@atlasauth/types 0.13.0 → 0.15.0

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @atlasauth/types changelog
 
+## 0.15.0 — 2026-11-12
+
+- New webhook events (connection.provider_event, connection.owner_changed, impersonation.started/ended, risk.elevated), session device fields, has_passkey.
+
+## 0.14.0 — 2026-11-11
+
+- New events `oauth_client.status_changed`, `sign_in.approval_requested`, `session.impersonation_ended`, `connection.expiring`; connection `refresh_expires_at` and external owners.
+
 ## 0.13.0 — 2026-11-05
 
 ### Added

package/dist/resources.d.ts

@@ -45,6 +45,8 @@ export interface User {
     image_url: string | null;
     public_metadata: Metadata;
     mfa_enabled: boolean;
+    /** Whether the user holds at least one passkey. */
+    has_passkey?: boolean;
     banned: boolean;
     locked: boolean;
     /** Epoch milliseconds, or null if never signed in. */

package/dist/session.d.ts

@@ -46,6 +46,15 @@ export interface SessionClaims {
     auth_time?: number;
     amr?: string[];
     acr?: string;
+    /**
+     * (opt-in, `session.includeRiskClaim`) the session's advisory risk
+     * assessment. Informs the app's own decisions; never a verdict from Atlas.
+     */
+    risk?: {
+        score: number;
+        level: 'low' | 'medium' | 'high';
+        reasons: string[];
+    };
     /**
      * §P0-3 (opt-in, `session.includeOrgsClaim`) — the user's organization
      * memberships, size-bounded so the token stays small: at most N orgs, `pub`

package/dist/verify.d.ts

@@ -95,5 +95,5 @@ export interface AuthorizedSession {
 }
 export type VerifyResult = AuthorizedSession | {
     ok: false;
-    reason: 'malformed' | 'invalid' | 'no_keys' | 'unauthorized_party';
+    reason: 'malformed' | 'invalid' | 'no_keys' | 'unauthorized_party' | 'revoked' | 'revocation_unavailable';
 };

