@visulima/notification 1.0.16 → 1.1.0

package/CHANGELOG.md

@@ -1,3 +1,21 @@
+## @visulima/notification [1.1.0](https://github.com/visulima/visulima/compare/@visulima/notification@1.0.17...@visulima/notification@1.1.0) (2026-09-03)
+
+### Features
+
+* **notification:** add inbound channel receivers with one-call replies ([#826](https://github.com/visulima/visulima/issues/826)) ([3bd0c6f](https://github.com/visulima/visulima/commit/3bd0c6fffd8b23067fbd5a5356c74e5da4af834c))
+
+
+### Dependencies
+
+* **@visulima/email:** upgraded to 3.0.4
+
+## @visulima/notification [1.0.17](https://github.com/visulima/visulima/compare/@visulima/notification@1.0.16...@visulima/notification@1.0.17) (2026-08-19)
+
+
+### Dependencies
+
+* **@visulima/email:** upgraded to 3.0.3
+
 ## @visulima/notification [1.0.16](https://github.com/visulima/visulima/compare/%40visulima%2Fnotification%401.0.15...%40visulima%2Fnotification%401.0.16) (2026-08-19)
 
 

package/README.md

@@ -68,23 +68,23 @@ pnpm add @visulima/notification
 
 ```typescript
 import { send } from "@visulima/notification";
-import { twilioProvider } from "@visulima/notification/providers/twilio";
+import { createTwilioProvider } from "@visulima/notification/providers/twilio";
 
-await send("sms", twilioProvider({ accountSid: "AC…", authToken: "…", from: "+15555550100" }), { to: "+15555550100", text: "Your code is 123" });
+await send("sms", createTwilioProvider({ accountSid: "AC…", authToken: "…", from: "+15555550100" }), { to: "+15555550100", text: "Your code is 123" });
 ```
 
 ### Multi-channel send
 
 ```typescript
 import { createNotification } from "@visulima/notification";
-import { twilioProvider } from "@visulima/notification/providers/twilio";
-import { slackProvider } from "@visulima/notification/providers/slack";
-import { fcmProvider } from "@visulima/notification/providers/fcm";
+import { createTwilioProvider } from "@visulima/notification/providers/twilio";
+import { createSlackProvider } from "@visulima/notification/providers/slack";
+import { createFcmProvider } from "@visulima/notification/providers/fcm";
 
 const notify = createNotification({
-    sms: twilioProvider({ accountSid: "AC…", authToken: "…", from: "+15555550100" }),
-    chat: slackProvider({ token: "xoxb-…", defaultChannel: "C123" }),
-    push: fcmProvider({ projectId: "my-app", getAccessToken: async () => getGoogleToken() }),
+    sms: createTwilioProvider({ accountSid: "AC…", authToken: "…", from: "+15555550100" }),
+    chat: createSlackProvider({ token: "xoxb-…", defaultChannel: "C123" }),
+    push: createFcmProvider({ projectId: "my-app", getAccessToken: async () => getGoogleToken() }),
 });
 
 // Each present channel is delivered in parallel; you get one receipt per channel.
@@ -126,7 +126,7 @@ Providers are imported from `@visulima/notification/providers/<name>` so unused
 | **SMS**      | `twilio`, `vonage`, `plivo`, `messagebird`, `telnyx`, `sns`     |
 | **Push**     | `fcm`, `expo`, `web-push`, `apns`                               |
 | **Chat**     | `slack`, `discord`, `msteams`, `telegram`                       |
-| **In-app**   | `inAppProvider` (memory or unstorage store)                     |
+| **In-app**   | `createInAppProvider` (memory or unstorage store)               |
 | **Webhook**  | `webhook`                                                       |
 | **Email**    | `emailChannel(...)` → wraps a `@visulima/email` `Mail` instance |
 | **Wrappers** | `failover`, `roundrobin`, `opentelemetry`, `mock`               |
@@ -161,11 +161,15 @@ export const myProvider = defineProvider<MyConfig, SmsPayload>((config) => ({
 Wrap several same-channel providers to gain resilience or load balancing:
 
 ```typescript
-import { failoverProvider } from "@visulima/notification/providers/failover";
-import { roundRobinProvider } from "@visulima/notification/providers/roundrobin";
+import { createFailoverProvider } from "@visulima/notification/providers/failover";
+import { createPlivoProvider } from "@visulima/notification/providers/plivo";
+import { createRoundRobinProvider } from "@visulima/notification/providers/roundrobin";
+import { createTelnyxProvider } from "@visulima/notification/providers/telnyx";
+import { createTwilioProvider } from "@visulima/notification/providers/twilio";
+import { createVonageProvider } from "@visulima/notification/providers/vonage";
 
-const sms = failoverProvider([twilioProvider({ … }), vonageProvider({ … })]); // try Twilio, fall back to Vonage
-const balanced = roundRobinProvider([plivoProvider({ … }), telnyxProvider({ … })]);
+const sms = createFailoverProvider([createTwilioProvider({ … }), createVonageProvider({ … })]); // try Twilio, fall back to Vonage
+const balanced = createRoundRobinProvider([createPlivoProvider({ … }), createTelnyxProvider({ … })]);
 
 const notify = createNotification({ sms });
 ```
@@ -239,9 +243,9 @@ const queue = new UnstorageQueue(createStorage());
 ## In-app inbox
 
 ```typescript
-import { inAppProvider } from "@visulima/notification/channels/inapp";
+import { createInAppProvider } from "@visulima/notification/channels/inapp";
 
-const inapp = inAppProvider();
+const inapp = createInAppProvider();
 const notify = createNotification({ inapp });
 
 await notify.sendToChannel("inapp", { to: "user-1", title: "Welcome", body: "Thanks for joining" });
@@ -281,6 +285,62 @@ bus.on("sent", (event) => console.log(event.messageId));
 bus.on("*", (event) => store.append(event));
 ```
 
+## Inbound (two-way channels for bots & AI agents)
+
+Channels are two-way. Each `@visulima/notification/providers/<name>` subpath ships both halves —
+the outbound provider (`create<Name>Provider`) and the inbound receiver (`create<Name>Receiver`), which
+verifies and normalises incoming webhooks (a Slack mention, a Discord slash command, a Telegram
+message, an inbound SMS/WhatsApp) into a single `InboundMessage` you can hand to an AI agent that
+then replies through the same provider. Receivers are framework-agnostic (`handle(request:
+Request) => Promise<Response>`) and edge-safe (Web Crypto only). The `@visulima/notification/inbound`
+barrel holds the shared types, `createInboundRouter` and verification/reply helpers.
+
+```typescript
+import { createSlackReceiver } from "@visulima/notification/providers/slack";
+
+// Read the secret however your runtime exposes it: an `env` binding on
+// Cloudflare Workers, `Deno.env.get`, `process.env` on Node.
+declare const signingSecret: string;
+
+const slack = createSlackReceiver({
+    signingSecret,
+    onMessage: async (message) => {
+        if (message.type === "message") {
+            return { text: await runAgent(message.text ?? "") };
+        }
+
+        return undefined; // acknowledge; reply out-of-band via the outbound provider
+    },
+});
+
+// Cloudflare Workers / Deno / Bun / Hono / Next.js route handlers …
+export default { fetch: (request: Request) => slack.handle(request) };
+```
+
+Receivers: `createSlackReceiver` (Events API, slash commands, interactions), `createDiscordReceiver`
+(Ed25519 interactions), `createTelegramReceiver` (bot webhooks), `createTwilioReceiver` (SMS &
+WhatsApp), `createMsTeamsReceiver` (outgoing-webhook HMAC), `createTelnyxReceiver` (SMS, Ed25519),
+`createMessageBirdReceiver` and `createVonageReceiver` (SMS, signed-JWT). `createInboundRouter`
+mounts several behind one fetch handler.
+
+For the full receive → think → reply loop in one call, pass the matching outbound `provider` to
+the receiver and answer with `context.reply(...)` — it maps the inbound message to the right
+outbound payload (recipient, thread, WhatsApp prefix) and sends it:
+
+```typescript
+import { createSlackProvider, createSlackReceiver } from "@visulima/notification/providers/slack";
+
+const slack = createSlackReceiver({
+    signingSecret,
+    provider: createSlackProvider({ token }),
+    onMessage: async (message, context) => {
+        await context.reply(await runAgent(message.text ?? ""));
+    },
+});
+```
+
+See the [inbound docs](./docs/inbound.mdx).
+
 ## Supported Node.js Versions
 
 Libraries in this ecosystem make the best effort to track [Node.js' release schedule](https://github.com/nodejs/release#release-schedule).

package/dist/channels/inapp/index.d.ts

@@ -63,7 +63,7 @@ interface InAppProviderConfig {
  * @param config Provider `id` and the backing {@link InAppStore} (defaults to in-memory).
  * @returns A provider that writes notifications into the configured store.
  */
-declare const inAppProvider: (config?: InAppProviderConfig) => Provider<InAppProviderConfig, InAppPayload, InAppStore>;
+declare const inAppProvider$1: (config?: InAppProviderConfig) => Provider<InAppProviderConfig, InAppPayload, InAppStore>;
 /**
  * An {@link InAppStore} backed by an [unstorage](https://unstorage.unjs.io) driver, giving durable,
  * multi-backend persistence (Redis, filesystem, Cloudflare KV, ...). `unstorage` is an optional peer
@@ -96,4 +96,6 @@ declare class UnstorageInAppStore implements InAppStore {
  * @returns A new {@link UnstorageInAppStore}.
