@notionhq/apps 0.0.35 → 0.0.36

package/dist/cli/codegen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codegen.d.ts","sourceRoot":"","sources":["../../src/cli/codegen.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAE1D;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,YAAY,EAAE,SAAS,oBAAoB,EAAE,GAAG,MAAM,CA6CnF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,SAAS,oBAAoB,EAAE,GAAG,MAAM,CAuB3F;AAED,mFAAmF;AACnF,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,SAAS,oBAAoB,EAAE,GAAG,MAAM,CAWzF"}
+{"version":3,"file":"codegen.d.ts","sourceRoot":"","sources":["../../src/cli/codegen.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAE1D;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,YAAY,EAAE,SAAS,oBAAoB,EAAE,GAAG,MAAM,CAqDnF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,SAAS,oBAAoB,EAAE,GAAG,MAAM,CAuB3F;AAED,mFAAmF;AACnF,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,SAAS,oBAAoB,EAAE,GAAG,MAAM,CAWzF"}

package/dist/cli/codegen.js

@@ -22,16 +22,24 @@ export const capabilities: Record<string, Record<string, { handler: Handler }>>
 ${registry}
 };
 
+// The platform dispatches a workflow's synchronous webhook verify run under its
+// own invocation type. It resolves to the same capability, which tells a verify
+// invocation from a trigger event by the shape of its input.
+const invocationTypes: Record<string, string | undefined> = {
+	workflowWebhookVerify: "workflow",
+};
+
 export async function run(
 	type: string,
 	key: string,
 	context?: unknown,
 	options?: { concreteOutput?: true },
 ): Promise<unknown> {
-	const capability = capabilities[type]?.[key];
+	const capabilityType = invocationTypes[type] ?? type;
+	const capability = capabilities[capabilityType]?.[key];
 
 	if (!capability) {
-		throw new Error(\`Capability "\${type}/\${key}" not found\`);
+		throw new Error(\`Capability "\${capabilityType}/\${key}" not found\`);
 	}
 
 	return capability.handler(context, options);

package/dist/workflow.d.ts

@@ -3,7 +3,7 @@ import { type WorkflowAccess, type WorkflowAccessDeclarations, type WorkflowAcce
 import type { CapabilityContext } from "./context.js";
 import { type RunMetadata } from "./runtime-metadata.js";
 import { type WorkflowState } from "./workflow-state.js";
-import type { WorkflowEventMap, WorkflowTrigger, WorkflowEventCreators, WorkflowTriggerForConnections } from "./events.generated.js";
+import type { WebhookTrigger, WorkflowEventMap, WorkflowTrigger, WorkflowEventCreators, WorkflowTriggerForConnections } from "./events.generated.js";
 type HandlerOptions = {
     /** Return the concrete result instead of writing the output envelope. */
     concreteOutput?: true;
@@ -98,6 +98,67 @@ export type WorkflowEvent = WorkflowEventMap[keyof WorkflowEventMap];
 export type WorkflowEventForTrigger<T extends WorkflowTrigger> = WorkflowEventMap[T["type"]];
 export type WorkflowEventForTriggers<T extends readonly WorkflowTrigger[]> = WorkflowEventForTrigger<T[number]>;
 export { connections, type WorkflowConnection, type WorkflowConnectionDeclarations, type WorkflowConnectionRequirement, type WorkflowConnections, type OAuthConfiguration, type OAuthConnection, } from "./connections.js";
+/**
+ * The inbound HTTP request passed to a webhook verify handler.
+ */
+export type WebhookVerifyRequest = {
+    /** Uppercase HTTP method. Deliveries are POSTs; GET/HEAD cover challenge probes. */
+    method: "GET" | "HEAD" | "POST";
+    /** The full webhook URL as received. */
+    url: string;
+    /** Query string parameters. */
+    query: Record<string, string>;
+    /** Request headers with lowercased names. */
+    headers: Record<string, string>;
+    /** Raw request body. Empty string for bodyless methods like GET and HEAD. */
+    rawBody: string;
+};
+/**
+ * The HTTP response a verify handler produces. `deliver`, when present,
+ * explicitly controls whether the request is enqueued for the workflow
+ * handler. Otherwise delivery is derived from the status: 2xx enqueues and 4xx
+ * does not.
+ */
+export type WebhookVerifyResponse = {
+    /** Response status code. Only 2xx and 4xx statuses are allowed. */
+    status: number;
+    /** Optional response body, at most 8KB. */
+    body?: string;
+    /** Response content type. Defaults to "text/plain". */
+    contentType?: "application/json" | "text/plain";
+    /**
+     * Whether to enqueue the request for the workflow handler. Defaults to true
+     * for 2xx responses and false for 4xx responses.
+     */
+    deliver?: boolean;
+};
+/**
+ * A webhook verify handler. Runs synchronously at Notion's webhook ingress,
+ * before the HTTP response is sent, in the app's own sandbox — the same
+ * runtime as the workflow handler, with the full Node.js standard library.
+ * Read signing secrets from `process.env` and use `node:crypto` for
+ * signature checks.
+ *
+ * Keep it fast: the run must fit a small wall-clock budget (a few seconds,
+ * including sandbox startup), so avoid network calls — including
+ * `context.notion` API calls, which typically won't fit the budget.
+ */
+export type WebhookVerifyHandler = (request: WebhookVerifyRequest, context: CapabilityContext) => WebhookVerifyResponse | Promise<WebhookVerifyResponse>;
+/**
+ * A verify invocation as dispatched by the platform: a single `request`
+ * object rather than the event a workflow invocation carries.
+ */
+export type WebhookVerifyInvocation = {
+    request: WebhookVerifyRequest;
+};
+/**
+ * A trigger as the manifest records it. A declared `verify` handler is flagged
+ * on the webhook trigger itself, which is where the platform reads it to decide
+ * whether to run `verify` at webhook ingress.
+ */
+export type WorkflowManifestTrigger = WorkflowTrigger | (WebhookTrigger & {
+    hasVerify: true;
+});
 /**
  * Configuration passed to {@link workflow}.
  */
@@ -126,6 +187,39 @@ export type WorkflowConfiguration<TTriggers extends readonly [WorkflowTrigger, .
      * Connections that must be set up before this workflow can run.
      */
     connections?: TConnections;
+    /**
+     * Optional synchronous verification handler, run at Notion's webhook
+     * ingress before the HTTP response is sent. Use it for providers that
+     * require a synchronous verification response: signature checks with
+     * specific status codes, challenge echoes, or handshake requests.
+     *
+     * Only workflows with an `events.webhook()` trigger may declare one.
+     *
+     * The handler controls the HTTP response. Return `deliver: true` to enqueue
+     * the request for the workflow handler, or `deliver: false` to answer the
+     * provider without enqueueing it. When omitted, 2xx enqueues and 4xx does
+     * not. `verify` runs in the app's own sandbox with full Node.js — read
+     * secrets from `process.env` and use `node:crypto` for signature checks. It
+     * receives the capability context as its second argument, without the run
+     * metadata and `step` a workflow run carries.
+     *
+     * Without `verify`, the webhook keeps the current behavior: every request
+     * is accepted with `202` and processed asynchronously.
+     *
+     * @example
+     * ```ts
+     * verify: (request) => {
+     *   const signature = createHmac("sha256", process.env.WEBHOOK_SECRET ?? "")
+     *     .update(request.rawBody)
+     *     .digest("hex");
+     *   const expected = Buffer.from(`sha256=${signature}`);
+     *   const actual = Buffer.from(request.headers["x-hub-signature-256"] ?? "");
+     *   const verified = expected.length === actual.length && timingSafeEqual(expected, actual);
+     *   return verified ? { status: 200 } : { status: 401, body: "Invalid signature" };
+     * },
+     * ```
+     */
+    verify?: WebhookVerifyHandler;
     handler: (event: WorkflowEventForTriggers<TTriggers>, context: WorkflowContext<TConnections, TAccess>) => Promise<void> | void;
 };
 /** Configuration that checks trigger keys against declared connections. */
@@ -148,11 +242,11 @@ export type Workflow<TTriggers extends readonly [WorkflowTrigger, ...WorkflowTri
     config: {
         name: string;
         description: string;
-        triggers: TTriggers;
+        triggers: WorkflowManifestTrigger[];
         connections?: readonly WorkflowConnectionRequirement[];
         access?: WorkflowAccessRequirements;
     };
-    handler: (event: WorkflowEventForTriggers<TTriggers>, options?: HandlerOptions) => Promise<WorkflowHandlerResult | undefined>;
+    handler: (input: WorkflowEventForTriggers<TTriggers> | WebhookVerifyInvocation, options?: HandlerOptions) => Promise<WorkflowHandlerResult | WebhookVerifyResponse | undefined>;
 };
 /**
  * Create a workflow capability.

