@fern-api/fern-api-dev 5.80.5 → 5.82.0

package/cli.cjs

@@ -62211,6 +62211,13 @@ var init_OAuthAccessTokenResponseProperties = __esm({
   }
 });
 
+// ../../ir-sdk/lib/sdk/api/resources/auth/types/OAuthAuthorizationCode.js
+var init_OAuthAuthorizationCode = __esm({
+  "../../ir-sdk/lib/sdk/api/resources/auth/types/OAuthAuthorizationCode.js"() {
+    "use strict";
+  }
+});
+
 // ../../ir-sdk/lib/sdk/api/resources/auth/types/OAuthClientCredentials.js
 var init_OAuthClientCredentials = __esm({
   "../../ir-sdk/lib/sdk/api/resources/auth/types/OAuthClientCredentials.js"() {
@@ -62234,10 +62241,107 @@ var init_OAuthConfiguration = __esm({
           }
         };
       },
+      authorizationCode: (value2) => {
+        return {
+          ...value2,
+          type: "authorizationCode",
+          _visit: function(visitor) {
+            return OAuthConfiguration._visit(this, visitor);
+          }
+        };
+      },
+      deviceCode: (value2) => {
+        return {
+          ...value2,
+          type: "deviceCode",
+          _visit: function(visitor) {
+            return OAuthConfiguration._visit(this, visitor);
+          }
+        };
+      },
       _visit: (value2, visitor) => {
         switch (value2.type) {
           case "clientCredentials":
             return visitor.clientCredentials(value2);
+          case "authorizationCode":
+            return visitor.authorizationCode(value2);
+          case "deviceCode":
+            return visitor.deviceCode(value2);
+          default:
+            return visitor._other(value2);
+        }
+      }
+    };
+  }
+});
+
+// ../../ir-sdk/lib/sdk/api/resources/auth/types/OAuthDeviceCode.js
+var init_OAuthDeviceCode = __esm({
+  "../../ir-sdk/lib/sdk/api/resources/auth/types/OAuthDeviceCode.js"() {
+    "use strict";
+  }
+});
+
+// ../../ir-sdk/lib/sdk/api/resources/auth/types/OAuthPkceConfiguration.js
+var init_OAuthPkceConfiguration = __esm({
+  "../../ir-sdk/lib/sdk/api/resources/auth/types/OAuthPkceConfiguration.js"() {
+    "use strict";
+  }
+});
+
+// ../../ir-sdk/lib/sdk/api/resources/auth/types/OAuthPkceMethod.js
+var OAuthPkceMethodValues, OAuthPkceMethod;
+var init_OAuthPkceMethod = __esm({
+  "../../ir-sdk/lib/sdk/api/resources/auth/types/OAuthPkceMethod.js"() {
+    "use strict";
+    OAuthPkceMethodValues = {
+      S256: "S256"
+    };
+    OAuthPkceMethod = {
+      ...OAuthPkceMethodValues,
+      _visit: (value2, visitor) => {
+        switch (value2) {
+          case OAuthPkceMethod.S256:
+            return visitor.s256();
+          default:
+            return visitor._other();
+        }
+      }
+    };
+  }
+});
+
+// ../../ir-sdk/lib/sdk/api/resources/auth/types/OAuthPublicClientId.js
+var OAuthPublicClientId;
+var init_OAuthPublicClientId = __esm({
+  "../../ir-sdk/lib/sdk/api/resources/auth/types/OAuthPublicClientId.js"() {
+    "use strict";
+    init_api2();
+    OAuthPublicClientId = {
+      literal: (value2) => {
+        return {
+          value: value2,
+          type: "literal",
+          _visit: function(visitor) {
+            return OAuthPublicClientId._visit(this, visitor);
+          }
+        };
+      },
+      environmentVariable: (value2) => {
+        return {
+          value: value2,
+          type: "environmentVariable",
+          _visit: function(visitor) {
+            return OAuthPublicClientId._visit(this, visitor);
+          }
+        };
+      },
+      _visit: (value2, visitor) => {
+        switch (value2.type) {
+          case "literal":
+            return visitor.literal(value2.value);
+          case "environmentVariable":
+            return visitor.environmentVariable(value2.value);
           default:
             return visitor._other(value2);
         }
@@ -62293,8 +62397,13 @@ var init_types43 = __esm({
     init_InferredAuthSchemeTokenEndpoint();
     init_OAuthAccessTokenRequestProperties();
     init_OAuthAccessTokenResponseProperties();
+    init_OAuthAuthorizationCode();
     init_OAuthClientCredentials();
     init_OAuthConfiguration();
+    init_OAuthDeviceCode();
+    init_OAuthPkceConfiguration();
+    init_OAuthPkceMethod();
+    init_OAuthPublicClientId();
     init_OAuthRefreshEndpoint();
     init_OAuthRefreshTokenRequestProperties();
     init_OAuthScheme();
@@ -62307,7 +62416,9 @@ var auth_exports3 = {};
 __export(auth_exports3, {
   AuthScheme: () => AuthScheme,
   AuthSchemesRequirement: () => AuthSchemesRequirement,
-  OAuthConfiguration: () => OAuthConfiguration
+  OAuthConfiguration: () => OAuthConfiguration,
+  OAuthPkceMethod: () => OAuthPkceMethod,
+  OAuthPublicClientId: () => OAuthPublicClientId
 });
 var init_auth4 = __esm({
   "../../ir-sdk/lib/sdk/api/resources/auth/index.js"() {
@@ -70875,6 +70986,8 @@ __export(api_exports, {
   NamedTypeDefault: () => NamedTypeDefault,
   NonStreamHttpResponseBody: () => NonStreamHttpResponseBody,
   OAuthConfiguration: () => OAuthConfiguration,
+  OAuthPkceMethod: () => OAuthPkceMethod,
+  OAuthPublicClientId: () => OAuthPublicClientId,
   ObjectPropertyAccess: () => ObjectPropertyAccess4,
   Pagination: () => Pagination2,
   PathParameterLocation: () => PathParameterLocation,
@@ -73465,6 +73578,85 @@ var init_InferredAuthScheme2 = __esm({
