@zapier/zapier-sdk 0.76.0 → 0.76.2

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @zapier/zapier-sdk
 
+## 0.76.2
+
+### Patch Changes
+
+- 27ca0c5: Add zapier-sdk-agent header to identify the AI agent using the SDK
+
+## 0.76.1
+
+### Patch Changes
+
+- 745e172: Include client id and auth mechanism in client-side telemetry
+
 ## 0.76.0
 
 ### Minor Changes

package/dist/api/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,SAAS,EACT,gBAAgB,EAIjB,MAAM,SAAS,CAAC;AA0kDjB,eAAO,MAAM,eAAe,GAAI,SAAS,gBAAgB,KAAG,SAW3D,CAAC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,SAAS,EACT,gBAAgB,EAIjB,MAAM,SAAS,CAAC;AAglDjB,eAAO,MAAM,eAAe,GAAI,SAAS,gBAAgB,KAAG,SAW3D,CAAC"}

package/dist/api/client.js

@@ -14,6 +14,7 @@ import { sleep, calculateExponentialBackoffMs } from "../utils/retry-utils";
 import { isPlainObject } from "../utils/type-guard-utils";
 import { isAbortError } from "../utils/abort-utils";
 import { getCallerContext } from "../utils/caller-context";
+import { getAgent } from "../utils/agent";
 import { createSseParserStream, jsonFrames, } from "./sse-parser";
 import { consumeApprovalReviewStream } from "./approval-review-stream";
 import { ZapierApiError, ZapierApprovalError, ZapierAuthenticationError, ZapierConfigurationError, ZapierTimeoutError, ZapierValidationError, ZapierResourceNotFoundError, ZapierRateLimitError, } from "../types/errors";
@@ -766,6 +767,10 @@ class ZapierApiClient {
             headers.set("zapier-service", sdkService);
             headers.set("x-zapier-service", sdkService);
         }
+        const agent = getAgent();
+        if (agent) {
+            headers.set("zapier-sdk-agent", agent);
+        }
         const callerPackage = this.options.callerPackage;
         if (callerPackage) {
             headers.set("zapier-sdk-package", callerPackage.name);

package/dist/auth.d.ts

@@ -42,6 +42,18 @@ export interface ResolveAuthTokenOptions {
      */
     cache?: ZapierCache;
 }
+export declare enum AuthMechanism {
+    ClientCredentials = "client_credentials",
+    Jwt = "jwt",
+    Token = "token",
+    Pkce = "pkce",
+    None = "none"
+}
+export interface ResolvedAuth {
+    token?: string;
+    mechanism: AuthMechanism;
+    clientId: string | null;
+}
 /**
  * Clear in-process caches. Useful for testing or to force the next
  * resolve to re-import the default cache adapter. Does not touch
@@ -104,7 +116,8 @@ export declare function isCliLoginAvailable(): boolean | undefined;
  */
 export declare function getTokenFromCliLogin(options: CliLoginOptions): Promise<string | undefined>;
 /**
- * Resolves an auth token from wherever it can be found.
+ * Resolves auth from wherever it can be found, returning the token plus
+ * metadata about how it was resolved.
  *
  * Resolution order:
  * 1. Explicit credentials option (or deprecated token option)
@@ -116,8 +129,10 @@ export declare function getTokenFromCliLogin(options: CliLoginOptions): Promise<
  * - Client credentials: Exchanged for an access token (with caching)
  * - PKCE: Delegates to CLI login (throws if not available)
  *
- * Returns undefined if no valid token is found.
+ * When no auth can be resolved, returns a ResolvedAuth with
+ * mechanism: None and no token.
  */
+export declare function resolveAuth(options?: ResolveAuthTokenOptions): Promise<ResolvedAuth>;
 export declare function resolveAuthToken(options?: ResolveAuthTokenOptions): Promise<string | undefined>;
 /**
  * Invalidate the cached token for the given credentials, if applicable.