package/dist/workflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.d.ts","sourceRoot":"","sources":["../src/workflow.ts"],"names":[],"mappings":"AAAA,OAAO,EAIN,KAAK,8BAA8B,EACnC,KAAK,6BAA6B,EAClC,KAAK,mBAAmB,EACxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAGN,KAAK,cAAc,EACnB,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAC/B,MAAM,sBAAsB,CAAC;AAK9B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAKtD,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAE1E,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,KAAK,EACX,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,6BAA6B,EAC7B,MAAM,uBAAuB,CAAC;AAE/B,KAAK,cAAc,GAAG;IACrB,yEAAyE;IACzE,cAAc,CAAC,EAAE,IAAI,CAAC;CACtB,CAAC;AAEF,KAAK,0BAA0B,GAAG;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;KACjC,IAAI,IAAI,MAAM,0BAA0B,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC,GAC7F,0BAA0B;CAC3B,CAAC,MAAM,0BAA0B,CAAC,CAAC;AAEpC,KAAK,eAAe,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;AAEzC,KAAK,yBAAyB,GAAG;IAChC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,OAAO,CAAC,MAAM,sBAAsB,EAAE,OAAO,MAAM,CAAC;AAEpD,MAAM,MAAM,kBAAkB,CAAC,CAAC,IAAI;IACnC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,cAAc,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC/F,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,CAAC;CACtC,CAAC;AAEF,KAAK,kBAAkB,CACtB,CAAC,EACD,QAAQ,SAAS,yBAAyB,GAAG,SAAS,IACnD,QAAQ,SAAS;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;AAE5D,gFAAgF;AAChF,MAAM,MAAM,iBAAiB,GAAG;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AACF,eAAO,MAAM,KAAK;eACN,QAAQ,SAAS,yBAAyB,GAAG,SAAS,YACtD,QAAQ,GAChB,kBAAkB,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;iBAG9C,QAAQ,SAAS,yBAAyB,GAAG,SAAS,YACxD,QAAQ,GAChB,kBAAkB,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;mBAG5C,QAAQ,SAAS,yBAAyB,GAAG,SAAS,YAC1D,QAAQ,GAChB,kBAAkB,CAAC,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;iBAIrD,QAAQ,SAAS,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,QAC/C,aAAa,SAAS,yBAAyB,GAAG,SAAS,UAEzD,QAAQ,YACN,aAAa,GACrB,kBAAkB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;eAG/D,QAAQ,SAAS,yBAAyB,GAAG,SAAS,YACtD,QAAQ,GAChB,kBAAkB,CAAC,kBAAkB,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;sBAI/D,QAAQ,SAAS,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,QAC/C,aAAa,SAAS,yBAAyB,GAAG,SAAS,UAEzD,QAAQ,YACN,aAAa,GACrB,kBAAkB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IAG5E,oDAAoD;iBACvC,QAAQ,SAAS,yBAAyB,GAAG,SAAS,YACxD,QAAQ,GAChB,kBAAkB,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,CAAC;IAG7D,mEAAmE;gBACvD,QAAQ,SAAS,yBAAyB,GAAG,SAAS,YACvD,QAAQ,GAChB,kBAAkB,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,CAAC;CAG7D,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;AAE9E,MAAM,MAAM,mBAAmB,CAAC,OAAO,SAAS,mBAAmB,IAAI;KACrE,GAAG,IAAI,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,kBAAkB,CAAC,MAAM,KAAK,CAAC,GAAG,KAAK,GAAG,KAAK;CAC5F,CAAC;AAEF,MAAM,MAAM,qBAAqB,CAAC,OAAO,SAAS,mBAAmB,IAAI;IACxE,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,2BAA2B,CAAC,OAAO,SAAS,mBAAmB,IAAI;IAC9E,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,eAAe,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GACjC;IACA,EAAE,EAAE,IAAI,CAAC;IACT,GAAG,CAAC,EAAE,eAAe,CAAC;CACrB,GACD;IACA,KAAK,EAAE,oBAAoB,CAAC;IAC5B,GAAG,CAAC,EAAE,eAAe,CAAC;CACrB,CAAC;AAEL,MAAM,MAAM,uBAAuB,GAAG;IACrC,MAAM,EAAE,SAAS,CAAC;IAClB,IAAI,EAAE;QACL,IAAI,EAAE,OAAO,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;KACnB,CAAC;CACF,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACxC,MAAM,EAAE,SAAS,CAAC;IAClB,IAAI,EAAE;QACL,IAAI,EAAE,OAAO,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,mBAAmB,CAAC;KAC3B,CAAC;CACF,CAAC;AAEF,KAAK,kBAAkB,GAAG,uBAAuB,GAAG,0BAA0B,CAAC;AAE/E,KAAK,qBAAqB,GAAG;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GAAG,kBAAkB,CAAC;AAIxE,YAAY,EACX,cAAc,EACd,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,EAC1B,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,0BAA0B,EAC1B,yBAAyB,EACzB,0BAA0B,EAC1B,mBAAmB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,MAAM,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,gBAAgB,CAAC,CAAC;AAErE,MAAM,MAAM,uBAAuB,CAAC,CAAC,SAAS,eAAe,IAAI,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAE7F,MAAM,MAAM,wBAAwB,CAAC,CAAC,SAAS,SAAS,eAAe,EAAE,IACxE,uBAAuB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAEpC,OAAO,EACN,WAAW,EACX,KAAK,kBAAkB,EACvB,KAAK,8BAA8B,EACnC,KAAK,6BAA6B,EAClC,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,eAAe,GACpB,MAAM,kBAAkB,CAAC;AAE1B;;GAEG;AACH,MAAM,MAAM,qBAAqB,CAChC,SAAS,SAAS,SAAS,CAAC,eAAe,EAAE,GAAG,eAAe,EAAE,CAAC,EAClE,YAAY,SAAS,8BAA8B,GAAG,8BAA8B,EACpF,OAAO,SAAS,0BAA0B,GAAG,0BAA0B,IACpE;IACH;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;;;OAIG;IACH,QAAQ,EAAE,SAAS,CAAC;IAEpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;OAEG;IACH,WAAW,CAAC,EAAE,YAAY,CAAC;IAE3B,OAAO,EAAE,CACR,KAAK,EAAE,wBAAwB,CAAC,SAAS,CAAC,EAC1C,OAAO,EAAE,eAAe,CAAC,YAAY,EAAE,OAAO,CAAC,KAC3C,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,2EAA2E;AAC3E,MAAM,MAAM,4BAA4B,CACvC,SAAS,SAAS,SAAS,CAAC,eAAe,EAAE,GAAG,eAAe,EAAE,CAAC,EAClE,YAAY,SAAS,8BAA8B,EACnD,OAAO,SAAS,0BAA0B,GAAG,0BAA0B,IACpE,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,GAAG;IAC/E,QAAQ,EAAE,CAAC,OAAO,EAAE;QAAE,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAA;KAAE,KAAK,SAAS,CAAC;CAC3F,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,CACnB,SAAS,SAAS,SAAS,CAAC,eAAe,EAAE,GAAG,eAAe,EAAE,CAAC,GAAG,SAAS;IAC7E,eAAe;IACf,GAAG,eAAe,EAAE;CACpB,IACE;IACH,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