@faable/auth-sdk 2.7.107 → 2.7.108

package/dist/api/api-types.d.ts

@@ -114,3 +114,28 @@ export type UserUserCreate = components["schemas"]["UserUserCreate"];
 export type UserUserMetadata = components["schemas"]["UserUserMetadata"];
 export type UserUserMetadataUpdate = components["schemas"]["UserUserMetadataUpdate"];
 export type UsernamepasswordLoginBody = components["schemas"]["UsernamepasswordLoginBody"];
+export type WebhookCredentialsExportedPayload = components["schemas"]["WebhookCredentialsExportedPayload"];
+export type WebhookEvent = components["schemas"]["WebhookEvent"];
+export type WebhookEventAuthLogin = components["schemas"]["WebhookEventAuthLogin"];
+export type WebhookEventCredentialsExported = components["schemas"]["WebhookEventCredentialsExported"];
+export type WebhookEventOrganizationCreated = components["schemas"]["WebhookEventOrganizationCreated"];
+export type WebhookEventOrganizationDeleted = components["schemas"]["WebhookEventOrganizationDeleted"];
+export type WebhookEventOrganizationUpdated = components["schemas"]["WebhookEventOrganizationUpdated"];
+export type WebhookEventPing = components["schemas"]["WebhookEventPing"];
+export type WebhookEventTeamCreated = components["schemas"]["WebhookEventTeamCreated"];
+export type WebhookEventTeamDeleted = components["schemas"]["WebhookEventTeamDeleted"];
+export type WebhookEventTeamInviteAccepted = components["schemas"]["WebhookEventTeamInviteAccepted"];
+export type WebhookEventTeamInviteCreated = components["schemas"]["WebhookEventTeamInviteCreated"];
+export type WebhookEventTeamInviteRevoked = components["schemas"]["WebhookEventTeamInviteRevoked"];
+export type WebhookEventTeamMemberAdded = components["schemas"]["WebhookEventTeamMemberAdded"];
+export type WebhookEventTeamMemberRemoved = components["schemas"]["WebhookEventTeamMemberRemoved"];
+export type WebhookEventTeamMemberUpdated = components["schemas"]["WebhookEventTeamMemberUpdated"];
+export type WebhookEventTeamUpdated = components["schemas"]["WebhookEventTeamUpdated"];
+export type WebhookEventType = components["schemas"]["WebhookEventType"];
+export type WebhookEventUserCreated = components["schemas"]["WebhookEventUserCreated"];
+export type WebhookEventUserDeleted = components["schemas"]["WebhookEventUserDeleted"];
+export type WebhookEventUserUpdated = components["schemas"]["WebhookEventUserUpdated"];
+export type WebhookOrganizationPayload = components["schemas"]["WebhookOrganizationPayload"];
+export type WebhookTeamInvitePayload = components["schemas"]["WebhookTeamInvitePayload"];
+export type WebhookTeamMemberPayload = components["schemas"]["WebhookTeamMemberPayload"];
+export type WebhookTeamPayload = components["schemas"]["WebhookTeamPayload"];

package/dist/api/types.d.ts

@@ -7648,6 +7648,224 @@ export interface components {
         NotificationSubscriptionWebhookMetadataUpdate: {
             [key: string]: unknown;
         };
+        /** @description A notice: read the team with `GET /team/:team_id`. */
+        WebhookTeamPayload: {
+            team_id: string;
+        };
+        WebhookTeamMemberPayload: {
+            team_id: string;
+            user_id: string;
+            roles?: string[];
+            /** @description `team.member.added`: how they got in (`direct`, `invite_auto`, `invite_accepted`, `domain`). */
+            method?: string;
+            /** @description `team.member.updated`: the roles before the change. */
+            previous_roles?: string[];
+        };
+        WebhookTeamInvitePayload: {
+            team_id: string;
+            invite_id?: string;
+            email?: string;
+            user_id?: string;
+            inviter_user_id?: string;
+            roles?: string[];
+            /** @description `team.invite.revoked`: `revoked` by someone, `replaced` by a re-invite, or `declined` by the invitee. */
+            reason?: string;
+        };
+        /** @description A notice: read the organization with `GET /organization/:organization_id`. */
+        WebhookOrganizationPayload: {
+            organization_id: string;
+        };
+        WebhookCredentialsExportedPayload: {
+            account: string;
+            actor_user_id?: string;
+            actor_client_id?: string;
+            connection: string | null;
+            /** Format: date-time */
+            exported_at: string;
+        };
+        /** @description A user was created (signup, import or Management API). */
+        WebhookEventUserCreated: {
+            /** @description The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it. */
+            id: string;
+            /** @enum {string} */
+            type: "user.created";
+            /** @description When the event happened, in Unix milliseconds. */
+            produced_at: number;
+            payload: components["schemas"]["User"];
+        };
+        /** @description A user was updated. */
+        WebhookEventUserUpdated: {
+            /** @description The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it. */
