@fern-api/venus-api-sdk 0.22.4 → 0.22.34

package/dist/esm/api/resources/apiKeys/client/Client.mjs

@@ -8,18 +8,19 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
-import { mergeHeaders, mergeOnlyDefinedHeaders } from "../../../../core/headers.mjs";
+import { normalizeClientOptionsWithAuth } from "../../../../BaseClient.mjs";
+import { mergeHeaders } from "../../../../core/headers.mjs";
 import * as core from "../../../../core/index.mjs";
 import * as environments from "../../../../environments.mjs";
 import * as serializers from "../../../../serialization/index.mjs";
 import * as FernVenusApi from "../../../index.mjs";
-export class ApiKeys {
-    constructor(_options = {}) {
-        this._options = _options;
+export class ApiKeysClient {
+    constructor(options = {}) {
+        this._options = normalizeClientOptionsWithAuth(options);
     }
     /**
      * @param {FernVenusApi.CreateApiKeyRequest} request
-     * @param {ApiKeys.RequestOptions} requestOptions - Request-specific configuration.
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
      *
      * @example
      *     await client.apiKeys.create({
@@ -36,8 +37,9 @@ export class ApiKeys {
     }
     __create(request, requestOptions) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
-            const _headers = mergeHeaders((_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, mergeOnlyDefinedHeaders({ Authorization: yield this._getAuthorizationHeader() }), requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
             const _response = yield core.fetcher({
                 url: core.url.join((_c = (_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.FernVenusApiEnvironment.Prod, "/api-keys/create"),
                 method: "POST",
@@ -52,6 +54,8 @@ export class ApiKeys {
                 timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
                 maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
                 abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
             });
             if (_response.ok) {
                 return {
@@ -71,7 +75,7 @@ export class ApiKeys {
                 };
             }
             if (_response.error.reason === "status-code") {
-                switch ((_j = _response.error.body) === null || _j === void 0 ? void 0 : _j.error) {
+                switch ((_k = _response.error.body) === null || _k === void 0 ? void 0 : _k.error) {
                     case "UnauthorizedError":
                     case "OrganizationNotFoundError":
                         return {
@@ -102,7 +106,7 @@ export class ApiKeys {
     }
     /**
      * @param {FernVenusApi.GetTokenMetadataRequest} request
-     * @param {ApiKeys.RequestOptions} requestOptions - Request-specific configuration.
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
      *
      * @example
      *     await client.apiKeys.getTokenMetadata({
@@ -119,8 +123,9 @@ export class ApiKeys {
     }
     __getTokenMetadata(request, requestOptions) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
-            const _headers = mergeHeaders((_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, mergeOnlyDefinedHeaders({ Authorization: yield this._getAuthorizationHeader() }), requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
             const _response = yield core.fetcher({
                 url: core.url.join((_c = (_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.FernVenusApiEnvironment.Prod, "/api-keys/metadata"),
                 method: "POST",
@@ -135,6 +140,8 @@ export class ApiKeys {
                 timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
                 maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
                 abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
             });
             if (_response.ok) {
                 return {
@@ -154,7 +161,7 @@ export class ApiKeys {
                 };
             }
             if (_response.error.reason === "status-code") {
-                switch ((_j = _response.error.body) === null || _j === void 0 ? void 0 : _j.error) {
+                switch ((_k = _response.error.body) === null || _k === void 0 ? void 0 : _k.error) {
                     case "UnauthorizedError":
                     case "TokenNotFoundError":
                         return {
@@ -185,7 +192,7 @@ export class ApiKeys {
     }
     /**
      * @param {FernVenusApi.OrganizationId} organizationId
-     * @param {ApiKeys.RequestOptions} requestOptions - Request-specific configuration.
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
      *
      * @example
      *     await client.apiKeys.getTokensForOrganization("some-org-id")
@@ -198,8 +205,9 @@ export class ApiKeys {
     }
     __getTokensForOrganization(organizationId, requestOptions) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
-            const _headers = mergeHeaders((_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, mergeOnlyDefinedHeaders({ Authorization: yield this._getAuthorizationHeader() }), requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
             const _response = yield core.fetcher({
