"];
                     };
                 };
-                /** @description Unauthorized */
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
@@ -2590,6 +3960,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
                 429: {
                     headers: {
@@ -2606,45 +3988,39 @@ export interface paths {
                 };
             };
         };
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/api/v1/orgs": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /** Lists the caller's organizations, cursor-paginated. */
-        get: {
+        /**
+         * Updates an SDK key's name/description.
+         * @description Requires at least Member. Type and key material are immutable via this endpoint.
+         */
+        put: {
             parameters: {
-                query?: {
-                    limit?: number;
-                    cursor?: string;
-                };
+                query?: never;
                 header?: never;
-                path?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    env: string;
+                    sdkKey: string;
+                };
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["PublicUpdateSdkKeyRequest"];
+                    "text/json": components["schemas"]["PublicUpdateSdkKeyRequest"];
+                    "application/*+json": components["schemas"]["PublicUpdateSdkKeyRequest"];
+                };
+            };
             responses: {
-                /** @description OK */
-                200: {
+                /** @description No Content */
+                204: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
                         "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
                         [name: string]: unknown;
                     };
-                    content: {
-                        "application/json": components["schemas"]["OrganizationResponsePagedResult"];
-                    };
+                    content?: never;
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
@@ -2658,6 +4034,30 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
                 429: {
                     headers: {
@@ -2674,7 +4074,6 @@ export interface paths {
                 };
             };
         };
-        put?: never;
         post?: never;
         delete?: never;
         options?: never;
@@ -2682,36 +4081,42 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}": {
+    "/api/v1/orgs/{org}/projects/{project}/environments/{env}/sdk-keys/{sdkKey}/revoke": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /** Gets one of the caller's organizations by slug or id. */
-        get: {
+        get?: never;
+        put?: never;
+        /**
+         * Revokes an SDK key.
+         * @description Requires at least Member.
+         */
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
                     org: string;
+                    project: string;
+                    env: string;
+                    sdkKey: string;
                 };
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description OK */
-                200: {
+                /** @description No Content */
+                204: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
                         "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
                         [name: string]: unknown;
                     };
-                    content: {
-                        "application/json": components["schemas"]["OrganizationResponse"];
-                    };
+                    content?: never;
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
@@ -2725,6 +4130,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Not Found */
                 404: {
                     headers: {
@@ -2753,22 +4170,26 @@ export interface paths {
                 };
             };
         };
-        put?: never;
-        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects": {
+    "/api/v1/orgs/{org}/projects/{project}/segments": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /** Lists projects in the resolved organization, cursor-paginated. */
+        /**
+         * Lists user segments in the resolved project, cursor-paginated.
+         * @description Like
+         *     List, ListUserSegmentsQuery has no
+         *     `Skip`/`Take` (a project's segment count is small), so this fetches the full set
+         *     and pages in-memory to still expose the standard cursor contract.
+         */
         get: {
             parameters: {
                 query?: {
@@ -2778,6 +4199,7 @@ export interface paths {
                 header?: never;
                 path: {
                     org: string;
+                    project: string;
                 };
                 cookie?: never;
             };
@@ -2792,7 +4214,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ProjectResponsePagedResult"];
+                        "application/json": components["schemas"]["PublicSegmentResponsePagedResult"];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -2807,6 +4229,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
                 429: {
                     headers: {
@@ -2825,8 +4259,12 @@ export interface paths {
         };
         put?: never;
         /**
-         * Creates a project in the resolved organization.
-         * @description Requires at least Member.
+         * Creates a user segment in the resolved project.
+         * @description Requires at least Member. Re-fetches via
+         *     ListUserSegmentsQuery (there is no single-segment query) and locates the new
+         *     segment by the id returned from CreateUserSegmentCommand so the response
+         *     reflects exactly what was persisted (e.g. server-assigned condition ids, folded into the
+         *     public shape via FromDto).
          */
         post: {
             parameters: {
@@ -2834,14 +4272,15 @@ export interface paths {
                 header?: never;
                 path: {
                     org: string;
+                    project: string;
                 };
                 cookie?: never;
             };
             requestBody?: {
                 content: {
-                    "application/json": components["schemas"]["PublicCreateProjectRequest"];
-                    "text/json": components["schemas"]["PublicCreateProjectRequest"];
-                    "application/*+json": components["schemas"]["PublicCreateProjectRequest"];
+                    "application/json": components["schemas"]["PublicCreateSegmentRequest"];
+                    "text/json": components["schemas"]["PublicCreateSegmentRequest"];
+                    "application/*+json": components["schemas"]["PublicCreateSegmentRequest"];
                 };
             };
             responses: {
@@ -2854,7 +4293,19 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ProjectResponse"];
+                        "application/json": components["schemas"]["PublicSegmentResponse"];
+                    };
+                };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -2881,6 +4332,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
                 429: {
                     headers: {
@@ -2903,14 +4366,20 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}": {
+    "/api/v1/orgs/{org}/projects/{project}/segments/{segment}": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /** Gets a project in the resolved organization by key or id. */
+        /**
+         * Gets a user segment in the resolved project by key or id.