+            id: string;
+            /** @enum {string} */
+            type: "user.updated";
+            /** @description When the event happened, in Unix milliseconds. */
+            produced_at: number;
+            payload: components["schemas"]["User"];
+        };
+        /** @description A user was deleted. */
+        WebhookEventUserDeleted: {
+            /** @description The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it. */
+            id: string;
+            /** @enum {string} */
+            type: "user.deleted";
+            /** @description When the event happened, in Unix milliseconds. */
+            produced_at: number;
+            payload: components["schemas"]["User"];
+        };
+        /** @description A user logged in. */
+        WebhookEventAuthLogin: {
+            /** @description The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it. */
+            id: string;
+            /** @enum {string} */
+            type: "auth.login";
+            /** @description When the event happened, in Unix milliseconds. */
+            produced_at: number;
+            payload: components["schemas"]["User"];
+        };
+        /** @description Someone exported the tenant's password hashes (`GET /user/export` with hashes). */
+        WebhookEventCredentialsExported: {
+            /** @description The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it. */
+            id: string;
+            /** @enum {string} */
+            type: "credentials.exported";
+            /** @description When the event happened, in Unix milliseconds. */
+            produced_at: number;
+            payload: components["schemas"]["WebhookCredentialsExportedPayload"];
+        };
+        /** @description A team was created. */
+        WebhookEventTeamCreated: {
+            /** @description The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it. */
+            id: string;
+            /** @enum {string} */
+            type: "team.created";
+            /** @description When the event happened, in Unix milliseconds. */
+            produced_at: number;
+            payload: components["schemas"]["WebhookTeamPayload"];
+        };
+        /** @description A team was updated. */
+        WebhookEventTeamUpdated: {
+            /** @description The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it. */
+            id: string;
+            /** @enum {string} */
+            type: "team.updated";
+            /** @description When the event happened, in Unix milliseconds. */
+            produced_at: number;
+            payload: components["schemas"]["WebhookTeamPayload"];
+        };
+        /** @description A team was deleted. */
+        WebhookEventTeamDeleted: {
+            /** @description The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it. */
+            id: string;
+            /** @enum {string} */
+            type: "team.deleted";
+            /** @description When the event happened, in Unix milliseconds. */
+            produced_at: number;
+            payload: components["schemas"]["WebhookTeamPayload"];
+        };
+        /** @description A user was added to a team. */
+        WebhookEventTeamMemberAdded: {
+            /** @description The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it. */
+            id: string;
+            /** @enum {string} */
+            type: "team.member.added";
+            /** @description When the event happened, in Unix milliseconds. */
+            produced_at: number;
+            payload: components["schemas"]["WebhookTeamMemberPayload"];
+        };
+        /** @description A team member's roles changed. */
+        WebhookEventTeamMemberUpdated: {
+            /** @description The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it. */
+            id: string;
+            /** @enum {string} */
+            type: "team.member.updated";
+            /** @description When the event happened, in Unix milliseconds. */
+            produced_at: number;
+            payload: components["schemas"]["WebhookTeamMemberPayload"];
+        };
+        /** @description A user was removed from a team (or left it). */
+        WebhookEventTeamMemberRemoved: {
+            /** @description The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it. */
+            id: string;
+            /** @enum {string} */
+            type: "team.member.removed";
+            /** @description When the event happened, in Unix milliseconds. */
+            produced_at: number;
+            payload: components["schemas"]["WebhookTeamMemberPayload"];
+        };
+        /** @description An invitation to join a team was created. */
+        WebhookEventTeamInviteCreated: {
+            /** @description The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it. */
+            id: string;
+            /** @enum {string} */
+            type: "team.invite.created";
+            /** @description When the event happened, in Unix milliseconds. */