,SAAS,CAAC;QACpB,WAAW,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAC;QACvD,MAAM,CAAC,EAAE,0BAA0B,CAAC;KACpC,CAAC;IACF,OAAO,EAAE,CACR,KAAK,EAAE,wBAAwB,CAAC,SAAS,CAAC,EAC1C,OAAO,CAAC,EAAE,cAAc,KACpB,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;CAChD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,QAAQ,CACvB,KAAK,CAAC,SAAS,SAAS,SAAS;IAChC,6BAA6B,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACpD,GAAG,6BAA6B,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE;CACzD,EACD,KAAK,CAAC,YAAY,SAAS,8BAA8B,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAChF,KAAK,CAAC,OAAO,SAAS,0BAA0B,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAEvE,aAAa,EAAE,4BAA4B,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,GAC3E,QAAQ,CAAC,SAAS,CAAC,CAAC;AACvB,wBAAgB,QAAQ,CACvB,KAAK,CAAC,SAAS,SAAS,SAAS,CAAC,eAAe,EAAE,GAAG,eAAe,EAAE,CAAC,EACxE,KAAK,CAAC,YAAY,SAAS,8BAA8B,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAChF,KAAK,CAAC,OAAO,SAAS,0BAA0B,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EACtE,aAAa,EAAE,qBAAqB,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;AA0F/F,yCAAyC;AACzC,MAAM,MAAM,WAAW,GAAG;IACzB;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;;;;OAKG;IACH,KAAK,EAAE,aAAa,CAAC;CACrB,CAAC;AAEF,KAAK,kBAAkB,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC;AAEvD,mCAAmC;AACnC,MAAM,MAAM,mBAAmB,GAAG;IACjC;;;;OAIG;IACH,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,KAAK,YAAY,GAAG;IACnB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;IAChG,CAAC,CAAC,EACD,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,mBAAmB,EAC5B,EAAE,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAC1C,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;CAClC,CAAC;AAEF,KAAK,YAAY,GAAG;IACnB;;;OAGG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,OAAO,SAAS,mBAAmB,EACjD,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC,GAC3C,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;CAC3C,CAAC;AAEF,4CAA4C;AAC5C,MAAM,MAAM,eAAe,CAC1B,YAAY,SAAS,8BAA8B,GAAG,8BAA8B,EACpF,OAAO,SAAS,0BAA0B,GAAG,0BAA0B,IACpE,iBAAiB,GAAG;IACvB,0FAA0F;IAC1F,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,WAAW,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC;CAC/C,GAAG,WAAW,GAAG;IAChB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,IAAI,EAAE,YAAY,CAAC;IACnB,iEAAiE;IACjE,IAAI,EAAE,YAAY,CAAC;CACnB,CAAC"}
+{"version":3,"file":"workflow.d.ts","sourceRoot":"","sources":["../src/workflow.ts"],"names":[],"mappings":"AAAA,OAAO,EAIN,KAAK,8BAA8B,EACnC,KAAK,6BAA6B,EAClC,KAAK,mBAAmB,EACxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAGN,KAAK,cAAc,EACnB,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAC/B,MAAM,sBAAsB,CAAC;AAK9B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAKtD,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAE1E,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,KAAK,EACX,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,6BAA6B,EAC7B,MAAM,uBAAuB,CAAC;AAE/B,KAAK,cAAc,GAAG;IACrB,yEAAyE;IACzE,cAAc,CAAC,EAAE,IAAI,CAAC;CACtB,CAAC;AAKF,KAAK,0BAA0B,GAAG;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;KACjC,IAAI,IAAI,MAAM,0BAA0B,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC,GAC7F,0BAA0B;CAC3B,CAAC,MAAM,0BAA0B,CAAC,CAAC;AAEpC,KAAK,eAAe,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;AAEzC,KAAK,yBAAyB,GAAG;IAChC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,OAAO,CAAC,MAAM,sBAAsB,EAAE,OAAO,MAAM,CAAC;AAEpD,MAAM,MAAM,kBAAkB,CAAC,CAAC,IAAI;IACnC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,cAAc,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC/F,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,CAAC;CACtC,CAAC;AAEF,KAAK,kBAAkB,CACtB,CAAC,EACD,QAAQ,SAAS,yBAAyB,GAAG,SAAS,IACnD,QAAQ,SAAS;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;AAE5D,gFAAgF;AAChF,MAAM,MAAM,iBAAiB,GAAG;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AACF,eAAO,MAAM,KAAK;eACN,QAAQ,SAAS,yBAAyB,GAAG,SAAS,YACtD,QAAQ,GAChB,kBAAkB,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;iBAG9C,QAAQ,SAAS,yBAAyB,GAAG,SAAS,YACxD,QAAQ,GAChB,kBAAkB,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;mBAG5C,QAAQ,SAAS,yBAAyB,GAAG,SAAS,YAC1D,QAAQ,GAChB,kBAAkB,CAAC,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;iBAIrD,QAAQ,SAAS,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,QAC/C,aAAa,SAAS,yBAAyB,GAAG,SAAS,UAEzD,QAAQ,YACN,aAAa,GACrB,kBAAkB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;eAG/D,QAAQ,SAAS,yBAAyB,GAAG,SAAS,YACtD,QAAQ,GAChB,kBAAkB,CAAC,kBAAkB,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;sBAI/D,QAAQ,SAAS,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,QAC/C,aAAa,SAAS,yBAAyB,GAAG,SAAS,UAEzD,QAAQ,YACN,aAAa,GACrB,kBAAkB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IAG5E,oDAAoD;iBACvC,QAAQ,SAAS,yBAAyB,GAAG,SAAS,YACxD,QAAQ,GAChB,kBAAkB,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,CAAC;IAG7D,mEAAmE;gBACvD,QAAQ,SAAS,yBAAyB,GAAG,SAAS,YACvD,QAAQ,GAChB,kBAAkB,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,CAAC;CAG7D,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;AAE9E,MAAM,MAAM,mBAAmB,CAAC,OAAO,SAAS,mBAAmB,IAAI;KACrE,GAAG,IAAI,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,kBAAkB,CAAC,MAAM,KAAK,CAAC,GAAG,KAAK,GAAG,KAAK;CAC5F,CAAC;AAEF,MAAM,MAAM,qBAAqB,CAAC,OAAO,SAAS,mBAAmB,IAAI;IACxE,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,2BAA2B,CAAC,OAAO,SAAS,mBAAmB,IAAI;IAC9E,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,eAAe,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GACjC;IACA,EAAE,EAAE,IAAI,CAAC;IACT,GAAG,CAAC,EAAE,eAAe,CAAC;CACrB,GACD;IACA,KAAK,EAAE,oBAAoB,CAAC;IAC5B,GAAG,CAAC,EAAE,eAAe,CAAC;CACrB,CAAC;AAEL,MAAM,MAAM,uBAAuB,GAAG;IACrC,MAAM,EAAE,SAAS,CAAC;IAClB,IAAI,EAAE;QACL,IAAI,EAAE,OAAO,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;KACnB,CAAC;CACF,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACxC,MAAM,EAAE,SAAS,CAAC;IAClB,IAAI,EAAE;QACL,IAAI,EAAE,OAAO,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,mBAAmB,CAAC;KAC3B,CAAC;CACF,CAAC;AAEF,KAAK,kBAAkB,GAAG,uBAAuB,GAAG,0BAA0B,CAAC;AAE/E,KAAK,qBAAqB,GAAG;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GAAG,kBAAkB,CAAC;AAIxE,YAAY,EACX,cAAc,EACd,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,EAC1B,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,0BAA0B,EAC1B,yBAAyB,EACzB,0BAA0B,EAC1B,mBAAmB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,MAAM,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,gBAAgB,CAAC,CAAC;AAErE,MAAM,MAAM,uBAAuB,CAAC,CAAC,SAAS,eAAe,IAAI,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAE7F,MAAM,MAAM,wBAAwB,CAAC,CAAC,SAAS,SAAS,eAAe,EAAE,IACxE,uBAAuB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAEpC,OAAO,EACN,WAAW,EACX,KAAK,kBAAkB,EACvB,KAAK,8BAA8B,EACnC,KAAK,6BAA6B,EAClC,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,eAAe,GACpB,MAAM,kBAAkB,CAAC;AAE1B;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IAClC,oFAAoF;IACpF,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IAChC,wCAAwC;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,+BAA+B;IAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG;IACnC,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,WAAW,CAAC,EAAE,kBAAkB,GAAG,YAAY,CAAC;IAChD;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAClC,OAAO,EAAE,oBAAoB,EAC7B,OAAO,EAAE,iBAAiB,KACtB,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAE5D;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACrC,OAAO,EAAE,oBAAoB,CAAC;CAC9B,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,eAAe,GAAG,CAAC,cAAc,GAAG;IAAE,SAAS,EAAE,IAAI,CAAA;CAAE,CAAC,CAAC;AAE/F;;GAEG;AACH,MAAM,MAAM,qBAAqB,CAChC,SAAS,SAAS,SAAS,CAAC,eAAe,EAAE,GAAG,eAAe,EAAE,CAAC,EAClE,YAAY,SAAS,8BAA8B,GAAG,8BAA8B,EACpF,OAAO,SAAS,0BAA0B,GAAG,0BAA0B,IACpE;IACH;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;;;OAIG;IACH,QAAQ,EAAE,SAAS,CAAC;IAEpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;OAEG;IACH,WAAW,CAAC,EAAE,YAAY,CAAC;IAE3B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAE9B,OAAO,EAAE,CACR,KAAK,EAAE,wBAAwB,CAAC,SAAS,CAAC,EAC1C,OAAO,EAAE,eAAe,CAAC,YAAY,EAAE,OAAO,CAAC,KAC3C,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,2EAA2E;AAC3E,MAAM,MAAM,4BAA4B,CACvC,SAAS,SAAS,SAAS,CAAC,eAAe,EAAE,GAAG,eAAe,EAAE,CAAC,EAClE,YAAY,SAAS,8BAA8B,EACnD,OAAO,SAAS,0BAA0B,GAAG,0BAA0B,IACpE,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,GAAG;IAC/E,QAAQ,EAAE,CAAC,OAAO,EAAE;QAAE,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAA;KAAE,KAAK,SAAS,CAAC;CAC3F,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,CACnB,SAAS,SAAS,SAAS,CAAC,eAAe,EAAE,GAAG,eAAe,EAAE,CAAC,GAAG,SAAS;IAC7E,eAAe;IACf,GAAG,eAAe,EAAE;CACpB,IACE;IACH,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,uBAAuB,EAAE,CAAC;QACpC,WAAW,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAC;QACvD,MAAM,CAAC,EAAE,0BAA0B,CAAC;KACpC,CAAC;IACF,OAAO,EAAE,CACR,KAAK,EAAE,wBAAwB,CAAC,SAAS,CAAC,GAAG,uBAAuB,EACpE,OAAO,CAAC,EAAE,cAAc,KACpB,OAAO,CAAC,qBAAqB,GAAG,qBAAqB,GAAG,SAAS,CAAC,CAAC;CACxE,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,QAAQ,CACvB,KAAK,CAAC,SAAS,SAAS,SAAS;IAChC,6BAA6B,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACpD,GAAG,6BAA6B,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE;CACzD,EACD,KAAK,CAAC,YAAY,SAAS,8BAA8B,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAChF,KAAK,CAAC,OAAO,SAAS,0BAA0B,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAEvE,aAAa,EAAE,4BAA4B,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,GAC3E,QAAQ,CAAC,SAAS,CAAC,CAAC;AACvB,wBAAgB,QAAQ,CACvB,KAAK,CAAC,SAAS,SAAS,SAAS,CAAC,eAAe,EAAE,GAAG,eAAe,EAAE,CAAC,EACxE,KAAK,CAAC,YAAY,SAAS,8BAA8B,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAChF,KAAK,CAAC,OAAO,SAAS,0BAA0B,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EACtE,aAAa,EAAE,qBAAqB,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;AAoJ/F,yCAAyC;AACzC,MAAM,MAAM,WAAW,GAAG;IACzB;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;;;;OAKG;IACH,KAAK,EAAE,aAAa,CAAC;CACrB,CAAC;AAEF,KAAK,kBAAkB,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC;AAEvD,mCAAmC;AACnC,MAAM,MAAM,mBAAmB,GAAG;IACjC;;;;OAIG;IACH,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,KAAK,YAAY,GAAG;IACnB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;IAChG,CAAC,CAAC,EACD,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,mBAAmB,EAC5B,EAAE,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAC1C,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;CAClC,CAAC;AAEF,KAAK,YAAY,GAAG;IACnB;;;OAGG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,OAAO,SAAS,mBAAmB,EACjD,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC,GAC3C,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;CAC3C,CAAC;AAEF,4CAA4C;AAC5C,MAAM,MAAM,eAAe,CAC1B,YAAY,SAAS,8BAA8B,GAAG,8BAA8B,EACpF,OAAO,SAAS,0BAA0B,GAAG,0BAA0B,IACpE,iBAAiB,GAAG;IACvB,0FAA0F;IAC1F,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,WAAW,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC;CAC/C,GAAG,WAAW,GAAG;IAChB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,IAAI,EAAE,YAAY,CAAC;IACnB,iEAAiE;IACjE,IAAI,EAAE,YAAY,CAAC;CACnB,CAAC"}

