@fern-api/fern-api-dev 5.81.0 → 5.83.0

package/cli.cjs

@@ -73646,6 +73646,7 @@ var init_OAuthAuthorizationCode2 = __esm({
       tokenUrl: schemas_exports3.string(),
       refreshUrl: schemas_exports3.string().optional(),
       redirectUri: schemas_exports3.string().optional(),
+      redirectUriBackupPorts: schemas_exports3.list(schemas_exports3.number()).optional(),
       scopes: schemas_exports3.list(schemas_exports3.string()).optional(),
       pkce: OAuthPkceConfiguration,
       authorizationParameters: schemas_exports3.record(schemas_exports3.string(), schemas_exports3.string()).optional(),
@@ -102386,6 +102387,7 @@ var init_latest_version = __esm({
   "../../../node_modules/.pnpm/latest-version@9.0.0/node_modules/latest-version/index.js"() {
     "use strict";
     init_package_json();
+    init_package_json();
   }
 });
 
@@ -311806,23 +311808,6 @@ var init_lib26 = __esm({
   }
 });
 
-// ../../../node_modules/.pnpm/semver-diff@4.0.0/node_modules/semver-diff/index.js
-function semverDiff(versionA, versionB) {
-  versionA = import_semver11.default.parse(versionA);
-  versionB = import_semver11.default.parse(versionB);
-  if (import_semver11.default.compareBuild(versionA, versionB) >= 0) {
-    return;
-  }
-  return import_semver11.default.diff(versionA, versionB) || "build";
-}
-var import_semver11;
-var init_semver_diff = __esm({
-  "../../../node_modules/.pnpm/semver-diff@4.0.0/node_modules/semver-diff/index.js"() {
-    "use strict";
-    import_semver11 = __toESM(require_semver2(), 1);
-  }
-});
-
 // ../semver-utils/lib/parseVersion.js
 function parseVersion(versionString) {
   const alphaMatch = versionString.match(ALPHA_VERSION_REGEX);
@@ -311958,6 +311943,39 @@ var init_parseVersion = __esm({
   }
 });
 
+// ../semver-utils/lib/isValidVersion.js
+function isValidVersion(versionString) {
+  try {
+    parseVersion(versionString);
+    return true;
+  } catch {
+    return false;
+  }
+}
+var init_isValidVersion = __esm({
+  "../semver-utils/lib/isValidVersion.js"() {
+    "use strict";
+    init_parseVersion();
+  }
+});
+
+// ../../../node_modules/.pnpm/semver-diff@4.0.0/node_modules/semver-diff/index.js
+function semverDiff(versionA, versionB) {
+  versionA = import_semver11.default.parse(versionA);
+  versionB = import_semver11.default.parse(versionB);
+  if (import_semver11.default.compareBuild(versionA, versionB) >= 0) {
+    return;
+  }
+  return import_semver11.default.diff(versionA, versionB) || "build";
+}
+var import_semver11;
+var init_semver_diff = __esm({
+  "../../../node_modules/.pnpm/semver-diff@4.0.0/node_modules/semver-diff/index.js"() {
+    "use strict";
+    import_semver11 = __toESM(require_semver2(), 1);
+  }
+});
+
 // ../semver-utils/lib/isVersionAhead.js
 function isVersionAhead(a3, b5) {
   if (a3 === b5) {
@@ -312046,6 +312064,7 @@ var init_isVersionAhead = __esm({
 var init_lib27 = __esm({
   "../semver-utils/lib/index.js"() {
     "use strict";
+    init_isValidVersion();
     init_isVersionAhead();
     init_parseVersion();
   }
@@ -692006,7 +692025,7 @@ var AccessTokenPosthogManager = class {
         properties: {
           ...event,
           ...event.properties,
-          version: "5.81.0",
+          version: "5.83.0",
           usingAccessToken: true,
           ...getRunIdProperties()
         }
@@ -692072,7 +692091,7 @@ var UserPosthogManager = class {
       distinctId: this.userId ?? await this.getPersistedDistinctId(),
       event: "CLI",
       properties: {
