@naylence/runtime 0.3.5-test.929 → 0.3.5-test.931

package/dist/node/node.mjs

@@ -5385,12 +5385,12 @@ for (const [name, config] of Object.entries(SQLITE_PROFILES)) {
 }
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.3.5-test.929
+// Generated from package.json version: 0.3.5-test.931
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.3.5-test.929';
+const VERSION = '0.3.5-test.931';
 
 /**
  * Fame errors module - Fame protocol specific error classes
@@ -34494,239 +34494,10 @@ var noopTraceEmitterFactory = /*#__PURE__*/Object.freeze({
     default: NoopTraceEmitterFactory
 });
 
-const logger$h = getLogger('naylence.fame.telemetry.otel_setup');
-const stringFrom = (...codes) => String.fromCharCode(...codes);
-const OTEL_PREFIX = `${stringFrom(64, 111, 112, 101, 110, 116, 101, 108, 101, 109, 101, 116, 114, 121)}${stringFrom(47)}`;
-const OTEL_API_SPEC = `${OTEL_PREFIX}${stringFrom(97, 112, 105)}`;
-const OTEL_RESOURCES_SPEC = `${OTEL_PREFIX}${stringFrom(114, 101, 115, 111, 117, 114, 99, 101, 115)}`;
-const OTEL_TRACE_NODE_SPEC = `${OTEL_PREFIX}${stringFrom(115, 100, 107, 45, 116, 114, 97, 99, 101, 45, 110, 111, 100, 101)}`;
-const OTEL_TRACE_BASE_SPEC = `${OTEL_PREFIX}${stringFrom(115, 100, 107, 45, 116, 114, 97, 99, 101, 45, 98, 97, 115, 101)}`;
-const OTEL_EXPORTER_HTTP_SPEC = `${OTEL_PREFIX}${stringFrom(101, 120, 112, 111, 114, 116, 101, 114, 45, 116, 114, 97, 99, 101, 45, 111, 116, 108, 112, 45, 104, 116, 116, 112)}`;
-let registeredOtel = null;
-async function setupOtel(options) {
-    const normalized = normalizeSetupOtelOptions(options);
-    try {
-        if (registeredOtel) {
-            logger$h.debug('open_telemetry_reusing_provider', {
-                service_name: normalized.serviceName,
-            });
-            return registeredOtel.control;
-        }
-        const [apiModule, resourcesModule, nodeModule, traceBaseModule] = await Promise.all([
-            import(OTEL_API_SPEC),
-            import(OTEL_RESOURCES_SPEC),
-            import(OTEL_TRACE_NODE_SPEC),
-            import(OTEL_TRACE_BASE_SPEC),
-        ]);
-        const { trace } = apiModule;
-        const { defaultResource, resourceFromAttributes } = resourcesModule;
-        const { NodeTracerProvider } = nodeModule;
-        const { BatchSpanProcessor, ConsoleSpanExporter, ParentBasedSampler, AlwaysOnSampler, AlwaysOffSampler, TraceIdRatioBasedSampler, } = traceBaseModule;
-        const currentProvider = trace.getTracerProvider();
-        if (currentProvider && currentProvider instanceof NodeTracerProvider) {
-            return null;
-        }
-        if (currentProvider &&
-            currentProvider.constructor?.name === 'NodeTracerProvider') {
-            logger$h.debug('open_telemetry_existing_node_provider', {
-                service_name: normalized.serviceName,
-            });
-            return null;
-        }
-        logger$h.debug('open_telemetry_initializing', {
-            service_name: normalized.serviceName,
-            endpoint: normalized.endpoint ?? null,
-            environment: normalized.environment ?? null,
-            sampler: normalized.sampler ?? null,
-            headers_present: Boolean(normalized.headers && Object.keys(normalized.headers).length),
-        });
-        const sampler = resolveSampler(normalized.sampler, {
-            ParentBasedSampler,
-            AlwaysOnSampler,
-            AlwaysOffSampler,
-            TraceIdRatioBasedSampler,
-        });
-        const baseResource = defaultResource();
-        const mergedResource = resourceFromAttributes({
-            'service.name': normalized.serviceName,
-            'service.instance.id': generateInstanceId(),
-            'deployment.environment': normalized.environment ?? 'dev',
-        });
-        const resource = baseResource.merge(mergedResource);
-        const exporter = await resolveExporter(normalized.endpoint ?? undefined, normalized.headers, ConsoleSpanExporter);
-        const spanProcessor = new BatchSpanProcessor(exporter);
-        const provider = new NodeTracerProvider({
-            resource,
-            sampler,
-            spanProcessors: [spanProcessor],
-        });
-        provider.register();
-        logger$h.debug('open_telemetry_initialized', {
-            service_name: normalized.serviceName,
-            exporter: exporter.constructor?.name ?? 'unknown_exporter',
-        });
-        const control = {
-            forceFlush: async () => {
-                try {
-                    await provider.forceFlush();
-                }
-                catch (flushError) {
-                    logger$h.warning('open_telemetry_force_flush_failed', {
-                        error: flushError instanceof Error
-                            ? flushError.message
-                            : String(flushError),
-                    });
-                }
-            },
-            shutdown: async () => {
-                try {
-                    await provider.shutdown();
-                }
