@zapier/zapier-sdk-core 0.13.0 → 0.14.1

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # @zapier/zapier-sdk-core
 
+## 0.14.1
+
+### Patch Changes
+
+- 40f208f: fix: correct OAuth bearer token authentication so valid tokens are no longer incorrectly rejected.
+
+## 0.14.0
+
+### Minor Changes
+
+- 44596c6: Add `mode` (`"manual" | "auto"`) and `reason` to `ApprovalResponseSchema`, and make `approval_url` and `poll_url` required. `mode` lets clients branch UI/UX between human-reviewed approvals and agent-reviewed (auto) approvals. `approval_url` is populated for both modes — auto-mode records point at the existing approval UI so older SDK clients that always navigate users to `approval_url` continue to work. `reason` carries the human-readable denial message when `status` is `denied`.
+
+## 0.13.1
+
+### Patch Changes
+
+- 1a9c6ed: Bump policy-context version to 1.1.1 for action_key fix
+
 ## 0.13.0
 
 ### Minor Changes

package/dist/v0/schemas/approvals.cjs

@@ -20,6 +20,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/v0/schemas/approvals.ts
 var approvals_exports = {};
 __export(approvals_exports, {
+  ApprovalModeSchema: () => ApprovalModeSchema,
   ApprovalResponseSchema: () => ApprovalResponseSchema,
   ApprovalStatusSchema: () => ApprovalStatusSchema,
   GetApprovalParamSchema: () => GetApprovalParamSchema
@@ -27,17 +28,23 @@ __export(approvals_exports, {
 module.exports = __toCommonJS(approvals_exports);
 var import_zod = require("zod");
 var ApprovalStatusSchema = import_zod.z.enum(["pending_approval", "approved", "denied"]).describe("The current status of the approval request");
+var ApprovalModeSchema = import_zod.z.enum(["manual", "auto"]).describe(
+  "How the approval will be reviewed: manual (human) or auto (agent)"
+);
 var ApprovalResponseSchema = import_zod.z.object({
   status: ApprovalStatusSchema,
+  mode: ApprovalModeSchema,
   approval_id: import_zod.z.string().describe("Unique identifier for the approval request"),
-  approval_url: import_zod.z.string().optional().describe("URL for the user to visit and approve/deny the request"),
-  poll_url: import_zod.z.string().optional().describe("URL for the SDK to poll for status changes")
+  approval_url: import_zod.z.string().describe("URL for the user to visit and approve/deny the request"),
+  poll_url: import_zod.z.string().describe("URL for the SDK to poll for status changes"),
+  reason: import_zod.z.string().optional().describe("Human-readable reason populated when status is denied")
 });
 var GetApprovalParamSchema = import_zod.z.object({
   approvalId: import_zod.z.string().describe("The unique identifier of the approval request")
 });
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  ApprovalModeSchema,
   ApprovalResponseSchema,
   ApprovalStatusSchema,
   GetApprovalParamSchema