-        version: "5.81.0",
+        version: "5.83.0",
         ...event,
         ...event.properties,
         usingAccessToken: false,
@@ -873178,7 +873197,7 @@ var LOCAL_STORAGE_FOLDER4 = ".fern-dev";
 var LOGS_FOLDER_NAME = "logs";
 var MAX_LOGS_DIR_SIZE_BYTES = 100 * 1024 * 1024;
 function getCliSource() {
-  const version7 = "5.81.0";
+  const version7 = "5.83.0";
   return `cli@${version7}`;
 }
 var DebugLogger = class {
@@ -905874,7 +905893,7 @@ var LegacyDocsPublisher = class {
         previewId,
         disableTemplates: void 0,
         skipUpload,
-        cliVersion: "5.81.0",
+        cliVersion: "5.83.0",
         loginCommand: "fern auth login"
       });
       if (taskContext.getResult() === TaskResult.Failure) {
@@ -956414,6 +956433,15 @@ var TypescriptCustomConfigSchema = external_exports2.strictObject({
   customPagerName: external_exports2.optional(external_exports2.string()),
   resolveQueryParameterNameConflicts: external_exports2.optional(external_exports2.boolean()),
   alwaysSendAuth: external_exports2.optional(external_exports2.boolean()),
+  // When true, makes client auth parameters optional even when the spec
+  // mandates auth on all endpoints (isAuthMandatory=true), and sends requests
+  // unauthenticated instead of throwing when no credentials are supplied.
+  // Useful for hand-maintained wrapper clients that authenticate via external
+  // means. Orthogonal to `alwaysSendAuth`, which decides which endpoints get
+  // auth headers: with both enabled, endpoints that don't require auth still
+  // get auth headers when credentials are supplied, and no endpoint gets them
+  // when credentials are absent.
+  "optional-auth": external_exports2.optional(external_exports2.boolean()),
   generateReactQueryHooks: external_exports2.optional(external_exports2.boolean()),
   // beta (not in docs)
   includeContentHeadersOnFileDownloadResponse: external_exports2.optional(external_exports2.boolean()),
@@ -972739,7 +972767,7 @@ function getAutomationContextFromEnv() {
     config_branch: process.env.FERN_CONFIG_BRANCH,
     config_pr_number: process.env.FERN_CONFIG_PR_NUMBER,
     trigger: process.env.GITHUB_EVENT_NAME,
-    cli_version: "5.81.0"
+    cli_version: "5.83.0"
   };
 }
 function isAutomationMode() {
@@ -973571,7 +973599,7 @@ var CliContext = class _CliContext {
     if (false) {
       this.logger.error("CLI_VERSION is not defined");
     }
-    return "5.81.0";
+    return "5.83.0";
   }
   getCliName() {
     if (false) {
@@ -980960,6 +980988,341 @@ async function rerunFernCliAtVersion({
   }
 }
 
+// src/commands/org/orgConfig.ts
+init_lib19();
+init_lib27();
+init_lib6();
+init_source();
+init_latest_version();
+
+// src/commands/docs-theme/themeOrigin.ts
+var FDR_ORIGIN = process.env.OVERRIDE_FDR_ORIGIN ?? "https://registry-dev2.buildwithfern.com" ?? "https://registry.buildwithfern.com";
+function describeFetchError(error50) {
+  if (!(error50 instanceof Error)) {
+    return String(error50);
+  }
+  const cause = error50.cause;
+  if (cause instanceof Error) {
+    return cause.message;
+  }
+  return error50.message;
+}
+function parseErrorDetail(body) {
+  try {
+    const parsed = JSON.parse(body);
+    const message = parsed.message ?? parsed.error?.message;
+    if (typeof message === "string") {
+      return message;
+    }
+  } catch {
+  }
+  return void 0;
+}
+
+// src/commands/org/orgConfig.ts
+function clampVersionToOrgBounds(intendedVersion, { min, max }) {
+  const isPinned = min != null && max != null && min === max;
