@structbuild/sdk 0.2.11 → 0.3.1

package/dist/generated/webhooks.d.ts

@@ -1440,6 +1440,32 @@ export interface components {
             txns: number;
             fees: number;
         };
+        PriceSpikePayload: {
+            /** @description Outcome token ID */
+            position_id: string;
+            /** @description Market condition ID */
+            condition_id?: string | null;
+            /** @description Event slug */
+            event_slug?: string | null;
+            /** @description Outcome name (e.g. "Yes", "No") */
+            outcome?: string | null;
+            /**
+             * Format: int16
+             * @description Outcome index
+             */
+            outcome_index?: number | null;
+            /** @description Price at the start of the observation window (baseline snapshot, 0.0–1.0) */
+            previous_price: number;
+            /** @description Current price that triggered the spike (0.0–1.0) */
+            current_price: number;
+            /**
+             * @description `"up"` = price rising, `"down"` = price falling
+             * @enum {string}
+             */
+            spike_direction: "up" | "down";
+            /** @description Percentage move that triggered this notification. Positive = up, negative = down. */
+            spike_pct: number;
+        };
         ProbabilitySpikePayload: {
             /** @description Outcome token ID */
             position_id: string;
@@ -1767,31 +1793,29 @@ export interface components {
             /** @description Trade type identifier */
             trade_type: string;
         };
-        PriceSpikePayload: {
-            /** @description Outcome token ID */
-            position_id: string;
-            /** @description Market condition ID */
-            condition_id?: string | null;
-            /** @description Event slug */
-            event_slug?: string | null;
-            /** @description Outcome name (e.g. "Yes", "No") */
-            outcome?: string | null;
+        /** @description Outer envelope for every webhook HTTP POST delivery. The `data` field contains the event-specific payload. Delivery headers sent with every POST: `X-Webhook-ID` (subscription UUID), `X-Delivery-ID` (this attempt's UUID), `X-Event-Type` (event name string, e.g. `trader_first_trade`), `X-Attempt` (attempt number, 1-indexed). When the webhook has a secret configured, `X-Webhook-Signature: sha256=<hmac-hex>` is also included — compute HMAC-SHA256 over the raw request body using your secret to verify. */
+        WebhookDeliveryEnvelope: {
             /**
-             * Format: int16
-             * @description Outcome index
+             * Format: uuid
+             * @description UUID of this specific delivery attempt (matches X-Delivery-ID header)
              */
-            outcome_index?: number | null;
-            /** @description Price at the start of the observation window (baseline snapshot, 0.0–1.0) */
-            previous_price: number;
-            /** @description Current price that triggered the spike (0.0–1.0) */
-            current_price: number;
+            id: string;
+            /** @description Event name (e.g. `trader_first_trade`). On test deliveries the suffix `_test` is appended. */
+            event: string;
+            /** @description Event-specific payload — schema varies by event type; see the individual callback definitions */
+            data: Record<string, never>;
             /**
-             * @description `"up"` = price rising, `"down"` = price falling
-             * @enum {string}
+             * Format: int64
+             * @description Unix timestamp in milliseconds when this delivery was created
              */
-            spike_direction: "up" | "down";
-            /** @description Percentage move that triggered this notification. Positive = up, negative = down. */
-            spike_pct: number;
+            timestamp: number;
+            /**
+             * Format: uuid
+             * @description UUID of the webhook subscription that fired (matches X-Webhook-ID header)
+             */
+            webhook_id: string;
+            /** @description Delivery attempt number. 1 = first attempt; increments on each retry. */
+            attempt: number;
         };
         /** @description Subscription filters for the `trader_first_trade` event. All fields are optional. */
         TraderFirstTradeFilters: {
@@ -2486,13 +2510,27 @@ export interface operations {
     "trader-first-trade": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["FirstTradePayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["FirstTradePayload"];
+                };
             };
         };
         responses: {
@@ -2515,13 +2553,27 @@ export interface operations {
     "trader-new-market": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["NewMarketPayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["NewMarketPayload"];
+                };
             };
         };
         responses: {
@@ -2544,13 +2596,27 @@ export interface operations {
     "trader-whale-trade": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["WhaleTradePayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["WhaleTradePayload"];
+                };
             };
         };
         responses: {
@@ -2573,13 +2639,27 @@ export interface operations {
     "trader-new-trade": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["NewTradePayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["NewTradePayload"];
+                };
             };
         };
         responses: {
@@ -2602,13 +2682,27 @@ export interface operations {
     "trader-global-pnl": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["GlobalPnlPayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["GlobalPnlPayload"];
+                };
             };
         };
         responses: {
@@ -2631,13 +2725,27 @@ export interface operations {
     "trader-market-pnl": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["MarketPnlPayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["MarketPnlPayload"];
