@notionhq/apps 0.0.41 → 0.0.44

package/src/connections.test.ts

@@ -13,15 +13,59 @@ afterEach(() => {
 });
 
 describe("connection requirements", () => {
+	it("rejects Calendar declarations that omit explicit access", () => {
+		expect(() => normalizeConnectionRequirements({ work: { type: "calendar" } })).toThrow(
+			"scope and readTeammatesCalendars",
+		);
+	});
+	it.each([
+		{ scope: "read" },
+		{ readTeammatesCalendars: false },
+		{ scope: "write", readTeammatesCalendars: false },
+		{ scope: "read", readTeammatesCalendars: "false" },
+	])("rejects invalid Calendar options: %j", (calendar) => {
+		expect(() =>
+			Reflect.apply(normalizeConnectionRequirements, undefined, [
+				{ work: { type: "calendar", calendar } },
+			]),
+		).toThrow("scope and readTeammatesCalendars");
+	});
+	it("rejects Calendar options on other providers", () => {
+		expect(() =>
+			normalizeConnectionRequirements({
+				work: { type: "mail", calendar: { scope: "read", readTeammatesCalendars: false } },
+			}),
+		).toThrow("only valid on Calendar");
+	});
+	it("preserves explicit write and teammate choices in the manifest", () => {
+		const connection = connections.calendar({
+			scope: "read_write",
+			readTeammatesCalendars: true,
+		});
+		const normalized = normalizeConnectionRequirements({ work: connection });
+		if (!connection.calendar) throw new Error("Missing Calendar options");
+		connection.calendar.readTeammatesCalendars = false;
+		expect(normalized).toEqual([
+			{
+				type: "calendar",
+				key: "work",
+				calendar: { scope: "read_write", readTeammatesCalendars: true },
+			},
+		]);
+	});
 	it("normalizes object keys into manifest requirements", () => {
 		expect(
 			normalizeConnectionRequirements({
-				work: connections.calendar(),
+				work: connections.calendar({ scope: "read", readTeammatesCalendars: false }),
 				support: connections.slack(),
 				team: connections.slack(),
 			}),
 		).toEqual([
-			{ type: "calendar", key: "work" },
+			{
+				type: "calendar",
+				key: "work",
+				calendar: { scope: "read", readTeammatesCalendars: false },
+			},
 			{ type: "slack", key: "support" },
 			{ type: "slack", key: "team" },
 		]);
@@ -44,10 +88,14 @@ describe("connection requirements", () => {
 			Reflect.apply(normalizeConnectionRequirements, undefined, [[connections.slack()]]),
 		).toThrow("must be an object");
 		const inherited = { support: connections.slack() };
-		Object.setPrototypeOf(inherited, { hidden: connections.calendar() });
+		Object.setPrototypeOf(inherited, {
+			hidden: connections.calendar({ scope: "read", readTeammatesCalendars: false }),
+		});
 		expect(() => normalizeConnectionRequirements(inherited)).toThrow("only own");
 		const hidden = { support: connections.slack() };
-		Object.defineProperty(hidden, "hidden", { value: connections.calendar() });
+		Object.defineProperty(hidden, "hidden", {
+			value: connections.calendar({ scope: "read", readTeammatesCalendars: false }),
+		});
 		expect(() => normalizeConnectionRequirements(hidden)).toThrow("enumerable strings");
 		const symbolic = { [Symbol("support")]: connections.slack() };
 		expect(() => normalizeConnectionRequirements(symbolic)).toThrow("enumerable strings");
@@ -120,7 +168,7 @@ describe("workflow connection runtime", () => {
 		const declarations = { support: connections.slack(), team: connections.slack() };
 		const runtime = createWorkflowConnections(notion, declarations);
 		Object.assign(declarations, {
-			support: connections.calendar(),
+			support: connections.calendar({ scope: "read", readTeammatesCalendars: false }),
 			injected: connections.slack(),
 		});
 		await runtime.support.findUserByEmail({ email: "support@example.com" });
@@ -194,6 +242,52 @@ describe("workflow connection runtime", () => {
 		]);
 	});
 
