ReadonlyidOptional ReadonlypollPoll cadence in ms for the host DO's alarm. Absent/0 disables automatic
alarms; a supplied pollForDeliveries remains callable through /poll.
OptionalextractThe external-resource key(s) a parsed webhook payload concerns, matched
against subscriptions' externalResourceId. Returns an empty array when the
payload names no resource this provider tracks.
OptionalpollCheck external state for a batch of REHYDRATED subscriptions (the host DO passes the D1 rows, not core's in-memory registry) and return the deliveries. The host routes each through the topology. Absent ⇒ webhook-only.
OptionalverifyVerify a webhook's provider signature over the RAW request bytes, BEFORE the body is parsed — a forged signature must be refused without ever inspecting the payload. MUST be constant-time. Absent ⇒ the provider accepts no webhooks (every webhook fails closed), so a webhook provider MUST supply it.
The DO-host + webhook contract a flowsafe-hosted provider exposes. The host DO drives
pollForDeliveries; the webhook route drivesverifyWebhookSignature(over the RAW bytes, before any parse),extractResourceIds, andbuildNotification. A provider implements only the seams its transport needs — a webhook-only provider omitspollForDeliveries, a poll-only one omits the webhook trio.