+         * @description There is no
+         *     ListUserSegments-adjacent single-item
+         *     query, so this resolves `{segment}` then dispatches ListUserSegmentsQuery
+         *     and finds the match — see the type-level remarks for why a list+find is acceptable here.
+         */
         get: {
             parameters: {
                 query?: never;
@@ -2918,6 +4387,7 @@ export interface paths {
                 path: {
                     org: string;
                     project: string;
+                    segment: string;
                 };
                 cookie?: never;
             };
@@ -2932,7 +4402,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ProjectResponse"];
+                        "application/json": components["schemas"]["PublicSegmentResponse"];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -2976,8 +4446,8 @@ export interface paths {
             };
         };
         /**
-         * Updates a project's name/description.
-         * @description Requires at least Member.
+         * Updates a segment's name/description/conditions.
+         * @description Requires at least Member. The segment's key is immutable via this endpoint.
          */
         put: {
             parameters: {
@@ -2986,14 +4456,15 @@ export interface paths {
                 path: {
                     org: string;
                     project: string;
+                    segment: string;
                 };
                 cookie?: never;
             };
             requestBody?: {
                 content: {
-                    "application/json": components["schemas"]["PublicUpdateProjectRequest"];
-                    "text/json": components["schemas"]["PublicUpdateProjectRequest"];
-                    "application/*+json": components["schemas"]["PublicUpdateProjectRequest"];
+                    "application/json": components["schemas"]["PublicUpdateSegmentRequest"];
+                    "text/json": components["schemas"]["PublicUpdateSegmentRequest"];
+                    "application/*+json": components["schemas"]["PublicUpdateSegmentRequest"];
                 };
             };
             responses: {
@@ -3007,6 +4478,18 @@ export interface paths {
                     };
                     content?: never;
                 };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
                     headers: {
@@ -3061,7 +4544,7 @@ export interface paths {
         };
         post?: never;
         /**
-         * Deletes a project.
+         * Deletes a user segment.
          * @description Requires at least Member.
          */
         delete: {
@@ -3071,6 +4554,7 @@ export interface paths {
                 path: {
                     org: string;
                     project: string;
+                    segment: string;
                 };
                 cookie?: never;
             };
@@ -3143,7 +4627,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/environments/{env}/sdk-keys": {
+    "/api/v1/orgs/{org}/webhooks": {
         parameters: {
             query?: never;
             header?: never;
@@ -3151,11 +4635,8 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Lists SDK keys in the resolved environment, cursor-paginated.
-         * @description Like
-         *     List, ListSdkKeysQuery has no
-         *     `Skip`/`Take` (an environment's key count is small), so this fetches the full
-         *     set and pages in-memory to still expose the standard cursor contract.
+         * Lists the organization's webhook subscriptions, oldest first.
+         * @description Requires Admin.
          */
         get: {
             parameters: {
@@ -3166,8 +4647,6 @@ export interface paths {
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
-                    env: string;
                 };
                 cookie?: never;
             };
@@ -3182,7 +4661,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicSdkKeyResponsePagedResult"];
+                        "application/json": components["schemas"]["PublicWebhookSubscriptionResponsePagedResult"];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -3197,6 +4676,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Not Found */
                 404: {
                     headers: {
@@ -3227,9 +4718,9 @@ export interface paths {
         };
         put?: never;
         /**
-         * Creates an SDK key in the resolved environment.
-         * @description Requires at least Member. Returns the
-         *     plaintext key exactly once — see the type-level remarks.
+         * Creates a webhook subscription.
+         * @description Requires Admin. The response carries the signing secret,
+         *     which is never shown again. Supports the `Idempotency-Key` header.