+	it("routes Slack channel writes through their configured connection", async () => {
+		vi.stubEnv(
+			"NOTION_CONNECTION_BINDINGS",
+			'[{"key":"support","type":"slack","id":"support-id"}]',
+		);
+		const notion = new Client({ auth: "test" });
+		const request = vi.spyOn(notion, "request").mockResolvedValue({ result: {} });
+		const slack = createWorkflowConnections(notion, {
+			support: connections.slack(),
+		}).support;
+
+		await slack.createThreadInChannel({ channelId: "C123", message: "New update" });
+		await slack.replyInThread({
+			prefixedThreadUri: "slackMessage://example.slack.com/C123/123/123",
+			message: "Reply",
+		});
+		await slack.updateMessage({
+			prefixedMessageUri: "slackMessage://example.slack.com/C123/123/123",
+			message: "Edited update",
+		});
+
+		expect(request.mock.calls.map(([input]) => input.body)).toEqual([
+			{
+				connection: "support-id",
+				action: "createThreadInChannel",
+				args: { channelId: "C123", message: "New update" },
+			},
+			{
+				connection: "support-id",
+				action: "replyInThread",
+				args: {
+					prefixedThreadUri: "slackMessage://example.slack.com/C123/123/123",
+					message: "Reply",
+				},
+			},
+			{
+				connection: "support-id",
+				action: "updateMessage",
+				args: {
+					prefixedMessageUri: "slackMessage://example.slack.com/C123/123/123",
+					message: "Edited update",
+				},
+			},
+		]);
+	});
+
 	it("does not parse missing or malformed bindings until a declared client is used", () => {
 		vi.stubEnv("NOTION_CONNECTION_BINDINGS", "not json");
 		const runtime = createWorkflowConnections(new Client(), { support: connections.slack() });
@@ -263,7 +357,7 @@ describe("workflow connection runtime", () => {
 		const notion = new Client({ auth: "test" });
 		const request = vi.spyOn(notion, "request").mockResolvedValue({ result: { accounts: [] } });
 		const result = await createWorkflowConnections(notion, {
-			calendar: connections.calendar(),
+			calendar: connections.calendar({ scope: "read", readTeammatesCalendars: false }),
 		}).calendar.listCalendars({});
 		expect(result.accounts).toEqual([]);
 		expect(request).toHaveBeenCalledWith({

package/src/connections.ts

@@ -13,6 +13,12 @@ import type { ConnectionActionInvoker } from "./connection-actions.js";
 export type WorkflowConnection<TProvider extends string = string> = {
 	type: TProvider;
 	oauth?: OAuthConfiguration;
+	calendar?: CalendarConnectionOptions;
+};
+
+export type CalendarConnectionOptions = {
+	scope: "read" | "read_write";
+	readTeammatesCalendars: boolean;
 };
 
 export type WorkflowConnectionDeclarations = Readonly<Record<string, WorkflowConnection>>;
@@ -94,6 +100,19 @@ export function normalizeConnectionRequirements(
 				"Declare a connection key as its workflow object property, not in the provider options.",
 			);
 
+		if (requirement.type === "calendar") {
+			const options = requirement.calendar;
+			if (
+				!options ||
+				!["read", "read_write"].includes(options.scope) ||
+				typeof options.readTeammatesCalendars !== "boolean"
+			) {
+				throw new Error("Calendar connections require scope and readTeammatesCalendars.");
+			}
+		} else if (requirement.calendar !== undefined) {
+			throw new Error("Calendar options are only valid on Calendar connections.");
+		}
+
 		if (requirement.type === "oauth") {
 			if (!requirement.oauth)
 				throw new Error("OAuth connections require provider configuration.");
@@ -105,6 +124,9 @@ export function normalizeConnectionRequirements(
 		return {
 			type: requirement.type,
 			key,
+			...(requirement.calendar === undefined
+				? {}
+				: { calendar: { ...requirement.calendar } }),
 			...(requirement.oauth === undefined
 				? {}
 				: { oauth: structuredClone(requirement.oauth) }),