                 url: core.url.join((_c = (_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.FernVenusApiEnvironment.Prod, `/api-keys/organization/${core.url.encodePathParam(serializers.OrganizationId.jsonOrThrow(organizationId, { omitUndefined: true }))}`),
                 method: "GET",
@@ -208,6 +216,8 @@ export class ApiKeys {
                 timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
                 maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
                 abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
             });
             if (_response.ok) {
                 return {
@@ -227,7 +237,7 @@ export class ApiKeys {
                 };
             }
             if (_response.error.reason === "status-code") {
-                switch ((_j = _response.error.body) === null || _j === void 0 ? void 0 : _j.error) {
+                switch ((_k = _response.error.body) === null || _k === void 0 ? void 0 : _k.error) {
                     case "UnauthorizedError":
                     case "OrganizationNotFoundError":
                         return {
@@ -258,7 +268,7 @@ export class ApiKeys {
     }
     /**
      * @param {FernVenusApi.TokenId} tokenId
-     * @param {ApiKeys.RequestOptions} requestOptions - Request-specific configuration.
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
      *
      * @example
      *     await client.apiKeys.revokeTokenById("some-token-id")
@@ -271,8 +281,9 @@ export class ApiKeys {
     }
     __revokeTokenById(tokenId, requestOptions) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
-            const _headers = mergeHeaders((_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, mergeOnlyDefinedHeaders({ Authorization: yield this._getAuthorizationHeader() }), requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
             const _response = yield core.fetcher({
                 url: core.url.join((_c = (_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.FernVenusApiEnvironment.Prod, `/api-keys/revoke/${core.url.encodePathParam(serializers.TokenId.jsonOrThrow(tokenId, { omitUndefined: true }))}`),
                 method: "POST",
@@ -281,6 +292,8 @@ export class ApiKeys {
                 timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
                 maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
                 abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
             });
             if (_response.ok) {
                 return {
@@ -294,7 +307,7 @@ export class ApiKeys {
                 };
             }
             if (_response.error.reason === "status-code") {
-                switch ((_j = _response.error.body) === null || _j === void 0 ? void 0 : _j.error) {
+                switch ((_k = _response.error.body) === null || _k === void 0 ? void 0 : _k.error) {
                     case "UnauthorizedError":
                     case "TokenNotFoundError":
                         return {
@@ -325,7 +338,7 @@ export class ApiKeys {
     }
     /**
      * @param {FernVenusApi.RevokeApiKeyRequest} request
-     * @param {ApiKeys.RequestOptions} requestOptions - Request-specific configuration.
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
      *
      * @example
      *     await client.apiKeys.revokeToken({
@@ -342,8 +355,9 @@ export class ApiKeys {
     }
     __revokeToken(request, requestOptions) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
-            const _headers = mergeHeaders((_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, mergeOnlyDefinedHeaders({ Authorization: yield this._getAuthorizationHeader() }), requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
             const _response = yield core.fetcher({
                 url: core.url.join((_c = (_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.FernVenusApiEnvironment.Prod, "/api-keys/revoke"),
                 method: "POST",
@@ -358,6 +372,8 @@ export class ApiKeys {
                 timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
                 maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
                 abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
             });
             if (_response.ok) {
                 return {
@@ -371,7 +387,7 @@ export class ApiKeys {
                 };
             }
             if (_response.error.reason === "status-code") {
-                switch ((_j = _response.error.body) === null || _j === void 0 ? void 0 : _j.error) {
+                switch ((_k = _response.error.body) === null || _k === void 0 ? void 0 : _k.error) {
                     case "UnauthorizedError":
                     case "TokenNotFoundError":
                         return {
@@ -400,13 +416,4 @@ export class ApiKeys {
             };
         });
     }
-    _getAuthorizationHeader() {
-        return __awaiter(this, void 0, void 0, function* () {
-            const bearer = yield core.Supplier.get(this._options.token);
-            if (bearer != null) {
-                return `Bearer ${bearer}`;
-            }
-            return undefined;
-        });
-    }
 }