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EACV,WAAW,EAEX,uBAAuB,EACxB,MAAM,qBAAqB,CAAC;AAK7B,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,SAAS,CAAC;AAG9D,YAAY,EACV,WAAW,EACX,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAG5C,YAAY,EACV,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,aAAa,GACd,MAAM,gBAAgB,CAAC;AAGxB,YAAY,EACV,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAE7B;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,gDAAgD;IAChD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AA8BD;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAItC;AAgDD;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CAWhB;AAoID;;GAEG;AACH,UAAU,eAAe;IACvB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC,WAAW,CAAC,EAAE;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAGD,KAAK,cAAc,GAAG,cAAc,8BAA8B,CAAC,GAAG;IACpE,oBAAoB,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE;QAChC,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,KAAK;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAC3E,0BAA0B,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE;QACtC,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,KAAK,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;CACpD,CAAC;AA6BF;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAE3D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,GAAG,SAAS,CAGzD;AA2BD;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAK7B;AAkED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA4B7B;AAqHD;;;;GAIG;AACH,wBAAsB,0BAA0B,CAAC,OAAO,EAAE;IACxD,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CAehB"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EACV,WAAW,EAEX,uBAAuB,EACxB,MAAM,qBAAqB,CAAC;AAK7B,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,SAAS,CAAC;AAG9D,YAAY,EACV,WAAW,EACX,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAG5C,YAAY,EACV,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,aAAa,GACd,MAAM,gBAAgB,CAAC;AAGxB,YAAY,EACV,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAE7B;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,gDAAgD;IAChD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,oBAAY,aAAa;IACvB,iBAAiB,uBAAuB;IACxC,GAAG,QAAQ;IACX,KAAK,UAAU;IACf,IAAI,SAAS;IACb,IAAI,SAAS;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,aAAa,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAkCD;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAItC;AAgDD;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CAWhB;AAoID;;GAEG;AACH,UAAU,eAAe;IACvB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC,WAAW,CAAC,EAAE;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAGD,KAAK,cAAc,GAAG,cAAc,8BAA8B,CAAC,GAAG;IACpE,oBAAoB,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE;QAChC,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,KAAK;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAC3E,0BAA0B,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE;QACtC,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,KAAK,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;CACpD,CAAC;AA6BF;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAE3D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,GAAG,SAAS,CAGzD;AA2BD;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAK7B;AA6ED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,WAAW,CAC/B,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,YAAY,CAAC,CAqCvB;AAED,wBAAsB,gBAAgB,CACpC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAE7B;AA2ID;;;;GAIG;AACH,wBAAsB,0BAA0B,CAAC,OAAO,EAAE;IACxD,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CAehB"}