-                catch (shutdownError) {
-                    logger$h.warning('open_telemetry_shutdown_failed', {
-                        error: shutdownError instanceof Error
-                            ? shutdownError.message
-                            : String(shutdownError),
-                    });
-                }
-                finally {
-                    registeredOtel = null;
-                }
-            },
-        };
-        registeredOtel = {
-            provider,
-            control,
-        };
-        return control;
-    }
-    catch (error) {
-        logger$h.error('open_telemetry_not_available', {
-            error: error instanceof Error ? error.message : String(error),
-            stack: error instanceof Error && error.stack ? error.stack : undefined,
-        });
-        return null;
-    }
-}
-function normalizeSetupOtelOptions(options) {
-    const source = (options ?? {});
-    const serviceName = extractNonEmptyString$1(pickFirst$2(source, ['serviceName', 'service_name'])) ??
-        'naylence-service';
-    const endpoint = extractNonEmptyString$1(pickFirst$2(source, ['endpoint', 'otlpEndpoint', 'otlp_endpoint'])) ?? null;
-    const environment = extractNonEmptyString$1(pickFirst$2(source, [
-        'environment',
-        'deploymentEnvironment',
-        'deployment_environment',
-    ])) ?? null;
-    const sampler = extractNonEmptyString$1(pickFirst$2(source, ['sampler', 'samplingStrategy', 'sampling_strategy'])) ?? null;
-    const headers = extractHeaders$1(pickFirst$2(source, ['headers', 'otlpHeaders', 'otlp_headers']));
-    return {
-        serviceName,
-        endpoint,
-        environment,
-        sampler,
-        headers: headers ?? undefined,
-    };
-}
-function pickFirst$2(source, keys) {
-    for (const key of keys) {
-        if (Object.prototype.hasOwnProperty.call(source, key)) {
-            const value = source[key];
-            if (value !== undefined) {
-                return value;
-            }
-        }
-    }
-    return undefined;
-}
-function extractNonEmptyString$1(value) {
-    if (typeof value === 'string') {
-        const trimmed = value.trim();
-        if (trimmed.length > 0) {
-            return trimmed;
-        }
-    }
-    return undefined;
-}
-function extractHeaders$1(value) {
-    if (!value || typeof value !== 'object') {
-        return null;
-    }
-    const headers = {};
-    for (const [key, raw] of Object.entries(value)) {
-        if (typeof raw === 'string') {
-            headers[key] = raw;
-        }
-    }
-    return Object.keys(headers).length > 0 ? headers : null;
-}
-function generateInstanceId() {
-    try {
-        if (typeof crypto !== 'undefined' &&
-            typeof crypto.randomUUID === 'function') {
-            return crypto.randomUUID().replace(/-/g, '');
-        }
-    }
-    catch {
-        // Ignore crypto availability errors
-    }
-    const random = Math.random().toString(16).slice(2);
-    return random.padEnd(32, '0').slice(0, 32);
-}
-function resolveSampler(samplerSetting, samplers) {
-    const normalized = (samplerSetting ?? 'parentbased_always_on').toLowerCase();
-    let base;
-    if (normalized === 'always_off') {
-        base = new samplers.AlwaysOffSampler();
-    }
-    else if (normalized === 'always_on' ||
-        normalized === 'parentbased_always_on') {
-        base = new samplers.AlwaysOnSampler();
-    }
-    else if (normalized.startsWith('ratio:')) {
-        const ratioValue = Number.parseFloat(normalized.slice('ratio:'.length));
-        const ratio = Number.isFinite(ratioValue)
-            ? Math.min(Math.max(ratioValue, 0), 1)
-            : 1;
-        base = new samplers.TraceIdRatioBasedSampler(ratio);
-    }
-    else {
-        base = new samplers.AlwaysOnSampler();
-    }
-    return new samplers.ParentBasedSampler({ root: base });
-}
-async function resolveExporter(endpoint, headers, ConsoleSpanExporter) {
-    if (endpoint) {
-        try {
-            const exporterModule = await import(OTEL_EXPORTER_HTTP_SPEC);
-            if ('OTLPTraceExporter' in exporterModule) {
-                const { OTLPTraceExporter } = exporterModule;
-                const exporterOptions = {
-                    url: endpoint,
-                };
-                if (headers && Object.keys(headers).length > 0) {
-                    exporterOptions.headers = headers;
-                }
-                logger$h.debug('open_telemetry_using_otlp_http_exporter', {
-                    endpoint,
-                    headers_present: Boolean(headers && Object.keys(headers).length),
-                });
-                return new OTLPTraceExporter(exporterOptions);
-            }
-        }
-        catch (error) {
-            logger$h.error('open_telemetry_exporter_not_available', {
-                error: error instanceof Error ? error.message : String(error),
-            });
-        }
-    }
-    logger$h.warning('open_telemetry_falling_back_to_console_exporter');
-    return new ConsoleSpanExporter();