          */
         post: {
             parameters: {
@@ -3237,16 +4728,14 @@ export interface paths {
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
-                    env: string;
                 };
                 cookie?: never;
             };
             requestBody?: {
                 content: {
-                    "application/json": components["schemas"]["PublicCreateSdkKeyRequest"];
-                    "text/json": components["schemas"]["PublicCreateSdkKeyRequest"];
-                    "application/*+json": components["schemas"]["PublicCreateSdkKeyRequest"];
+                    "application/json": components["schemas"]["PublicCreateWebhookSubscriptionRequest"];
+                    "text/json": components["schemas"]["PublicCreateWebhookSubscriptionRequest"];
+                    "application/*+json": components["schemas"]["PublicCreateWebhookSubscriptionRequest"];
                 };
             };
             responses: {
@@ -3259,7 +4748,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicCreateSdkKeyResponse"];
+                        "application/json": components["schemas"]["PublicCreateWebhookSubscriptionResponse"];
                     };
                 };
                 /** @description Bad Request */
@@ -3332,23 +4821,23 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/environments/{env}/sdk-keys/{sdkKey}": {
+    "/api/v1/orgs/{org}/webhooks/event-types": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /** Gets an SDK key in the resolved environment by id (guid-only — see the type-level remarks). */
+        /**
+         * Lists the event types a subscription can filter on.
+         * @description Requires Admin.
+         */
         get: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
-                    env: string;
-                    sdkKey: string;
                 };
                 cookie?: never;
             };
@@ -3363,7 +4852,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicSdkKeyResponse"];
+                        "application/json": string[];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -3378,6 +4867,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Not Found */
                 404: {
                     headers: {
@@ -3406,9 +4907,105 @@ export interface paths {
                 };
             };
         };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/webhooks/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
         /**
-         * Updates an SDK key's name/description.
-         * @description Requires at least Member. Type and key material are immutable via this endpoint.
+         * Gets a webhook subscription by id.
+         * @description Requires Admin. Never returns secret values.
+         */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicWebhookSubscriptionResponse"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        /**
+         * Replaces a webhook subscription's configuration.
+         * @description Requires Admin. Omitted lists become empty,
+         *     which means "all".
          */
         put: {
             parameters: {
@@ -3416,17 +5013,15 @@ export interface paths {
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
-                    env: string;
-                    sdkKey: string;
+                    id: string;
                 };
                 cookie?: never;
             };
             requestBody?: {
                 content: {
-                    "application/json": components["schemas"]["PublicUpdateSdkKeyRequest"];
-                    "text/json": components["schemas"]["PublicUpdateSdkKeyRequest"];
-                    "application/*+json": components["schemas"]["PublicUpdateSdkKeyRequest"];
+                    "application/json": components["schemas"]["PublicUpdateWebhookSubscriptionRequest"];
+                    "text/json": components["schemas"]["PublicUpdateWebhookSubscriptionRequest"];
+                    "application/*+json": components["schemas"]["PublicUpdateWebhookSubscriptionRequest"];
                 };
             };
             responses: {
@@ -3440,6 +5035,18 @@ export interface paths {
                     };
                     content?: never;
                 };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
                     headers: {
@@ -3493,34 +5100,17 @@ export interface paths {
             };
         };
         post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/api/v1/orgs/{org}/projects/{project}/environments/{env}/sdk-keys/{sdkKey}/revoke": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
         /**
-         * Revokes an SDK key.
-         * @description Requires at least Member.
+         * Deletes a webhook subscription with its secrets and delivery log.
+         * @description Requires Admin.
          */
-        post: {
+        delete: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
-                    env: string;
-                    sdkKey: string;
+                    id: string;
                 };
                 cookie?: never;
             };
@@ -3588,43 +5178,41 @@ export interface paths {
                 };
             };
         };
-        delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/segments": {
+    "/api/v1/orgs/{org}/webhooks/{id}/secrets": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
+        get?: never;
+        put?: never;
         /**
-         * Lists user segments in the resolved project, cursor-paginated.
-         * @description Like
-         *     List, ListUserSegmentsQuery has no
-         *     `Skip`/`Take` (a project's segment count is small), so this fetches the full set
-         *     and pages in-memory to still expose the standard cursor contract.
+         * Adds a new active signing secret.
+         * @description Requires Admin. The previous secret keeps signing until
+         *     you retire it, so receivers can switch over without dropping deliveries. The response
+         *     carries the new secret, which is never shown again. Supports the `Idempotency-Key`
+         *     header.
