@zapier/zapier-sdk 0.76.2 → 0.77.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @zapier/zapier-sdk
 
+## 0.77.0
+
+### Minor Changes
+
+- 19303e0: `triggerWorkflow` (and `trigger-workflow`) now authenticates with Zapier credentials and runs the workflow as the authenticated account; triggering is limited to workflows that account can access. It now returns the trigger's `id`, `workflow_id`, and `created_at` on `data` (previously `{ workflow, status, body }`). The call is unchanged: pass the workflow id and optional `input`.
+
 ## 0.76.2
 
 ### Patch Changes

package/README.md

@@ -1744,7 +1744,7 @@ const result = await zapier.runDurable({
 
 #### `triggerWorkflow` 🧪 _experimental_
 
-Look up a workflow's trigger URL and fire it manually. The trigger endpoint is tokenized (the URL contains a secret) and takes no auth header, so the SDK uses a raw fetch rather than the api plugin.
+Look up a workflow's trigger URL and fire it manually, as the authenticated account.
 
 **Parameters:**
 
@@ -1756,12 +1756,12 @@ Look up a workflow's trigger URL and fire it manually. The trigger endpoint is t
 
 **Returns:** `Promise<WorkflowRunItem>`
 
-| Name           | Type      | Required | Possible Values | Description                                                                                                                         |
-| -------------- | --------- | -------- | --------------- | ----------------------------------------------------------------------------------------------------------------------------------- |
-| `data`         | `object`  | ✅       | —               |                                                                                                                                     |
-| ​ ↳ `workflow` | `string`  | ✅       | —               | The workflow ID that was triggered                                                                                                  |
-| ​ ↳ `status`   | `number`  | ✅       | —               | HTTP status returned by the trigger endpoint                                                                                        |
-| ​ ↳ `body`     | `unknown` | ✅       | —               | Response body from the trigger endpoint. Parsed as JSON when the response body parses, otherwise returned as the raw response text. |
+| Name              | Type     | Required | Possible Values | Description                              |
+| ----------------- | -------- | -------- | --------------- | ---------------------------------------- |
+| `data`            | `object` | ✅       | —               |                                          |
+| ​ ↳ `id`          | `string` | ✅       | —               | Trigger ID (UUID)                        |
+| ​ ↳ `workflow_id` | `string` | ✅       | —               | The workflow that was triggered (UUID)   |
+| ​ ↳ `created_at`  | `string` | ✅       | —               | When the trigger was received (ISO-8601) |
 
 **Example:**
 

package/dist/experimental.cjs

@@ -3403,7 +3403,7 @@ function parseApprovalReviewStreamPayload(parsed, toolNames) {
 }
 
 // src/sdk-version.ts
-var SDK_VERSION = (typeof process !== "undefined" && process.env ? "0.76.2" : void 0) || "unknown";
+var SDK_VERSION = (typeof process !== "undefined" && process.env ? "0.77.0" : void 0) || "unknown";
 
 // src/utils/open-url.ts
 var nodePrefix = "node:";
@@ -13099,14 +13099,12 @@ var TriggerWorkflowOptionsSchema = zod.z.object({
     "JSON payload delivered as the trigger body. Sent as `application/json`; omit to fire with an empty body."
   )
 }).describe(
-  "Look up a workflow's trigger URL and fire it manually. The trigger endpoint is tokenized (the URL contains a secret) and takes no auth header, so the SDK uses a raw fetch rather than the api plugin."
+  "Look up a workflow's trigger URL and fire it manually, as the authenticated account."
 );
 var TriggerWorkflowResponseSchema = zod.z.object({
-  workflow: zod.z.string().describe("The workflow ID that was triggered"),
-  status: zod.z.number().int().describe("HTTP status returned by the trigger endpoint"),
-  body: zod.z.unknown().describe(
-    "Response body from the trigger endpoint. Parsed as JSON when the response body parses, otherwise returned as the raw response text."
-  )
+  id: zod.z.string().describe("Trigger ID (UUID)"),
+  workflow_id: zod.z.string().describe("The workflow that was triggered (UUID)"),
+  created_at: zod.z.string().describe("When the trigger was received (ISO-8601)")
 });
 
