@naylence/runtime 0.3.13 → 0.3.15

package/dist/node/node.mjs

@@ -1,6 +1,6 @@
 import { FlowFlags, ConnectorState, generateId, ConnectorStateUtils, FameResponseType, createFameEnvelope, parseAddressComponents, FameAddress, DEFAULT_POLLING_TIMEOUT_MS, extractEnvelopeAndContext, createChannelMessage, parseAddress, formatAddress, formatAddressFromComponents, localDeliveryContext, Binding, DeliveryOriginType, makeResponse, isFameMessageResponse, parseRequest, makeRequest, DEFAULT_INVOKE_TIMEOUT_MILLIS, parseResponse, FameFabric, isFameMessageService, isFameRPCService, FameServiceProxy, generateIdAsync, snakeToCamelObject, getDefaultFameConfigResolver, setDefaultFameConfigResolver, SigningMaterial, AuthorizationContextSchema, FameDeliveryContextSchema, SecurityContextSchema, withFabric, FameEnvelopeSchema, serializeEnvelope, FameChannelMessage, deserializeEnvelope, SINK_CAPABILITY, FameFabricFactory, createAuthorizationContext } from '@naylence/core';
 export * from '@naylence/core';
-import { ExtensionManager, ExpressionEvaluationPolicy, AbstractResourceFactory, createResource as createResource$1, createDefaultResource, registerFactory, Expressions, Registry, configValidator } from '@naylence/factory';
+import { ExtensionManager, ExpressionEvaluationPolicy, AbstractResourceFactory, createResource as createResource$1, createDefaultResource, Registry, registerFactory, Expressions, configValidator } from '@naylence/factory';
 import { z, ZodError } from 'zod';
 import fs from 'node:fs';
 import fsPromises from 'node:fs/promises';
@@ -430,7 +430,7 @@ function getPinoLevel(level) {
         case LogLevel.CRITICAL:
             return 'fatal';
         default:
-            return 'info';
+            return 'warn';
     }
 }
 // Initialize Pino if available (Node.js only)
@@ -509,7 +509,7 @@ function getInitialLogLevel() {
         }
     }
     // Default to INFO - balanced verbosity for most use cases
-    return LogLevel.INFO;
+    return LogLevel.WARNING;
 }
 const defaultConfig = {
     level: getInitialLogLevel(),
@@ -4009,6 +4009,454 @@ var websocketConnectorNodeSsl = /*#__PURE__*/Object.freeze({
     __proto__: null
 });
 
+/**
+ * AUTO-GENERATED FILE. DO NOT EDIT DIRECTLY.
+ * Generated by scripts/generate-factory-manifest.mjs
+ *
+ * Provides the list of runtime factory modules for registration.
+ */
+const MODULES = [
+    "./connector/broadcast-channel-connector-factory.js",
+    "./connector/broadcast-channel-listener-factory.js",
+    "./connector/http-listener-factory.js",
+    "./connector/http-stateless-connector-factory.js",
+    "./connector/inpage-connector-factory.js",
+    "./connector/inpage-listener-factory.js",
+    "./connector/websocket-connector-factory.js",
+    "./connector/websocket-listener-factory.js",
+    "./delivery/at-least-once-delivery-policy-factory.js",
+    "./delivery/at-most-once-delivery-policy-factory.js",
+    "./delivery/delivery-profile-factory.js",
+    "./fabric/in-process-fame-fabric-factory.js",
+    "./node/admission/admission-profile-factory.js",
+    "./node/admission/direct-admission-client-factory.js",
+    "./node/admission/noop-admission-client-factory.js",
+    "./node/admission/welcome-service-client-factory.js",
+    "./node/default-node-identity-policy-factory.js",
+    "./node/node-factory.js",
+    "./node/node-identity-policy-profile-factory.js",
+    "./node/token-subject-node-identity-policy-factory.js",
+    "./placement/static-node-placement-strategy-factory.js",
+    "./security/auth/bearer-token-header-auth-injection-strategy-factory.js",
+    "./security/auth/default-authorizer-factory.js",
+    "./security/auth/jwks-jwt-token-verifier-factory.js",
+    "./security/auth/jwt-token-issuer-factory.js",
+    "./security/auth/jwt-token-verifier-factory.js",
+    "./security/auth/no-auth-injection-strategy-factory.js",
+    "./security/auth/none-token-provider-factory.js",
+    "./security/auth/noop-authorizer-factory.js",
+    "./security/auth/noop-token-issuer-factory.js",
+    "./security/auth/noop-token-verifier-factory.js",
+    "./security/auth/oauth2-authorizer-factory.js",
+    "./security/auth/oauth2-client-credentials-token-provider-factory.js",
+    "./security/auth/oauth2-pkce-token-provider-factory.js",
+    "./security/auth/query-param-auth-injection-strategy-factory.js",
+    "./security/auth/shared-secret-authorizer-factory.js",
+    "./security/auth/shared-secret-token-provider-factory.js",
+    "./security/auth/shared-secret-token-verifier-factory.js",
+    "./security/auth/static-token-provider-factory.js",
+    "./security/auth/websocket-subprotocol-auth-injection-strategy-factory.js",
+    "./security/credential/dev-fixed-key-credential-provider-factory.js",
+    "./security/credential/env-credential-provider-factory.js",
+    "./security/credential/none-credential-provider-factory.js",
+    "./security/credential/prompt-credential-provider-factory.js",
+    "./security/credential/secret-store-credential-provider-factory.js",
+    "./security/credential/session-key-credential-provider-factory.js",
+    "./security/credential/static-credential-provider-factory.js",
+    "./security/default-security-manager-factory.js",
+    "./security/encryption/noop-encryption-manager-factory.js",
+    "./security/encryption/noop-secure-channel-manager-factory.js",
+    "./security/keys/default-key-manager-factory.js",
+    "./security/keys/in-memory-key-store-factory.js",
+    "./security/keys/noop-key-validator-factory.js",
+    "./security/node-security-profile-factory.js",
+    "./security/policy/default-security-policy-factory.js",
+    "./security/policy/no-security-policy-factory.js",
+    "./security/signing/eddsa-envelope-signer-factory.js",
+    "./security/signing/eddsa-envelope-verifier-factory.js",
+    "./security/trust-store/noop-trust-store-provider-factory.js",
+    "./sentinel/capability-aware-routing-policy-factory.js",
+    "./sentinel/composite-routing-policy-factory.js",
+    "./sentinel/hybrid-path-routing-policy-factory.js",
+    "./sentinel/load-balancing/composite-load-balancing-strategy-factory.js",
+    "./sentinel/load-balancing/hrw-load-balancing-strategy-factory.js",
+    "./sentinel/load-balancing/load-balancing-profile-factory.js",
+    "./sentinel/load-balancing/random-load-balancing-strategy-factory.js",
+    "./sentinel/load-balancing/round-robin-load-balancing-strategy-factory.js",
+    "./sentinel/load-balancing/sticky-load-balancing-strategy-factory.js",
+    "./sentinel/routing-profile-factory.js",
+    "./sentinel/sentinel-factory.js",
+    "./sentinel/store/route-store-factory.js",
+    "./stickiness/simple-load-balancer-stickiness-manager-factory.js",
+    "./telemetry/noop-trace-emitter-factory.js",
+    "./telemetry/open-telemetry-trace-emitter-factory.js",
+    "./telemetry/trace-emitter-profile-factory.js",
+    "./welcome/default-welcome-service-factory.js"
+];
+const MODULE_LOADERS = {
+    "./connector/broadcast-channel-connector-factory.js": () => Promise.resolve().then(function () { return broadcastChannelConnectorFactory; }),
+    "./connector/broadcast-channel-listener-factory.js": () => Promise.resolve().then(function () { return broadcastChannelListenerFactory; }),
+    "./connector/http-listener-factory.js": () => Promise.resolve().then(function () { return httpListenerFactory; }),
+    "./connector/http-stateless-connector-factory.js": () => Promise.resolve().then(function () { return httpStatelessConnectorFactory; }),
+    "./connector/inpage-connector-factory.js": () => Promise.resolve().then(function () { return inpageConnectorFactory; }),
+    "./connector/inpage-listener-factory.js": () => Promise.resolve().then(function () { return inpageListenerFactory; }),
+    "./connector/websocket-connector-factory.js": () => Promise.resolve().then(function () { return websocketConnectorFactory; }),
+    "./connector/websocket-listener-factory.js": () => Promise.resolve().then(function () { return websocketListenerFactory; }),
+    "./delivery/at-least-once-delivery-policy-factory.js": () => Promise.resolve().then(function () { return atLeastOnceDeliveryPolicyFactory; }),
+    "./delivery/at-most-once-delivery-policy-factory.js": () => Promise.resolve().then(function () { return atMostOnceDeliveryPolicyFactory; }),
+    "./delivery/delivery-profile-factory.js": () => Promise.resolve().then(function () { return deliveryProfileFactory; }),
+    "./fabric/in-process-fame-fabric-factory.js": () => Promise.resolve().then(function () { return inProcessFameFabricFactory; }),
+    "./node/admission/admission-profile-factory.js": () => Promise.resolve().then(function () { return admissionProfileFactory; }),
+    "./node/admission/direct-admission-client-factory.js": () => Promise.resolve().then(function () { return directAdmissionClientFactory; }),
+    "./node/admission/noop-admission-client-factory.js": () => Promise.resolve().then(function () { return noopAdmissionClientFactory; }),
+    "./node/admission/welcome-service-client-factory.js": () => Promise.resolve().then(function () { return welcomeServiceClientFactory; }),
+    "./node/default-node-identity-policy-factory.js": () => Promise.resolve().then(function () { return defaultNodeIdentityPolicyFactory; }),
+    "./node/node-factory.js": () => Promise.resolve().then(function () { return nodeFactory; }),
+    "./node/node-identity-policy-profile-factory.js": () => Promise.resolve().then(function () { return nodeIdentityPolicyProfileFactory; }),
