@fern-api/venus-api-sdk 0.22.4 → 0.22.34

package/dist/cjs/api/resources/apiKeys/client/Client.js

@@ -43,19 +43,20 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ApiKeys = void 0;
+exports.ApiKeysClient = void 0;
+const BaseClient_js_1 = require("../../../../BaseClient.js");
 const headers_js_1 = require("../../../../core/headers.js");
 const core = __importStar(require("../../../../core/index.js"));
 const environments = __importStar(require("../../../../environments.js"));
 const serializers = __importStar(require("../../../../serialization/index.js"));
 const FernVenusApi = __importStar(require("../../../index.js"));
-class ApiKeys {
-    constructor(_options = {}) {
-        this._options = _options;
+class ApiKeysClient {
+    constructor(options = {}) {
+        this._options = (0, BaseClient_js_1.normalizeClientOptionsWithAuth)(options);
     }
     /**
      * @param {FernVenusApi.CreateApiKeyRequest} request
-     * @param {ApiKeys.RequestOptions} requestOptions - Request-specific configuration.
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
      *
      * @example
      *     await client.apiKeys.create({
@@ -72,8 +73,9 @@ class ApiKeys {
     }
     __create(request, requestOptions) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
-            const _headers = (0, headers_js_1.mergeHeaders)((_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, (0, headers_js_1.mergeOnlyDefinedHeaders)({ Authorization: yield this._getAuthorizationHeader() }), requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
             const _response = yield core.fetcher({
                 url: core.url.join((_c = (_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.FernVenusApiEnvironment.Prod, "/api-keys/create"),
                 method: "POST",
@@ -88,6 +90,8 @@ class ApiKeys {
                 timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
                 maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
                 abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
             });
             if (_response.ok) {
                 return {
@@ -107,7 +111,7 @@ class ApiKeys {
                 };
             }
             if (_response.error.reason === "status-code") {
-                switch ((_j = _response.error.body) === null || _j === void 0 ? void 0 : _j.error) {
+                switch ((_k = _response.error.body) === null || _k === void 0 ? void 0 : _k.error) {
                     case "UnauthorizedError":
                     case "OrganizationNotFoundError":
                         return {
@@ -138,7 +142,7 @@ class ApiKeys {
     }
     /**
      * @param {FernVenusApi.GetTokenMetadataRequest} request
-     * @param {ApiKeys.RequestOptions} requestOptions - Request-specific configuration.
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
      *
      * @example
      *     await client.apiKeys.getTokenMetadata({
@@ -155,8 +159,9 @@ class ApiKeys {
     }
     __getTokenMetadata(request, requestOptions) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
-            const _headers = (0, headers_js_1.mergeHeaders)((_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, (0, headers_js_1.mergeOnlyDefinedHeaders)({ Authorization: yield this._getAuthorizationHeader() }), requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
             const _response = yield core.fetcher({
                 url: core.url.join((_c = (_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.FernVenusApiEnvironment.Prod, "/api-keys/metadata"),
                 method: "POST",
@@ -171,6 +176,8 @@ class ApiKeys {
                 timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
                 maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
                 abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
             });
             if (_response.ok) {
                 return {
@@ -190,7 +197,7 @@ class ApiKeys {
                 };
             }
             if (_response.error.reason === "status-code") {
-                switch ((_j = _response.error.body) === null || _j === void 0 ? void 0 : _j.error) {
+                switch ((_k = _response.error.body) === null || _k === void 0 ? void 0 : _k.error) {
                     case "UnauthorizedError":
                     case "TokenNotFoundError":
                         return {
@@ -221,7 +228,7 @@ class ApiKeys {
     }
     /**
      * @param {FernVenusApi.OrganizationId} organizationId
-     * @param {ApiKeys.RequestOptions} requestOptions - Request-specific configuration.
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
      *
      * @example
      *     await client.apiKeys.getTokensForOrganization("some-org-id")
@@ -234,8 +241,9 @@ class ApiKeys {
     }
     __getTokensForOrganization(organizationId, requestOptions) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
-            const _headers = (0, headers_js_1.mergeHeaders)((_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, (0, headers_js_1.mergeOnlyDefinedHeaders)({ Authorization: yield this._getAuthorizationHeader() }), requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
             const _response = yield core.fetcher({