   }
 });
 
+// ../../ir-sdk/lib/sdk/serialization/resources/auth/types/OAuthPkceMethod.js
+var OAuthPkceMethod2;
+var init_OAuthPkceMethod2 = __esm({
+  "../../ir-sdk/lib/sdk/serialization/resources/auth/types/OAuthPkceMethod.js"() {
+    "use strict";
+    init_core2();
+    OAuthPkceMethod2 = schemas_exports3.enum_(["S256"]);
+  }
+});
+
+// ../../ir-sdk/lib/sdk/serialization/resources/auth/types/OAuthPkceConfiguration.js
+var OAuthPkceConfiguration;
+var init_OAuthPkceConfiguration2 = __esm({
+  "../../ir-sdk/lib/sdk/serialization/resources/auth/types/OAuthPkceConfiguration.js"() {
+    "use strict";
+    init_core2();
+    init_OAuthPkceMethod2();
+    OAuthPkceConfiguration = schemas_exports3.objectWithoutOptionalProperties({
+      method: OAuthPkceMethod2
+    });
+  }
+});
+
+// ../../ir-sdk/lib/sdk/serialization/resources/auth/types/OAuthPublicClientId.js
+var OAuthPublicClientId2;
+var init_OAuthPublicClientId2 = __esm({
+  "../../ir-sdk/lib/sdk/serialization/resources/auth/types/OAuthPublicClientId.js"() {
+    "use strict";
+    init_api2();
+    init_core2();
+    init_EnvironmentVariable3();
+    OAuthPublicClientId2 = schemas_exports3.union("type", {
+      literal: schemas_exports3.object({
+        value: schemas_exports3.string()
+      }),
+      environmentVariable: schemas_exports3.object({
+        value: EnvironmentVariable
+      })
+    }).transform({
+      transform: (value2) => {
+        switch (value2.type) {
+          case "literal":
+            return OAuthPublicClientId.literal(value2.value);
+          case "environmentVariable":
+            return OAuthPublicClientId.environmentVariable(value2.value);
+          default:
+            return value2;
+        }
+      },
+      untransform: ({ _visit, ...value2 }) => value2
+    });
+  }
+});
+
+// ../../ir-sdk/lib/sdk/serialization/resources/auth/types/OAuthAuthorizationCode.js
+var OAuthAuthorizationCode;
+var init_OAuthAuthorizationCode2 = __esm({
+  "../../ir-sdk/lib/sdk/serialization/resources/auth/types/OAuthAuthorizationCode.js"() {
+    "use strict";
+    init_core2();
+    init_OAuthPkceConfiguration2();
+    init_OAuthPublicClientId2();
+    OAuthAuthorizationCode = schemas_exports3.objectWithoutOptionalProperties({
+      clientId: OAuthPublicClientId2,
+      authorizationUrl: schemas_exports3.string(),
+      tokenUrl: schemas_exports3.string(),
+      refreshUrl: schemas_exports3.string().optional(),
+      redirectUri: schemas_exports3.string().optional(),
+      scopes: schemas_exports3.list(schemas_exports3.string()).optional(),
+      pkce: OAuthPkceConfiguration,
+      authorizationParameters: schemas_exports3.record(schemas_exports3.string(), schemas_exports3.string()).optional(),
+      tokenParameters: schemas_exports3.record(schemas_exports3.string(), schemas_exports3.string()).optional(),
+      refreshParameters: schemas_exports3.record(schemas_exports3.string(), schemas_exports3.string()).optional(),
+      tokenHeader: schemas_exports3.string().optional(),
+      tokenPrefix: schemas_exports3.string().optional()
+    });
+  }
+});
+
 // ../../ir-sdk/lib/sdk/serialization/resources/auth/types/OAuthAccessTokenResponseProperties.js
 var OAuthAccessTokenResponseProperties;
 var init_OAuthAccessTokenResponseProperties2 = __esm({
@@ -73660,6 +73852,28 @@ var init_OAuthClientCredentials2 = __esm({
   }
 });
 
+// ../../ir-sdk/lib/sdk/serialization/resources/auth/types/OAuthDeviceCode.js
+var OAuthDeviceCode;
+var init_OAuthDeviceCode2 = __esm({
+  "../../ir-sdk/lib/sdk/serialization/resources/auth/types/OAuthDeviceCode.js"() {
+    "use strict";
+    init_core2();
+    init_OAuthPublicClientId2();
+    OAuthDeviceCode = schemas_exports3.objectWithoutOptionalProperties({
+      clientId: OAuthPublicClientId2,
+      deviceAuthorizationUrl: schemas_exports3.string(),
+      tokenUrl: schemas_exports3.string(),
+      refreshUrl: schemas_exports3.string().optional(),
+      scopes: schemas_exports3.list(schemas_exports3.string()).optional(),
+      deviceAuthorizationParameters: schemas_exports3.record(schemas_exports3.string(), schemas_exports3.string()).optional(),
+      tokenParameters: schemas_exports3.record(schemas_exports3.string(), schemas_exports3.string()).optional(),
+      refreshParameters: schemas_exports3.record(schemas_exports3.string(), schemas_exports3.string()).optional(),
+      tokenHeader: schemas_exports3.string().optional(),
+      tokenPrefix: schemas_exports3.string().optional()
+    });
+  }
+});
+
 // ../../ir-sdk/lib/sdk/serialization/resources/auth/types/OAuthConfiguration.js
 var OAuthConfiguration2;
 var init_OAuthConfiguration2 = __esm({
@@ -73667,14 +73881,22 @@ var init_OAuthConfiguration2 = __esm({
     "use strict";
     init_api2();
     init_core2();
+    init_OAuthAuthorizationCode2();
     init_OAuthClientCredentials2();
+    init_OAuthDeviceCode2();
     OAuthConfiguration2 = schemas_exports3.union("type", {
-      clientCredentials: OAuthClientCredentials
+      clientCredentials: OAuthClientCredentials,
+      authorizationCode: OAuthAuthorizationCode,
+      deviceCode: OAuthDeviceCode
     }).transform({
       transform: (value2) => {