  */
 declare const createUnstorageInAppStore: (storage: Storage, prefix?: string) => UnstorageInAppStore;
-export { type InAppProviderConfig, type InAppStore, type ListOptions, MemoryInAppStore, type StoredNotification, UnstorageInAppStore, createUnstorageInAppStore, inAppProvider };
+/** @deprecated Renamed to `createInAppProvider`; removed in the next major. */
+declare const inAppProvider: typeof inAppProvider$1;
+export { type InAppProviderConfig, type InAppStore, type ListOptions, MemoryInAppStore, type StoredNotification, UnstorageInAppStore, inAppProvider$1 as createInAppProvider, createUnstorageInAppStore, inAppProvider };

package/dist/channels/inapp/index.js

@@ -1 +1 @@
-import{inAppProvider as e}from"../../packem_shared/inAppProvider-DWO4D6VN.js";import{MemoryInAppStore as t}from"../../packem_shared/MemoryInAppStore-B-j6qUql.js";import{UnstorageInAppStore as m,createUnstorageInAppStore as A}from"../../packem_shared/UnstorageInAppStore-ygHFsRM3.js";export{t as MemoryInAppStore,m as UnstorageInAppStore,A as createUnstorageInAppStore,e as inAppProvider};
+import{inAppProvider as r}from"../../packem_shared/createInAppProvider-DWO4D6VN.js";import{MemoryInAppStore as n}from"../../packem_shared/MemoryInAppStore-B-j6qUql.js";import{UnstorageInAppStore as A,createUnstorageInAppStore as a}from"../../packem_shared/UnstorageInAppStore-ygHFsRM3.js";const p=r;export{n as MemoryInAppStore,A as UnstorageInAppStore,r as createInAppProvider,a as createUnstorageInAppStore,p as inAppProvider};

package/dist/inbound/index.d.ts

@@ -0,0 +1,97 @@
+import { P as Provider } from "../packem_shared/provider.d-Dh32nRm9.js";
+import { b as ChatPayload, S as SmsPayload } from "../packem_shared/types.d-C7l7qdMG.js";
+import { I as InboundMessage, a as InboundReplyFunction, b as InboundReplyInput, c as InboundReply, R as Receiver } from "../packem_shared/types.d-4T7bNo4x.js";
+export type { d as InboundAttachment, e as InboundChannel, f as InboundContext, g as InboundErrorReason, h as InboundHandler, i as InboundMessageType, j as InboundParticipant, k as InboundResponse, l as ReceiverOptions } from "../packem_shared/types.d-4T7bNo4x.js";
+import "../packem_shared/types.d-BXfGenMH.js";
+/**
+ * Verifies an Ed25519 signature over `timestamp + body`, Discord's interaction signing
+ * scheme. Edge-safe — uses Web Crypto's Ed25519 primitive only (available on Node 22+ and
+ * Cloudflare Workers). Any malformed input or unsupported-algorithm error resolves to
+ * `false` rather than throwing.
+ * @param publicKeyHex The application's Ed25519 public key (hex), from the Discord dashboard.
+ * @param signatureHex The `X-Signature-Ed25519` header value (hex).
+ * @param timestamp The `X-Signature-Timestamp` header value.
+ * @param body The raw request body.
+ * @returns `true` when the signature is valid.
+ */
+declare const verifyEd25519: (publicKeyHex: string, signatureHex: string, timestamp: string, body: string) => Promise<boolean>;
+/**
+ * Verifies an Ed25519 signature over an arbitrary message, with the public key and signature
+ * supplied as base64 (Telnyx's webhook signing scheme, where the signed message is
+ * `{timestamp}|{body}`). Any malformed input resolves to `false` rather than throwing.
+ * @param publicKeyBase64 The Ed25519 public key (base64).
+ * @param signatureBase64 The header signature to check (base64).
+ * @param message The exact string that was signed (e.g. `{timestamp}|{body}` for Telnyx).
+ * @returns `true` when the signature is valid.
+ */
+declare const verifyEd25519Base64: (publicKeyBase64: string, signatureBase64: string, message: string) => Promise<boolean>;
+/**
+ * Computes the lowercase hex SHA-256 digest of a UTF-8 string — the encoding used by the
+ * `payload_hash` / `url_hash` claims in MessageBird and Vonage signed webhooks.
+ * @param value The string to hash.
+ * @returns The hex digest.
+ */
+declare const sha256Hex: (value: string) => Promise<string>;
+/**
+ * Verifies a compact HS256 JWT against `secret` and returns its decoded payload claims, or
+ * `undefined` when the token is malformed, uses a different algorithm, or the signature does
+ * not match. Signature comparison is constant-time. Edge-safe — Web Crypto only.
+ * @param token The compact JWT (`header.payload.signature`).
+ * @param secret The shared signing secret.
+ * @returns The verified payload claims, or `undefined`.
+ */
+declare const verifyHs256Jwt: (token: string, secret: string) => Promise<Record<string, unknown> | undefined>;
+/**
+ * Checks that a JWT's `exp` (and optional `nbf`) claims place `now` within the token's validity
+ * window, allowing a small clock-skew tolerance. Missing claims are treated as unbounded.
+ * @param payload The decoded claims.
+ * @param toleranceSeconds The allowed clock skew (default 5 seconds).
+ * @returns `true` when the token is temporally valid.
+ */
+declare const isJwtTimeValid: (payload: Record<string, unknown>, toleranceSeconds?: number) => boolean;
+/**
+ * Normalises the shorthand string form of a reply into an {@link InboundReply}.
+ * @param input The reply content, as an object or a plain string.
+ * @returns The reply as an object, wrapping a bare string as `{ text }`.
+ */
+declare const normaliseReply: (input: InboundReplyInput) => InboundReply;
+/**
+ * Creates the reply sender for a chat channel (Slack, Discord, Telegram), mapping the inbound
+ * message and reply into a {@link ChatPayload} sent through `outbound`. The reply targets the
+ * originating conversation and thread. The returned function rejects when `outbound` is absent.
+ * @param provider The provider id, used in the not-configured error.
+ * @param message The inbound message being replied to.
+ * @param outbound The matching outbound chat provider, or `undefined`.
+ * @returns A reply sender bound to `message`.
+ */
+declare const chatReply: (provider: string, message: InboundMessage, outbound: Provider<unknown, ChatPayload> | undefined) => InboundReplyFunction;
+/**
+ * Creates the reply sender for an SMS channel (Twilio, Telnyx, Vonage, MessageBird), mapping the
+ * inbound message and reply into an {@link SmsPayload} sent through `outbound`. The reply is
+ * addressed back to the sender from the receiving number, re-applying the `whatsapp:` prefix for
+ * WhatsApp. The returned function rejects when `outbound` is absent.
+ * @param message The inbound message being replied to.
+ * @param outbound The matching outbound SMS provider, or `undefined`.
+ * @returns A reply sender bound to `message`.
+ */
+declare const smsReply: (message: InboundMessage, outbound: Provider<unknown, SmsPayload> | undefined) => InboundReplyFunction;
+/**
+ * A web-standard request handler: the shape returned by {@link createInboundRouter} and the
+ * signature platforms like Cloudflare Workers, Deno, Bun and Node's `fetch` server expect.
+ * @param request The inbound request.
+ * @returns The response.
+ */
+type FetchHandler = (request: Request) => Promise<Response>;
+/**
+ * Mounts several {@link Receiver}s behind a single fetch handler, dispatching by URL
+ * path. Each key is matched against the request's path — exactly, or as a suffix beginning at a
+ * path-segment boundary, so a mount base path does not need to be known ahead of time. The most
+ * specific route wins; unmatched paths get a `404`.
+ *
+ * The result is directly usable as a Cloudflare Workers / Deno / Bun `fetch` export, or via a
+ * Node/Express/Hono web-request adapter.
+ * @param routes A map of path (e.g. `"/webhooks/slack"`) to channel receiver.
+ * @returns A fetch handler dispatching to the matching channel.