-}
-
 let openTelemetryTraceEmitterModulePromise = null;
 let otelApiModulePromise = null;
-const logger$g = getLogger('naylence.fame.telemetry.open_telemetry_trace_emitter_factory');
+let otelSetupModulePromise = null;
+const logger$h = getLogger('naylence.fame.telemetry.open_telemetry_trace_emitter_factory');
 const MISSING_OTEL_HELP_MESSAGE = 'Missing optional OpenTelemetry dependency. Install @opentelemetry/api (and related packages) to enable trace emission.';
 function getOpenTelemetryTraceEmitterModule() {
     if (!openTelemetryTraceEmitterModulePromise) {
@@ -34744,6 +34515,14 @@ function getOtelApiModule() {
     }
     return otelApiModulePromise;
 }
+function getOtelSetupModule() {
+    if (!otelSetupModulePromise) {
+        otelSetupModulePromise = safeImport(() => Promise.resolve().then(function () { return otelSetup; }), '@opentelemetry/api', {
+            helpMessage: MISSING_OTEL_HELP_MESSAGE,
+        });
+    }
+    return otelSetupModulePromise;
+}
 const FACTORY_META$Q = {
     base: TRACE_EMITTER_FACTORY_BASE_TYPE,
     key: 'OpenTelemetryTraceEmitter',
@@ -34767,7 +34546,7 @@ class OpenTelemetryTraceEmitterFactory extends TraceEmitterFactory {
                 await AuthInjectionStrategyFactory.createAuthInjectionStrategy(normalized.auth);
             try {
                 await authStrategy.apply(mergedHeaders);
-                logger$g.info('trace_emitter_auth_applied', {
+                logger$h.info('trace_emitter_auth_applied', {
                     service_name: normalized.serviceName,
                 });
             }
@@ -34783,6 +34562,7 @@ class OpenTelemetryTraceEmitterFactory extends TraceEmitterFactory {
         }
         let lifecycle = null;
         try {
+            const { setupOtel } = await getOtelSetupModule();
             lifecycle = await setupOtel({
                 serviceName: normalized.serviceName,
                 endpoint: normalized.endpoint,
@@ -34790,7 +34570,7 @@ class OpenTelemetryTraceEmitterFactory extends TraceEmitterFactory {
                 sampler: normalized.sampler,
                 headers: Object.keys(mergedHeaders).length > 0 ? mergedHeaders : undefined,
             });
-            logger$g.debug('trace_emitter_lifecycle_acquired', {
+            logger$h.debug('trace_emitter_lifecycle_acquired', {
                 service_name: normalized.serviceName,
                 lifecycle_available: Boolean(lifecycle),
             });
@@ -34828,7 +34608,7 @@ class OpenTelemetryTraceEmitterFactory extends TraceEmitterFactory {
         }
         try {
             const emitter = new OpenTelemetryTraceEmitter(emitterOptions);
-            logger$g.debug('trace_emitter_created', {
+            logger$h.debug('trace_emitter_created', {
                 service_name: normalized.serviceName,
                 has_lifecycle: Boolean(lifecycle),
                 has_auth_strategy: Boolean(authStrategy),
@@ -34860,17 +34640,17 @@ function normalizeConfig$n(config) {
         };
     }
     const candidate = config;
-    const serviceName = extractString(pickFirst$1(candidate, ['serviceName', 'service_name'])) ??
+    const serviceName = extractString(pickFirst$2(candidate, ['serviceName', 'service_name'])) ??
         'naylence-service';
-    const endpoint = extractString(pickFirst$1(candidate, ['endpoint', 'otlpEndpoint', 'otlp_endpoint'])) ?? null;
-    const environment = extractString(pickFirst$1(candidate, [
+    const endpoint = extractString(pickFirst$2(candidate, ['endpoint', 'otlpEndpoint', 'otlp_endpoint'])) ?? null;
+    const environment = extractString(pickFirst$2(candidate, [
         'environment',
         'deploymentEnvironment',
         'deployment_environment',
     ])) ?? null;
-    const sampler = extractString(pickFirst$1(candidate, ['sampler', 'samplingStrategy', 'sampling_strategy'])) ?? null;
-    const headersFromConfig = extractHeaders(pickFirst$1(candidate, ['headers', 'otlpHeaders', 'otlp_headers']));
-    const authConfig = pickFirst$1(candidate, [
+    const sampler = extractString(pickFirst$2(candidate, ['sampler', 'samplingStrategy', 'sampling_strategy'])) ?? null;
+    const headersFromConfig = extractHeaders$1(pickFirst$2(candidate, ['headers', 'otlpHeaders', 'otlp_headers']));
+    const authConfig = pickFirst$2(candidate, [
         'auth',
     ]);
     return {
@@ -34888,7 +34668,7 @@ function extractString(value) {
     }
     return undefined;
 }
-function pickFirst$1(source, keys) {
+function pickFirst$2(source, keys) {
     for (const key of keys) {
         if (Object.prototype.hasOwnProperty.call(source, key)) {
             const value = source[key];
@@ -34899,7 +34679,7 @@ function pickFirst$1(source, keys) {
     }
     return undefined;
 }
-function extractHeaders(value) {
+function extractHeaders$1(value) {
     if (!value || typeof value !== 'object') {
         return null;
     }
@@ -34919,7 +34699,7 @@ var openTelemetryTraceEmitterFactory = /*#__PURE__*/Object.freeze({
     default: OpenTelemetryTraceEmitterFactory
 });
 