         switch (value2.type) {
           case "clientCredentials":
             return OAuthConfiguration.clientCredentials(value2);
+          case "authorizationCode":
+            return OAuthConfiguration.authorizationCode(value2);
+          case "deviceCode":
+            return OAuthConfiguration.deviceCode(value2);
           default:
             return value2;
         }
@@ -73793,8 +74015,13 @@ var init_types72 = __esm({
     init_InferredAuthSchemeTokenEndpoint2();
     init_OAuthAccessTokenRequestProperties2();
     init_OAuthAccessTokenResponseProperties2();
+    init_OAuthAuthorizationCode2();
     init_OAuthClientCredentials2();
     init_OAuthConfiguration2();
+    init_OAuthDeviceCode2();
+    init_OAuthPkceConfiguration2();
+    init_OAuthPkceMethod2();
+    init_OAuthPublicClientId2();
     init_OAuthRefreshEndpoint2();
     init_OAuthRefreshTokenRequestProperties2();
     init_OAuthScheme2();
@@ -73820,8 +74047,13 @@ __export(auth_exports5, {
   InferredAuthenticatedRequestHeader: () => InferredAuthenticatedRequestHeader2,
   OAuthAccessTokenRequestProperties: () => OAuthAccessTokenRequestProperties,
   OAuthAccessTokenResponseProperties: () => OAuthAccessTokenResponseProperties,
+  OAuthAuthorizationCode: () => OAuthAuthorizationCode,
   OAuthClientCredentials: () => OAuthClientCredentials,
   OAuthConfiguration: () => OAuthConfiguration2,
+  OAuthDeviceCode: () => OAuthDeviceCode,
+  OAuthPkceConfiguration: () => OAuthPkceConfiguration,
+  OAuthPkceMethod: () => OAuthPkceMethod2,
+  OAuthPublicClientId: () => OAuthPublicClientId2,
   OAuthRefreshEndpoint: () => OAuthRefreshEndpoint,
   OAuthRefreshTokenRequestProperties: () => OAuthRefreshTokenRequestProperties,
   OAuthScheme: () => OAuthScheme,
@@ -83277,8 +83509,13 @@ __export(serialization_exports2, {
   NugetPublishTarget: () => NugetPublishTarget,
   OAuthAccessTokenRequestProperties: () => OAuthAccessTokenRequestProperties,
   OAuthAccessTokenResponseProperties: () => OAuthAccessTokenResponseProperties,
+  OAuthAuthorizationCode: () => OAuthAuthorizationCode,
   OAuthClientCredentials: () => OAuthClientCredentials,
   OAuthConfiguration: () => OAuthConfiguration2,
+  OAuthDeviceCode: () => OAuthDeviceCode,
+  OAuthPkceConfiguration: () => OAuthPkceConfiguration,
+  OAuthPkceMethod: () => OAuthPkceMethod2,
+  OAuthPublicClientId: () => OAuthPublicClientId2,
   OAuthRefreshEndpoint: () => OAuthRefreshEndpoint,
   OAuthRefreshTokenRequestProperties: () => OAuthRefreshTokenRequestProperties,
   OAuthScheme: () => OAuthScheme,
@@ -102149,6 +102386,7 @@ var init_latest_version = __esm({
   "../../../node_modules/.pnpm/latest-version@9.0.0/node_modules/latest-version/index.js"() {
     "use strict";
     init_package_json();
+    init_package_json();
   }
 });
 
@@ -273887,6 +274125,9 @@ var init_DynamicSnippetsConverter = __esm({
       }
       getOAuthCustomProperties(scheme) {
         const parameters2 = [];
+        if (scheme.configuration.type !== "clientCredentials") {
+          return parameters2;
+        }
         const customProperties = scheme.configuration.tokenEndpoint.requestProperties.customProperties ?? [];
         for (const customProperty of customProperties) {
           if (isExcludedOAuthProperty(customProperty.property.valueType)) {
@@ -273912,6 +274153,9 @@ var init_DynamicSnippetsConverter = __esm({
       }
       getOAuthCustomPropertyValues(scheme) {
         const values2 = {};
+        if (scheme.configuration.type !== "clientCredentials") {
+          return values2;
+        }
         const customProperties = scheme.configuration.tokenEndpoint.requestProperties.customProperties ?? [];
         for (const customProperty of customProperties) {
           if (isExcludedOAuthProperty(customProperty.property.valueType)) {
@@ -311563,23 +311807,6 @@ var init_lib26 = __esm({
   }
 });
 
-// ../../../node_modules/.pnpm/semver-diff@4.0.0/node_modules/semver-diff/index.js
-function semverDiff(versionA, versionB) {
-  versionA = import_semver11.default.parse(versionA);
-  versionB = import_semver11.default.parse(versionB);
-  if (import_semver11.default.compareBuild(versionA, versionB) >= 0) {
-    return;
-  }
-  return import_semver11.default.diff(versionA, versionB) || "build";
-}
-var import_semver11;
-var init_semver_diff = __esm({
-  "../../../node_modules/.pnpm/semver-diff@4.0.0/node_modules/semver-diff/index.js"() {
-    "use strict";
-    import_semver11 = __toESM(require_semver2(), 1);
-  }
-});
-
 // ../semver-utils/lib/parseVersion.js
 function parseVersion(versionString) {
   const alphaMatch = versionString.match(ALPHA_VERSION_REGEX);
@@ -311715,6 +311942,39 @@ var init_parseVersion = __esm({
   }
 });
 
+// ../semver-utils/lib/isValidVersion.js
+function isValidVersion(versionString) {
+  try {
+    parseVersion(versionString);
+    return true;
+  } catch {
+    return false;
+  }
+}
+var init_isValidVersion = __esm({
+  "../semver-utils/lib/isValidVersion.js"() {
+    "use strict";
+    init_parseVersion();
+  }
+});
+
+// ../../../node_modules/.pnpm/semver-diff@4.0.0/node_modules/semver-diff/index.js
+function semverDiff(versionA, versionB) {
+  versionA = import_semver11.default.parse(versionA);