+ */
+declare const createInboundRouter: (routes: Record<string, Receiver>) => FetchHandler;
+export { type FetchHandler, type InboundMessage, type InboundReply, type InboundReplyFunction, type InboundReplyInput, type Receiver, chatReply, createInboundRouter, isJwtTimeValid, normaliseReply, sha256Hex, smsReply, verifyEd25519, verifyEd25519Base64, verifyHs256Jwt };

package/dist/inbound/index.js

@@ -0,0 +1 @@
+import{verifyEd25519 as o,verifyEd25519Base64 as t}from"../packem_shared/verifyEd25519-lmU3nhP0.js";import{isJwtTimeValid as i,sha256Hex as m,verifyHs256Jwt as p}from"../packem_shared/isJwtTimeValid-CdCG24pW.js";import{chatReply as a,normaliseReply as y,smsReply as l}from"../packem_shared/chatReply-HANpcetF.js";import{createInboundRouter as d}from"../packem_shared/createInboundRouter-DWk4xvCj.js";export{a as chatReply,d as createInboundRouter,i as isJwtTimeValid,y as normaliseReply,m as sha256Hex,l as smsReply,o as verifyEd25519,t as verifyEd25519Base64,p as verifyHs256Jwt};

package/dist/packem_shared/chatReply-HANpcetF.js

@@ -0,0 +1 @@
+import i from"./NotificationError-tZsXfB7V.js";const d=t=>typeof t=="string"?{text:t}:t,p=(t,o,e)=>async n=>{if(e===void 0)throw new i(`${t}-inbound`,"No `provider` configured to send replies",{hint:`Pass \`provider\` to the ${t} inbound receiver to enable context.reply()`});const r=d(n);return e.send({blocks:r.blocks,text:r.text??"",threadId:r.threadId??o.threadId,to:o.conversationId})},s=(t,o)=>async e=>{if(o===void 0)throw new i(`${t.provider}-inbound`,"No `provider` configured to send replies",{hint:`Pass \`provider\` to the ${t.provider} inbound receiver to enable context.reply()`});const n=d(e),r=t.metadata?.transport==="whatsapp"?"whatsapp:":"";return o.send({from:t.conversationId===void 0?void 0:`${r}${t.conversationId}`,text:n.text??"",to:`${r}${t.from.id}`})};export{p as chatReply,d as normaliseReply,s as smsReply};

package/dist/packem_shared/createDiscordReceiver-ErG7MJ_N.js

@@ -0,0 +1 @@
+import{getHeader as p,tryParseObject as A}from"./getHeader-BF9s-Tgp.js";import{verifyEd25519 as S}from"./verifyEd25519-lmU3nhP0.js";import{chatReply as h}from"./chatReply-HANpcetF.js";import{h as b,r as u,j as c,n as g,a as s,b as l,c as y}from"./utils-DuaeYOiD.js";const D="X-Signature-Ed25519",M="X-Signature-Timestamp",N=1,T=2,P=3,w=1,I=4,v=5,C=2e3,R=Symbol("defer"),O=async e=>new Promise(t=>{setTimeout(t,e,R).unref?.()}),G=e=>e.member?.user??e.user,H=e=>{const{type:t}=e,r=G(e),o={id:s(r?.id)??"",isBot:r?.bot===!0,username:s(r?.username)},i={channel:"chat",conversationId:s(e.channel_id),from:o,id:s(e.id)??"",metadata:{applicationId:e.application_id,guildId:e.guild_id,token:e.token},provider:"discord",raw:e,timestamp:new Date};if(t===T){const n=e.data;return{...i,command:{name:s(n?.name)??""},type:"command"}}if(t===P){const n=e.data;return{...i,text:s(n?.custom_id),type:"callback"}}},U=e=>({channel:"chat",handle:async t=>{const r=await t.text(),o=b(t.headers),i=p(o,D),n=p(o,M);if(i===void 0||n===void 0)return u("missing_signature",t,e.onError);if(!await S(e.publicKey,i,n,r))return u("invalid_signature",t,e.onError);const a=A(r);if(a===void 0)return u("invalid_body",t,e.onError);if(a.type===N)return c({type:w});const d=H(a);if(d===void 0)return g();const f=Promise.resolve(e.onMessage(d,{body:r,headers:o,reply:h("discord",d,e.provider),request:t})),m=await Promise.race([f,O(e.deferAfterMs??C)]);if(m===R)return f.catch(()=>{}),c({type:v});const _=l(m);if(_!==void 0)return _;const E=y(m);return E!==void 0?c({data:{content:E.text,...E.raw},type:I}):c({type:v})},provider:"discord"});export{U as createDiscordReceiver};

package/dist/packem_shared/createInboundRouter-DWk4xvCj.js

@@ -0,0 +1 @@
+import{j as c}from"./utils-DuaeYOiD.js";const d=o=>{const s=Object.entries(o).map(([n,t])=>[n.startsWith("/")?n:`/${n}`,t]).toSorted(([n],[t])=>t.length-n.length);return async n=>{const{pathname:t}=new URL(n.url),e=s.find(([r])=>t===r||t.endsWith(r));return e===void 0?c({error:"not_found"},404):e[1].handle(n)}};export{d as createInboundRouter};

package/dist/packem_shared/createMessageBirdReceiver-DNPoScxB.js

@@ -0,0 +1 @@
+import{getHeader as l,tryParseObject as v}from"./getHeader-BF9s-Tgp.js";import{verifyHs256Jwt as f,isJwtTimeValid as h,sha256Hex as c}from"./isJwtTimeValid-CdCG24pW.js";import{smsReply as u}from"./chatReply-HANpcetF.js";import{h as y,r as t,n as g,b as p,a as n,d as w}from"./utils-DuaeYOiD.js";const E="messagebird-signature-jwt",R=e=>{const r=v(e),i=n(r?.originator),o=n(r?.body),s=n(r?.id);if(r===void 0||i===void 0||s===void 0)return;const a=n(r.createdDatetime);return{channel:"sms",conversationId:n(r.recipient),from:{id:i},id:s,metadata:{direction:r.direction},provider:"messagebird",raw:r,text:o,timestamp:w(a),type:"message"}},H=e=>({channel:"sms",handle:async r=>{const i=await r.text(),o=y(r.headers),s=l(o,E);if(s===void 0)return t("missing_signature",r,e.onError);const a=await f(s,e.signingKey);if(a===void 0)return t("invalid_signature",r,e.onError);if(a.iss!=="MessageBird"||typeof a.jti!="string"||!h(a))return t("invalid_signature",r,e.onError);if(a.url_hash!==await c(e.url??r.url))return t("invalid_signature",r,e.onError);if(i.length>0&&a.payload_hash!==await c(i))return t("invalid_signature",r,e.onError);const d=R(i);if(d===void 0)return g();const m=await e.onMessage(d,{body:i,headers:o,reply:u(d,e.provider),request:r});return p(m)??g()},provider:"messagebird"});export{H as createMessageBirdReceiver};

package/dist/packem_shared/createMsTeamsReceiver-CKZsylzU.js

@@ -0,0 +1 @@
+import{f as l}from"./webcrypto-BPm3NDEm.js";import{hmacBase64 as f,timingSafeEqual as v}from"./hmacBase64-ocSXhrdQ.js";import{getHeader as u,tryParseObject as g}from"./getHeader-BF9s-Tgp.js";import{chatReply as y}from"./chatReply-HANpcetF.js";import{h as R,r as c,n as w,j as x,a as r,d as E,b as A,c as H}from"./utils-DuaeYOiD.js";const I="Authorization",h="HMAC ",T=t=>{const e=g(t);if(e?.type!=="message")return;const a=e.from,s=e.conversation,n=r(e.timestamp);return{channel:"chat",conversationId:r(s?.id),from:{id:r(a?.id)??"",name:r(a?.name)},id:r(e.id)??"",metadata:{channelId:e.channelId,serviceUrl:e.serviceUrl},provider:"msteams",raw:e,text:r(e.text),threadId:r(s?.id),timestamp:E(n),type:"message"}},C=t=>({channel:"chat",handle:async e=>{const a=await e.text(),s=R(e.headers),n=u(s,I);if(n?.startsWith(h)!==!0)return c("missing_signature",e,t.onError);let m;try{m=await f(l(t.securityToken),a,"SHA-256")}catch{return c("invalid_signature",e,t.onError)}if(!v(m,n.slice(h.length)))return c("invalid_signature",e,t.onError);const o=T(a);if(o===void 0)return w();const d=await t.onMessage(o,{body:a,headers:s,reply:y("msteams",o,t.provider),request:e}),p=A(d);if(p!==void 0)return p;const i=H(d);return i!==void 0?x({text:i.text,type:"message",...i.raw}):new Response(void 0,{status:200})},provider:"msteams"});export{C as createMsTeamsReceiver};

package/dist/packem_shared/createSlackReceiver-BHY2tumz.js

@@ -0,0 +1 @@
