@atlasauth/backend 0.34.0 → 0.36.0

package/dist/webhook-events.generated.d.ts

@@ -0,0 +1,1234 @@
+/** An agent access request, decision, or revocation. */
+export type WebhookDataAgentAccess = {
+    object?: "agent_access_request" | "agent_access_revocation";
+    id?: string;
+    agent_id: string;
+    kind?: string;
+    resource?: string;
+    scopes?: string[];
+    reason?: string | null;
+    status?: string;
+    auto_approved?: boolean;
+    decided_by?: string | null;
+    /** Decided (epoch ms), or null. */
+    decided_at?: number | null;
+    /** Expires (epoch ms), or null. */
+    expires_at?: number | null;
+    /** Created (epoch ms). */
+    created_at?: number;
+    revoked?: number;
+    agent_disabled?: boolean;
+    agent?: Record<string, unknown> | null;
+    [key: string]: unknown;
+};
+/** An agent governance signal: an anomaly, an approaching expiry, or a sponsor change. */
+export type WebhookDataAgentGovernance = {
+    object?: "agent_anomaly" | "agent_expiry" | "agent_sponsors";
+    agent_id: string;
+    kind?: string;
+    detail?: Record<string, unknown> | null;
+    /** Expires (epoch ms), or null. */
+    expires_at?: number | null;
+    sponsor_user_id?: string | null;
+    backup_sponsor_user_id?: string | null;
+    [key: string]: unknown;
+};
+/** A guest account was linked to a real one. */
+export type WebhookDataAnonymousLink = {
+    object: "anonymous_link";
+    /** The guest, before the link. */
+    anonymous_user: {
+        object: "user";
+        id: string;
+        [key: string]: unknown;
+    };
+    /** The user the guest became. */
+    user: {
+        object: "user";
+        id: string;
+        [key: string]: unknown;
+    };
+    method?: string | null;
+    /** Linked (epoch ms). */
+    linked_at: number;
+    [key: string]: unknown;
+};
+/** An end-user API key's non-secret configuration. */
+export type WebhookDataApiKey = {
+    object: "api_key";
+    id: string;
+    prefix: string;
+    subject_type: string;
+    subject_id: string;
+    enabled: boolean;
+    remaining?: number | null;
+    name?: string | null;
+    claims: Record<string, unknown>;
+    scopes?: string[] | null;
+    constraints?: Record<string, unknown>;
+    limits?: Array<Record<string, unknown>> | null;
+    max_token_lifetime_seconds?: number | null;
+    /** Expires (epoch ms), or null. */
+    expires_at?: number | null;
+    /** Revoked (epoch ms), or null. */
+    revoked_at?: number | null;
+    /** Created (epoch ms), or null. */
+    created_at?: number | null;
+    /** Updated (epoch ms), or null. */
+    updated_at?: number | null;
+    /** api_key.limit_reached: the limit that was reached. */
+    limit?: Record<string, unknown>;
+    [key: string]: unknown;
+};
+/** An end-user API key is close to expiry. */
+export type WebhookDataApiKeyExpiring = {
+    object: "api_key";
+    id: string;
+    prefix: string;
+    name?: string | null;
+    subject_type: "user" | "organization" | "machine";
+    subject_id: string;
+    /** Expires (epoch ms). */
+    expires_at: number;
+    days_left?: number;
+    threshold_days?: number;
+    [key: string]: unknown;
+};
+/** An app role. */
+export type WebhookDataAppRole = {
+    object: "app_role";
+    id: string;
+    key: string;
+    name: string;
+    description?: string | null;
+    permissions: string[];
+    users_count?: number;
+    /** Created (epoch ms). */
+    created_at: number;
+    /** Updated (epoch ms). */
+    updated_at: number;
+    [key: string]: unknown;
+};
+/** A coupon redemption. */
+export type WebhookDataBillingCouponRedeemed = {
+    object: "billing_coupon_redemption";
+    coupon_id: string;
+    code: string;
+    subject_type: string;
+    subject_id: string;
+    plan_id: string;
+    redeemed_count?: number;
+    [key: string]: unknown;
+};
+/** An account-credit ledger row. */
+export type WebhookDataBillingCredit = {
+    object: "billing_credit";
+    id: string;
+    subject_type: string;
+    subject_id: string;
+    amount: number;
+    currency: string;
+    reason?: string | null;
+    kind?: string;
+    applied?: boolean;
+    balance?: Record<string, number>;
+    [key: string]: unknown;
+};
+/** A dunning reminder due. */
+export type WebhookDataBillingDunningNotice = {
+    object: "billing_subscription";
+    id: string;
+    subject_type: string;
+    subject_id: string;
+    provider?: string;
+    provider_subscription_id?: string | null;
+    provider_customer_id?: string | null;
+    plan?: string | null;
+    plan_id?: string | null;
+    status?: string;
+    interval?: string | null;
+    quantity?: number | null;
+    cancel_at_period_end?: boolean;
+    /** Current period end (epoch ms), or null. */
+    current_period_end?: number | null;
+    scheduled_plan_id?: string | null;
+    scheduled_interval?: string | null;
+    /** Scheduled change (epoch ms), or null. */
+    scheduled_change_at?: number | null;
+    /** Trial end (epoch ms), or null. */
+    trial_end?: number | null;
+    /** Canceled (epoch ms), or null. */
+    canceled_at?: number | null;
+    reason?: string;
+    previous?: Record<string, unknown> | null;
+    /** billing_trial.ended: the trial converted to a paid subscription. */
+    converted?: boolean;
+    notice?: number;
+    days_left: number;
+    /** Grace ends (epoch ms). */
+    grace_ends_at: number;
+    [key: string]: unknown;
+};
+/** An invoice payment failed; the subscription plus the invoice. */
+export type WebhookDataBillingInvoiceFailed = {
+    object: "billing_subscription";
+    id: string;
+    subject_type: string;
+    subject_id: string;
+    provider?: string;
+    provider_subscription_id?: string | null;
+    provider_customer_id?: string | null;
+    plan?: string | null;
+    plan_id?: string | null;
+    status?: string;
+    interval?: string | null;
+    quantity?: number | null;
+    cancel_at_period_end?: boolean;
+    /** Current period end (epoch ms), or null. */
+    current_period_end?: number | null;
+    scheduled_plan_id?: string | null;
+    scheduled_interval?: string | null;
+    /** Scheduled change (epoch ms), or null. */
+    scheduled_change_at?: number | null;
+    /** Trial end (epoch ms), or null. */
+    trial_end?: number | null;
+    /** Canceled (epoch ms), or null. */
+    canceled_at?: number | null;
+    reason?: string;
+    previous?: Record<string, unknown> | null;
+    /** billing_trial.ended: the trial converted to a paid subscription. */
+    converted?: boolean;
+    /** The failed invoice. */
+    invoice: {
+        provider_invoice_id: string;
+        number?: string | null;
+        amount_due?: number | null;
+        currency?: string | null;
+        hosted_invoice_url?: string | null;
+        [key: string]: unknown;
+    };
+    [key: string]: unknown;
+};
+/** A subject's subscription to a plan you sell. */
+export type WebhookDataBillingSubscription = {
+    object: "billing_subscription";
+    id: string;
+    subject_type: string;
+    subject_id: string;
+    provider?: string;
+    provider_subscription_id?: string | null;
+    provider_customer_id?: string | null;
+    plan?: string | null;
+    plan_id?: string | null;
+    status: string;
+    interval?: string | null;
+    quantity?: number | null;
+    cancel_at_period_end?: boolean;
+    /** Current period end (epoch ms), or null. */