package/src/providers.generated.ts

@@ -1,6 +1,9 @@
 // Generated by notion tool-core codegen-script-types --connections. Do not edit.
 import type { ConnectionActionInvoker } from "./connection-actions.js"
-import type { WorkflowConnection } from "./connections.js"
+import type {
+	WorkflowConnection,
+	CalendarConnectionOptions,
+} from "./connections.js"
 import { CalendarConnectionClient } from "./calendar.generated.js"
 import { MailConnectionClient } from "./mail.generated.js"
 import { SlackConnectionClient } from "./slack.generated.js"
@@ -10,7 +13,6 @@ import { CursorConnectionClient } from "./cursor.generated.js"
 import { BoxConnectionClient } from "./box.generated.js"
 import { ConfluenceConnectionClient } from "./confluence.generated.js"
 import { GoogleDriveConnectionClient } from "./googleDrive.generated.js"
-import { OutlookConnectionClient } from "./outlook.generated.js"
 import { SalesforceConnectionClient } from "./salesforce.generated.js"
 export const connections = {
 	calendar,
@@ -22,7 +24,6 @@ export const connections = {
 	box,
 	confluence,
 	googleDrive,
-	outlook,
 	salesforce,
 }
 export type ConnectionClients = {
@@ -35,7 +36,6 @@ export type ConnectionClients = {
 	box: BoxConnectionClient
 	confluence: ConfluenceConnectionClient
 	googleDrive: GoogleDriveConnectionClient
-	outlook: OutlookConnectionClient
 	salesforce: SalesforceConnectionClient
 }
 export function createConnectionClient(
@@ -61,16 +61,16 @@ export function createConnectionClient(
 			return new ConfluenceConnectionClient(invoker)
 		case "googleDrive":
 			return new GoogleDriveConnectionClient(invoker)
-		case "outlook":
-			return new OutlookConnectionClient(invoker)
 		case "salesforce":
 			return new SalesforceConnectionClient(invoker)
 		default:
 			throw new Error("Unsupported connection provider: " + provider)
 	}
 }
-function calendar(): WorkflowConnection<"calendar"> {
-	return { type: "calendar" }
+function calendar(
+	options: CalendarConnectionOptions,
+): WorkflowConnection<"calendar"> {
+	return { type: "calendar", calendar: { ...options } }
 }
 function mail(): WorkflowConnection<"mail"> {
 	return { type: "mail" }
@@ -96,9 +96,6 @@ function confluence(): WorkflowConnection<"confluence"> {
 function googleDrive(): WorkflowConnection<"googleDrive"> {
 	return { type: "googleDrive" }
 }
-function outlook(): WorkflowConnection<"outlook"> {
-	return { type: "outlook" }
-}
 function salesforce(): WorkflowConnection<"salesforce"> {
 	return { type: "salesforce" }
 }

package/src/slack.generated.ts

@@ -27,6 +27,96 @@ export type AddReactionToMessageScriptOutput = {
 	message?: string
 }
 
+/**
+ * Script input for the "Create a new thread in a Slack channel" effect (`slack.createThreadInChannel`),
+ * derived from its Tool Core definition's call_function input projection.
+ *
+ * Create a new thread in a Slack channel
+ */
+export type CreateThreadInChannelScriptInput =
+	| {
+			/**
+			 * The Slack ID of the channel to send the message in.
+			 */
+			channelId: string
+			/**
+			 * The file IDs of any files attached to the message.
+			 */
+			attachedFileIds?: Array<string>
+			/**
+			 * Raw Slack user ID that should be the only user able to see the message. Omit for a normal channel message.
+			 */
+			ephemeralUserId?: string
+			/**
+			 * Message body in standard Markdown. Never use Notion rich-text XML such as <mention>; write Notion references as Markdown links ([label](https://example.com)). Use Slack mention tokens only when a verified Slack ID is available.
+			 */
+			message: string
+			/**
+			 * Whether to unfurl links in Slack. Defaults to true.
+			 */
+			unfurlLinks?: boolean
+			/**
+			 * A confirmation token for sending messages with URLs that require user approval. Do NOT provide unless specifically instructed or unless an error provides the token.
+			 */
+			userConfirmationToken?: string
+	  }
+	| {
+			/**
+			 * The name of the channel without the # symbol. For example, "engineering".
+			 */
+			channelName: string
+			/**
+			 * The file IDs of any files attached to the message.
+			 */
+			attachedFileIds?: Array<string>
+			/**
+			 * Raw Slack user ID that should be the only user able to see the message. Omit for a normal channel message.
+			 */
+			ephemeralUserId?: string
+			/**
+			 * Message body in standard Markdown. Never use Notion rich-text XML such as <mention>; write Notion references as Markdown links ([label](https://example.com)). Use Slack mention tokens only when a verified Slack ID is available.
+			 */
+			message: string
+			/**
+			 * Whether to unfurl links in Slack. Defaults to true.
+			 */
+			unfurlLinks?: boolean
+			/**
+			 * A confirmation token for sending messages with URLs that require user approval. Do NOT provide unless specifically instructed or unless an error provides the token.
+			 */
+			userConfirmationToken?: string
+	  }
+
+/**
+ * Canonical Tool Core output for the "Create a new thread in a Slack channel" effect (`slack.createThreadInChannel`).
+ * This is the definition's output schema; the effect's script surface may
+ * re-encode it before returning.
+ */
+export type CreateThreadInChannelScriptOutput = {
+	channelId: string
+	channelUri: string
+	from:
+		| {
+				handle: string
+				id: string
+				type: "user"
+				uri: string
+		  }
+		| {
+				type: "bot"
+		  }
+	id: string
+	message: string
+	threadId: string
+	timestamp: string
+	uri: string
+	url: string
+	urls: Array<string>
+	channel?: string
+	fileIds?: Array<string>
+	files?: Array<string>
+}
+
 /**
  * Script input for the "Find a Slack user by email" effect (`slack.findUserByEmail`),
  * derived from its Tool Core definition's call_function input projection.
@@ -428,6 +518,52 @@ export type RemoveReactionFromMessageScriptOutput = {
 	message?: string
 }
 
