@featureflip/mcp 0.1.9 → 0.1.11

package/README.md

@@ -41,13 +41,14 @@ claude mcp add featureflip -e FEATUREFLIP_TOKEN=ffp_your_token -- npx -y @featur
 ## Tools
 
 CRUD: `list_projects`, `list_environments`, `list_flags`, `get_flag`, `create_flag`, `update_flag`,
-`delete_flag`, `archive_flag`, `restore_flag`, `set_flag_expiry`, `set_flag_owner`, `toggle_flag`,
-`update_flag_environment_config`, `get_targeting`, `update_targeting`, `manage_variation`, `list_segments`,
-`get_segment`
+`delete_flag`, `archive_flag`, `restore_flag`, `set_flag_expiry`, `set_flag_owner`, `set_flag_permanent`,
+`toggle_flag`, `update_flag_environment_config`, `get_targeting`, `update_targeting`, `manage_variation`,
+`list_segments`, `get_segment`
 
 Webhooks (Admin token required): `list_webhooks`, `list_webhook_deliveries`, `manage_webhook`, `deliver_webhook`
 
 Workflows: `flag_status` (cross-environment view), `find_stale_flags` (cleanup candidates),
+`list_removal_candidates` (flags safe to remove, with the prerequisite dependents to remove first),
 `wrap_feature` (create flag + get the SDK snippet for your language)
 
 Full reference: https://featureflip.io/docs/integrations/mcp/

package/dist/cli.mjs

@@ -1,4 +1,4 @@
-import { a as e, i as t, n, o as r, s as i, t as a } from "./org-8tn1Su68.js";
+import { a as e, i as t, n, o as r, s as i, t as a } from "./org-c4iWMSzU.js";
 import { serveStdio as o } from "@modelcontextprotocol/server/stdio";
 //#region src/unconfigured.ts
 var s = class extends i {

