@naylence/runtime 0.3.6 → 0.3.7

package/dist/node/index.mjs

@@ -13,12 +13,12 @@ import fastify from 'fastify';
 import websocketPlugin from '@fastify/websocket';
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.3.6
+// Generated from package.json version: 0.3.7
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.3.6';
+const VERSION = '0.3.7';
 
 /**
  * Fame protocol specific error classes with WebSocket close codes and proper inheritance.
@@ -2247,6 +2247,50 @@ function validateKeyCorrelationTtlSec(ttlSec) {
     });
 }
 
+function isModuleNotFoundError(error) {
+    if (!(error instanceof Error)) {
+        return false;
+    }
+    const message = error.message || '';
+    if (message.includes('Cannot find module') ||
+        message.includes('ERR_MODULE_NOT_FOUND') ||
+        message.includes('MODULE_NOT_FOUND')) {
+        return true;
+    }
+    const code = error.code;
+    if (typeof code === 'string') {
+        return code === 'MODULE_NOT_FOUND' || code === 'ERR_MODULE_NOT_FOUND';
+    }
+    return false;
+}
+/**
+ * Wraps a dynamic import loader and enriches "module not found" failures with an actionable error message.
+ */
+async function safeImport(loader, dependencyNameOrOptions, maybeOptions) {
+    const options = typeof dependencyNameOrOptions === 'string'
+        ? { dependencyName: dependencyNameOrOptions, ...(maybeOptions ?? {}) }
+        : dependencyNameOrOptions;
+    const dependencyName = options.dependencyName;
+    try {
+        return await loader();
+    }
+    catch (error) {
+        if (isModuleNotFoundError(error)) {
+            const message = options.helpMessage ??
+                `Missing optional dependency "${dependencyName}". Install it to enable this feature.`;
+            const enrichedError = new Error(message);
+            try {
+                enrichedError.cause = error;
+            }
+            catch {
+                // Ignore environments that do not support attaching a cause.
+            }
+            throw enrichedError;
+        }
+        throw error;
+    }
+}
+
 /**
  * flow_controller.ts - credit window management with cooperative back-pressure.
  *
@@ -3451,50 +3495,6 @@ function normalizeSecretSource(value) {
     return SecretSource.normalize(value);
 }
 
-function isModuleNotFoundError(error) {
-    if (!(error instanceof Error)) {
-        return false;
-    }
-    const message = error.message || '';
-    if (message.includes('Cannot find module') ||
-        message.includes('ERR_MODULE_NOT_FOUND') ||
-        message.includes('MODULE_NOT_FOUND')) {
-        return true;
-    }
-    const code = error.code;
-    if (typeof code === 'string') {
-        return code === 'MODULE_NOT_FOUND' || code === 'ERR_MODULE_NOT_FOUND';
-    }
-    return false;
-}
-/**
- * Wraps a dynamic import loader and enriches "module not found" failures with an actionable error message.
- */
-async function safeImport(loader, dependencyNameOrOptions, maybeOptions) {
-    const options = typeof dependencyNameOrOptions === 'string'
-        ? { dependencyName: dependencyNameOrOptions, ...(maybeOptions ?? {}) }
-        : dependencyNameOrOptions;
-    const dependencyName = options.dependencyName;
-    try {
-        return await loader();
-    }
-    catch (error) {
-        if (isModuleNotFoundError(error)) {
-            const message = options.helpMessage ??
-                `Missing optional dependency "${dependencyName}". Install it to enable this feature.`;
-            const enrichedError = new Error(message);
-            try {
-                enrichedError.cause = error;
-            }
-            catch {
-                // Ignore environments that do not support attaching a cause.
-            }
-            throw enrichedError;
-        }
-        throw error;
-    }
-}
-
 const indexedDBConfigSchema = z
     .object({
     type: z
@@ -7090,9 +7090,6 @@ class DefaultDeliveryTracker extends TaskSpawner {
         this.ackDoneSince = new Map();
         this.replyDoneSince = new Map();
         this.pendingAckDispatches = new Set();
-        this.recentlyHandled = new Map();
-        this.recentlyHandledOrder = [];
-        this.recentlyHandledTtlMs = 60000;
         this.isPreparingToStop = false;
         this.shutdownRequestedAtMs = null;
         this.shutdownRetryGraceMs = 1000;
@@ -7314,22 +7311,6 @@ class DefaultDeliveryTracker extends TaskSpawner {
                 }
             }
             else {
-                const wasRecentlyHandled = await this.lock.runExclusive(async () => this.wasRecentlyHandled(envelope.id));
-                if (wasRecentlyHandled) {
-                    logger$12.debug('tracker_duplicate_envelope_recently_handled', {
-                        envp_id: envelope.id,
-                    });
-                    return new TrackedEnvelope({
-                        timeoutAtMs: 0,
-                        overallTimeoutAtMs: 0,
-                        expectedResponseType: envelope.rtype ?? FameResponseType.NONE,
-                        createdAtMs: Date.now(),
-                        status: EnvelopeStatus.HANDLED,
-                        mailboxType: MailboxType.INBOX,
-                        originalEnvelope: envelope,
-                        serviceName: inboxName,
-                    });
-                }
                 tracked = new TrackedEnvelope({
                     timeoutAtMs: 0,
                     overallTimeoutAtMs: 0,
@@ -7351,12 +7332,8 @@ class DefaultDeliveryTracker extends TaskSpawner {
     async onEnvelopeHandled(envelope) {
         const inbox = this.ensureInbox();
         envelope.status = EnvelopeStatus.HANDLED;
+        // Delete the envelope from inbox to prevent growth
         await inbox.delete(envelope.originalEnvelope.id);
-        await this.lock.runExclusive(async () => {
-            this.markRecentlyHandled(envelope.originalEnvelope.id);
-        });
-        // Preserve handled envelope to prevent duplicate redelivery during shutdown drains.
-        // await inbox.set(envelope.originalEnvelope.id, envelope);
     }
     async onEnvelopeHandleFailed(inboxName, envelope, context, error, isFinalFailure = false) {
         const inbox = this.ensureInbox();
@@ -7571,9 +7548,9 @@ class DefaultDeliveryTracker extends TaskSpawner {
         });
         await this.markDoneSince(this.replyFutures, trackedEnvelope.originalEnvelope.id, this.replyDoneSince);
         await this.markDoneSince(this.ackFutures, trackedEnvelope.originalEnvelope.id, this.ackDoneSince);
-        if (envelope.rtype && Boolean(envelope.rtype & FameResponseType.ACK)) {
-            await this.sendAck(envelope);
-        }
+        // Note: ACK is already sent in onCorrelatedMessage (lines 655-657)
+        // when the reply envelope is first delivered. No need to send it again here.