 // src/plugins/codeSubstrate/triggerWorkflow/index.ts
@@ -13128,32 +13126,23 @@ var triggerWorkflowPlugin = definePlugin(
         }
       );
       const workflow = TriggerWorkflowLookupResponseSchema.parse(rawWorkflow);
-      const fetch2 = sdk2.context.options.fetch ?? globalThis.fetch;
-      const response = await fetch2(workflow.trigger_url, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: options.input === void 0 ? void 0 : JSON.stringify(options.input)
-      });
-      const text = await response.text().catch(() => "");
-      let body = text;
-      if (text) {
-        try {
-          body = JSON.parse(text);
-        } catch {
-          body = text;
-        }
-      }
-      if (!response.ok) {
+      const segments = new URL(workflow.trigger_url).pathname.split("/");
+      const triggerToken = segments[segments.length - 1];
+      if (!triggerToken) {
         throw new ZapierApiError(
-          `Trigger failed: ${response.status} ${response.statusText}: ${text || "(empty body)"}`,
-          { statusCode: response.status, response: body }
+          `Workflow ${options.workflow} returned a malformed trigger_url`,
+          { statusCode: 0, response: workflow.trigger_url }
         );
       }
-      const data = {
-        workflow: options.workflow,
-        status: response.status,
-        body
-      };
+      const raw = await sdk2.context.api.post(
+        `/durableworkflowzaps/api/v0/workflows/trigger/${encodeURIComponent(triggerToken)}`,
+        options.input,
+        {
+          authRequired: true,
+          resource: { type: "workflow", id: options.workflow }
+        }
+      );
+      const data = TriggerWorkflowResponseSchema.parse(raw);
       return { data };
     }
   })

package/dist/experimental.d.mts

@@ -3162,9 +3162,9 @@ declare function createZapierSdkStack(options?: ZapierSdkOptions): PluginStack<o
         input?: unknown;
     } | undefined) => Promise<{
         data: {
-            workflow: string;
-            status: number;
-            body: unknown;
+            id: string;
+            workflow_id: string;
+            created_at: string;
         };
     }>;
 } & {
@@ -6365,9 +6365,9 @@ declare function createZapierSdk(options?: ZapierSdkOptions): WithAddPlugin<obje
         input?: unknown;
     } | undefined) => Promise<{
         data: {
-            workflow: string;
-            status: number;
-            body: unknown;
+            id: string;
+            workflow_id: string;
+            created_at: string;
         };
     }>;
 } & {

package/dist/experimental.d.ts

@@ -3177,9 +3177,9 @@ export declare function createZapierSdkStack(options?: ZapierSdkOptions): import
         input?: unknown;
     } | undefined) => Promise<{
         data: {
-            workflow: string;
-            status: number;
-            body: unknown;
+            id: string;
+            workflow_id: string;
+            created_at: string;
         };
     }>;
 } & {
@@ -6380,9 +6380,9 @@ export declare function createZapierSdk(options?: ZapierSdkOptions): import("kit
         input?: unknown;
     } | undefined) => Promise<{
         data: {
-            workflow: string;
-            status: number;
-            body: unknown;
+            id: string;
+            workflow_id: string;
+            created_at: string;
         };
     }>;
 } & {

package/dist/experimental.mjs

@@ -3401,7 +3401,7 @@ function parseApprovalReviewStreamPayload(parsed, toolNames) {
 }
 
 // src/sdk-version.ts
-var SDK_VERSION = (typeof process !== "undefined" && process.env ? "0.76.2" : void 0) || "unknown";
+var SDK_VERSION = (typeof process !== "undefined" && process.env ? "0.77.0" : void 0) || "unknown";
 
 // src/utils/open-url.ts
 var nodePrefix = "node:";
@@ -13097,14 +13097,12 @@ var TriggerWorkflowOptionsSchema = z.object({
     "JSON payload delivered as the trigger body. Sent as `application/json`; omit to fire with an empty body."
   )
 }).describe(
-  "Look up a workflow's trigger URL and fire it manually. The trigger endpoint is tokenized (the URL contains a secret) and takes no auth header, so the SDK uses a raw fetch rather than the api plugin."
+  "Look up a workflow's trigger URL and fire it manually, as the authenticated account."
 );
 var TriggerWorkflowResponseSchema = z.object({
-  workflow: z.string().describe("The workflow ID that was triggered"),
-  status: z.number().int().describe("HTTP status returned by the trigger endpoint"),
-  body: z.unknown().describe(
-    "Response body from the trigger endpoint. Parsed as JSON when the response body parses, otherwise returned as the raw response text."
-  )
+  id: z.string().describe("Trigger ID (UUID)"),
+  workflow_id: z.string().describe("The workflow that was triggered (UUID)"),
+  created_at: z.string().describe("When the trigger was received (ISO-8601)")
 });
 