+import{slackWebhook as w}from"./slackWebhook-DILLGl3P.js";import{getHeader as h,tryParseObject as u}from"./getHeader-BF9s-Tgp.js";import{chatReply as k}from"./chatReply-HANpcetF.js";import{h as b,r as I,j as _,n as R,a as t,b as S,c as x}from"./utils-DuaeYOiD.js";const N="X-Slack-Signature",A=/^\//u,s=(i,o)=>i.get(o)??void 0,j=(i,o)=>{if(o.includes("application/x-www-form-urlencoded")){const e=new URLSearchParams(i),d=s(e,"payload");if(d!==void 0){const c=u(d);if(c===void 0)return;const f=c.user,g=c.container,y=c.channel;return{channel:"chat",conversationId:t(y?.id),from:{id:t(f?.id)??"",name:t(f?.name)},id:t(c.trigger_id)??"",metadata:{apiAppId:c.api_app_id,teamId:c.team?.id},provider:"slack",raw:c,threadId:t(g?.message_ts),timestamp:new Date,type:"callback"}}const p=s(e,"command");return p!==void 0?{channel:"chat",command:{args:s(e,"text"),name:p.replace(A,"")},conversationId:s(e,"channel_id"),from:{id:s(e,"user_id")??"",username:s(e,"user_name")},id:s(e,"trigger_id")??"",metadata:{apiAppId:s(e,"api_app_id"),teamId:s(e,"team_id")},provider:"slack",raw:Object.fromEntries(e),text:s(e,"text"),timestamp:new Date,type:"command"}:void 0}const n=u(i);if(n?.type!=="event_callback")return;const a=n.event;if(a===void 0)return;const l=t(a.type)??"",v=l==="message"||l==="app_mention",r=t(a.ts),m=r===void 0?Number.NaN:Number.parseFloat(r);return{channel:"chat",conversationId:t(a.channel),from:{id:t(a.user)??"",isBot:typeof a.bot_id=="string"},id:t(n.event_id)??r??"",metadata:{apiAppId:n.api_app_id,eventType:l,teamId:n.team_id},provider:"slack",raw:n,text:t(a.text),threadId:t(a.thread_ts)??r,timestamp:Number.isNaN(m)?new Date:new Date(m*1e3),type:v?"message":"event"}},L=i=>({channel:"chat",handle:async o=>{const n=await o.text(),a=b(o.headers);if(!await w.verify(n,a,i.signingSecret)){const p=h(a,N)===void 0?"missing_signature":"invalid_signature";return I(p,o,i.onError)}const v=h(a,"content-type")??"";if(v.includes("application/json")){const p=u(n);if(p?.type==="url_verification")return _({challenge:p.challenge})}const r=j(n,v);if(r===void 0)return R();const m=await i.onMessage(r,{body:n,headers:a,reply:k("slack",r,i.provider),request:o}),e=S(m);if(e!==void 0)return e;const d=x(m);return d!==void 0&&(r.type==="command"||r.type==="callback")?_({blocks:d.blocks,text:d.text,...d.raw}):new Response(void 0,{status:200})},provider:"slack"});export{L as createSlackReceiver};

package/dist/packem_shared/{snsProvider-BtlNUN7u.js → createSnsProvider-Df9fqQ2A.js}

@@ -1,4 +1,4 @@
-import H from"./RequiredOptionError-CAuRlc0R.js";import{defineProvider as K}from"./defineProvider-C9q-7iwt.js";import{t as T}from"./credentials-D9KXFoo0.js";import{r as $}from"./http-YFt2eXXy.js";import{g as E}from"./id-FYdbBSpb.js";import{s as x,b as z}from"./sms-CT04IxF8.js";import{a as w,g as I,u as c,i as g}from"./webcrypto-Cz40u9vp.js";const R="sns",C="us-east-1",D=/<Message>([\s\S]*?)<\/Message>/,q=/<MessageId>([\s\S]*?)<\/MessageId>/,v=t=>{const e=t.toISOString().replaceAll(/[:-]|\.\d{3}/g,"");return{amzDate:e,dateStamp:e.slice(0,8)}},O=async(t,e,o)=>{const i=await g(c(`AWS4${t}`),c(e)),m=await g(i,c(o)),d=await g(m,c(R));return g(d,c("aws4_request"))},P=t=>{const{pathname:e}=new URL(t);return e===""||e==="/"?"/":e.split("/").map(o=>encodeURIComponent(o).replaceAll("*","%2A").replaceAll("'","%27").replaceAll("(","%28").replaceAll(")","%29").replaceAll("!","%21")).join("/")},j=async(t,e,o,i,m)=>{const{amzDate:d,dateStamp:S}=v(new Date),p=w(await I(c(m))),a={"Content-Type":"application/x-www-form-urlencoded",host:o,"x-amz-content-sha256":p,"x-amz-date":d};t.sessionToken&&(a["x-amz-security-token"]=t.sessionToken);const r={};for(const[l,y]of Object.entries(a))r[l.toLowerCase()]=y.trim();const s=Object.keys(r).toSorted((l,y)=>l.localeCompare(y)),u=s.join(";"),A=s.map(l=>`${l}:${r[l]??""}
+import H from"./RequiredOptionError-CAuRlc0R.js";import{defineProvider as K}from"./defineProvider-C9q-7iwt.js";import{t as T}from"./credentials-D9KXFoo0.js";import{r as $}from"./http-YFt2eXXy.js";import{g as E}from"./id-FYdbBSpb.js";import{s as x,b as z}from"./sms-CT04IxF8.js";import{t as w,a as I,u as c,i as g}from"./webcrypto-BPm3NDEm.js";const R="sns",C="us-east-1",D=/<Message>([\s\S]*?)<\/Message>/,q=/<MessageId>([\s\S]*?)<\/MessageId>/,v=t=>{const e=t.toISOString().replaceAll(/[:-]|\.\d{3}/g,"");return{amzDate:e,dateStamp:e.slice(0,8)}},O=async(t,e,o)=>{const i=await g(c(`AWS4${t}`),c(e)),m=await g(i,c(o)),d=await g(m,c(R));return g(d,c("aws4_request"))},P=t=>{const{pathname:e}=new URL(t);return e===""||e==="/"?"/":e.split("/").map(o=>encodeURIComponent(o).replaceAll("*","%2A").replaceAll("'","%27").replaceAll("(","%28").replaceAll(")","%29").replaceAll("!","%21")).join("/")},j=async(t,e,o,i,m)=>{const{amzDate:d,dateStamp:S}=v(new Date),p=w(await I(c(m))),a={"Content-Type":"application/x-www-form-urlencoded",host:o,"x-amz-content-sha256":p,"x-amz-date":d};t.sessionToken&&(a["x-amz-security-token"]=t.sessionToken);const r={};for(const[l,y]of Object.entries(a))r[l.toLowerCase()]=y.trim();const s=Object.keys(r).toSorted((l,y)=>l.localeCompare(y)),u=s.join(";"),A=s.map(l=>`${l}:${r[l]??""}
 `).join(""),n=["POST",P(i),"",A,u,p].join(`
 `),f=`${S}/${e}/${R}/aws4_request`,h=["AWS4-HMAC-SHA256",d,f,w(await I(c(n)))].join(`
 `),M=await O(t.secretAccessKey,S,e),b=w(await g(M,c(h)));return a.Authorization=`AWS4-HMAC-SHA256 Credential=${t.accessKeyId}/${f}, SignedHeaders=${u}, Signature=${b}`,{headers:a,url:i}},W=K(t=>{const e=t??{};if(!e.accessKeyId||!e.secretAccessKey)throw new H("sns",["accessKeyId","secretAccessKey"]);const o=e.region??C,i=e.endpoint??`https://sns.${o}.amazonaws.com/`,{host:m}=new URL(i),d=e.retries??3,S=e.timeout??3e4,p=async(a,r)=>{const s=new URLSearchParams;s.set("Action","Publish"),s.set("Version","2010-03-31"),s.set("PhoneNumber",a),s.set("Message",r.text),r.from&&(s.set("MessageAttributes.entry.1.Name","AWS.SNS.SMS.SenderID"),s.set("MessageAttributes.entry.1.Value.DataType","String"),s.set("MessageAttributes.entry.1.Value.StringValue",r.from));const u=s.toString(),A=await j(e,o,m,i,u),n=await $(A.url,{body:u,headers:A.headers,method:"POST",timeout:S},d);if(!n.success||!n.data)return{error:n.error instanceof Error?n.error.message:"Request failed",id:a,status:"failed"};if(n.data.status>=400)return{error:D.exec(n.data.body)?.[1]??`HTTP ${String(n.data.status)}`,id:a,status:"failed"};const f=q.exec(n.data.body)?.[1];return{id:a,messageId:f??E("sns"),status:"sent"}};return{channel:"sms",endpoint:i,features:{batchSending:!1,deliveryReceipts:!1,media:!1,scheduling:!1},id:"sns",initialize:()=>{},isAvailable:()=>!!(e.accessKeyId&&e.secretAccessKey),options:e,send:async a=>{const r=await x(T(a.to),async s=>p(s,a));return z("sns",r)},validateCredentials:()=>!!(e.accessKeyId&&e.secretAccessKey)}});export{W as default};

package/dist/packem_shared/createTelegramReceiver-BjZa0eVx.js

@@ -0,0 +1 @@
+import{timingSafeEqual as p}from"./hmacBase64-ocSXhrdQ.js";import{getHeader as f,tryParseObject as u}from"./getHeader-BF9s-Tgp.js";import{chatReply as _}from"./chatReply-HANpcetF.js";import{h as y,r as l,n as g,j as I,e as d,a as h,b,c as T}from"./utils-DuaeYOiD.js";const w="X-Telegram-Bot-Api-Secret-Token",E=/\s/u,R=/^\d+$/u,k=e=>{if(!e?.startsWith("/"))return;const t=e.slice(1),a=t.search(E),n=(a===-1?t:t.slice(0,a)).split("@")[0]??"";if(n.length===0)return;const s=a===-1?"":t.slice(a+1).trim();return{args:s.length===0?void 0:s,name:n}},v=e=>({id:d(e?.id)??"",isBot:e?.is_bot===!0,name:h(e?.first_name),username:h(e?.username)}),N=e=>{const t=d(e.update_id)??"",a=e.callback_query;if(a!==void 0){const i=a.message?.chat;return{channel:"chat",conversationId:d(i?.id),from:v(a.from),id:h(a.id)??t,provider:"telegram",raw:e,text:h(a.data),timestamp:new Date,type:"callback"}}const r=e.message??e.edited_message;if(r===void 0)return;const n=r.chat,s=typeof r.date=="number"?r.date:Number.NaN,c=h(r.text),m=k(c);return{channel:"chat",command:m,conversationId:d(n?.id),from:v(r.from),id:d(r.message_id)??t,metadata:{chatType:n?.type},provider:"telegram",raw:e,text:c,threadId:d(r.message_thread_id),timestamp:Number.isNaN(s)?new Date:new Date(s*1e3),type:m===void 0?"message":"command"}},j=e=>({channel:"chat",handle:async t=>{const a=await t.text(),r=y(t.headers);if(e.secretToken!==void 0&&e.secretToken!==""){const i=f(r,w);if(i===void 0)return l("missing_signature",t,e.onError);if(!p(i,e.secretToken))return l("invalid_signature",t,e.onError)}const n=u(a);if(n===void 0)return l("invalid_body",t,e.onError);const s=N(n);if(s===void 0)return g();const c=await e.onMessage(s,{body:a,headers:r,reply:_("telegram",s,e.provider),request:t}),m=b(c);if(m!==void 0)return m;const o=T(c);if(o!==void 0&&s.conversationId!==void 0){const i=o.threadId!==void 0&&R.test(o.threadId)?Number.parseInt(o.threadId,10):void 0;return I({chat_id:s.conversationId,message_thread_id:i,method:"sendMessage",text:o.text,...o.raw})}return g()},provider:"telegram"});export{j as createTelegramReceiver};