package/dist/webhooks.d.ts

@@ -12,7 +12,7 @@
  * canonical names (`resource.action`, snake case) first, then the deprecated
  * spellings still accepted until 2027-10-23.
  */
-export type WebhookEvent = 'user.created' | 'user.updated' | 'user.anonymous_linked' | 'user.referral_attributed' | 'user.referral_resolved' | 'user.deleted' | 'user.banned' | 'user.unbanned' | 'user.locked' | 'user.deactivated' | 'user.reactivated' | 'user.graduated' | 'user.merged' | 'user.policy_accepted' | 'user.required_action_requested' | 'user.required_action_completed' | 'user.required_action_cleared' | 'group.created' | 'group.updated' | 'group.deleted' | 'group.member_added' | 'group.member_removed' | 'policy.version_published' | 'secret_key.expiring' | 'api_key.expiring' | 'secret_key.revoked' | 'signing_key.staged' | 'signing_key.activated' | 'organization.it_alert' | 'connection.refresh_failed' | 'connection.revoked' | 'connection.reauthorization_required' | 'connection.scopes_changed' | 'connection.recovered' | 'status_incident.created' | 'status_incident.updated' | 'status_incident.resolved' | 'policy.imposed' | 'user.suspended' | 'user.unsuspended' | 'session.created' | 'session.revoked' | 'session.pending' | 'session.updated' | 'session.expired' | 'grant.revoked' | 'email.created' | 'sms.created' | 'organization.created' | 'organization.updated' | 'organization.deleted' | 'organization_membership.created' | 'organization_membership.updated' | 'organization_membership.deleted' | 'organization_invitation.created' | 'organization_invitation.accepted' | 'organization_invitation.revoked' | 'organization_invitation.declined' | 'organization_invitation.resent' | 'invitation.created' | 'invitation.accepted' | 'invitation.revoked' | 'team.created' | 'team.updated' | 'team.deleted' | 'team_membership.created' | 'team_membership.deleted' | 'app_role.created' | 'app_role.updated' | 'app_role.deleted' | 'user.app_roles_updated' | 'role.created' | 'role.updated' | 'role.deleted' | 'permission.created' | 'permission.updated' | 'permission.deleted' | 'organization_domain.created' | 'organization_domain.updated' | 'organization_domain.deleted' | 'organization_settings.updated' | 'waitlist_entry.created' | 'waitlist_entry.updated' | 'subscription.created' | 'subscription.updated' | 'subscription.deleted' | 'entitlement.created' | 'entitlement.updated' | 'entitlement.deleted' | 'billing_subscription.created' | 'billing_subscription.updated' | 'billing_subscription.canceled' | 'billing_invoice.payment_failed' | 'billing_trial.started' | 'billing_trial.will_end' | 'billing_trial.ended' | 'billing_dunning.notice' | 'billing_subscription.suspended' | 'billing_credit.granted' | 'billing_coupon.redeemed' | 'entitlement_override.created' | 'entitlement_override.deleted' | 'entitlement_override.expired' | 'scim_token.created' | 'scim_token.revoked' | 'api_key.revoked' | 'api_key.created' | 'api_key.updated' | 'api_key.limit_reached' | 'sso_connection.created' | 'sso_connection.updated' | 'sso_connection.deleted' | 'sso_connection.activated' | 'sso_onboarding_ticket.completed' | 'scim_group.created' | 'scim_group.updated' | 'scim_group.deleted' | 'scim_group.member_added' | 'scim_group.member_removed' | 'user.data_export_requested' | 'user.deletion_requested' | 'data_subject_request.scheduled' | 'data_subject_request.fulfilled' | 'data_subject_request.rejected' | 'privacy_request.updated' | 'privacy_request.completed' | 'access_policy.would_block' | 'message.rate_limited' | 'session.impersonation_started' | 'device.posture_changed' | 'device.noncompliant' | 'device_integration.sync_failed' | 'user.contained' | 'user.released' | 'risky_user.updated' | 'temporary_access.issued' | 'temporary_access.used' | 'mfa_factor.quarantined' | 'machine.enrolled' | 'machine.revoked' | 'machine.updated' | 'machine_membership.created' | 'machine_membership.updated' | 'machine_membership.deleted' | 'agent.access_requested' | 'agent.access_decided' | 'uma.request_submitted' | 'uma.request_decided' | 'agent.access_revoked' | 'mcp_gateway.tool_changed' | 'connection.trigger_fired' | 'agent.anomaly' | 'agent.expiring' | 'agent.sponsor_changed' | 'iga_request.created' | 'iga_request.approval_needed' | 'iga_request.decided' | 'iga_request.escalated' | 