+  versionB = import_semver11.default.parse(versionB);
+  if (import_semver11.default.compareBuild(versionA, versionB) >= 0) {
+    return;
+  }
+  return import_semver11.default.diff(versionA, versionB) || "build";
+}
+var import_semver11;
+var init_semver_diff = __esm({
+  "../../../node_modules/.pnpm/semver-diff@4.0.0/node_modules/semver-diff/index.js"() {
+    "use strict";
+    import_semver11 = __toESM(require_semver2(), 1);
+  }
+});
+
 // ../semver-utils/lib/isVersionAhead.js
 function isVersionAhead(a3, b5) {
   if (a3 === b5) {
@@ -311803,6 +312063,7 @@ var init_isVersionAhead = __esm({
 var init_lib27 = __esm({
   "../semver-utils/lib/index.js"() {
     "use strict";
+    init_isValidVersion();
     init_isVersionAhead();
     init_parseVersion();
   }
@@ -460271,17 +460532,25 @@ function convertAuthScheme2({ scheme, playgroundConfig, context: context3 }) {
         description: scheme.docs
       };
     case "oauth": {
-      const tokenPath = scheme.configuration.tokenEndpoint.responseProperties.accessToken.propertyPath?.map((p6) => getOriginalName(p6.name)).join(".") || "$.body.access_token";
+      const configuration2 = scheme.configuration;
+      if (configuration2.type !== "clientCredentials") {
+        return {
+          type: "bearerAuth",
+          tokenName: "token",
+          description: scheme.docs
+        };
+      }
+      const tokenPath = configuration2.tokenEndpoint.responseProperties.accessToken.propertyPath?.map((p6) => getOriginalName(p6.name)).join(".") || "$.body.access_token";
       return playgroundConfig?.oauth ? {
         type: "oAuth",
         value: {
           type: "clientCredentials",
           value: {
             type: "referencedEndpoint",
-            endpointId: FdrAPI_exports.EndpointId(scheme.configuration.tokenEndpoint.endpointReference.endpointId),
+            endpointId: FdrAPI_exports.EndpointId(configuration2.tokenEndpoint.endpointReference.endpointId),
             accessTokenLocator: tokenPath,
-            headerName: scheme.configuration.tokenHeader,
-            tokenPrefix: scheme.configuration.tokenPrefix,
+            headerName: configuration2.tokenHeader,
+            tokenPrefix: configuration2.tokenPrefix,
             description: scheme.docs
           }
         }
@@ -691755,7 +692024,7 @@ var AccessTokenPosthogManager = class {
         properties: {
           ...event,
           ...event.properties,
-          version: "5.80.5",
+          version: "5.82.0",
           usingAccessToken: true,
           ...getRunIdProperties()
         }
@@ -691821,7 +692090,7 @@ var UserPosthogManager = class {
       distinctId: this.userId ?? await this.getPersistedDistinctId(),
       event: "CLI",
       properties: {
-        version: "5.80.5",
+        version: "5.82.0",
         ...event,
         ...event.properties,
         usingAccessToken: false,
@@ -872927,7 +873196,7 @@ var LOCAL_STORAGE_FOLDER4 = ".fern-dev";
 var LOGS_FOLDER_NAME = "logs";
 var MAX_LOGS_DIR_SIZE_BYTES = 100 * 1024 * 1024;
 function getCliSource() {
-  const version7 = "5.80.5";
+  const version7 = "5.82.0";
   return `cli@${version7}`;
 }
 var DebugLogger = class {
@@ -905623,7 +905892,7 @@ var LegacyDocsPublisher = class {
         previewId,
         disableTemplates: void 0,
         skipUpload,
-        cliVersion: "5.80.5",
+        cliVersion: "5.82.0",
         loginCommand: "fern auth login"
       });
       if (taskContext.getResult() === TaskResult.Failure) {
@@ -972488,7 +972757,7 @@ function getAutomationContextFromEnv() {
     config_branch: process.env.FERN_CONFIG_BRANCH,
     config_pr_number: process.env.FERN_CONFIG_PR_NUMBER,
     trigger: process.env.GITHUB_EVENT_NAME,
-    cli_version: "5.80.5"
+    cli_version: "5.82.0"
   };
 }
 function isAutomationMode() {
@@ -973320,7 +973589,7 @@ var CliContext = class _CliContext {
     if (false) {
       this.logger.error("CLI_VERSION is not defined");
     }
-    return "5.80.5";
+    return "5.82.0";
   }
   getCliName() {
     if (false) {
@@ -980709,6 +980978,341 @@ async function rerunFernCliAtVersion({
   }
 }
 
+// src/commands/org/orgConfig.ts
+init_lib19();
+init_lib27();
+init_lib6();
+init_source();
+init_latest_version();
+
+// src/commands/docs-theme/themeOrigin.ts
+var FDR_ORIGIN = process.env.OVERRIDE_FDR_ORIGIN ?? "https://registry-dev2.buildwithfern.com" ?? "https://registry.buildwithfern.com";
+function describeFetchError(error50) {
+  if (!(error50 instanceof Error)) {
+    return String(error50);
+  }
+  const cause = error50.cause;
+  if (cause instanceof Error) {
+    return cause.message;
+  }
+  return error50.message;
+}
+function parseErrorDetail(body) {
+  try {
+    const parsed = JSON.parse(body);
+    const message = parsed.message ?? parsed.error?.message;
+    if (typeof message === "string") {
+      return message;
+    }
+  } catch {
+  }
+  return void 0;
+}
+
+// src/commands/org/orgConfig.ts
+function clampVersionToOrgBounds(intendedVersion, { min, max }) {
+  const isPinned = min != null && max != null && min === max;
+  if (min != null && isVersionAhead(min, intendedVersion)) {
+    return { version: min, reason: isPinned ? "pin" : "floor" };
+  }