package/dist/generated/api-types.d.ts

@@ -445,6 +445,7 @@ export interface paths {
          *     Decode's "garbage input degrades gracefully" precedent)
          *     rather than a 400, since it's a non-critical list filter, not a mutation. `owner` filters
          *     by owner: an email (an active member, case-insensitive) or `none` for unowned flags.
+         *     `permanent` filters to permanent (`true`) or temporary (`false`) flags.
          */
         get: {
             parameters: {
@@ -456,6 +457,7 @@ export interface paths {
                     limit?: number;
                     cursor?: string;
                     owner?: string;
+                    permanent?: boolean;
                 };
                 header?: never;
                 path: {
@@ -637,9 +639,13 @@ export interface paths {
         /**
          * Lists confidently-dead (or, with `staleness=stale`, stale-or-dead) flags the Featureflip Flag Cleanup Action should remove, cursor-paginated, each with its kill `treatment` (true = keep the on-branch, false = keep the off-branch).
          * @description Only flags the staleness engine marks at or
-         *     above the requested tier via a decisive StuckRolledOut/StuckRolledBack reason are returned;
-         *     ZeroTraffic/CreatedUnused, cross-env-divergent, and archived flags are omitted (no confident code
-         *     treatment). The ONLY public projection of staleness.
+         *     above the requested tier with a settled value are returned: a decisive StuckRolledOut/StuckRolledBack
+         *     reason, or ZeroTraffic/CreatedUnused when no environment saw traffic and every environment's
+         *     configuration serves one fixed variation (enabled, no rules, no prerequisites). Cross-env-divergent
+         *     flags, flags without traffic whose configuration could serve more than one value, and archived
+         *     flags are omitted (no confident code treatment). The ONLY public projection of staleness.
+         *     Each item's `blockedBy` names the live flags that still list it as a prerequisite; while
+         *     it is non-empty the flag cannot be archived (`FLAG_HAS_DEPENDENTS`), so remove those first.
          */
         get: {
             parameters: {
@@ -997,7 +1003,8 @@ export interface paths {
          *     date (`2026-12-01`), which means the end of that day in UTC, the same as picking it in the
          *     dashboard, or a full ISO-8601 timestamp, which is stored exactly. It must be in the future
          *     (400 `EXPIRY_IN_PAST`), so today's date is accepted, and the flag-expiration feature must
-         *     be enabled (400 `FEATURE_NOT_ENABLED`).
+         *     be enabled (400 `FEATURE_NOT_ENABLED`). A permanent flag can't have a date
+         *     (400 `PERMANENT_FLAG_HAS_EXPIRY`).
          */
         put: {
             parameters: {
@@ -1371,6 +1378,193 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/permanent": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Marks the flag permanent: a kill switch, ops toggle or entitlement gate that is meant to stay.
+         * @description A permanent flag is never offered as a removal candidate and never reported past expiry.
+         *     Requires at least Member. The flag can't have an expiry date (400 `PERMANENT_FLAG_HAS_EXPIRY`;
+         *     remove the date first) and the flag-permanence feature must be enabled (400 `FEATURE_NOT_ENABLED`).
+         */
+        put: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    flag: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description No Content */
+                204: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        post?: never;
+        /**
+         * Makes the flag temporary again.
+         * @description Requires at least Member. Always allowed, even when the
+         *      flag-permanence feature is disabled.
+         */
+        delete: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    org: string;
+                    project: string;
+                    flag: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description No Content */
+                204: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Authentication is required, or the supplied API token is invalid or expired. */
+                401: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+                /** @description Rate limit exceeded. Retry after the interval indicated by the Retry-After header. */
+                429: {
+                    headers: {
+                        /** @description Number of seconds to wait before retrying the request. */
+                        "Retry-After"?: number;
+                        "X-RateLimit-Limit": components["headers"]["X-RateLimit-Limit"];
+                        "X-RateLimit-Remaining": components["headers"]["X-RateLimit-Remaining"];
+                        "X-RateLimit-Reset": components["headers"]["X-RateLimit-Reset"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PublicApiErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/v1/orgs/{org}/projects/{project}/flags/{flag}/removal-pr": {
         parameters: {
             query?: never;
@@ -5960,7 +6154,10 @@ export interface components {
          *     (400 `EXPIRY_IN_PAST` / `FEATURE_NOT_ENABLED`). OwnerEmail optionally names
          *     the owner (an active member, matched case-insensitively; requires the flag-ownership feature —
          *     400 `OWNER_NOT_MEMBER` / `FEATURE_NOT_ENABLED`). Omitted, the owner is the caller when
-         *     the caller is a member, so a service token creates an unowned flag.
+         *     the caller is a member, so a service token creates an unowned flag. IsPermanent marks
+         *     the flag permanent (a kill switch, ops toggle or entitlement that is meant to stay; never reported for
+         *     cleanup). It requires the flag-permanence feature and can't be combined with ExpiresAtUtc
+         *     (400 `FEATURE_NOT_ENABLED` / `PERMANENT_FLAG_HAS_EXPIRY`).
          * @example {
          *       "key": "new-checkout-flow",
          *       "name": "New Checkout Flow",
@@ -6002,6 +6199,7 @@ export interface components {
             /** Format: date-time */
             expiresAtUtc?: string | null;
             ownerEmail?: string | null;
+            isPermanent?: boolean;
         };
         /**
          * @description Request body for `POST /api/v1/orgs/{org}/projects`. Named distinctly from the
@@ -6312,6 +6510,7 @@ export interface components {
             expiresAtUtc?: string | null;
             owner?: components["schemas"]["PublicFlagOwner"];
             removalPrUrl?: string | null;
+            isPermanent?: boolean;
         };
         /**
          * @description A page of results plus an opaque cursor for the next page, or null when this is the last
@@ -6359,13 +6558,16 @@ export interface components {
          *     (`"Stale"` or `"Dead"`, never `"Active"`) — lets a caller distinguish the two when
          *     `?staleness=stale` widens the response to include both tiers. This is the ONLY public
          *     projection of staleness — PublicFlagResponse and PublicFlagListItem
-         *     still omit it by design.
+         *     still omit it by design. `BlockedBy` names the live flags that still list this one as a
+         *     prerequisite, sorted by key; while it is non-empty the flag cannot be archived
+         *     (`FLAG_HAS_DEPENDENTS`), so a caller should remove those dependents first.
          */
         PublicFlagRemovalCandidate: {
             key?: string | null;
             reason?: string | null;
             treatment?: boolean;
             status?: string | null;
+            blockedBy?: string[] | null;
         };
         /**
          * @description A page of results plus an opaque cursor for the next page, or null when this is the last
@@ -6436,6 +6638,7 @@ export interface components {
             expiresAtUtc?: string | null;
             owner?: components["schemas"]["PublicFlagOwner"];
             removalPrUrl?: string | null;
+            isPermanent?: boolean;
             /** @description Capability hints: which operations the authenticated caller may perform on this resource, each with allowed + optional reason. Computed from the caller's role and the resource's state. Injected at runtime; safe to ignore. Present only on top-level resource responses — nested occurrences (e.g. a rule inside a targeting-config response) do not carry it. */
             _actions?: {
                 [key: string]: components["schemas"]["ActionCapability"];