          */
-        get: {
+        post: {
             parameters: {
-                query?: {
-                    limit?: number;
-                    cursor?: string;
-                };
+                query?: never;
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
+                    id: string;
                 };
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description OK */
-                200: {
+                /** @description Created */
+                201: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
@@ -3632,7 +5220,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicSegmentResponsePagedResult"];
+                        "application/json": components["schemas"]["PublicRotateWebhookSecretResponse"];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -3647,6 +5235,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Not Found */
                 404: {
                     headers: {
@@ -3675,44 +5275,49 @@ export interface paths {
                 };
             };
         };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/webhooks/{id}/secrets/{secretId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
         put?: never;
+        post?: never;
         /**
-         * Creates a user segment in the resolved project.
-         * @description Requires at least Member. Re-fetches via
-         *     ListUserSegmentsQuery (there is no single-segment query) and locates the new
-         *     segment by the id returned from CreateUserSegmentCommand so the response
-         *     reflects exactly what was persisted (e.g. server-assigned condition ids, folded into the
-         *     public shape via FromDto).
+         * Retires a signing secret.
+         * @description Requires Admin. Refused with a 400 when it is the subscription's
+         *     last active secret — rotate first.
          */
-        post: {
+        delete: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
+                    id: string;
+                    secretId: string;
                 };
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["PublicCreateSegmentRequest"];
-                    "text/json": components["schemas"]["PublicCreateSegmentRequest"];
-                    "application/*+json": components["schemas"]["PublicCreateSegmentRequest"];
-                };
-            };
+            requestBody?: never;
             responses: {
-                /** @description Created */
-                201: {
+                /** @description No Content */
+                204: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
                         "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
                         [name: string]: unknown;
                     };
-                    content: {
-                        "application/json": components["schemas"]["PublicSegmentResponse"];
-                    };
+                    content?: never;
                 };
                 /** @description Bad Request */
                 400: {
@@ -3778,41 +5383,40 @@ export interface paths {
                 };
             };
         };
-        delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/v1/orgs/{org}/projects/{project}/segments/{segment}": {
+    "/api/v1/orgs/{org}/webhooks/{id}/test": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
+        get?: never;
+        put?: never;
         /**
-         * Gets a user segment in the resolved project by key or id.
-         * @description There is no
-         *     ListUserSegments-adjacent single-item
-         *     query, so this resolves `{segment}` then dispatches ListUserSegmentsQuery
-         *     and finds the match — see the type-level remarks for why a list+find is acceptable here.
+         * Queues one synthetic `flag.toggled` event for this subscription alone.
+         * @description Requires Admin.
+         *     Delivery is asynchronous — read the delivery log for the outcome. Refused with a 400 when
+         *     the subscription is disabled.
          */
-        get: {
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
-                    segment: string;
+                    id: string;
                 };
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description OK */
-                200: {
+                /** @description Accepted */
+                202: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
@@ -3820,7 +5424,19 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicSegmentResponse"];
+                        "application/json": components["schemas"]["PublicTestWebhookSubscriptionResponse"];
+                    };
+                };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -3835,6 +5451,18 @@ export interface paths {
                         "application/json": components["schemas"]["PublicApiErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Not Found */
                 404: {
                     headers: {
@@ -3863,41 +5491,40 @@ export interface paths {
                 };
             };
         };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/webhooks/{id}/deliveries": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
         /**
-         * Updates a segment's name/description/conditions.
-         * @description Requires at least Member. The segment's key is immutable via this endpoint.
+         * Lists a subscription's delivery attempts, most recent first.
+         * @description Requires Admin.
          */
-        put: {
+        get: {
             parameters: {
-                query?: never;
+                query?: {
+                    limit?: number;
+                    cursor?: string;
+                };
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
-                    segment: string;
+                    id: string;
                 };
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["PublicUpdateSegmentRequest"];
-                    "text/json": components["schemas"]["PublicUpdateSegmentRequest"];
-                    "application/*+json": components["schemas"]["PublicUpdateSegmentRequest"];
-                };
-            };
+            requestBody?: never;
             responses: {
-                /** @description No Content */
-                204: {
-                    headers: {
-                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
-                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
-                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
-                        [name: string]: unknown;
-                    };
-                    content?: never;
-                };
-                /** @description Bad Request */
-                400: {
+                /** @description OK */
+                200: {
                     headers: {
                         "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
                         "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
@@ -3905,7 +5532,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                        "application/json": components["schemas"]["PublicWebhookDeliveryResponsePagedResult"];
                     };
                 };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
@@ -3960,19 +5587,37 @@ export interface paths {
                 };
             };
         };
+        put?: never;
         post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/orgs/{org}/webhooks/{id}/deliveries/{deliveryId}/redeliver": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
         /**
-         * Deletes a user segment.