+    "./node/token-subject-node-identity-policy-factory.js": () => Promise.resolve().then(function () { return tokenSubjectNodeIdentityPolicyFactory; }),
+    "./placement/static-node-placement-strategy-factory.js": () => Promise.resolve().then(function () { return staticNodePlacementStrategyFactory; }),
+    "./security/auth/bearer-token-header-auth-injection-strategy-factory.js": () => Promise.resolve().then(function () { return bearerTokenHeaderAuthInjectionStrategyFactory; }),
+    "./security/auth/default-authorizer-factory.js": () => Promise.resolve().then(function () { return defaultAuthorizerFactory; }),
+    "./security/auth/jwks-jwt-token-verifier-factory.js": () => Promise.resolve().then(function () { return jwksJwtTokenVerifierFactory; }),
+    "./security/auth/jwt-token-issuer-factory.js": () => Promise.resolve().then(function () { return jwtTokenIssuerFactory; }),
+    "./security/auth/jwt-token-verifier-factory.js": () => Promise.resolve().then(function () { return jwtTokenVerifierFactory; }),
+    "./security/auth/no-auth-injection-strategy-factory.js": () => Promise.resolve().then(function () { return noAuthInjectionStrategyFactory; }),
+    "./security/auth/none-token-provider-factory.js": () => Promise.resolve().then(function () { return noneTokenProviderFactory; }),
+    "./security/auth/noop-authorizer-factory.js": () => Promise.resolve().then(function () { return noopAuthorizerFactory; }),
+    "./security/auth/noop-token-issuer-factory.js": () => Promise.resolve().then(function () { return noopTokenIssuerFactory; }),
+    "./security/auth/noop-token-verifier-factory.js": () => Promise.resolve().then(function () { return noopTokenVerifierFactory; }),
+    "./security/auth/oauth2-authorizer-factory.js": () => Promise.resolve().then(function () { return oauth2AuthorizerFactory; }),
+    "./security/auth/oauth2-client-credentials-token-provider-factory.js": () => Promise.resolve().then(function () { return oauth2ClientCredentialsTokenProviderFactory; }),
+    "./security/auth/oauth2-pkce-token-provider-factory.js": () => Promise.resolve().then(function () { return oauth2PkceTokenProviderFactory; }),
+    "./security/auth/query-param-auth-injection-strategy-factory.js": () => Promise.resolve().then(function () { return queryParamAuthInjectionStrategyFactory; }),
+    "./security/auth/shared-secret-authorizer-factory.js": () => Promise.resolve().then(function () { return sharedSecretAuthorizerFactory; }),
+    "./security/auth/shared-secret-token-provider-factory.js": () => Promise.resolve().then(function () { return sharedSecretTokenProviderFactory; }),
+    "./security/auth/shared-secret-token-verifier-factory.js": () => Promise.resolve().then(function () { return sharedSecretTokenVerifierFactory; }),
+    "./security/auth/static-token-provider-factory.js": () => Promise.resolve().then(function () { return staticTokenProviderFactory; }),
+    "./security/auth/websocket-subprotocol-auth-injection-strategy-factory.js": () => Promise.resolve().then(function () { return websocketSubprotocolAuthInjectionStrategyFactory; }),
+    "./security/credential/dev-fixed-key-credential-provider-factory.js": () => Promise.resolve().then(function () { return devFixedKeyCredentialProviderFactory; }),
+    "./security/credential/env-credential-provider-factory.js": () => Promise.resolve().then(function () { return envCredentialProviderFactory; }),
+    "./security/credential/none-credential-provider-factory.js": () => Promise.resolve().then(function () { return noneCredentialProviderFactory; }),
+    "./security/credential/prompt-credential-provider-factory.js": () => Promise.resolve().then(function () { return promptCredentialProviderFactory; }),
+    "./security/credential/secret-store-credential-provider-factory.js": () => Promise.resolve().then(function () { return secretStoreCredentialProviderFactory; }),
+    "./security/credential/session-key-credential-provider-factory.js": () => Promise.resolve().then(function () { return sessionKeyCredentialProviderFactory; }),
+    "./security/credential/static-credential-provider-factory.js": () => Promise.resolve().then(function () { return staticCredentialProviderFactory; }),
+    "./security/default-security-manager-factory.js": () => Promise.resolve().then(function () { return defaultSecurityManagerFactory; }),
+    "./security/encryption/noop-encryption-manager-factory.js": () => Promise.resolve().then(function () { return noopEncryptionManagerFactory; }),
+    "./security/encryption/noop-secure-channel-manager-factory.js": () => Promise.resolve().then(function () { return noopSecureChannelManagerFactory; }),
+    "./security/keys/default-key-manager-factory.js": () => Promise.resolve().then(function () { return defaultKeyManagerFactory; }),
+    "./security/keys/in-memory-key-store-factory.js": () => Promise.resolve().then(function () { return inMemoryKeyStoreFactory; }),
+    "./security/keys/noop-key-validator-factory.js": () => Promise.resolve().then(function () { return noopKeyValidatorFactory; }),
+    "./security/node-security-profile-factory.js": () => Promise.resolve().then(function () { return nodeSecurityProfileFactory; }),
+    "./security/policy/default-security-policy-factory.js": () => Promise.resolve().then(function () { return defaultSecurityPolicyFactory; }),
+    "./security/policy/no-security-policy-factory.js": () => Promise.resolve().then(function () { return noSecurityPolicyFactory; }),
+    "./security/signing/eddsa-envelope-signer-factory.js": () => Promise.resolve().then(function () { return eddsaEnvelopeSignerFactory; }),
+    "./security/signing/eddsa-envelope-verifier-factory.js": () => Promise.resolve().then(function () { return eddsaEnvelopeVerifierFactory; }),
+    "./security/trust-store/noop-trust-store-provider-factory.js": () => Promise.resolve().then(function () { return noopTrustStoreProviderFactory; }),
+    "./sentinel/capability-aware-routing-policy-factory.js": () => Promise.resolve().then(function () { return capabilityAwareRoutingPolicyFactory; }),
+    "./sentinel/composite-routing-policy-factory.js": () => Promise.resolve().then(function () { return compositeRoutingPolicyFactory; }),
+    "./sentinel/hybrid-path-routing-policy-factory.js": () => Promise.resolve().then(function () { return hybridPathRoutingPolicyFactory; }),
+    "./sentinel/load-balancing/composite-load-balancing-strategy-factory.js": () => Promise.resolve().then(function () { return compositeLoadBalancingStrategyFactory; }),
+    "./sentinel/load-balancing/hrw-load-balancing-strategy-factory.js": () => Promise.resolve().then(function () { return hrwLoadBalancingStrategyFactory; }),
+    "./sentinel/load-balancing/load-balancing-profile-factory.js": () => Promise.resolve().then(function () { return loadBalancingProfileFactory; }),
+    "./sentinel/load-balancing/random-load-balancing-strategy-factory.js": () => Promise.resolve().then(function () { return randomLoadBalancingStrategyFactory; }),
+    "./sentinel/load-balancing/round-robin-load-balancing-strategy-factory.js": () => Promise.resolve().then(function () { return roundRobinLoadBalancingStrategyFactory; }),
+    "./sentinel/load-balancing/sticky-load-balancing-strategy-factory.js": () => Promise.resolve().then(function () { return stickyLoadBalancingStrategyFactory; }),
+    "./sentinel/routing-profile-factory.js": () => Promise.resolve().then(function () { return routingProfileFactory; }),
+    "./sentinel/sentinel-factory.js": () => Promise.resolve().then(function () { return sentinelFactory; }),
+    "./sentinel/store/route-store-factory.js": () => Promise.resolve().then(function () { return routeStoreFactory; }),
+    "./stickiness/simple-load-balancer-stickiness-manager-factory.js": () => Promise.resolve().then(function () { return simpleLoadBalancerStickinessManagerFactory; }),
+    "./telemetry/noop-trace-emitter-factory.js": () => Promise.resolve().then(function () { return noopTraceEmitterFactory; }),
+    "./telemetry/open-telemetry-trace-emitter-factory.js": () => Promise.resolve().then(function () { return openTelemetryTraceEmitterFactory; }),
+    "./telemetry/trace-emitter-profile-factory.js": () => Promise.resolve().then(function () { return traceEmitterProfileFactory; }),
+    "./welcome/default-welcome-service-factory.js": () => Promise.resolve().then(function () { return defaultWelcomeServiceFactory; }),
+};
+
+const FACTORY_MODULE_PREFIX$1 = '@naylence/runtime/naylence/fame/';
+const BROWSER_DIST_SEGMENT = '/dist/browser/';
+const NODE_ONLY_FACTORY_MODULES = new Set([
+    './connector/http-listener-factory.js',
+    './connector/websocket-listener-factory.js',
+    './telemetry/open-telemetry-trace-emitter-factory.js',
+    './security/credential/prompt-credential-provider-factory.js',
+]);
+const BROWSER_ONLY_FACTORY_MODULES = new Set([
+    './security/auth/oauth2-pkce-token-provider-factory.js',
+]);
+const isNodeEnvironment = typeof process !== 'undefined' && Boolean(process?.versions?.node);
+function detectModuleUrl() {
+    // Prefer Node-friendly __filename when available.
+    if (typeof __filename === 'string') {
+        try {
+            const normalized = __filename.startsWith('file://')
+                ? __filename
+                : `file://${__filename}`;
+            return normalized;
+        }
+        catch {
+            // fall through to stack parsing
+        }
+    }
+    // Fallback to parsing the current stack trace to discover the executing module URL.
