OAuth API key creation now sends a User-Agent header and reports outright refusals separately from other failures
When Claude Code mints an API key through OAuth (the login flow used to authorize the app), the request now includes a User-Agent header identifying the client. It also now tells apart two kinds of failure: a 4xx response that isn't already recognized as "you need to verify your account" now triggers a new oauth_api_key_refused telemetry event and a distinct error, instead of being lumped into the generic oauth_api_key_request_failed case.
This makes it possible to tell, from telemetry, when the server actively refused to issue an API key rather than the request simply failing for some other reason, which should help diagnose account-setup problems.