+        // Removing this duplicate sendAck call fixes the duplicate DeliveryAck bug.
         for (const handler of this.eventHandlers) {
             await handler.onEnvelopeReplied?.(trackedEnvelope, envelope);
         }
@@ -7723,8 +7700,6 @@ class DefaultDeliveryTracker extends TaskSpawner {
             }
             this.streamDone.clear();
             this.correlationToEnvelope.clear();
-            this.recentlyHandled.clear();
-            this.recentlyHandledOrder.length = 0;
             return values;
         });
         for (const timer of timers) {
@@ -8306,39 +8281,6 @@ class DefaultDeliveryTracker extends TaskSpawner {
             this.pendingAckDispatches.delete(ackDispatch);
         }
     }
-    markRecentlyHandled(envelopeId) {
-        const now = Date.now();
-        this.recentlyHandled.set(envelopeId, now);
-        this.recentlyHandledOrder.push(envelopeId);
-        this.trimRecentlyHandled(now);
-    }
-    wasRecentlyHandled(envelopeId) {
-        const now = Date.now();
-        const timestamp = this.recentlyHandled.get(envelopeId);
-        if (timestamp === undefined) {
-            return false;
-        }
-        if (now - timestamp > this.recentlyHandledTtlMs) {
-            this.recentlyHandled.delete(envelopeId);
-            return false;
-        }
-        return true;
-    }
-    trimRecentlyHandled(now) {
-        while (this.recentlyHandledOrder.length > 0) {
-            const candidate = this.recentlyHandledOrder[0];
-            const timestamp = this.recentlyHandled.get(candidate);
-            if (timestamp === undefined) {
-                this.recentlyHandledOrder.shift();
-                continue;
-            }
-            if (now - timestamp <= this.recentlyHandledTtlMs) {
-                break;
-            }
-            this.recentlyHandled.delete(candidate);
-            this.recentlyHandledOrder.shift();
-        }
-    }
     getShutdownRetryDeferDelay(nowMs) {
         if (!this.isPreparingToStop || this.shutdownRequestedAtMs === null) {
             return null;
@@ -9832,7 +9774,8 @@ const ensureBroadcastEnvironment = () => {
 };
 let BroadcastChannelConnector$2 = class BroadcastChannelConnector extends BaseAsyncConnector {
     static generateConnectorId() {
-        const globalCrypto = globalThis.crypto;
+        const globalCrypto = globalThis
+            .crypto;
         if (globalCrypto?.randomUUID) {
             return globalCrypto.randomUUID();
         }
@@ -9887,7 +9830,8 @@ let BroadcastChannelConnector$2 = class BroadcastChannelConnector extends BaseAs
         this.listenerRegistered = false;
         this.visibilityChangeListenerRegistered = false;
         this.channelName =
-            typeof config.channelName === 'string' && config.channelName.trim().length > 0
+            typeof config.channelName === 'string' &&
+                config.channelName.trim().length > 0
                 ? config.channelName.trim()
                 : DEFAULT_CHANNEL$7;
         const preferredCapacity = typeof config.inboxCapacity === 'number' &&
@@ -9911,6 +9855,7 @@ let BroadcastChannelConnector$2 = class BroadcastChannelConnector extends BaseAs
             local_node_id: this.localNodeId,
             target_node_id: this.targetNodeId ?? null,
             inbox_capacity: preferredCapacity,
+            passive: config.passive ?? false,
             timestamp: new Date().toISOString(),
         });
         this.onMsg = (event) => {
@@ -9928,7 +9873,8 @@ let BroadcastChannelConnector$2 = class BroadcastChannelConnector extends BaseAs
                 channel: this.channelName,
                 connector_id: this.connectorId,
                 message_type: message && typeof message === 'object'
-                    ? message.constructor?.name ?? typeof message
+                    ? (message.constructor
+                        ?.name ?? typeof message)
                     : typeof message,
                 has_sender_id: Boolean(message?.senderId),
                 has_sender_node_id: Boolean(message?.senderNodeId),
@@ -10158,7 +10104,9 @@ let BroadcastChannelConnector$2 = class BroadcastChannelConnector extends BaseAs
                 timestamp: new Date().toISOString(),
             });
         }
-        if (this.visibilityChangeListenerRegistered && this.visibilityChangeHandler && typeof document !== 'undefined') {
+        if (this.visibilityChangeListenerRegistered &&
+            this.visibilityChangeHandler &&
+            typeof document !== 'undefined') {
             document.removeEventListener('visibilitychange', this.visibilityChangeHandler);
             this.visibilityChangeListenerRegistered = false;
             this.visibilityChangeHandler = undefined;
@@ -10186,7 +10134,7 @@ let BroadcastChannelConnector$2 = class BroadcastChannelConnector extends BaseAs
         return rawOrEnvelope;
     }
     _isWildcardTarget() {
-        return this.targetNodeId === '*' || typeof this.targetNodeId === 'undefined';
+        return (this.targetNodeId === '*' || typeof this.targetNodeId === 'undefined');
     }
     _shouldAcceptMessageFromBus(senderNodeId, targetNodeId) {
         if (this._isWildcardTarget()) {
@@ -10206,7 +10154,9 @@ let BroadcastChannelConnector$2 = class BroadcastChannelConnector extends BaseAs
             return true;
         }
         const expectedSender = this.targetNodeId;
-        if (expectedSender && expectedSender !== '*' && senderNodeId !== expectedSender) {
+        if (expectedSender &&
+            expectedSender !== '*' &&
+            senderNodeId !== expectedSender) {
             logger$_.debug('broadcast_channel_message_rejected', {
                 channel: this.channelName,
                 connector_id: this.connectorId,
@@ -10425,14 +10375,16 @@ function normalizeBroadcastChannelConnectionGrant(candidate) {
         type,
         purpose,
     };
-    const channelValue = candidate.channelName ?? candidate['channel_name'];
+    const channelValue = candidate.channelName ??
+        candidate['channel_name'];
     if (channelValue !== undefined) {
         if (typeof channelValue !== 'string' || channelValue.trim().length === 0) {
             throw new TypeError('BroadcastChannelConnectionGrant "channelName" must be a non-empty string when provided');
         }
         result.channelName = channelValue.trim();
     }
-    const inboxValue = candidate.inboxCapacity ?? candidate['inbox_capacity'];
+    const inboxValue = candidate.inboxCapacity ??
+        candidate['inbox_capacity'];
     if (inboxValue !== undefined) {
         if (typeof inboxValue !== 'number' ||
             !Number.isFinite(inboxValue) ||
@@ -10441,7 +10393,8 @@ function normalizeBroadcastChannelConnectionGrant(candidate) {
         }
         result.inboxCapacity = Math.floor(inboxValue);
     }
-    const windowValue = candidate.initialWindow ?? candidate['initial_window'];
+    const windowValue = candidate.initialWindow ??