                 url: core.url.join((_c = (_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.FernVenusApiEnvironment.Prod, `/api-keys/organization/${core.url.encodePathParam(serializers.OrganizationId.jsonOrThrow(organizationId, { omitUndefined: true }))}`),
                 method: "GET",
@@ -244,6 +252,8 @@ class ApiKeys {
                 timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
                 maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
                 abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
             });
             if (_response.ok) {
                 return {
@@ -263,7 +273,7 @@ class ApiKeys {
                 };
             }
             if (_response.error.reason === "status-code") {
-                switch ((_j = _response.error.body) === null || _j === void 0 ? void 0 : _j.error) {
+                switch ((_k = _response.error.body) === null || _k === void 0 ? void 0 : _k.error) {
                     case "UnauthorizedError":
                     case "OrganizationNotFoundError":
                         return {
@@ -294,7 +304,7 @@ class ApiKeys {
     }
     /**
      * @param {FernVenusApi.TokenId} tokenId
-     * @param {ApiKeys.RequestOptions} requestOptions - Request-specific configuration.
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
      *
      * @example
      *     await client.apiKeys.revokeTokenById("some-token-id")
@@ -307,8 +317,9 @@ class ApiKeys {
     }
     __revokeTokenById(tokenId, requestOptions) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
-            const _headers = (0, headers_js_1.mergeHeaders)((_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, (0, headers_js_1.mergeOnlyDefinedHeaders)({ Authorization: yield this._getAuthorizationHeader() }), requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
             const _response = yield core.fetcher({
                 url: core.url.join((_c = (_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.FernVenusApiEnvironment.Prod, `/api-keys/revoke/${core.url.encodePathParam(serializers.TokenId.jsonOrThrow(tokenId, { omitUndefined: true }))}`),
                 method: "POST",
@@ -317,6 +328,8 @@ class ApiKeys {
                 timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
                 maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
                 abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
             });
             if (_response.ok) {
                 return {
@@ -330,7 +343,7 @@ class ApiKeys {
                 };
             }
             if (_response.error.reason === "status-code") {
-                switch ((_j = _response.error.body) === null || _j === void 0 ? void 0 : _j.error) {
+                switch ((_k = _response.error.body) === null || _k === void 0 ? void 0 : _k.error) {
                     case "UnauthorizedError":
                     case "TokenNotFoundError":
                         return {
@@ -361,7 +374,7 @@ class ApiKeys {
     }
     /**
      * @param {FernVenusApi.RevokeApiKeyRequest} request
-     * @param {ApiKeys.RequestOptions} requestOptions - Request-specific configuration.
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
      *
      * @example
      *     await client.apiKeys.revokeToken({
@@ -378,8 +391,9 @@ class ApiKeys {
     }
     __revokeToken(request, requestOptions) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
-            const _headers = (0, headers_js_1.mergeHeaders)((_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, (0, headers_js_1.mergeOnlyDefinedHeaders)({ Authorization: yield this._getAuthorizationHeader() }), requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
             const _response = yield core.fetcher({
                 url: core.url.join((_c = (_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.FernVenusApiEnvironment.Prod, "/api-keys/revoke"),
                 method: "POST",
@@ -394,6 +408,8 @@ class ApiKeys {
                 timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
                 maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
                 abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
             });
             if (_response.ok) {
                 return {
@@ -407,7 +423,7 @@ class ApiKeys {
                 };
             }
             if (_response.error.reason === "status-code") {
-                switch ((_j = _response.error.body) === null || _j === void 0 ? void 0 : _j.error) {
+                switch ((_k = _response.error.body) === null || _k === void 0 ? void 0 : _k.error) {
                     case "UnauthorizedError":
                     case "TokenNotFoundError":
                         return {
@@ -436,14 +452,5 @@ class ApiKeys {
             };
         });
     }
-    _getAuthorizationHeader() {
-        return __awaiter(this, void 0, void 0, function* () {
-            const bearer = yield core.Supplier.get(this._options.token);
-            if (bearer != null) {
-                return `Bearer ${bearer}`;
-            }
-            return undefined;
-        });
-    }
 }
-exports.ApiKeys = ApiKeys;
+exports.ApiKeysClient = ApiKeysClient;