+  if (min != null && isVersionAhead(min, intendedVersion)) {
+    return { version: min, reason: isPinned ? "pin" : "floor" };
+  }
+  if (max != null && isVersionAhead(intendedVersion, max)) {
+    return { version: max, reason: isPinned ? "pin" : "ceiling" };
+  }
+  return { version: intendedVersion };
+}
+async function getAuthToken(cliContext) {
+  const token = await cliContext.runTask(async (context3) => {
+    return askToLogin(context3);
+  });
+  if (token == null) {
+    return cliContext.failAndThrow("Failed to authenticate. Please run 'fern login' first.", void 0, {
+      code: CliError.Code.AuthError
+    });
+  }
+  return token;
+}
+async function resolveOrgId(cliContext, orgOverride) {
+  if (orgOverride != null) {
+    return orgOverride;
+  }
+  const fernDirectory = await getFernDirectory();
+  if (fernDirectory == null) {
+    return cliContext.failAndThrow(
+      `Directory "${FERN_DIRECTORY}" not found. Run from a Fern project or pass --org.`,
+      void 0,
+      { code: CliError.Code.ConfigError }
+    );
+  }
+  const projectConfig = await cliContext.runTask(
+    (context3) => loadProjectConfig({ directory: fernDirectory, context: context3 })
+  );
+  return projectConfig.organization;
+}
+async function orgConfigRequest(context3, orgId, init3, actionLabel) {
+  let res;
+  try {
+    res = await fetch(`${FDR_ORIGIN}/v2/registry/org-config/${orgId}`, init3);
+  } catch (err) {
+    return context3.failAndThrow(`Failed to reach FDR: ${describeFetchError(err)}`, void 0, {
+      code: CliError.Code.NetworkError
+    });
+  }
+  if (!res.ok) {
+    const body = await res.text();
+    const detail = parseErrorDetail(body) ?? body;
+    return context3.failAndThrow(`Failed to ${actionLabel}: HTTP ${res.status} \u2014 ${detail}`, void 0, {
+      code: CliError.Code.NetworkError
+    });
+  }
+  return res;
+}
+async function getOrgConfig({
+  cliContext,
+  org,
+  json: json2
+}) {
+  const token = await getAuthToken(cliContext);
+  const orgId = await resolveOrgId(cliContext, org);
+  await cliContext.runTask(async (context3) => {
+    const res = await orgConfigRequest(
+      context3,
+      orgId,
+      { headers: { Authorization: `Bearer ${token.value}` } },
+      "get org config"
+    );
+    const data2 = await res.json();
+    if (json2) {
+      process.stdout.write(JSON.stringify(data2, null, 2) + "\n");
+      return;
+    }
+    if (data2.cliVersionMin == null && data2.cliVersionMax == null) {
+      context3.logger.info(`No org-level CLI config set for "${orgId}".`);
+      return;
+    }
+    const { cliVersionMin, cliVersionMax } = data2;
+    if (cliVersionMin != null && cliVersionMin === cliVersionMax) {
+      context3.logger.info(`Fern CLI pinned to ${source_default.green(cliVersionMin)}`);
+    } else if (cliVersionMin != null && cliVersionMax != null) {
+      context3.logger.info(
+        `Fern CLI must be between ${source_default.green(cliVersionMin)} and ${source_default.green(cliVersionMax)}`
+      );
+    } else if (cliVersionMin != null) {
+      context3.logger.info(`Fern CLI must be at least ${source_default.green(cliVersionMin)}`);
+    } else if (cliVersionMax != null) {
+      context3.logger.info(`Fern CLI must be at most ${source_default.green(cliVersionMax)}`);
+    }
+  });
+}
+var FERN_CLI_PACKAGE_NAME = "fern-api";
+async function assertCliVersionIsPublished(cliContext, version7) {
+  try {
+    await latestVersion(FERN_CLI_PACKAGE_NAME, { version: version7 });