package/dist/auth.js

@@ -16,6 +16,14 @@ import { createMemoryCache } from "./cache";
 const DEFAULT_AUTH_BASE_URL = "https://zapier.com";
 export { createMemoryCache } from "./cache";
 export { isClientCredentials, isPkceCredentials, isCredentialsObject, isCredentialsFunction, } from "./types/credentials";
+export var AuthMechanism;
+(function (AuthMechanism) {
+    AuthMechanism["ClientCredentials"] = "client_credentials";
+    AuthMechanism["Jwt"] = "jwt";
+    AuthMechanism["Token"] = "token";
+    AuthMechanism["Pkce"] = "pkce";
+    AuthMechanism["None"] = "none";
+})(AuthMechanism || (AuthMechanism = {}));
 /**
  * In-flight token exchange promises to prevent duplicate exchanges
  * inside the same process. When an exchange is in progress, subsequent
@@ -266,7 +274,7 @@ export async function getTokenFromCliLogin(options) {
         return undefined;
     return await cliLogin.getToken(options);
 }
-async function tryStoredClientCredentialToken(options) {
+async function tryStoredClientCredentialAuth(options) {
     const activeCredential = await getActiveCredentialsFromCli(options.baseUrl);
     if (!activeCredential)
         return undefined;
@@ -279,8 +287,13 @@ async function tryStoredClientCredentialToken(options) {
     });
     const cache = await resolveCache(options);
     const pending = pendingExchanges.get(cacheKey);
-    if (pending)
-        return pending;
+    if (pending) {
+        return {
+            token: await pending,
+            mechanism: AuthMechanism.ClientCredentials,
+            clientId: activeCredential.clientId,
+        };
+    }
     const cached = await readCachedToken(cacheKey, cache);
     if (cached !== undefined) {
         if (options.debug)
@@ -288,8 +301,12 @@ async function tryStoredClientCredentialToken(options) {
             // (smoke tests, scripts) pipe `zapier-sdk --debug ... --json` into a
             // JSON parser.
             console.error(`[auth] Using cached token (clientId: ${activeCredential.clientId})`);
-        emitAuthResolved(options.onEvent, "client_credentials");
-        return cached;
+        emitAuthResolved(options.onEvent, AuthMechanism.ClientCredentials);
+        return {
+            token: cached,
+            mechanism: AuthMechanism.ClientCredentials,
+            clientId: activeCredential.clientId,
+        };
     }
     const storedCredential = await getStoredClientCredentialsFromCli(resolvedBaseUrl);
     if (!storedCredential) {
@@ -306,12 +323,17 @@ async function tryStoredClientCredentialToken(options) {
     }
     if (options.debug)
         console.error(`[auth] Using stored client credential (clientId: ${storedCredential.clientId})`);
-    const token = await resolveAuthTokenFromCredentials(storedCredential, options);
-    emitAuthResolved(options.onEvent, "client_credentials");
-    return token;
+    const auth = await resolveAuthFromCredentials(storedCredential, options);
+    emitAuthResolved(options.onEvent, AuthMechanism.ClientCredentials);
+    return {
+        token: auth.token,
+        mechanism: AuthMechanism.ClientCredentials,
+        clientId: activeCredential.clientId,
+    };
 }
 /**
- * Resolves an auth token from wherever it can be found.
+ * Resolves auth from wherever it can be found, returning the token plus
+ * metadata about how it was resolved.
  *
  * Resolution order:
  * 1. Explicit credentials option (or deprecated token option)
@@ -323,9 +345,10 @@ async function tryStoredClientCredentialToken(options) {
  * - Client credentials: Exchanged for an access token (with caching)
  * - PKCE: Delegates to CLI login (throws if not available)
  *
- * Returns undefined if no valid token is found.
+ * When no auth can be resolved, returns a ResolvedAuth with
+ * mechanism: None and no token.
  */
-export async function resolveAuthToken(options = {}) {
+export async function resolveAuth(options = {}) {
     // Resolve credentials from options and env vars
     const credentials = await resolveCredentials({
         credentials: options.credentials,