-const logger$f = getLogger('naylence.fame.telemetry.trace_emitter_profile_factory');
+const logger$g = getLogger('naylence.fame.telemetry.trace_emitter_profile_factory');
 const PROFILE_NAME_NOOP$1 = 'noop';
 const PROFILE_NAME_OPEN_TELEMETRY = 'open-telemetry';
 const ENV_VAR_TELEMETRY_SERVICE_NAME = 'FAME_TELEMETRY_SERVICE_NAME';
@@ -34947,7 +34727,7 @@ class TraceEmitterProfileFactory extends TraceEmitterFactory {
     async create(config, ...factoryArgs) {
         const normalized = normalizeTraceEmitterProfileConfig(config);
         const profileConfig = resolveProfileConfig$2(normalized.profile);
-        logger$f.debug('enabling_trace_emitter_profile', {
+        logger$g.debug('enabling_trace_emitter_profile', {
             profile: normalized.profile,
         });
         const traceEmitter = await TraceEmitterFactory.createTraceEmitter(profileConfig, {
@@ -35232,7 +35012,7 @@ var atMostOnceDeliveryPolicyFactory = /*#__PURE__*/Object.freeze({
     default: AtMostOnceDeliveryPolicyFactory
 });
 
-const logger$e = getLogger('naylence.fame.delivery.delivery_profile_factory');
+const logger$f = getLogger('naylence.fame.delivery.delivery_profile_factory');
 const PROFILE_NAME_AT_LEAST_ONCE = 'at-least-once';
 const PROFILE_NAME_AT_MOST_ONCE = 'at-most-once';
 const ENV_VAR_FAME_DELIVERY_MAX_RETRIES = 'FAME_DELIVERY_MAX_RETRIES';
@@ -35272,7 +35052,7 @@ class DeliveryProfileFactory extends DeliveryPolicyFactory {
     async create(config) {
         const normalized = normalizeDeliveryProfileConfig(config);
         const profileConfig = resolveProfileConfig$1(normalized.profile);
-        logger$e.debug('enabling_delivery_profile', { profile: normalized.profile });
+        logger$f.debug('enabling_delivery_profile', { profile: normalized.profile });
         const policy = await DeliveryPolicyFactory.createDeliveryPolicy(profileConfig);
         if (!policy) {
             throw new Error(`Failed to create delivery policy for profile: ${normalized.profile}`);
@@ -35335,7 +35115,7 @@ var deliveryProfileFactory = /*#__PURE__*/Object.freeze({
     default: DeliveryProfileFactory
 });
 
-const logger$d = getLogger('naylence.fame.node.admission.admission_profile_factory');
+const logger$e = getLogger('naylence.fame.node.admission.admission_profile_factory');
 const ENV_VAR_IS_ROOT = 'FAME_ROOT';
 const ENV_VAR_JWT_AUDIENCE = 'FAME_JWT_AUDIENCE';
 const ENV_VAR_ADMISSION_TOKEN_URL = 'FAME_ADMISSION_TOKEN_URL';
@@ -35570,7 +35350,7 @@ class AdmissionProfileFactory extends AdmissionClientFactory {
     async create(config) {
         const normalized = normalizeConfig$m(config);
         const profileConfig = resolveProfileConfig(normalized.profile);
-        logger$d.debug('enabling_admission_profile', { profile: normalized.profile });
+        logger$e.debug('enabling_admission_profile', { profile: normalized.profile });
         return AdmissionClientFactory.createAdmissionClient(profileConfig);
     }
 }
@@ -35609,7 +35389,7 @@ var admissionProfileFactory = /*#__PURE__*/Object.freeze({
     default: AdmissionProfileFactory
 });
 
-const logger$c = getLogger('naylence.fame.node.admission.direct_admission_client');
+const logger$d = getLogger('naylence.fame.node.admission.direct_admission_client');
 class DirectAdmissionClient {
     constructor(options) {
         this.hasUpstream = true;
@@ -35634,7 +35414,7 @@ class DirectAdmissionClient {
         }
     }
     async hello(systemId, instanceId, requestedLogicals) {
-        logger$c.debug('direct_admission_hello_start', {
+        logger$d.debug('direct_admission_hello_start', {
             providedSystemId: systemId,
             instanceId,
             requestedLogicals,
@@ -35642,7 +35422,7 @@ class DirectAdmissionClient {
         const effectiveSystemId = systemId && systemId.trim().length > 0
             ? systemId
             : await generateIdAsync({ mode: 'fingerprint' }).catch(async () => {
-                logger$c.debug('direct_admission_fingerprint_generation_failed', {
+                logger$d.debug('direct_admission_fingerprint_generation_failed', {
                     reason: 'falling back to random id',
                 });
                 return generateIdAsync({ mode: 'random' });
@@ -35664,7 +35444,7 @@ class DirectAdmissionClient {
         const envelope = createFameEnvelope({
             frame: welcomeFrame,
         });
-        logger$c.debug('direct_admission_hello_success', {
+        logger$d.debug('direct_admission_hello_success', {
             systemId: welcomeFrame.systemId,
             instanceId: welcomeFrame.instanceId,
             acceptedLogicals: welcomeFrame.acceptedLogicals,
@@ -35841,7 +35621,7 @@ var noAuthInjectionStrategyFactory = /*#__PURE__*/Object.freeze({
     default: NoAuthInjectionStrategyFactory
 });
 
-const logger$b = getLogger('naylence.fame.node.admission.welcome_service_client');
+const logger$c = getLogger('naylence.fame.node.admission.welcome_service_client');
 class WelcomeServiceClient {
     constructor(options) {
         this.hasUpstream = options.hasUpstream ?? options.has_upstream ?? false;
@@ -35890,7 +35670,7 @@ class WelcomeServiceClient {
                 'Content-Type': 'application/json',
                 ...authHeaders,
             };
-            logger$b.debug('welcome_service_hello_request', {
+            logger$c.debug('welcome_service_hello_request', {
                 url: this.url,
                 systemId,
                 instanceId,
@@ -35926,7 +35706,7 @@ class WelcomeServiceClient {
                 parsedEnvelope.frame.type !== 'NodeWelcome') {
                 throw new Error(`Unexpected frame type '${parsedEnvelope.frame?.type ?? 'unknown'}'`);
             }
-            logger$b.debug('welcome_service_hello_success', {
+            logger$c.debug('welcome_service_hello_success', {
                 systemId: parsedEnvelope.frame.systemId,
                 targetSystemId: parsedEnvelope.frame.targetSystemId,
                 assignedPath: parsedEnvelope.frame.assignedPath,
@@ -37062,7 +36842,7 @@ var noopTokenVerifierFactory = /*#__PURE__*/Object.freeze({
     default: NoopTokenVerifierFactory
 });
 