+    try {
+        throw new Error();
+    }
+    catch (error) {
+        const stack = typeof error === 'object' && error && 'stack' in error
+            ? String(error.stack ?? '')
+            : '';
+        const lines = stack.split('\n');
+        for (const line of lines) {
+            const match = line.match(/(https?:\/\/[^\s)]+|file:\/\/[^\s)]+|\/[^\s)]+\.(?:js|ts))/u);
+            if (!match) {
+                continue;
+            }
+            const candidate = match[1];
+            if (candidate.startsWith('http://') || candidate.startsWith('https://')) {
+                return candidate;
+            }
+            if (candidate.startsWith('file://')) {
+                return candidate;
+            }
+            return `file://${candidate}`;
+        }
+    }
+    return null;
+}
+function computeBrowserFactoryBase(rawUrl) {
+    if (!rawUrl) {
+        return null;
+    }
+    const sanitized = rawUrl.split('?')[0]?.split('#')[0] ?? rawUrl;
+    const esmMarker = '/dist/esm/naylence/fame/';
+    const browserMarker = '/dist/browser/';
+    const distMarker = '/dist/';
+    if (sanitized.includes(esmMarker)) {
+        return sanitized.slice(0, sanitized.indexOf(esmMarker) + esmMarker.length);
+    }
+    if (rawUrl.includes(BROWSER_DIST_SEGMENT)) {
+        return new URL('../esm/naylence/fame/', rawUrl).href;
+    }
+    if (rawUrl.startsWith('http://') || rawUrl.startsWith('https://')) {
+        try {
+            const parsed = new URL(rawUrl);
+            const viteDepsSegment = '/node_modules/.vite/deps/';
+            if (parsed.pathname.includes(viteDepsSegment)) {
+                const baseOrigin = `${parsed.protocol}//${parsed.host}`;
+                return `${baseOrigin}/node_modules/@naylence/runtime/dist/esm/naylence/fame/`;
+            }
+        }
+        catch {
+            // ignore and fall through to null
+        }
+    }
+    if (sanitized.includes(browserMarker)) {
+        const base = sanitized.slice(0, sanitized.indexOf(browserMarker) + browserMarker.length);
+        return `${base.replace(/browser\/?$/u, '')}esm/naylence/fame/`;
+    }
+    if (sanitized.includes(distMarker)) {
+        const index = sanitized.indexOf(distMarker);
+        const base = sanitized.slice(0, index + distMarker.length);
+        return `${base}esm/naylence/fame/`;
+    }
+    // Fallback for development: if this is a source file path, compute dist/esm path
+    const srcMarker = '/src/naylence/fame/';
+    if (sanitized.includes(srcMarker)) {
+        const index = sanitized.indexOf(srcMarker);
+        const projectRoot = sanitized.slice(0, index);
+        return `${projectRoot}/dist/esm/naylence/fame/`;
+    }
+    return null;
+}
+const moduleUrl = detectModuleUrl();
+const browserFactoryBase = computeBrowserFactoryBase(moduleUrl);
+function resolveFactoryModuleSpecifier$1(specifier) {
+    if (specifier.startsWith('../')) {
+        const relativePath = specifier.slice('../'.length);
+        return `${FACTORY_MODULE_PREFIX$1}${relativePath}`;
+    }
+    if (specifier.startsWith('./')) {
+        const relativePath = specifier.slice('./'.length);
+        return `${FACTORY_MODULE_PREFIX$1}${relativePath}`;
+    }
+    return null;
+}
+function resolveModuleCandidates(spec) {
+    const packageSpecifier = resolveFactoryModuleSpecifier$1(spec);
+    const candidates = [];
+    const preferSource = typeof moduleUrl === 'string' && moduleUrl.includes('/src/');
+    const addCandidate = (candidate) => {
+        if (!candidate) {
+            return;
+        }
+        if (!candidates.includes(candidate)) {
+            candidates.push(candidate);
+        }
+    };
+    if (preferSource && spec.startsWith('./')) {
+        const baseSource = `../${spec.slice(2)}`;
+        addCandidate(baseSource);
+        if (baseSource.endsWith('.js')) {
+            addCandidate(baseSource.replace(/\.js$/u, '.ts'));
+        }
+    }
+    if (browserFactoryBase && spec.startsWith('./')) {
+        const browserCandidate = new URL(spec.slice('./'.length), browserFactoryBase).href;
+        addCandidate(browserCandidate);
+        if (browserCandidate.endsWith('.js')) {
+            addCandidate(browserCandidate.replace(/\.js$/u, '.ts'));
+        }
+    }
+    if (packageSpecifier) {
+        addCandidate(packageSpecifier);
+        if (packageSpecifier.endsWith('.js')) {
+            addCandidate(packageSpecifier.replace(/\.js$/u, '.ts'));
+        }
+    }
+    const baseFallback = spec.startsWith('./') ? `../${spec.slice(2)}` : spec;
+    addCandidate(baseFallback);
+    if (baseFallback.endsWith('.js')) {
+        addCandidate(baseFallback.replace(/\.js$/u, '.ts'));
+    }
+    return candidates;
+}
+async function performRegistration(registry) {
+    await Promise.all(MODULES.map(async (spec) => {
+        if (!isNodeEnvironment && NODE_ONLY_FACTORY_MODULES.has(spec)) {
+            return;
+        }
+        if (isNodeEnvironment && BROWSER_ONLY_FACTORY_MODULES.has(spec)) {
+            return;
+        }
+        try {
+            let mod;
+            let lastError;
+            const staticLoader = MODULE_LOADERS?.[spec];
+            if (staticLoader) {
+                try {
+                    mod = await staticLoader();
+                }
+                catch (error) {
+                    lastError = error;
+                }
+            }
+            if (!mod) {
+                const candidates = resolveModuleCandidates(spec);
+                for (const [index, candidate] of candidates.entries()) {
+                    try {
+                        mod = await import(/* @vite-ignore */ candidate);
+                        lastError = undefined;
+                        break;
+                    }
+                    catch (error) {
+                        lastError = error;
+                        const isLastCandidate = index === candidates.length - 1;
+                        if (isLastCandidate) {
+                            throw error;
+                        }
+                        const message = error instanceof Error ? error.message : String(error);
+                        const moduleNotFound = message.includes('Cannot find module') ||
+                            message.includes('ERR_MODULE_NOT_FOUND') ||
+                            message.includes('Unknown file extension') ||
+                            message.includes('Failed to fetch dynamically imported module') ||
+                            message.includes('Importing a module script failed');
+                        if (!moduleNotFound) {
+                            throw error;
+                        }
+                    }
+                }
+            }
+            if (!mod) {
+                throw (lastError ?? new Error(`Unable to import factory module: ${spec}`));
+            }
+            const meta = mod.FACTORY_META;
+            const Ctor = mod.default;
+            if (!meta?.base || !meta?.key || typeof Ctor !== 'function') {
+                console.warn('[factory-manifest] skipped', spec, '— missing FACTORY_META or default export ctor');
+                return;
+            }
+            registry.registerFactory(meta.base, meta.key, Ctor);
+        }
+        catch (error) {
+            const reason = error instanceof Error ? error.message : String(error);
+            console.warn('[factory-manifest] skipped', spec, '-', reason);
+        }
+    }));
+}
+async function registerDefaultFactories(registry = Registry) {
+    await performRegistration(registry);
+}
+/**
+ * Register all default Naylence runtime factories into the supplied registry.
+ *
+ * @param registry Registry implementation to receive the default runtime factories.
+ */
+async function registerRuntimeFactories(registry = Registry) {
+    if (registry === Registry) {
+        await ensureDefaultRegistration();
+        return;
+    }
+    await performRegistration(registry);
+}
+let defaultRegistrationPromise = null;
+let defaultRegistrationError = null;
+async function ensureDefaultRegistration() {
+    if (defaultRegistrationError) {
+        throw defaultRegistrationError;
+    }
+    if (!defaultRegistrationPromise) {
+        defaultRegistrationError = null;
+        defaultRegistrationPromise = performRegistration(Registry).catch((error) => {
+            defaultRegistrationError = error;
+            defaultRegistrationPromise = null;
+            throw error;
+        });
+    }
+    await defaultRegistrationPromise;
+}
+async function ensureRuntimeFactoriesRegistered(registry = Registry) {
+    if (registry !== Registry) {
+        await performRegistration(registry);
+        return;
+    }
+    await ensureDefaultRegistration();
+}
+
+// This file is auto-generated during build - do not edit manually
+// Generated from package.json version: 0.3.15
+/**
+ * The package version, injected at build time.
+ * @internal
+ */
+const VERSION = '0.3.15';
+
+let initialized = false;
+const runtimePlugin = {
+    name: 'naylence:runtime',
+    version: VERSION,
+    async register() {
+        // console.log('[naylence:runtime] register() called, initialized=', initialized);
+        if (initialized) {
+            // console.log('[naylence:runtime] already initialized, skipping');
+            return;
+        }
+        initialized = true;
+        // console.log('[naylence:runtime] registering runtime factories...');
+        // Register factories from manifest
+        await registerRuntimeFactories();
+        // Import modules with side-effect registrations (not in manifest)
+        await Promise.resolve().then(function () { return websocketTransportProvisioner; });
+        // console.log('[naylence:runtime] runtime factories registered');
+    },
+};
+const RUNTIME_PLUGIN_SPECIFIER = runtimePlugin.name;
+
+var plugin = /*#__PURE__*/Object.freeze({
+    __proto__: null,
+    RUNTIME_PLUGIN_SPECIFIER: RUNTIME_PLUGIN_SPECIFIER,
+    default: runtimePlugin
+});
+
 const CREDENTIAL_PROVIDER_FACTORY_BASE_TYPE = 'CredentialProviderFactory';
 class CredentialProviderFactory extends AbstractResourceFactory {
     static async createCredentialProvider(config, options = {}) {
@@ -5570,14 +6018,6 @@ for (const [name, config] of Object.entries(SQLITE_PROFILES)) {
     registerStorageProfile(name, config);
 }
 
-// This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.3.13
-/**
- * The package version, injected at build time.