+  if (max != null && isVersionAhead(intendedVersion, max)) {
+    return { version: max, reason: isPinned ? "pin" : "ceiling" };
+  }
+  return { version: intendedVersion };
+}
+async function getAuthToken(cliContext) {
+  const token = await cliContext.runTask(async (context3) => {
+    return askToLogin(context3);
+  });
+  if (token == null) {
+    return cliContext.failAndThrow("Failed to authenticate. Please run 'fern login' first.", void 0, {
+      code: CliError.Code.AuthError
+    });
+  }
+  return token;
+}
+async function resolveOrgId(cliContext, orgOverride) {
+  if (orgOverride != null) {
+    return orgOverride;
+  }
+  const fernDirectory = await getFernDirectory();
+  if (fernDirectory == null) {
+    return cliContext.failAndThrow(
+      `Directory "${FERN_DIRECTORY}" not found. Run from a Fern project or pass --org.`,
+      void 0,
+      { code: CliError.Code.ConfigError }
+    );
+  }
+  const projectConfig = await cliContext.runTask(
+    (context3) => loadProjectConfig({ directory: fernDirectory, context: context3 })
+  );
+  return projectConfig.organization;
+}
+async function orgConfigRequest(context3, orgId, init3, actionLabel) {
+  let res;
+  try {
+    res = await fetch(`${FDR_ORIGIN}/v2/registry/org-config/${orgId}`, init3);
+  } catch (err) {
+    return context3.failAndThrow(`Failed to reach FDR: ${describeFetchError(err)}`, void 0, {
+      code: CliError.Code.NetworkError
+    });
+  }
+  if (!res.ok) {
+    const body = await res.text();
+    const detail = parseErrorDetail(body) ?? body;
+    return context3.failAndThrow(`Failed to ${actionLabel}: HTTP ${res.status} \u2014 ${detail}`, void 0, {
+      code: CliError.Code.NetworkError
+    });
+  }
+  return res;
+}
+async function getOrgConfig({
+  cliContext,
+  org,
+  json: json2
+}) {
+  const token = await getAuthToken(cliContext);
+  const orgId = await resolveOrgId(cliContext, org);
+  await cliContext.runTask(async (context3) => {
+    const res = await orgConfigRequest(
+      context3,
+      orgId,
+      { headers: { Authorization: `Bearer ${token.value}` } },
+      "get org config"
+    );
+    const data2 = await res.json();
+    if (json2) {
+      process.stdout.write(JSON.stringify(data2, null, 2) + "\n");
+      return;
+    }
+    if (data2.cliVersionMin == null && data2.cliVersionMax == null) {
+      context3.logger.info(`No org-level CLI config set for "${orgId}".`);
+      return;
+    }
+    const { cliVersionMin, cliVersionMax } = data2;
+    if (cliVersionMin != null && cliVersionMin === cliVersionMax) {
+      context3.logger.info(`Fern CLI pinned to ${source_default.green(cliVersionMin)}`);
+    } else if (cliVersionMin != null && cliVersionMax != null) {
+      context3.logger.info(
+        `Fern CLI must be between ${source_default.green(cliVersionMin)} and ${source_default.green(cliVersionMax)}`
+      );
+    } else if (cliVersionMin != null) {
+      context3.logger.info(`Fern CLI must be at least ${source_default.green(cliVersionMin)}`);
+    } else if (cliVersionMax != null) {
+      context3.logger.info(`Fern CLI must be at most ${source_default.green(cliVersionMax)}`);
+    }
+  });
+}
+var FERN_CLI_PACKAGE_NAME = "fern-api";
+async function assertCliVersionIsPublished(cliContext, version7) {
+  try {
+    await latestVersion(FERN_CLI_PACKAGE_NAME, { version: version7 });
+  } catch (err) {
+    if (err instanceof VersionNotFoundError) {
+      cliContext.failAndThrow(
+        `Fern CLI version "${version7}" was not found on npm. Set a published version \u2014 see https://www.npmjs.com/package/${FERN_CLI_PACKAGE_NAME}?activeTab=versions.`,
+        void 0,
+        { code: CliError.Code.ConfigError }
+      );
+      return;
+    }
+    cliContext.logger.debug(`Could not verify Fern CLI version "${version7}" exists on npm: ${String(err)}`);
+  }
+}
+async function setOrgCliVersion({
+  cliContext,
+  min,
+  max,
+  org
+}) {
+  for (const version7 of [min, max]) {
+    if (version7 != null && !isValidVersion(version7)) {
+      cliContext.failAndThrow(
+        `"${version7}" isn't a valid version. Pass an exact published version like 5.45.0 (or a prerelease like 5.45.0-rc0) \u2014 see https://www.npmjs.com/package/${FERN_CLI_PACKAGE_NAME}?activeTab=versions.`,
+        void 0,
+        { code: CliError.Code.ConfigError }
+      );
+      return;
+    }
+  }
+  if (min != null && max != null && isVersionAhead(min, max)) {
+    cliContext.failAndThrow(`Minimum version ${min} must not be greater than maximum version ${max}.`, void 0, {
+      code: CliError.Code.ConfigError
+    });
+    return;
+  }
+  for (const version7 of [min, max]) {
+    if (version7 != null) {
+      await assertCliVersionIsPublished(cliContext, version7);
+    }
+  }
+  const token = await getAuthToken(cliContext);
+  const orgId = await resolveOrgId(cliContext, org);
+  const requestBody = {};
+  if (min != null) {
+    requestBody.cliVersionMin = min;
+  }
+  if (max != null) {
+    requestBody.cliVersionMax = max;
+  }
+  await cliContext.runTask(async (context3) => {
+    await orgConfigRequest(
+      context3,
+      orgId,
+      {
+        method: "PUT",
+        headers: {
+          Authorization: `Bearer ${token.value}`,