+  } catch (err) {
+    if (err instanceof VersionNotFoundError) {
+      cliContext.failAndThrow(
+        `Fern CLI version "${version7}" was not found on npm. Set a published version \u2014 see https://www.npmjs.com/package/${FERN_CLI_PACKAGE_NAME}?activeTab=versions.`,
+        void 0,
+        { code: CliError.Code.ConfigError }
+      );
+      return;
+    }
+    cliContext.logger.debug(`Could not verify Fern CLI version "${version7}" exists on npm: ${String(err)}`);
+  }
+}
+async function setOrgCliVersion({
+  cliContext,
+  min,
+  max,
+  org
+}) {
+  for (const version7 of [min, max]) {
+    if (version7 != null && !isValidVersion(version7)) {
+      cliContext.failAndThrow(
+        `"${version7}" isn't a valid version. Pass an exact published version like 5.45.0 (or a prerelease like 5.45.0-rc0) \u2014 see https://www.npmjs.com/package/${FERN_CLI_PACKAGE_NAME}?activeTab=versions.`,
+        void 0,
+        { code: CliError.Code.ConfigError }
+      );
+      return;
+    }
+  }
+  if (min != null && max != null && isVersionAhead(min, max)) {
+    cliContext.failAndThrow(`Minimum version ${min} must not be greater than maximum version ${max}.`, void 0, {
+      code: CliError.Code.ConfigError
+    });
+    return;
+  }
+  for (const version7 of [min, max]) {
+    if (version7 != null) {
+      await assertCliVersionIsPublished(cliContext, version7);
+    }
+  }
+  const token = await getAuthToken(cliContext);
+  const orgId = await resolveOrgId(cliContext, org);
+  const requestBody = {};
+  if (min != null) {
+    requestBody.cliVersionMin = min;
+  }
+  if (max != null) {
+    requestBody.cliVersionMax = max;
+  }
+  await cliContext.runTask(async (context3) => {
+    await orgConfigRequest(
+      context3,
+      orgId,
+      {
+        method: "PUT",
+        headers: {
+          Authorization: `Bearer ${token.value}`,
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify(requestBody)
+      },
+      "set org config"
+    );
+    if (min != null && max != null && min === max) {
+      context3.logger.info(`Pinned CLI version to ${source_default.green(min)} for org "${orgId}".`);
+    } else if (min != null && max != null) {
+      context3.logger.info(`Set CLI version range to ${source_default.green(`${min} \u2013 ${max}`)} for org "${orgId}".`);
+    } else if (min != null) {
+      context3.logger.info(`Set minimum CLI version to ${source_default.green(min)} for org "${orgId}".`);
+    } else if (max != null) {
+      context3.logger.info(`Set maximum CLI version to ${source_default.green(max)} for org "${orgId}".`);
+    }
+  });
+}
+async function unsetOrgCliVersion({
+  cliContext,
+  org,
+  field: field5
+}) {
+  const token = await getAuthToken(cliContext);
+  const orgId = await resolveOrgId(cliContext, org);
+  await cliContext.runTask(async (context3) => {
+    const init3 = field5 === "all" ? { method: "DELETE", headers: { Authorization: `Bearer ${token.value}` } } : {
+      method: "PUT",
+      headers: {
+        Authorization: `Bearer ${token.value}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify(field5 === "min" ? { cliVersionMin: null } : { cliVersionMax: null })
+    };
+    await orgConfigRequest(context3, orgId, init3, "unset org config");
+    const label = field5 === "min" ? "minimum" : field5 === "max" ? "maximum" : "minimum and maximum";
+    context3.logger.info(`Removed ${label} CLI version for org "${orgId}".`);
+  });
+}
+function sanitizeBound(version7) {