-const logger$a = getLogger('naylence.fame.security.auth.oauth2_authorizer_factory');
+const logger$b = getLogger('naylence.fame.security.auth.oauth2_authorizer_factory');
 let oauth2AuthorizerModulePromise = null;
 function getOAuth2AuthorizerModule() {
     if (!oauth2AuthorizerModulePromise) {
@@ -37089,12 +36869,12 @@ class OAuth2AuthorizerFactory extends AuthorizerFactory {
         if (normalized.tokenIssuerConfig) {
             try {
                 tokenIssuer = await TokenIssuerFactory.createTokenIssuer(normalized.tokenIssuerConfig);
-                logger$a.debug('token_issuer_created_for_reverse_auth', {
+                logger$b.debug('token_issuer_created_for_reverse_auth', {
                     issuer_type: normalized.tokenIssuerConfig.type,
                 });
             }
             catch (error) {
-                logger$a.warning('failed_to_create_token_issuer_for_reverse_auth', {
+                logger$b.warning('failed_to_create_token_issuer_for_reverse_auth', {
                     error: error instanceof Error ? error.message : String(error),
                     issuer_config: normalized.tokenIssuerConfig,
                 });
@@ -38047,7 +37827,7 @@ var sessionKeyCredentialProviderFactory = /*#__PURE__*/Object.freeze({
     normalizeSessionKeyConfig: normalizeSessionKeyConfig
 });
 
-const logger$9 = getLogger('naylence.fame.security.default_security_manager_factory');
+const logger$a = getLogger('naylence.fame.security.default_security_manager_factory');
 function normalizeDefaultSecurityManagerConfig(config) {
     if (!config) {
         return null;
@@ -38215,7 +37995,7 @@ class DefaultSecurityManagerFactory extends SecurityManagerFactory {
             return await KeyStoreFactory.createKeyStore(value, createOptions ?? undefined);
         }
         catch (error) {
-            logger$9.error('failed_to_create_key_store_from_config', {
+            logger$a.error('failed_to_create_key_store_from_config', {
                 error: error instanceof Error ? error.message : String(error),
             });
             return null;
@@ -38251,7 +38031,7 @@ class DefaultSecurityManagerFactory extends SecurityManagerFactory {
                 return null;
             }
             const cryptoProvider = cryptoProviderOverride ?? null;
-            logger$9.debug('auto_create_envelope_signer', {
+            logger$a.debug('auto_create_envelope_signer', {
                 has_crypto_override: Boolean(cryptoProviderOverride),
                 override_constructor: cryptoProviderOverride
                     ? (cryptoProviderOverride.constructor?.name ?? 'unknown')
@@ -38272,7 +38052,7 @@ class DefaultSecurityManagerFactory extends SecurityManagerFactory {
             });
         }
         catch (error) {
-            logger$9.error('failed_to_auto_create_envelope_signer', {
+            logger$a.error('failed_to_auto_create_envelope_signer', {
                 error: error instanceof Error ? error.message : String(error),
                 exc_info: true,
             });
@@ -38307,7 +38087,7 @@ class DefaultSecurityManagerFactory extends SecurityManagerFactory {
             });
         }
         catch (error) {
-            logger$9.error('failed_to_auto_create_envelope_verifier', {
+            logger$a.error('failed_to_auto_create_envelope_verifier', {
                 error: error instanceof Error ? error.message : String(error),
                 exc_info: true,
             });
@@ -38319,7 +38099,7 @@ class DefaultSecurityManagerFactory extends SecurityManagerFactory {
         if (encryptionConfig &&
             DefaultSecurityManagerFactory.isConfigLike(encryptionConfig)) {
             if (!keyManager) {
-                logger$9.warning('encryption_manager_config_requires_key_manager');
+                logger$a.warning('encryption_manager_config_requires_key_manager');
                 return { encryptionManager: null, secureChannelManager };
             }
             const manager = await EncryptionManagerFactory.createEncryptionManager(encryptionConfig, {
@@ -38356,7 +38136,7 @@ class DefaultSecurityManagerFactory extends SecurityManagerFactory {
             return { encryptionManager: manager, secureChannelManager };
         }
         catch (error) {
-            logger$9.error('failed_to_auto_create_encryption_manager', {
+            logger$a.error('failed_to_auto_create_encryption_manager', {
                 error: error instanceof Error ? error.message : String(error),
                 exc_info: true,
             });
@@ -38399,7 +38179,7 @@ class DefaultSecurityManagerFactory extends SecurityManagerFactory {
             });
         }
         catch (error) {
-            logger$9.error('failed_to_auto_create_key_manager', {
+            logger$a.error('failed_to_auto_create_key_manager', {
                 error: error instanceof Error ? error.message : String(error),
                 exc_info: true,
             });
@@ -38448,7 +38228,7 @@ class DefaultSecurityManagerFactory extends SecurityManagerFactory {
             })) ?? null);
         }
         catch (error) {
-            logger$9.error('failed_to_auto_create_authorizer', {
+            logger$a.error('failed_to_auto_create_authorizer', {
                 error: error instanceof Error ? error.message : String(error),
                 exc_info: true,
             });
@@ -38477,7 +38257,7 @@ class DefaultSecurityManagerFactory extends SecurityManagerFactory {
             });
         }
         catch (error) {
-            logger$9.error('failed_to_auto_create_certificate_manager', {
+            logger$a.error('failed_to_auto_create_certificate_manager', {
                 error: error instanceof Error ? error.message : String(error),
                 exc_info: true,
             });
@@ -38736,7 +38516,7 @@ var defaultKeyManagerFactory = /*#__PURE__*/Object.freeze({
     default: DefaultKeyManagerFactory
 });
 