@@ -334,11 +357,11 @@ export async function resolveAuthToken(options = {}) {
     });
     // If we got credentials, process them based on type
     if (credentials !== undefined) {
-        return resolveAuthTokenFromCredentials(credentials, options);
+        return resolveAuthFromCredentials(credentials, options);
     }
-    const storedToken = await tryStoredClientCredentialToken(options);
-    if (storedToken !== undefined)
-        return storedToken;
+    const storedAuth = await tryStoredClientCredentialAuth(options);
+    if (storedAuth !== undefined)
+        return storedAuth;
     if (options.debug) {
         console.error("[auth] Using JWT (no stored client credential found)");
     }
@@ -348,17 +371,33 @@ export async function resolveAuthToken(options = {}) {
         debug: options.debug,
     });
     if (jwtToken !== undefined) {
-        emitAuthResolved(options.onEvent, "jwt");
+        emitAuthResolved(options.onEvent, AuthMechanism.Jwt);
+        return {
+            token: jwtToken,
+            mechanism: AuthMechanism.Jwt,
+            clientId: null,
+        };
     }
-    return jwtToken;
+    return {
+        token: undefined,
+        mechanism: AuthMechanism.None,
+        clientId: null,
+    };
+}
+export async function resolveAuthToken(options = {}) {
+    return (await resolveAuth(options)).token;
 }
 /**
  * Resolve an auth token from resolved credentials.
  */
-async function resolveAuthTokenFromCredentials(credentials, options) {
+async function resolveAuthFromCredentials(credentials, options) {
     if (typeof credentials === "string") {
-        emitAuthResolved(options.onEvent, "token");
-        return credentials;
+        emitAuthResolved(options.onEvent, AuthMechanism.Token);
+        return {
+            token: credentials,
+            mechanism: AuthMechanism.Token,
+            clientId: null,
+        };
     }
     // Client credentials: exchange + cache through a pluggable cache
     // adapter. Resolution order:
@@ -384,12 +423,21 @@ async function resolveAuthTokenFromCredentials(credentials, options) {
             if (options.debug) {
                 console.error(`[auth] Using cached token (clientId: ${clientId})`);
             }
-            return cached;
+            return {
+                token: cached,
+                mechanism: AuthMechanism.ClientCredentials,
+                clientId: credentials.clientId,
+            };
         }
         // In-process dedup
         const pending = pendingExchanges.get(cacheKey);
-        if (pending)
-            return pending;
+        if (pending) {
+            return {
+                token: await pending,
+                mechanism: AuthMechanism.ClientCredentials,
+                clientId: credentials.clientId,
+            };
+        }
         // Serialize exchange + persist inside the lock (when the adapter
         // supports cross-process locking). The second acquirer re-reads the
         // cache under the lock and uses the first's token instead of firing
@@ -426,7 +474,11 @@ async function resolveAuthTokenFromCredentials(credentials, options) {
             pendingExchanges.delete(cacheKey);
         });
         pendingExchanges.set(cacheKey, exchangePromise);
-        return exchangePromise;
+        return {
+            token: await exchangePromise,
+            mechanism: AuthMechanism.ClientCredentials,
+            clientId: credentials.clientId,
+        };
     }
     // PKCE credentials: delegate to CLI login
     if (isPkceCredentials(credentials)) {
@@ -438,7 +490,11 @@ async function resolveAuthTokenFromCredentials(credentials, options) {
             debug: options.debug,
         });
         if (storedToken) {
-            return storedToken;
+            return {
+                token: storedToken,
+                mechanism: AuthMechanism.Pkce,
+                clientId: null,
+            };
         }
         // No stored token - user needs to run login
         throw new Error("PKCE credentials require interactive login. " +