 // src/plugins/codeSubstrate/triggerWorkflow/index.ts
@@ -13126,32 +13124,23 @@ var triggerWorkflowPlugin = definePlugin(
         }
       );
       const workflow = TriggerWorkflowLookupResponseSchema.parse(rawWorkflow);
-      const fetch2 = sdk2.context.options.fetch ?? globalThis.fetch;
-      const response = await fetch2(workflow.trigger_url, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: options.input === void 0 ? void 0 : JSON.stringify(options.input)
-      });
-      const text = await response.text().catch(() => "");
-      let body = text;
-      if (text) {
-        try {
-          body = JSON.parse(text);
-        } catch {
-          body = text;
-        }
-      }
-      if (!response.ok) {
+      const segments = new URL(workflow.trigger_url).pathname.split("/");
+      const triggerToken = segments[segments.length - 1];
+      if (!triggerToken) {
         throw new ZapierApiError(
-          `Trigger failed: ${response.status} ${response.statusText}: ${text || "(empty body)"}`,
-          { statusCode: response.status, response: body }
+          `Workflow ${options.workflow} returned a malformed trigger_url`,
+          { statusCode: 0, response: workflow.trigger_url }
         );
       }
-      const data = {
-        workflow: options.workflow,
-        status: response.status,
-        body
-      };
+      const raw = await sdk2.context.api.post(
+        `/durableworkflowzaps/api/v0/workflows/trigger/${encodeURIComponent(triggerToken)}`,
+        options.input,
+        {
+          authRequired: true,
+          resource: { type: "workflow", id: options.workflow }
+        }
+      );
+      const data = TriggerWorkflowResponseSchema.parse(raw);
       return { data };
     }
   })

package/dist/index.cjs

@@ -6996,7 +6996,7 @@ function parseApprovalReviewStreamPayload(parsed, toolNames) {
 }
 
 // src/sdk-version.ts
-var SDK_VERSION = (typeof process !== "undefined" && process.env ? "0.76.2" : void 0) || "unknown";
+var SDK_VERSION = (typeof process !== "undefined" && process.env ? "0.77.0" : void 0) || "unknown";
 
 // src/utils/open-url.ts
 var nodePrefix = "node:";

package/dist/index.mjs

@@ -6994,7 +6994,7 @@ function parseApprovalReviewStreamPayload(parsed, toolNames) {
 }
 
 // src/sdk-version.ts
-var SDK_VERSION = (typeof process !== "undefined" && process.env ? "0.76.2" : void 0) || "unknown";
+var SDK_VERSION = (typeof process !== "undefined" && process.env ? "0.77.0" : void 0) || "unknown";
 
 // src/utils/open-url.ts
 var nodePrefix = "node:";

package/dist/plugins/codeSubstrate/triggerWorkflow/index.d.ts

@@ -52,12 +52,6 @@ export declare const triggerWorkflowPlugin: (sdk: {
             listWorkflows: import("kitcore").PluginMeta<unknown>;
         };
     };
-} & {
-    context: {
-        options: {
-            fetch?: typeof globalThis.fetch;
-        };
-    };
 } & {
     context: {
         meta: Record<string, import("kitcore").PluginMeta>;
@@ -68,9 +62,9 @@ export declare const triggerWorkflowPlugin: (sdk: {
         input?: unknown;
     } | undefined) => Promise<{
         data: {
-            workflow: string;
-            status: number;
-            body: unknown;
+            id: string;
+            workflow_id: string;
+            created_at: string;
         };
     }>;
 } & {

package/dist/plugins/codeSubstrate/triggerWorkflow/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/plugins/codeSubstrate/triggerWorkflow/index.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAKjB;QAAE,OAAO,EAAE;YAAE,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAA;SAAE,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;CA4DhE,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,UAAU,CACpD,OAAO,qBAAqB,CAC7B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/plugins/codeSubstrate/triggerWorkflow/index.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoDjC,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,UAAU,CACpD,OAAO,qBAAqB,CAC7B,CAAC"}