'iga_activation.started' | 'feature_flag.changed' | 'workflow.approval_needed' | 'workflow.approval_decided' | 'workflow.run_succeeded' | 'workflow.run_failed' | 'iga_grant.created' | 'iga_grant.revoked' | 'iga_campaign.launched' | 'iga_campaign.reminder' | 'iga_campaign.closed' | 'iga_violation.detected' | 'iga_user.reconciled' | 'iga_user.offboarded' | 'user.deletion_scheduled' | 'user.deletion_canceled' | 'webhook_endpoint.failing' | 'webhook_endpoint.disabled' | 'webhook_endpoint.recovered' | 'delivery_target.failing' | 'delivery_target.disabled' | 'delivery_target.recovered' | 'webhook.test' | 'session.ended' | 'session.removed' | 'organizationMembership.created' | 'organizationMembership.updated' | 'organizationMembership.deleted' | 'organization.membership.deleted' | 'organizationInvitation.created' | 'organizationInvitation.accepted' | 'organizationInvitation.revoked' | 'organizationInvitation.declined' | 'organizationInvitation.resent' | 'teamMembership.created' | 'teamMembership.deleted' | 'appRole.created' | 'appRole.updated' | 'appRole.deleted' | 'organizationDomain.created' | 'organizationDomain.updated' | 'organizationDomain.deleted' | 'organization.settings.updated' | 'waitlistEntry.created' | 'waitlistEntry.updated' | 'billing.subscription.created' | 'billing.subscription.updated' | 'billing.subscription.canceled' | 'billing.invoice.payment_failed' | 'billing.trial.started' | 'billing.trial.will_end' | 'billing.trial.ended' | 'entitlement.override.created' | 'entitlement.override.deleted' | 'entitlement.override.expired' | 'scimToken.created' | 'scimToken.revoked' | 'ssoConnection.created' | 'ssoConnection.updated' | 'ssoConnection.deleted' | 'user.data_export.requested' | 'user.deletion_cancelled';
+export type WebhookEvent = 'user.created' | 'user.updated' | 'user.anonymous_linked' | 'user.referral_attributed' | 'user.referral_resolved' | 'user.attributed' | 'user.deleted' | 'user.banned' | 'user.unbanned' | 'user.locked' | 'user.deactivated' | 'user.reactivated' | 'user.graduated' | 'user.merged' | 'user.policy_accepted' | 'user.required_action_requested' | 'user.required_action_completed' | 'user.required_action_cleared' | 'group.created' | 'group.updated' | 'group.deleted' | 'group.member_added' | 'group.member_removed' | 'policy.version_published' | 'secret_key.expiring' | 'api_key.expiring' | 'secret_key.revoked' | 'signing_key.staged' | 'signing_key.activated' | 'organization.it_alert' | 'connection.refresh_failed' | 'connection.revoked' | 'connection.reauthorization_required' | 'connection.scopes_changed' | 'connection.recovered' | 'connection.expiring' | 'connection.provider_event' | 'connection.owner_changed' | 'status_incident.created' | 'status_incident.updated' | 'status_incident.resolved' | 'policy.imposed' | 'user.suspended' | 'user.unsuspended' | 'session.created' | 'session.revoked' | 'session.pending' | 'session.updated' | 'session.expired' | 'risk.elevated' | 'grant.revoked' | 'email.created' | 'sms.created' | 'organization.created' | 'organization.updated' | 'organization.deleted' | 'organization_membership.created' | 'organization_membership.updated' | 'organization_membership.deleted' | 'organization_invitation.created' | 'organization_invitation.accepted' | 'organization_invitation.revoked' | 'organization_invitation.declined' | 'organization_invitation.resent' | 'invitation.created' | 'invitation.accepted' | 'invitation.revoked' | 'team.created' | 'team.updated' | 'team.deleted' | 'team_membership.created' | 'team_membership.deleted' | 'app_role.created' | 'app_role.updated' | 'app_role.deleted' | 'user.app_roles_updated' | 'role.created' | 'role.updated' | 'role.deleted' | 'permission.created' | 'permission.updated' | 'permission.deleted' | 'organization_domain.created' | 'organization_domain.updated' | 'organization_domain.deleted' | 'organization_settings.updated' | 'waitlist_entry.created' | 'waitlist_entry.updated' | 'subscription.created' | 'subscription.updated' | 'subscription.deleted' | 'entitlement.created' | 'entitlement.updated' | 'entitlement.deleted' | 'billing_subscription.created' | 'billing_subscription.updated' | 'billing_subscription.canceled' | 'billing_invoice.payment_failed' | 'billing_trial.started' | 'billing_trial.will_end' | 