-         * @description Requires at least Member.
+         * Queues a finished delivery (succeeded or dead-lettered) to be sent again, restarting its retry schedule.
+         * @description Requires Admin. Refused with a 400 when the delivery is still pending, when
+         *     the subscription is disabled, or when the subscription's current project, environment or
+         *     event-type filters no longer cover the delivery's event.
          */
-        delete: {
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
                     org: string;
-                    project: string;
-                    segment: string;
+                    id: string;
+                    deliveryId: string;
                 };
                 cookie?: never;
             };
@@ -3988,6 +5633,18 @@ export interface paths {
                     };
                     content?: never;
                 };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
                 /** @description Authentication is required, or the supplied API token is invalid or expired. */
                 401: {
                     headers: {
@@ -4040,6 +5697,7 @@ export interface paths {
                 };
             };
         };
+        delete?: never;
         options?: never;
         head?: never;
         patch?: never;
@@ -4092,10 +5750,10 @@ export interface components {
             name?: string | null;
             slug?: string | null;
             /**
-             * @description Allowed values: Solo, Pro, Business, Enterprise.
+             * @description Allowed values: Solo, Team, Pro, Business, Enterprise.
              * @enum {string|null}
              */
-            plan?: "Solo" | "Pro" | "Business" | "Enterprise" | null;
+            plan?: "Solo" | "Team" | "Pro" | "Business" | "Enterprise" | null;
             isActive?: boolean;
             /** Format: date-time */
             createdAt?: string;
@@ -4183,9 +5841,13 @@ export interface components {
          *     `docsUrl`/`retryAfter`, breaking the published spec. !:JsonPropertyName
          *     always wins over the policy, so these are pinned explicitly rather than relying on the
          *     property names already being lowercase for the single-word ones.
-         *     `did_you_mean` and `next_actions` are ADDITIVE optional keys (null → omitted via
-         *     the global `DefaultIgnoreCondition = WhenWritingNull`), so pre-existing error bodies
-         *     are byte-for-byte unchanged when they're absent.
+         *     `did_you_mean`, `next_actions` and `connection_id` are ADDITIVE optional keys
+         *     (null → omitted via the global `DefaultIgnoreCondition = WhenWritingNull`), so
+         *     pre-existing error bodies are byte-for-byte unchanged when they're absent.
+         *
+         *     `connection_id` is present only on the `sso_required` error: the organization
+         *     requires single sign-on, and this credential didn't come through its identity provider.
+         *     `connection_id` identifies which SSO connection to sign in with.
          * @example {
          *       "error": "not_found",
          *       "message": "Flag 'new-checkout-flw' was not found in project 'checkout'.",
@@ -4212,6 +5874,8 @@ export interface components {
             retry_after?: number | null;
             did_you_mean?: string[] | null;
             next_actions?: components["schemas"]["NextAction"][] | null;
+            /** Format: uuid */
+            connection_id?: string | null;
         };
         /** @description Request-side condition group, symmetric with PublicConditionGroupResponse. */
         PublicConditionGroupRequest: {
@@ -4290,7 +5954,13 @@ export interface components {
          *     schemaId-collision rationale (both controllers share one Swagger document). Type
          *     is passed through verbatim to Type, which itself takes a
          *     bare string (Boolean/String/Number/Json) rather than the domain enum — invalid values surface
-         *     as the handler's own validation failure, not a controller-level 400.
+         *     as the handler's own validation failure, not a controller-level 400. ExpiresAtUtc is
+         *     optional and advisory; a bare date (`2026-12-01`) means the end of that day in UTC, and a full
+         *     timestamp is stored exactly. It must be in the future and requires the flag-expiration feature
+         *     (400 `EXPIRY_IN_PAST` / `FEATURE_NOT_ENABLED`). OwnerEmail optionally names
+         *     the owner (an active member, matched case-insensitively; requires the flag-ownership feature —
+         *     400 `OWNER_NOT_MEMBER` / `FEATURE_NOT_ENABLED`). Omitted, the owner is the caller when
+         *     the caller is a member, so a service token creates an unowned flag.
