feat: My Organization Member Management EA, Resource Server Access Token Custom Claims, and Organization Connection Member Access Level

[fern-api]

🔧 Changes

Adds management fields for My Organization member management, resource server access token custom claims, and organization connection member access levels.

• Client (my_organization_configuration): enforce_permission_ceiling limits permissions that org admins can assign to members; enforce_self_assignment_restriction prevents org admins from assigning permissions to themselves. Added to ClientMyOrganizationPatchConfiguration, ClientMyOrganizationPostConfiguration, and
  ClientMyOrganizationResponseConfiguration.
• Resource Server: access_token.claims_mapping.custom_claims allows custom claims to be emitted in anonymous-session access tokens via dot-path expressions (e.g. anonymous_session.metadata.country). Added to CreateResourceServerRequestContent, UpdateResourceServerRequestContent, CreateResourceServerResponseContent, GetResourceServerResponseContent,
  UpdateResourceServerResponseContent, ResourceServer, and ResourceServerSearchResponse
  • New supporting types: ResourceServerAccessToken, ResourceServerAccessTokenClaimsMapping, ResourceServerAccessTokenCustomClaimsMapping, and
    ResourceServerAccessTokenCustomClaimsMappingRule.
• Tenant Settings: access_token field added to GetTenantSettingsResponseContent, UpdateTenantSettingsResponseContent, and UpdateTenantSettingsRequestContent.
• Organization Connections: organization_member_access_level (none | readonly | limited | full) added to all organization connection request/response types. New enum type
  OrganizationMemberAccessLevelEnum for standard usage, plus a nullable variant OrganizationMemberAccessLevelEnumWithNull used for
  UpdateOrganizationConnectionRequestParameters where the field is nullable.

// My Organization member management

  client.my_organization_configuration = {
      enforce_permission_ceiling: true,
      enforce_self_assignment_restriction: false,
  };

// Resource server access token custom claims

resourceServer.access_token = {
    claims_mapping: {
        custom_claims: [{ name: "country", expression: "anonymous_session.metadata.country" }]
    }
};

// Organization connection member access level
connection.organization_member_access_level = "readonly";

🔬 Testing

• clients.test.ts - enforce_permission_ceiling and enforce_self_assignment_restriction added to 4 wire test fixtures
• organizations/connections.test.ts - organization_member_access_level added to 4 wire test fixtures
• resourceServers.test.ts - access_token claims mapping added to 3 wire test fixtures
• tenants/settings.test.ts - access_token claims mapping added to 2 wire test fixtures
• management-client-fetch-option.test.ts and token-provider.test.ts - deleted (201 + 541 lines)

📝 Checklist

• All new/changed/fixed functionality is covered by tests (or N/A)
• I have added documentation for all new/changed functionality (or N/A)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 89.41%. Comparing base (e1e90b8) to head (fd6fd65).

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #1406      +/-   ##
==========================================
- Coverage   89.68%   89.41%   -0.27%     
==========================================
  Files         439      439              
  Lines       21080    21082       +2     
  Branches    10327     9990     -337     
==========================================
- Hits        18905    18851      -54     
- Misses       2175     2231      +56     

Flag	Coverage Δ
alltests	89.41% <100.00%> (-0.27%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
src/management/api/types/types.ts	100.00% <100.00%> (ø)

... and 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.