- * @internal
- */
-const VERSION = '0.3.13';
-
 /**
  * Fame errors module - Fame protocol specific error classes
  */
@@ -15807,419 +16247,6 @@ var extendedFameConfig = /*#__PURE__*/Object.freeze({
     resetFameConfigCache: resetFameConfigCache
 });
 
-/**
- * AUTO-GENERATED FILE. DO NOT EDIT DIRECTLY.
- * Generated by scripts/generate-factory-manifest.mjs
- *
- * Provides the list of runtime factory modules for registration.
- */
-const MODULES = [
-    "./connector/broadcast-channel-connector-factory.js",
-    "./connector/broadcast-channel-listener-factory.js",
-    "./connector/http-listener-factory.js",
-    "./connector/http-stateless-connector-factory.js",
-    "./connector/inpage-connector-factory.js",
-    "./connector/inpage-listener-factory.js",
-    "./connector/websocket-connector-factory.js",
-    "./connector/websocket-listener-factory.js",
-    "./delivery/at-least-once-delivery-policy-factory.js",
-    "./delivery/at-most-once-delivery-policy-factory.js",
-    "./delivery/delivery-profile-factory.js",
-    "./fabric/in-process-fame-fabric-factory.js",
-    "./node/admission/admission-profile-factory.js",
-    "./node/admission/direct-admission-client-factory.js",
-    "./node/admission/noop-admission-client-factory.js",
-    "./node/admission/welcome-service-client-factory.js",
-    "./node/default-node-identity-policy-factory.js",
-    "./node/node-factory.js",
-    "./node/node-identity-policy-profile-factory.js",
-    "./node/token-subject-node-identity-policy-factory.js",
-    "./placement/static-node-placement-strategy-factory.js",
-    "./security/auth/bearer-token-header-auth-injection-strategy-factory.js",
-    "./security/auth/default-authorizer-factory.js",
-    "./security/auth/jwks-jwt-token-verifier-factory.js",
-    "./security/auth/jwt-token-issuer-factory.js",
-    "./security/auth/jwt-token-verifier-factory.js",
-    "./security/auth/no-auth-injection-strategy-factory.js",
-    "./security/auth/none-token-provider-factory.js",
-    "./security/auth/noop-authorizer-factory.js",
-    "./security/auth/noop-token-issuer-factory.js",
-    "./security/auth/noop-token-verifier-factory.js",
-    "./security/auth/oauth2-authorizer-factory.js",
-    "./security/auth/oauth2-client-credentials-token-provider-factory.js",
-    "./security/auth/oauth2-pkce-token-provider-factory.js",
-    "./security/auth/query-param-auth-injection-strategy-factory.js",
-    "./security/auth/shared-secret-authorizer-factory.js",
-    "./security/auth/shared-secret-token-provider-factory.js",
-    "./security/auth/shared-secret-token-verifier-factory.js",
-    "./security/auth/static-token-provider-factory.js",
-    "./security/auth/websocket-subprotocol-auth-injection-strategy-factory.js",
-    "./security/credential/dev-fixed-key-credential-provider-factory.js",
-    "./security/credential/env-credential-provider-factory.js",
-    "./security/credential/none-credential-provider-factory.js",
-    "./security/credential/prompt-credential-provider-factory.js",
-    "./security/credential/secret-store-credential-provider-factory.js",
-    "./security/credential/session-key-credential-provider-factory.js",
-    "./security/credential/static-credential-provider-factory.js",
-    "./security/default-security-manager-factory.js",
-    "./security/encryption/noop-encryption-manager-factory.js",
-    "./security/encryption/noop-secure-channel-manager-factory.js",
-    "./security/keys/default-key-manager-factory.js",
-    "./security/keys/in-memory-key-store-factory.js",
-    "./security/keys/noop-key-validator-factory.js",
-    "./security/node-security-profile-factory.js",
-    "./security/policy/default-security-policy-factory.js",
-    "./security/policy/no-security-policy-factory.js",
-    "./security/signing/eddsa-envelope-signer-factory.js",
-    "./security/signing/eddsa-envelope-verifier-factory.js",
-    "./security/trust-store/noop-trust-store-provider-factory.js",
-    "./sentinel/capability-aware-routing-policy-factory.js",
-    "./sentinel/composite-routing-policy-factory.js",
-    "./sentinel/hybrid-path-routing-policy-factory.js",
-    "./sentinel/load-balancing/composite-load-balancing-strategy-factory.js",
-    "./sentinel/load-balancing/hrw-load-balancing-strategy-factory.js",
-    "./sentinel/load-balancing/load-balancing-profile-factory.js",
-    "./sentinel/load-balancing/random-load-balancing-strategy-factory.js",
-    "./sentinel/load-balancing/round-robin-load-balancing-strategy-factory.js",
-    "./sentinel/load-balancing/sticky-load-balancing-strategy-factory.js",
-    "./sentinel/routing-profile-factory.js",
-    "./sentinel/sentinel-factory.js",
-    "./sentinel/store/route-store-factory.js",
-    "./stickiness/simple-load-balancer-stickiness-manager-factory.js",
-    "./telemetry/noop-trace-emitter-factory.js",
-    "./telemetry/open-telemetry-trace-emitter-factory.js",
-    "./telemetry/trace-emitter-profile-factory.js",
-    "./welcome/default-welcome-service-factory.js"
-];
-const MODULE_LOADERS = {
-    "./connector/broadcast-channel-connector-factory.js": () => Promise.resolve().then(function () { return broadcastChannelConnectorFactory; }),
-    "./connector/broadcast-channel-listener-factory.js": () => Promise.resolve().then(function () { return broadcastChannelListenerFactory; }),
-    "./connector/http-listener-factory.js": () => Promise.resolve().then(function () { return httpListenerFactory; }),
-    "./connector/http-stateless-connector-factory.js": () => Promise.resolve().then(function () { return httpStatelessConnectorFactory; }),
-    "./connector/inpage-connector-factory.js": () => Promise.resolve().then(function () { return inpageConnectorFactory; }),
-    "./connector/inpage-listener-factory.js": () => Promise.resolve().then(function () { return inpageListenerFactory; }),
-    "./connector/websocket-connector-factory.js": () => Promise.resolve().then(function () { return websocketConnectorFactory; }),
-    "./connector/websocket-listener-factory.js": () => Promise.resolve().then(function () { return websocketListenerFactory; }),
-    "./delivery/at-least-once-delivery-policy-factory.js": () => Promise.resolve().then(function () { return atLeastOnceDeliveryPolicyFactory; }),
-    "./delivery/at-most-once-delivery-policy-factory.js": () => Promise.resolve().then(function () { return atMostOnceDeliveryPolicyFactory; }),
-    "./delivery/delivery-profile-factory.js": () => Promise.resolve().then(function () { return deliveryProfileFactory; }),
-    "./fabric/in-process-fame-fabric-factory.js": () => Promise.resolve().then(function () { return inProcessFameFabricFactory; }),
-    "./node/admission/admission-profile-factory.js": () => Promise.resolve().then(function () { return admissionProfileFactory; }),
-    "./node/admission/direct-admission-client-factory.js": () => Promise.resolve().then(function () { return directAdmissionClientFactory; }),
-    "./node/admission/noop-admission-client-factory.js": () => Promise.resolve().then(function () { return noopAdmissionClientFactory; }),
-    "./node/admission/welcome-service-client-factory.js": () => Promise.resolve().then(function () { return welcomeServiceClientFactory; }),
-    "./node/default-node-identity-policy-factory.js": () => Promise.resolve().then(function () { return defaultNodeIdentityPolicyFactory; }),
-    "./node/node-factory.js": () => Promise.resolve().then(function () { return nodeFactory; }),
-    "./node/node-identity-policy-profile-factory.js": () => Promise.resolve().then(function () { return nodeIdentityPolicyProfileFactory; }),
-    "./node/token-subject-node-identity-policy-factory.js": () => Promise.resolve().then(function () { return tokenSubjectNodeIdentityPolicyFactory; }),
-    "./placement/static-node-placement-strategy-factory.js": () => Promise.resolve().then(function () { return staticNodePlacementStrategyFactory; }),
-    "./security/auth/bearer-token-header-auth-injection-strategy-factory.js": () => Promise.resolve().then(function () { return bearerTokenHeaderAuthInjectionStrategyFactory; }),
-    "./security/auth/default-authorizer-factory.js": () => Promise.resolve().then(function () { return defaultAuthorizerFactory; }),
-    "./security/auth/jwks-jwt-token-verifier-factory.js": () => Promise.resolve().then(function () { return jwksJwtTokenVerifierFactory; }),
-    "./security/auth/jwt-token-issuer-factory.js": () => Promise.resolve().then(function () { return jwtTokenIssuerFactory; }),
-    "./security/auth/jwt-token-verifier-factory.js": () => Promise.resolve().then(function () { return jwtTokenVerifierFactory; }),