package/dist/workflow.js

@@ -17,6 +17,7 @@ import { resolveRuntimeInput } from "./runtime-input.js";
 import { readRunMetadata } from "./runtime-metadata.js";
 import { createWorkflowEvents } from "./events.generated.js";
 import { createWorkflowStepState } from "./workflow-state.js";
+const WEBHOOK_TRIGGER_TYPE = "webhooks.webhook";
 const input = {
   text(options) {
     return { type: "text", ...options };
@@ -56,18 +57,40 @@ function workflow(configuration) {
   const connectionDeclarations = configuration.connections === void 0 ? void 0 : structuredClone(configuration.connections);
   const triggers = typeof configuration.triggers === "function" ? configuration.triggers({ events: createWorkflowEvents() }) : configuration.triggers;
   validateTriggerConnections(triggers, requirements);
+  if (configuration.verify !== void 0 && !triggers.some((trigger) => trigger.type === WEBHOOK_TRIGGER_TYPE)) {
+    throw new Error(
+      `Workflow "${configuration.name}" declares a verify handler but has no webhook trigger. Add events.webhook() or remove verify.`
+    );
+  }
   return {
     _tag: "workflow",
     config: {
       name: configuration.name,
       description: configuration.description,
-      triggers,
+      triggers: manifestTriggers(triggers, configuration.verify !== void 0),
       ...configuration.connections === void 0 ? {} : { connections: requirements },
       ...configuration.access === void 0 ? {} : { access: accessRequirements }
     },
-    async handler(event, options) {
+    async handler(input2, options) {
       try {
-        event = await resolveRuntimeInput(event);
+        input2 = await resolveRuntimeInput(input2);
+        if (isVerifyInvocation(input2)) {
+          if (configuration.verify === void 0) {
+            throw new Error(
+              `Workflow "${configuration.name}" received a verify request but does not declare a verify handler`
+            );
+          }
+          const response = await configuration.verify(
+            input2.request,
+            createCapabilityContext()
+          );
+          if (options?.concreteOutput) {
+            return response;
+          }
+          writeOutput({ _tag: "success", value: response });
+          return void 0;
+        }
+        const event = input2;
         const runMetadata = readRunMetadata();
         const baseContext = createCapabilityContext();
         const step = createStep(runMetadata);
@@ -114,6 +137,14 @@ function workflow(configuration) {
     }
   };
 }
+function manifestTriggers(triggers, hasVerify) {
+  return triggers.map(
+    (trigger) => hasVerify && trigger.type === WEBHOOK_TRIGGER_TYPE ? { ...trigger, hasVerify: true } : trigger
+  );
+}
+function isVerifyInvocation(input2) {
+  return typeof input2 === "object" && input2 !== null && "request" in input2;
+}
 const WORKFLOW_STEP_DIRECTORY_ENV_KEY = "NOTION_WORKFLOW_STEP_DIRECTORY";
 const MAX_WORKFLOW_STEP_KEY_LENGTH = 43;
 const WORKFLOW_STEP_KEY_PATTERN = /^[A-Za-z0-9_-]+$/;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@notionhq/apps",
-	"version": "0.0.35",
+	"version": "0.0.36",
 	"description": "An SDK for building workflow apps for Notion",
 	"license": "MIT",
 	"bin": {

package/src/cli/build.test.ts

@@ -544,6 +544,24 @@ describe("buildApp", () => {
 		expect(JSON.parse(await fs.promises.readFile(manifestPath, "utf8"))).toEqual(manifest);
 	});
 