          * @example {
          *       "key": "new-checkout-flow",
          *       "name": "New Checkout Flow",
@@ -4329,6 +5999,9 @@ export interface components {
             tags?: string[] | null;
             initialVariations?: components["schemas"]["PublicCreateVariationDto"][] | null;
             clientSideVisible?: boolean;
+            /** Format: date-time */
+            expiresAtUtc?: string | null;
+            ownerEmail?: string | null;
         };
         /**
          * @description Request body for `POST /api/v1/orgs/{org}/projects`. Named distinctly from the
@@ -4479,6 +6152,53 @@ export interface components {
             value?: string | null;
             description?: string | null;
         };
+        /**
+         * @description Creates a webhook subscription. `provider` is `GenericHttp`. Omit `eventTypes`,
+         *     `projectIds` or `environmentIds` (or send an empty list) to receive every event,
+         *     project or environment. A token restricted to specific projects must list at least one project,
+         *     all of them within its allowlist.
+         * @example {
+         *       "name": "Checkout flag changes to Slack relay",
+         *       "url": "https://hooks.acme.example/featureflip",
+         *       "provider": "GenericHttp",
+         *       "eventTypes": [
+         *         "flag.toggled",
+         *         "flag.updated"
+         *       ],
+         *       "projectIds": [
+         *         "0197b69f-1a2b-7c3d-8e4f-5a6b7c8d9e0f"
+         *       ],
+         *       "environmentIds": [
+         *         "0197b69f-2b3c-7d4e-9f5a-6b7c8d9e0f1a"
+         *       ]
+         *     }
+         */
+        PublicCreateWebhookSubscriptionRequest: {
+            name?: string | null;
+            url?: string | null;
+            /**
+             * @description Allowed values: GenericHttp.
+             * @enum {string|null}
+             */
+            provider?: "GenericHttp" | null;
+            eventTypes?: string[] | null;
+            projectIds?: string[] | null;
+            environmentIds?: string[] | null;
+        };
+        /**
+         * @description The created subscription's id and its signing secret. The secret is shown only here.
+         * @example {
+         *       "id": "0197b6a4-6f7a-7b8c-9d0e-1f2a3b4c5d6e",
+         *       "secret": "whsec_q2Vb8XJ1s0mYpZ4tK7wRr3uN9cL6aD5eF1gH2iJ3kL4=",
+         *       "warning": "Store this secret securely — it will not be shown again."
+         *     }
+         */
+        PublicCreateWebhookSubscriptionResponse: {
+            /** Format: uuid */
+            id?: string;
+            secret?: string | null;
+            warning?: string | null;
+        };
         /**
          * @description Public representation of an environment, returned by
          *     `GET /api/v1/orgs/{org}/projects/{project}/environments` (list),
@@ -4588,6 +6308,10 @@ export interface components {
             createdAt?: string;
             /** Format: date-time */
             updatedAt?: string;
+            /** Format: date-time */
+            expiresAtUtc?: string | null;
+            owner?: components["schemas"]["PublicFlagOwner"];
+            removalPrUrl?: string | null;
         };
         /**
          * @description A page of results plus an opaque cursor for the next page, or null when this is the last
@@ -4621,6 +6345,13 @@ export interface components {
                 [key: string]: components["schemas"]["ActionCapability"];
             };
         };
+        /** @description A flag's owner as returned on flag reads. Null means the flag is unowned. */
+        PublicFlagOwner: {
+            /** Format: uuid */
+            id?: string;
+            email?: string | null;
+            name?: string | null;
+        };
         /**
          * @description One dead flag the Featureflip Flag Cleanup Action should remove, returned by
          *     `GET .../flags/removal-candidates`. `Treatment` is the kill decision: true → keep the
@@ -4701,6 +6432,10 @@ export interface components {
             createdAt?: string;
             /** Format: date-time */
             updatedAt?: string;
+            /** Format: date-time */
+            expiresAtUtc?: string | null;
+            owner?: components["schemas"]["PublicFlagOwner"];
+            removalPrUrl?: string | null;
             /** @description Capability hints: which operations the authenticated caller may perform on this resource, each with allowed + optional reason. Computed from the caller's role and the resource's state. Injected at runtime; safe to ignore. Present only on top-level resource responses — nested occurrences (e.g. a rule inside a targeting-config response) do not carry it. */
             _actions?: {
                 [key: string]: components["schemas"]["ActionCapability"];
@@ -4738,6 +6473,13 @@ export interface components {
         PublicReorderRulesRequest: {
             ruleIds?: string[] | null;
         };
+        /** @description A newly added signing secret. The secret is shown only here. */
+        PublicRotateWebhookSecretResponse: {
+            /** Format: uuid */
+            secretId?: string;
+            secret?: string | null;
+            warning?: string | null;
+        };
         /**
          * @description Public representation of an SDK key, returned by
          *     `GET /api/v1/orgs/{org}/projects/{project}/environments/{env}/sdk-keys` (list) and
@@ -4862,6 +6604,35 @@ export interface components {
                 [key: string]: components["schemas"]["ActionCapability"];
             };
         };
+        /**
+         * @description Request body for `PUT /api/v1/orgs/{org}/projects/{project}/flags/{flag}/expiry`. Expiry is a
+         *     dedicated sub-resource, deliberately NOT a field on PublicUpdateFeatureFlagRequest: that
+         *     PUT is a full replace, so a new nullable field there would let any client that doesn't know about
+         *     expiry (the Terraform provider included) wipe it on every update. A bare date means the end of that
+         *     UTC day; a full timestamp is stored exactly.