+  return version7 != null && isValidVersion(version7) ? version7 : void 0;
+}
+async function fetchOrgCliVersionBounds({
+  cliContext,
+  orgId,
+  token,
+  timeoutMs
+}) {
+  try {
+    const res = await fetch(`${FDR_ORIGIN}/v2/registry/org-config/${orgId}`, {
+      headers: { Authorization: `Bearer ${token}` },
+      signal: timeoutMs != null ? AbortSignal.timeout(timeoutMs) : void 0
+    });
+    if (!res.ok) {
+      cliContext.logger.debug(`Failed to fetch org config: HTTP ${res.status}`);
+      return { ok: false };
+    }
+    const data2 = await res.json();
+    return {
+      ok: true,
+      bounds: { min: sanitizeBound(data2.cliVersionMin), max: sanitizeBound(data2.cliVersionMax) }
+    };
+  } catch (err) {
+    cliContext.logger.debug(`Failed to fetch org config: ${describeFetchError(err)}`);
+    return { ok: false };
+  }
+}
+var ORG_BOUNDS_FETCH_TIMEOUT_MS = 2500;
+async function getOrgCliVersionBounds({
+  cliContext,
+  orgId
+}) {
+  if (process.env.FERN_IGNORE_ORG_VERSION_BOUNDS === "true" || process.env.FERN_IGNORE_ORG_VERSION_FLOOR === "true") {
+    return {};
+  }
+  try {
+    const token = await getToken2();
+    if (token == null) {
+      return {};
+    }
+    const result = await fetchOrgCliVersionBounds({
+      cliContext,
+      orgId,
+      token: token.value,
+      timeoutMs: ORG_BOUNDS_FETCH_TIMEOUT_MS
+    });
+    if (!result.ok) {
+      return {};
+    }
+    return result.bounds;
+  } catch (err) {
+    cliContext.logger.debug(`Failed to resolve org CLI version bounds: ${String(err)}`);
+    return {};
+  }
+}
+async function resolveClampedVersionForOrg({
+  cliContext,
+  orgId,
+  version: version7
+}) {
+  const bounds = await getOrgCliVersionBounds({ cliContext, orgId });
+  try {
+    return { ...clampVersionToOrgBounds(version7, bounds), bounds };
+  } catch {
+    return { version: version7, bounds };
+  }
+}
+function describeOrgBounds(orgId, { min, max }, color3) {
+  if (min != null && max != null && min === max) {
+    return `Org "${orgId}" pins Fern CLI to ${color3(min)}`;
+  }
+  if (min != null && max != null) {
+    return `Org "${orgId}" requires Fern CLI between ${color3(min)} and ${color3(max)}`;
+  }
+  if (min != null) {
+    return `Org "${orgId}" requires Fern CLI ${color3(`>= ${min}`)}`;
+  }
+  if (max != null) {
+    return `Org "${orgId}" caps Fern CLI at ${color3(`<= ${max}`)}`;
+  }
+  return `Org "${orgId}"`;
+}
+async function applyOrgBoundsToVersion({
+  cliContext,
+  orgId,
+  intendedVersion
+}) {
+  const { version: version7, reason, bounds } = await resolveClampedVersionForOrg({
+    cliContext,
+    orgId,
+    version: intendedVersion
+  });
+  if (reason != null) {
+    cliContext.logger.info(`${describeOrgBounds(orgId, bounds, source_default.green)} \u2014 running ${source_default.green(version7)}.`);
+  }
+  return version7;
+}
+async function warnIfVersionOutsideOrgBounds({
+  cliContext,
+  orgId,
+  currentVersion
+}) {
+  const { reason, bounds } = await resolveClampedVersionForOrg({ cliContext, orgId, version: currentVersion });
+  if (reason != null) {
+    const suffix = reason === "ceiling" ? "was not downgraded" : reason === "floor" ? "was not upgraded" : "was not changed";
+    cliContext.logger.warn(
+      `${describeOrgBounds(orgId, bounds, source_default.yellow)}, but this CLI is ${source_default.yellow(currentVersion)}. Version redirection is disabled, so it ${suffix}.`
+    );
+  }
+}
+
 // src/commands/upgrade/upgrade.ts