package/dist/experimental.cjs

@@ -2809,6 +2809,14 @@ function createMemoryCache() {
 
 // src/auth.ts
 var DEFAULT_AUTH_BASE_URL = "https://zapier.com";
+var AuthMechanism = /* @__PURE__ */ ((AuthMechanism2) => {
+  AuthMechanism2["ClientCredentials"] = "client_credentials";
+  AuthMechanism2["Jwt"] = "jwt";
+  AuthMechanism2["Token"] = "token";
+  AuthMechanism2["Pkce"] = "pkce";
+  AuthMechanism2["None"] = "none";
+  return AuthMechanism2;
+})(AuthMechanism || {});
 var pendingExchanges = /* @__PURE__ */ new Map();
 var cachedDefaultCache;
 function buildCacheKey(options) {
@@ -2986,7 +2994,7 @@ async function getTokenFromCliLogin(options) {
   if (!cliLogin) return void 0;
   return await cliLogin.getToken(options);
 }
-async function tryStoredClientCredentialToken(options) {
+async function tryStoredClientCredentialAuth(options) {
   const activeCredential = await getActiveCredentialsFromCli(options.baseUrl);
   if (!activeCredential) return void 0;
   const resolvedBaseUrl = activeCredential.baseUrl || options.baseUrl || DEFAULT_AUTH_BASE_URL;
@@ -3001,15 +3009,25 @@ async function tryStoredClientCredentialToken(options) {
   });
   const cache = await resolveCache(options);
   const pending = pendingExchanges.get(cacheKey);
-  if (pending) return pending;
+  if (pending) {
+    return {
+      token: await pending,
+      mechanism: "client_credentials" /* ClientCredentials */,
+      clientId: activeCredential.clientId
+    };
+  }
   const cached = await readCachedToken(cacheKey, cache);
   if (cached !== void 0) {
     if (options.debug)
       console.error(
         `[auth] Using cached token (clientId: ${activeCredential.clientId})`
       );
-    emitAuthResolved(options.onEvent, "client_credentials");
-    return cached;
+    emitAuthResolved(options.onEvent, "client_credentials" /* ClientCredentials */);
+    return {
+      token: cached,
+      mechanism: "client_credentials" /* ClientCredentials */,
+      clientId: activeCredential.clientId
+    };
   }
   const storedCredential = await getStoredClientCredentialsFromCli(resolvedBaseUrl);
   if (!storedCredential) {
@@ -3027,24 +3045,25 @@ async function tryStoredClientCredentialToken(options) {
     console.error(
       `[auth] Using stored client credential (clientId: ${storedCredential.clientId})`
     );
-  const token = await resolveAuthTokenFromCredentials(
-    storedCredential,
-    options
-  );
-  emitAuthResolved(options.onEvent, "client_credentials");
-  return token;
+  const auth = await resolveAuthFromCredentials(storedCredential, options);
+  emitAuthResolved(options.onEvent, "client_credentials" /* ClientCredentials */);
+  return {
+    token: auth.token,
+    mechanism: "client_credentials" /* ClientCredentials */,
+    clientId: activeCredential.clientId
+  };
 }
-async function resolveAuthToken(options = {}) {
+async function resolveAuth(options = {}) {
   const credentials = await resolveCredentials({
     credentials: options.credentials,
     token: options.token,
     baseUrl: options.baseUrl
   });
   if (credentials !== void 0) {
-    return resolveAuthTokenFromCredentials(credentials, options);
+    return resolveAuthFromCredentials(credentials, options);
   }
-  const storedToken = await tryStoredClientCredentialToken(options);
-  if (storedToken !== void 0) return storedToken;
+  const storedAuth = await tryStoredClientCredentialAuth(options);
+  if (storedAuth !== void 0) return storedAuth;
   if (options.debug) {
     console.error("[auth] Using JWT (no stored client credential found)");
   }
@@ -3054,14 +3073,30 @@ async function resolveAuthToken(options = {}) {
     debug: options.debug
   });
   if (jwtToken !== void 0) {
-    emitAuthResolved(options.onEvent, "jwt");
+    emitAuthResolved(options.onEvent, "jwt" /* Jwt */);
+    return {
+      token: jwtToken,
+      mechanism: "jwt" /* Jwt */,
+      clientId: null
+    };
   }
-  return jwtToken;
+  return {
+    token: void 0,
+    mechanism: "none" /* None */,
+    clientId: null
+  };
+}
+async function resolveAuthToken(options = {}) {
+  return (await resolveAuth(options)).token;
 }
-async function resolveAuthTokenFromCredentials(credentials, options) {
+async function resolveAuthFromCredentials(credentials, options) {
   if (typeof credentials === "string") {
-    emitAuthResolved(options.onEvent, "token");
-    return credentials;
+    emitAuthResolved(options.onEvent, "token" /* Token */);
+    return {
+      token: credentials,
+      mechanism: "token" /* Token */,
+      clientId: null
+    };
   }
   if (isClientCredentials(credentials)) {
     const { clientId } = credentials;
@@ -3078,10 +3113,20 @@ async function resolveAuthTokenFromCredentials(credentials, options) {
       if (options.debug) {
         console.error(`[auth] Using cached token (clientId: ${clientId})`);
       }
-      return cached;
+      return {
+        token: cached,
+        mechanism: "client_credentials" /* ClientCredentials */,
+        clientId: credentials.clientId
+      };
     }
     const pending = pendingExchanges.get(cacheKey);
-    if (pending) return pending;
+    if (pending) {
+      return {
+        token: await pending,
+        mechanism: "client_credentials" /* ClientCredentials */,
+        clientId: credentials.clientId
+      };
+    }
     const runLocked = async () => {
       const recheck = await readCachedToken(cacheKey, cache);
       if (recheck !== void 0) {
@@ -3114,7 +3159,11 @@ async function resolveAuthTokenFromCredentials(credentials, options) {
       pendingExchanges.delete(cacheKey);
     });
     pendingExchanges.set(cacheKey, exchangePromise);
-    return exchangePromise;
+    return {
+      token: await exchangePromise,
+      mechanism: "client_credentials" /* ClientCredentials */,
+      clientId: credentials.clientId
+    };
   }
   if (isPkceCredentials(credentials)) {
     const storedToken = await getTokenFromCliLogin({
@@ -3124,7 +3173,11 @@ async function resolveAuthTokenFromCredentials(credentials, options) {
       debug: options.debug
     });
     if (storedToken) {
-      return storedToken;
+      return {
+        token: storedToken,
+        mechanism: "pkce" /* Pkce */,
+        clientId: null
+      };
     }
     throw new Error(
       "PKCE credentials require interactive login. Please run the 'login' command with the CLI first, or use client_credentials flow."
@@ -3167,6 +3220,38 @@ function getCallerContext() {
   }
 }
 