+            produced_at: number;
+            payload: components["schemas"]["WebhookTeamInvitePayload"];
+        };
+        /** @description A pending team invitation was revoked. */
+        WebhookEventTeamInviteRevoked: {
+            /** @description The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it. */
+            id: string;
+            /** @enum {string} */
+            type: "team.invite.revoked";
+            /** @description When the event happened, in Unix milliseconds. */
+            produced_at: number;
+            payload: components["schemas"]["WebhookTeamInvitePayload"];
+        };
+        /** @description A team invitation was accepted. */
+        WebhookEventTeamInviteAccepted: {
+            /** @description The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it. */
+            id: string;
+            /** @enum {string} */
+            type: "team.invite.accepted";
+            /** @description When the event happened, in Unix milliseconds. */
+            produced_at: number;
+            payload: components["schemas"]["WebhookTeamInvitePayload"];
+        };
+        /** @description An organization was created. */
+        WebhookEventOrganizationCreated: {
+            /** @description The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it. */
+            id: string;
+            /** @enum {string} */
+            type: "organization.created";
+            /** @description When the event happened, in Unix milliseconds. */
+            produced_at: number;
+            payload: components["schemas"]["WebhookOrganizationPayload"];
+        };
+        /** @description An organization was updated (name, settings or admins). */
+        WebhookEventOrganizationUpdated: {
+            /** @description The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it. */
+            id: string;
+            /** @enum {string} */
+            type: "organization.updated";
+            /** @description When the event happened, in Unix milliseconds. */
+            produced_at: number;
+            payload: components["schemas"]["WebhookOrganizationPayload"];
+        };
+        /** @description An organization was deleted. Its teams are no longer in any organization; no `team.updated` is sent for them. */
+        WebhookEventOrganizationDeleted: {
+            /** @description The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it. */
+            id: string;
+            /** @enum {string} */
+            type: "organization.deleted";
+            /** @description When the event happened, in Unix milliseconds. */
+            produced_at: number;
+            payload: components["schemas"]["WebhookOrganizationPayload"];
+        };
+        /** @description Sent by `POST /notificationsubscription/:id/test` only, to check a receiver. */
+        WebhookEventPing: {
+            /** @description The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it. */
+            id: string;
+            /** @enum {string} */
+            type: "ping";
+            /** @description When the event happened, in Unix milliseconds. */
+            produced_at: number;
+            payload: Record<string, never>;
+        };
+        WebhookEventType: "user.created" | "user.updated" | "user.deleted" | "auth.login" | "credentials.exported" | "team.created" | "team.updated" | "team.deleted" | "team.member.added" | "team.member.updated" | "team.member.removed" | "team.invite.created" | "team.invite.revoked" | "team.invite.accepted" | "organization.created" | "organization.updated" | "organization.deleted" | "ping";
+        /** @description The JSON body of a webhook delivery. Verify `x-faable-signature` before trusting it: HMAC-SHA256 of `${x-faable-timestamp}.${raw body}` with the subscription secret. */
+        WebhookEvent: components["schemas"]["WebhookEventUserCreated"] | components["schemas"]["WebhookEventUserUpdated"] | components["schemas"]["WebhookEventUserDeleted"] | components["schemas"]["WebhookEventAuthLogin"] | components["schemas"]["WebhookEventCredentialsExported"] | components["schemas"]["WebhookEventTeamCreated"] | components["schemas"]["WebhookEventTeamUpdated"] | components["schemas"]["WebhookEventTeamDeleted"] | components["schemas"]["WebhookEventTeamMemberAdded"] | components["schemas"]["WebhookEventTeamMemberUpdated"] | components["schemas"]["WebhookEventTeamMemberRemoved"] | components["schemas"]["WebhookEventTeamInviteCreated"] | components["schemas"]["WebhookEventTeamInviteRevoked"] | components["schemas"]["WebhookEventTeamInviteAccepted"] | components["schemas"]["WebhookEventOrganizationCreated"] | components["schemas"]["WebhookEventOrganizationUpdated"] | components["schemas"]["WebhookEventOrganizationDeleted"] | components["schemas"]["WebhookEventPing"];
         /** @description Log */
         Log: {
             /** @description Log ID */

package/dist/version.js

@@ -9,13 +9,13 @@
 // login pages could not import the SDK at all. Same pattern as auth-js.