+    current_period_end?: number | null;
+    scheduled_plan_id?: string | null;
+    scheduled_interval?: string | null;
+    /** Scheduled change (epoch ms), or null. */
+    scheduled_change_at?: number | null;
+    /** Trial end (epoch ms), or null. */
+    trial_end?: number | null;
+    /** Canceled (epoch ms), or null. */
+    canceled_at?: number | null;
+    reason?: string;
+    previous?: Record<string, unknown> | null;
+    /** billing_trial.ended: the trial converted to a paid subscription. */
+    converted?: boolean;
+    [key: string]: unknown;
+};
+/** A subscription suspended after its grace period. */
+export type WebhookDataBillingSuspended = {
+    object: "billing_subscription";
+    id: string;
+    subject_type: string;
+    subject_id: string;
+    provider?: string;
+    provider_subscription_id?: string | null;
+    provider_customer_id?: string | null;
+    plan?: string | null;
+    plan_id?: string | null;
+    status?: string;
+    interval?: string | null;
+    quantity?: number | null;
+    cancel_at_period_end?: boolean;
+    /** Current period end (epoch ms), or null. */
+    current_period_end?: number | null;
+    scheduled_plan_id?: string | null;
+    scheduled_interval?: string | null;
+    /** Scheduled change (epoch ms), or null. */
+    scheduled_change_at?: number | null;
+    /** Trial end (epoch ms), or null. */
+    trial_end?: number | null;
+    /** Canceled (epoch ms), or null. */
+    canceled_at?: number | null;
+    reason?: string;
+    previous?: Record<string, unknown> | null;
+    /** billing_trial.ended: the trial converted to a paid subscription. */
+    converted?: boolean;
+    /** Past due since (epoch ms). */
+    past_due_since: number;
+    grace_days: number;
+    [key: string]: unknown;
+};
+/** A trial is about to end. */
+export type WebhookDataBillingTrialWillEnd = {
+    object: "billing_subscription";
+    id: string;
+    subject_type: string;
+    subject_id: string;
+    provider?: string;
+    provider_subscription_id?: string | null;
+    provider_customer_id?: string | null;
+    plan?: string | null;
+    plan_id?: string | null;
+    status?: string;
+    interval?: string | null;
+    quantity?: number | null;
+    cancel_at_period_end?: boolean;
+    /** Current period end (epoch ms), or null. */
+    current_period_end?: number | null;
+    scheduled_plan_id?: string | null;
+    scheduled_interval?: string | null;
+    /** Scheduled change (epoch ms), or null. */
+    scheduled_change_at?: number | null;
+    /** Trial end (epoch ms), or null. */
+    trial_end: number | null;
+    /** Canceled (epoch ms), or null. */
+    canceled_at?: number | null;
+    reason?: string;
+    previous?: Record<string, unknown> | null;
+    /** billing_trial.ended: the trial converted to a paid subscription. */
+    converted?: boolean;
+    [key: string]: unknown;
+};
+/** A provider connection's token-health transition. */
+export type WebhookDataConnection = {
+    object: "connection";
+    id: string;
+    owner: {
+        type: "organization" | "user";
+        id: string;
+        [key: string]: unknown;
+    };
+    provider: string;
+    environment?: "production" | "sandbox";
+    status: string;
+    external_id?: string | null;
+    /** The provider's own error: code (e.g. invalid_grant), description and the HTTP status of the refused call. */
+    error?: {
+        code?: string;
+        description?: string | null;
+        http_status?: number | null;
+        [key: string]: unknown;
+    } | null;
+    retryable?: boolean;
+    consecutive_failures?: number;
+    revoked_by?: "owner" | "provider" | "admin";
+    scopes?: string[];
+    scopes_added?: string[];
+    scopes_removed?: string[];
+    /** Occurred (epoch ms). */
+    occurred_at?: number;
+    [key: string]: unknown;
+};
+/** The delivery health of a webhook endpoint or another outbound target (state, last failure, 24-hour rate). */
+export type WebhookDataDeliveryHealth = {
+    object: "delivery_health";
+    kind: string;
+    id: string;
+    webhook_endpoint_id?: string;
+    url?: string | null;
+    label: string;
+    /** Recovered (epoch ms). */
+    recovered_at?: number;
+    failing_since?: number | string | null;
+    failed_for_ms?: number | null;
+    /** On .disabled: how to replay what it missed. */
+    replay?: string;
+    [key: string]: unknown;
+};
+/** A cross-property directive imposed on a user. */
+export type WebhookDataDirective = {
+    user_id: string;
+    /** ISO 8601. */
+    suspended_until?: string;
+    read_only?: boolean;
+    forced_logout?: boolean;
+    reason?: string;
+    [key: string]: unknown;
+};
+/** A transactional email was sent (never its body). */
+export type WebhookDataEmailMessage = {
+    object: "email_message";
+    id: string;
+    to_email_address: string;
+    slug: string;
+    status: string;
+    [key: string]: unknown;
+};
+/** A subject's resolved entitlement changed. */
+export type WebhookDataEntitlement = {
+    object: "entitlement";
+    subject_type: "user" | "org";
+    subject_id: string;
+    plan_id?: string | null;
+    plan?: string | null;
+    status?: string | null;
+    entitled: boolean;
+    features: string[];
+    /** The state before the change. */
+    previous: {
+        plan_id?: string | null;
+        plan?: string | null;
+        status?: string | null;
+        entitled: boolean;
+        features: string[];
+        [key: string]: unknown;
+    };
+    [key: string]: unknown;
+};
+/** A sales-led entitlement override. */
+export type WebhookDataEntitlementOverride = {
+    object: "entitlement_override";
+    id: string;
+    subject_type: string;
+    subject_id: string;
+    plan: string | null;
+    features: string[] | null;
+    limits: Record<string, unknown> | null;
+    /** Expires (epoch ms), or null. */
+    expires_at: number | null;
+    created_by: string | null;
+    /** Created (epoch ms). */
+    created_at: number;
+    [key: string]: unknown;
+};
+/** A feature flag was created, changed or deleted. */
+export type WebhookDataFeatureFlag = {
+    object: "feature_flag";
+    id?: string;
+    key: string;
+    change: "created" | "updated" | "deleted";
+    changed_fields?: string[];
+    type?: string;
+    enabled?: boolean;
+    previous_enabled?: boolean | null;
+    default_value?: unknown;
+    rules?: number;
+    actor?: string | null;
+    [key: string]: unknown;
+};
+/** An OAuth access grant that was revoked. */
+export type WebhookDataGrant = {
+    object: "oauth_grant";
+    id: string;
+    client_id: string;
+    user_id: string;
+    organization_id: string | null;
+    session_ids?: string[];
+    [key: string]: unknown;
+};
+/** An instance group was created, changed or deleted (a delete carries only id and slug). */
+export type WebhookDataGroup = {
+    object: "group";
+    id: string;
+    slug: string;
+    name?: string;
+    description?: string | null;
+    parent_id?: string | null;
+    attributes?: Record<string, unknown>;
+    app_role_keys?: string[];
+    include_in_token?: boolean;
+    dynamic_filter?: Record<string, unknown> | null;
+    sso_match?: Record<string, unknown> | null;
+    /** Created (epoch ms). */
+    created_at?: number;
+    /** Updated (epoch ms). */
+    updated_at?: number;
+    [key: string]: unknown;
+};
+/** A user joined or left an instance group. */
