Admin audit trail

Include security-focused events on audit logs. These could include: user logins/logouts, add IP addresses to all events, MFA success/failure

Current audit log only covers classic rules, but does not cover changes to branching rules.

Have the option to be notified/export audit logs. This can be via webhooks and/or a dedicated API endpoint. This is useful for: Monitor changes in workspace configuration on internal dashboards Add logs into SIEM platforms like Sentinel

Include conversation events (tags applied, rules applied, etc.) on audit logs.

Extend the Audit Log to allow admins to subscribe to real-time notifications for critical events. When a high-impact setting is changed (e.g., enabling permanent data deletion), admins should receive an email and/or in-app alert.

Track creation and deletion of App and API tokens on the audit logs.