-    "./security/auth/no-auth-injection-strategy-factory.js": () => Promise.resolve().then(function () { return noAuthInjectionStrategyFactory; }),
-    "./security/auth/none-token-provider-factory.js": () => Promise.resolve().then(function () { return noneTokenProviderFactory; }),
-    "./security/auth/noop-authorizer-factory.js": () => Promise.resolve().then(function () { return noopAuthorizerFactory; }),
-    "./security/auth/noop-token-issuer-factory.js": () => Promise.resolve().then(function () { return noopTokenIssuerFactory; }),
-    "./security/auth/noop-token-verifier-factory.js": () => Promise.resolve().then(function () { return noopTokenVerifierFactory; }),
-    "./security/auth/oauth2-authorizer-factory.js": () => Promise.resolve().then(function () { return oauth2AuthorizerFactory; }),
-    "./security/auth/oauth2-client-credentials-token-provider-factory.js": () => Promise.resolve().then(function () { return oauth2ClientCredentialsTokenProviderFactory; }),
-    "./security/auth/oauth2-pkce-token-provider-factory.js": () => Promise.resolve().then(function () { return oauth2PkceTokenProviderFactory; }),
-    "./security/auth/query-param-auth-injection-strategy-factory.js": () => Promise.resolve().then(function () { return queryParamAuthInjectionStrategyFactory; }),
-    "./security/auth/shared-secret-authorizer-factory.js": () => Promise.resolve().then(function () { return sharedSecretAuthorizerFactory; }),
-    "./security/auth/shared-secret-token-provider-factory.js": () => Promise.resolve().then(function () { return sharedSecretTokenProviderFactory; }),
-    "./security/auth/shared-secret-token-verifier-factory.js": () => Promise.resolve().then(function () { return sharedSecretTokenVerifierFactory; }),
-    "./security/auth/static-token-provider-factory.js": () => Promise.resolve().then(function () { return staticTokenProviderFactory; }),
-    "./security/auth/websocket-subprotocol-auth-injection-strategy-factory.js": () => Promise.resolve().then(function () { return websocketSubprotocolAuthInjectionStrategyFactory; }),
-    "./security/credential/dev-fixed-key-credential-provider-factory.js": () => Promise.resolve().then(function () { return devFixedKeyCredentialProviderFactory; }),
-    "./security/credential/env-credential-provider-factory.js": () => Promise.resolve().then(function () { return envCredentialProviderFactory; }),
-    "./security/credential/none-credential-provider-factory.js": () => Promise.resolve().then(function () { return noneCredentialProviderFactory; }),
-    "./security/credential/prompt-credential-provider-factory.js": () => Promise.resolve().then(function () { return promptCredentialProviderFactory; }),
-    "./security/credential/secret-store-credential-provider-factory.js": () => Promise.resolve().then(function () { return secretStoreCredentialProviderFactory; }),
-    "./security/credential/session-key-credential-provider-factory.js": () => Promise.resolve().then(function () { return sessionKeyCredentialProviderFactory; }),
-    "./security/credential/static-credential-provider-factory.js": () => Promise.resolve().then(function () { return staticCredentialProviderFactory; }),
-    "./security/default-security-manager-factory.js": () => Promise.resolve().then(function () { return defaultSecurityManagerFactory; }),
-    "./security/encryption/noop-encryption-manager-factory.js": () => Promise.resolve().then(function () { return noopEncryptionManagerFactory; }),
-    "./security/encryption/noop-secure-channel-manager-factory.js": () => Promise.resolve().then(function () { return noopSecureChannelManagerFactory; }),
-    "./security/keys/default-key-manager-factory.js": () => Promise.resolve().then(function () { return defaultKeyManagerFactory; }),
-    "./security/keys/in-memory-key-store-factory.js": () => Promise.resolve().then(function () { return inMemoryKeyStoreFactory; }),
-    "./security/keys/noop-key-validator-factory.js": () => Promise.resolve().then(function () { return noopKeyValidatorFactory; }),
-    "./security/node-security-profile-factory.js": () => Promise.resolve().then(function () { return nodeSecurityProfileFactory; }),
-    "./security/policy/default-security-policy-factory.js": () => Promise.resolve().then(function () { return defaultSecurityPolicyFactory; }),
-    "./security/policy/no-security-policy-factory.js": () => Promise.resolve().then(function () { return noSecurityPolicyFactory; }),
-    "./security/signing/eddsa-envelope-signer-factory.js": () => Promise.resolve().then(function () { return eddsaEnvelopeSignerFactory; }),
-    "./security/signing/eddsa-envelope-verifier-factory.js": () => Promise.resolve().then(function () { return eddsaEnvelopeVerifierFactory; }),
-    "./security/trust-store/noop-trust-store-provider-factory.js": () => Promise.resolve().then(function () { return noopTrustStoreProviderFactory; }),
-    "./sentinel/capability-aware-routing-policy-factory.js": () => Promise.resolve().then(function () { return capabilityAwareRoutingPolicyFactory; }),
-    "./sentinel/composite-routing-policy-factory.js": () => Promise.resolve().then(function () { return compositeRoutingPolicyFactory; }),
-    "./sentinel/hybrid-path-routing-policy-factory.js": () => Promise.resolve().then(function () { return hybridPathRoutingPolicyFactory; }),
-    "./sentinel/load-balancing/composite-load-balancing-strategy-factory.js": () => Promise.resolve().then(function () { return compositeLoadBalancingStrategyFactory; }),
-    "./sentinel/load-balancing/hrw-load-balancing-strategy-factory.js": () => Promise.resolve().then(function () { return hrwLoadBalancingStrategyFactory; }),
-    "./sentinel/load-balancing/load-balancing-profile-factory.js": () => Promise.resolve().then(function () { return loadBalancingProfileFactory; }),
-    "./sentinel/load-balancing/random-load-balancing-strategy-factory.js": () => Promise.resolve().then(function () { return randomLoadBalancingStrategyFactory; }),
-    "./sentinel/load-balancing/round-robin-load-balancing-strategy-factory.js": () => Promise.resolve().then(function () { return roundRobinLoadBalancingStrategyFactory; }),
-    "./sentinel/load-balancing/sticky-load-balancing-strategy-factory.js": () => Promise.resolve().then(function () { return stickyLoadBalancingStrategyFactory; }),
-    "./sentinel/routing-profile-factory.js": () => Promise.resolve().then(function () { return routingProfileFactory; }),
-    "./sentinel/sentinel-factory.js": () => Promise.resolve().then(function () { return sentinelFactory; }),
-    "./sentinel/store/route-store-factory.js": () => Promise.resolve().then(function () { return routeStoreFactory; }),
-    "./stickiness/simple-load-balancer-stickiness-manager-factory.js": () => Promise.resolve().then(function () { return simpleLoadBalancerStickinessManagerFactory; }),
-    "./telemetry/noop-trace-emitter-factory.js": () => Promise.resolve().then(function () { return noopTraceEmitterFactory; }),
-    "./telemetry/open-telemetry-trace-emitter-factory.js": () => Promise.resolve().then(function () { return openTelemetryTraceEmitterFactory; }),
-    "./telemetry/trace-emitter-profile-factory.js": () => Promise.resolve().then(function () { return traceEmitterProfileFactory; }),
-    "./welcome/default-welcome-service-factory.js": () => Promise.resolve().then(function () { return defaultWelcomeServiceFactory; }),
-};
-
-const FACTORY_MODULE_PREFIX$1 = '@naylence/runtime/naylence/fame/';
-const BROWSER_DIST_SEGMENT = '/dist/browser/';
-const NODE_ONLY_FACTORY_MODULES = new Set([
-    './connector/http-listener-factory.js',
-    './connector/websocket-listener-factory.js',
-    './telemetry/open-telemetry-trace-emitter-factory.js',
-    './security/credential/prompt-credential-provider-factory.js',
-]);
-const BROWSER_ONLY_FACTORY_MODULES = new Set([
-    './security/auth/oauth2-pkce-token-provider-factory.js',
-]);
-const isNodeEnvironment = typeof process !== 'undefined' && Boolean(process?.versions?.node);
-function detectModuleUrl() {
-    // Prefer Node-friendly __filename when available.
-    if (typeof __filename === 'string') {
-        try {
-            const normalized = __filename.startsWith('file://')
-                ? __filename
-                : `file://${__filename}`;
-            return normalized;
-        }
-        catch {
-            // fall through to stack parsing
-        }
-    }
-    // Fallback to parsing the current stack trace to discover the executing module URL.