+export type WebhookDataGroupMember = {
+    object: "group_member";
+    group_id: string;
+    user_id: string;
+    source?: "manual" | "dynamic" | "sso" | "rule";
+    [key: string]: unknown;
+};
+/** An identity-governance event: a request, grant, access-review campaign, separation-of-duties violation or joiner/mover/leaver change. */
+export type WebhookDataIga = {
+    object: "iga_request" | "iga_grant" | "iga_campaign" | "iga_sod_violation" | "iga_jml" | "iga_activation";
+    id?: string;
+    user_id?: string;
+    entitlement_id?: string;
+    entitlement_key?: string | null;
+    status?: string;
+    rule_id?: string;
+    rule_name?: string;
+    request_id?: string | null;
+    beneficiary_user_id?: string;
+    approvers?: string[];
+    days_left?: number;
+    pending?: number;
+    granted?: string[];
+    revoked?: string[];
+    revoked_grants?: number;
+    cancelled_requests?: number;
+    account_closure?: Record<string, unknown> | null;
+    progress?: Record<string, unknown> | null;
+    [key: string]: unknown;
+};
+/** An instance invitation (POST /v1/invitations). */
+export type WebhookDataInstanceInvitation = {
+    object: "invitation";
+    id: string;
+    email_address: string;
+    status: "pending" | "accepted" | "revoked" | "expired";
+    public_metadata: Record<string, unknown>;
+    /** invitation.accepted: the user who signed up with the invited address. Null on the other events. */
+    user_id: string | null;
+    /** Expires (epoch ms). */
+    expires_at: number;
+    /** Accepted (epoch ms), or null. */
+    accepted_at: number | null;
+    /** Created (epoch ms). */
+    created_at: number;
+    [key: string]: unknown;
+};
+/** An organization invitation. */
+export type WebhookDataInvitation = {
+    object: "organization_invitation";
+    id: string;
+    organization_id: string;
+    email_address: string;
+    role_id?: string | null;
+    status: string;
+    /** Expires (epoch ms). */
+    expires_at: number;
+    /** Created (epoch ms). */
+    created_at: number;
+    [key: string]: unknown;
+};
+/** A machine (device). */
+export type WebhookDataMachine = {
+    object: "machine";
+    id: string;
+    name: string;
+    organization_id?: string | null;
+    owner_user_id?: string | null;
+    data?: Record<string, unknown> | null;
+    status: string;
+    device_key?: string | null;
+    public_key_jkt?: string | null;
+    metadata?: Record<string, unknown> | null;
+    /** Enrolled (epoch ms), or null. */
+    enrolled_at?: number | null;
+    /** Created (epoch ms). */
+    created_at: number;
+    /** Updated (epoch ms). */
+    updated_at: number;
+    reason?: "superseded" | "owner_banned" | "owner_locked" | "owner_deleted";
+    [key: string]: unknown;
+};
+/** A pinned MCP tool changed its definition and is blocked until re-approved. */
+export type WebhookDataMcpToolChange = {
+    object: "mcp_tool_change";
+    gateway_id: string;
+    tool: string;
+    previous_hash?: string;
+    new_hash?: string;
+    [key: string]: unknown;
+};
+/** A membership. */
+export type WebhookDataMembership = {
+    object: "organization_membership";
+    id: string;
+    organization_id: string;
+    user_id: string;
+    /** The role key, when known. */
+    role?: string;
+    role_id: string | null;
+    /** Created (epoch ms). */
+    created_at: number;
+    /** organization_membership.updated only: the role key before the change. */
+    previous_role?: string;
+    /** organization_membership.updated only: the role id before the change. */
+    previous_role_id?: string;
+    /** organization_membership.updated only: what manages the role now. `scim`, `sso:<connection id>` or `ldap:<connection id>` when your identity provider's groups or roles changed it; `manual` when it was set through the API or dashboard (directory changes then leave it alone). */
+    role_source?: string | null;
+    [key: string]: unknown;
+};
+/** A minor's parental-consent state changed. */
+export type WebhookDataMinorStatus = {
+    object: "minor_status";
+    user_id: string;
+    status: "consent_required" | "consented" | "declined";
+    consent_age?: number;
+    [key: string]: unknown;
+};
+/** An organization domain. */
+export type WebhookDataOrgDomain = {
+    object: "organization_domain";
+    id: string;
+    organization_id: string;
+    name: string;
+    status: "pending" | "verified" | "failed";
+    enrollment_mode: "automatic_invitation" | "manual_invitation";
+    verified: boolean;
+    /** Created (epoch ms). */
+    created_at: number;
+    /** Updated (epoch ms). */
+    updated_at: number;
+    [key: string]: unknown;
+};
+/** An organization's SSO or SCIM setup needs its IT contacts. */
+export type WebhookDataOrgItAlert = {
+    object: "organization_it_alert";
+    organization_id: string;
+    kind: "certificate_expiring" | "sso_failure" | "scim_error";
+    connection_id?: string | null;
+    title: string;
+    detail: string;
+    days_left?: number | null;
+    contacts_notified?: number;
+    [key: string]: unknown;
+};
+/** The organization. */
+export type WebhookDataOrganization = {
+    object: "organization";
+    id: string;
+    name: string;
+    slug: string | null;
+    image_url: string | null;
+    public_metadata: Record<string, unknown> | null;
+    max_allowed_memberships: number | null;
+    /** Your own id for this organization (unique per instance), or null. */
+    external_id?: string | null;
+    /** The Atlas user seated as the first admin; null for an organization created by your backend. */
+    created_by: string | null;
+    /** Created (epoch ms). */
+    created_at: number;
+    /** Updated (epoch ms). */
+    updated_at: number;
+    [key: string]: unknown;
+};
+/** An organization's custom settings document after a change. */
+export type WebhookDataOrganizationSettings = {
+    object: "organization_settings";
+    organization_id: string;
+    values: Record<string, unknown>;
+    version: number;
+    /** Updated (epoch ms). */
+    updated_at: number;
+    [key: string]: unknown;
+};
+/** A permission. */
+export type WebhookDataPermission = {
+    object: "permission";
+    id: string;
+    key: string;
+    name: string;
+    description?: string | null;
+    is_system: boolean;
+    [key: string]: unknown;
+};
+/** A recorded policy acceptance with its evidence. */
+export type WebhookDataPolicyAcceptance = {
+    object: "policy_acceptance";
+    id: string;
+    user_id: string;
+    policy: string;
+    version: number;
+    policy_version_id?: string | null;
+    status?: string;
+    source?: string;
+    content_sha256?: string | null;
+    display?: string | null;
+    scrolled_to_end?: boolean | null;
+    view_ms?: number | null;
+    locale?: string | null;
+    ip?: string | null;
+    user_agent?: string | null;
+    /** Accepted (epoch ms). */
+    accepted_at: number;
+    [key: string]: unknown;
+};
+/** A policy version was published. */
+export type WebhookDataPolicyVersionPublished = {
+    object: "policy_version_published";
+    /** The policy. */
+    policy: {
+        object: "policy";
+        id: string;
+        key: string;
+        title?: string;
+        display?: string;
+        required?: boolean;
+        status?: string;
+        [key: string]: unknown;
+    };
+    /** A policy version. */
+    version: {