 //
 // The sentinels MUST stay byte-identical to the `from` values in `.releaserc`.
-export const version = "2.7.107";
+export const version = "2.7.108";
 // Short git SHA of the released commit. The version dates a build; this names
 // the exact tree, so a canonical log line or an audit entry leads straight to
 // `git show <sha>`. Deliberately NOT hex: an unreleased build (dev, a local
 // link) cannot be mistaken for a real commit — auth only records values that
 // look like a SHA, and this one never will.
-export const commit = "720cd27";
+export const commit = "e70d451";
 // What this SDK writes in `x-faable-client`. Exported for a consumer that
 // builds a strategy on its own (outside `FaableAuthApi`) and still wants the
 // token request attributed — a bare `authClientCredentials` stamps only what

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@faable/auth-sdk",
-  "version": "2.7.107",
+  "version": "2.7.108",
   "author": "Marc Pomar <marc@faable.com>",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/spec/openapi.json

@@ -3,7 +3,7 @@
   "info": {
     "title": "@faablecloud/auth",
     "description": "Auth Platform made by Faable. Manage Users and Roles",
-    "version": "2.78.2",
+    "version": "2.79.0",
     "license": {
       "name": "private",
       "url": "https://faable.com/docs/platform/privacy-policy"
@@ -6768,6 +6768,822 @@
         "additionalProperties": true,
         "description": "Metadata update"
       },
+      "WebhookTeamPayload": {
+        "type": "object",
+        "required": [
+          "team_id"
+        ],
+        "properties": {
+          "team_id": {
+            "type": "string"
+          }
+        },
+        "description": "A notice: read the team with `GET /team/:team_id`."
+      },
+      "WebhookTeamMemberPayload": {
+        "type": "object",
+        "required": [
+          "team_id",
+          "user_id"
+        ],
+        "properties": {
+          "team_id": {
+            "type": "string"
+          },
+          "user_id": {
+            "type": "string"
+          },
+          "roles": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "method": {
+            "type": "string",
+            "description": "`team.member.added`: how they got in (`direct`, `invite_auto`, `invite_accepted`, `domain`)."
+          },
+          "previous_roles": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "`team.member.updated`: the roles before the change."
+          }
+        }
+      },
+      "WebhookTeamInvitePayload": {
+        "type": "object",
+        "required": [
+          "team_id"
+        ],
+        "properties": {
+          "team_id": {
+            "type": "string"
+          },
+          "invite_id": {
+            "type": "string"
+          },
+          "email": {
+            "type": "string"
+          },
+          "user_id": {
+            "type": "string"
+          },
+          "inviter_user_id": {
+            "type": "string"
+          },
+          "roles": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "reason": {
+            "type": "string",
+            "description": "`team.invite.revoked`: `revoked` by someone, `replaced` by a re-invite, or `declined` by the invitee."
+          }
+        }
+      },
+      "WebhookOrganizationPayload": {
+        "type": "object",
+        "required": [
+          "organization_id"
+        ],
+        "properties": {
+          "organization_id": {
+            "type": "string"
+          }
+        },
+        "description": "A notice: read the organization with `GET /organization/:organization_id`."
+      },
+      "WebhookCredentialsExportedPayload": {
+        "type": "object",
+        "required": [
+          "account",
+          "connection",
+          "exported_at"
+        ],
+        "properties": {
+          "account": {
+            "type": "string"
+          },
+          "actor_user_id": {
+            "type": "string"
+          },
+          "actor_client_id": {
+            "type": "string"
+          },
+          "connection": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "exported_at": {
+            "type": "string",
+            "format": "date-time"
+          }
+        }
+      },
+      "WebhookEventUserCreated": {
+        "type": "object",
+        "required": [
+          "id",
+          "type",
+          "produced_at",
+          "payload"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it."
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "user.created"
+            ]
+          },
+          "produced_at": {
+            "type": "number",
+            "description": "When the event happened, in Unix milliseconds."