-const logger$8 = getLogger('naylence.fame.security.keys.in_memory_key_store');
+const logger$9 = getLogger('naylence.fame.security.keys.in_memory_key_store');
 class InMemoryKeyStore extends KeyStore {
     constructor(initialKeys = null) {
         super();
@@ -38758,7 +38538,7 @@ class InMemoryKeyStore extends KeyStore {
         }
         catch (error) {
             if (error instanceof JWKValidationError) {
-                logger$8.warning('rejected_invalid_jwk_individual', {
+                logger$9.warning('rejected_invalid_jwk_individual', {
                     kid,
                     error: error.message,
                 });
@@ -38802,7 +38582,7 @@ class InMemoryKeyStore extends KeyStore {
                 }
             }
             if (staleKeys.length > 0) {
-                logger$8.debug('removing_stale_keys_before_adding_new_key', {
+                logger$9.debug('removing_stale_keys_before_adding_new_key', {
                     new_kid: kid,
                     physical_path: physicalPath,
                     base_path: basePath,
@@ -38830,7 +38610,7 @@ class InMemoryKeyStore extends KeyStore {
                 }
                 keysByPath[path].push(existingKid);
             }
-            logger$8.debug('key_lookup_failed', {
+            logger$9.debug('key_lookup_failed', {
                 missing_kid: kid,
                 available_kids: Array.from(this.keys.keys()),
                 keys_by_path: keysByPath,
@@ -38879,7 +38659,7 @@ class InMemoryKeyStore extends KeyStore {
             this.keys.delete(kid);
         }
         if (keysToRemove.length > 0) {
-            logger$8.debug('removed_keys_for_path', {
+            logger$9.debug('removed_keys_for_path', {
                 physical_path: physicalPath,
                 removed_key_ids: keysToRemove,
                 count: keysToRemove.length,
@@ -38890,7 +38670,7 @@ class InMemoryKeyStore extends KeyStore {
     async removeKey(kid) {
         const removed = this.keys.delete(kid);
         if (removed) {
-            logger$8.debug('removed_individual_key', { kid });
+            logger$9.debug('removed_individual_key', { kid });
         }
         return removed;
     }
@@ -39256,7 +39036,7 @@ var capabilityAwareRoutingPolicyFactory = /*#__PURE__*/Object.freeze({
     default: CapabilityAwareRoutingPolicyFactory
 });
 
-const logger$7 = getLogger('naylence.fame.sentinel.composite_routing_policy_factory');
+const logger$8 = getLogger('naylence.fame.sentinel.composite_routing_policy_factory');
 const FACTORY_META$8 = {
     base: ROUTING_POLICY_FACTORY_BASE,
     key: 'CompositeRoutingPolicy',
@@ -39282,13 +39062,13 @@ class CompositeRoutingPolicyFactory extends RoutingPolicyFactory {
                     policies.push(policy);
                 }
                 else {
-                    logger$7.warning('composite_policy_null_child', {
+                    logger$8.warning('composite_policy_null_child', {
                         config: policyConfig,
                     });
                 }
             }
             catch (error) {
-                logger$7.warning('composite_policy_child_error', {
+                logger$8.warning('composite_policy_child_error', {
                     error: error instanceof Error ? error.message : String(error),
                     config: policyConfig,
                 });
@@ -39584,7 +39364,7 @@ var hrwLoadBalancingStrategyFactory = /*#__PURE__*/Object.freeze({
     default: HRWLoadBalancingStrategyFactory
 });
 
-const logger$6 = getLogger('naylence.fame.sentinel.load_balancing.load_balancing_profile_factory');
+const logger$7 = getLogger('naylence.fame.sentinel.load_balancing.load_balancing_profile_factory');
 const PROFILE_NAME_RANDOM = 'random';
 const PROFILE_NAME_ROUND_ROBIN = 'round_robin';
 const PROFILE_NAME_HRW = 'hrw';
@@ -39618,7 +39398,7 @@ class LoadBalancingProfileFactory extends LoadBalancingStrategyFactory {
     async create(config, ...factoryArgs) {
         const finalConfig = this.normalizeConfig(config);
         const profileName = finalConfig.profile ?? PROFILE_NAME_DEVELOPMENT$1;
-        logger$6.debug('enabling_load_balancing_profile', { profile: profileName });
+        logger$7.debug('enabling_load_balancing_profile', { profile: profileName });
         const strategyConfig = this.resolveProfile(profileName);
         const strategy = await createResource$1(LOAD_BALANCING_STRATEGY_FACTORY_BASE, strategyConfig, { factoryArgs });
         if (!strategy) {
@@ -39809,7 +39589,7 @@ var stickyLoadBalancingStrategyFactory = /*#__PURE__*/Object.freeze({
     default: StickyLoadBalancingStrategyFactory
 });
 
