bamboohr-webhooks-events

# BambooHR Webhooks & Events ## Overview BambooHR supports two webhook types: **global webhooks** (configured in the BambooHR admin UI, subset of fields) and **permissioned webhooks** (created via API, access all fields the API key user can see). This skill covers creating, validating, and handling both types. ## Prerequisites - BambooHR API key with webhook management permissions - HTTPS endpoint accessible from the internet - Webhook secret for HMAC-SHA256 signature verification ## Instructions ### Step 1: Understand Webhook Types | Feature | Global Webhooks | Permissioned Webhooks | |---------|----------------|----------------------| | Setup | BambooHR admin UI | API (`POST /webhooks/`) | | Field access | Subset of standard fields | All fields user can access | | Auth | Shared secret | Per-webhook secret | | Signature | SHA-256 HMAC | SHA-256 HMAC | | Actions | Created, Updated, Deleted | Created, Updated, Deleted | ### Step 2: Create a Permissioned Webhook via API ```typescript // POST /webhooks/ — register a new webhook const webhook = await client.request<{ id: number; name: string; privateKey: string; // Save this — used for HMAC verification }>('POST', '/webhooks/', { name: 'Employee Sync Webhook', monitorFields: [ 'firstName', 'lastName', 'jobTitle', 'department', 'division', 'location', 'workEmail', 'status', 'supervisor', 'hireDate', 'terminationDate', ], postFields: { firstName: 'firstName', lastName: 'lastName', jobT...