package/dist/cjs/api/resources/apiKeys/client/create.js

@@ -69,7 +69,7 @@ exports.Error = {
             case "OrganizationNotFoundError":
                 return visitor.organizationNotFoundError();
             default:
-                return visitor._other(value);
+                return visitor._other(value.content);
         }
     },
 };

package/dist/cjs/api/resources/apiKeys/client/getTokenMetadata.js

@@ -69,7 +69,7 @@ exports.Error = {
             case "TokenNotFoundError":
                 return visitor.tokenNotFoundError();
             default:
-                return visitor._other(value);
+                return visitor._other(value.content);
         }
     },
 };

package/dist/cjs/api/resources/apiKeys/client/getTokensForOrganization.js

@@ -69,7 +69,7 @@ exports.Error = {
             case "OrganizationNotFoundError":
                 return visitor.organizationNotFoundError();
             default:
-                return visitor._other(value);
+                return visitor._other(value.content);
         }
     },
 };

package/dist/cjs/api/resources/apiKeys/client/revokeToken.js

@@ -69,7 +69,7 @@ exports.Error = {
             case "TokenNotFoundError":
                 return visitor.tokenNotFoundError();
             default:
-                return visitor._other(value);
+                return visitor._other(value.content);
         }
     },
 };

package/dist/cjs/api/resources/apiKeys/client/revokeTokenById.js

@@ -69,7 +69,7 @@ exports.Error = {
             case "TokenNotFoundError":
                 return visitor.tokenNotFoundError();
             default:
-                return visitor._other(value);
+                return visitor._other(value.content);
         }
     },
 };

package/dist/cjs/api/resources/auth/client/Client.d.ts

@@ -0,0 +1,69 @@
+import type { BaseClientOptions, BaseRequestOptions } from "../../../../BaseClient.js";
+import { type NormalizedClientOptionsWithAuth } from "../../../../BaseClient.js";
+import * as core from "../../../../core/index.js";
+import * as FernVenusApi from "../../../index.js";
+export declare namespace AuthClient {
+    type Options = BaseClientOptions;
+    interface RequestOptions extends BaseRequestOptions {
+    }
+}
+export declare class AuthClient {
+    protected readonly _options: NormalizedClientOptionsWithAuth<AuthClient.Options>;
+    constructor(options?: AuthClient.Options);
+    /**
+     * Look up the Fern organization ID for a GitHub owner.
+     * This endpoint is unauthenticated and used by Fiddle to look up the
+     * centralized protected GitHub orgs mapping.
+     *
+     * @param {string} githubOwner - The GitHub repo owner (case-insensitive)
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.getOrgForGithubOwner("protected-github-owner")
+     */
+    getOrgForGithubOwner(githubOwner: string, requestOptions?: AuthClient.RequestOptions): core.HttpResponsePromise<core.APIResponse<FernVenusApi.OrganizationId | undefined, FernVenusApi.auth.getOrgForGithubOwner.Error>>;
+    private __getOrgForGithubOwner;
+    /**
+     * Exchange an autopilot token for a short-lived JWT scoped to an organization.
+     * This endpoint is used by automated systems (like Fiddle) to get org-scoped tokens.
+     * If a GitHub owner is provided and is in the protected GitHub orgs mapping,
+     * the organization ID must match the allowed org for that GitHub owner.
+     * The returned token is identical to tokens from getJwt and can be used the same way.
+     *
+     * @param {FernVenusApi.GetAutopilotTokenRequest} request
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.getAutopilotToken({
+     *         organizationId: "my-org-id"
+     *     })
+     *
+     * @example
+     *     await client.auth.getAutopilotToken({
+     *         organizationId: "wrong-org",
+     *         githubOwner: "protected-github-owner"
+     *     })
+     */
+    getAutopilotToken(request: FernVenusApi.GetAutopilotTokenRequest, requestOptions?: AuthClient.RequestOptions): core.HttpResponsePromise<core.APIResponse<FernVenusApi.JwtResponse, FernVenusApi.auth.getAutopilotToken.Error>>;
+    private __getAutopilotToken;
+    /**
+     * Exchange a user token for a short-lived JWT scoped to an organization.
+     * The user must be a member of the specified organization.
+     * The JWT can be used to authenticate requests to other services.
+     *
+     * @param {FernVenusApi.GetJwtRequest} request
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.getJwt({
+     *         organizationId: "my-org-id"
+     *     })
+     *
+     * @example
+     *     await client.auth.getJwt({
+     *         organizationId: "org-user-not-member-of"
+     *     })
+     */
+    getJwt(request: FernVenusApi.GetJwtRequest, requestOptions?: AuthClient.RequestOptions): core.HttpResponsePromise<core.APIResponse<FernVenusApi.JwtResponse, FernVenusApi.auth.getJwt.Error>>;
+    private __getJwt;
+}