+         */
+        PublicSetFlagExpiryRequest: {
+            /** Format: date-time */
+            expiresAtUtc?: string;
+        };
+        /**
+         * @description Request body for `PUT /api/v1/orgs/{org}/projects/{project}/flags/{flag}/owner`. A dedicated
+         *     sub-resource for the same reason as expiry: the main flag PUT is a full replace, so an owner field
+         *     there would let every client that doesn't know about owners wipe one. `email` must belong
+         *     to an active member of the organization (case-insensitive).
+         */
+        PublicSetFlagOwnerRequest: {
+            email?: string | null;
+        };
+        /**
+         * @description Request body for `PUT /api/v1/orgs/{org}/projects/{project}/flags/{flag}/removal-pr`: the
+         *     pull request that removes this flag from code, as opened by the Featureflip Flag Cleanup Action.
+         *     A dedicated sub-resource for the same reason as expiry and owner. `url` must be an https
+         *     pull request URL (`https://{host}/{owner}/{repo}/pull/{number}`).
+         */
+        PublicSetFlagRemovalPrRequest: {
+            url?: string | null;
+        };
         /**
          * @description The full targeting configuration for a flag in a single environment, returned by
          *     `GET .../targeting`. Maps 1:1 onto TargetingConfigurationDto — including
@@ -4925,6 +6696,13 @@ export interface components {
                 [key: string]: components["schemas"]["ActionCapability"];
             };
         };
+        /** @description The queued test event and its delivery. Poll the delivery log for the outcome. */
+        PublicTestWebhookSubscriptionResponse: {
+            /** Format: uuid */
+            webhookEventId?: string;
+            /** Format: uuid */
+            webhookDeliveryId?: string;
+        };
         /**
          * @description Request body for `POST .../flags/{flag}/environments/{env}/toggle`. Named distinctly from
          *     the dashboard's own `ToggleFlagInEnvironmentRequest`
@@ -5049,6 +6827,18 @@ export interface components {
             value?: string | null;
             description?: string | null;
         };
+        /**
+         * @description Replaces a subscription's configuration (full replace — omitted lists become empty, meaning
+         *     "all"). `isEnabled` is required. The provider cannot be changed.
+         */
+        PublicUpdateWebhookSubscriptionRequest: {
+            name?: string | null;
+            url?: string | null;
+            eventTypes?: string[] | null;
+            projectIds?: string[] | null;
+            environmentIds?: string[] | null;
+            isEnabled?: boolean | null;
+        };
         /**
          * @description A single variation on a flag, as returned in Variations.
          * @example {
@@ -5071,6 +6861,126 @@ export interface components {
                 [key: string]: components["schemas"]["ActionCapability"];
             };
         };
+        /**
+         * @description One delivery attempt record. `status` is `Pending` (awaiting its first attempt,
+         *     backing off, or in flight), `Succeeded` or `DeadLettered`.
+         */
+        PublicWebhookDeliveryResponse: {
+            /** Format: uuid */
+            id?: string;
+            /** Format: uuid */
+            webhookEventId?: string;
+            /**
+             * @description Allowed values: Pending, Succeeded, DeadLettered.
+             * @enum {string|null}
+             */
+            status?: "Pending" | "Succeeded" | "DeadLettered" | null;
+            /** Format: int32 */
+            attemptCount?: number;
+            /** Format: date-time */
+            nextAttemptAt?: string;
+            /** Format: int32 */
+            lastResponseStatusCode?: number | null;
+            lastError?: string | null;
+            /** Format: date-time */
+            completedAt?: string | null;
+            /** Format: date-time */
+            createdAt?: string;
+        };
+        /**
+         * @description A page of results plus an opaque cursor for the next page, or null when this is the last
+         *     page. Wire keys are frozen: `items` (already lowercase under the camelCase policy) and
+         *     `next_cursor` (pinned explicitly — the policy alone would emit `nextCursor`).