+          },
+          "payload": {
+            "$ref": "#/components/schemas/User"
+          }
+        },
+        "description": "A user was created (signup, import or Management API)."
+      },
+      "WebhookEventUserUpdated": {
+        "type": "object",
+        "required": [
+          "id",
+          "type",
+          "produced_at",
+          "payload"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it."
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "user.updated"
+            ]
+          },
+          "produced_at": {
+            "type": "number",
+            "description": "When the event happened, in Unix milliseconds."
+          },
+          "payload": {
+            "$ref": "#/components/schemas/User"
+          }
+        },
+        "description": "A user was updated."
+      },
+      "WebhookEventUserDeleted": {
+        "type": "object",
+        "required": [
+          "id",
+          "type",
+          "produced_at",
+          "payload"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it."
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "user.deleted"
+            ]
+          },
+          "produced_at": {
+            "type": "number",
+            "description": "When the event happened, in Unix milliseconds."
+          },
+          "payload": {
+            "$ref": "#/components/schemas/User"
+          }
+        },
+        "description": "A user was deleted."
+      },
+      "WebhookEventAuthLogin": {
+        "type": "object",
+        "required": [
+          "id",
+          "type",
+          "produced_at",
+          "payload"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it."
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "auth.login"
+            ]
+          },
+          "produced_at": {
+            "type": "number",
+            "description": "When the event happened, in Unix milliseconds."
+          },
+          "payload": {
+            "$ref": "#/components/schemas/User"
+          }
+        },
+        "description": "A user logged in."
+      },
+      "WebhookEventCredentialsExported": {
+        "type": "object",
+        "required": [
+          "id",
+          "type",
+          "produced_at",
+          "payload"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it."
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "credentials.exported"
+            ]
+          },
+          "produced_at": {
+            "type": "number",
+            "description": "When the event happened, in Unix milliseconds."
+          },
+          "payload": {
+            "$ref": "#/components/schemas/WebhookCredentialsExportedPayload"
+          }
+        },
+        "description": "Someone exported the tenant's password hashes (`GET /user/export` with hashes)."
+      },
+      "WebhookEventTeamCreated": {
+        "type": "object",
+        "required": [
+          "id",
+          "type",
+          "produced_at",
+          "payload"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it."
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "team.created"
+            ]
+          },
+          "produced_at": {
+            "type": "number",
+            "description": "When the event happened, in Unix milliseconds."
+          },
+          "payload": {
+            "$ref": "#/components/schemas/WebhookTeamPayload"
+          }
+        },
+        "description": "A team was created."
+      },
+      "WebhookEventTeamUpdated": {
+        "type": "object",
+        "required": [
+          "id",
+          "type",
+          "produced_at",
+          "payload"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it."
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "team.updated"
+            ]
+          },
+          "produced_at": {
+            "type": "number",
+            "description": "When the event happened, in Unix milliseconds."
+          },
+          "payload": {
+            "$ref": "#/components/schemas/WebhookTeamPayload"
+          }
+        },
+        "description": "A team was updated."
+      },
+      "WebhookEventTeamDeleted": {
+        "type": "object",
+        "required": [
+          "id",
+          "type",
+          "produced_at",
+          "payload"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it."
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "team.deleted"
+            ]
+          },
+          "produced_at": {
+            "type": "number",
+            "description": "When the event happened, in Unix milliseconds."
+          },
+          "payload": {
+            "$ref": "#/components/schemas/WebhookTeamPayload"
+          }
+        },
+        "description": "A team was deleted."
+      },
+      "WebhookEventTeamMemberAdded": {
+        "type": "object",
+        "required": [
+          "id",
+          "type",
+          "produced_at",
+          "payload"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it."
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "team.member.added"
+            ]
+          },
+          "produced_at": {
+            "type": "number",
+            "description": "When the event happened, in Unix milliseconds."
+          },
+          "payload": {
+            "$ref": "#/components/schemas/WebhookTeamMemberPayload"
+          }
+        },
+        "description": "A user was added to a team."
+      },
+      "WebhookEventTeamMemberUpdated": {
+        "type": "object",
+        "required": [
+          "id",
+          "type",
+          "produced_at",
+          "payload"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it."