-    try {
-        throw new Error();
-    }
-    catch (error) {
-        const stack = typeof error === 'object' && error && 'stack' in error
-            ? String(error.stack ?? '')
-            : '';
-        const lines = stack.split('\n');
-        for (const line of lines) {
-            const match = line.match(/(https?:\/\/[^\s)]+|file:\/\/[^\s)]+|\/[^\s)]+\.(?:js|ts))/u);
-            if (!match) {
-                continue;
-            }
-            const candidate = match[1];
-            if (candidate.startsWith('http://') || candidate.startsWith('https://')) {
-                return candidate;
-            }
-            if (candidate.startsWith('file://')) {
-                return candidate;
-            }
-            return `file://${candidate}`;
-        }
-    }
-    return null;
-}
-function computeBrowserFactoryBase(rawUrl) {
-    if (!rawUrl) {
-        return null;
-    }
-    const sanitized = rawUrl.split('?')[0]?.split('#')[0] ?? rawUrl;
-    const esmMarker = '/dist/esm/naylence/fame/';
-    const browserMarker = '/dist/browser/';
-    const distMarker = '/dist/';
-    if (sanitized.includes(esmMarker)) {
-        return sanitized.slice(0, sanitized.indexOf(esmMarker) + esmMarker.length);
-    }
-    if (rawUrl.includes(BROWSER_DIST_SEGMENT)) {
-        return new URL('../esm/naylence/fame/', rawUrl).href;
-    }
-    if (rawUrl.startsWith('http://') || rawUrl.startsWith('https://')) {
-        try {
-            const parsed = new URL(rawUrl);
-            const viteDepsSegment = '/node_modules/.vite/deps/';
-            if (parsed.pathname.includes(viteDepsSegment)) {
-                const baseOrigin = `${parsed.protocol}//${parsed.host}`;
-                return `${baseOrigin}/node_modules/@naylence/runtime/dist/esm/naylence/fame/`;
-            }
-        }
-        catch {
-            // ignore and fall through to null
-        }
-    }
-    if (sanitized.includes(browserMarker)) {
-        const base = sanitized.slice(0, sanitized.indexOf(browserMarker) + browserMarker.length);
-        return `${base.replace(/browser\/?$/u, '')}esm/naylence/fame/`;
-    }
-    if (sanitized.includes(distMarker)) {
-        const index = sanitized.indexOf(distMarker);
-        const base = sanitized.slice(0, index + distMarker.length);
-        return `${base}esm/naylence/fame/`;
-    }
-    // Fallback for development: if this is a source file path, compute dist/esm path
-    const srcMarker = '/src/naylence/fame/';
-    if (sanitized.includes(srcMarker)) {
-        const index = sanitized.indexOf(srcMarker);
-        const projectRoot = sanitized.slice(0, index);
-        return `${projectRoot}/dist/esm/naylence/fame/`;
-    }
-    return null;
-}
-const moduleUrl = detectModuleUrl();
-const browserFactoryBase = computeBrowserFactoryBase(moduleUrl);
-function resolveFactoryModuleSpecifier$1(specifier) {
-    if (specifier.startsWith('../')) {
-        const relativePath = specifier.slice('../'.length);
-        return `${FACTORY_MODULE_PREFIX$1}${relativePath}`;
-    }
-    if (specifier.startsWith('./')) {
-        const relativePath = specifier.slice('./'.length);
-        return `${FACTORY_MODULE_PREFIX$1}${relativePath}`;
-    }
-    return null;
-}
-function resolveModuleCandidates(spec) {
-    const packageSpecifier = resolveFactoryModuleSpecifier$1(spec);
-    const candidates = [];
-    const preferSource = typeof moduleUrl === 'string' && moduleUrl.includes('/src/');
-    const addCandidate = (candidate) => {
-        if (!candidate) {
-            return;
-        }
-        if (!candidates.includes(candidate)) {
-            candidates.push(candidate);
-        }
-    };
-    if (preferSource && spec.startsWith('./')) {
-        const baseSource = `../${spec.slice(2)}`;
-        addCandidate(baseSource);
-        if (baseSource.endsWith('.js')) {
-            addCandidate(baseSource.replace(/\.js$/u, '.ts'));
-        }
-    }
-    if (browserFactoryBase && spec.startsWith('./')) {
-        const browserCandidate = new URL(spec.slice('./'.length), browserFactoryBase).href;
-        addCandidate(browserCandidate);
-        if (browserCandidate.endsWith('.js')) {
-            addCandidate(browserCandidate.replace(/\.js$/u, '.ts'));
-        }
-    }
-    if (packageSpecifier) {
-        addCandidate(packageSpecifier);
-        if (packageSpecifier.endsWith('.js')) {
-            addCandidate(packageSpecifier.replace(/\.js$/u, '.ts'));
-        }
-    }
-    const baseFallback = spec.startsWith('./') ? `../${spec.slice(2)}` : spec;
-    addCandidate(baseFallback);
-    if (baseFallback.endsWith('.js')) {
-        addCandidate(baseFallback.replace(/\.js$/u, '.ts'));
-    }
-    return candidates;
-}
-async function performRegistration(registry) {
-    await Promise.all(MODULES.map(async (spec) => {
-        if (!isNodeEnvironment && NODE_ONLY_FACTORY_MODULES.has(spec)) {
-            return;
-        }
-        if (isNodeEnvironment && BROWSER_ONLY_FACTORY_MODULES.has(spec)) {
-            return;
-        }
-        try {
-            let mod;
-            let lastError;
-            const staticLoader = MODULE_LOADERS?.[spec];
-            if (staticLoader) {
-                try {
-                    mod = await staticLoader();
-                }
-                catch (error) {
-                    lastError = error;
-                }
-            }
-            if (!mod) {
-                const candidates = resolveModuleCandidates(spec);
-                for (const [index, candidate] of candidates.entries()) {
-                    try {
-                        mod = await import(/* @vite-ignore */ candidate);
-                        lastError = undefined;
-                        break;
-                    }
-                    catch (error) {
-                        lastError = error;
-                        const isLastCandidate = index === candidates.length - 1;
-                        if (isLastCandidate) {
-                            throw error;
-                        }
-                        const message = error instanceof Error ? error.message : String(error);
-                        const moduleNotFound = message.includes('Cannot find module') ||
-                            message.includes('ERR_MODULE_NOT_FOUND') ||
-                            message.includes('Unknown file extension') ||
-                            message.includes('Failed to fetch dynamically imported module') ||
-                            message.includes('Importing a module script failed');
-                        if (!moduleNotFound) {
-                            throw error;
-                        }
-                    }
-                }
-            }
-            if (!mod) {
-                throw (lastError ?? new Error(`Unable to import factory module: ${spec}`));
-            }
-            const meta = mod.FACTORY_META;
-            const Ctor = mod.default;
-            if (!meta?.base || !meta?.key || typeof Ctor !== 'function') {
-                console.warn('[factory-manifest] skipped', spec, '— missing FACTORY_META or default export ctor');
-                return;
-            }
-            registry.registerFactory(meta.base, meta.key, Ctor);
-        }
-        catch (error) {
-            const reason = error instanceof Error ? error.message : String(error);
-            console.warn('[factory-manifest] skipped', spec, '-', reason);
-        }
-    }));
-}
-async function registerDefaultFactories(registry = Registry) {
-    await performRegistration(registry);
-}
-/**
- * Register all default Naylence runtime factories into the supplied registry.
- *
- * @param registry Registry implementation to receive the default runtime factories.
- */
-async function registerRuntimeFactories(registry = Registry) {
-    if (registry === Registry) {
-        await ensureDefaultRegistration();
-        return;
-    }
-    await performRegistration(registry);
-}
-let defaultRegistrationPromise = null;
-let defaultRegistrationError = null;
-async function ensureDefaultRegistration() {
-    if (defaultRegistrationError) {
-        throw defaultRegistrationError;
-    }
-    if (!defaultRegistrationPromise) {
-        defaultRegistrationError = null;
-        defaultRegistrationPromise = performRegistration(Registry).catch((error) => {
-            defaultRegistrationError = error;
-            defaultRegistrationPromise = null;
-            throw error;
-        });
-    }
-    await defaultRegistrationPromise;
-}
-async function ensureRuntimeFactoriesRegistered(registry = Registry) {
-    if (registry !== Registry) {
-        await performRegistration(registry);
-        return;
-    }
-    await ensureDefaultRegistration();
-}
-
 const NODE_LIKE_FACTORY_BASE_TYPE = 'NodeLikeFactory';
 class NodeLikeFactory extends AbstractResourceFactory {
     static async createNode(config, options = {}) {
@@ -35632,6 +35659,28 @@ async function main() {
     process.on('SIGTERM', () => shutdown('SIGTERM'));
 }
 
+// Always register the plugin directly. This ensures it is initialized even if
+// the dynamic import mechanism (used by FAME_PLUGINS) fails or is not used.
+(async () => {
+    try {
+        await runtimePlugin.register();
+    }
+    catch (err) {
+        console.error('[naylence-runtime] Failed to auto-register plugin:', err);
+    }
+})();
+// Auto-register the runtime plugin in FAME_PLUGINS for child processes
+if (typeof process !== 'undefined' && process.env) {
+    const pluginName = '@naylence/runtime';
+    const current = process.env.FAME_PLUGINS || '';
+    const plugins = current.split(',').map((p) => p.trim());
+    if (!plugins.includes(pluginName)) {
+        process.env.FAME_PLUGINS = current
+            ? `${current},${pluginName}`
+            : pluginName;
+    }
+}
+
 /**
  * Base abstraction for message delivery policies.