package/dist/cjs/api/resources/auth/client/Client.js

@@ -0,0 +1,295 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthClient = void 0;
+const BaseClient_js_1 = require("../../../../BaseClient.js");
+const headers_js_1 = require("../../../../core/headers.js");
+const core = __importStar(require("../../../../core/index.js"));
+const environments = __importStar(require("../../../../environments.js"));
+const serializers = __importStar(require("../../../../serialization/index.js"));
+const FernVenusApi = __importStar(require("../../../index.js"));
+class AuthClient {
+    constructor(options = {}) {
+        this._options = (0, BaseClient_js_1.normalizeClientOptionsWithAuth)(options);
+    }
+    /**
+     * Look up the Fern organization ID for a GitHub owner.
+     * This endpoint is unauthenticated and used by Fiddle to look up the
+     * centralized protected GitHub orgs mapping.
+     *
+     * @param {string} githubOwner - The GitHub repo owner (case-insensitive)
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.getOrgForGithubOwner("protected-github-owner")
+     */
+    getOrgForGithubOwner(githubOwner, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__getOrgForGithubOwner(githubOwner, requestOptions));
+    }
+    __getOrgForGithubOwner(githubOwner, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+            const _headers = (0, headers_js_1.mergeHeaders)((_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield core.fetcher({
+                url: core.url.join((_c = (_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.FernVenusApiEnvironment.Prod, `/auth/github-owner/${core.url.encodePathParam(githubOwner)}/org`),
+                method: "GET",
+                headers: _headers,
+                queryParameters: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams,
+                timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
+                maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return {
+                    data: {
+                        ok: true,
+                        body: serializers.auth.getOrgForGithubOwner.Response.parseOrThrow(_response.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }),
+                        headers: _response.headers,
+                        rawResponse: _response.rawResponse,
+                    },
+                    rawResponse: _response.rawResponse,
+                };
+            }
+            return {
+                data: {
+                    ok: false,
+                    error: FernVenusApi.auth.getOrgForGithubOwner.Error._unknown(_response.error),
+                    rawResponse: _response.rawResponse,
+                },
+                rawResponse: _response.rawResponse,
+            };
+        });
+    }
+    /**
+     * Exchange an autopilot token for a short-lived JWT scoped to an organization.
+     * This endpoint is used by automated systems (like Fiddle) to get org-scoped tokens.
+     * If a GitHub owner is provided and is in the protected GitHub orgs mapping,
+     * the organization ID must match the allowed org for that GitHub owner.
+     * The returned token is identical to tokens from getJwt and can be used the same way.
+     *
+     * @param {FernVenusApi.GetAutopilotTokenRequest} request
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.getAutopilotToken({
+     *         organizationId: "my-org-id"
+     *     })
+     *
+     * @example
+     *     await client.auth.getAutopilotToken({
+     *         organizationId: "wrong-org",
+     *         githubOwner: "protected-github-owner"
+     *     })
+     */
+    getAutopilotToken(request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__getAutopilotToken(request, requestOptions));
+    }
+    __getAutopilotToken(request, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield core.fetcher({
+                url: core.url.join((_c = (_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.FernVenusApiEnvironment.Prod, "/auth/autopilot-token"),
+                method: "POST",
+                headers: _headers,
+                contentType: "application/json",
+                queryParameters: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams,
+                requestType: "json",
+                body: serializers.GetAutopilotTokenRequest.jsonOrThrow(request, {
+                    unrecognizedObjectKeys: "strip",
+                    omitUndefined: true,
+                }),
+                timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
+                maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return {
+                    data: {
+                        ok: true,
+                        body: serializers.JwtResponse.parseOrThrow(_response.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }),
+                        headers: _response.headers,
+                        rawResponse: _response.rawResponse,
