Tool overrides changed v1

{
  "action": "telemetry_data_source.tool_overrides_changed",
  "actor": {
    "id": "01FCNDV6P870EA6S7TK1DSYDG0",
    "metadata": {
      "user_base_role_slug": "admin",
      "user_custom_role_slugs": "engineering,security"
    },
    "name": "John Doe",
    "type": "user"
  },
  "context": {
    "location": "1.2.3.4",
    "user_agent": "Chrome/91.0.4472.114"
  },
  "metadata": {
    "after": "{\"surfaces\":{\"chat\":{\"value\":{\"type\":\"deny\"},\"set_at\":\"2026-01-02T00:00:00Z\",\"set_by\":\"01FCNDV6P870EA6S7TK1DSYDG0\"}}}",
    "before": "{\"surfaces\":{\"chat\":{\"value\":{\"type\":\"allow\"},\"set_at\":\"2026-01-01T00:00:00Z\",\"set_by\":\"01FCNDV6P870EA6S7TK1DSYDG0\"}}}",
    "change_id": "01JD8ZQK9X0000000000000000",
    "tool": "restart_service"
  },
  "occurred_at": "2021-08-17T13:28:57.801578Z",
  "targets": [
    {
      "id": "01FCNDV6P870EA6S7TK1DSYDG0",
      "name": "Acme Deploy",
      "type": "extension_connector"
    },
    {
      "id": "01FCNDV6P870EA6S7TK1DSYDG0",
      "name": "restart_service",
      "type": "extension_connector_tool"
    }
  ],
  "version": 1
}