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "team.member.updated"
+            ]
+          },
+          "produced_at": {
+            "type": "number",
+            "description": "When the event happened, in Unix milliseconds."
+          },
+          "payload": {
+            "$ref": "#/components/schemas/WebhookTeamMemberPayload"
+          }
+        },
+        "description": "A team member's roles changed."
+      },
+      "WebhookEventTeamMemberRemoved": {
+        "type": "object",
+        "required": [
+          "id",
+          "type",
+          "produced_at",
+          "payload"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it."
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "team.member.removed"
+            ]
+          },
+          "produced_at": {
+            "type": "number",
+            "description": "When the event happened, in Unix milliseconds."
+          },
+          "payload": {
+            "$ref": "#/components/schemas/WebhookTeamMemberPayload"
+          }
+        },
+        "description": "A user was removed from a team (or left it)."
+      },
+      "WebhookEventTeamInviteCreated": {
+        "type": "object",
+        "required": [
+          "id",
+          "type",
+          "produced_at",
+          "payload"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it."
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "team.invite.created"
+            ]
+          },
+          "produced_at": {
+            "type": "number",
+            "description": "When the event happened, in Unix milliseconds."
+          },
+          "payload": {
+            "$ref": "#/components/schemas/WebhookTeamInvitePayload"
+          }
+        },
+        "description": "An invitation to join a team was created."
+      },
+      "WebhookEventTeamInviteRevoked": {
+        "type": "object",
+        "required": [
+          "id",
+          "type",
+          "produced_at",
+          "payload"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it."
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "team.invite.revoked"
+            ]
+          },
+          "produced_at": {
+            "type": "number",
+            "description": "When the event happened, in Unix milliseconds."
+          },
+          "payload": {
+            "$ref": "#/components/schemas/WebhookTeamInvitePayload"
+          }
+        },
+        "description": "A pending team invitation was revoked."
+      },
+      "WebhookEventTeamInviteAccepted": {
+        "type": "object",
+        "required": [
+          "id",
+          "type",
+          "produced_at",
+          "payload"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it."
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "team.invite.accepted"
+            ]
+          },
+          "produced_at": {
+            "type": "number",
+            "description": "When the event happened, in Unix milliseconds."
+          },
+          "payload": {
+            "$ref": "#/components/schemas/WebhookTeamInvitePayload"
+          }
+        },
+        "description": "A team invitation was accepted."
+      },
+      "WebhookEventOrganizationCreated": {
+        "type": "object",
+        "required": [
+          "id",
+          "type",
+          "produced_at",
+          "payload"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it."
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "organization.created"
+            ]
+          },
+          "produced_at": {
+            "type": "number",
+            "description": "When the event happened, in Unix milliseconds."
+          },
+          "payload": {
+            "$ref": "#/components/schemas/WebhookOrganizationPayload"
+          }
+        },
+        "description": "An organization was created."
+      },
+      "WebhookEventOrganizationUpdated": {
+        "type": "object",
+        "required": [
+          "id",
+          "type",
+          "produced_at",
+          "payload"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it."
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "organization.updated"
+            ]
+          },
+          "produced_at": {
+            "type": "number",
+            "description": "When the event happened, in Unix milliseconds."
+          },
+          "payload": {
+            "$ref": "#/components/schemas/WebhookOrganizationPayload"
+          }
+        },
+        "description": "An organization was updated (name, settings or admins)."
+      },
+      "WebhookEventOrganizationDeleted": {
+        "type": "object",
+        "required": [
+          "id",
+          "type",
+          "produced_at",
+          "payload"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it."
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "organization.deleted"
+            ]
+          },
+          "produced_at": {
+            "type": "number",
+            "description": "When the event happened, in Unix milliseconds."
+          },
+          "payload": {
+            "$ref": "#/components/schemas/WebhookOrganizationPayload"
+          }
+        },
+        "description": "An organization was deleted. Its teams are no longer in any organization; no `team.updated` is sent for them."
+      },
+      "WebhookEventPing": {
+        "type": "object",
+        "required": [
+          "id",
+          "type",
+          "produced_at",
+          "payload"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The event id. Also the `x-faable-delivery` header, and the same on every retry: deduplicate by it."
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "ping"
+            ]
+          },
+          "produced_at": {
+            "type": "number",
+            "description": "When the event happened, in Unix milliseconds."