+/**
+ * Script input for the "Reply to Slack thread" effect (`slack.replyInThread`),
+ * derived from its Tool Core definition's call_function input projection.
+ *
+ * Reply in a Slack thread
+ */
+export type ReplyInThreadScriptInput = {
+	/**
+	 * The file IDs of any files attached to the message.
+	 */
+	attachedFileIds?: Array<string>
+	/**
+	 * Raw Slack user ID that should be the only user able to see the reply. Omit for a normal thread reply.
+	 */
+	ephemeralUserId?: string
+	/**
+	 * The thread URI to reply to. If there is a Slack message trigger, use the thread-id attribute from the trigger message.
+	 */
+	prefixedThreadUri: string
+	/**
+	 * The Slack markdown message to post in the thread.
+	 */
+	message: string
+	/**
+	 * Whether to unfurl links in Slack. Defaults to true.
+	 */
+	unfurlLinks?: boolean
+	/**
+	 * A confirmation token for sending messages with URLs that require user approval. Do NOT provide unless specifically instructed or unless an error provides the token.
+	 */
+	userConfirmationToken?: string
+}
+
+/**
+ * Canonical Tool Core output for the "Reply to Slack thread" effect (`slack.replyInThread`).
+ * This is the definition's output schema; the effect's script surface may
+ * re-encode it before returning.
+ */
+export type ReplyInThreadScriptOutput = {
+	message: string
+	url: string
+	channelId: string
+	threadId: string
+	slackMessageId: string
+}
+
 /**
  * Script input for the "Search Slack messages" effect (`slack.search`),
  * derived from its Tool Core definition's call_function input projection.
@@ -478,6 +614,57 @@ export type SearchScriptOutput = {
 	}>
 }
 