package/dist/v0/schemas/approvals.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/v0/schemas/approvals.ts"],"sourcesContent":["import { z } from \"zod\";\n\n/**\n * Shared approval schemas used by both route definitions and core models.\n */\n\n/**\n * Approval status enum\n */\nexport const ApprovalStatusSchema = z\n  .enum([\"pending_approval\", \"approved\", \"denied\"])\n  .describe(\"The current status of the approval request\");\n\n/**\n * Approval response shape returned by both the poll endpoint and the 202 proxy response.\n */\nexport const ApprovalResponseSchema = z.object({\n  status: ApprovalStatusSchema,\n  approval_id: z\n    .string()\n    .describe(\"Unique identifier for the approval request\"),\n  approval_url: z\n    .string()\n    .optional()\n    .describe(\"URL for the user to visit and approve/deny the request\"),\n  poll_url: z\n    .string()\n    .optional()\n    .describe(\"URL for the SDK to poll for status changes\"),\n});\n\nexport type ApprovalStatus = z.infer<typeof ApprovalStatusSchema>;\nexport type ApprovalResponse = z.infer<typeof ApprovalResponseSchema>;\n\n/**\n * Path parameters for get approval\n */\nexport const GetApprovalParamSchema = z.object({\n  approvalId: z\n    .string()\n    .describe(\"The unique identifier of the approval request\"),\n});\n\nexport type GetApprovalParam = z.infer<typeof GetApprovalParamSchema>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,iBAAkB;AASX,IAAM,uBAAuB,aACjC,KAAK,CAAC,oBAAoB,YAAY,QAAQ,CAAC,EAC/C,SAAS,4CAA4C;AAKjD,IAAM,yBAAyB,aAAE,OAAO;AAAA,EAC7C,QAAQ;AAAA,EACR,aAAa,aACV,OAAO,EACP,SAAS,4CAA4C;AAAA,EACxD,cAAc,aACX,OAAO,EACP,SAAS,EACT,SAAS,wDAAwD;AAAA,EACpE,UAAU,aACP,OAAO,EACP,SAAS,EACT,SAAS,4CAA4C;AAC1D,CAAC;AAQM,IAAM,yBAAyB,aAAE,OAAO;AAAA,EAC7C,YAAY,aACT,OAAO,EACP,SAAS,+CAA+C;AAC7D,CAAC;","names":[]}
+{"version":3,"sources":["../../../src/v0/schemas/approvals.ts"],"sourcesContent":["import { z } from \"zod\";\n\n/**\n * Shared approval schemas used by both route definitions and core models.\n */\n\n/**\n * Approval status enum\n */\nexport const ApprovalStatusSchema = z\n  .enum([\"pending_approval\", \"approved\", \"denied\"])\n  .describe(\"The current status of the approval request\");\n\n/**\n * Approval mode enum: manual (human reviews) or auto (agent reviews).\n *\n * Surfaced in the response so consumers can branch UI/UX later. Today\n * `approval_url` is always populated regardless of mode — old SDK clients\n * that always navigate users to `approval_url` keep working against\n * auto-mode approvals, which land on the existing approval UI.\n */\nexport const ApprovalModeSchema = z\n  .enum([\"manual\", \"auto\"])\n  .describe(\n    \"How the approval will be reviewed: manual (human) or auto (agent)\",\n  );\n\n/**\n * Approval response shape returned by both the poll endpoint and the 202 proxy response.\n */\nexport const ApprovalResponseSchema = z.object({\n  status: ApprovalStatusSchema,\n  mode: ApprovalModeSchema,\n  approval_id: z\n    .string()\n    .describe(\"Unique identifier for the approval request\"),\n  approval_url: z\n    .string()\n    .describe(\"URL for the user to visit and approve/deny the request\"),\n  poll_url: z.string().describe(\"URL for the SDK to poll for status changes\"),\n  reason: z\n    .string()\n    .optional()\n    .describe(\"Human-readable reason populated when status is denied\"),\n});\n\nexport type ApprovalStatus = z.infer<typeof ApprovalStatusSchema>;\nexport type ApprovalMode = z.infer<typeof ApprovalModeSchema>;\nexport type ApprovalResponse = z.infer<typeof ApprovalResponseSchema>;\n\n/**\n * Path parameters for get approval\n */\nexport const GetApprovalParamSchema = z.object({\n  approvalId: z\n    .string()\n    .describe(\"The unique identifier of the approval request\"),\n});\n\nexport type GetApprovalParam = z.infer<typeof GetApprovalParamSchema>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,iBAAkB;AASX,IAAM,uBAAuB,aACjC,KAAK,CAAC,oBAAoB,YAAY,QAAQ,CAAC,EAC/C,SAAS,4CAA4C;AAUjD,IAAM,qBAAqB,aAC/B,KAAK,CAAC,UAAU,MAAM,CAAC,EACvB;AAAA,EACC;AACF;AAKK,IAAM,yBAAyB,aAAE,OAAO;AAAA,EAC7C,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,aAAa,aACV,OAAO,EACP,SAAS,4CAA4C;AAAA,EACxD,cAAc,aACX,OAAO,EACP,SAAS,wDAAwD;AAAA,EACpE,UAAU,aAAE,OAAO,EAAE,SAAS,4CAA4C;AAAA,EAC1E,QAAQ,aACL,OAAO,EACP,SAAS,EACT,SAAS,uDAAuD;AACrE,CAAC;AASM,IAAM,yBAAyB,aAAE,OAAO;AAAA,EAC7C,YAAY,aACT,OAAO,EACP,SAAS,+CAA+C;AAC7D,CAAC;","names":[]}