+         */
+        PublicWebhookDeliveryResponsePagedResult: {
+            items?: components["schemas"]["PublicWebhookDeliveryResponse"][] | null;
+            next_cursor?: string | null;
+        };
+        /** @description A signing secret's id and lifecycle. A secret with no `retiredAt` is active and signs every delivery. */
+        PublicWebhookSecretResponse: {
+            /** Format: uuid */
+            id?: string;
+            /** Format: date-time */
+            createdAt?: string;
+            /** Format: date-time */
+            retiredAt?: string | null;
+        };
+        /**
+         * @description A webhook subscription. Never carries secret material: signing secrets are listed by id and
+         *     lifecycle only — the value itself is returned once, when it is created or rotated.
+         *     `overPlanLimit` is true when the organization has more subscriptions than its plan
+         *     allows, which happens after a downgrade. The oldest subscriptions up to the limit keep
+         *     delivering. The rest receive nothing and cannot be re-enabled, tested or redelivered to until
+         *     the plan is upgraded or older subscriptions are deleted.
+         * @example {
+         *       "id": "0197b6a4-6f7a-7b8c-9d0e-1f2a3b4c5d6e",
+         *       "name": "Checkout flag changes to Slack relay",
+         *       "url": "https://hooks.acme.example/featureflip",
+         *       "provider": "GenericHttp",
+         *       "isEnabled": true,
+         *       "eventTypes": [
+         *         "flag.toggled",
+         *         "flag.updated"
+         *       ],
+         *       "projectIds": [
+         *         "0197b69f-1a2b-7c3d-8e4f-5a6b7c8d9e0f"
+         *       ],
+         *       "environmentIds": [
+         *         "0197b69f-2b3c-7d4e-9f5a-6b7c8d9e0f1a"
+         *       ],
+         *       "consecutiveFailureCount": 0,
+         *       "createdAt": "2026-06-01T12:00:00Z",
+         *       "updatedAt": "2026-06-15T08:30:00Z",
+         *       "secrets": [
+         *         {
+         *           "id": "0197b6a4-7a8b-7c9d-8e0f-2a3b4c5d6e7f",
+         *           "createdAt": "2026-06-01T12:00:00Z"
+         *         }
+         *       ]
+         *     }
+         */
+        PublicWebhookSubscriptionResponse: {
+            /** Format: uuid */
+            id?: string;
+            name?: string | null;
+            url?: string | null;
+            /**
+             * @description Allowed values: GenericHttp.
+             * @enum {string|null}
+             */
+            provider?: "GenericHttp" | null;
+            isEnabled?: boolean;
+            eventTypes?: string[] | null;
+            projectIds?: string[] | null;
+            environmentIds?: string[] | null;
+            /** Format: int32 */
+            consecutiveFailureCount?: number;
+            /** Format: date-time */
+            autoDisabledAt?: string | null;
+            /** Format: date-time */
+            createdAt?: string;
+            /** Format: date-time */
+            updatedAt?: string;
+            secrets?: components["schemas"]["PublicWebhookSecretResponse"][] | null;
+            overPlanLimit?: boolean;
+            /** @description Capability hints: which operations the authenticated caller may perform on this resource, each with allowed + optional reason. Computed from the caller's role and the resource's state. Injected at runtime; safe to ignore. Present only on top-level resource responses — nested occurrences (e.g. a rule inside a targeting-config response) do not carry it. */
+            _actions?: {
+                [key: string]: components["schemas"]["ActionCapability"];
+            };
+        };
+        /**
+         * @description A page of results plus an opaque cursor for the next page, or null when this is the last
+         *     page. Wire keys are frozen: `items` (already lowercase under the camelCase policy) and
+         *     `next_cursor` (pinned explicitly — the policy alone would emit `nextCursor`).
+         */
+        PublicWebhookSubscriptionResponsePagedResult: {
+            items?: components["schemas"]["PublicWebhookSubscriptionResponse"][] | null;
+            next_cursor?: string | null;
+            /** @description Capability hints: which operations the authenticated caller may perform on this resource, each with allowed + optional reason. Computed from the caller's role and the resource's state. Injected at runtime; safe to ignore. Present only on top-level resource responses — nested occurrences (e.g. a rule inside a targeting-config response) do not carry it. */
+            _actions?: {
+                [key: string]: components["schemas"]["ActionCapability"];
+            };
+        };
     };
     responses: never;
     parameters: never;