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify(requestBody)
+      },
+      "set org config"
+    );
+    if (min != null && max != null && min === max) {
+      context3.logger.info(`Pinned CLI version to ${source_default.green(min)} for org "${orgId}".`);
+    } else if (min != null && max != null) {
+      context3.logger.info(`Set CLI version range to ${source_default.green(`${min} \u2013 ${max}`)} for org "${orgId}".`);
+    } else if (min != null) {
+      context3.logger.info(`Set minimum CLI version to ${source_default.green(min)} for org "${orgId}".`);
+    } else if (max != null) {
+      context3.logger.info(`Set maximum CLI version to ${source_default.green(max)} for org "${orgId}".`);
+    }
+  });
+}
+async function unsetOrgCliVersion({
+  cliContext,
+  org,
+  field: field5
+}) {
+  const token = await getAuthToken(cliContext);
+  const orgId = await resolveOrgId(cliContext, org);
+  await cliContext.runTask(async (context3) => {
+    const init3 = field5 === "all" ? { method: "DELETE", headers: { Authorization: `Bearer ${token.value}` } } : {
+      method: "PUT",
+      headers: {
+        Authorization: `Bearer ${token.value}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify(field5 === "min" ? { cliVersionMin: null } : { cliVersionMax: null })
+    };
+    await orgConfigRequest(context3, orgId, init3, "unset org config");
+    const label = field5 === "min" ? "minimum" : field5 === "max" ? "maximum" : "minimum and maximum";
+    context3.logger.info(`Removed ${label} CLI version for org "${orgId}".`);
+  });
+}
+function sanitizeBound(version7) {
+  return version7 != null && isValidVersion(version7) ? version7 : void 0;
+}
+async function fetchOrgCliVersionBounds({
+  cliContext,
+  orgId,
+  token,
+  timeoutMs
+}) {
+  try {
+    const res = await fetch(`${FDR_ORIGIN}/v2/registry/org-config/${orgId}`, {
+      headers: { Authorization: `Bearer ${token}` },
+      signal: timeoutMs != null ? AbortSignal.timeout(timeoutMs) : void 0
+    });
+    if (!res.ok) {
+      cliContext.logger.debug(`Failed to fetch org config: HTTP ${res.status}`);
+      return { ok: false };
+    }
+    const data2 = await res.json();
+    return {
+      ok: true,
+      bounds: { min: sanitizeBound(data2.cliVersionMin), max: sanitizeBound(data2.cliVersionMax) }
+    };
+  } catch (err) {
+    cliContext.logger.debug(`Failed to fetch org config: ${describeFetchError(err)}`);
+    return { ok: false };
+  }
+}
+var ORG_BOUNDS_FETCH_TIMEOUT_MS = 2500;
+async function getOrgCliVersionBounds({
+  cliContext,
+  orgId
+}) {
+  if (process.env.FERN_IGNORE_ORG_VERSION_BOUNDS === "true" || process.env.FERN_IGNORE_ORG_VERSION_FLOOR === "true") {
+    return {};
+  }
+  try {
+    const token = await getToken2();
+    if (token == null) {
+      return {};
+    }
+    const result = await fetchOrgCliVersionBounds({
+      cliContext,
+      orgId,
+      token: token.value,
+      timeoutMs: ORG_BOUNDS_FETCH_TIMEOUT_MS
+    });
+    if (!result.ok) {
+      return {};
+    }
+    return result.bounds;
+  } catch (err) {
+    cliContext.logger.debug(`Failed to resolve org CLI version bounds: ${String(err)}`);
+    return {};
+  }
+}
+async function resolveClampedVersionForOrg({
+  cliContext,
+  orgId,
+  version: version7
+}) {
+  const bounds = await getOrgCliVersionBounds({ cliContext, orgId });
+  try {
+    return { ...clampVersionToOrgBounds(version7, bounds), bounds };
+  } catch {
+    return { version: version7, bounds };
+  }
+}
+function describeOrgBounds(orgId, { min, max }, color3) {
+  if (min != null && max != null && min === max) {
+    return `Org "${orgId}" pins Fern CLI to ${color3(min)}`;
+  }
+  if (min != null && max != null) {
+    return `Org "${orgId}" requires Fern CLI between ${color3(min)} and ${color3(max)}`;
+  }
+  if (min != null) {
+    return `Org "${orgId}" requires Fern CLI ${color3(`>= ${min}`)}`;
+  }
+  if (max != null) {
+    return `Org "${orgId}" caps Fern CLI at ${color3(`<= ${max}`)}`;
+  }
+  return `Org "${orgId}"`;
+}
+async function applyOrgBoundsToVersion({
+  cliContext,
+  orgId,
+  intendedVersion
+}) {
+  const { version: version7, reason, bounds } = await resolveClampedVersionForOrg({
+    cliContext,
+    orgId,
+    version: intendedVersion
+  });
+  if (reason != null) {
+    cliContext.logger.info(`${describeOrgBounds(orgId, bounds, source_default.green)} \u2014 running ${source_default.green(version7)}.`);
+  }
+  return version7;
+}
+async function warnIfVersionOutsideOrgBounds({
+  cliContext,
+  orgId,
+  currentVersion
+}) {
+  const { reason, bounds } = await resolveClampedVersionForOrg({ cliContext, orgId, version: currentVersion });
+  if (reason != null) {
+    const suffix = reason === "ceiling" ? "was not downgraded" : reason === "floor" ? "was not upgraded" : "was not changed";
+    cliContext.logger.warn(
+      `${describeOrgBounds(orgId, bounds, source_default.yellow)}, but this CLI is ${source_default.yellow(currentVersion)}. Version redirection is disabled, so it ${suffix}.`
+    );
+  }
+}
+
 // src/commands/upgrade/upgrade.ts
 var PREVIOUS_VERSION_ENV_VAR = "FERN_PRE_UPGRADE_VERSION";
 function ensureFinalNewline(content5) {