package/dist/plugins/codeSubstrate/triggerWorkflow/index.js

@@ -12,41 +12,29 @@ export const triggerWorkflowPlugin = definePlugin((sdk) => createPluginMethod(sd
     outputSchema: TriggerWorkflowResponseSchema,
     resolvers: { workflow: workflowIdResolver },
     handler: async ({ sdk, options }) => {
-        // Two-step: get the workflow's trigger_url via sdk.context.api
-        // (authenticated), then POST the payload to that URL with no
-        // auth header — the URL itself embeds a secret token. Custom
-        // fetch (e.g. tests) flows through sdk.context.options.fetch.
+        // Two-step: get the workflow's trigger_url, then fire it. Both go
+        // through the authenticated api client.
         const rawWorkflow = await sdk.context.api.get(`/durableworkflowzaps/api/v0/workflows/${encodeURIComponent(options.workflow)}`, {
             authRequired: true,
             resource: { type: "workflow", id: options.workflow },
         });
         const workflow = TriggerWorkflowLookupResponseSchema.parse(rawWorkflow);
-        const fetch = sdk.context.options.fetch ?? globalThis.fetch;
-        const response = await fetch(workflow.trigger_url, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: options.input === undefined
-                ? undefined
-                : JSON.stringify(options.input),
-        });
-        const text = await response.text().catch(() => "");
-        let body = text;
-        if (text) {
-            try {
-                body = JSON.parse(text);
-            }
-            catch {
-                body = text;
-            }
-        }
-        if (!response.ok) {
-            throw new ZapierApiError(`Trigger failed: ${response.status} ${response.statusText}: ${text || "(empty body)"}`, { statusCode: response.status, response: body });
+        // trigger_url is an absolute URL. Take only the token (its last path
+        // segment) and rebuild the gateway path so the call routes through the
+        // authenticated proxy, the same as every other call here.
+        const segments = new URL(workflow.trigger_url).pathname.split("/");
+        const triggerToken = segments[segments.length - 1];
+        if (!triggerToken) {
+            throw new ZapierApiError(`Workflow ${options.workflow} returned a malformed trigger_url`, { statusCode: 0, response: workflow.trigger_url });
         }
-        const data = {
-            workflow: options.workflow,
-            status: response.status,
-            body,
-        };
+        // Fire the trigger through the authenticated api client and return its
+        // response directly, the same as every other code-substrate method.
+        // api.post throws the SDK's typed errors on non-2xx.
+        const raw = await sdk.context.api.post(`/durableworkflowzaps/api/v0/workflows/trigger/${encodeURIComponent(triggerToken)}`, options.input, {
+            authRequired: true,
+            resource: { type: "workflow", id: options.workflow },
+        });
+        const data = TriggerWorkflowResponseSchema.parse(raw);
         return { data };
     },
 }));

package/dist/plugins/codeSubstrate/triggerWorkflow/schemas.d.ts

@@ -8,9 +8,9 @@ export declare const TriggerWorkflowOptionsSchema: z.ZodObject<{
 }, z.core.$strip>;
 export type TriggerWorkflowOptions = z.infer<typeof TriggerWorkflowOptionsSchema>;
 export declare const TriggerWorkflowResponseSchema: z.ZodObject<{
-    workflow: z.ZodString;
-    status: z.ZodNumber;
-    body: z.ZodUnknown;
+    id: z.ZodString;
+    workflow_id: z.ZodString;
+    created_at: z.ZodString;
 }, z.core.$strip>;
 export type TriggerWorkflowResponse = z.infer<typeof TriggerWorkflowResponseSchema>;
 //# sourceMappingURL=schemas.d.ts.map

package/dist/plugins/codeSubstrate/triggerWorkflow/schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../../src/plugins/codeSubstrate/triggerWorkflow/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,eAAO,MAAM,mCAAmC;;iBAIhC,CAAC;AAEjB,eAAO,MAAM,4BAA4B;;;iBAYtC,CAAC;AAEJ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAC1C,OAAO,4BAA4B,CACpC,CAAC;AAEF,eAAO,MAAM,6BAA6B;;;;iBAWxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC"}
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../../src/plugins/codeSubstrate/triggerWorkflow/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,eAAO,MAAM,mCAAmC;;iBAIhC,CAAC;AAEjB,eAAO,MAAM,4BAA4B;;;iBAYtC,CAAC;AAEJ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAC1C,OAAO,4BAA4B,CACpC,CAAC;AAEF,eAAO,MAAM,6BAA6B;;;;iBAIxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC"}

package/dist/plugins/codeSubstrate/triggerWorkflow/schemas.js

@@ -18,14 +18,9 @@ export const TriggerWorkflowOptionsSchema = z
         .optional()
         .describe("JSON payload delivered as the trigger body. Sent as `application/json`; omit to fire with an empty body."),
 })
-    .describe("Look up a workflow's trigger URL and fire it manually. The trigger endpoint is tokenized (the URL contains a secret) and takes no auth header, so the SDK uses a raw fetch rather than the api plugin.");
+    .describe("Look up a workflow's trigger URL and fire it manually, as the authenticated account.");
 export const TriggerWorkflowResponseSchema = z.object({
-    workflow: z.string().describe("The workflow ID that was triggered"),
-    status: z
-        .number()
-        .int()
-        .describe("HTTP status returned by the trigger endpoint"),
-    body: z
-        .unknown()
-        .describe("Response body from the trigger endpoint. Parsed as JSON when the response body parses, otherwise returned as the raw response text."),
+    id: z.string().describe("Trigger ID (UUID)"),
+    workflow_id: z.string().describe("The workflow that was triggered (UUID)"),
+    created_at: z.string().describe("When the trigger was received (ISO-8601)"),
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zapier/zapier-sdk",
-  "version": "0.76.2",
+  "version": "0.77.0",
   "description": "Complete Zapier SDK - combines all Zapier SDK packages",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",