package/dist/esm/api/resources/apiKeys/client/create.mjs

@@ -33,7 +33,7 @@ export const Error = {
             case "OrganizationNotFoundError":
                 return visitor.organizationNotFoundError();
             default:
-                return visitor._other(value);
+                return visitor._other(value.content);
         }
     },
 };

package/dist/esm/api/resources/apiKeys/client/getTokenMetadata.mjs

@@ -33,7 +33,7 @@ export const Error = {
             case "TokenNotFoundError":
                 return visitor.tokenNotFoundError();
             default:
-                return visitor._other(value);
+                return visitor._other(value.content);
         }
     },
 };

package/dist/esm/api/resources/apiKeys/client/getTokensForOrganization.mjs

@@ -33,7 +33,7 @@ export const Error = {
             case "OrganizationNotFoundError":
                 return visitor.organizationNotFoundError();
             default:
-                return visitor._other(value);
+                return visitor._other(value.content);
         }
     },
 };

package/dist/esm/api/resources/apiKeys/client/revokeToken.mjs

@@ -33,7 +33,7 @@ export const Error = {
             case "TokenNotFoundError":
                 return visitor.tokenNotFoundError();
             default:
-                return visitor._other(value);
+                return visitor._other(value.content);
         }
     },
 };

package/dist/esm/api/resources/apiKeys/client/revokeTokenById.mjs

@@ -33,7 +33,7 @@ export const Error = {
             case "TokenNotFoundError":
                 return visitor.tokenNotFoundError();
             default:
-                return visitor._other(value);
+                return visitor._other(value.content);
         }
     },
 };

package/dist/esm/api/resources/auth/client/Client.d.mts

@@ -0,0 +1,69 @@
+import type { BaseClientOptions, BaseRequestOptions } from "../../../../BaseClient.mjs";
+import { type NormalizedClientOptionsWithAuth } from "../../../../BaseClient.mjs";
+import * as core from "../../../../core/index.mjs";
+import * as FernVenusApi from "../../../index.mjs";
+export declare namespace AuthClient {
+    type Options = BaseClientOptions;
+    interface RequestOptions extends BaseRequestOptions {
+    }
+}
+export declare class AuthClient {
+    protected readonly _options: NormalizedClientOptionsWithAuth<AuthClient.Options>;
+    constructor(options?: AuthClient.Options);
+    /**
+     * Look up the Fern organization ID for a GitHub owner.
+     * This endpoint is unauthenticated and used by Fiddle to look up the
+     * centralized protected GitHub orgs mapping.
+     *
+     * @param {string} githubOwner - The GitHub repo owner (case-insensitive)
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.getOrgForGithubOwner("protected-github-owner")
+     */
+    getOrgForGithubOwner(githubOwner: string, requestOptions?: AuthClient.RequestOptions): core.HttpResponsePromise<core.APIResponse<FernVenusApi.OrganizationId | undefined, FernVenusApi.auth.getOrgForGithubOwner.Error>>;
+    private __getOrgForGithubOwner;
+    /**
+     * Exchange an autopilot token for a short-lived JWT scoped to an organization.
+     * This endpoint is used by automated systems (like Fiddle) to get org-scoped tokens.
+     * If a GitHub owner is provided and is in the protected GitHub orgs mapping,
+     * the organization ID must match the allowed org for that GitHub owner.
+     * The returned token is identical to tokens from getJwt and can be used the same way.
+     *
+     * @param {FernVenusApi.GetAutopilotTokenRequest} request
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.getAutopilotToken({
+     *         organizationId: "my-org-id"
+     *     })
+     *
+     * @example
+     *     await client.auth.getAutopilotToken({
+     *         organizationId: "wrong-org",
+     *         githubOwner: "protected-github-owner"
+     *     })
+     */
+    getAutopilotToken(request: FernVenusApi.GetAutopilotTokenRequest, requestOptions?: AuthClient.RequestOptions): core.HttpResponsePromise<core.APIResponse<FernVenusApi.JwtResponse, FernVenusApi.auth.getAutopilotToken.Error>>;
+    private __getAutopilotToken;
+    /**
+     * Exchange a user token for a short-lived JWT scoped to an organization.
+     * The user must be a member of the specified organization.
+     * The JWT can be used to authenticate requests to other services.
+     *
+     * @param {FernVenusApi.GetJwtRequest} request
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.getJwt({
+     *         organizationId: "my-org-id"
+     *     })
+     *
+     * @example
+     *     await client.auth.getJwt({
+     *         organizationId: "org-user-not-member-of"
+     *     })
+     */
+    getJwt(request: FernVenusApi.GetJwtRequest, requestOptions?: AuthClient.RequestOptions): core.HttpResponsePromise<core.APIResponse<FernVenusApi.JwtResponse, FernVenusApi.auth.getJwt.Error>>;
+    private __getJwt;
+}

