From 56b7242f8fa7f753aa70487a68897105da44d67c Mon Sep 17 00:00:00 2001
From: Olga Silva <osilva@cloudflare.com>
Date: Tue, 12 May 2026 10:41:21 +0100
Subject: [PATCH] [Workflows] Add sensitive step output option

---
 types/defines/rpc.d.ts                           | 4 ++++
 types/generated-snapshot/experimental/index.d.ts | 3 +++
 types/generated-snapshot/experimental/index.ts   | 3 +++
 types/generated-snapshot/latest/index.d.ts       | 3 +++
 types/generated-snapshot/latest/index.ts         | 3 +++
 5 files changed, 16 insertions(+)

diff --git a/types/defines/rpc.d.ts b/types/defines/rpc.d.ts
index dd08791145b..72a9aacc6e9 100644
--- a/types/defines/rpc.d.ts
+++ b/types/defines/rpc.d.ts
@@ -296,6 +296,8 @@ declare namespace CloudflareWorkersModule {
 
   export type WorkflowBackoff = 'constant' | 'linear' | 'exponential';
 
+  export type WorkflowStepSensitivity = 'output';
+
   export type WorkflowStepConfig = {
     retries?: {
       limit: number;
@@ -303,6 +305,7 @@ declare namespace CloudflareWorkersModule {
       backoff?: WorkflowBackoff;
     };
     timeout?: WorkflowTimeoutDuration | number;
+    sensitive?: WorkflowStepSensitivity;
   };
 
   export type WorkflowEvent<T> = {
@@ -315,6 +318,7 @@ declare namespace CloudflareWorkersModule {
     payload: Readonly<T>;
     timestamp: Date;
     type: string;
+    sensitive?: WorkflowStepSensitivity;
   };
 
   export type WorkflowStepContext = {
diff --git a/types/generated-snapshot/experimental/index.d.ts b/types/generated-snapshot/experimental/index.d.ts
index 85f9cb25e56..ca61a6bb4ee 100755
--- a/types/generated-snapshot/experimental/index.d.ts
+++ b/types/generated-snapshot/experimental/index.d.ts
@@ -14400,6 +14400,7 @@ declare namespace CloudflareWorkersModule {
   export type WorkflowTimeoutDuration = WorkflowSleepDuration;
   export type WorkflowRetentionDuration = WorkflowSleepDuration;
   export type WorkflowBackoff = "constant" | "linear" | "exponential";
+  export type WorkflowStepSensitivity = "output";
   export type WorkflowStepConfig = {
     retries?: {
       limit: number;
@@ -14407,6 +14408,7 @@ declare namespace CloudflareWorkersModule {
       backoff?: WorkflowBackoff;
     };
     timeout?: WorkflowTimeoutDuration | number;
+    sensitive?: WorkflowStepSensitivity;
   };
   export type WorkflowEvent<T> = {
     payload: Readonly<T>;
@@ -14417,6 +14419,7 @@ declare namespace CloudflareWorkersModule {
     payload: Readonly<T>;
     timestamp: Date;
     type: string;
+    sensitive?: WorkflowStepSensitivity;
   };
   export type WorkflowStepContext = {
     step: {
diff --git a/types/generated-snapshot/experimental/index.ts b/types/generated-snapshot/experimental/index.ts
index d8afd32e79c..e0e295e740e 100755
--- a/types/generated-snapshot/experimental/index.ts
+++ b/types/generated-snapshot/experimental/index.ts
@@ -14371,6 +14371,7 @@ export declare namespace CloudflareWorkersModule {
   export type WorkflowTimeoutDuration = WorkflowSleepDuration;
   export type WorkflowRetentionDuration = WorkflowSleepDuration;
   export type WorkflowBackoff = "constant" | "linear" | "exponential";
+  export type WorkflowStepSensitivity = "output";
   export type WorkflowStepConfig = {
     retries?: {
       limit: number;
@@ -14378,6 +14379,7 @@ export declare namespace CloudflareWorkersModule {
       backoff?: WorkflowBackoff;
     };
     timeout?: WorkflowTimeoutDuration | number;
+    sensitive?: WorkflowStepSensitivity;
   };
   export type WorkflowEvent<T> = {
     payload: Readonly<T>;
@@ -14388,6 +14390,7 @@ export declare namespace CloudflareWorkersModule {
     payload: Readonly<T>;
     timestamp: Date;
     type: string;
+    sensitive?: WorkflowStepSensitivity;
   };
   export type WorkflowStepContext = {
     step: {
diff --git a/types/generated-snapshot/latest/index.d.ts b/types/generated-snapshot/latest/index.d.ts
index 9dd7f83b0da..4e0c3a7fb6d 100755
--- a/types/generated-snapshot/latest/index.d.ts
+++ b/types/generated-snapshot/latest/index.d.ts
@@ -13732,6 +13732,7 @@ declare namespace CloudflareWorkersModule {
   export type WorkflowTimeoutDuration = WorkflowSleepDuration;
   export type WorkflowRetentionDuration = WorkflowSleepDuration;
   export type WorkflowBackoff = "constant" | "linear" | "exponential";
+  export type WorkflowStepSensitivity = "output";
   export type WorkflowStepConfig = {
     retries?: {
       limit: number;
@@ -13739,6 +13740,7 @@ declare namespace CloudflareWorkersModule {
       backoff?: WorkflowBackoff;
     };
     timeout?: WorkflowTimeoutDuration | number;
+    sensitive?: WorkflowStepSensitivity;
   };
   export type WorkflowEvent<T> = {
     payload: Readonly<T>;
@@ -13749,6 +13751,7 @@ declare namespace CloudflareWorkersModule {
     payload: Readonly<T>;
     timestamp: Date;
     type: string;
+    sensitive?: WorkflowStepSensitivity;
   };
   export type WorkflowStepContext = {
     step: {
diff --git a/types/generated-snapshot/latest/index.ts b/types/generated-snapshot/latest/index.ts
index 4fdac7047be..b34e85a02f6 100755
--- a/types/generated-snapshot/latest/index.ts
+++ b/types/generated-snapshot/latest/index.ts
@@ -13703,6 +13703,7 @@ export declare namespace CloudflareWorkersModule {
   export type WorkflowTimeoutDuration = WorkflowSleepDuration;
   export type WorkflowRetentionDuration = WorkflowSleepDuration;
   export type WorkflowBackoff = "constant" | "linear" | "exponential";
+  export type WorkflowStepSensitivity = "output";
   export type WorkflowStepConfig = {
     retries?: {
       limit: number;
@@ -13710,6 +13711,7 @@ export declare namespace CloudflareWorkersModule {
       backoff?: WorkflowBackoff;
     };
     timeout?: WorkflowTimeoutDuration | number;
+    sensitive?: WorkflowStepSensitivity;
   };
   export type WorkflowEvent<T> = {
     payload: Readonly<T>;
@@ -13720,6 +13722,7 @@ export declare namespace CloudflareWorkersModule {
     payload: Readonly<T>;
     timestamp: Date;
     type: string;
+    sensitive?: WorkflowStepSensitivity;
   };
   export type WorkflowStepContext = {
     step: {