@@ -980939,6 +981543,19 @@ async function upgrade({
       }
     }
   }
+  if (resolvedTargetVersion == null) {
+    cliContext.logger.info("No upgrade available.");
+    return;
+  }
+  if (!isLocalDev) {
+    try {
+      resolvedTargetVersion = await applyOrgVersionBounds({
+        cliContext,
+        resolvedTargetVersion
+      });
+    } catch {
+    }
+  }
   if (cliContext.environment.packageVersion === resolvedTargetVersion || isLocalDev) {
     const fernDirectory2 = await getFernDirectory();
     if (fernDirectory2 == null) {
@@ -981036,6 +981653,56 @@ async function upgrade({
     throw error50;
   }
 }
+async function applyOrgVersionBounds({
+  cliContext,
+  resolvedTargetVersion
+}) {
+  const fernDirectory = await getFernDirectory();
+  if (fernDirectory == null) {
+    return resolvedTargetVersion;
+  }
+  let orgId;
+  try {
+    const projectConfig = await cliContext.runTask(
+      (context3) => loadProjectConfig({ directory: fernDirectory, context: context3 })
+    );
+    orgId = projectConfig.organization;
+  } catch {
+    return resolvedTargetVersion;
+  }
+  const token = await getToken2();
+  if (token == null) {
+    return resolvedTargetVersion;
+  }
+  const result = await fetchOrgCliVersionBounds({
+    cliContext,
+    orgId,
+    token: token.value,
+    timeoutMs: ORG_BOUNDS_FETCH_TIMEOUT_MS
+  });
+  if (!result.ok) {
+    return resolvedTargetVersion;
+  }
+  const { min, max } = result.bounds;
+  if (min == null && max == null) {
+    return resolvedTargetVersion;
+  }
+  try {
+    const { version: version7, reason } = clampVersionToOrgBounds(resolvedTargetVersion, { min, max });
+    if (reason === "floor") {
+      cliContext.logger.info(
+        `Org "${orgId}" requires minimum CLI version ${source_default.green(version7)} (resolved ${resolvedTargetVersion}).`
+      );
+    } else if (reason === "ceiling") {
+      cliContext.logger.info(
+        `Org "${orgId}" caps CLI version at ${source_default.green(version7)} (resolved ${resolvedTargetVersion}).`
+      );
+    }
+    return version7;
+  } catch {
+    return resolvedTargetVersion;
+  }
+}
 
 // src/commands/automations/upgrade/executeAutomationsUpgrade.ts
 var CHANGELOG_BASE2 = "https://buildwithfern.com/learn/sdks/generators";
@@ -982280,32 +982947,6 @@ Found ${previewDeployments.length} preview deployment(s):
 // src/commands/docs-theme/deleteDocsTheme.ts
 var import_node_readline6 = require("readline");
 init_lib6();
-
-// src/commands/docs-theme/themeOrigin.ts
-var FDR_ORIGIN = process.env.OVERRIDE_FDR_ORIGIN ?? "https://registry-dev2.buildwithfern.com" ?? "https://registry.buildwithfern.com";
-function describeFetchError(error50) {
-  if (!(error50 instanceof Error)) {
-    return String(error50);
-  }
-  const cause = error50.cause;
-  if (cause instanceof Error) {
-    return cause.message;
-  }
-  return error50.message;
-}
-function parseErrorDetail(body) {
-  try {
-    const parsed = JSON.parse(body);
-    const message = parsed.message ?? parsed.error?.message;
-    if (typeof message === "string") {
-      return message;
-    }
-  } catch {
-  }
-  return void 0;
-}
-
-// src/commands/docs-theme/deleteDocsTheme.ts
 async function confirmDeletion(themeName) {
   const rl = (0, import_node_readline6.createInterface)({ input: process.stdin, output: process.stderr });
   return new Promise((resolve15) => {
@@ -988780,6 +989421,31 @@ function installProcessHandlers(cliContext, { isLocal }) {
   });
 }
 
+// src/utils/versionRedirection.ts
+init_helpers();
+var VERSION_REDIRECTION_EXEMPT_COMMANDS = /* @__PURE__ */ new Set(["org"]);
+function isVersionRedirectionExempt(argv) {
+  const command3 = getInvokedCommandName(argv);
+  return command3 != null && VERSION_REDIRECTION_EXEMPT_COMMANDS.has(command3);
+}
+function getInvokedCommandName(argv) {
+  const args = hideBin(argv);
+  for (let i5 = 0; i5 < args.length; i5++) {
+    const arg = args[i5];
+    if (arg == null) {
+      continue;
+    }
+    if (arg.startsWith("-")) {
+      if (arg === "--log-level") {
+        i5++;
+      }
+      continue;
+    }
+    return arg;
+  }
+  return void 0;
+}
+
 // src/cli.ts
 if (process.platform === "linux" && parseInt(process.versions.node.split(".")[0] ?? "0", 10) >= 26 && process.env.UV_USE_IO_URING !== "0") {
   const result = (0, import_node_child_process14.spawnSync)(process.execPath, process.argv.slice(1), {
@@ -988826,7 +989492,7 @@ async function runCli() {
     if (cwd2 != null) {
       process.chdir(cwd2);
     }
-    if (isCompletion) {
+    if (isCompletion || isVersionRedirectionExempt(process.argv)) {
       await tryRunCli(cliContext);
     } else {
       const versionOfCliToRun = await getIntendedVersionOfCli(cliContext);
@@ -988916,6 +989582,7 @@ async function tryRunCli(cliContext) {
   addAutomationsCommand(cli, cliContext);
   addGetOrganizationCommand(cli, cliContext);
   addGeneratorCommands(cli, cliContext);
+  addOrgCommand2(cli, cliContext);
   addProtocGenFernCommand(cli, cliContext);
   addInstallDependenciesCommand(cli, cliContext);
   cli.middleware(async (argv) => {
@@ -988929,6 +989596,14 @@ async function tryRunCli(cliContext) {
 }
 async function getIntendedVersionOfCli(cliContext) {