+        object: "policy_version";
+        id: string;
+        policy_id: string;
+        policy: string;
+        version: number;
+        status: string;
+        content_markdown?: string | null;
+        content_html?: string | null;
+        content_url?: string | null;
+        content_sha256: string;
+        summary_of_changes?: string | null;
+        locale?: string | null;
+        /** Published (epoch ms), or null. */
+        published_at?: number | null;
+        /** Effective (epoch ms), or null. */
+        effective_at?: number | null;
+        /** Retired (epoch ms), or null. */
+        retired_at?: number | null;
+        /** Created (epoch ms). */
+        created_at: number;
+        /** Updated (epoch ms). */
+        updated_at: number;
+        acceptance_count?: number;
+        [key: string]: unknown;
+    };
+    [key: string]: unknown;
+};
+/** The data-rights executor Request, camelCase as the executor protocol defines it. */
+export type WebhookDataPrivacyRequest = {
+    object: "privacy_request";
+    id: string;
+    type: string;
+    canonicalType?: string;
+    requestedType?: string;
+    status: string;
+    subjectId: string;
+    caseId?: string | null;
+    executeAfter?: string | null;
+    eta?: string | null;
+    detail?: string | null;
+    retention?: Array<Record<string, unknown>>;
+    steps?: Array<Record<string, unknown>>;
+    trace?: string | null;
+    createdAt: string;
+    updatedAt: string;
+    completedAt?: string | null;
+    [key: string]: unknown;
+};
+/** An action a user owes at their next sign-in was requested, completed or withdrawn. */
+export type WebhookDataRequiredAction = {
+    object: "required_action";
+    id: string;
+    user_id: string;
+    action: string;
+    url?: string | null;
+    reason?: string | null;
+    created_by?: string | null;
+    /** Requested (epoch ms). */
+    created_at?: number;
+    /** user.required_action_completed only: who finished it (system = it was already true). */
+    completed_by?: "user" | "system";
+    [key: string]: unknown;
+};
+/** A role. */
+export type WebhookDataRole = {
+    object: "role";
+    id: string;
+    key: string;
+    name: string;
+    description?: string | null;
+    is_system: boolean;
+    organization_id?: string | null;
+    permissions: string[];
+    /** Created (epoch ms). */
+    created_at: number;
+    [key: string]: unknown;
+};
+/** A SCIM group of an organization's directory. */
+export type WebhookDataScimGroup = {
+    object: "scim_group";
+    id: string;
+    organization_id: string;
+    display_name: string;
+    external_id?: string | null;
+    /** Created (epoch ms). */
+    created_at?: number;
+    /** Updated (epoch ms). */
+    updated_at?: number;
+    [key: string]: unknown;
+};
+/** A user joined or left a SCIM group. */
+export type WebhookDataScimGroupMember = {
+    object: "scim_group_member";
+    group_id: string;
+    user_id: string;
+    organization_id: string;
+    [key: string]: unknown;
+};
+/** A SCIM token (never the token itself). */
+export type WebhookDataScimToken = {
+    object: "scim_token";
+    id: string;
+    name: string | null;
+    organization_id?: string | null;
+    connection_id?: string | null;
+    prefix: string;
+    revoked: boolean;
+    /** Created (epoch ms). */
+    created_at: number;
+    [key: string]: unknown;
+};
+/** A key is close to expiry (or was revoked). */
+export type WebhookDataSecretKeyExpiring = {
+    object: "key";
+    id: string;
+    kind: "secret_key" | "platform_key" | "account_key";
+    prefix: string;
+    name?: string | null;
+    /** Who owns the key (an email address), if recorded. */
+    owner?: string | null;
+    /** Expires (epoch ms). */
+    expires_at: number;
+    days_left?: number;
+    threshold_days?: number;
+    [key: string]: unknown;
+};
+/** A conditional-access, device-posture, containment or risk signal; the fields depend on the event. */
+export type WebhookDataSecuritySignal = {
+    user_id?: string | null;
+    device_id?: string | null;
+    integration_id?: string | null;
+    pass_id?: string | null;
+    factor_id?: string | null;
+    policy_id?: string | null;
+    state?: string | null;
+    level?: string | null;
+    score?: number | null;
+    stage?: string | null;
+    would?: string | null;
+    provider?: string | null;
+    reason?: string | null;
+    actor?: string | null;
+    channel?: string | null;
+    recipient?: string | null;
+    template?: string | null;
+    limit?: number | null;
+    window?: string | null;
+    retry_after_seconds?: number | null;
+    /** At (epoch ms), or null. */
+    at?: number | null;
+    error?: string | null;
+    compliant?: boolean;
+    previous?: string | null;
+    /** Until (epoch ms), or null. */
+    until?: number | null;
+    /** Expires (epoch ms), or null. */
+    expires_at?: number | null;
+    matched?: string[];
+    checks?: string[];
+    revoked?: Record<string, unknown>;
+    [key: string]: unknown;
+};
+/** The session (session.created, .updated, .revoked, .pending, .expired). A session ended as a side effect carries only id, user_id and status. */
+export type WebhookDataSession = {
+    object: "session";
+    /** The session id: the `sid` claim of the session token and of ID tokens issued in this session. session.pending: the sign-in attempt id (no session exists yet). */
+    id: string;
+    /** The user the session belongs to. Always present. */
+    user_id: string;
+    status: string;
+    last_active_organization_id?: string | null;
+    /** Last active (epoch ms). */
+    last_active_at?: number;
+    /** Expires (epoch ms). */
+    expire_at?: number;
+    /** Idle expiry (epoch ms). */
+    abandon_at?: number;
+    /** Idle expiry (epoch ms). */
+    idle_expires_at?: number;
+    /** Created (epoch ms). */
+    created_at?: number;
+    custom_data?: Record<string, unknown> | null;
+    /** session.pending: the stage the sign-in waits on. */
+    pending_status?: string;
+    strategy?: string;
+    /** session.expired: idle_expired = no activity for the idle window; expired = the absolute lifetime ran out. */
+    reason?: "idle_expired" | "expired";
+    [key: string]: unknown;
+};
+/** A staged signing key: published (signing_key.staged) or now signing (signing_key.activated). */
+export type WebhookDataSigningKey = {
+    object: "signing_key";
+    kid: string;
+    alg: "RS256" | "ES256";
+    /** signing_key.staged: when the key starts signing tokens (epoch ms). */
+    activates_at?: number;
+    previous_kid?: string | null;
+    /** signing_key.activated: when the previous key leaves the JWKS (epoch ms). */
+    previous_retires_at?: number | null;
+    [key: string]: unknown;
+};
+/** A transactional SMS was sent (never its body). */
+export type WebhookDataSmsMessage = {
+    object: "sms_message";
+    id: string;
+    to_phone_number: string;
+    status: string;
+    [key: string]: unknown;
+};
+/** An SSO connection. */
+export type WebhookDataSsoConnection = {
+    object: "sso_connection";
+    id: string;
+    organization_id: string;
+    type: string;
+    status: string;
+    /** Created (epoch ms). */
+    created_at: number;
+    /** Updated (epoch ms). */
+    updated_at: number;
+    [key: string]: unknown;
+};
+/** A hosted SSO setup ticket the customer finished. */