package/dist/packem_shared/createTelnyxReceiver-Ev-ThOtu.js

@@ -0,0 +1 @@
+import{isWithinReplayWindow as l,REPLAY_WINDOW_SECONDS as y}from"./hmacBase64-ocSXhrdQ.js";import{getHeader as c,tryParseObject as v}from"./getHeader-BF9s-Tgp.js";import{verifyEd25519Base64 as f}from"./verifyEd25519-lmU3nhP0.js";import{smsReply as g}from"./chatReply-HANpcetF.js";import{h as u,r as d,n as m,b as _,a as n,d as h}from"./utils-DuaeYOiD.js";const E="telnyx-signature-ed25519",R="telnyx-timestamp",x=t=>{const{media:r}=t;if(!(!Array.isArray(r)||r.length===0))return r.map(a=>{const e=a;return{contentType:n(e.content_type),url:n(e.url)}})},A=t=>{const r=v(t),a=r?.data,e=a?.payload;if(e===void 0||n(a?.event_type)!=="message.received")return;const i=e.from,o=e.to,s=n(e.received_at);return{attachments:x(e),channel:"sms",conversationId:n(o?.[0]?.phone_number),from:{id:n(i?.phone_number)??""},id:n(e.id)??"",metadata:{direction:e.direction,messagingProfileId:e.messaging_profile_id,transport:n(e.type)},provider:"telnyx",raw:r,text:n(e.text),timestamp:h(s),type:"message"}},S=t=>({channel:"sms",handle:async r=>{const a=await r.text(),e=u(r.headers),i=c(e,E),o=c(e,R);if(i===void 0||o===void 0)return d("missing_signature",r,t.onError);if(!l(o,y))return d("invalid_signature",r,t.onError);if(!await f(t.publicKey,i,`${o}|${a}`))return d("invalid_signature",r,t.onError);const s=A(a);if(s===void 0)return m();const p=await t.onMessage(s,{body:a,headers:e,reply:g(s,t.provider),request:r});return _(p)??m()},provider:"telnyx"});export{S as createTelnyxReceiver};

package/dist/packem_shared/createTwilioReceiver-CQmdSCMX.js

@@ -0,0 +1 @@
+import{twilioWebhook as d}from"./twilioWebhook-BjM8B0sB.js";import{getHeader as p}from"./getHeader-BF9s-Tgp.js";import{smsReply as m}from"./chatReply-HANpcetF.js";import{h as g,r as u,c as h,b as w}from"./utils-DuaeYOiD.js";const v="X-Twilio-Signature",a="whatsapp:",f=/[\u0000-\u0008\v\f\u000E-\u001F]/gu,R=e=>e.replaceAll(f,"").replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;").replaceAll("'","&apos;"),A=e=>{const s=`<?xml version="1.0" encoding="UTF-8"?><Response>${e===void 0?"":`<Message>${R(e)}</Message>`}</Response>`;return new Response(s,{headers:{"content-type":"text/xml; charset=utf-8"},status:200})},T=e=>{const t=e.get("From")??"",s=e.get("To")??"",o=t.startsWith(a)||s.startsWith(a),l=Number.parseInt(e.get("NumMedia")??"0",10),i=[];for(let n=0;n<l;n+=1){const r=e.get(`MediaUrl${String(n)}`);r!==null&&i.push({contentType:e.get(`MediaContentType${String(n)}`)??void 0,url:r})}return{attachments:i.length>0?i:void 0,channel:"sms",conversationId:s.replace(a,""),from:{id:t.replace(a,""),name:e.get("ProfileName")??void 0},id:e.get("MessageSid")??e.get("SmsSid")??"",metadata:{transport:o?"whatsapp":"sms"},provider:"twilio",raw:Object.fromEntries(e),text:e.get("Body")??void 0,timestamp:new Date,type:"message"}},M=e=>({channel:"sms",handle:async t=>{const s=await t.text(),o=g(t.headers);if(o["x-twilio-signature-url"]=e.url??t.url,!await d.verify(s,o,e.authToken)){const c=p(o,v)===void 0?"missing_signature":"invalid_signature";return u(c,t,e.onError)}const i=T(new URLSearchParams(s)),n=await e.onMessage(i,{body:s,headers:o,reply:m(i,e.provider),request:t}),r=w(n);return r!==void 0?r:A(h(n)?.text)},provider:"twilio"});export{M as createTwilioReceiver};

package/dist/packem_shared/createVonageReceiver-BWVR3E7q.js

@@ -0,0 +1 @@
+import{getHeader as h,tryParseObject as f}from"./getHeader-BF9s-Tgp.js";import{verifyHs256Jwt as l,isJwtTimeValid as u,sha256Hex as v}from"./isJwtTimeValid-CdCG24pW.js";import{smsReply as y}from"./chatReply-HANpcetF.js";import{h as R,r as m,n as c,b as w,a as n,d as E}from"./utils-DuaeYOiD.js";const _="Authorization",d="Bearer ",g=r=>typeof r=="string"?r:n(r?.number),b=r=>{const e=f(r),t=g(e?.from),a=n(e?.message_uuid);if(e===void 0||t===void 0||a===void 0)return;const s=n(e.timestamp);return{channel:"sms",conversationId:g(e.to),from:{id:t},id:a,metadata:{channelType:e.channel,messageType:e.message_type},provider:"vonage",raw:e,text:n(e.text),timestamp:E(s),type:"message"}},V=r=>({channel:"sms",handle:async e=>{const t=await e.text(),a=R(e.headers),s=h(a,_);if(s?.startsWith(d)!==!0)return m("missing_signature",e,r.onError);const o=await l(s.slice(d.length),r.signatureSecret);if(o===void 0||!u(o))return m("invalid_signature",e,r.onError);if(t.length>0&&o.payload_hash!==await v(t))return m("invalid_signature",e,r.onError);const i=b(t);if(i===void 0)return c();const p=await r.onMessage(i,{body:t,headers:a,reply:y(i,r.provider),request:e});return w(p)??c()},provider:"vonage"});export{V as createVonageReceiver};

package/dist/packem_shared/{webPushProvider-CUDMDRKw.js → createWebPushProvider-BNu3bPeV.js}

@@ -1 +1 @@
-import K from"./RequiredOptionError-CAuRlc0R.js";import{defineProvider as C}from"./defineProvider-C9q-7iwt.js";import{t as E}from"./credentials-D9KXFoo0.js";import{m as A}from"./http-YFt2eXXy.js";import{g as k}from"./id-FYdbBSpb.js";import{a as T}from"./sms-CT04IxF8.js";import{u as y,f as S,b as g,s as c,r as U,c as f,d as P,e as B}from"./webcrypto-Cz40u9vp.js";const R=2419200,$=i=>{let e=i;if(typeof i=="string")try{e=JSON.parse(i)}catch{return}const t=e;if(!(!t||typeof t.endpoint!="string"||typeof t.keys?.p256dh!="string"||typeof t.keys.auth!="string"))return t},j=async(i,e)=>{const t=S(e),d=g(t.slice(1,33)),a=g(t.slice(33,65));return c().importKey("jwk",{crv:"P-256",d:i,ext:!0,key_ops:["sign"],kty:"EC",x:d,y:a},{name:"ECDSA",namedCurve:"P-256"},!1,["sign"])},x=async(i,e,t)=>{const d=g(y(JSON.stringify({alg:"ES256",typ:"JWT"}))),a=g(y(JSON.stringify({aud:i,exp:Math.floor(Date.now()/1e3)+720*60,sub:e}))),u=`${d}.${a}`,n=await c().sign({hash:"SHA-256",name:"ECDSA"},t,y(u));return`${u}.${g(new Uint8Array(n))}`},D=async(i,e)=>{const t=S(i.keys.p256dh),d=S(i.keys.auth),a=U(16),u=await c().generateKey({name:"ECDH",namedCurve:"P-256"},!0,["deriveBits"]),n=new Uint8Array(await c().exportKey("raw",u.publicKey)),s=await c().importKey("raw",t,{name:"ECDH",namedCurve:"P-256"},!1,[]),m=new Uint8Array(await c().deriveBits({name:"ECDH",public:s},u.privateKey,256)),r=f(y("WebPush: info\0"),t,n),l=await P(d,m,r,32),b=await P(a,l,y("Content-Encoding: aes128gcm\0"),16),v=await P(a,l,y("Content-Encoding: nonce\0"),12),w=await c().importKey("raw",b,{name:"AES-GCM"},!1,["encrypt"]),h=f(e,new Uint8Array([2])),o=new Uint8Array(await c().encrypt({iv:v,name:"AES-GCM"},w,h)),p=f(a,B(4096,4),new Uint8Array([n.length]),n);return f(p,o)},q=C(i=>{const e=i??{};if(!e.vapidPublicKey||!e.vapidPrivateKey||!e.vapidSubject)throw new K("web-push",["vapidPublicKey","vapidPrivateKey","vapidSubject"]);const t=e.ttl??R,d=e.urgency??"normal",a=e.timeout??3e4,u=async(n,s,m)=>{const r=$(n);if(!r)return{error:"Invalid push subscription (expected { endpoint, keys: { p256dh, auth } })",id:n,status:"failed"};const{origin:l}=new URL(r.endpoint),b=await x(l,e.vapidSubject,m),v=JSON.stringify({badge:s.badge,body:s.body,data:s.data,image:s.imageUrl,title:s.title}),w=await D(r,y(v)),h={Authorization:`vapid t=${b},k=${e.vapidPublicKey}`,"Content-Encoding":"aes128gcm","Content-Type":"application/octet-stream",TTL:String(t),Urgency:d},o=await A(r.endpoint,{body:w,headers:h,method:"POST",timeout:a});if(!o.success||!o.data)return{error:o.error instanceof Error?o.error.message:"Request failed",id:n,status:"failed"};const{status:p}=o.data;return p===404||p===410?{error:`Subscription gone (HTTP ${String(p)}) — remove this subscription`,id:n,status:"failed"}:p>=400?{error:`HTTP ${String(p)}: ${typeof o.data.body=="string"?o.data.body:""}`.trim(),id:n,status:"failed"}:{id:n,messageId:k("web-push"),status:"sent"}};return{channel:"push",features:{batchSending:!1,media:!1,richContent:!0},id:"web-push",initialize:()=>{},isAvailable:()=>!!(e.vapidPublicKey&&e.vapidPrivateKey&&e.vapidSubject),options:e,send:async n=>{const s=E(n.to),m=await j(e.vapidPrivateKey,e.vapidPublicKey),r=[];for(const l of s)r.push(await u(l,n,m));return T("push","web-push",r)},validateCredentials:()=>!!(e.vapidPublicKey&&e.vapidPrivateKey&&e.vapidSubject)}});export{q as default};