package/dist/esm/api/resources/auth/client/Client.mjs

@@ -0,0 +1,258 @@
+// This file was auto-generated by Fern from our API Definition.
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { normalizeClientOptionsWithAuth } from "../../../../BaseClient.mjs";
+import { mergeHeaders } from "../../../../core/headers.mjs";
+import * as core from "../../../../core/index.mjs";
+import * as environments from "../../../../environments.mjs";
+import * as serializers from "../../../../serialization/index.mjs";
+import * as FernVenusApi from "../../../index.mjs";
+export class AuthClient {
+    constructor(options = {}) {
+        this._options = normalizeClientOptionsWithAuth(options);
+    }
+    /**
+     * Look up the Fern organization ID for a GitHub owner.
+     * This endpoint is unauthenticated and used by Fiddle to look up the
+     * centralized protected GitHub orgs mapping.
+     *
+     * @param {string} githubOwner - The GitHub repo owner (case-insensitive)
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.getOrgForGithubOwner("protected-github-owner")
+     */
+    getOrgForGithubOwner(githubOwner, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__getOrgForGithubOwner(githubOwner, requestOptions));
+    }
+    __getOrgForGithubOwner(githubOwner, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+            const _headers = mergeHeaders((_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield core.fetcher({
+                url: core.url.join((_c = (_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.FernVenusApiEnvironment.Prod, `/auth/github-owner/${core.url.encodePathParam(githubOwner)}/org`),
+                method: "GET",
+                headers: _headers,
+                queryParameters: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams,
+                timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
+                maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return {
+                    data: {
+                        ok: true,
+                        body: serializers.auth.getOrgForGithubOwner.Response.parseOrThrow(_response.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }),
+                        headers: _response.headers,
+                        rawResponse: _response.rawResponse,
+                    },
+                    rawResponse: _response.rawResponse,
+                };
+            }
+            return {
+                data: {
+                    ok: false,
+                    error: FernVenusApi.auth.getOrgForGithubOwner.Error._unknown(_response.error),
+                    rawResponse: _response.rawResponse,
+                },
+                rawResponse: _response.rawResponse,
+            };
+        });
+    }
+    /**
+     * Exchange an autopilot token for a short-lived JWT scoped to an organization.
+     * This endpoint is used by automated systems (like Fiddle) to get org-scoped tokens.
+     * If a GitHub owner is provided and is in the protected GitHub orgs mapping,
+     * the organization ID must match the allowed org for that GitHub owner.
+     * The returned token is identical to tokens from getJwt and can be used the same way.
+     *
+     * @param {FernVenusApi.GetAutopilotTokenRequest} request
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.getAutopilotToken({
+     *         organizationId: "my-org-id"
+     *     })
+     *
+     * @example
+     *     await client.auth.getAutopilotToken({
+     *         organizationId: "wrong-org",
+     *         githubOwner: "protected-github-owner"
+     *     })
+     */
+    getAutopilotToken(request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__getAutopilotToken(request, requestOptions));
+    }
+    __getAutopilotToken(request, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield core.fetcher({
+                url: core.url.join((_c = (_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.FernVenusApiEnvironment.Prod, "/auth/autopilot-token"),
+                method: "POST",
+                headers: _headers,
+                contentType: "application/json",
+                queryParameters: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams,
+                requestType: "json",
+                body: serializers.GetAutopilotTokenRequest.jsonOrThrow(request, {
+                    unrecognizedObjectKeys: "strip",
+                    omitUndefined: true,
+                }),
+                timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
+                maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return {
+                    data: {
+                        ok: true,
+                        body: serializers.JwtResponse.parseOrThrow(_response.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }),
+                        headers: _response.headers,
+                        rawResponse: _response.rawResponse,
+                    },
+                    rawResponse: _response.rawResponse,
+                };
+            }
+            if (_response.error.reason === "status-code") {
+                switch ((_k = _response.error.body) === null || _k === void 0 ? void 0 : _k.error) {
+                    case "UnauthorizedError":
+                        return {
+                            data: {
+                                ok: false,
+                                error: serializers.auth.getAutopilotToken.Error.parseOrThrow(_response.error.body, {
+                                    unrecognizedObjectKeys: "passthrough",
+                                    allowUnrecognizedUnionMembers: true,
+                                    allowUnrecognizedEnumValues: true,
+                                    skipValidation: true,
+                                    breadcrumbsPrefix: ["response"],
+                                }),
+                                rawResponse: _response.rawResponse,
+                            },
+                            rawResponse: _response.rawResponse,
+                        };
+                }
+            }
+            return {
+                data: {
+                    ok: false,
+                    error: FernVenusApi.auth.getAutopilotToken.Error._unknown(_response.error),
+                    rawResponse: _response.rawResponse,
+                },
+                rawResponse: _response.rawResponse,
+            };
+        });
+    }
+    /**
+     * Exchange a user token for a short-lived JWT scoped to an organization.
+     * The user must be a member of the specified organization.
+     * The JWT can be used to authenticate requests to other services.
+     *
+     * @param {FernVenusApi.GetJwtRequest} request
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.getJwt({
+     *         organizationId: "my-org-id"
+     *     })
+     *
+     * @example
+     *     await client.auth.getJwt({
+     *         organizationId: "org-user-not-member-of"
+     *     })
+     */
+    getJwt(request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__getJwt(request, requestOptions));
+    }
+    __getJwt(request, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield core.fetcher({
+                url: core.url.join((_c = (_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.FernVenusApiEnvironment.Prod, "/auth/jwt"),
+                method: "POST",
+                headers: _headers,
+                contentType: "application/json",
+                queryParameters: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams,
+                requestType: "json",
+                body: serializers.GetJwtRequest.jsonOrThrow(request, {
+                    unrecognizedObjectKeys: "strip",
+                    omitUndefined: true,
+                }),
+                timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
+                maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return {
+                    data: {
+                        ok: true,
+                        body: serializers.JwtResponse.parseOrThrow(_response.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }),
+                        headers: _response.headers,
+                        rawResponse: _response.rawResponse,
+                    },
+                    rawResponse: _response.rawResponse,
+                };
+            }
+            if (_response.error.reason === "status-code") {
+                switch ((_k = _response.error.body) === null || _k === void 0 ? void 0 : _k.error) {
+                    case "UnauthorizedError":
+                        return {
+                            data: {
+                                ok: false,
+                                error: serializers.auth.getJwt.Error.parseOrThrow(_response.error.body, {
+                                    unrecognizedObjectKeys: "passthrough",
+                                    allowUnrecognizedUnionMembers: true,
+                                    allowUnrecognizedEnumValues: true,
+                                    skipValidation: true,
+                                    breadcrumbsPrefix: ["response"],
+                                }),
+                                rawResponse: _response.rawResponse,
+                            },
+                            rawResponse: _response.rawResponse,
+                        };
+                }
+            }
+            return {
+                data: {
+                    ok: false,
+                    error: FernVenusApi.auth.getJwt.Error._unknown(_response.error),
+                    rawResponse: _response.rawResponse,
+                },
+                rawResponse: _response.rawResponse,
+            };
+        });
+    }
+}