  */
@@ -41269,31 +41318,104 @@ var traceEmitterProfileFactory = /*#__PURE__*/Object.freeze({
     default: TraceEmitterProfileFactory
 });
 
-let initialized = false;
-const runtimePlugin = {
-    name: 'naylence:runtime',
-    version: VERSION,
-    async register() {
-        // console.log('[naylence:runtime] register() called, initialized=', initialized);
-        if (initialized) {
-            // console.log('[naylence:runtime] already initialized, skipping');
-            return;
+class WebSocketTransportProvisioner {
+    constructor(options) {
+        this.url = options.url;
+        this.ttlSec = options.ttlSec;
+    }
+    async provision(_decision, hello, _fullMetadata, attachToken) {
+        const supportedTransports = hello.supportedTransports;
+        if (Array.isArray(supportedTransports) && supportedTransports.length > 0) {
+            const hasWebSocket = supportedTransports.includes(WebSocketTransportProvisioner.TRANSPORT_TYPE);
+            if (!hasWebSocket) {
+                throw new Error(`Unsupported transports: ${supportedTransports.join(', ')}`);
+            }
         }
-        initialized = true;
-        // console.log('[naylence:runtime] registering runtime factories...');
-        // Register factories from manifest
-        await registerRuntimeFactories();
-        // Import modules with side-effect registrations (not in manifest)
-        await Promise.resolve().then(function () { return websocketTransportProvisioner; });
-        // console.log('[naylence:runtime] runtime factories registered');
-    },
-};
-const RUNTIME_PLUGIN_SPECIFIER = runtimePlugin.name;
+        let authConfig;
+        if (attachToken) {
+            const tokenProviderConfig = {
+                type: 'StaticTokenProvider',
+                token: attachToken,
+            };
+            authConfig = {
+                type: 'WebSocketSubprotocolAuth',
+                tokenProvider: tokenProviderConfig,
+            };
+        }
+        const grant = normalizeWebSocketConnectionGrant({
+            type: WEBSOCKET_CONNECTION_GRANT_TYPE,
+            purpose: GRANT_PURPOSE_NODE_ATTACH,
+            url: this.url,
+            auth: authConfig,
+        });
+        const result = {
+            connectionGrant: grant,
+            cleanupHandle: null,
+        };
+        if (this.ttlSec !== undefined) {
+            result.metadata = {
+                ...(result.metadata ?? {}),
+                ttlSec: this.ttlSec,
+            };
+        }
+        return result;
+    }
+    async deprovision(_cleanupHandle) {
+        // No-op for stateless WebSocket transport provisioners
+    }
+}
+WebSocketTransportProvisioner.TRANSPORT_TYPE = 'websocket';
+class WebSocketTransportProvisionerFactory extends TransportProvisionerFactory {
+    constructor() {
+        super(...arguments);
+        this.type = 'WebSocketTransportProvisioner';
+        this.isDefault = true;
+    }
+    async create(config) {
+        const options = normalizeConfig(config);
+        return new WebSocketTransportProvisioner(options);
+    }
+}
+function normalizeConfig(config) {
+    if (!config) {
+        throw new Error('WebSocketTransportProvisioner requires configuration');
+    }
+    const candidate = config;
+    const typeValue = typeof candidate.type === 'string' ? candidate.type : undefined;
+    if (typeValue !== 'WebSocketTransportProvisioner') {
+        throw new Error(`WebSocketTransportProvisionerFactory expects type "WebSocketTransportProvisioner", got "${typeValue ?? 'undefined'}"`);
+    }
+    const urlValue = candidate.url;
+    if (typeof urlValue !== 'string' || urlValue.trim().length === 0) {
+        throw new Error('WebSocketTransportProvisioner configuration must include a non-empty "url" string');
+    }
+    const ttlCandidate = (() => {
+        const raw = candidate.ttlSec ?? candidate.ttl_sec ?? candidate.ttlSEC;
+        if (typeof raw === 'number') {
+            return raw;
+        }
+        if (typeof raw === 'string') {
+            const parsed = Number(raw.trim());
+            return Number.isFinite(parsed) ? parsed : undefined;
+        }
+        return undefined;
+    })();
+    const options = {
+        url: urlValue.trim(),
+    };
+    if (typeof ttlCandidate === 'number' && Number.isFinite(ttlCandidate)) {
+        options.ttlSec = ttlCandidate;
+    }
+    return options;
+}
+registerFactory(TRANSPORT_PROVISIONER_FACTORY_BASE_TYPE, 'WebSocketTransportProvisioner', WebSocketTransportProvisionerFactory, {
+    isDefault: true,
+});
 
-var plugin = /*#__PURE__*/Object.freeze({
+var websocketTransportProvisioner = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    RUNTIME_PLUGIN_SPECIFIER: RUNTIME_PLUGIN_SPECIFIER,
-    default: runtimePlugin
+    WebSocketTransportProvisioner: WebSocketTransportProvisioner,
+    WebSocketTransportProvisionerFactory: WebSocketTransportProvisionerFactory
 });
 
 const logger$5 = getLogger('naylence.fame.security.auth.default_authorizer');
@@ -43539,104 +43661,4 @@ var otelSetup = /*#__PURE__*/Object.freeze({
     setupOtel: setupOtel
 });
 
-class WebSocketTransportProvisioner {
-    constructor(options) {
-        this.url = options.url;
-        this.ttlSec = options.ttlSec;
-    }
-    async provision(_decision, hello, _fullMetadata, attachToken) {
-        const supportedTransports = hello.supportedTransports;
-        if (Array.isArray(supportedTransports) && supportedTransports.length > 0) {
-            const hasWebSocket = supportedTransports.includes(WebSocketTransportProvisioner.TRANSPORT_TYPE);
-            if (!hasWebSocket) {
-                throw new Error(`Unsupported transports: ${supportedTransports.join(', ')}`);
-            }
-        }
-        let authConfig;
-        if (attachToken) {
-            const tokenProviderConfig = {
-                type: 'StaticTokenProvider',
-                token: attachToken,
-            };
-            authConfig = {
-                type: 'WebSocketSubprotocolAuth',
-                tokenProvider: tokenProviderConfig,
-            };
-        }
-        const grant = normalizeWebSocketConnectionGrant({
-            type: WEBSOCKET_CONNECTION_GRANT_TYPE,
-            purpose: GRANT_PURPOSE_NODE_ATTACH,
-            url: this.url,
-            auth: authConfig,
-        });
-        const result = {
-            connectionGrant: grant,
-            cleanupHandle: null,
-        };
-        if (this.ttlSec !== undefined) {
-            result.metadata = {
-                ...(result.metadata ?? {}),
-                ttlSec: this.ttlSec,
-            };
-        }
-        return result;
-    }
-    async deprovision(_cleanupHandle) {
-        // No-op for stateless WebSocket transport provisioners
-    }
-}
-WebSocketTransportProvisioner.TRANSPORT_TYPE = 'websocket';
-class WebSocketTransportProvisionerFactory extends TransportProvisionerFactory {
-    constructor() {
-        super(...arguments);
-        this.type = 'WebSocketTransportProvisioner';
-        this.isDefault = true;
-    }
-    async create(config) {
-        const options = normalizeConfig(config);
-        return new WebSocketTransportProvisioner(options);
-    }
-}
-function normalizeConfig(config) {
-    if (!config) {
-        throw new Error('WebSocketTransportProvisioner requires configuration');
-    }
-    const candidate = config;
-    const typeValue = typeof candidate.type === 'string' ? candidate.type : undefined;
-    if (typeValue !== 'WebSocketTransportProvisioner') {
-        throw new Error(`WebSocketTransportProvisionerFactory expects type "WebSocketTransportProvisioner", got "${typeValue ?? 'undefined'}"`);
-    }
-    const urlValue = candidate.url;
-    if (typeof urlValue !== 'string' || urlValue.trim().length === 0) {
-        throw new Error('WebSocketTransportProvisioner configuration must include a non-empty "url" string');
-    }
-    const ttlCandidate = (() => {
-        const raw = candidate.ttlSec ?? candidate.ttl_sec ?? candidate.ttlSEC;
-        if (typeof raw === 'number') {
-            return raw;
-        }
-        if (typeof raw === 'string') {
-            const parsed = Number(raw.trim());
-            return Number.isFinite(parsed) ? parsed : undefined;
-        }
-        return undefined;
-    })();
-    const options = {
-        url: urlValue.trim(),
-    };
-    if (typeof ttlCandidate === 'number' && Number.isFinite(ttlCandidate)) {
-        options.ttlSec = ttlCandidate;
-    }
-    return options;
-}
-registerFactory(TRANSPORT_PROVISIONER_FACTORY_BASE_TYPE, 'WebSocketTransportProvisioner', WebSocketTransportProvisionerFactory, {
-    isDefault: true,