+import K from"./RequiredOptionError-CAuRlc0R.js";import{defineProvider as C}from"./defineProvider-C9q-7iwt.js";import{t as E}from"./credentials-D9KXFoo0.js";import{m as A}from"./http-YFt2eXXy.js";import{g as k}from"./id-FYdbBSpb.js";import{a as T}from"./sms-CT04IxF8.js";import{u as y,f as S,b as m,s as c,r as U,d as f,e as P,g as B}from"./webcrypto-BPm3NDEm.js";const R=2419200,$=i=>{let e=i;if(typeof i=="string")try{e=JSON.parse(i)}catch{return}const t=e;if(!(!t||typeof t.endpoint!="string"||typeof t.keys?.p256dh!="string"||typeof t.keys.auth!="string"))return t},j=async(i,e)=>{const t=S(e),d=m(t.slice(1,33)),a=m(t.slice(33,65));return c().importKey("jwk",{crv:"P-256",d:i,ext:!0,key_ops:["sign"],kty:"EC",x:d,y:a},{name:"ECDSA",namedCurve:"P-256"},!1,["sign"])},x=async(i,e,t)=>{const d=m(y(JSON.stringify({alg:"ES256",typ:"JWT"}))),a=m(y(JSON.stringify({aud:i,exp:Math.floor(Date.now()/1e3)+720*60,sub:e}))),u=`${d}.${a}`,n=await c().sign({hash:"SHA-256",name:"ECDSA"},t,y(u));return`${u}.${m(new Uint8Array(n))}`},D=async(i,e)=>{const t=S(i.keys.p256dh),d=S(i.keys.auth),a=U(16),u=await c().generateKey({name:"ECDH",namedCurve:"P-256"},!0,["deriveBits"]),n=new Uint8Array(await c().exportKey("raw",u.publicKey)),s=await c().importKey("raw",t,{name:"ECDH",namedCurve:"P-256"},!1,[]),g=new Uint8Array(await c().deriveBits({name:"ECDH",public:s},u.privateKey,256)),r=f(y("WebPush: info\0"),t,n),l=await P(d,g,r,32),b=await P(a,l,y("Content-Encoding: aes128gcm\0"),16),v=await P(a,l,y("Content-Encoding: nonce\0"),12),w=await c().importKey("raw",b,{name:"AES-GCM"},!1,["encrypt"]),h=f(e,new Uint8Array([2])),o=new Uint8Array(await c().encrypt({iv:v,name:"AES-GCM"},w,h)),p=f(a,B(4096,4),new Uint8Array([n.length]),n);return f(p,o)},q=C(i=>{const e=i??{};if(!e.vapidPublicKey||!e.vapidPrivateKey||!e.vapidSubject)throw new K("web-push",["vapidPublicKey","vapidPrivateKey","vapidSubject"]);const t=e.ttl??R,d=e.urgency??"normal",a=e.timeout??3e4,u=async(n,s,g)=>{const r=$(n);if(!r)return{error:"Invalid push subscription (expected { endpoint, keys: { p256dh, auth } })",id:n,status:"failed"};const{origin:l}=new URL(r.endpoint),b=await x(l,e.vapidSubject,g),v=JSON.stringify({badge:s.badge,body:s.body,data:s.data,image:s.imageUrl,title:s.title}),w=await D(r,y(v)),h={Authorization:`vapid t=${b},k=${e.vapidPublicKey}`,"Content-Encoding":"aes128gcm","Content-Type":"application/octet-stream",TTL:String(t),Urgency:d},o=await A(r.endpoint,{body:w,headers:h,method:"POST",timeout:a});if(!o.success||!o.data)return{error:o.error instanceof Error?o.error.message:"Request failed",id:n,status:"failed"};const{status:p}=o.data;return p===404||p===410?{error:`Subscription gone (HTTP ${String(p)}) — remove this subscription`,id:n,status:"failed"}:p>=400?{error:`HTTP ${String(p)}: ${typeof o.data.body=="string"?o.data.body:""}`.trim(),id:n,status:"failed"}:{id:n,messageId:k("web-push"),status:"sent"}};return{channel:"push",features:{batchSending:!1,media:!1,richContent:!0},id:"web-push",initialize:()=>{},isAvailable:()=>!!(e.vapidPublicKey&&e.vapidPrivateKey&&e.vapidSubject),options:e,send:async n=>{const s=E(n.to),g=await j(e.vapidPrivateKey,e.vapidPublicKey),r=[];for(const l of s)r.push(await u(l,n,g));return T("push","web-push",r)},validateCredentials:()=>!!(e.vapidPublicKey&&e.vapidPrivateKey&&e.vapidSubject)}});export{q as default};

package/dist/packem_shared/hmacBase64-ocSXhrdQ.js

@@ -0,0 +1 @@
+import{c as s,h as a,t as c}from"./webcrypto-BPm3NDEm.js";const r=300,h=async(t,n,e)=>c(await a(t,n,e)),l=async(t,n,e)=>s(await a(t,n,e)),f=(t,n)=>{if(t.length!==n.length)return!1;let e=0;for(let o=0;o<t.length;o+=1)e|=(t.codePointAt(o)??0)^(n.codePointAt(o)??0);return e===0},m=(t,n)=>{if(t===void 0)return!1;const e=Number.parseInt(t,10);if(Number.isNaN(e))return!1;const o=Math.floor(Date.now()/1e3);return Math.abs(o-e)<=n};export{r as REPLAY_WINDOW_SECONDS,l as hmacBase64,h as hmacHex,m as isWithinReplayWindow,f as timingSafeEqual};

package/dist/packem_shared/isJwtTimeValid-CdCG24pW.js

@@ -0,0 +1 @@
+import{t as f,a as c,u,b as m,h as d,f as p}from"./webcrypto-BPm3NDEm.js";import{timingSafeEqual as h}from"./hmacBase64-ocSXhrdQ.js";const s=e=>{try{const t=JSON.parse(new TextDecoder().decode(p(e)));return typeof t=="object"&&t!==null&&!Array.isArray(t)?t:void 0}catch{return}},x=async e=>f(await c(u(e))),y=async(e,t)=>{const r=e.split(".");if(r.length!==3)return;const[n,a,o]=r;if(s(n)?.alg!=="HS256")return;const i=m(await d(t,`${n}.${a}`,"SHA-256"));if(h(i,o))return s(a)},S=(e,t=5)=>{const r=Math.floor(Date.now()/1e3);return!(typeof e.exp=="number"&&r>e.exp+t||typeof e.nbf=="number"&&r+t<e.nbf)};export{S as isJwtTimeValid,x as sha256Hex,y as verifyHs256Jwt};

package/dist/packem_shared/{slackWebhook-CGbFBgpo.js → slackWebhook-DILLGl3P.js}

@@ -1 +1 @@
-import{isWithinReplayWindow as o,REPLAY_WINDOW_SECONDS as c,hmacHex as d,timingSafeEqual as l}from"./hmacBase64-Dtvoq4Ry.js";import{getHeader as r,tryParseObject as p}from"./getHeader-BF9s-Tgp.js";const f="X-Slack-Signature",m="X-Slack-Request-Timestamp",u={parse:s=>{const e=p(s);if(e===void 0)return;const t=e.event??e,i=typeof t.channel=="string"?t.channel:void 0,n=typeof t.ts=="string"?t.ts:"";return{channel:"chat",messageId:typeof e.event_id=="string"?e.event_id:n,provider:"slack",recipient:i,timestamp:new Date,type:"delivered"}},verify:async(s,e,t)=>{if(t.trim()==="")return!1;const i=r(e,f),n=r(e,m);if(i===void 0||n===void 0||!o(n,c))return!1;const a=await d(t,`v0:${n}:${s}`,"SHA-256");return l(`v0=${a}`,i)}};export{u as slackWebhook};
+import{isWithinReplayWindow as o,REPLAY_WINDOW_SECONDS as c,hmacHex as d,timingSafeEqual as l}from"./hmacBase64-ocSXhrdQ.js";import{getHeader as r,tryParseObject as p}from"./getHeader-BF9s-Tgp.js";const f="X-Slack-Signature",m="X-Slack-Request-Timestamp",u={parse:s=>{const e=p(s);if(e===void 0)return;const t=e.event??e,i=typeof t.channel=="string"?t.channel:void 0,n=typeof t.ts=="string"?t.ts:"";return{channel:"chat",messageId:typeof e.event_id=="string"?e.event_id:n,provider:"slack",recipient:i,timestamp:new Date,type:"delivered"}},verify:async(s,e,t)=>{if(t.trim()==="")return!1;const i=r(e,f),n=r(e,m);if(i===void 0||n===void 0||!o(n,c))return!1;const a=await d(t,`v0:${n}:${s}`,"SHA-256");return l(`v0=${a}`,i)}};export{u as slackWebhook};

package/dist/packem_shared/snsWebhook-DTBQW5U5.js

@@ -0,0 +1,3 @@