+export type WebhookDataSsoOnboardingTicket = {
+    object: "sso_onboarding_ticket";
+    id: string;
+    profile_id: string;
+    organization_id: string;
+    sso_connection_id?: string | null;
+    status: "completed";
+    return_url?: string | null;
+    /** Completed (epoch ms). */
+    completed_at: number;
+    [key: string]: unknown;
+};
+/** A status incident that matches your subscription. */
+export type WebhookDataStatusIncident = {
+    object: "status_incident";
+    id: string;
+    kind: string;
+    title: string;
+    status: string;
+    impact: string;
+    regions?: string[];
+    component_ids?: string[];
+    affected_regions?: string[];
+    affected_component_ids?: string[];
+    /** Started (epoch ms). */
+    started_at: number;
+    /** Resolved (epoch ms), or null. */
+    resolved_at?: number | null;
+    update: Record<string, unknown>;
+    url: string;
+    [key: string]: unknown;
+};
+/** A data subject request (access/export or erasure). */
+export type WebhookDataSubjectRequest = {
+    object: "data_subject_request";
+    id: string;
+    user_id: string;
+    type: string;
+    status: string;
+    reason?: string | null;
+    /** Scheduled for (epoch ms), or null. */
+    scheduled_for?: number | null;
+    canonical_type?: string;
+    /** When the purge runs (epoch ms), or null. */
+    deletion_effective_at?: number | null;
+    [key: string]: unknown;
+};
+/** The Atlas plan subscription of the account. */
+export type WebhookDataSubscription = {
+    object: "subscription";
+    account_id: string;
+    plan: string;
+    status: "active" | "canceled";
+    stripe_subscription_id?: string | null;
+    [key: string]: unknown;
+};
+/** A team. */
+export type WebhookDataTeam = {
+    object: "team";
+    id: string;
+    organization_id: string;
+    name: string;
+    description?: string | null;
+    members_count?: number;
+    /** Created (epoch ms). */
+    created_at: number;
+    /** Updated (epoch ms). */
+    updated_at: number;
+    [key: string]: unknown;
+};
+/** A user joined or left a team. */
+export type WebhookDataTeamMembership = {
+    object: "team_membership";
+    team_id: string;
+    organization_id: string;
+    user_id: string;
+    [key: string]: unknown;
+};
+/** The synthetic event POST /v1/webhook_endpoints/{id}/test sends. */
+export type WebhookDataTest = {
+    object: "webhook_test";
+    id: string;
+    note: string;
+    [key: string]: unknown;
+};
+/** A connection trigger fired. */
+export type WebhookDataTriggerFired = {
+    object: "connection_trigger_event";
+    trigger_id: string;
+    connection_id: string;
+    event: string;
+    provider?: string;
+    /** The new item the poll found. */
+    item?: Record<string, unknown>;
+    [key: string]: unknown;
+};
+/** A user-managed-access request for a resource the owner has to approve. */
+export type WebhookDataUmaRequest = {
+    object: "uma_access_request";
+    id: string;
+    resource_id: string;
+    resource_name?: string;
+    requester_user_id: string;
+    owner_user_id: string;
+    client_id?: string;
+    scopes: string[];
+    status: "pending" | "approved" | "denied";
+    /** Created (epoch ms). */
+    created_at?: number;
+    /** Decided (epoch ms), or null. */
+    decided_at?: number | null;
+    [key: string]: unknown;
+};
+/** The user as it now stands (user.created, user.updated, user.banned, …), with their addresses. */
+export type WebhookDataUser = {
+    object: "user";
+    id: string;
+    first_name: string | null;
+    last_name: string | null;
+    username: string | null;
+    image_url: string | null;
+    primary_email_address_id: string | null;
+    public_metadata: Record<string, unknown> | null;
+    unsafe_metadata: Record<string, unknown> | null;
+    mfa_enabled: boolean;
+    is_anonymous: boolean;
+    banned: boolean;
+    /** When the ban lifts (epoch ms), or null. */
+    ban_expires_at: number | null;
+    /** One account state, the same value as the ID token's account_status: banned (an active ban; deactivation by SCIM, directory sync or a workflow is a ban), suspended (a lock, suspension directive or sign-in lockout is in force), else active. */
+    status: "active" | "suspended" | "banned";
+    /** Created (epoch ms). */
+    created_at: number;
+    /** Last changed (epoch ms). */
+    updated_at: number;
+    /** Strictly increases with every change to the user; apply a delivery only if its version is higher than the one you hold. */
+    version: number;
+    /** Added to user.* events: the primary address. */
+    primary_email_address?: string | null;
+    /** Added to user.* events: every address of the user. */
+    email_addresses?: Array<{
+        id: string;
+        email_address: string;
+        verified: boolean;
+        primary: boolean;
+        [key: string]: unknown;
+    }>;
+    /** Referral attribution, when the instance has referrals on. */
+    referral?: Record<string, unknown> | null;
+    /** Added to user.* events: every linked provider identity (sign-in, connect or import), as on GET /v1/users/{id}. */
+    external_accounts?: Array<Record<string, unknown>>;
+    referral_code?: string | null;
+    referral_link?: string | null;
+    [key: string]: unknown;
+};
+/** A user's app roles after a change. */
+export type WebhookDataUserAppRoles = {
+    object: "user_app_roles";
+    user_id: string;
+    roles: string[];
+    permissions: string[];
+    [key: string]: unknown;
+};
+/** A deprovisioning signal: revoke sessions and access now. */
+export type WebhookDataUserDeactivated = {
+    object: "user";
+    user_id: string;
+    organization_id: string | null;
+    source: "admin" | "scim" | "self";
+    reason: string | null;
+    /** Deactivated (epoch ms). */
+    deactivated_at: number;
+    [key: string]: unknown;
+};
+/** The pre-delete snapshot of the user and why they were deleted. */
+export type WebhookDataUserDeleted = {
+    object: "user";
+    id: string;
+    first_name: string | null;
+    last_name: string | null;
+    username: string | null;
+    image_url: string | null;
+    primary_email_address_id: string | null;
+    public_metadata: Record<string, unknown> | null;
+    unsafe_metadata: Record<string, unknown> | null;
+    mfa_enabled: boolean;
+    is_anonymous: boolean;
+    banned: boolean;
+    /** When the ban lifts (epoch ms), or null. */
+    ban_expires_at: number | null;
+    /** One account state, the same value as the ID token's account_status: banned (an active ban; deactivation by SCIM, directory sync or a workflow is a ban), suspended (a lock, suspension directive or sign-in lockout is in force), else active. */
+    status: "active" | "suspended" | "banned";
+    /** Created (epoch ms). */
+    created_at: number;
+    /** Last changed (epoch ms). */
+    updated_at: number;
+    /** Strictly increases with every change to the user; apply a delivery only if its version is higher than the one you hold. */
+    version: number;
+    /** Added to user.* events: the primary address. */
+    primary_email_address?: string | null;
+    /** Added to user.* events: every address of the user. */
+    email_addresses?: Array<{
+        id: string;
+        email_address: string;
+        verified: boolean;
+        primary: boolean;
+        [key: string]: unknown;
+    }>;
