Greptile Summary

Adds a default User-Agent header (WorkOS PHP/<version>) to every outbound request and an optional ?string $userAgent constructor parameter on WorkOS/HttpClient so framework wrappers like workos-php-laravel can supply their own identifier. The header is always applied last in buildRequestOptions, intentionally preventing per-request extraHeaders from overriding it — which is consistent with the code comment and the new test, but contradicts the "Header precedence" table in the PR description.

Confidence Score: 4/5

Safe to merge after addressing the previously-flagged empty-string userAgent passthrough — the new code is otherwise clean and well-tested.

All new findings in this pass are P2. However, the P1 empty-string edge case raised in a prior review thread (passing userAgent: '' sends a blank User-Agent instead of falling back to the SDK default, because ?? only coalesces null) remains unaddressed in this revision, keeping the score at 4/5.

lib/HttpClient.php — the $this->userAgent ?? coalescing at line 195 should also guard against empty string to match the intent of the default fallback.

Important Files Changed

Sequence Diagram

sequenceDiagram
    participant Caller
    participant WorkOS
    participant HttpClient
    participant Guzzle

    Caller->>WorkOS: new WorkOS(userAgent: "WorkOS PHP Laravel/5.1.0")
    WorkOS->>HttpClient: new HttpClient(..., userAgent: "WorkOS PHP Laravel/5.1.0")

    Caller->>WorkOS: getOrganization('org_123', RequestOptions?)
    WorkOS->>HttpClient: request(...)
    HttpClient->>HttpClient: buildRequestOptions()
    Note over HttpClient: 1. Set Content-Type, Authorization
    Note over HttpClient: 2. Merge extraHeaders (may include User-Agent)
    Note over HttpClient: 3. Overwrite User-Agent last<br/>→ $userAgent ?? "WorkOS PHP/5.0.0"
    HttpClient->>Guzzle: request(headers: {User-Agent: "WorkOS PHP Laravel/5.1.0", ...})
    Guzzle-->>HttpClient: Response
    HttpClient-->>WorkOS: decoded array
    WorkOS-->>Caller: result

_{Reviews (2): Last reviewed commit: "fix: preserve UA string versioning" | Re-trigger Greptile}