+                };
             };
         };
         responses: {
@@ -2660,13 +2768,27 @@ export interface operations {
     "trader-event-pnl": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["EventPnlPayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["EventPnlPayload"];
+                };
             };
         };
         responses: {
@@ -2689,13 +2811,27 @@ export interface operations {
     "market-metrics": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["ConditionMetricsPayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["ConditionMetricsPayload"];
+                };
             };
         };
         responses: {
@@ -2718,13 +2854,27 @@ export interface operations {
     "event-metrics": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["EventMetricsPayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["EventMetricsPayload"];
+                };
             };
         };
         responses: {
@@ -2747,13 +2897,27 @@ export interface operations {
     "position-metrics": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["PositionMetricsPayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["PositionMetricsPayload"];
+                };
             };
         };
         responses: {
@@ -2776,13 +2940,27 @@ export interface operations {
     "market-volume-milestone": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["VolumeMilestonePayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["VolumeMilestonePayload"];
+                };
             };
         };
         responses: {
@@ -2805,13 +2983,27 @@ export interface operations {
     "event-volume-milestone": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["EventVolumeMilestonePayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["EventVolumeMilestonePayload"];
+                };
             };
         };
         responses: {
@@ -2834,13 +3026,27 @@ export interface operations {
     "position-volume-milestone": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["PositionVolumeMilestonePayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["PositionVolumeMilestonePayload"];
+                };
             };
         };
         responses: {
@@ -2863,13 +3069,27 @@ export interface operations {
     "probability-spike": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["ProbabilitySpikePayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["ProbabilitySpikePayload"];
+                };
             };
         };
         responses: {
@@ -2892,13 +3112,27 @@ export interface operations {
     "price-spike": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["PriceSpikePayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["PriceSpikePayload"];
+                };
             };
         };
         responses: {
@@ -2921,13 +3155,27 @@ export interface operations {
     "market-volume-spike": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["MarketVolumeSpikePayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["MarketVolumeSpikePayload"];
+                };
             };
         };
         responses: {
@@ -2950,13 +3198,27 @@ export interface operations {
     "event-volume-spike": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["EventVolumeSpikePayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["EventVolumeSpikePayload"];
+                };
             };
         };
         responses: {
@@ -2979,13 +3241,27 @@ export interface operations {
     "position-volume-spike": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["PositionVolumeSpikePayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["PositionVolumeSpikePayload"];
+                };
             };
         };
         responses: {
@@ -3008,13 +3284,27 @@ export interface operations {
     "close-to-bond": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["CloseToBondPayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["CloseToBondPayload"];
+                };
             };
         };
         responses: {
@@ -3037,13 +3327,27 @@ export interface operations {
     "market-created": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["MarketCreatedPayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["MarketCreatedPayload"];
+                };
             };
         };
         responses: {
@@ -3066,13 +3370,27 @@ export interface operations {
     "asset-price-tick": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["AssetPriceTickPayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["AssetPriceTickPayload"];
+                };
             };
         };
         responses: {
@@ -3095,13 +3413,27 @@ export interface operations {
     "asset-price-window-update": {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description UUID of the webhook subscription that fired */
+                "X-Webhook-ID": string;
+                /** @description UUID of this specific delivery attempt (matches envelope `id` field) */
+                "X-Delivery-ID": string;
+                /** @description Event name string (e.g. `trader_first_trade`) */
+                "X-Event-Type": string;
+                /** @description Delivery attempt number (1 = first attempt) */
+                "X-Attempt": number;
+                /** @description HMAC-SHA256 of the raw request body: `sha256=<hex>`. Present only when the webhook has a secret configured. Verify with: HMAC-SHA256(secret, raw_body_bytes) == hex_part. */
+                "X-Webhook-Signature"?: string;
+            };
             path?: never;
             cookie?: never;
         };
+        /** @description Webhook delivery envelope. The `data` field contains the event-specific payload. */
         requestBody: {
             content: {
-                "application/json": components["schemas"]["AssetPriceWindowUpdatePayload"];
+                "application/json": components["schemas"]["WebhookDeliveryEnvelope"] & {
+                    data?: components["schemas"]["AssetPriceWindowUpdatePayload"];
+                };
             };
         };
         responses: {