+// src/utils/agent.ts
+var isTruthy = (value) => {
+  const lower = value.toLowerCase();
+  return lower === "1" || lower === "true";
+};
+var isNonEmpty = (value) => value !== "";
+var agentDetectors = [
+  { name: "claude-code", key: "CLAUDECODE", predicate: isTruthy },
+  { name: "github-copilot", key: "COPILOT_AGENT", predicate: isTruthy },
+  { name: "cursor", key: "CURSOR_AGENT", predicate: isTruthy },
+  { name: "codex", key: "CODEX_SANDBOX", predicate: isNonEmpty },
+  { name: "gemini-cli", key: "GEMINI_CLI", predicate: isTruthy },
+  { name: "augment", key: "AUGMENT_AGENT", predicate: isTruthy },
+  { name: "cline", key: "CLINE_ACTIVE", predicate: isTruthy },
+  { name: "opencode", key: "OPENCODE_CLIENT", predicate: isNonEmpty }
+];
+function getAgent() {
+  try {
+    const env = globalThis.process?.env;
+    if (!env) return null;
+    for (const detector of agentDetectors) {
+      const value = env[detector.key];
+      if (value !== void 0 && detector.predicate(value)) {
+        return detector.name;
+      }
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+
 // src/api/sse-parser.ts
 async function* jsonFrames(source) {
   for await (const { data } of source) {
@@ -3318,7 +3403,7 @@ function parseApprovalReviewStreamPayload(parsed, toolNames) {
 }
 
 // src/sdk-version.ts
-var SDK_VERSION = (typeof process !== "undefined" && process.env ? "0.76.0" : void 0) || "unknown";
+var SDK_VERSION = (typeof process !== "undefined" && process.env ? "0.76.2" : void 0) || "unknown";
 
 // src/utils/open-url.ts
 var nodePrefix = "node:";
@@ -4036,6 +4121,10 @@ var ZapierApiClient = class {
       headers.set("zapier-service", sdkService);
       headers.set("x-zapier-service", sdkService);
     }
+    const agent = getAgent();
+    if (agent) {
+      headers.set("zapier-sdk-agent", agent);
+    }
     const callerPackage = this.options.callerPackage;
     if (callerPackage) {
       headers.set("zapier-sdk-package", callerPackage.name);
@@ -9549,36 +9638,6 @@ function getTtyContext() {
     return { stdin_is_tty: null, stdout_is_tty: null };
   }
 }
-var isTruthy = (value) => {
-  const lower = value.toLowerCase();
-  return lower === "1" || lower === "true";
-};
-var isNonEmpty = (value) => value !== "";
-var agentDetectors = [
-  { name: "claude-code", key: "CLAUDECODE", predicate: isTruthy },
-  { name: "github-copilot", key: "COPILOT_AGENT", predicate: isTruthy },
-  { name: "cursor", key: "CURSOR_AGENT", predicate: isTruthy },
-  { name: "codex", key: "CODEX_SANDBOX", predicate: isNonEmpty },
-  { name: "gemini-cli", key: "GEMINI_CLI", predicate: isTruthy },
-  { name: "augment", key: "AUGMENT_AGENT", predicate: isTruthy },
-  { name: "cline", key: "CLINE_ACTIVE", predicate: isTruthy },
-  { name: "opencode", key: "OPENCODE_CLIENT", predicate: isNonEmpty }
-];
-function getAgent() {
-  try {
-    const env = globalThis.process?.env;
-    if (!env) return null;
-    for (const detector of agentDetectors) {
-      const value = env[detector.key];
-      if (value !== void 0 && detector.predicate(value)) {
-        return detector.name;
-      }
-    }
-    return null;
-  } catch {
-    return null;
-  }
-}
 