+        candidate['initial_window'];
     if (windowValue !== undefined) {
         if (typeof windowValue !== 'number' ||
             !Number.isFinite(windowValue) ||
@@ -10778,25 +10731,56 @@ class UpstreamSessionManager extends TaskSpawner {
         await connector.start(this.wrappedHandler);
         this.connector = connector;
         const callbackGrants = this.node.gatherSupportedCallbackGrants();
+        logger$Z.debug('callback_grants_before_augmentation', {
+            count: callbackGrants.length,
+            types: callbackGrants.map((g) => g.type),
+        });
+        // Check if we should create a broadcast callback grant before processing connection grants
+        // This prevents adding duplicate broadcast grants
+        const shouldAddBroadcastGrant = this.shouldAdvertiseBroadcastGrant(grant, callbackGrants);
+        const broadcastCallbackGrant = shouldAddBroadcastGrant
+            ? this.createBroadcastCallbackGrant(grant)
+            : null;
+        logger$Z.debug('broadcast_callback_grant_check', {
+            should_add: shouldAddBroadcastGrant,
+            grant_created: !!broadcastCallbackGrant,
+        });
         // Include admission client's connection grants as callback grants
         // This ensures DirectAdmissionClient grants are available for grant selection
-        if (welcome.frame.connectionGrants && Array.isArray(welcome.frame.connectionGrants)) {
+        if (welcome.frame.connectionGrants &&
+            Array.isArray(welcome.frame.connectionGrants)) {
             for (const grant of welcome.frame.connectionGrants) {
                 if (grant && typeof grant === 'object') {
                     // Avoid duplicates by checking if grant already exists
-                    const isDuplicate = callbackGrants.some(existing => JSON.stringify(existing) === JSON.stringify(grant));
+                    const isDuplicate = callbackGrants.some((existing) => JSON.stringify(existing) === JSON.stringify(grant));
                     if (!isDuplicate) {
                         callbackGrants.push(grant);
+                        logger$Z.debug('added_connection_grant_as_callback', {
+                            type: grant.type,
+                        });
+                    }
+                    else {
+                        logger$Z.debug('skipped_duplicate_connection_grant', {
+                            type: grant.type,
+                        });
                     }
                 }
             }
         }
-        if (this.shouldAdvertiseBroadcastGrant(grant, callbackGrants)) {
-            const augmented = this.createBroadcastCallbackGrant(grant);
-            if (augmented) {
-                callbackGrants.push(augmented);
-            }
+        // Add broadcast grant after connection grants to ensure we don't duplicate
+        // any broadcast grants that may have been in connectionGrants
+        if (broadcastCallbackGrant &&
+            this.shouldAdvertiseBroadcastGrant(grant, callbackGrants)) {
+            callbackGrants.push(broadcastCallbackGrant);
+            logger$Z.debug('added_broadcast_callback_grant');
         }
+        else if (broadcastCallbackGrant) {
+            logger$Z.debug('skipped_duplicate_broadcast_callback_grant');
+        }
+        logger$Z.debug('callback_grants_after_augmentation', {
+            count: callbackGrants.length,
+            types: callbackGrants.map((g) => g.type),
+        });
         const attachInfo = await this.attachClient.attach(this.node, this.outboundOriginType, connector, welcome.frame, this.wrappedHandler, this.getKeys() ?? undefined, callbackGrants);
         this.targetSystemId = attachInfo.targetSystemId ?? null;
         if (this.targetSystemId) {
@@ -11037,7 +11021,8 @@ class UpstreamSessionManager extends TaskSpawner {
                 continue;
             }
             // Reset ack time if just resumed from pause (prevents immediate timeout)
-            if (previousState === ConnectorState.PAUSED && currentState === ConnectorState.STARTED) {
+            if (previousState === ConnectorState.PAUSED &&
+                currentState === ConnectorState.STARTED) {
                 logger$Z.debug('connector_just_resumed_resetting_ack_time', {
                     previous_state: previousState,
                     current_state: currentState,
@@ -12594,15 +12579,30 @@ class DefaultNodeAttachClient {
     constructor(options = {}) {
         this.buffer = [];
         this.inHandshake = false;
+        this.expectedSystemId = null;
         this.timeoutMs = options.timeoutMs ?? 10000;
         this.attachmentKeyValidator = options.attachmentKeyValidator;
         this.replicaStickinessManager = options.replicaStickinessManager ?? null;
     }
     async attach(node, originType, connector, welcomeFrame, finalHandler, keys, callbackGrants) {
         this.inHandshake = true;
+        this.expectedSystemId = welcomeFrame.systemId;
         const interimHandler = async (envelope, context) => {
             if (this.inHandshake) {
-                this.buffer.push(envelope);
+                // Filter: only buffer frames related to our systemId or frames without systemId info
+                const frameSystemId = envelope.frame
+                    ?.systemId;
+                if (!frameSystemId || frameSystemId === this.expectedSystemId) {
+                    this.buffer.push(envelope);
+                }
+                else {
+                    // Silently ignore frames from other agents during concurrent handshakes
+                    logger$W.debug('handshake_ignoring_frame_from_different_system', {
+                        frame_type: envelope.frame.type,
+                        frame_system_id: frameSystemId,
+                        expected_system_id: this.expectedSystemId,
+                    });
+                }
                 return null;
             }
             return finalHandler(envelope, context);
@@ -12729,6 +12729,7 @@ class DefaultNodeAttachClient {
             parent_id: ackFrame.targetSystemId,
         });
         this.inHandshake = false;
+        this.expectedSystemId = null;
         await connector.replaceHandler(finalHandler);
         while (this.buffer.length > 0) {
             const bufferedEnvelope = this.buffer.shift();
@@ -12786,7 +12787,8 @@ class DefaultNodeAttachClient {
         const deadline = Date.now() + this.timeoutMs;
         while (Date.now() < deadline) {
             // Allow both STARTED and PAUSED states (PAUSED = tab hidden but connection alive)
-            if (connector.state !== ConnectorState.STARTED && connector.state !== ConnectorState.PAUSED) {
+            if (connector.state !== ConnectorState.STARTED &&
+                connector.state !== ConnectorState.PAUSED) {
                 let errorMessage = 'Connector closed while waiting for NodeAttachAck';
                 if (connector.closeCode !== undefined) {
                     errorMessage += ` (code=${connector.closeCode}`;
@@ -12805,9 +12807,21 @@ class DefaultNodeAttachClient {
                 if (envelope.frame.type === 'NodeAttachAck') {
                     return envelope;
                 }
-                logger$W.error('unexpected_frame_during_handshake', {
-                    frame_type: envelope.frame.type,
-                });
+                // NodeAttach frames during handshake are expected in multi-agent scenarios
+                // where multiple agents attach concurrently to the same channel
+                if (envelope.frame.type === 'NodeAttach') {
+                    logger$W.debug('handshake_ignoring_concurrent_attach', {
+                        frame_type: envelope.frame.type,
+                        frame_system_id: envelope.frame?.systemId ??