+/**
+ * Script input for the "Update a Slack message" effect (`slack.updateMessage`),
+ * derived from its Tool Core definition's call_function input projection.
+ *
+ * Update a Slack message
+ */
+export type UpdateMessageScriptInput = {
+	/**
+	 * The URI of the Slack message
+	 */
+	prefixedMessageUri: string
+	/**
+	 * Message body in standard Markdown. Never use Notion rich-text XML such as <mention>; write Notion references as Markdown links ([label](https://example.com)). Use Slack mention tokens only when a verified Slack ID is available.
+	 */
+	message: string
+	/**
+	 * Whether to unfurl links in Slack. Defaults to true.
+	 */
+	unfurlLinks?: boolean
+}
+
+/**
+ * Canonical Tool Core output for the "Update a Slack message" effect (`slack.updateMessage`).
+ * This is the definition's output schema; the effect's script surface may
+ * re-encode it before returning.
+ */
+export type UpdateMessageScriptOutput = {
+	channelId: string
+	channelUri: string
+	from:
+		| {
+				handle: string
+				id: string
+				type: "user"
+				uri: string
+		  }
+		| {
+				type: "bot"
+		  }
+	id: string
+	message: string
+	threadId: string
+	timestamp: string
+	uri: string
+	url: string
+	urls: Array<string>
+	channel?: string
+	fileIds?: Array<string>
+	files?: Array<string>
+}
+
 /**
  * Script input for the "View Slack file URL" effect (`slack.viewFileUrl`),
  * derived from its Tool Core definition's call_function input projection.
@@ -512,6 +699,14 @@ export class SlackConnectionClient {
 			args,
 		)
 	}
+	createThreadInChannel(
+		args: CreateThreadInChannelScriptInput,
+	): Promise<CreateThreadInChannelScriptOutput> {
+		return this.invoke<CreateThreadInChannelScriptOutput>(
+			"createThreadInChannel",
+			args,
+		)
+	}
 	findUserByEmail(
 		args: FindUserByEmailScriptInput,
 	): Promise<FindUserByEmailScriptOutput> {
@@ -557,9 +752,19 @@ export class SlackConnectionClient {
 			args,
 		)
 	}
+	replyInThread(
+		args: ReplyInThreadScriptInput,
+	): Promise<ReplyInThreadScriptOutput> {
+		return this.invoke<ReplyInThreadScriptOutput>("replyInThread", args)
+	}
 	search(args: SearchScriptInput): Promise<SearchScriptOutput> {
 		return this.invoke<SearchScriptOutput>("search", args)
 	}
+	updateMessage(
+		args: UpdateMessageScriptInput,
+	): Promise<UpdateMessageScriptOutput> {
+		return this.invoke<UpdateMessageScriptOutput>("updateMessage", args)
+	}
 	viewFileUrl(args: ViewFileUrlScriptInput): Promise<ViewFileUrlScriptOutput> {
 		return this.invoke<ViewFileUrlScriptOutput>("viewFileUrl", args)
 	}

package/src/workflow-connections-types.test.ts

@@ -20,7 +20,9 @@ it("infers only the declared provider clients", () => {
 		name: "Calendar",
 		description: "Calendar only",
 		triggers: [events.notionPageCreated()],
-		connections: { work: connections.calendar() },
+		connections: {
+			work: connections.calendar({ scope: "read", readTeammatesCalendars: false }),
+		},
 		handler(_event, context) {
 			expectTypeOf<keyof typeof context.connections>().toEqualTypeOf<"work">();
 			expectTypeOf(context.connections.work.listCalendars).toBeFunction();
@@ -30,7 +32,7 @@ it("infers only the declared provider clients", () => {
 		},
 	});
 	const requirements = {
-		calendar: connections.calendar(),
+		calendar: connections.calendar({ scope: "read", readTeammatesCalendars: false }),
 		support: connections.slack(),
 		team: connections.slack(),
 	};

package/src/workflow-types.test.ts

@@ -71,7 +71,8 @@ it("checks provider keys on callback arguments and returned triggers", () => {
 		{
 			name: "valid",
 			valid: true,
-			connections: "{ support: connections.slack(), calendar: connections.calendar() }",
+			connections:
+				"{ support: connections.slack(), calendar: connections.calendar({ scope: 'read', readTeammatesCalendars: false }) }",
 			trigger:
 				'events.slackMessage({ connectionKey: "support" }), events.calendarEventCreated({ connectionKey: "calendar" })',
 		},
@@ -102,7 +103,8 @@ it("checks provider keys on callback arguments and returned triggers", () => {
 		{
 			name: "wrong_provider",
 			valid: false,
-			connections: "{ support: connections.calendar() }",
+			connections:
+				"{ support: connections.calendar({ scope: 'read', readTeammatesCalendars: false }) }",
 			trigger: 'events.slackMessage({ connectionKey: "support" })',
 		},
 		{
@@ -120,13 +122,15 @@ it("checks provider keys on callback arguments and returned triggers", () => {
 		{
 			name: "global_invalid",
 			valid: false,
-			connections: "{ support: connections.calendar() }",
+			connections:
+				"{ support: connections.calendar({ scope: 'read', readTeammatesCalendars: false }) }",
 			trigger: 'globalTriggers.slackMessage({ connectionKey: "support" })',
 		},
 		{
 			name: "literal_invalid",
 			valid: false,
-			connections: "{ support: connections.calendar() }",
+			connections:
+				"{ support: connections.calendar({ scope: 'read', readTeammatesCalendars: false }) }",
 			trigger: '{ type: "slack.message", connectionKey: "support" }',
 		},
 		{
@@ -170,7 +174,7 @@ it("checks provider keys on callback arguments and returned triggers", () => {
 			name: "keyed_clients",
 			valid: true,
 			connections:
-				"{ support: connections.slack(), team: connections.slack(), work: connections.calendar() }",
+				"{ support: connections.slack(), team: connections.slack(), work: connections.calendar({ scope: 'read', readTeammatesCalendars: false }) }",
 			trigger: "events.notionPageCreated()",
 			handler:
 				'(_event, ctx) => { ctx.connections.support.findUserByEmail({ email: "a@example.com" }); ctx.connections.team.findUserByEmail({ email: "b@example.com" }); ctx.connections.work.listCalendars({}); }',