package/dist/esm/api/resources/auth/client/getAutopilotToken.d.mts

@@ -0,0 +1,24 @@
+import type * as core from "../../../../core/index.mjs";
+import * as FernVenusApi from "../../../index.mjs";
+export type Error = FernVenusApi.auth.getAutopilotToken.Error.UnauthorizedError | FernVenusApi.auth.getAutopilotToken.Error._Unknown;
+export declare namespace Error {
+    interface UnauthorizedError extends _Utils {
+        error: "UnauthorizedError";
+    }
+    interface _Unknown extends _Utils {
+        error: void;
+        content: core.Fetcher.Error;
+    }
+    interface _Utils {
+        _visit: <_Result>(visitor: FernVenusApi.auth.getAutopilotToken.Error._Visitor<_Result>) => _Result;
+    }
+    interface _Visitor<_Result> {
+        unauthorizedError: () => _Result;
+        _other: (value: core.Fetcher.Error) => _Result;
+    }
+}
+export declare const Error: {
+    readonly unauthorizedError: () => FernVenusApi.auth.getAutopilotToken.Error.UnauthorizedError;
+    readonly _unknown: (fetcherError: core.Fetcher.Error) => FernVenusApi.auth.getAutopilotToken.Error._Unknown;
+    readonly _visit: <_Result>(value: FernVenusApi.auth.getAutopilotToken.Error, visitor: FernVenusApi.auth.getAutopilotToken.Error._Visitor<_Result>) => _Result;
+};