'billing_trial.ended' | 'billing_dunning.notice' | 'billing_subscription.suspended' | 'billing_credit.granted' | 'billing_coupon.redeemed' | 'entitlement_override.created' | 'entitlement_override.deleted' | 'entitlement_override.expired' | 'scim_token.created' | 'scim_token.revoked' | 'api_key.revoked' | 'api_key.created' | 'api_key.updated' | 'api_key.limit_reached' | 'sso_connection.created' | 'sso_connection.updated' | 'sso_connection.deleted' | 'sso_connection.activated' | 'sso_onboarding_ticket.completed' | 'scim_group.created' | 'scim_group.updated' | 'scim_group.deleted' | 'scim_group.member_added' | 'scim_group.member_removed' | 'user.data_export_requested' | 'user.deletion_requested' | 'data_subject_request.scheduled' | 'data_subject_request.fulfilled' | 'data_subject_request.rejected' | 'privacy_request.updated' | 'privacy_request.completed' | 'access_policy.would_block' | 'message.rate_limited' | 'oauth_client.status_changed' | 'session.impersonation_started' | 'session.impersonation_ended' | 'impersonation.started' | 'impersonation.ended' | 'device.posture_changed' | 'device.noncompliant' | 'device_integration.sync_failed' | 'user.contained' | 'user.released' | 'risky_user.updated' | 'temporary_access.issued' | 'temporary_access.used' | 'mfa_factor.quarantined' | 'machine.enrolled' | 'machine.revoked' | 'machine.updated' | 'machine_membership.created' | 'machine_membership.updated' | 'machine_membership.deleted' | 'agent.access_requested' | 'agent.access_decided' | 'uma.request_submitted' | 'uma.request_decided' | 'agent.access_revoked' | 'mcp_gateway.tool_changed' | 'connection.trigger_fired' | 'agent.anomaly' | 'agent.expiring' | 'agent.sponsor_changed' | 'iga_request.created' | 'iga_request.approval_needed' | 'iga_request.decided' | 'iga_request.escalated' | 'iga_activation.started' | 'feature_flag.changed' | 'workflow.approval_needed' | 'workflow.approval_decided' | 'workflow.run_succeeded' | 'workflow.run_failed' | 'iga_grant.created' | 'iga_grant.revoked' | 'iga_campaign.launched' | 'iga_campaign.reminder' | 'iga_campaign.closed' | 'iga_violation.detected' | 'iga_user.reconciled' | 'iga_user.offboarded' | 'user.deletion_scheduled' | 'user.deletion_canceled' | 'webhook_endpoint.failing' | 'webhook_endpoint.disabled' | 'webhook_endpoint.recovered' | 'delivery_target.failing' | 'delivery_target.disabled' | 'delivery_target.recovered' | 'webhook.test' | 'session.ended' | 'session.removed' | 'organizationMembership.created' | 'organizationMembership.updated' | 'organizationMembership.deleted' | 'organization.membership.deleted' | 'organizationInvitation.created' | 'organizationInvitation.accepted' | 'organizationInvitation.revoked' | 'organizationInvitation.declined' | 'organizationInvitation.resent' | 'teamMembership.created' | 'teamMembership.deleted' | 'appRole.created' | 'appRole.updated' | 'appRole.deleted' | 'organizationDomain.created' | 'organizationDomain.updated' | 'organizationDomain.deleted' | 'organization.settings.updated' | 'waitlistEntry.created' | 'waitlistEntry.updated' | 'billing.subscription.created' | 'billing.subscription.updated' | 'billing.subscription.canceled' | 'billing.invoice.payment_failed' | 'billing.trial.started' | 'billing.trial.will_end' | 'billing.trial.ended' | 'entitlement.override.created' | 'entitlement.override.deleted' | 'entitlement.override.expired' | 'scimToken.created' | 'scimToken.revoked' | 'ssoConnection.created' | 'ssoConnection.updated' | 'ssoConnection.deleted' | 'user.data_export.requested' | 'user.deletion_cancelled';
 /**
  * §12.2 payload. Full resource objects, not diffs — "consumers never need a
  * read-back call", which also means a consumer processing events out of order

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlasauth/types",
-  "version": "0.13.0",
+  "version": "0.15.0",
   "description": "Shared public TypeScript types for Atlas — the Atlas peer of @clerk/types. Dependency-free, runtime-free: import type { User } from '@atlasauth/types' pulls in no runtime SDK.",
   "types": "./dist/index.d.ts",
   "exports": {
@@ -11,7 +11,7 @@
   },
   "devDependencies": {
     "typescript": "^5.6.3",
-    "@atlasauth/localizations": "0.15.0"
+    "@atlasauth/localizations": "0.19.0"
   },
   "publishConfig": {
     "access": "public"