+	it("records a workflow's verify handler in the manifest", async () => {
+		const { manifestPath } = await buildApp(fixture("webhook-verify"));
+
+		expect(JSON.parse(await fs.promises.readFile(manifestPath, "utf8"))).toMatchObject({
+			capabilities: [
+				{
+					type: "workflow",
+					key: "onIncoming",
+					config: {
+						name: "Incoming Webhook",
+						description: "Verifies and processes an incoming webhook",
+						triggers: [{ type: "webhooks.webhook", hasVerify: true }],
+					},
+				},
+			],
+		});
+	});
+
 	it("collects relation databases and a shared pacer once", async () => {
 		const { manifest } = await buildApp(fixture("shared-primary-key"));
 

package/src/cli/codegen.test.ts

@@ -20,6 +20,20 @@ describe("generateEntry", () => {
 		expect(entry).toContain("export async function run(");
 	});
 
+	it("resolves the webhook verify invocation type to the workflow registry", () => {
+		const entry = generateEntry([
+			{
+				type: "workflow",
+				tag: "workflow",
+				key: "onIncoming",
+				sourcePath: "src/workflows/onIncoming.ts",
+				runtime: "worker",
+			},
+		]);
+
+		expect(entry).toContain(`workflowWebhookVerify: "workflow",`);
+	});
+
 	it("registers syncs in their own capability group", () => {
 		const entry = generateEntry([
 			{

package/src/cli/codegen.ts

@@ -37,16 +37,24 @@ export const capabilities: Record<string, Record<string, { handler: Handler }>>
 ${registry}
 };
 
+// The platform dispatches a workflow's synchronous webhook verify run under its
+// own invocation type. It resolves to the same capability, which tells a verify
+// invocation from a trigger event by the shape of its input.
+const invocationTypes: Record<string, string | undefined> = {
+	workflowWebhookVerify: "workflow",
+};
+
 export async function run(
 	type: string,
 	key: string,
 	context?: unknown,
 	options?: { concreteOutput?: true },
 ): Promise<unknown> {
-	const capability = capabilities[type]?.[key];
+	const capabilityType = invocationTypes[type] ?? type;
+	const capability = capabilities[capabilityType]?.[key];
 
 	if (!capability) {
-		throw new Error(\`Capability "\${type}/\${key}" not found\`);
+		throw new Error(\`Capability "\${capabilityType}/\${key}" not found\`);
 	}
 
 	return capability.handler(context, options);

package/src/workflow.test.ts

@@ -7,7 +7,7 @@ import { afterEach, beforeEach, describe, expect, expectTypeOf, it, vi, type Moc
 
 import { ExecutionError } from "./error.js";
 import type { RunMetadata } from "./runtime-metadata.js";
-import { events, type NotionPageCreatedEvent } from "./events.generated.js";
+import { events, type NotionPageCreatedEvent, type WebhookEvent } from "./events.generated.js";
 import { customAgent } from "./notion-as-code/custom-agent.js";
 import { database } from "./notion-as-code/database.js";
 import { page } from "./notion-as-code/page.js";
@@ -17,6 +17,7 @@ import {
 	input,
 	workflow,
 	type StepContext,
+	type WebhookVerifyHandler,
 	type WorkflowContext,
 	type WorkflowInputDate,
 	type WorkflowWaitDuration,
@@ -1621,3 +1622,240 @@ describe("connection-bound triggers", () => {
 		).not.toThrow();
 	});
 });
+
+describe("workflow verify", () => {
+	const verifyRequest = {
+		method: "POST" as const,
+		url: "https://123456.webhook.notionusercontent.com/webhooks/app/s/w/u/incoming",
+		query: {},
+		headers: { "x-signature": "sig" },
+		rawBody: '{"challenge":"abc"}',
+	};
+
+	it("marks the webhook trigger with hasVerify when a verify handler is set", () => {
+		const incoming = workflow({
+			name: "Incoming",
+			description: "Processes an incoming webhook",
+			triggers: [events.webhook()],
+			verify: () => ({ status: 200 }),
+			handler: () => {},
+		});
+
+		expect(incoming.config).toEqual({
+			name: "Incoming",
+			description: "Processes an incoming webhook",
+			triggers: [{ type: "webhooks.webhook", hasVerify: true }],
+		});
+	});
+
+	it("flags only the webhook trigger among a workflow's triggers", () => {
+		const incoming = workflow({
+			name: "Incoming",
+			description: "Processes an incoming webhook",
+			triggers: [events.notionPageCreated(), events.webhook()],
+			verify: () => ({ status: 200 }),
+			handler: () => {},
+		});
+
+		expect(incoming.config.triggers).toEqual([
+			{ type: "notion.page.created" },
+			{ type: "webhooks.webhook", hasVerify: true },
+		]);
+	});
+
+	it("omits hasVerify from the trigger when no verify handler is set", () => {
+		const incoming = workflow({
+			name: "Incoming",
+			description: "Processes an incoming webhook",
+			triggers: [events.webhook()],
+			handler: () => {},
+		});
+
+		expect(incoming.config.triggers).toEqual([{ type: "webhooks.webhook" }]);
+	});
+
+	it("rejects a verify handler on a workflow without a webhook trigger", () => {
+		expect(() =>
+			workflow({
+				name: "Log Pages",
+				description: "Logs created pages",
+				triggers: [events.notionPageCreated()],
+				verify: () => ({ status: 200 }),
+				handler: () => {},
+			}),
+		).toThrow(/has no webhook trigger/);
+	});
+
+	it("dispatches a verify invocation to the verify handler, not the workflow handler", async () => {
+		const handler = vi.fn();
+		const verify: WebhookVerifyHandler = (request) => ({
+			status: 200,
+			body: (JSON.parse(request.rawBody) as { challenge: string }).challenge,
+			contentType: "text/plain",
+		});
+		const incoming = workflow({
+			name: "Incoming",
+			description: "Processes an incoming webhook",
+			triggers: [events.webhook()],
+			verify,
+			handler,
+		});
+
+		const response = await incoming.handler(
+			{ request: verifyRequest },
+			{ concreteOutput: true },
+		);
+
+		expect(response).toEqual({ status: 200, body: "abc", contentType: "text/plain" });
+		expect(handler).not.toHaveBeenCalled();
+	});
+
+	it("returns an explicit delivery decision from the verify handler", async () => {
+		const incoming = workflow({
+			name: "Incoming",
+			description: "Processes an incoming webhook",
+			triggers: [events.webhook()],
+			verify: () => ({ status: 200, deliver: false }),
+			handler: () => {},
+		});
+
+		const response = await incoming.handler(
+			{ request: verifyRequest },
+			{ concreteOutput: true },
+		);
+
+		expect(response).toEqual({ status: 200, deliver: false });
+	});
+
+	it("passes the capability context to the verify handler", async () => {
+		let receivedContext: unknown;
+		const incoming = workflow({
+			name: "Incoming",
+			description: "Processes an incoming webhook",
+			triggers: [events.webhook()],
+			verify: (_request, context) => {
+				receivedContext = context;
+				return { status: 200 };
+			},
+			handler: () => {},
+		});
+
+		await incoming.handler({ request: verifyRequest }, { concreteOutput: true });
+
+		expect(receivedContext).toHaveProperty("notion");
+		expect(receivedContext).not.toHaveProperty("step");
+	});
+
+	it("verifies without workflow run metadata", async () => {
+		delete process.env.NOTION_RUN_METADATA_PATH;
+		const incoming = workflow({
+			name: "Incoming",
+			description: "Processes an incoming webhook",
+			triggers: [events.webhook()],
+			verify: () => ({ status: 200 }),
+			handler: () => {},
+		});
+
+		await expect(
+			incoming.handler({ request: verifyRequest }, { concreteOutput: true }),
+		).resolves.toEqual({ status: 200 });
+	});
+
+	it("writes the verify response as a success envelope without concreteOutput", async () => {
+		const incoming = workflow({
+			name: "Incoming",
+			description: "Processes an incoming webhook",
+			triggers: [events.webhook()],
+			verify: () => ({ status: 401 }),
+			handler: () => {},
+		});
+
+		await incoming.handler({ request: verifyRequest });
+
+		expect(stdoutSpy).toHaveBeenCalledWith(
+			expect.stringContaining('"_tag":"success","value":{"status":401}'),
+		);
+	});
+
+	it("runs in the app bundle, so verify handlers may capture module scope", async () => {
+		const signingSecret = "shh";
+		const incoming = workflow({
+			name: "Incoming",
+			description: "Processes an incoming webhook",
+			triggers: [events.webhook()],
+			verify: (request) => ({
+				status: request.headers["x-signature"] === signingSecret ? 200 : 401,
+			}),
+			handler: () => {},
+		});
+
+		const response = await incoming.handler(
+			{ request: { ...verifyRequest, headers: { "x-signature": "shh" } } },
+			{ concreteOutput: true },
+		);
+
+		expect(response).toEqual({ status: 200 });
+	});
+
+	it("uses a file-backed verify request instead of the inline invocation", async () => {
+		if (!metadataDirectory) {
+			throw new Error("Metadata directory was not created");
+		}
+		const payloadPath = join(metadataDirectory, "verify-input.json");
+		await writeFile(
+			payloadPath,
+			JSON.stringify({ request: { ...verifyRequest, rawBody: '{"challenge":"file"}' } }),
+		);
+		process.env.NOTION_INPUT_PAYLOAD_PATH = payloadPath;
+
+		const incoming = workflow({
+			name: "Incoming",
+			description: "Processes an incoming webhook",
+			triggers: [events.webhook()],
+			verify: (request) => ({
+				status: 200,
+				body: (JSON.parse(request.rawBody) as { challenge: string }).challenge,
+			}),
+			handler: () => {},
+		});
+
+		const response = await incoming.handler(
+			{ request: verifyRequest },
+			{ concreteOutput: true },
+		);
+
+		expect(response).toEqual({ status: 200, body: "file" });
+	});
+
+	it("still dispatches trigger events to the workflow handler when verify is configured", async () => {
+		const handler = vi.fn();
+		const webhookEvent = { type: "webhooks.webhook" } as WebhookEvent;
+		const incoming = workflow({
+			name: "Incoming",
+			description: "Processes an incoming webhook",
+			triggers: [events.webhook()],
+			verify: () => ({ status: 200 }),
+			handler,
+		});
+
+		const result = await incoming.handler(webhookEvent, { concreteOutput: true });
+
+		expect(result).toEqual({ status: "success" });
+		expect(handler).toHaveBeenCalledWith(webhookEvent, expect.anything());
+	});
+
+	it("rejects a verify invocation when no verify handler is declared", async () => {
+		const handler = vi.fn();
+		const incoming = workflow({
+			name: "Incoming",
+			description: "Processes an incoming webhook",
+			triggers: [events.webhook()],
+			handler,
+		});
+
+		await expect(
+			incoming.handler({ request: verifyRequest }, { concreteOutput: true }),
+		).rejects.toThrow(/does not declare a verify handler/);
+		expect(handler).not.toHaveBeenCalled();
+	});
+});