+import{f as T,s as p,u as g}from"./webcrypto-BPm3NDEm.js";import{tryParseObject as v}from"./getHeader-BF9s-Tgp.js";const S=/-----BEGIN CERTIFICATE-----/u,E=/-----END CERTIFICATE-----/u,y=/\s+/gu,f=48,h=160,c=(t,e)=>{if(e+2>t.length)throw new RangeError("truncated DER");const r=t[e]??0,s=t[e+1]??0;if(s<128){const o=e+2;if(o+s>t.length)throw new RangeError("truncated DER");return{end:o+s,length:s,tag:r,valueOffset:o}}const n=s&127;if(n===0||n>4)throw new RangeError("unsupported DER length");let i=0;for(let o=0;o<n;o+=1)i=i*256+(t[e+2+o]??0);const a=e+2+n;if(a+i>t.length)throw new RangeError("truncated DER");return{end:a+i,length:i,tag:r,valueOffset:a}},m=t=>{const e=t.replace(S,"").replace(E,"").replaceAll(y,"");if(e.length!==0)try{return T(e)}catch{return}},C=t=>{const e=m(t);if(e!==void 0)try{const r=c(e,0);if(r.tag!==f)return;const s=c(e,r.valueOffset);if(s.tag!==f)return;let n=s.valueOffset;const i=c(e,n);i.tag===h&&(n=i.end);for(let l=0;l<5;l+=1)n=c(e,n).end;const a=c(e,n);if(a.tag!==f)return;const o=new Uint8Array(new ArrayBuffer(a.end-n));return o.set(e.subarray(n,a.end)),o}catch{return}},A=/^sns\.[a-z0-9-]{3,}\.amazonaws\.com(?:\.cn)?$/iu,I=["Message","MessageId","Subject","SubscribeURL","Timestamp","TopicArn","Type"],R=["Message","MessageId","SubscribeURL","Timestamp","Token","TopicArn","Type"],u=new Map,w=64,M=5e3,b=3600*1e3,d=t=>v(t),_=t=>{const e=t.SigningCertURL??t.SigningCertUrl;return typeof e=="string"?e:void 0},O=t=>{try{const e=new URL(t);return e.protocol==="https:"&&e.pathname.endsWith(".pem")&&A.test(e.hostname)}catch{return!1}},U=(t,e)=>{let r="";for(const s of e){const n=t[s];typeof n=="string"&&(r+=`${s}
+${n}
+`)}return r},k=async t=>{const e=u.get(t);if(e!==void 0)return e;const r=await globalThis.fetch(t,{signal:AbortSignal.timeout(M)});if(!r.ok)return;const s=C(await r.text());if(s!==void 0){if(u.size>=w){const n=u.keys().next().value;n!==void 0&&u.delete(n)}u.set(t,s)}return s},N=async t=>{const e=_(t),r=t.SignatureVersion;if(e===void 0||typeof t.Signature!="string"||typeof t.Type!="string"||r!=="1"&&r!=="2"||!O(e))return!1;const s=Date.parse(t.Timestamp??"");if(Number.isNaN(s)||Math.abs(Date.now()-s)>b)return!1;const n=t.Type==="Notification"?I:R,i=U(t,n);try{const a=await k(e);if(a===void 0)return!1;const o=await p().importKey("spki",a,{hash:r==="1"?"SHA-1":"SHA-256",name:"RSASSA-PKCS1-v1_5"},!1,["verify"]);return await p().verify("RSASSA-PKCS1-v1_5",o,T(t.Signature),g(i))}catch{return!1}},L={parse:t=>{const e=d(t);if(e?.Type===void 0)return;const r={type:e.Type};return e.Type==="SubscriptionConfirmation"||e.Type==="UnsubscribeConfirmation"?r.subscribeUrl=e.SubscribeURL:e.Message!==void 0&&(r.message=e.Message),{messageId:e.MessageId??"",metadata:r,provider:"sns",timestamp:e.Timestamp===void 0?new Date:new Date(e.Timestamp),type:"delivered"}},verify:async t=>{const e=d(t);return e===void 0?!1:N(e)}};export{L as snsWebhook,N as verifySnsMessage};

package/dist/packem_shared/{standardWebhook-DV_fVNtX.js → standardWebhook-CPjtIEKe.js}

@@ -1 +1 @@
-import{isWithinReplayWindow as m,REPLAY_WINDOW_SECONDS as w,hmacBase64 as E,hmacHex as h,timingSafeEqual as f}from"./hmacBase64-Dtvoq4Ry.js";import{getHeader as r,tryParseObject as v}from"./getHeader-BF9s-Tgp.js";const g="webhook-id",b="webhook-timestamp",A="webhook-signature",H=new Set(["bounced","clicked","delivered","failed","interacted","queued","read","sent"]),S=i=>{const e=atob(i),t=new Uint8Array(e.length);for(let n=0;n<e.length;n+=1)t[n]=e.codePointAt(n)??0;return t},D={parse:i=>{const e=v(i);if(e===void 0)return;const t=typeof e.type=="string"?e.type:void 0,o=t!==void 0&&H.has(t)?t:"delivered";return{messageId:typeof e.id=="string"?e.id:"",provider:"standard-webhooks",recipient:typeof e.recipient=="string"?e.recipient:void 0,timestamp:new Date,type:o}},verify:async(i,e,t)=>{if(t.trim()==="")return!1;const n=r(e,g),o=r(e,b),a=r(e,A);if(n===void 0||o===void 0||a===void 0||!m(o,w))return!1;const d=t.startsWith("whsec_")?S(t.slice(6)):t,c=`${n}.${o}.${i}`,l=await E(d,c,"SHA-256"),u=await h(d,c,"SHA-256"),y=a.split(" ");for(const s of y){const p=s.includes(",")?s.split(",")[1]??"":s;if(f(l,p)||f(u,p))return!0}return!1}};export{D as standardWebhook};
+import{isWithinReplayWindow as m,REPLAY_WINDOW_SECONDS as w,hmacBase64 as E,hmacHex as h,timingSafeEqual as f}from"./hmacBase64-ocSXhrdQ.js";import{getHeader as r,tryParseObject as v}from"./getHeader-BF9s-Tgp.js";const g="webhook-id",b="webhook-timestamp",A="webhook-signature",H=new Set(["bounced","clicked","delivered","failed","interacted","queued","read","sent"]),S=i=>{const e=atob(i),t=new Uint8Array(e.length);for(let n=0;n<e.length;n+=1)t[n]=e.codePointAt(n)??0;return t},D={parse:i=>{const e=v(i);if(e===void 0)return;const t=typeof e.type=="string"?e.type:void 0,o=t!==void 0&&H.has(t)?t:"delivered";return{messageId:typeof e.id=="string"?e.id:"",provider:"standard-webhooks",recipient:typeof e.recipient=="string"?e.recipient:void 0,timestamp:new Date,type:o}},verify:async(i,e,t)=>{if(t.trim()==="")return!1;const n=r(e,g),o=r(e,b),a=r(e,A);if(n===void 0||o===void 0||a===void 0||!m(o,w))return!1;const d=t.startsWith("whsec_")?S(t.slice(6)):t,c=`${n}.${o}.${i}`,l=await E(d,c,"SHA-256"),u=await h(d,c,"SHA-256"),y=a.split(" ");for(const s of y){const p=s.includes(",")?s.split(",")[1]??"":s;if(f(l,p)||f(u,p))return!0}return!1}};export{D as standardWebhook};

package/dist/packem_shared/{twilioWebhook-DScQeZta.js → twilioWebhook-BjM8B0sB.js}

@@ -1 +1 @@
-import{hmacBase64 as u,timingSafeEqual as l}from"./hmacBase64-Dtvoq4Ry.js";import{getHeader as a}from"./getHeader-BF9s-Tgp.js";const m="X-Twilio-Signature",S={delivered:"delivered",failed:"failed",queued:"queued",sending:"queued",sent:"sent",undelivered:"failed"},f=(o,e)=>{const s=Object.keys(e).toSorted();let t=o;for(const r of s)t+=`${r}${e[r]??""}`;return t},i=o=>{const e={};return new URLSearchParams(o).forEach((t,r)=>{e[r]=t}),e},g={parse:o=>{const e=i(o),s=e.MessageStatus??e.SmsStatus??e.CallStatus;if(s===void 0)return;const t=S[s.toLowerCase()];return t===void 0?void 0:{channel:"sms",messageId:e.MessageSid??e.SmsSid??e.CallSid??"",provider:"twilio",recipient:e.To,timestamp:new Date,type:t}},verify:async(o,e,s)=>{if(s.trim()==="")return!1;const t=a(e,m),r=a(e,"x-twilio-signature-url");if(t===void 0||r===void 0)return!1;const n=i(o),d=f(r,n),c=await u(s,d,"SHA-1");return l(c,t)}};export{g as twilioWebhook};
+import{hmacBase64 as u,timingSafeEqual as l}from"./hmacBase64-ocSXhrdQ.js";import{getHeader as a}from"./getHeader-BF9s-Tgp.js";const m="X-Twilio-Signature",S={delivered:"delivered",failed:"failed",queued:"queued",sending:"queued",sent:"sent",undelivered:"failed"},f=(o,e)=>{const s=Object.keys(e).toSorted();let t=o;for(const r of s)t+=`${r}${e[r]??""}`;return t},i=o=>{const e={};return new URLSearchParams(o).forEach((t,r)=>{e[r]=t}),e},g={parse:o=>{const e=i(o),s=e.MessageStatus??e.SmsStatus??e.CallStatus;if(s===void 0)return;const t=S[s.toLowerCase()];return t===void 0?void 0:{channel:"sms",messageId:e.MessageSid??e.SmsSid??e.CallSid??"",provider:"twilio",recipient:e.To,timestamp:new Date,type:t}},verify:async(o,e,s)=>{if(s.trim()==="")return!1;const t=a(e,m),r=a(e,"x-twilio-signature-url");if(t===void 0||r===void 0)return!1;const n=i(o),d=f(r,n),c=await u(s,d,"SHA-1");return l(c,t)}};export{g as twilioWebhook};

package/dist/packem_shared/types.d-4T7bNo4x.d.ts

@@ -0,0 +1,182 @@
+import { C as ChannelType, a as NotificationResult, R as Result, M as MaybePromise } from "./types.d-C7l7qdMG.js";
+import { W as WebhookHeaders } from "./types.d-BXfGenMH.js";
+/**
+ * The normalised kind of an inbound payload, abstracting over each provider's own taxonomy:
+ *
+ * - `"message"` — a user-authored message (chat message, SMS, WhatsApp).