+                            'unknown',
+                    });
+                }
+                else {
+                    // Other unexpected frames are still logged as errors
+                    logger$W.error('unexpected_frame_during_handshake', {
+                        frame_type: envelope.frame.type,
+                    });
+                }
             }
             await delay(HANDSHAKE_POLL_INTERVAL_MS);
         }
@@ -13526,7 +13540,8 @@ function createFsShim() {
                 else if (options &&
                     typeof options === 'object' &&
                     'encoding' in options &&
-                    typeof options.encoding === 'string') {
+                    typeof options.encoding ===
+                        'string') {
                     encoding = options.encoding;
                 }
                 const data = fsBinding.readFileUtf8(pathOrDescriptor, 0);
@@ -20459,7 +20474,8 @@ class InPageConnector extends BaseAsyncConnector {
         this.listenerRegistered = false;
         this.visibilityChangeListenerRegistered = false;
         this.channelName =
-            typeof config.channelName === 'string' && config.channelName.trim().length > 0
+            typeof config.channelName === 'string' &&
+                config.channelName.trim().length > 0
                 ? config.channelName.trim()
                 : DEFAULT_CHANNEL$6;
         const preferredCapacity = typeof config.inboxCapacity === 'number' &&
@@ -20498,7 +20514,8 @@ class InPageConnector extends BaseAsyncConnector {
                 channel: this.channelName,
                 connector_id: this.connectorId,
                 message_type: message && typeof message === 'object'
-                    ? message.constructor?.name ?? typeof message
+                    ? (message.constructor
+                        ?.name ?? typeof message)
                     : typeof message,
                 has_sender_id: Boolean(message?.senderId),
                 has_sender_node_id: Boolean(message?.senderNodeId),
@@ -20507,7 +20524,8 @@ class InPageConnector extends BaseAsyncConnector {
                 return;
             }
             const busMessage = message;
-            const senderId = typeof busMessage.senderId === 'string' && busMessage.senderId.length > 0
+            const senderId = typeof busMessage.senderId === 'string' &&
+                busMessage.senderId.length > 0
                 ? busMessage.senderId
                 : null;
             const senderNodeId = InPageConnector.normalizeNodeId(busMessage.senderNodeId);
@@ -20758,7 +20776,9 @@ class InPageConnector extends BaseAsyncConnector {
                 timestamp: new Date().toISOString(),
             });
         }
-        if (this.visibilityChangeListenerRegistered && this.visibilityChangeHandler && typeof document !== 'undefined') {
+        if (this.visibilityChangeListenerRegistered &&
+            this.visibilityChangeHandler &&
+            typeof document !== 'undefined') {
             document.removeEventListener('visibilitychange', this.visibilityChangeHandler);
             this.visibilityChangeListenerRegistered = false;
             this.visibilityChangeHandler = undefined;
@@ -20775,7 +20795,7 @@ class InPageConnector extends BaseAsyncConnector {
         return rawOrEnvelope;
     }
     _isWildcardTarget() {
-        return this.targetNodeId === '*' || typeof this.targetNodeId === 'undefined';
+        return (this.targetNodeId === '*' || typeof this.targetNodeId === 'undefined');
     }
     _shouldAcceptMessageFromBus(senderNodeId, targetNodeId) {
         if (this._isWildcardTarget()) {
@@ -20795,7 +20815,9 @@ class InPageConnector extends BaseAsyncConnector {
             return true;
         }
         const expectedSender = this.targetNodeId;
-        if (expectedSender && expectedSender !== '*' && senderNodeId !== expectedSender) {
+        if (expectedSender &&
+            expectedSender !== '*' &&
+            senderNodeId !== expectedSender) {
             logger$G.debug('inpage_message_rejected', {
                 channel: this.channelName,
                 connector_id: this.connectorId,
@@ -21215,8 +21237,8 @@ class CertificateManagerFactory extends AbstractResourceFactory {
     }
 }
 
-const DEFAULT_UNCONFIGURED_MESSAGE = "Trust store is not configured. Set FAME_CA_CERTS to a PEM value, a file path, a data URI, or an HTTPS bundle URL.";
-const TRUST_STORE_PROVIDER_FACTORY_BASE_TYPE = "TrustStoreProviderFactory";
+const DEFAULT_UNCONFIGURED_MESSAGE = 'Trust store is not configured. Set FAME_CA_CERTS to a PEM value, a file path, a data URI, or an HTTPS bundle URL.';
+const TRUST_STORE_PROVIDER_FACTORY_BASE_TYPE = 'TrustStoreProviderFactory';
 class TrustStoreProviderFactory extends AbstractResourceFactory {
     createUnconfiguredProvider(reason) {
         return new NoopTrustStoreProvider(reason ?? DEFAULT_UNCONFIGURED_MESSAGE);
@@ -24944,7 +24966,8 @@ class DefaultSecurityManager {
             const hasSignature = Boolean(envelope.sec?.sig);
             if (!hasSignature) {
                 const nodeSid = node.sid;
-                const envelopeSid = envelope.sid;
+                const envelopeSid = envelope
+                    .sid;
                 const isLocalUnsignedSelfEnvelope = localContext.originType === DeliveryOriginType.LOCAL &&
                     typeof nodeSid === 'string' &&
                     nodeSid.length > 0 &&
@@ -28224,14 +28247,16 @@ function normalizeInPageConnectionGrant(candidate) {
         type,
         purpose,
     };
-    const channelValue = candidate.channelName ?? candidate['channel_name'];
+    const channelValue = candidate.channelName ??
+        candidate['channel_name'];
     if (channelValue !== undefined) {
         if (typeof channelValue !== 'string' || channelValue.trim().length === 0) {
             throw new TypeError('InPageConnectionGrant "channelName" must be a non-empty string when provided');
         }
         result.channelName = channelValue.trim();
     }
-    const inboxValue = candidate.inboxCapacity ?? candidate['inbox_capacity'];
+    const inboxValue = candidate.inboxCapacity ??
+        candidate['inbox_capacity'];
     if (inboxValue !== undefined) {
         if (typeof inboxValue !== 'number' ||
             !Number.isFinite(inboxValue) ||
@@ -28837,10 +28862,12 @@ class BroadcastChannelConnectorFactory extends ConnectorFactory {
             type: BROADCAST_CHANNEL_CONNECTOR_TYPE,
         };
         const channelCandidate = record.channelName ?? record['channel_name'];
-        if (typeof channelCandidate === 'string' && channelCandidate.trim().length > 0) {
+        if (typeof channelCandidate === 'string' &&
+            channelCandidate.trim().length > 0) {
             config.channelName = channelCandidate.trim();
         }
-        const inboxCandidate = record.inboxCapacity ?? record['inbox_capacity'];
+        const inboxCandidate = record.inboxCapacity ??
+            record['inbox_capacity'];
         if (typeof inboxCandidate === 'number' &&
             Number.isFinite(inboxCandidate) &&
             inboxCandidate > 0) {
@@ -28864,9 +28891,11 @@ class BroadcastChannelConnectorFactory extends ConnectorFactory {
             throw new Error('BroadcastChannelConnectorFactory requires a configuration');
         }
         const normalized = this._normalizeConfig(config);
-        const options = (factoryArgs[0] ?? {});
+        const options = (factoryArgs[0] ??
+            {});
         const normalizedLocalNodeFromConfig = this._normalizeNodeId(normalized.localNodeId);
-        const localNodeId = this._normalizeNodeId(options.localNodeId) ?? normalizedLocalNodeFromConfig;
+        const localNodeId = this._normalizeNodeId(options.localNodeId) ??
+            normalizedLocalNodeFromConfig;
         if (!localNodeId) {
             throw new Error('BroadcastChannelConnectorFactory requires a localNodeId from config or create() options');
         }
@@ -28891,6 +28920,7 @@ class BroadcastChannelConnectorFactory extends ConnectorFactory {
             inboxCapacity,
             localNodeId,
             initialTargetNodeId: resolvedTarget,
+            passive: normalized.passive,
         };
         const connector = new BroadcastChannelConnector(connectorConfig, baseConfig);
         if (options.authorization) {
@@ -28929,6 +28959,9 @@ class BroadcastChannelConnectorFactory extends ConnectorFactory {
         if (normalizedLocalNodeId) {
             normalized.localNodeId = normalizedLocalNodeId;
         }
+        if (typeof candidate.passive === 'boolean') {
+            normalized.passive = candidate.passive;
+        }
         if (typeof candidate.flowControl === 'boolean') {
             normalized.flowControl = candidate.flowControl;
         }
@@ -29009,7 +29042,9 @@ function normalizeConfig$r(config) {
         : DEFAULT_CHANNEL$4;
     const rawInbox = record.inboxCapacity ?? record['inbox_capacity'];
     let inboxCapacity = DEFAULT_INBOX_CAPACITY$4;
-    if (typeof rawInbox === 'number' && Number.isFinite(rawInbox) && rawInbox > 0) {
+    if (typeof rawInbox === 'number' &&
+        Number.isFinite(rawInbox) &&
+        rawInbox > 0) {
         inboxCapacity = Math.floor(rawInbox);
     }
     else if (typeof rawInbox === 'string') {
@@ -29526,7 +29561,8 @@ class InPageConnectorFactory extends ConnectorFactory {
         const normalized = this._normalizeConfig(config);
         const options = (factoryArgs[0] ?? {});
         const normalizedLocalNodeFromConfig = this._normalizeNodeId(normalized.localNodeId);
-        const localNodeId = this._normalizeNodeId(options.localNodeId) ?? normalizedLocalNodeFromConfig;
+        const localNodeId = this._normalizeNodeId(options.localNodeId) ??