package/src/workflow.test.ts

@@ -1702,11 +1702,19 @@ describe("workflow", () => {
 			name: "Schedule Follow-up",
 			description: "Schedules a follow-up after a page is created",
 			triggers: [events.notionPageCreated()],
-			connections: { calendar: connections.calendar() },
+			connections: {
+				calendar: connections.calendar({ scope: "read", readTeammatesCalendars: false }),
+			},
 			handler: () => {},
 		});
 
-		expect(definition.config.connections).toEqual([{ type: "calendar", key: "calendar" }]);
+		expect(definition.config.connections).toEqual([
+			{
+				type: "calendar",
+				key: "calendar",
+				calendar: { scope: "read", readTeammatesCalendars: false },
+			},
+		]);
 	});
 
 	it("keeps declaration keys stable after the input object changes", async () => {
@@ -1721,14 +1729,19 @@ describe("workflow", () => {
 				seen.push(Object.keys(context.connections));
 			},
 		});
-		Object.assign(declarations, { support: connections.calendar(), team: connections.slack() });
+		Object.assign(declarations, {
+			support: connections.calendar({ scope: "read", readTeammatesCalendars: false }),
+			team: connections.slack(),
+		});
 		expect(definition.config.connections).toEqual([{ type: "slack", key: "support" }]);
 		await definition.handler(event, { concreteOutput: true });
 		expect(seen).toEqual([["support"]]);
 	});
 	it("rejects inherited declaration objects before cloning", () => {
 		const declarations = { support: connections.slack() };
-		Object.setPrototypeOf(declarations, { extra: connections.calendar() });
+		Object.setPrototypeOf(declarations, {
+			extra: connections.calendar({ scope: "read", readTeammatesCalendars: false }),
+		});
 		expect(() =>
 			workflow({
 				name: "Inherited keys",
@@ -1746,7 +1759,12 @@ describe("workflow", () => {
 				name: "Schedule Follow-up",
 				description: "Schedules a follow-up after a page is created",
 				triggers: [events.notionPageCreated()],
-				connections: { "bad/key": connections.calendar() },
+				connections: {
+					"bad/key": connections.calendar({
+						scope: "read",
+						readTeammatesCalendars: false,
+					}),
+				},
 				handler: () => {},
 			}),
 		).toThrowError("Invalid workflow connection key: bad/key");
@@ -2011,7 +2029,10 @@ describe("connection-bound triggers", () => {
 		const definition = workflow({
 			name: "Typed triggers",
 			description: "Uses only declared provider keys",
-			connections: { support: connections.slack(), calendar: connections.calendar() },
+			connections: {
+				support: connections.slack(),
+				calendar: connections.calendar({ scope: "read", readTeammatesCalendars: false }),
+			},
 			triggers: ({ events }) => {
 				calls += 1;
 				expectTypeOf(events.slackMessage)
@@ -2060,7 +2081,11 @@ describe("connection-bound triggers", () => {
 	});
 	it.each([
 		{ requirements: {} },
-		{ requirements: { support: connections.calendar() } },
+		{
+			requirements: {
+				support: connections.calendar({ scope: "read", readTeammatesCalendars: false }),
+			},
+		},
 		{ requirements: { other: connections.slack() } },
 	])("rejects missing or incompatible declarations: %j", ({ requirements }) => {
 		expect(() =>