+          },
+          "payload": {
+            "type": "object",
+            "properties": {}
+          }
+        },
+        "description": "Sent by `POST /notificationsubscription/:id/test` only, to check a receiver."
+      },
+      "WebhookEventType": {
+        "anyOf": [
+          {
+            "type": "string",
+            "enum": [
+              "user.created"
+            ]
+          },
+          {
+            "type": "string",
+            "enum": [
+              "user.updated"
+            ]
+          },
+          {
+            "type": "string",
+            "enum": [
+              "user.deleted"
+            ]
+          },
+          {
+            "type": "string",
+            "enum": [
+              "auth.login"
+            ]
+          },
+          {
+            "type": "string",
+            "enum": [
+              "credentials.exported"
+            ]
+          },
+          {
+            "type": "string",
+            "enum": [
+              "team.created"
+            ]
+          },
+          {
+            "type": "string",
+            "enum": [
+              "team.updated"
+            ]
+          },
+          {
+            "type": "string",
+            "enum": [
+              "team.deleted"
+            ]
+          },
+          {
+            "type": "string",
+            "enum": [
+              "team.member.added"
+            ]
+          },
+          {
+            "type": "string",
+            "enum": [
+              "team.member.updated"
+            ]
+          },
+          {
+            "type": "string",
+            "enum": [
+              "team.member.removed"
+            ]
+          },
+          {
+            "type": "string",
+            "enum": [
+              "team.invite.created"
+            ]
+          },
+          {
+            "type": "string",
+            "enum": [
+              "team.invite.revoked"
+            ]
+          },
+          {
+            "type": "string",
+            "enum": [
+              "team.invite.accepted"
+            ]
+          },
+          {
+            "type": "string",
+            "enum": [
+              "organization.created"
+            ]
+          },
+          {
+            "type": "string",
+            "enum": [
+              "organization.updated"
+            ]
+          },
+          {
+            "type": "string",
+            "enum": [
+              "organization.deleted"
+            ]
+          },
+          {
+            "type": "string",
+            "enum": [
+              "ping"
+            ]
+          }
+        ]
+      },
+      "WebhookEvent": {
+        "anyOf": [
+          {
+            "$ref": "#/components/schemas/WebhookEventUserCreated"
+          },
+          {
+            "$ref": "#/components/schemas/WebhookEventUserUpdated"
+          },
+          {
+            "$ref": "#/components/schemas/WebhookEventUserDeleted"
+          },
+          {
+            "$ref": "#/components/schemas/WebhookEventAuthLogin"
+          },
+          {
+            "$ref": "#/components/schemas/WebhookEventCredentialsExported"
+          },
+          {
+            "$ref": "#/components/schemas/WebhookEventTeamCreated"
+          },
+          {
+            "$ref": "#/components/schemas/WebhookEventTeamUpdated"
+          },
+          {
+            "$ref": "#/components/schemas/WebhookEventTeamDeleted"
+          },
+          {
+            "$ref": "#/components/schemas/WebhookEventTeamMemberAdded"
+          },
+          {
+            "$ref": "#/components/schemas/WebhookEventTeamMemberUpdated"
+          },
+          {
+            "$ref": "#/components/schemas/WebhookEventTeamMemberRemoved"
+          },
+          {
+            "$ref": "#/components/schemas/WebhookEventTeamInviteCreated"
+          },
+          {
+            "$ref": "#/components/schemas/WebhookEventTeamInviteRevoked"
+          },
+          {
+            "$ref": "#/components/schemas/WebhookEventTeamInviteAccepted"
+          },
+          {
+            "$ref": "#/components/schemas/WebhookEventOrganizationCreated"
+          },
+          {
+            "$ref": "#/components/schemas/WebhookEventOrganizationUpdated"
+          },
+          {
+            "$ref": "#/components/schemas/WebhookEventOrganizationDeleted"
+          },
+          {
+            "$ref": "#/components/schemas/WebhookEventPing"
+          }
+        ],
+        "description": "The JSON body of a webhook delivery. Verify `x-faable-signature` before trusting it: HMAC-SHA256 of `${x-faable-timestamp}.${raw body}` with the subscription secret."
+      },
       "Log": {
         "type": "object",
         "required": [