 // src/plugins/eventEmission/builders.ts
 function createBaseEvent(context = {}) {
@@ -9588,6 +9647,8 @@ function createBaseEvent(context = {}) {
     release_id: getReleaseId(),
     customuser_id: context.customuser_id,
     account_id: context.account_id,
+    client_id: context.client_id ?? null,
+    auth_mechanism: context.auth_mechanism ?? null,
     identity_id: context.identity_id,
     visitor_id: context.visitor_id,
     correlation_id: context.correlation_id
@@ -9741,6 +9802,20 @@ function cleanupEventListeners() {
 var APPLICATION_LIFECYCLE_EVENT_SUBJECT = "platform.sdk.ApplicationLifecycleEvent";
 var ERROR_OCCURRED_EVENT_SUBJECT = "platform.sdk.ErrorOccurredEvent";
 var METHOD_CALLED_EVENT_SUBJECT = "platform.sdk.MethodCalledEvent";
+var NULL_EVENT_CONTEXT = Object.freeze({
+  customuser_id: null,
+  account_id: null,
+  client_id: null,
+  auth_mechanism: null
+});
+function buildEventAuthContext(auth) {
+  const userIds = auth.token ? extractUserIdsFromJwt(auth.token) : { customuser_id: null, account_id: null };
+  return {
+    ...userIds,
+    client_id: auth.clientId,
+    auth_mechanism: auth.mechanism
+  };
+}
 async function emitWithTimeout(transport, subject, event) {
   try {
     await Promise.race([
@@ -9816,16 +9891,11 @@ var eventEmissionPlugin = definePlugin(
     const getUserContext = (async () => {
       if (config.enabled) {
         try {
-          const token = await resolveAuthToken({
-            ...options
-          });
-          if (token) {
-            return extractUserIdsFromJwt(token);
-          }
+          return buildEventAuthContext(await resolveAuth({ ...options }));
         } catch {
         }
       }
-      return { customuser_id: null, account_id: null };
+      return NULL_EVENT_CONTEXT;
     })();
     const startupTime = Date.now();
     let shutdownStartTime = null;
@@ -9858,6 +9928,8 @@ var eventEmissionPlugin = definePlugin(
               release_id: getReleaseId(),
               customuser_id: null,
               account_id: null,
+              client_id: null,
+              auth_mechanism: null,
               identity_id: null,
               visitor_id: null,
               correlation_id: null
@@ -9886,6 +9958,8 @@ var eventEmissionPlugin = definePlugin(
         release_id: getReleaseId(),
         customuser_id: null,
         account_id: null,
+        client_id: null,
+        auth_mechanism: null,
         identity_id: null,
         visitor_id: null,
         correlation_id: null
@@ -13259,6 +13333,7 @@ exports.ActionTypePropertySchema = ActionTypePropertySchema;
 exports.AppKeyPropertySchema = AppKeyPropertySchema;
 exports.AppPropertySchema = AppPropertySchema;
 exports.AppsPropertySchema = AppsPropertySchema;
+exports.AuthMechanism = AuthMechanism;
 exports.AuthenticationIdPropertySchema = AuthenticationIdPropertySchema;
 exports.BaseSdkOptionsSchema = BaseSdkOptionsSchema;
 exports.CONTEXT_CACHE_MAX_SIZE = CONTEXT_CACHE_MAX_SIZE;
@@ -13437,6 +13512,7 @@ exports.readManifestFromFile = readManifestFromFile;
 exports.registryPlugin = registryPlugin;
 exports.requestPlugin = requestPlugin;
 exports.resetDeprecationWarnings = resetDeprecationWarnings2;
+exports.resolveAuth = resolveAuth;
 exports.resolveAuthToken = resolveAuthToken;
 exports.resolveCredentials = resolveCredentials;
 exports.resolveCredentialsFromEnv = resolveCredentialsFromEnv;