 var PREVIOUS_VERSION_ENV_VAR = "FERN_PRE_UPGRADE_VERSION";
 function ensureFinalNewline(content5) {
@@ -981190,6 +981553,19 @@ async function upgrade({
       }
     }
   }
+  if (resolvedTargetVersion == null) {
+    cliContext.logger.info("No upgrade available.");
+    return;
+  }
+  if (!isLocalDev) {
+    try {
+      resolvedTargetVersion = await applyOrgVersionBounds({
+        cliContext,
+        resolvedTargetVersion
+      });
+    } catch {
+    }
+  }
   if (cliContext.environment.packageVersion === resolvedTargetVersion || isLocalDev) {
     const fernDirectory2 = await getFernDirectory();
     if (fernDirectory2 == null) {
@@ -981287,6 +981663,56 @@ async function upgrade({
     throw error50;
   }
 }
+async function applyOrgVersionBounds({
+  cliContext,
+  resolvedTargetVersion
+}) {
+  const fernDirectory = await getFernDirectory();
+  if (fernDirectory == null) {
+    return resolvedTargetVersion;
+  }
+  let orgId;
+  try {
+    const projectConfig = await cliContext.runTask(
+      (context3) => loadProjectConfig({ directory: fernDirectory, context: context3 })
+    );
+    orgId = projectConfig.organization;
+  } catch {
+    return resolvedTargetVersion;
+  }
+  const token = await getToken2();
+  if (token == null) {
+    return resolvedTargetVersion;
+  }
+  const result = await fetchOrgCliVersionBounds({
+    cliContext,
+    orgId,
+    token: token.value,
+    timeoutMs: ORG_BOUNDS_FETCH_TIMEOUT_MS
+  });
+  if (!result.ok) {
+    return resolvedTargetVersion;
+  }
+  const { min, max } = result.bounds;
+  if (min == null && max == null) {
+    return resolvedTargetVersion;
+  }
+  try {
+    const { version: version7, reason } = clampVersionToOrgBounds(resolvedTargetVersion, { min, max });
+    if (reason === "floor") {
+      cliContext.logger.info(
+        `Org "${orgId}" requires minimum CLI version ${source_default.green(version7)} (resolved ${resolvedTargetVersion}).`
+      );
+    } else if (reason === "ceiling") {
+      cliContext.logger.info(
+        `Org "${orgId}" caps CLI version at ${source_default.green(version7)} (resolved ${resolvedTargetVersion}).`
+      );
+    }
+    return version7;
+  } catch {
+    return resolvedTargetVersion;
+  }
+}
 
 // src/commands/automations/upgrade/executeAutomationsUpgrade.ts
 var CHANGELOG_BASE2 = "https://buildwithfern.com/learn/sdks/generators";
@@ -982531,32 +982957,6 @@ Found ${previewDeployments.length} preview deployment(s):
 // src/commands/docs-theme/deleteDocsTheme.ts
 var import_node_readline6 = require("readline");
 init_lib6();
-
-// src/commands/docs-theme/themeOrigin.ts
-var FDR_ORIGIN = process.env.OVERRIDE_FDR_ORIGIN ?? "https://registry-dev2.buildwithfern.com" ?? "https://registry.buildwithfern.com";
-function describeFetchError(error50) {
-  if (!(error50 instanceof Error)) {
-    return String(error50);
-  }
-  const cause = error50.cause;
-  if (cause instanceof Error) {
-    return cause.message;
-  }
-  return error50.message;
-}
-function parseErrorDetail(body) {
-  try {
-    const parsed = JSON.parse(body);
-    const message = parsed.message ?? parsed.error?.message;
-    if (typeof message === "string") {
-      return message;
-    }
-  } catch {
-  }
-  return void 0;
-}
-
-// src/commands/docs-theme/deleteDocsTheme.ts
 async function confirmDeletion(themeName) {
   const rl = (0, import_node_readline6.createInterface)({ input: process.stdin, output: process.stderr });
   return new Promise((resolve15) => {