-});
-
-var websocketTransportProvisioner = /*#__PURE__*/Object.freeze({
-    __proto__: null,
-    WebSocketTransportProvisioner: WebSocketTransportProvisioner,
-    WebSocketTransportProvisionerFactory: WebSocketTransportProvisionerFactory
-});
-
 export { ADMISSION_CLIENT_FACTORY_BASE_TYPE, ATTACHMENT_KEY_VALIDATOR_FACTORY_BASE_TYPE, AUTHORIZER_FACTORY_BASE_TYPE, AUTH_INJECTION_STRATEGY_FACTORY_BASE_TYPE, AnsiColor, AsyncLock, AttachmentKeyValidator, AuthInjectionStrategyFactory, AuthorizerFactory, BROADCAST_CHANNEL_CONNECTION_GRANT_TYPE, BackPressureFull, BaseAsyncConnector, BaseNodeEventListener, BindingManager, BindingStoreEntryRecord, BrowserAutoKeyCredentialProvider, BrowserWrappedKeyCredentialProvider, CERTIFICATE_MANAGER_FACTORY_BASE_TYPE, CREDENTIAL_PROVIDER_FACTORY_BASE_TYPE, CRYPTO_LEVEL_SECURITY_ORDER, CertificateManagerFactory, ConnectorConfigDefaults, ConnectorFactory, ConsoleMetricsEmitter, CryptoLevel, FACTORY_META$_ as DEFAULT_WELCOME_FACTORY_META, DefaultCryptoProvider, DefaultHttpServer, DefaultKeyManager, DefaultNodeIdentityPolicy, DefaultNodeIdentityPolicyFactory, DefaultSecurityManager, DefaultSecurityPolicy, DefaultWelcomeService, DefaultWelcomeServiceFactory, DevFixedKeyCredentialProvider, ENCRYPTION_MANAGER_FACTORY_BASE_TYPE, ENVELOPE_SIGNER_FACTORY_BASE_TYPE, ENVELOPE_VERIFIER_FACTORY_BASE_TYPE, ENV_VAR_DEFAULT_ENCRYPTION_LEVEL, ENV_VAR_HMAC_SECRET, ENV_VAR_JWKS_URL, ENV_VAR_JWT_ALGORITHM$2 as ENV_VAR_JWT_ALGORITHM, ENV_VAR_JWT_AUDIENCE$2 as ENV_VAR_JWT_AUDIENCE, ENV_VAR_JWT_REVERSE_AUTH_AUDIENCE, ENV_VAR_JWT_REVERSE_AUTH_TRUSTED_ISSUER, ENV_VAR_JWT_TRUSTED_ISSUER, ENV_VAR_SHOW_ENVELOPES$1 as ENV_VAR_SHOW_ENVELOPES, EdDSAEnvelopeSigner, EncryptedKeyValueStore, EncryptedStorageProviderBase, EncryptedValue, EncryptionConfiguration, EncryptionManagerFactory, EncryptionResult, EncryptionStatus, EnvCredentialProvider, EnvelopeContext, EnvelopeListenerManager, EnvelopeSecurityHandler, EnvelopeSignerFactory, EnvelopeVerifierFactory, FACTORY_META$$ as FACTORY_META, FAME_FABRIC_FACTORY_BASE_TYPE, FIXED_PREFIX_LEN, FameAuthorizedDeliveryContextSchema, FameConnectError, FameEnvironmentContext, FameError, FameMessageTooLarge, FameNode, FameNodeAuthorizationContextSchema, FameProtocolError, FameTransportClose, FlowController, GRANT_PURPOSE_NODE_ATTACH, HTTP_CONNECTION_GRANT_TYPE, HTTP_STATELESS_CONNECTOR_TYPE, HttpListener, HttpStatelessConnector, INPAGE_CONNECTION_GRANT_TYPE, INPAGE_CONNECTOR_TYPE, InMemoryBinding, InMemoryFanoutBroker, InMemoryKeyValueStore, InMemoryReadWriteChannel, InMemoryStorageProvider, InPageConnector, InPageListener, InProcessFameFabric, InProcessFameFabricFactory, IndexedDBKeyValueStore, IndexedDBStorageProvider, InvalidPassphraseError, JWKValidationError, KEY_MANAGER_FACTORY_BASE_TYPE, KEY_STORE_FACTORY_BASE_TYPE, KeyInfo, KeyManagementHandler, KeyManagerFactory, KeyStore, KeyStoreFactory, KeyValidationError, LOAD_BALANCER_STICKINESS_MANAGER_FACTORY_BASE_TYPE, LoadBalancerStickinessManagerFactory, LogLevel, LogLevelNames, MemoryMetricsEmitter, NODE_IDENTITY_POLICY_FACTORY_BASE_TYPE, NODE_LIKE_FACTORY_BASE_TYPE, NODE_PLACEMENT_STRATEGY_FACTORY_BASE_TYPE, NoOpMetricsEmitter, NoSecurityPolicy, NodeFactory, NodeIdentityPolicyFactory, NodeIdentityPolicyProfileFactory, NodePlacementStrategyFactory, NoneCredentialProvider, NoopEncryptionManager, NoopKeyValidator, NoopTrustStoreProvider, NotAuthorized, PROFILE_NAME_GATED, PROFILE_NAME_GATED_CALLBACK, PROFILE_NAME_OPEN$1 as PROFILE_NAME_OPEN, PROFILE_NAME_OVERLAY, PROFILE_NAME_OVERLAY_CALLBACK, PROFILE_NAME_STRICT_OVERLAY, PromptCredentialProvider, QueueFullError, REPLICA_STICKINESS_MANAGER_FACTORY_BASE_TYPE, REQUIRED_FIELDS_BY_KTY, ReplicaStickinessManagerFactory, RootSessionManager, RouteManager, RpcMixin, RpcProxy, SEALED_ENVELOPE_NONCE_LENGTH, SEALED_ENVELOPE_OVERHEAD, SEALED_ENVELOPE_PRIVATE_KEY_LENGTH, SEALED_ENVELOPE_PUBLIC_KEY_LENGTH, SEALED_ENVELOPE_TAG_LENGTH, SECURE_CHANNEL_MANAGER_FACTORY_BASE_TYPE, SECURITY_MANAGER_FACTORY_BASE_TYPE, SECURITY_POLICY_FACTORY_BASE_TYPE, SQLiteKeyValueStore, SQLiteStorageProvider, STORAGE_PROVIDER_FACTORY_BASE_TYPE, SecretSource, SecretStoreCredentialProvider, SecureChannelFrameHandler, SecureChannelManagerFactory, SecurityAction, SecurityRequirements, Sentinel, SentinelFactory, SessionKeyCredentialProvider, SignaturePolicy, SigningConfig as SigningConfigClass, SigningConfiguration, SimpleLoadBalancerStickinessManager, SimpleLoadBalancerStickinessManagerFactory, StaticCredentialProvider, StorageAESEncryptionManager, TOKEN_ISSUER_FACTORY_BASE_TYPE, TOKEN_PROVIDER_FACTORY_BASE_TYPE, TOKEN_VERIFIER_FACTORY_BASE_TYPE, TRANSPORT_LISTENER_FACTORY_BASE_TYPE, TRANSPORT_PROVISIONER_FACTORY_BASE_TYPE, TRUST_STORE_PROVIDER_FACTORY_BASE_TYPE, TaskSpawner, TokenIssuerFactory, TokenProviderFactory, TokenSubjectNodeIdentityPolicy, TokenSubjectNodeIdentityPolicyFactory, TokenVerifierFactory, TransportListener, TransportListenerFactory, TransportProvisionerFactory, TrustStoreProviderFactory, TtlValidationError, UpstreamSessionManager, VALID_CURVES_BY_KTY, VALID_KEY_USES, VERSION, WEBSOCKET_CONNECTION_GRANT_TYPE, WELCOME_SERVICE_FACTORY_BASE_TYPE, WebSocketCloseCode, WebSocketConnector, WebSocketListener, WebSocketState, WelcomeServiceFactory, _NoopFlowController, __runtimePluginLoader, addEnvelopeFields, addLogLevel, addTimestamp, assertConnectionGrant, assertGrant, basicConfig, broadcastChannelGrantToConnectorConfig, camelToSnakeCase, canonicalJson, capitalizeFirstLetter, color, compareCryptoLevels, compiledPathPattern, consoleTransport, convertWildcardLogicalToDnsConstraint, createConnectorConfig, createEd25519Keypair, createHostLogicalUri, createJwksRouter, createLogicalUri, createNodeDeliveryContext, createApp as createOAuth2ServerApp, createOAuth2TokenRouter, createOpenIDConfigurationRouter, createResource, createRpcProxy, createRsaKeypair, createTransportCloseError, createX25519Keypair, credentialToString, currentTraceId$1 as currentTraceId, debounce, decodeBase64Url, decodeFameDataPayload, deepMerge, defaultJsonEncoder, delay, dropEmpty, enableLogging, encodeUtf8, ensureRuntimeFactoriesRegistered, extractId, extractPoolAddressBase, extractPoolBase, filterKeysByUse, formatTimestamp, formatTimestampForConsole$1 as formatTimestampForConsole, frameDigest, getCurrentEnvelope, getFabricForNode, getFameRoot, getHttpListenerInstance, getInPageListenerInstance, getKeyProvider, getKeyStore, getLogger, getWebsocketListenerInstance, hasCryptoSupport, hostnameToLogical, hostnamesToLogicals, httpGrantToConnectorConfig, immutableHeaders, inPageGrantToConnectorConfig, isAuthInjectionStrategy, isBroadcastChannelConnectionGrant, isConnectionGrant, isConnectorConfig, isEnvelopeLoggingEnabled, isFameError, isFameErrorType, isGrant, isHttpConnectionGrant, isIdentityExposingTokenProvider, isInPageConnectionGrant, isNodeLike, isPlainObject$3 as isPlainObject, isPoolAddress, isPoolLogical, isRegisterable, isTokenExpired, isTokenProvider, isTokenValid, isWebSocketConnectionGrant, jsonDumps, logicalPatternsToDnsConstraints, logicalToHostname, logicalsToHostnames, matchesPoolAddress, matchesPoolLogical, maybeAwait, nodeWelcomeRouter, nodeWelcomeRouterPlugin, normalizeBroadcastChannelConnectionGrant, normalizeEncryptionConfig, normalizeEnvelopeSnapshot, normalizeExtendedFameConfig, normalizeHttpConnectionGrant, normalizeInPageConnectionGrant, normalizeInboundCryptoRules, normalizeInboundSigningRules, normalizeOutboundCryptoRules, normalizeOutboundSigningRules, normalizePath, normalizeResponseCryptoRules, normalizeResponseSigningRules, normalizeSecretSource, normalizeSecurityRequirements, normalizeSigningConfig, normalizeWebSocketConnectionGrant, objectToBytes, operation, parseSealedEnvelope, pinoTransport, prettyModel$1 as prettyModel, registerDefaultFactories, registerDefaultKeyStoreFactory, registerNodePlacementStrategyFactory, registerRuntimeFactories, requireCryptoSupport, retryWithBackoff, main as runOAuth2Server, safeColor, safeImport, sealedDecrypt, sealedEncrypt, secureDigest, setKeyStore, showEnvelopes$1 as showEnvelopes, sleep, snakeToCamelCase, stringifyNonPrimitives, supportsColor, throttle, urlsafeBase64Decode, urlsafeBase64Encode, validateCacheTtlSec, validateEncryptionKey, validateHostLogical, validateHostLogicals, validateJwkComplete, validateJwkStructure, validateJwkUseField, validateJwtTokenTtlSec, validateKeyCorrelationTtlSec, validateLogical, validateLogicalSegment, validateOAuth2TtlSec, validateSigningKey, validateTtlSec, waitForAll, waitForAllSettled, waitForAny, websocketGrantToConnectorConfig, withEnvelopeContext, withEnvelopeContextAsync, withLegacySnakeCaseKeys, withLock, withTimeout };