package/src/workflow.ts

@@ -26,6 +26,7 @@ import { readRunMetadata, type RunMetadata } from "./runtime-metadata.js";
 import { createWorkflowEvents } from "./events.generated.js";
 import { createWorkflowStepState, type WorkflowState } from "./workflow-state.js";
 import type {
+	WebhookTrigger,
 	WorkflowEventMap,
 	WorkflowTrigger,
 	WorkflowEventCreators,
@@ -37,6 +38,9 @@ type HandlerOptions = {
 	concreteOutput?: true;
 };
 
+/** The only trigger whose deliveries a verify handler can answer. */
+const WEBHOOK_TRIGGER_TYPE: WebhookTrigger["type"] = "webhooks.webhook";
+
 type WorkflowWaitDurationValues = {
 	milliseconds?: number;
 	seconds?: number;
@@ -215,6 +219,73 @@ export {
 	type OAuthConnection,
 } from "./connections.js";
 
+/**
+ * The inbound HTTP request passed to a webhook verify handler.
+ */
+export type WebhookVerifyRequest = {
+	/** Uppercase HTTP method. Deliveries are POSTs; GET/HEAD cover challenge probes. */
+	method: "GET" | "HEAD" | "POST";
+	/** The full webhook URL as received. */
+	url: string;
+	/** Query string parameters. */
+	query: Record<string, string>;
+	/** Request headers with lowercased names. */
+	headers: Record<string, string>;
+	/** Raw request body. Empty string for bodyless methods like GET and HEAD. */
+	rawBody: string;
+};
+
+/**
+ * The HTTP response a verify handler produces. `deliver`, when present,
+ * explicitly controls whether the request is enqueued for the workflow
+ * handler. Otherwise delivery is derived from the status: 2xx enqueues and 4xx
+ * does not.
+ */
+export type WebhookVerifyResponse = {
+	/** Response status code. Only 2xx and 4xx statuses are allowed. */
+	status: number;
+	/** Optional response body, at most 8KB. */
+	body?: string;
+	/** Response content type. Defaults to "text/plain". */
+	contentType?: "application/json" | "text/plain";
+	/**
+	 * Whether to enqueue the request for the workflow handler. Defaults to true
+	 * for 2xx responses and false for 4xx responses.
+	 */
+	deliver?: boolean;
+};
+
+/**
+ * A webhook verify handler. Runs synchronously at Notion's webhook ingress,
+ * before the HTTP response is sent, in the app's own sandbox — the same
+ * runtime as the workflow handler, with the full Node.js standard library.
+ * Read signing secrets from `process.env` and use `node:crypto` for
+ * signature checks.
+ *
+ * Keep it fast: the run must fit a small wall-clock budget (a few seconds,
+ * including sandbox startup), so avoid network calls — including
+ * `context.notion` API calls, which typically won't fit the budget.
+ */
+export type WebhookVerifyHandler = (
+	request: WebhookVerifyRequest,
+	context: CapabilityContext,
+) => WebhookVerifyResponse | Promise<WebhookVerifyResponse>;
+
+/**
+ * A verify invocation as dispatched by the platform: a single `request`
+ * object rather than the event a workflow invocation carries.
+ */
+export type WebhookVerifyInvocation = {
+	request: WebhookVerifyRequest;
+};
+
+/**
+ * A trigger as the manifest records it. A declared `verify` handler is flagged
+ * on the webhook trigger itself, which is where the platform reads it to decide
+ * whether to run `verify` at webhook ingress.
+ */
+export type WorkflowManifestTrigger = WorkflowTrigger | (WebhookTrigger & { hasVerify: true });
+
 /**
  * Configuration passed to {@link workflow}.
  */
@@ -252,6 +323,40 @@ export type WorkflowConfiguration<
 	 */
 	connections?: TConnections;
 