@@ -989031,6 +989431,31 @@ function installProcessHandlers(cliContext, { isLocal }) {
   });
 }
 
+// src/utils/versionRedirection.ts
+init_helpers();
+var VERSION_REDIRECTION_EXEMPT_COMMANDS = /* @__PURE__ */ new Set(["org"]);
+function isVersionRedirectionExempt(argv) {
+  const command3 = getInvokedCommandName(argv);
+  return command3 != null && VERSION_REDIRECTION_EXEMPT_COMMANDS.has(command3);
+}
+function getInvokedCommandName(argv) {
+  const args = hideBin(argv);
+  for (let i5 = 0; i5 < args.length; i5++) {
+    const arg = args[i5];
+    if (arg == null) {
+      continue;
+    }
+    if (arg.startsWith("-")) {
+      if (arg === "--log-level") {
+        i5++;
+      }
+      continue;
+    }
+    return arg;
+  }
+  return void 0;
+}
+
 // src/cli.ts
 if (process.platform === "linux" && parseInt(process.versions.node.split(".")[0] ?? "0", 10) >= 26 && process.env.UV_USE_IO_URING !== "0") {
   const result = (0, import_node_child_process14.spawnSync)(process.execPath, process.argv.slice(1), {
@@ -989077,7 +989502,7 @@ async function runCli() {
     if (cwd2 != null) {
       process.chdir(cwd2);
     }
-    if (isCompletion) {
+    if (isCompletion || isVersionRedirectionExempt(process.argv)) {
       await tryRunCli(cliContext);
     } else {
       const versionOfCliToRun = await getIntendedVersionOfCli(cliContext);
@@ -989167,6 +989592,7 @@ async function tryRunCli(cliContext) {
   addAutomationsCommand(cli, cliContext);
   addGetOrganizationCommand(cli, cliContext);
   addGeneratorCommands(cli, cliContext);
+  addOrgCommand2(cli, cliContext);
   addProtocGenFernCommand(cli, cliContext);
   addInstallDependenciesCommand(cli, cliContext);
   cli.middleware(async (argv) => {
@@ -989180,6 +989606,14 @@ async function tryRunCli(cliContext) {
 }
 async function getIntendedVersionOfCli(cliContext) {
   if (process.env.FERN_NO_VERSION_REDIRECTION === "true") {
+    const orgId = await getOrganization2(cliContext);
+    if (orgId != null) {
+      await warnIfVersionOutsideOrgBounds({
+        cliContext,
+        orgId,
+        currentVersion: cliContext.environment.packageVersion
+      });
+    }
     return cliContext.environment.packageVersion;
   }
   const fernDirectory = await getFernDirectory();
@@ -989187,13 +989621,19 @@ async function getIntendedVersionOfCli(cliContext) {
     const projectConfig = await cliContext.runTask(
       (context3) => loadProjectConfig({ directory: fernDirectory, context: context3 })
     );
+    let intendedVersion;
     if (projectConfig.version === "*") {
-      return cliContext.environment.packageVersion;
-    }
-    if (projectConfig.version === "latest") {
-      return getLatestVersionOfCli({ cliEnvironment: cliContext.environment });
+      intendedVersion = cliContext.environment.packageVersion;
+    } else if (projectConfig.version === "latest") {
+      intendedVersion = await getLatestVersionOfCli({ cliEnvironment: cliContext.environment });
+    } else {
+      intendedVersion = projectConfig.version;
     }
-    return projectConfig.version;
+    return await applyOrgBoundsToVersion({
+      cliContext,
+      orgId: projectConfig.organization,
+      intendedVersion
+    });
   }
   return getLatestVersionOfCli({ cliEnvironment: cliContext.environment });
 }
@@ -992004,6 +992444,77 @@ Remove ${matched.length} patch(es)? [y/N] `, resolvePrompt);
     }
   );
 }
+function addOrgCommand2(cli, cliContext) {
+  cli.command("org", "Manage org-level configuration", (yargs) => {
+    yargs.command(
+      "set",