+ * - `"command"` — a slash / bot command (Slack slash command, Discord application command).
+ * - `"callback"` — a UI interaction (Slack block action, Discord component, Telegram callback query).
+ * - `"event"` — a provider lifecycle event that is not a direct user message (Slack Events API envelope).
+ * - `"unknown"` — a recognised payload that does not map to a more specific kind.
+ */
+type InboundMessageType = "callback" | "command" | "event" | "message" | "unknown";
+/**
+ * A participant in an inbound conversation (the sender, or the bot/recipient).
+ */
+interface InboundParticipant {
+  /** Provider-native id (Slack user id, Discord user id, phone number, ...). */
+  id: string;
+  /** Whether the participant is a bot / automated account, when the provider reports it. */
+  isBot?: boolean;
+  /** Human-readable display name, when available. */
+  name?: string;
+  /** Handle / username, when available. */
+  username?: string;
+}
+/**
+ * A file or media attachment carried by an inbound message.
+ */
+interface InboundAttachment {
+  /** MIME type, when reported. */
+  contentType?: string;
+  /** Original filename, when reported. */
+  filename?: string;
+  /** Provider-native attachment id, when reported. */
+  id?: string;
+  /** Size in bytes, when reported. */
+  size?: number;
+  /** URL to fetch the attachment (may require provider auth). */
+  url?: string;
+}
+/**
+ * A normalised inbound message. Every channel receiver maps its provider-native payload
+ * into this shape so a single handler can process messages from any channel — the
+ * counterpart to the outbound {@link ../types.NotificationPayload NotificationPayload}.
+ */
+interface InboundMessage {
+  /** File / media attachments carried by the message. */
+  attachments?: InboundAttachment[];
+  /** The logical channel the message arrived on, mirroring {@link ChannelType}. */
+  channel: ChannelType;
+  /** Parsed command detail when {@link InboundMessage.type} is `"command"`. */
+  command?: {
+    /** Positional / free-text arguments following the command name. */
+    args?: string;
+    /** The command name, without any leading `/`. */
+    name: string;
+  };
+  /** Conversation / channel / room / chat id the message belongs to. */
+  conversationId?: string;
+  /** The sender. */
+  from: InboundParticipant;
+  /** Provider message / event id. */
+  id: string;
+  /** Provider extras not covered by a normalised field (team id, guild id, app id, ...). */
+  metadata?: Record<string, unknown>;
+  /** The provider id: `"slack"`, `"discord"`, `"telegram"`, `"twilio"`. */
+  provider: string;
+  /** The original, unmodified provider payload. */
+  raw: unknown;
+  /** Plain-text content, when the payload carries text. */
+  text?: string;
+  /** Thread / reply anchor, so replies can be threaded where the channel supports it. */
+  threadId?: string;
+  /** Provider event timestamp (falls back to receive time when the payload omits one). */
+  timestamp: Date;
+  /** The kind of inbound payload. */
+  type: InboundMessageType;
+}
+/**
+ * A normalised reply a handler can return to be delivered in the webhook's HTTP response,
+ * where the channel supports synchronous replies (Slack slash commands, Discord
+ * interactions, Telegram webhook method calls, Twilio TwiML). For channels that require an
+ * out-of-band reply (Slack Events API), send through the matching outbound provider instead.
+ */
+interface InboundReply {
+  /** Provider-native rich content (Slack blocks, Discord embeds, ...). */
+  blocks?: unknown;
+  /** Provider-specific fields merged into the serialised response (escape hatch). */
+  raw?: Record<string, unknown>;
+  /** Plain-text reply body. */
+  text?: string;
+  /** Reply within the given thread, when the channel supports threading. */
+  threadId?: string;
+}
+/**
+ * What {@link InboundContext.reply} accepts: a normalised {@link InboundReply} or, as a
+ * shorthand, a plain string treated as `{ text }`.
+ */
+type InboundReplyInput = InboundReply | string;
+/**
+ * Sends a reply back to the originating conversation through the outbound provider configured
+ * on the receiver — the out-of-band counterpart to returning an {@link InboundReply} from the
+ * handler. Resolves to the provider's send {@link Result}; rejects when no provider was
+ * configured. The reply target (recipient, thread) is derived from the inbound message.
+ * @param reply The reply content.
+ * @returns The provider's send result.
+ */
+type InboundReplyFunction = (reply: InboundReplyInput) => Promise<Result<NotificationResult>>;
+/**
+ * Context passed to an {@link InboundHandler} alongside the parsed message: the verified raw
+ * request for handlers that need provider-native fields, plus {@link InboundContext.reply} to
+ * answer in a single call.
+ */
+interface InboundContext {
+  /** The raw request body text, already read and signature-verified. */
+  body: string;
+  /** Case-insensitive request headers. */
+  headers: WebhookHeaders;
+  /**
+   * Sends a reply to the originating conversation through the receiver's outbound provider.
+   * Rejects if no `provider` was passed to the receiver factory.
+   */
+  reply: InboundReplyFunction;
+  /** The originating web-standard {@link Request}. */
+  request: Request;
+}
+/**
+ * What an {@link InboundHandler} may return: a normalised {@link InboundReply} (serialised
+ * by the channel), a raw web-standard {@link Response} (passed through unchanged), or
+ * nothing (the channel acknowledges the delivery with an empty success response).
+ */
+type InboundResponse = InboundReply | Response | void;
+/**
+ * Handles a verified, parsed inbound message. This is the seam an AI agent plugs into:
+ * receive a normalised message, optionally return a reply.
+ * @param message The normalised inbound message.
+ * @param context The request context.
+ * @returns The reply to deliver, a raw response, or nothing.
+ */
+type InboundHandler = (message: InboundMessage, context: InboundContext) => MaybePromise<InboundResponse>;
+/**
+ * The reason an inbound request was rejected before it reached the handler.
+ */
+type InboundErrorReason = "invalid_body" | "invalid_signature" | "missing_signature";
+/**
+ * Options shared by every channel receiver factory.
+ */
+interface ReceiverOptions {
+  /**
+   * Called when a request fails verification or cannot be parsed, before the handler runs.
+   * Return a {@link Response} to override the default (`401` for signature failures,
+   * `400` for malformed bodies); return nothing to keep the default.
+   * @param reason Why the request was rejected.
+   * @param request The originating request.
+   */
+  onError?: (reason: InboundErrorReason, request: Request) => MaybePromise<Response | void>;
+  /** Called for every verified, parsed inbound message. */
+  onMessage: InboundHandler;
+}
+/**
+ * A channel receiver: the inbound counterpart to an outbound
+ * {@link ../providers/provider.Provider Provider}. It verifies, parses and dispatches
+ * inbound webhook requests through a single web-standard entry point.
+ */
+interface Receiver {
+  /** The logical channel this receiver handles. */
+  readonly channel: ChannelType;
+  /**
+   * Verify, parse and dispatch an inbound webhook request, returning the HTTP response to
+   * send back to the provider. Framework-agnostic: pass any web-standard {@link Request}.
+   * @param request The inbound webhook request.
+   * @returns The response to return to the provider.
+   */
+  handle: (request: Request) => Promise<Response>;
+  /** The provider id this receiver handles. */
+  readonly provider: string;
+}
+/**
+ * @deprecated Renamed to {@link Receiver}. Kept as an alias for one major; removed in the next.
+ */
+type InboundChannel = Receiver;
+export { InboundMessage as I, Receiver as R, InboundReplyFunction as a, InboundReplyInput as b, InboundReply as c, InboundAttachment as d, InboundChannel as e, InboundContext as f, InboundErrorReason as g, InboundHandler as h, InboundMessageType as i, InboundParticipant as j, InboundResponse as k, ReceiverOptions as l };