+            normalizedLocalNodeFromConfig;
         if (!localNodeId) {
             throw new Error('InPageConnectorFactory requires a localNodeId from config or create() options');
         }
@@ -29676,7 +29712,9 @@ function normalizeConfig$p(config) {
         : DEFAULT_CHANNEL$2;
     const rawInbox = record.inboxCapacity ?? record['inbox_capacity'];
     let inboxCapacity = DEFAULT_INBOX_CAPACITY$2;
-    if (typeof rawInbox === 'number' && Number.isFinite(rawInbox) && rawInbox > 0) {
+    if (typeof rawInbox === 'number' &&
+        Number.isFinite(rawInbox) &&
+        rawInbox > 0) {
         inboxCapacity = Math.floor(rawInbox);
     }
     else if (typeof rawInbox === 'string') {
@@ -29704,9 +29742,7 @@ class InPageListenerFactory extends TransportListenerFactory {
     }
     async create(config, ...factoryArgs) {
         const normalized = normalizeConfig$p(config);
-        const [{ InPageListener }] = await Promise.all([
-            getInPageListenerModule(),
-        ]);
+        const [{ InPageListener }] = await Promise.all([getInPageListenerModule()]);
         return new InPageListener({
             channelName: normalized.channelName,
             inboxCapacity: normalized.inboxCapacity,
@@ -32757,19 +32793,23 @@ function normalizeConfig$a(config) {
         normalized.clientSecretConfig = normalizeSecretSource(clientSecretSource);
     }
     const audienceCandidate = candidate.audience ?? candidate.aud;
-    if (typeof audienceCandidate === 'string' && audienceCandidate.trim().length > 0) {
+    if (typeof audienceCandidate === 'string' &&
+        audienceCandidate.trim().length > 0) {
         normalized.audience = audienceCandidate.trim();
     }
     const codeChallengeMethod = candidate.codeChallengeMethod ?? candidate.code_challenge_method;
-    if (typeof codeChallengeMethod === 'string' && codeChallengeMethod.trim().length > 0) {
+    if (typeof codeChallengeMethod === 'string' &&
+        codeChallengeMethod.trim().length > 0) {
         normalized.codeChallengeMethod = codeChallengeMethod.trim();
     }
     const codeVerifierLength = candidate.codeVerifierLength ?? candidate.code_verifier_length;
-    if (typeof codeVerifierLength === 'number' && Number.isFinite(codeVerifierLength)) {
+    if (typeof codeVerifierLength === 'number' &&
+        Number.isFinite(codeVerifierLength)) {
         normalized.codeVerifierLength = codeVerifierLength;
     }
     const clockSkewSeconds = candidate.clockSkewSeconds ?? candidate.clock_skew_seconds;
-    if (typeof clockSkewSeconds === 'number' && Number.isFinite(clockSkewSeconds)) {
+    if (typeof clockSkewSeconds === 'number' &&
+        Number.isFinite(clockSkewSeconds)) {
         normalized.clockSkewSeconds = clockSkewSeconds;
     }
     const loginHintParam = candidate.loginHintParam ?? candidate.login_hint_param;
@@ -32814,8 +32854,8 @@ class OAuth2PkceTokenProviderFactory extends TokenProviderFactory {
             options.audience = normalized.audience;
         }
         if (normalized.codeChallengeMethod) {
-            options.codeChallengeMethod = normalized.codeChallengeMethod
-                .toUpperCase();
+            options.codeChallengeMethod =
+                normalized.codeChallengeMethod.toUpperCase();
         }
         if (normalized.codeVerifierLength) {
             options.codeVerifierLength = normalized.codeVerifierLength;
@@ -34572,14 +34612,14 @@ var eddsaEnvelopeVerifierFactory = /*#__PURE__*/Object.freeze({
 
 const FACTORY_META$d = {
     base: TRUST_STORE_PROVIDER_FACTORY_BASE_TYPE,
-    key: "NoopTrustStoreProvider",
+    key: 'NoopTrustStoreProvider',
     isDefault: true,
     priority: 10,
 };
 class NoopTrustStoreProviderFactory extends TrustStoreProviderFactory {
     constructor() {
         super(...arguments);
-        this.type = "NoopTrustStoreProvider";
+        this.type = 'NoopTrustStoreProvider';
         this.isDefault = true;
         this.priority = 10;
     }
@@ -36282,9 +36322,7 @@ const defaultGrantSelectionPolicy = new GrantSelectionPolicy();
 const logger$a = getLogger('naylence.fame.connector.broadcast_channel_listener');
 const DEFAULT_CHANNEL$1 = 'naylence-fabric';
 const DEFAULT_INBOX_CAPACITY$1 = 2048;
-const RESPONSE_TYPE_MASK = FameResponseType.ACK |
-    FameResponseType.REPLY |
-    FameResponseType.STREAM;
+const RESPONSE_TYPE_MASK = FameResponseType.ACK | FameResponseType.REPLY | FameResponseType.STREAM;
 const isBrowserEnvironment$2 = () => typeof window !== 'undefined' &&
     typeof BroadcastChannel !== 'undefined' &&
     typeof MessageEvent !== 'undefined';
@@ -36498,9 +36536,7 @@ class BroadcastChannelListener extends TransportListener {
                     return null;
                 }
             })();
-            if (error instanceof ZodError &&
-                decoded &&
-                decoded.length > 0) {
+            if (error instanceof ZodError && decoded && decoded.length > 0) {
                 try {
                     const reparsed = JSON.parse(decoded);
                     const candidate = reparsed.rtype;
@@ -36723,11 +36759,19 @@ class BroadcastChannelListener extends TransportListener {
             ? Math.floor(initialWindowCandidate)
             : undefined;
         const initialTargetNodeId = this._normalizeNodeId(targetCandidate) ?? targetSystemId;
+        const passive = typeof passiveCandidate === 'boolean' ? passiveCandidate : true;
+        logger$a.debug('broadcast_channel_listener_building_connector_config', {
+            system_id: systemId,
+            channel_name: channelName,
+            passive,
+            has_base_config: !!baseConfig,
+            passive_candidate: passiveCandidate,
+        });
         return {
             type: BROADCAST_CHANNEL_CONNECTOR_TYPE,
             channelName,
             inboxCapacity,
-            passive: typeof passiveCandidate === 'boolean' ? passiveCandidate : true,
+            passive,
             initialWindow,
             localNodeId,
             initialTargetNodeId,
@@ -37478,7 +37522,9 @@ class InPageListener extends TransportListener {
             typeof channelCandidate === 'string' && channelCandidate.trim().length > 0
                 ? channelCandidate.trim()
                 : DEFAULT_CHANNEL;
-        const normalizedCapacity = typeof inboxCandidate === 'number' && Number.isFinite(inboxCandidate) && inboxCandidate > 0
+        const normalizedCapacity = typeof inboxCandidate === 'number' &&
+            Number.isFinite(inboxCandidate) &&
+            inboxCandidate > 0
             ? Math.floor(inboxCandidate)
             : DEFAULT_INBOX_CAPACITY;
         this._inboxCapacity = normalizedCapacity;
@@ -37753,7 +37799,8 @@ class InPageListener extends TransportListener {
         if (grant.type === INPAGE_CONNECTION_GRANT_TYPE) {
             return inPageGrantToConnectorConfig(grant);
         }
-        if (typeof grant?.toConnectorConfig === 'function') {
+        if (typeof grant
+            ?.toConnectorConfig === 'function') {
             return grant.toConnectorConfig();
         }
         throw new Error(`Unsupported grant type: ${grant.type}`);
@@ -39291,8 +39338,7 @@ function normalizeOptions$2(raw) {
     const scopes = normalizeScopes(camel.scopes) ??
         normalizeScopes(snake.scopes ?? snake.scope) ??