+    /** Referral attribution, when the instance has referrals on. */
+    referral?: Record<string, unknown> | null;
+    /** Added to user.* events: every linked provider identity (sign-in, connect or import), as on GET /v1/users/{id}. */
+    external_accounts?: Array<Record<string, unknown>>;
+    referral_code?: string | null;
+    referral_link?: string | null;
+    deleted: true;
+    /** Why the user was deleted. */
+    reason: "erasure" | "admin" | "self_service" | "anonymous_expired";
+    /** The data subject request, for an erasure. */
+    request_id: string | null;
+    [key: string]: unknown;
+};
+/** A graceful deletion was scheduled or canceled. */
+export type WebhookDataUserDeletionSchedule = {
+    object: "user";
+    id: string;
+    primary_email_address_id: string | null;
+    /** Scheduled (epoch ms), or null. */
+    deletion_scheduled_at: number | null;
+    /** When the purge runs (epoch ms), or null. */
+    deletion_effective_at: number | null;
+    /** Canceled (epoch ms), or null. */
+    deletion_canceled_at?: number | null;
+    data_subject_request_id?: string;
+    primary_email_address?: string | null;
+    email_addresses?: Array<Record<string, unknown>>;
+    [key: string]: unknown;
+};
+/** A temporary hold was placed on the account. */
+export type WebhookDataUserLocked = {
+    object: "user";
+    user_id: string;
+    /** Lock lifts (epoch ms). */
+    locked_until: number;
+    reason?: string | null;
+    [key: string]: unknown;
+};
+/** A user merge. */
+export type WebhookDataUserMerged = {
+    object: "user_merge";
+    source_user_id: string;
+    target_user_id: string;
+    moved?: Record<string, unknown>;
+    /** Merged (epoch ms). */
+    merged_at?: number;
+    [key: string]: unknown;
+};
+/** A dormant account was reactivated by signing in. */
+export type WebhookDataUserReactivation = {
+    object: "user_reactivation";
+    user_id: string;
+    session_id?: string | null;
+    sign_in_method?: string | null;
+    /** Last activity (epoch ms), or null. */
+    last_active_at?: number | null;
+    inactive_days?: number | null;
+    threshold_days?: number;
+    step_up_required?: boolean;
+    /** Reactivated (epoch ms). */
+    reactivated_at: number;
+    [key: string]: unknown;
+};
+/** A user was attributed to a referrer (or, for a Sign in with Atlas sign-up, the platform answered). */
+export type WebhookDataUserReferral = {
+    object: "user_referral";
+    user_id: string;
+    attribution_status: string;
+    /** Signed up (epoch ms). */
+    signed_up_at: number;
+    /** Updated (epoch ms). */
+    updated_at: number;
+    /** The referral, when found. */
+    referral?: Record<string, unknown> | null;
+    referral_code?: string | null;
+    referral_link?: string | null;
+    /** Present only for a Sign in with Atlas sign-up (`report_linked_atlas_id_signups`): the person is an Atlas ID account, not a user of the instance, and `user_id` is the `sub` the app sees. */
+    source?: "sign_in_with_atlas";
+    /** Sign in with Atlas sign-up: the `sub` the app sees (also the customerRef reported). */
+    atlas_id_sub?: string;
+    /** Sign in with Atlas sign-up: the app the person signed in to. */
+    atlas_id_app_id?: string;
+    [key: string]: unknown;
+};
+/** A suspension lifted. */
+export type WebhookDataUserUnsuspended = {
+    user_id: string;
+    [key: string]: unknown;
+};
+/** A waitlist entry. */
+export type WebhookDataWaitlistEntry = {
+    object: "waitlist_entry";
+    id: string;
+    email_address: string;
+    status: string;
+    /** Created (epoch ms). */
+    created_at: number;
+    /** Updated (epoch ms). */
+    updated_at: number;
+    [key: string]: unknown;
+};
+/** A workflow run finished or failed, or one of its approval steps needs a decision. */
+export type WebhookDataWorkflow = {
+    id: string;
+    workflow_id: string;
+    run_id?: string;
+    subject?: string;
+    error?: string | null;
+    message?: string;
+    status?: string;
+    approvers?: string[];
+    [key: string]: unknown;
+};
+/** The signed envelope of every delivery: `type` names the event, `data` is its subject. */
+export interface AtlasWebhookEnvelope<T extends string, D> {
+    /** The event id (also the `atlas-id` header). */
+    id: string;
+    type: T;
+    /** When it was emitted (epoch ms). */
+    timestamp: number;
+    instance_id: string;
+    data: D;
+}
+/** Every canonical Atlas webhook event; narrow on `type`. */
+export type AtlasWebhookEvent = AtlasWebhookEnvelope<"access_policy.would_block", WebhookDataSecuritySignal> | AtlasWebhookEnvelope<"agent.access_decided", WebhookDataAgentAccess> | AtlasWebhookEnvelope<"agent.access_requested", WebhookDataAgentAccess> | AtlasWebhookEnvelope<"agent.access_revoked", WebhookDataAgentAccess> | AtlasWebhookEnvelope<"agent.anomaly", WebhookDataAgentGovernance> | AtlasWebhookEnvelope<"agent.expiring", WebhookDataAgentGovernance> | AtlasWebhookEnvelope<"agent.sponsor_changed", WebhookDataAgentGovernance> | AtlasWebhookEnvelope<"api_key.created", WebhookDataApiKey> | AtlasWebhookEnvelope<"api_key.expiring", WebhookDataApiKeyExpiring> | AtlasWebhookEnvelope<"api_key.limit_reached", WebhookDataApiKey> | AtlasWebhookEnvelope<"api_key.revoked", WebhookDataApiKey> | AtlasWebhookEnvelope<"api_key.updated", WebhookDataApiKey> | AtlasWebhookEnvelope<"app_role.created", WebhookDataAppRole> | AtlasWebhookEnvelope<"app_role.deleted", WebhookDataAppRole> | AtlasWebhookEnvelope<"app_role.updated", WebhookDataAppRole> | AtlasWebhookEnvelope<"billing_coupon.redeemed", WebhookDataBillingCouponRedeemed> | AtlasWebhookEnvelope<"billing_credit.granted", WebhookDataBillingCredit> | AtlasWebhookEnvelope<"billing_dunning.notice", WebhookDataBillingDunningNotice> | AtlasWebhookEnvelope<"billing_invoice.payment_failed", WebhookDataBillingInvoiceFailed> | AtlasWebhookEnvelope<"billing_subscription.canceled", WebhookDataBillingSubscription> | AtlasWebhookEnvelope<"billing_subscription.created", WebhookDataBillingSubscription> | AtlasWebhookEnvelope<"billing_subscription.suspended", WebhookDataBillingSuspended> | AtlasWebhookEnvelope<"billing_subscription.updated", WebhookDataBillingSubscription> | AtlasWebhookEnvelope<"billing_trial.ended", WebhookDataBillingSubscription> | AtlasWebhookEnvelope<"billing_trial.started", WebhookDataBillingSubscription> | AtlasWebhookEnvelope<"billing_trial.will_end", WebhookDataBillingTrialWillEnd> | AtlasWebhookEnvelope<"connection.reauthorization_required", WebhookDataConnection> | AtlasWebhookEnvelope<"connection.recovered", WebhookDataConnection> | AtlasWebhookEnvelope<"connection.refresh_failed", WebhookDataConnection> | AtlasWebhookEnvelope<"connection.revoked", WebhookDataConnection> | AtlasWebhookEnvelope<"connection.scopes_changed", WebhookDataConnection> | AtlasWebhookEnvelope<"connection.trigger_fired", WebhookDataTriggerFired> | AtlasWebhookEnvelope<"data_subject_request.fulfilled", WebhookDataSubjectRequest> | AtlasWebhookEnvelope<"data_subject_request.rejected", WebhookDataSubjectRequest> | AtlasWebhookEnvelope<"data_subject_request.scheduled", WebhookDataSubjectRequest> | AtlasWebhookEnvelope<"delivery_target.disabled", WebhookDataDeliveryHealth> | AtlasWebhookEnvelope<"delivery_target.failing", WebhookDataDeliveryHealth> | AtlasWebhookEnvelope<"delivery_target.recovered", WebhookDataDeliveryHealth> | AtlasWebhookEnvelope<"device