+	/**
+	 * Optional synchronous verification handler, run at Notion's webhook
+	 * ingress before the HTTP response is sent. Use it for providers that
+	 * require a synchronous verification response: signature checks with
+	 * specific status codes, challenge echoes, or handshake requests.
+	 *
+	 * Only workflows with an `events.webhook()` trigger may declare one.
+	 *
+	 * The handler controls the HTTP response. Return `deliver: true` to enqueue
+	 * the request for the workflow handler, or `deliver: false` to answer the
+	 * provider without enqueueing it. When omitted, 2xx enqueues and 4xx does
+	 * not. `verify` runs in the app's own sandbox with full Node.js — read
+	 * secrets from `process.env` and use `node:crypto` for signature checks. It
+	 * receives the capability context as its second argument, without the run
+	 * metadata and `step` a workflow run carries.
+	 *
+	 * Without `verify`, the webhook keeps the current behavior: every request
+	 * is accepted with `202` and processed asynchronously.
+	 *
+	 * @example
+	 * ```ts
+	 * verify: (request) => {
+	 *   const signature = createHmac("sha256", process.env.WEBHOOK_SECRET ?? "")
+	 *     .update(request.rawBody)
+	 *     .digest("hex");
+	 *   const expected = Buffer.from(`sha256=${signature}`);
+	 *   const actual = Buffer.from(request.headers["x-hub-signature-256"] ?? "");
+	 *   const verified = expected.length === actual.length && timingSafeEqual(expected, actual);
+	 *   return verified ? { status: 200 } : { status: 401, body: "Invalid signature" };
+	 * },
+	 * ```
+	 */
+	verify?: WebhookVerifyHandler;
+
 	handler: (
 		event: WorkflowEventForTriggers<TTriggers>,
 		context: WorkflowContext<TConnections, TAccess>,
@@ -283,14 +388,14 @@ export type Workflow<
 	config: {
 		name: string;
 		description: string;
-		triggers: TTriggers;
+		triggers: WorkflowManifestTrigger[];
 		connections?: readonly WorkflowConnectionRequirement[];
 		access?: WorkflowAccessRequirements;
 	};
 	handler: (
-		event: WorkflowEventForTriggers<TTriggers>,
+		input: WorkflowEventForTriggers<TTriggers> | WebhookVerifyInvocation,
 		options?: HandlerOptions,
-	) => Promise<WorkflowHandlerResult | undefined>;
+	) => Promise<WorkflowHandlerResult | WebhookVerifyResponse | undefined>;
 };
 
 /**
@@ -355,21 +460,54 @@ export function workflow<
 			: configuration.triggers;
 	validateTriggerConnections(triggers, requirements);
 
+	if (
+		configuration.verify !== undefined &&
+		!triggers.some((trigger) => trigger.type === WEBHOOK_TRIGGER_TYPE)
+	) {
+		throw new Error(
+			`Workflow "${configuration.name}" declares a verify handler but has no webhook trigger. ` +
+				`Add events.webhook() or remove verify.`,
+		);
+	}
+
 	return {
 		_tag: "workflow",
 		config: {
 			name: configuration.name,
 			description: configuration.description,
-			triggers,
+			triggers: manifestTriggers(triggers, configuration.verify !== undefined),
 			...(configuration.connections === undefined ? {} : { connections: requirements }),
 			...(configuration.access === undefined ? {} : { access: accessRequirements }),
 		},
 		async handler(
-			event: WorkflowEventForTriggers<TTriggers>,
+			input: WorkflowEventForTriggers<TTriggers> | WebhookVerifyInvocation,
 			options?: HandlerOptions,
-		): Promise<WorkflowHandlerResult | undefined> {
+		): Promise<WorkflowHandlerResult | WebhookVerifyResponse | undefined> {
 			try {
-				event = await resolveRuntimeInput(event);
+				input = await resolveRuntimeInput(input);
+
+				if (isVerifyInvocation(input)) {
+					if (configuration.verify === undefined) {
+						throw new Error(
+							`Workflow "${configuration.name}" received a verify request but does not ` +
+								`declare a verify handler`,
+						);
+					}
+
+					const response = await configuration.verify(
+						input.request,
+						createCapabilityContext(),
+					);
+
+					if (options?.concreteOutput) {
+						return response;
+					}
+
+					writeOutput({ _tag: "success", value: response });
+					return undefined;
+				}
+
+				const event = input;
 				const runMetadata = readRunMetadata();
 				const baseContext = createCapabilityContext();
 				const step = createStep(runMetadata);
@@ -423,6 +561,31 @@ export function workflow<
 	};
 }
 
+/**
+ * The triggers as the manifest records them. The manifest only records that a
+ * verify handler exists, flagged on the webhook trigger; the handler itself
+ * ships in the app bundle and runs via a verify invocation.
+ */
+function manifestTriggers(
+	triggers: readonly WorkflowTrigger[],
+	hasVerify: boolean,
+): WorkflowManifestTrigger[] {
+	return triggers.map((trigger) =>
+		hasVerify && trigger.type === WEBHOOK_TRIGGER_TYPE
+			? { ...trigger, hasVerify: true as const }
+			: trigger,
+	);
+}
+
+/**
+ * Whether an invocation is the platform's synchronous verify dispatch. The
+ * platform sends workflow invocations as a trigger event and verify
+ * invocations as a `{ request }` object, so the shape disambiguates.
+ */
+function isVerifyInvocation(input: unknown): input is WebhookVerifyInvocation {
+	return typeof input === "object" && input !== null && "request" in input;
+}
+
 /** Context passed to a workflow step. */
 export type StepContext = {
 	/**