         DEFAULT_SCOPES.slice();
-    const audience = coerceString(camel.audience) ??
-        coerceString(snake.audience ?? snake.aud);
+    const audience = coerceString(camel.audience) ?? coerceString(snake.audience ?? snake.aud);
     const fetchImpl = (camel.fetchImpl ?? snake.fetch_impl);
     const clockSkewSeconds = coerceNumber(camel.clockSkewSeconds) ??
         coerceNumber(snake.clock_skew_seconds) ??
@@ -40784,4 +40830,4 @@ var websocketTransportProvisioner = /*#__PURE__*/Object.freeze({
     WebSocketTransportProvisionerFactory: WebSocketTransportProvisionerFactory
 });
 
-export { ADMISSION_CLIENT_FACTORY_BASE_TYPE, ATTACHMENT_KEY_VALIDATOR_FACTORY_BASE_TYPE, AUTHORIZER_FACTORY_BASE_TYPE, AUTH_INJECTION_STRATEGY_FACTORY_BASE_TYPE, AnsiColor, AsyncLock, AttachmentKeyValidator, AuthInjectionStrategyFactory, AuthorizerFactory, BROADCAST_CHANNEL_CONNECTION_GRANT_TYPE, BackPressureFull, BaseAsyncConnector, BaseNodeEventListener, BindingManager, BindingStoreEntryRecord, BrowserAutoKeyCredentialProvider, BrowserWrappedKeyCredentialProvider, CERTIFICATE_MANAGER_FACTORY_BASE_TYPE, CREDENTIAL_PROVIDER_FACTORY_BASE_TYPE, CRYPTO_LEVEL_SECURITY_ORDER, CertificateManagerFactory, ConnectorConfigDefaults, ConnectorFactory, ConsoleMetricsEmitter, CryptoLevel, FACTORY_META$$ as DEFAULT_WELCOME_FACTORY_META, DefaultCryptoProvider, DefaultKeyManager, DefaultSecurityManager, DefaultSecurityPolicy, DefaultWelcomeService, DefaultWelcomeServiceFactory, DevFixedKeyCredentialProvider, ENCRYPTION_MANAGER_FACTORY_BASE_TYPE, ENVELOPE_SIGNER_FACTORY_BASE_TYPE, ENVELOPE_VERIFIER_FACTORY_BASE_TYPE, ENV_VAR_DEFAULT_ENCRYPTION_LEVEL, ENV_VAR_HMAC_SECRET, ENV_VAR_JWKS_URL, ENV_VAR_JWT_ALGORITHM, ENV_VAR_JWT_AUDIENCE$1 as ENV_VAR_JWT_AUDIENCE, ENV_VAR_JWT_REVERSE_AUTH_AUDIENCE, ENV_VAR_JWT_REVERSE_AUTH_TRUSTED_ISSUER, ENV_VAR_JWT_TRUSTED_ISSUER, ENV_VAR_SHOW_ENVELOPES$1 as ENV_VAR_SHOW_ENVELOPES, EdDSAEnvelopeSigner, EncryptedKeyValueStore, EncryptedStorageProviderBase, EncryptedValue, EncryptionConfiguration, EncryptionManagerFactory, EncryptionResult, EncryptionStatus, EnvCredentialProvider, EnvelopeContext, EnvelopeListenerManager, EnvelopeSecurityHandler, EnvelopeSignerFactory, EnvelopeVerifierFactory, FACTORY_META$10 as FACTORY_META, FIXED_PREFIX_LEN, FameAuthorizedDeliveryContextSchema, FameConnectError, FameEnvironmentContext, FameError, FameMessageTooLarge, FameNode, FameNodeAuthorizationContextSchema, FameProtocolError, FameTransportClose, FlowController, GRANT_PURPOSE_NODE_ATTACH, HTTP_CONNECTION_GRANT_TYPE, HTTP_STATELESS_CONNECTOR_TYPE, INPAGE_CONNECTION_GRANT_TYPE, INPAGE_CONNECTOR_TYPE, InMemoryBinding, InMemoryFanoutBroker, InMemoryKeyValueStore, InMemoryReadWriteChannel, InMemoryStorageProvider, InPageConnector, IndexedDBKeyValueStore, IndexedDBStorageProvider, InvalidPassphraseError, JWKValidationError, KEY_MANAGER_FACTORY_BASE_TYPE, KEY_STORE_FACTORY_BASE_TYPE, KeyInfo, KeyManagementHandler, KeyManagerFactory, KeyStore, KeyStoreFactory, KeyValidationError, LOAD_BALANCER_STICKINESS_MANAGER_FACTORY_BASE_TYPE, LoadBalancerStickinessManagerFactory, LogLevel, LogLevelNames, MemoryMetricsEmitter, NODE_LIKE_FACTORY_BASE_TYPE, NODE_PLACEMENT_STRATEGY_FACTORY_BASE_TYPE, NoOpMetricsEmitter, NoSecurityPolicy, NodeFactory, NodePlacementStrategyFactory, NoneCredentialProvider, NoopEncryptionManager, NoopKeyValidator, NoopTrustStoreProvider, NotAuthorized, PROFILE_NAME_GATED, PROFILE_NAME_GATED_CALLBACK, PROFILE_NAME_OPEN$1 as PROFILE_NAME_OPEN, PROFILE_NAME_OVERLAY, PROFILE_NAME_OVERLAY_CALLBACK, PROFILE_NAME_STRICT_OVERLAY, PromptCredentialProvider, REPLICA_STICKINESS_MANAGER_FACTORY_BASE_TYPE, REQUIRED_FIELDS_BY_KTY, ReplicaStickinessManagerFactory, RootSessionManager, RouteManager, RpcMixin, RpcProxy, SEALED_ENVELOPE_NONCE_LENGTH, SEALED_ENVELOPE_OVERHEAD, SEALED_ENVELOPE_PRIVATE_KEY_LENGTH, SEALED_ENVELOPE_PUBLIC_KEY_LENGTH, SEALED_ENVELOPE_TAG_LENGTH, SECURE_CHANNEL_MANAGER_FACTORY_BASE_TYPE, SECURITY_MANAGER_FACTORY_BASE_TYPE, SECURITY_POLICY_FACTORY_BASE_TYPE, STORAGE_PROVIDER_FACTORY_BASE_TYPE, SecretSource, SecretStoreCredentialProvider, SecureChannelFrameHandler, SecureChannelManagerFactory, SecurityAction, SecurityRequirements, Sentinel, SentinelFactory, SessionKeyCredentialProvider, SignaturePolicy, SigningConfig as SigningConfigClass, SigningConfiguration, SimpleLoadBalancerStickinessManager, SimpleLoadBalancerStickinessManagerFactory, StaticCredentialProvider, StorageAESEncryptionManager, TOKEN_ISSUER_FACTORY_BASE_TYPE, TOKEN_PROVIDER_FACTORY_BASE_TYPE, TOKEN_VERIFIER_FACTORY_BASE_TYPE, TRANSPORT_PROVISIONER_FACTORY_BASE_TYPE, TRUST_STORE_PROVIDER_FACTORY_BASE_TYPE, TaskSpawner, TokenIssuerFactory, TokenProviderFactory, TokenVerifierFactory, TransportProvisionerFactory, TrustStoreProviderFactory, TtlValidationError, UpstreamSessionManager, VALID_CURVES_BY_KTY, VALID_KEY_USES, VERSION, WEBSOCKET_CONNECTION_GRANT_TYPE, WELCOME_SERVICE_FACTORY_BASE_TYPE, WebSocketCloseCode, WebSocketConnector, WebSocketState, WelcomeServiceFactory, _NoopFlowController, __runtimePluginLoader, addEnvelopeFields, addLogLevel, addTimestamp, assertConnectionGrant, assertGrant, basicConfig, broadcastChannelGrantToConnectorConfig, camelToSnakeCase, canonicalJson, capitalizeFirstLetter, color, compareCryptoLevels, compiledPathPattern, consoleTransport, convertWildcardLogicalToDnsConstraint, createConnectorConfig, createEd25519Keypair, createHostLogicalUri, createLogicalUri, createNodeDeliveryContext, createResource, createRpcProxy, createRsaKeypair, createTransportCloseError, createX25519Keypair, credentialToString, currentTraceId$1 as currentTraceId, debounce, decodeBase64Url, decodeFameDataPayload, deepMerge, defaultJsonEncoder, delay, dropEmpty, enableLogging, encodeUtf8, ensureRuntimeFactoriesRegistered, extractId, extractPoolAddressBase, extractPoolBase, filterKeysByUse, formatTimestamp, formatTimestampForConsole$1 as formatTimestampForConsole, frameDigest, getCurrentEnvelope, getFameRoot, getKeyProvider, getKeyStore, getLogger, hasCryptoSupport, hostnameToLogical, hostnamesToLogicals, httpGrantToConnectorConfig, immutableHeaders, inPageGrantToConnectorConfig, isAuthInjectionStrategy, isBroadcastChannelConnectionGrant, isConnectionGrant, isConnectorConfig, isEnvelopeLoggingEnabled, isFameError, isFameErrorType, isGrant, isHttpConnectionGrant, isInPageConnectionGrant, isNodeLike, isPlainObject$3 as isPlainObject, isPoolAddress, isPoolLogical, isRegisterable, isTokenExpired, isTokenProvider, isTokenValid, isWebSocketConnectionGrant, jsonDumps, logicalPatternsToDnsConstraints, logicalToHostname, logicalsToHostnames, matchesPoolAddress, matchesPoolLogical, maybeAwait, nodeWelcomeRouter, nodeWelcomeRouterPlugin, normalizeBroadcastChannelConnectionGrant, normalizeEncryptionConfig, normalizeEnvelopeSnapshot, normalizeHttpConnectionGrant, normalizeInPageConnectionGrant, normalizeInboundCryptoRules, normalizeInboundSigningRules, normalizeOutboundCryptoRules, normalizeOutboundSigningRules, normalizePath, normalizeResponseCryptoRules, normalizeResponseSigningRules, normalizeSecretSource, normalizeSecurityRequirements, normalizeSigningConfig, normalizeWebSocketConnectionGrant, objectToBytes, operation, parseSealedEnvelope, pinoTransport, prettyModel$1 as prettyModel, registerDefaultFactories, registerDefaultKeyStoreFactory, registerNodePlacementStrategyFactory, registerRuntimeFactories, requireCryptoSupport, retryWithBackoff, safeColor, sealedDecrypt, sealedEncrypt, secureDigest, setKeyStore, showEnvelopes$1 as showEnvelopes, sleep, snakeToCamelCase, stringifyNonPrimitives, supportsColor, throttle, urlsafeBase64Decode, urlsafeBase64Encode, validateCacheTtlSec, validateEncryptionKey, validateHostLogical, validateHostLogicals, validateJwkComplete, validateJwkStructure, validateJwkUseField, validateJwtTokenTtlSec, validateKeyCorrelationTtlSec, validateLogical, validateLogicalSegment, validateOAuth2TtlSec, validateSigningKey, validateTtlSec, waitForAll, waitForAllSettled, waitForAny, websocketGrantToConnectorConfig, withEnvelopeContext, withEnvelopeContextAsync, withLegacySnakeCaseKeys, withLock, withTimeout };
+export { ADMISSION_CLIENT_FACTORY_BASE_TYPE, ATTACHMENT_KEY_VALIDATOR_FACTORY_BASE_TYPE, AUTHORIZER_FACTORY_BASE_TYPE, AUTH_INJECTION_STRATEGY_FACTORY_BASE_TYPE, AnsiColor, AsyncLock, AttachmentKeyValidator, AuthInjectionStrategyFactory, AuthorizerFactory, BROADCAST_CHANNEL_CONNECTION_GRANT_TYPE, BackPressureFull, BaseAsyncConnector, BaseNodeEventListener, BindingManager, BindingStoreEntryRecord, BrowserAutoKeyCredentialProvider, BrowserWrappedKeyCredentialProvider, CERTIFICATE_MANAGER_FACTORY_BASE_TYPE, CREDENTIAL_PROVIDER_FACTORY_BASE_TYPE, CRYPTO_LEVEL_SECURITY_ORDER, CertificateManagerFactory, ConnectorConfigDefaults, ConnectorFactory, ConsoleMetricsEmitter, CryptoLevel, FACTORY_META$$ as DEFAULT_WELCOME_FACTORY_META, DefaultCryptoProvider, DefaultKeyManager, DefaultSecurityManager, DefaultSecurityPolicy, DefaultWelcomeService, DefaultWelcomeServiceFactory, DevFixedKeyCredentialProvider, ENCRYPTION_MANAGER_FACTORY_BASE_TYPE, ENVELOPE_SIGNER_FACTORY_BASE_TYPE, ENVELOPE_VERIFIER_FACTORY_BASE_TYPE, ENV_VAR_DEFAULT_ENCRYPTION_LEVEL, ENV_VAR_HMAC_SECRET, ENV_VAR_JWKS_URL, ENV_VAR_JWT_ALGORITHM, ENV_VAR_JWT_AUDIENCE$1 as ENV_VAR_JWT_AUDIENCE, ENV_VAR_JWT_REVERSE_AUTH_AUDIENCE, ENV_VAR_JWT_REVERSE_AUTH_TRUSTED_ISSUER, ENV_VAR_JWT_TRUSTED_ISSUER, ENV_VAR_SHOW_ENVELOPES$1 as ENV_VAR_SHOW_ENVELOPES, EdDSAEnvelopeSigner, EncryptedKeyValueStore, EncryptedStorageProviderBase, EncryptedValue, EncryptionConfiguration, EncryptionManagerFactory, EncryptionResult, EncryptionStatus, EnvCredentialProvider, EnvelopeContext, EnvelopeListenerManager, EnvelopeSecurityHandler, EnvelopeSignerFactory, EnvelopeVerifierFactory, FACTORY_META$10 as FACTORY_META, FIXED_PREFIX_LEN, FameAuthorizedDeliveryContextSchema, FameConnectError, FameEnvironmentContext, FameError, FameMessageTooLarge, FameNode, FameNodeAuthorizationContextSchema, FameProtocolError, FameTransportClose, FlowController, GRANT_PURPOSE_NODE_ATTACH, HTTP_CONNECTION_GRANT_TYPE, HTTP_STATELESS_CONNECTOR_TYPE, INPAGE_CONNECTION_GRANT_TYPE, INPAGE_CONNECTOR_TYPE, InMemoryBinding, InMemoryFanoutBroker, InMemoryKeyValueStore, InMemoryReadWriteChannel, InMemoryStorageProvider, InPageConnector, IndexedDBKeyValueStore, IndexedDBStorageProvider, InvalidPassphraseError, JWKValidationError, KEY_MANAGER_FACTORY_BASE_TYPE, KEY_STORE_FACTORY_BASE_TYPE, KeyInfo, KeyManagementHandler, KeyManagerFactory, KeyStore, KeyStoreFactory, KeyValidationError, LOAD_BALANCER_STICKINESS_MANAGER_FACTORY_BASE_TYPE, LoadBalancerStickinessManagerFactory, LogLevel, LogLevelNames, MemoryMetricsEmitter, NODE_LIKE_FACTORY_BASE_TYPE, NODE_PLACEMENT_STRATEGY_FACTORY_BASE_TYPE, NoOpMetricsEmitter, NoSecurityPolicy, NodeFactory, NodePlacementStrategyFactory, NoneCredentialProvider, NoopEncryptionManager, NoopKeyValidator, NoopTrustStoreProvider, NotAuthorized, PROFILE_NAME_GATED, PROFILE_NAME_GATED_CALLBACK, PROFILE_NAME_OPEN$1 