package/dist/v0/schemas/approvals.d.cts

@@ -11,6 +11,18 @@ declare const ApprovalStatusSchema: z.ZodEnum<{
     approved: "approved";
     denied: "denied";
 }>;
+/**
+ * Approval mode enum: manual (human reviews) or auto (agent reviews).
+ *
+ * Surfaced in the response so consumers can branch UI/UX later. Today
+ * `approval_url` is always populated regardless of mode — old SDK clients
+ * that always navigate users to `approval_url` keep working against
+ * auto-mode approvals, which land on the existing approval UI.
+ */
+declare const ApprovalModeSchema: z.ZodEnum<{
+    manual: "manual";
+    auto: "auto";
+}>;
 /**
  * Approval response shape returned by both the poll endpoint and the 202 proxy response.
  */
@@ -20,11 +32,17 @@ declare const ApprovalResponseSchema: z.ZodObject<{
         approved: "approved";
         denied: "denied";
     }>;
+    mode: z.ZodEnum<{
+        manual: "manual";
+        auto: "auto";
+    }>;
     approval_id: z.ZodString;
-    approval_url: z.ZodOptional<z.ZodString>;
-    poll_url: z.ZodOptional<z.ZodString>;
+    approval_url: z.ZodString;
+    poll_url: z.ZodString;
+    reason: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 type ApprovalStatus = z.infer<typeof ApprovalStatusSchema>;
+type ApprovalMode = z.infer<typeof ApprovalModeSchema>;
 type ApprovalResponse = z.infer<typeof ApprovalResponseSchema>;
 /**
  * Path parameters for get approval
@@ -34,4 +52,4 @@ declare const GetApprovalParamSchema: z.ZodObject<{
 }, z.core.$strip>;
 type GetApprovalParam = z.infer<typeof GetApprovalParamSchema>;
 
-export { type ApprovalResponse, ApprovalResponseSchema, type ApprovalStatus, ApprovalStatusSchema, type GetApprovalParam, GetApprovalParamSchema };
+export { type ApprovalMode, ApprovalModeSchema, type ApprovalResponse, ApprovalResponseSchema, type ApprovalStatus, ApprovalStatusSchema, type GetApprovalParam, GetApprovalParamSchema };

package/dist/v0/schemas/approvals.d.ts

@@ -11,6 +11,18 @@ declare const ApprovalStatusSchema: z.ZodEnum<{
     approved: "approved";
     denied: "denied";
 }>;
+/**
+ * Approval mode enum: manual (human reviews) or auto (agent reviews).
+ *
+ * Surfaced in the response so consumers can branch UI/UX later. Today
+ * `approval_url` is always populated regardless of mode — old SDK clients
+ * that always navigate users to `approval_url` keep working against
+ * auto-mode approvals, which land on the existing approval UI.
+ */
+declare const ApprovalModeSchema: z.ZodEnum<{
+    manual: "manual";
+    auto: "auto";
+}>;
 /**
  * Approval response shape returned by both the poll endpoint and the 202 proxy response.
  */
@@ -20,11 +32,17 @@ declare const ApprovalResponseSchema: z.ZodObject<{
         approved: "approved";
         denied: "denied";
     }>;
+    mode: z.ZodEnum<{
+        manual: "manual";
+        auto: "auto";
+    }>;
     approval_id: z.ZodString;
-    approval_url: z.ZodOptional<z.ZodString>;
-    poll_url: z.ZodOptional<z.ZodString>;
+    approval_url: z.ZodString;
+    poll_url: z.ZodString;
+    reason: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 type ApprovalStatus = z.infer<typeof ApprovalStatusSchema>;
+type ApprovalMode = z.infer<typeof ApprovalModeSchema>;
 type ApprovalResponse = z.infer<typeof ApprovalResponseSchema>;
 /**
  * Path parameters for get approval
@@ -34,4 +52,4 @@ declare const GetApprovalParamSchema: z.ZodObject<{
 }, z.core.$strip>;
 type GetApprovalParam = z.infer<typeof GetApprovalParamSchema>;
 