   if (process.env.FERN_NO_VERSION_REDIRECTION === "true") {
+    const orgId = await getOrganization2(cliContext);
+    if (orgId != null) {
+      await warnIfVersionOutsideOrgBounds({
+        cliContext,
+        orgId,
+        currentVersion: cliContext.environment.packageVersion
+      });
+    }
     return cliContext.environment.packageVersion;
   }
   const fernDirectory = await getFernDirectory();
@@ -988936,13 +989611,19 @@ async function getIntendedVersionOfCli(cliContext) {
     const projectConfig = await cliContext.runTask(
       (context3) => loadProjectConfig({ directory: fernDirectory, context: context3 })
     );
+    let intendedVersion;
     if (projectConfig.version === "*") {
-      return cliContext.environment.packageVersion;
-    }
-    if (projectConfig.version === "latest") {
-      return getLatestVersionOfCli({ cliEnvironment: cliContext.environment });
+      intendedVersion = cliContext.environment.packageVersion;
+    } else if (projectConfig.version === "latest") {
+      intendedVersion = await getLatestVersionOfCli({ cliEnvironment: cliContext.environment });
+    } else {
+      intendedVersion = projectConfig.version;
     }
-    return projectConfig.version;
+    return await applyOrgBoundsToVersion({
+      cliContext,
+      orgId: projectConfig.organization,
+      intendedVersion
+    });
   }
   return getLatestVersionOfCli({ cliEnvironment: cliContext.environment });
 }
@@ -991753,6 +992434,77 @@ Remove ${matched.length} patch(es)? [y/N] `, resolvePrompt);
     }
   );
 }
+function addOrgCommand2(cli, cliContext) {
+  cli.command("org", "Manage org-level configuration", (yargs) => {
+    yargs.command(
+      "set",
+      "Set an org-level config value (admin only)",
+      (setYargs) => setYargs.command(
+        "cli-version [version]",
+        "Set the org's Fern CLI version policy: pin an exact version, or set a min/max range",
+        (y4) => y4.positional("version", {
+          type: "string",
+          description: "Pin to an exact version (sets both the floor and ceiling)"
+        }).option("min", {
+          type: "string",
+          description: "Minimum allowed CLI version (floor)"
+        }).option("max", {
+          type: "string",
+          description: "Maximum allowed CLI version (ceiling)"
+        }).option("org", { type: "string", description: "Override org ID" }),
+        async (argv) => {
+          cliContext.instrumentPostHogEvent({ command: "fern org set cli-version" });
+          const { version: version7, min, max } = argv;
+          if (version7 != null && (min != null || max != null)) {
+            cliContext.failAndThrow(
+              "Pass either an exact version to pin (e.g. `fern org set cli-version 5.45.0`) or --min/--max to set a range, not both."
+            );
+            return;
+          }
+          if (version7 == null && min == null && max == null) {
+            cliContext.failAndThrow(
+              "Nothing to set. Pass a version to pin (e.g. `fern org set cli-version 5.45.0`) or --min/--max to set a range."
+            );
+            return;
+          }
+          if (version7 != null) {
+            await setOrgCliVersion({ cliContext, min: version7, max: version7, org: argv.org });
+          } else {
+            await setOrgCliVersion({ cliContext, min, max, org: argv.org });
+          }
+        }
+      ).demandCommand(1, "Specify what to set, e.g. `fern org set cli-version 5.45.0`."),
+      () => {
+      }
+    );
+    yargs.command(
+      "get",
+      "View org-level config",
+      (y4) => y4.option("org", { type: "string", description: "Override org ID" }).option("json", { type: "boolean", description: "Output as JSON" }),
+      async (argv) => {
+        cliContext.instrumentPostHogEvent({ command: "fern org get" });
+        await getOrgConfig({ cliContext, org: argv.org, json: argv.json });
+      }
+    );
+    yargs.command(
+      "unset",
+      "Remove an org-level config value (admin only)",
+      (unsetYargs) => unsetYargs.command(
+        "cli-version",
+        "Clear the org's Fern CLI version policy (both bounds by default, or --min/--max for one end)",
+        (y4) => y4.option("min", { type: "boolean", description: "Clear only the floor" }).option("max", { type: "boolean", description: "Clear only the ceiling" }).option("org", { type: "string", description: "Override org ID" }),
+        async (argv) => {
+          cliContext.instrumentPostHogEvent({ command: "fern org unset cli-version" });
+          const field5 = argv.min && !argv.max ? "min" : argv.max && !argv.min ? "max" : "all";
+          await unsetOrgCliVersion({ cliContext, org: argv.org, field: field5 });
+        }
+      ).demandCommand(1, "Specify what to unset, e.g. `fern org unset cli-version`."),
+      () => {
+      }
+    );
+    return yargs;
+  });
+}
 function parseOwnerRepo(githubRepo) {
   const cleaned = githubRepo.replace(/^https?:\/\//, "").replace(/\.git$/, "").replace(/^github\.com\//, "");
   const parts = cleaned.split("/");

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "5.80.5",
+  "version": "5.82.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fern-api/fern.git",