-const logger$5 = getLogger('naylence.fame.sentinel.routing_profile_factory');
+const logger$6 = getLogger('naylence.fame.sentinel.routing_profile_factory');
 const PROFILE_NAME_DEVELOPMENT = 'development';
 const PROFILE_NAME_PRODUCTION = 'production';
 const PROFILE_NAME_BASIC = 'basic';
@@ -39860,7 +39640,7 @@ class RoutingProfileFactory extends RoutingPolicyFactory {
     }
     async create(config, ...kwargs) {
         const normalized = this.normalizeConfig(config);
-        logger$5.debug('enabling_routing_profile', { profile: normalized.profile });
+        logger$6.debug('enabling_routing_profile', { profile: normalized.profile });
         const routingConfig = this.getProfileConfig(normalized.profile);
         const policy = await createResource$1(ROUTING_POLICY_FACTORY_BASE, routingConfig, {
             factoryArgs: kwargs,
@@ -40162,21 +39942,21 @@ class OpenTelemetryTraceEmitter extends BaseTraceEmitter {
 }
 function normalizeOpenTelemetryTraceEmitterOptions(input) {
     const source = (input ?? {});
-    const serviceName = extractNonEmptyString(pickFirst(source, ['serviceName', 'service_name'])) ?? 'naylence-service';
-    const tracer = pickFirst(source, ['tracer']);
-    const otelApi = pickFirst(source, [
+    const serviceName = extractNonEmptyString$1(pickFirst$1(source, ['serviceName', 'service_name'])) ?? 'naylence-service';
+    const tracer = pickFirst$1(source, ['tracer']);
+    const otelApi = pickFirst$1(source, [
         'otelApi',
         'otel_api',
     ]);
     if (!otelApi) {
         throw new Error('OpenTelemetryTraceEmitter requires OpenTelemetry API bindings. Provide otelApi via options.');
     }
-    const lifecycle = pickFirst(source, [
+    const lifecycle = pickFirst$1(source, [
         'lifecycle',
         'lifeCycle',
         'life_cycle',
     ]) ?? null;
-    const authStrategy = pickFirst(source, [
+    const authStrategy = pickFirst$1(source, [
         'authStrategy',
         'auth_strategy',
     ]) ?? null;
@@ -40188,7 +39968,7 @@ function normalizeOpenTelemetryTraceEmitterOptions(input) {
         authStrategy,
     };
 }
-function pickFirst(source, keys) {
+function pickFirst$1(source, keys) {
     for (const key of keys) {
         if (Object.prototype.hasOwnProperty.call(source, key)) {
             const value = source[key];
@@ -40199,7 +39979,7 @@ function pickFirst(source, keys) {
     }
     return undefined;
 }
-function extractNonEmptyString(value) {
+function extractNonEmptyString$1(value) {
     if (typeof value === 'string') {
         const trimmed = value.trim();
         if (trimmed.length > 0) {
@@ -40252,6 +40032,241 @@ var openTelemetryTraceEmitter = /*#__PURE__*/Object.freeze({
     OpenTelemetryTraceEmitter: OpenTelemetryTraceEmitter
 });
 