-export { type ApprovalResponse, ApprovalResponseSchema, type ApprovalStatus, ApprovalStatusSchema, type GetApprovalParam, GetApprovalParamSchema };
+export { type ApprovalMode, ApprovalModeSchema, type ApprovalResponse, ApprovalResponseSchema, type ApprovalStatus, ApprovalStatusSchema, type GetApprovalParam, GetApprovalParamSchema };

package/dist/v0/schemas/approvals.js

@@ -1,16 +1,22 @@
 // src/v0/schemas/approvals.ts
 import { z } from "zod";
 var ApprovalStatusSchema = z.enum(["pending_approval", "approved", "denied"]).describe("The current status of the approval request");
+var ApprovalModeSchema = z.enum(["manual", "auto"]).describe(
+  "How the approval will be reviewed: manual (human) or auto (agent)"
+);
 var ApprovalResponseSchema = z.object({
   status: ApprovalStatusSchema,
+  mode: ApprovalModeSchema,
   approval_id: z.string().describe("Unique identifier for the approval request"),
-  approval_url: z.string().optional().describe("URL for the user to visit and approve/deny the request"),
-  poll_url: z.string().optional().describe("URL for the SDK to poll for status changes")
+  approval_url: z.string().describe("URL for the user to visit and approve/deny the request"),
+  poll_url: z.string().describe("URL for the SDK to poll for status changes"),
+  reason: z.string().optional().describe("Human-readable reason populated when status is denied")
 });
 var GetApprovalParamSchema = z.object({
   approvalId: z.string().describe("The unique identifier of the approval request")
 });
 export {
+  ApprovalModeSchema,
   ApprovalResponseSchema,
   ApprovalStatusSchema,
   GetApprovalParamSchema

package/dist/v0/schemas/approvals.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/v0/schemas/approvals.ts"],"sourcesContent":["import { z } from \"zod\";\n\n/**\n * Shared approval schemas used by both route definitions and core models.\n */\n\n/**\n * Approval status enum\n */\nexport const ApprovalStatusSchema = z\n  .enum([\"pending_approval\", \"approved\", \"denied\"])\n  .describe(\"The current status of the approval request\");\n\n/**\n * Approval response shape returned by both the poll endpoint and the 202 proxy response.\n */\nexport const ApprovalResponseSchema = z.object({\n  status: ApprovalStatusSchema,\n  approval_id: z\n    .string()\n    .describe(\"Unique identifier for the approval request\"),\n  approval_url: z\n    .string()\n    .optional()\n    .describe(\"URL for the user to visit and approve/deny the request\"),\n  poll_url: z\n    .string()\n    .optional()\n    .describe(\"URL for the SDK to poll for status changes\"),\n});\n\nexport type ApprovalStatus = z.infer<typeof ApprovalStatusSchema>;\nexport type ApprovalResponse = z.infer<typeof ApprovalResponseSchema>;\n\n/**\n * Path parameters for get approval\n */\nexport const GetApprovalParamSchema = z.object({\n  approvalId: z\n    .string()\n    .describe(\"The unique identifier of the approval request\"),\n});\n\nexport type GetApprovalParam = z.infer<typeof GetApprovalParamSchema>;\n"],"mappings":";AAAA,SAAS,SAAS;AASX,IAAM,uBAAuB,EACjC,KAAK,CAAC,oBAAoB,YAAY,QAAQ,CAAC,EAC/C,SAAS,4CAA4C;AAKjD,IAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,QAAQ;AAAA,EACR,aAAa,EACV,OAAO,EACP,SAAS,4CAA4C;AAAA,EACxD,cAAc,EACX,OAAO,EACP,SAAS,EACT,SAAS,wDAAwD;AAAA,EACpE,UAAU,EACP,OAAO,EACP,SAAS,EACT,SAAS,4CAA4C;AAC1D,CAAC;AAQM,IAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,YAAY,EACT,OAAO,EACP,SAAS,+CAA+C;AAC7D,CAAC;","names":[]}
+{"version":3,"sources":["../../../src/v0/schemas/approvals.ts"],"sourcesContent":["import { z } from \"zod\";\n\n/**\n * Shared approval schemas used by both route definitions and core models.\n */\n\n/**\n * Approval status enum\n */\nexport const ApprovalStatusSchema = z\n  .enum([\"pending_approval\", \"approved\", \"denied\"])\n  .describe(\"The current status of the approval request\");\n\n/**\n * Approval mode enum: manual (human reviews) or auto (agent reviews).\n *\n * Surfaced in the response so consumers can branch UI/UX later. Today\n * `approval_url` is always populated regardless of mode — old SDK clients\n * that always navigate users to `approval_url` keep working against\n * auto-mode approvals, which land on the existing approval UI.\n */\nexport const ApprovalModeSchema = z\n  .enum([\"manual\", \"auto\"])\n  .describe(\n    \"How the approval will be reviewed: manual (human) or auto (agent)\",\n  );\n\n/**\n * Approval response shape returned by both the poll endpoint and the 202 proxy response.\n */\nexport const ApprovalResponseSchema = z.object({\n  status: ApprovalStatusSchema,\n  mode: ApprovalModeSchema,\n  approval_id: z\n    .string()\n    .describe(\"Unique identifier for the approval request\"),\n  approval_url: z\n    .string()\n    .describe(\"URL for the user to visit and approve/deny the request\"),\n  poll_url: z.string().describe(\"URL for the SDK to poll for status changes\"),\n  reason: z\n    .string()\n    .optional()\n    .describe(\"Human-readable reason populated when status is denied\"),\n});\n\nexport type ApprovalStatus = z.infer<typeof ApprovalStatusSchema>;\nexport type ApprovalMode = z.infer<typeof ApprovalModeSchema>;\nexport type ApprovalResponse = z.infer<typeof ApprovalResponseSchema>;\n\n/**\n * Path parameters for get approval\n */\nexport const GetApprovalParamSchema = z.object({\n  approvalId: z\n    .string()\n    .describe(\"The unique identifier of the approval request\"),\n});\n\nexport type GetApprovalParam = z.infer<typeof GetApprovalParamSchema>;\n"],"mappings":";AAAA,SAAS,SAAS;AASX,IAAM,uBAAuB,EACjC,KAAK,CAAC,oBAAoB,YAAY,QAAQ,CAAC,EAC/C,SAAS,4CAA4C;AAUjD,IAAM,qBAAqB,EAC/B,KAAK,CAAC,UAAU,MAAM,CAAC,EACvB;AAAA,EACC;AACF;AAKK,IAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,aAAa,EACV,OAAO,EACP,SAAS,4CAA4C;AAAA,EACxD,cAAc,EACX,OAAO,EACP,SAAS,wDAAwD;AAAA,EACpE,UAAU,EAAE,OAAO,EAAE,SAAS,4CAA4C;AAAA,EAC1E,QAAQ,EACL,OAAO,EACP,SAAS,EACT,SAAS,uDAAuD;AACrE,CAAC;AASM,IAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,YAAY,EACT,OAAO,EACP,SAAS,+CAA+C;AAC7D,CAAC;","names":[]}