as PROFILE_NAME_OPEN, PROFILE_NAME_OVERLAY, PROFILE_NAME_OVERLAY_CALLBACK, PROFILE_NAME_STRICT_OVERLAY, PromptCredentialProvider, REPLICA_STICKINESS_MANAGER_FACTORY_BASE_TYPE, REQUIRED_FIELDS_BY_KTY, ReplicaStickinessManagerFactory, RootSessionManager, RouteManager, RpcMixin, RpcProxy, SEALED_ENVELOPE_NONCE_LENGTH, SEALED_ENVELOPE_OVERHEAD, SEALED_ENVELOPE_PRIVATE_KEY_LENGTH, SEALED_ENVELOPE_PUBLIC_KEY_LENGTH, SEALED_ENVELOPE_TAG_LENGTH, SECURE_CHANNEL_MANAGER_FACTORY_BASE_TYPE, SECURITY_MANAGER_FACTORY_BASE_TYPE, SECURITY_POLICY_FACTORY_BASE_TYPE, STORAGE_PROVIDER_FACTORY_BASE_TYPE, SecretSource, SecretStoreCredentialProvider, SecureChannelFrameHandler, SecureChannelManagerFactory, SecurityAction, SecurityRequirements, Sentinel, SentinelFactory, SessionKeyCredentialProvider, SignaturePolicy, SigningConfig as SigningConfigClass, SigningConfiguration, SimpleLoadBalancerStickinessManager, SimpleLoadBalancerStickinessManagerFactory, StaticCredentialProvider, StorageAESEncryptionManager, TOKEN_ISSUER_FACTORY_BASE_TYPE, TOKEN_PROVIDER_FACTORY_BASE_TYPE, TOKEN_VERIFIER_FACTORY_BASE_TYPE, TRANSPORT_PROVISIONER_FACTORY_BASE_TYPE, TRUST_STORE_PROVIDER_FACTORY_BASE_TYPE, TaskSpawner, TokenIssuerFactory, TokenProviderFactory, TokenVerifierFactory, TransportProvisionerFactory, TrustStoreProviderFactory, TtlValidationError, UpstreamSessionManager, VALID_CURVES_BY_KTY, VALID_KEY_USES, VERSION, WEBSOCKET_CONNECTION_GRANT_TYPE, WELCOME_SERVICE_FACTORY_BASE_TYPE, WebSocketCloseCode, WebSocketConnector, WebSocketState, WelcomeServiceFactory, _NoopFlowController, __runtimePluginLoader, addEnvelopeFields, addLogLevel, addTimestamp, assertConnectionGrant, assertGrant, basicConfig, broadcastChannelGrantToConnectorConfig, camelToSnakeCase, canonicalJson, capitalizeFirstLetter, color, compareCryptoLevels, compiledPathPattern, consoleTransport, convertWildcardLogicalToDnsConstraint, createConnectorConfig, createEd25519Keypair, createHostLogicalUri, createLogicalUri, createNodeDeliveryContext, createResource, createRpcProxy, createRsaKeypair, createTransportCloseError, createX25519Keypair, credentialToString, currentTraceId$1 as currentTraceId, debounce, decodeBase64Url, decodeFameDataPayload, deepMerge, defaultJsonEncoder, delay, dropEmpty, enableLogging, encodeUtf8, ensureRuntimeFactoriesRegistered, extractId, extractPoolAddressBase, extractPoolBase, filterKeysByUse, formatTimestamp, formatTimestampForConsole$1 as formatTimestampForConsole, frameDigest, getCurrentEnvelope, getFameRoot, getKeyProvider, getKeyStore, getLogger, hasCryptoSupport, hostnameToLogical, hostnamesToLogicals, httpGrantToConnectorConfig, immutableHeaders, inPageGrantToConnectorConfig, isAuthInjectionStrategy, isBroadcastChannelConnectionGrant, isConnectionGrant, isConnectorConfig, isEnvelopeLoggingEnabled, isFameError, isFameErrorType, isGrant, isHttpConnectionGrant, isInPageConnectionGrant, isNodeLike, isPlainObject$3 as isPlainObject, isPoolAddress, isPoolLogical, isRegisterable, isTokenExpired, isTokenProvider, isTokenValid, isWebSocketConnectionGrant, jsonDumps, logicalPatternsToDnsConstraints, logicalToHostname, logicalsToHostnames, matchesPoolAddress, matchesPoolLogical, maybeAwait, nodeWelcomeRouter, nodeWelcomeRouterPlugin, normalizeBroadcastChannelConnectionGrant, normalizeEncryptionConfig, normalizeEnvelopeSnapshot, normalizeHttpConnectionGrant, normalizeInPageConnectionGrant, normalizeInboundCryptoRules, normalizeInboundSigningRules, normalizeOutboundCryptoRules, normalizeOutboundSigningRules, normalizePath, normalizeResponseCryptoRules, normalizeResponseSigningRules, normalizeSecretSource, normalizeSecurityRequirements, normalizeSigningConfig, normalizeWebSocketConnectionGrant, objectToBytes, operation, parseSealedEnvelope, pinoTransport, prettyModel$1 as prettyModel, registerDefaultFactories, registerDefaultKeyStoreFactory, registerNodePlacementStrategyFactory, registerRuntimeFactories, requireCryptoSupport, retryWithBackoff, safeColor, safeImport, sealedDecrypt, sealedEncrypt, secureDigest, setKeyStore, showEnvelopes$1 as showEnvelopes, sleep, snakeToCamelCase, stringifyNonPrimitives, supportsColor, throttle, urlsafeBase64Decode, urlsafeBase64Encode, validateCacheTtlSec, validateEncryptionKey, validateHostLogical, validateHostLogicals, validateJwkComplete, validateJwkStructure, validateJwkUseField, validateJwtTokenTtlSec, validateKeyCorrelationTtlSec, validateLogical, validateLogicalSegment, validateOAuth2TtlSec, validateSigningKey, validateTtlSec, waitForAll, waitForAllSettled, waitForAny, websocketGrantToConnectorConfig, withEnvelopeContext, withEnvelopeContextAsync, withLegacySnakeCaseKeys, withLock, withTimeout };