+      "Set an org-level config value (admin only)",
+      (setYargs) => setYargs.command(
+        "cli-version [version]",
+        "Set the org's Fern CLI version policy: pin an exact version, or set a min/max range",
+        (y4) => y4.positional("version", {
+          type: "string",
+          description: "Pin to an exact version (sets both the floor and ceiling)"
+        }).option("min", {
+          type: "string",
+          description: "Minimum allowed CLI version (floor)"
+        }).option("max", {
+          type: "string",
+          description: "Maximum allowed CLI version (ceiling)"
+        }).option("org", { type: "string", description: "Override org ID" }),
+        async (argv) => {
+          cliContext.instrumentPostHogEvent({ command: "fern org set cli-version" });
+          const { version: version7, min, max } = argv;
+          if (version7 != null && (min != null || max != null)) {
+            cliContext.failAndThrow(
+              "Pass either an exact version to pin (e.g. `fern org set cli-version 5.45.0`) or --min/--max to set a range, not both."
+            );
+            return;
+          }
+          if (version7 == null && min == null && max == null) {
+            cliContext.failAndThrow(
+              "Nothing to set. Pass a version to pin (e.g. `fern org set cli-version 5.45.0`) or --min/--max to set a range."
+            );
+            return;
+          }
+          if (version7 != null) {
+            await setOrgCliVersion({ cliContext, min: version7, max: version7, org: argv.org });
+          } else {
+            await setOrgCliVersion({ cliContext, min, max, org: argv.org });
+          }
+        }
+      ).demandCommand(1, "Specify what to set, e.g. `fern org set cli-version 5.45.0`."),
+      () => {
+      }
+    );
+    yargs.command(
+      "get",
+      "View org-level config",
+      (y4) => y4.option("org", { type: "string", description: "Override org ID" }).option("json", { type: "boolean", description: "Output as JSON" }),
+      async (argv) => {
+        cliContext.instrumentPostHogEvent({ command: "fern org get" });
+        await getOrgConfig({ cliContext, org: argv.org, json: argv.json });
+      }
+    );
+    yargs.command(
+      "unset",
+      "Remove an org-level config value (admin only)",
+      (unsetYargs) => unsetYargs.command(
+        "cli-version",
+        "Clear the org's Fern CLI version policy (both bounds by default, or --min/--max for one end)",
+        (y4) => y4.option("min", { type: "boolean", description: "Clear only the floor" }).option("max", { type: "boolean", description: "Clear only the ceiling" }).option("org", { type: "string", description: "Override org ID" }),
+        async (argv) => {
+          cliContext.instrumentPostHogEvent({ command: "fern org unset cli-version" });
+          const field5 = argv.min && !argv.max ? "min" : argv.max && !argv.min ? "max" : "all";
+          await unsetOrgCliVersion({ cliContext, org: argv.org, field: field5 });
+        }
+      ).demandCommand(1, "Specify what to unset, e.g. `fern org unset cli-version`."),
+      () => {
+      }
+    );
+    return yargs;
+  });
+}
 function parseOwnerRepo(githubRepo) {
   const cleaned = githubRepo.replace(/^https?:\/\//, "").replace(/\.git$/, "").replace(/^github\.com\//, "");
   const parts = cleaned.split("/");

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "5.81.0",
+  "version": "5.83.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fern-api/fern.git",