+                    },
+                    rawResponse: _response.rawResponse,
+                };
+            }
+            if (_response.error.reason === "status-code") {
+                switch ((_k = _response.error.body) === null || _k === void 0 ? void 0 : _k.error) {
+                    case "UnauthorizedError":
+                        return {
+                            data: {
+                                ok: false,
+                                error: serializers.auth.getAutopilotToken.Error.parseOrThrow(_response.error.body, {
+                                    unrecognizedObjectKeys: "passthrough",
+                                    allowUnrecognizedUnionMembers: true,
+                                    allowUnrecognizedEnumValues: true,
+                                    skipValidation: true,
+                                    breadcrumbsPrefix: ["response"],
+                                }),
+                                rawResponse: _response.rawResponse,
+                            },
+                            rawResponse: _response.rawResponse,
+                        };
+                }
+            }
+            return {
+                data: {
+                    ok: false,
+                    error: FernVenusApi.auth.getAutopilotToken.Error._unknown(_response.error),
+                    rawResponse: _response.rawResponse,
+                },
+                rawResponse: _response.rawResponse,
+            };
+        });
+    }
+    /**
+     * Exchange a user token for a short-lived JWT scoped to an organization.
+     * The user must be a member of the specified organization.
+     * The JWT can be used to authenticate requests to other services.
+     *
+     * @param {FernVenusApi.GetJwtRequest} request
+     * @param {AuthClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.auth.getJwt({
+     *         organizationId: "my-org-id"
+     *     })
+     *
+     * @example
+     *     await client.auth.getJwt({
+     *         organizationId: "org-user-not-member-of"
+     *     })
+     */
+    getJwt(request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__getJwt(request, requestOptions));
+    }
+    __getJwt(request, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield core.fetcher({
+                url: core.url.join((_c = (_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.FernVenusApiEnvironment.Prod, "/auth/jwt"),
+                method: "POST",
+                headers: _headers,
+                contentType: "application/json",
+                queryParameters: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams,
+                requestType: "json",
+                body: serializers.GetJwtRequest.jsonOrThrow(request, {
+                    unrecognizedObjectKeys: "strip",
+                    omitUndefined: true,
+                }),
+                timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
+                maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return {
+                    data: {
+                        ok: true,
+                        body: serializers.JwtResponse.parseOrThrow(_response.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }),
+                        headers: _response.headers,
+                        rawResponse: _response.rawResponse,
+                    },
+                    rawResponse: _response.rawResponse,
+                };
+            }
+            if (_response.error.reason === "status-code") {
+                switch ((_k = _response.error.body) === null || _k === void 0 ? void 0 : _k.error) {
+                    case "UnauthorizedError":
+                        return {
+                            data: {
+                                ok: false,
+                                error: serializers.auth.getJwt.Error.parseOrThrow(_response.error.body, {
+                                    unrecognizedObjectKeys: "passthrough",
+                                    allowUnrecognizedUnionMembers: true,
+                                    allowUnrecognizedEnumValues: true,
+                                    skipValidation: true,
+                                    breadcrumbsPrefix: ["response"],
+                                }),
+                                rawResponse: _response.rawResponse,
+                            },
+                            rawResponse: _response.rawResponse,
+                        };
+                }
+            }
+            return {
+                data: {
+                    ok: false,
+                    error: FernVenusApi.auth.getJwt.Error._unknown(_response.error),
+                    rawResponse: _response.rawResponse,
+                },
+                rawResponse: _response.rawResponse,
+            };
+        });
+    }
+}
+exports.AuthClient = AuthClient;