package/openapi.yaml

@@ -213,6 +213,12 @@ components:
             - approved
             - denied
           description: The current status of the approval request
+        mode:
+          type: string
+          enum:
+            - manual
+            - auto
+          description: "How the approval will be reviewed: manual (human) or auto (agent)"
         approval_id:
           type: string
           description: Unique identifier for the approval request
@@ -222,9 +228,15 @@ components:
         poll_url:
           type: string
           description: URL for the SDK to poll for status changes
+        reason:
+          type: string
+          description: Human-readable reason populated when status is denied
       required:
         - status
+        - mode
         - approval_id
+        - approval_url
+        - poll_url
     ParsedUrl:
       type: object
       properties:
@@ -1458,9 +1470,6 @@ paths:
       operationId: v0_create_client_credentials
       security:
         - userJwt: []
-      x-fastify-config:
-        requiredScopes:
-          - credentials
       requestBody:
         content:
           application/json:
@@ -1510,9 +1519,6 @@ paths:
       operationId: v0_list_client_credentials
       security:
         - userJwt: []
-      x-fastify-config:
-        requiredScopes:
-          - credentials
       parameters:
         - schema:
             type: integer
@@ -1580,9 +1586,6 @@ paths:
       operationId: v0_delete_client_credentials
       security:
         - userJwt: []
-      x-fastify-config:
-        requiredScopes:
-          - credentials
       parameters:
         - schema:
             type: string

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zapier/zapier-sdk-core",
-  "version": "0.13.0",
+  "version": "0.14.1",
   "description": "Core schemas and TypeScript types for the Zapier SDK API",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Zapier, Inc.",
@@ -88,7 +88,7 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@zapier/policy-context": "1.1.0",
+    "@zapier/policy-context": "1.1.1",
     "zod": "4.3.6"
   },
   "devDependencies": {