+const logger$5 = getLogger('naylence.fame.telemetry.otel_setup');
+const stringFrom = (...codes) => String.fromCharCode(...codes);
+const OTEL_PREFIX = `${stringFrom(64, 111, 112, 101, 110, 116, 101, 108, 101, 109, 101, 116, 114, 121)}${stringFrom(47)}`;
+const OTEL_API_SPEC = `${OTEL_PREFIX}${stringFrom(97, 112, 105)}`;
+const OTEL_RESOURCES_SPEC = `${OTEL_PREFIX}${stringFrom(114, 101, 115, 111, 117, 114, 99, 101, 115)}`;
+const OTEL_TRACE_NODE_SPEC = `${OTEL_PREFIX}${stringFrom(115, 100, 107, 45, 116, 114, 97, 99, 101, 45, 110, 111, 100, 101)}`;
+const OTEL_TRACE_BASE_SPEC = `${OTEL_PREFIX}${stringFrom(115, 100, 107, 45, 116, 114, 97, 99, 101, 45, 98, 97, 115, 101)}`;
+const OTEL_EXPORTER_HTTP_SPEC = `${OTEL_PREFIX}${stringFrom(101, 120, 112, 111, 114, 116, 101, 114, 45, 116, 114, 97, 99, 101, 45, 111, 116, 108, 112, 45, 104, 116, 116, 112)}`;
+let registeredOtel = null;
+async function setupOtel(options) {
+    const normalized = normalizeSetupOtelOptions(options);
+    try {
+        if (registeredOtel) {
+            logger$5.debug('open_telemetry_reusing_provider', {
+                service_name: normalized.serviceName,
+            });
+            return registeredOtel.control;
+        }
+        const [apiModule, resourcesModule, nodeModule, traceBaseModule] = await Promise.all([
+            import(OTEL_API_SPEC),
+            import(OTEL_RESOURCES_SPEC),
+            import(OTEL_TRACE_NODE_SPEC),
+            import(OTEL_TRACE_BASE_SPEC),
+        ]);
+        const { trace } = apiModule;
+        const { defaultResource, resourceFromAttributes } = resourcesModule;
+        const { NodeTracerProvider } = nodeModule;
+        const { BatchSpanProcessor, ConsoleSpanExporter, ParentBasedSampler, AlwaysOnSampler, AlwaysOffSampler, TraceIdRatioBasedSampler, } = traceBaseModule;
+        const currentProvider = trace.getTracerProvider();
+        if (currentProvider && currentProvider instanceof NodeTracerProvider) {
+            return null;
+        }
+        if (currentProvider &&
+            currentProvider.constructor?.name === 'NodeTracerProvider') {
+            logger$5.debug('open_telemetry_existing_node_provider', {
+                service_name: normalized.serviceName,
+            });
+            return null;
+        }
+        logger$5.debug('open_telemetry_initializing', {
+            service_name: normalized.serviceName,
+            endpoint: normalized.endpoint ?? null,
+            environment: normalized.environment ?? null,
+            sampler: normalized.sampler ?? null,
+            headers_present: Boolean(normalized.headers && Object.keys(normalized.headers).length),
+        });
+        const sampler = resolveSampler(normalized.sampler, {
+            ParentBasedSampler,
+            AlwaysOnSampler,
+            AlwaysOffSampler,
+            TraceIdRatioBasedSampler,
+        });
+        const baseResource = defaultResource();
+        const mergedResource = resourceFromAttributes({
+            'service.name': normalized.serviceName,
+            'service.instance.id': generateInstanceId(),
+            'deployment.environment': normalized.environment ?? 'dev',
+        });
+        const resource = baseResource.merge(mergedResource);
+        const exporter = await resolveExporter(normalized.endpoint ?? undefined, normalized.headers, ConsoleSpanExporter);
+        const spanProcessor = new BatchSpanProcessor(exporter);
+        const provider = new NodeTracerProvider({
+            resource,
+            sampler,
+            spanProcessors: [spanProcessor],
+        });
+        provider.register();
+        logger$5.debug('open_telemetry_initialized', {
+            service_name: normalized.serviceName,
+            exporter: exporter.constructor?.name ?? 'unknown_exporter',
+        });
+        const control = {
+            forceFlush: async () => {
+                try {
+                    await provider.forceFlush();
+                }
+                catch (flushError) {
+                    logger$5.warning('open_telemetry_force_flush_failed', {
+                        error: flushError instanceof Error
+                            ? flushError.message
+                            : String(flushError),
+                    });
+                }
+            },
+            shutdown: async () => {
+                try {
+                    await provider.shutdown();
+                }
+                catch (shutdownError) {
+                    logger$5.warning('open_telemetry_shutdown_failed', {
+                        error: shutdownError instanceof Error
+                            ? shutdownError.message
+                            : String(shutdownError),
+                    });
+                }
+                finally {
+                    registeredOtel = null;
+                }
+            },
+        };
+        registeredOtel = {
+            provider,
+            control,
+        };
+        return control;
+    }
+    catch (error) {
+        logger$5.error('open_telemetry_not_available', {
+            error: error instanceof Error ? error.message : String(error),
+            stack: error instanceof Error && error.stack ? error.stack : undefined,
+        });
+        return null;
+    }
+}
+function normalizeSetupOtelOptions(options) {
+    const source = (options ?? {});
+    const serviceName = extractNonEmptyString(pickFirst(source, ['serviceName', 'service_name'])) ??
+        'naylence-service';
+    const endpoint = extractNonEmptyString(pickFirst(source, ['endpoint', 'otlpEndpoint', 'otlp_endpoint'])) ?? null;
+    const environment = extractNonEmptyString(pickFirst(source, [
+        'environment',
+        'deploymentEnvironment',
+        'deployment_environment',
+    ])) ?? null;
+    const sampler = extractNonEmptyString(pickFirst(source, ['sampler', 'samplingStrategy', 'sampling_strategy'])) ?? null;
+    const headers = extractHeaders(pickFirst(source, ['headers', 'otlpHeaders', 'otlp_headers']));
+    return {
+        serviceName,
+        endpoint,
+        environment,
+        sampler,
+        headers: headers ?? undefined,
+    };
+}
+function pickFirst(source, keys) {
+    for (const key of keys) {
+        if (Object.prototype.hasOwnProperty.call(source, key)) {
+            const value = source[key];
+            if (value !== undefined) {
+                return value;
+            }
+        }
+    }
+    return undefined;
+}
+function extractNonEmptyString(value) {
+    if (typeof value === 'string') {
+        const trimmed = value.trim();
+        if (trimmed.length > 0) {
+            return trimmed;
+        }
+    }
+    return undefined;
+}
+function extractHeaders(value) {
+    if (!value || typeof value !== 'object') {
+        return null;
+    }
+    const headers = {};
+    for (const [key, raw] of Object.entries(value)) {
+        if (typeof raw === 'string') {
+            headers[key] = raw;
+        }
+    }
+    return Object.keys(headers).length > 0 ? headers : null;
+}
+function generateInstanceId() {
+    try {
+        if (typeof crypto !== 'undefined' &&
+            typeof crypto.randomUUID === 'function') {
+            return crypto.randomUUID().replace(/-/g, '');
+        }
+    }
+    catch {
+        // Ignore crypto availability errors
+    }
+    const random = Math.random().toString(16).slice(2);
+    return random.padEnd(32, '0').slice(0, 32);
+}
+function resolveSampler(samplerSetting, samplers) {
+    const normalized = (samplerSetting ?? 'parentbased_always_on').toLowerCase();
+    let base;
+    if (normalized === 'always_off') {
+        base = new samplers.AlwaysOffSampler();
+    }
+    else if (normalized === 'always_on' ||
+        normalized === 'parentbased_always_on') {
+        base = new samplers.AlwaysOnSampler();
+    }
+    else if (normalized.startsWith('ratio:')) {
+        const ratioValue = Number.parseFloat(normalized.slice('ratio:'.length));
+        const ratio = Number.isFinite(ratioValue)
+            ? Math.min(Math.max(ratioValue, 0), 1)
+            : 1;
+        base = new samplers.TraceIdRatioBasedSampler(ratio);
+    }
+    else {
+        base = new samplers.AlwaysOnSampler();
+    }
+    return new samplers.ParentBasedSampler({ root: base });
+}
+async function resolveExporter(endpoint, headers, ConsoleSpanExporter) {
+    if (endpoint) {
+        try {
+            const exporterModule = await import(OTEL_EXPORTER_HTTP_SPEC);
+            if ('OTLPTraceExporter' in exporterModule) {
+                const { OTLPTraceExporter } = exporterModule;
+                const exporterOptions = {
+                    url: endpoint,
+                };
+                if (headers && Object.keys(headers).length > 0) {
+                    exporterOptions.headers = headers;
+                }
+                logger$5.debug('open_telemetry_using_otlp_http_exporter', {
+                    endpoint,
+                    headers_present: Boolean(headers && Object.keys(headers).length),
+                });
+                return new OTLPTraceExporter(exporterOptions);
+            }
+        }
+        catch (error) {
+            logger$5.error('open_telemetry_exporter_not_available', {
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    logger$5.warning('open_telemetry_falling_back_to_console_exporter');
+    return new ConsoleSpanExporter();
+}
+
+var otelSetup = /*#__PURE__*/Object.freeze({
+    __proto__: null,
+    setupOtel: setupOtel
+});
+
 const logger$4 = getLogger('naylence.fame.security.auth.default_authorizer');
 function decodeCredentials$1(credentials) {
     if (typeof TextDecoder !== 'undefined') {