.noncompliant", WebhookDataSecuritySignal> | AtlasWebhookEnvelope<"device.posture_changed", WebhookDataSecuritySignal> | AtlasWebhookEnvelope<"device_integration.sync_failed", WebhookDataSecuritySignal> | AtlasWebhookEnvelope<"email.created", WebhookDataEmailMessage> | AtlasWebhookEnvelope<"entitlement.created", WebhookDataEntitlement> | AtlasWebhookEnvelope<"entitlement.deleted", WebhookDataEntitlement> | AtlasWebhookEnvelope<"entitlement.updated", WebhookDataEntitlement> | AtlasWebhookEnvelope<"entitlement_override.created", WebhookDataEntitlementOverride> | AtlasWebhookEnvelope<"entitlement_override.deleted", WebhookDataEntitlementOverride> | AtlasWebhookEnvelope<"entitlement_override.expired", WebhookDataEntitlementOverride> | AtlasWebhookEnvelope<"feature_flag.changed", WebhookDataFeatureFlag> | AtlasWebhookEnvelope<"grant.revoked", WebhookDataGrant> | AtlasWebhookEnvelope<"group.created", WebhookDataGroup> | AtlasWebhookEnvelope<"group.deleted", WebhookDataGroup> | AtlasWebhookEnvelope<"group.member_added", WebhookDataGroupMember> | AtlasWebhookEnvelope<"group.member_removed", WebhookDataGroupMember> | AtlasWebhookEnvelope<"group.updated", WebhookDataGroup> | AtlasWebhookEnvelope<"iga_activation.started", WebhookDataIga> | AtlasWebhookEnvelope<"iga_campaign.closed", WebhookDataIga> | AtlasWebhookEnvelope<"iga_campaign.launched", WebhookDataIga> | AtlasWebhookEnvelope<"iga_campaign.reminder", WebhookDataIga> | AtlasWebhookEnvelope<"iga_grant.created", WebhookDataIga> | AtlasWebhookEnvelope<"iga_grant.revoked", WebhookDataIga> | AtlasWebhookEnvelope<"iga_request.approval_needed", WebhookDataIga> | AtlasWebhookEnvelope<"iga_request.created", WebhookDataIga> | AtlasWebhookEnvelope<"iga_request.decided", WebhookDataIga> | AtlasWebhookEnvelope<"iga_request.escalated", WebhookDataIga> | AtlasWebhookEnvelope<"iga_user.offboarded", WebhookDataIga> | AtlasWebhookEnvelope<"iga_user.reconciled", WebhookDataIga> | AtlasWebhookEnvelope<"iga_violation.detected", WebhookDataIga> | AtlasWebhookEnvelope<"invitation.accepted", WebhookDataInstanceInvitation> | AtlasWebhookEnvelope<"invitation.created", WebhookDataInstanceInvitation> | AtlasWebhookEnvelope<"invitation.revoked", WebhookDataInstanceInvitation> | AtlasWebhookEnvelope<"machine.enrolled", WebhookDataMachine> | AtlasWebhookEnvelope<"machine.revoked", WebhookDataMachine> | AtlasWebhookEnvelope<"machine.updated", WebhookDataMachine> | AtlasWebhookEnvelope<"mcp_gateway.tool_changed", WebhookDataMcpToolChange> | AtlasWebhookEnvelope<"message.rate_limited", WebhookDataSecuritySignal> | AtlasWebhookEnvelope<"mfa_factor.quarantined", WebhookDataSecuritySignal> | AtlasWebhookEnvelope<"organization.created", WebhookDataOrganization> | AtlasWebhookEnvelope<"organization.deleted", WebhookDataOrganization> | AtlasWebhookEnvelope<"organization.it_alert", WebhookDataOrgItAlert> | AtlasWebhookEnvelope<"organization.updated", WebhookDataOrganization> | AtlasWebhookEnvelope<"organization_domain.created", WebhookDataOrgDomain> | AtlasWebhookEnvelope<"organization_domain.deleted", WebhookDataOrgDomain> | AtlasWebhookEnvelope<"organization_domain.updated", WebhookDataOrgDomain> | AtlasWebhookEnvelope<"organization_invitation.accepted", WebhookDataInvitation> | AtlasWebhookEnvelope<"organization_invitation.created", WebhookDataInvitation> | AtlasWebhookEnvelope<"organization_invitation.declined", WebhookDataInvitation> | AtlasWebhookEnvelope<"organization_invitation.resent", WebhookDataInvitation> | AtlasWebhookEnvelope<"organization_invitation.revoked", WebhookDataInvitation> | AtlasWebhookEnvelope<"organization_membership.created", WebhookDataMembership> | AtlasWebhookEnvelope<"organization_membership.deleted", WebhookDataMembership> | AtlasWebhookEnvelope<"organization_membership.updated", WebhookDataMembership> | AtlasWebhookEnvelope<"organization_settings.updated", WebhookDataOrganizationSettings> | AtlasWebhookEnvelope<"permission.created", WebhookDataPermission> | AtlasWebhookEnvelope<"permission.deleted", WebhookDataPermission> | AtlasWebhookEnvelope<"permission.updated", WebhookDataPermission> | AtlasWebhookEnvelope<"policy.imposed", WebhookDataDirective> | AtlasWebhookEnvelope<"policy.version_published", WebhookDataPolicyVersionPublished> | AtlasWebhookEnvelope<"privacy_request.completed", WebhookDataPrivacyRequest> | AtlasWebhookEnvelope<"privacy_request.updated", WebhookDataPrivacyRequest> | AtlasWebhookEnvelope<"risky_user.updated", WebhookDataSecuritySignal> | AtlasWebhookEnvelope<"role.created", WebhookDataRole> | AtlasWebhookEnvelope<"role.deleted", WebhookDataRole> | AtlasWebhookEnvelope<"role.updated", WebhookDataRole> | AtlasWebhookEnvelope<"scim_group.created", WebhookDataScimGroup> | AtlasWebhookEnvelope<"scim_group.deleted", WebhookDataScimGroup> | AtlasWebhookEnvelope<"scim_group.member_added", WebhookDataScimGroupMember> | AtlasWebhookEnvelope<"scim_group.member_removed", WebhookDataScimGroupMember> | AtlasWebhookEnvelope<"scim_group.updated", WebhookDataScimGroup> | AtlasWebhookEnvelope<"scim_token.created", WebhookDataScimToken> | AtlasWebhookEnvelope<"scim_token.revoked", WebhookDataScimToken> | AtlasWebhookEnvelope<"secret_key.expiring", WebhookDataSecretKeyExpiring> | AtlasWebhookEnvelope<"secret_key.revoked", WebhookDataSecretKeyExpiring> | AtlasWebhookEnvelope<"session.created", WebhookDataSession> | AtlasWebhookEnvelope<"session.expired", WebhookDataSession> | AtlasWebhookEnvelope<"session.impersonation_started", WebhookDataSecuritySignal> | AtlasWebhookEnvelope<"session.pending", WebhookDataSession> | AtlasWebhookEnvelope<"session.revoked", WebhookDataSession> | AtlasWebhookEnvelope<"session.updated", WebhookDataSession> | AtlasWebhookEnvelope<"signing_key.activated", WebhookDataSigningKey> | AtlasWebhookEnvelope<"signing_key.staged", WebhookDataSigningKey> | AtlasWebhookEnvelope<"sms.created", WebhookDataSmsMessage> | AtlasWebhookEnvelope<"sso_connection.activated", WebhookDataSsoConnection> | AtlasWebhookEnvelope<"sso_connection.created", WebhookDataSsoConnection> | AtlasWebhookEnvelope<"sso_connection.deleted", WebhookDataSsoConnection> | AtlasWebhookEnvelope<"sso_connection.updated", WebhookDataSsoConnection> | AtlasWebhookEnvelope<"sso_onboarding_ticket.completed", WebhookDataSsoOnboardingTicket> | AtlasWebhookEnvelope<"status_incident.created", WebhookDataStatusIncident> | AtlasWebhookEnvelope<"status_incident.resolved", WebhookDataStatusIncident> | AtlasWebhookEnvelope<"status_incident.updated", WebhookDataStatusIncident> | AtlasWebhookEnvelope<"subscription.created", WebhookDataSubscription> | AtlasWebhookEnvelope<"subscription.deleted", WebhookDataSubscription> | AtlasWebhookEnvelope<"subscription.updated", WebhookDataSubscription> | AtlasWebhookEnvelope<"team.created", WebhookDataTeam> | AtlasWebhookEnvelope<"team.deleted", WebhookDataTeam> | AtlasWebhookEnvelope<"team.updated", WebhookDataTeam> | AtlasWebhookEnvelope<"team_membership.created", WebhookDataTeamMembership> | AtlasWebhookEnvelope<"team_membership.deleted", WebhookDataTeamMembership> | AtlasWebhookEnvelope<"temporary_access.issued", WebhookDataSecuritySignal> | AtlasWebhookEnvelope<"temporary_access.used", WebhookDataSecuritySignal> | AtlasWebhookEnvelope<"uma.request_decided", WebhookDataUmaRequest> | AtlasWebhookEnvelope<"uma.request_submitted", WebhookDataUmaRequest> | AtlasWebhookEnvelope<"user.anonymous_linked", WebhookDataAnonymousLink> | AtlasWebhookEnvelope<"user.app_roles_updated", WebhookDataUserAppRoles> | AtlasWebhookEnvelope<"user.banned", WebhookDataUser> | AtlasWebhookEnvelope<"user.contained", WebhookDataSecuritySignal> | AtlasWebhookEnvelope<"user.created", WebhookDataUser> | AtlasWebhookEnvelope<"user.data_export_requested", WebhookDataSubjectRequest> | AtlasWebhookEnvelope<"user.deactivated", WebhookDataUserDeactivated> | AtlasWebhookEnvelope<"user.deleted", WebhookDataUserDeleted> | AtlasWebhookEnvelope<"user.deletion_canceled", WebhookDataUserDeletionSchedule> | AtlasWebhookEnvelope<"user.deletion_requested", WebhookDataSubjectRequest> | AtlasWebhookEnvelope<"user.deletion_scheduled", WebhookDataUserDeletionSchedule> | AtlasWebhookEnvelope<"user.graduated", WebhookDataUser> | AtlasWebhookEnvelope<"user.locked", WebhookDataUserLocked> | AtlasWebhookEnvelope<"user.merged", WebhookDataUserMerged> | AtlasWebhookEnvelope<"user.parental_consent_declined", WebhookDataMinorStatus> | AtlasWebhookEnvelope<"user.parental_consent_granted", WebhookDataMinorStatus> | AtlasWebhookEnvelope<"user.parental_consent_required", WebhookDataMinorStatus> | AtlasWebhookEnvelope<"user.policy_accepted", WebhookDataPolicyAcceptance> | AtlasWebhookEnvelope<"user.reactivated", WebhookDataUserReactivation> | AtlasWebhookEnvelope<"user.referral_attributed", WebhookDataUserReferral> | AtlasWebhookEnvelope<"user.referral_resolved", WebhookDataUser> | AtlasWebhookEnvelope<"user.released", WebhookDataSecuritySignal> | AtlasWebhookEnvelope<"user.required_action_cleared", WebhookDataRequiredAction> | AtlasWebhookEnvelope<"user.required_action_completed", WebhookDataRequiredAction> | AtlasWebhookEnvelope<"user.required_action_requested", WebhookDataRequiredAction> | AtlasWebhookEnvelope<"user.suspended", WebhookDataDirective> | AtlasWebhookEnvelope<"user.unbanned", WebhookDataUser> | AtlasWebhookEnvelope<"user.unsuspended", WebhookDataUserUnsuspended> | AtlasWebhookEnvelope<"user.updated", WebhookDataUser> | AtlasWebhookEnvelope<"waitlist_entry.created", WebhookDataWaitlistEntry> | AtlasWebhookEnvelope<"waitlist_entry.updated", WebhookDataWaitlistEntry> | AtlasWebhookEnvelope<"webhook.test", WebhookDataTest> | AtlasWebhookEnvelope<"webhook_endpoint.disabled", WebhookDataDeliveryHealth> | AtlasWebhookEnvelope<"webhook_endpoint.failing", WebhookDataDeliveryHealth> | AtlasWebhookEnvelope<"webhook_endpoint.recovered", WebhookDataDeliveryHealth> | AtlasWebhookEnvelope<"workflow.approval_decided", WebhookDataWorkflow> | AtlasWebhookEnvelope<"workflow.approval_needed", WebhookDataWorkflow> | AtlasWebhookEnvelope<"workflow.run_failed", WebhookDataWorkflow> | AtlasWebhookEnvelope<"workflow.run_succeeded", WebhookDataWorkflow>;
+export type AtlasWebhookEventType = AtlasWebhookEvent['type'];
+/** The event names, sorted. */
+export declare const ATLAS_WEBHOOK_EVENT_TYPES: readonly ["access_policy.would_block", "agent.access_decided", "agent.access_requested", "agent.access_revoked", "agent.anomaly", "agent.expiring", "agent.sponsor_changed", "api_key.created", "api_key.expiring", "api_key.limit_reached", "api_key.revoked", "api_key.updated", "app_role.created", "app_role.deleted", "app_role.updated", "billing_coupon.redeemed", "billing_credit.granted", "billing_dunning.notice", "billing_invoice.payment_failed", "billing_subscription.canceled", "billing_subscription.created", "billing_subscription.suspended", "billing_subscription.updated", "billing_trial.ended", "billing_trial.started", "billing_trial.will_end", "connection.reauthorization_required", "connection.recovered", "connection.refresh_failed", "connection.revoked", "connection.scopes_changed", "connection.trigger_fired", "data_subject_request.fulfilled", "data_subject_request.rejected", "data_subject_request.scheduled", "delivery_target.disabled", "delivery_target.failing", "delivery_target.recovered", "device.noncompliant", "device.posture_changed", "device_integration.sync_failed", "email.created", "entitlement.created", "entitlement.deleted", "entitlement.updated", "entitlement_override.created", "entitlement_override.deleted", "entitlement_override.expired", "feature_flag.changed", "grant.revoked", "group.created", "group.deleted", "group.member_added", "group.member_removed", "group.updated", "iga_activation.started", "iga_campaign.closed", "iga_campaign.launched", "iga_campaign.reminder", "iga_grant.created", "iga_grant.revoked", "iga_request.approval_needed", "iga_request.created", "iga_request.decided", "iga_request.escalated", "iga_user.offboarded", "iga_user.reconciled", "iga_violation.detected", "invitation.accepted", "invitation.created", "invitation.revoked", "machine.enrolled", "machine.revoked", "machine.updated", "mcp_gateway.tool_changed", "message.rate_limited", "mfa_factor.quarantined", "organization.created", "organization.deleted", "organization.it_alert", "organization.updated", "organization_domain.created", "organization_domain.deleted", "organization_domain.updated", "organization_invitation.accepted", "organization_invitation.created", "organization_invitation.declined", "organization_invitation.resent", "organization_invitation.revoked", "organization_membership.created", "organization_membership.deleted", "organization_membership.updated", "organization_settings.updated", "permission.created", "permission.deleted", "permission.updated", "policy.imposed", "policy.version_published", "privacy_request.completed", "privacy_request.updated", "risky_user.updated", "role.created", "role.deleted", "role.updated", "scim_group.created", "scim_group.deleted", "scim_group.member_added", "scim_group.member_removed", "scim_group.updated", "scim_token.created", "scim_token.revoked", "secret_key.expiring", "secret_key.revoked", "session.created", "session.expired", "session.impersonation_started", "session.pending", "session.revoked", "session.updated", "signing_key.activated", "signing_key.staged", "sms.created", "sso_connection.activated", "sso_connection.created", "sso_connection.deleted", "sso_connection.updated", "sso_onboarding_ticket.completed", "status_incident.created", "status_incident.resolved", "status_incident.updated", "subscription.created", "subscription.deleted", "subscription.updated", "team.created", "team.deleted", "team.updated", "team_membership.created", "team_membership.deleted", "temporary_access.issued", "temporary_access.used", "uma.request_decided", "uma.request_submitted", "user.anonymous_linked", "user.app_roles_updated", "user.banned", "user.contained", "user.created", "user.data_export_requested", "user.deactivated", "user.deleted", "user.deletion_canceled", "user.deletion_requested", "user.deletion_scheduled", "user.graduated", "user.locked", "user.merged", "user.parental_consent_declined", "user.parental_consent_granted", "user.parental_consent_required", "user.policy_accepted", "user.reactivated", "user.referral_attributed", "user.referral_resolved", "user.released", "user.required_action_cleared", "user.required_action_completed", "user.required_action_requested", "user.suspended", "user.unbanned", "user.unsuspended", "user.updated", "waitlist_entry.created", "waitlist_entry.updated", "webhook.test", "webhook_endpoint.disabled", "webhook_endpoint.failing", "webhook_endpoint.recovered", "workflow.approval_decided", "workflow.approval_needed", "workflow.run_failed", "workflow.run_succeeded"];