@twin.org/node-core 0.0.2-next.15 → 0.0.2-next.17

package/dist/esm/index.mjs

@@ -1,13 +1,13 @@
 import { PasswordHelper } from '@twin.org/api-auth-entity-storage-service';
-import { I18n, Is, Coerce, Converter, RandomHelper, StringHelper, Urn, GeneralError, ErrorHelper, EnvHelper } from '@twin.org/core';
+import { I18n, Is, Coerce, Converter, RandomHelper, Urn, GeneralError, ErrorHelper, EnvHelper } from '@twin.org/core';
 import { PasswordGenerator, Bip39 } from '@twin.org/crypto';
 import { AuthenticationComponentType, InformationComponentType, RestRouteProcessorType, SocketRouteProcessorType, AuthenticationAdminComponentType } from '@twin.org/engine-server-types';
-import { WalletConnectorType, IdentityConnectorType, EntityStorageConnectorType, BlobStorageConnectorType, BlobStorageComponentType, VaultConnectorType, DltConfigType, LoggingConnectorType, LoggingComponentType, BackgroundTaskConnectorType, TaskSchedulerComponentType, EventBusConnectorType, EventBusComponentType, TelemetryConnectorType, TelemetryComponentType, MessagingEmailConnectorType, MessagingSmsConnectorType, MessagingPushNotificationConnectorType, MessagingComponentType, FaucetConnectorType, EngineTypeHelper, NftConnectorType, NftComponentType, VerifiableStorageConnectorType, VerifiableStorageComponentType, ImmutableProofComponentType, IdentityComponentType, IdentityResolverConnectorType, IdentityResolverComponentType, IdentityProfileConnectorType, IdentityProfileComponentType, AttestationConnectorType, AttestationComponentType, DataProcessingComponentType, DataConverterConnectorType, DataExtractorConnectorType, AuditableItemGraphComponentType, AuditableItemStreamComponentType, DocumentManagementComponentType, AuthenticationGeneratorComponentType, RightsManagementPapComponentType, RightsManagementPmpComponentType, RightsManagementPipComponentType, RightsManagementPxpComponentType, RightsManagementPdpComponentType, RightsManagementPepComponentType, RightsManagementPnpComponentType, RightsManagementPnapComponentType, RightsManagementDapComponentType, RightsManagementDarpComponentType, SynchronisedStorageComponentType, FederatedCatalogueComponentType, DataSpaceConnectorComponentType } from '@twin.org/engine-types';
+import { WalletConnectorType, IdentityConnectorType, EntityStorageConnectorType, BlobStorageConnectorType, BlobStorageComponentType, VaultConnectorType, DltConfigType, LoggingConnectorType, LoggingComponentType, BackgroundTaskConnectorType, TaskSchedulerComponentType, EventBusConnectorType, EventBusComponentType, TelemetryConnectorType, TelemetryComponentType, MessagingEmailConnectorType, MessagingSmsConnectorType, MessagingPushNotificationConnectorType, MessagingAdminComponentType, MessagingComponentType, FaucetConnectorType, EngineTypeHelper, NftConnectorType, NftComponentType, VerifiableStorageConnectorType, VerifiableStorageComponentType, ImmutableProofComponentType, IdentityComponentType, IdentityResolverConnectorType, IdentityResolverComponentType, IdentityProfileConnectorType, IdentityProfileComponentType, AttestationConnectorType, AttestationComponentType, DataProcessingComponentType, DataConverterConnectorType, DataExtractorConnectorType, AuditableItemGraphComponentType, AuditableItemStreamComponentType, DocumentManagementComponentType, AuthenticationGeneratorComponentType, RightsManagementPapComponentType, RightsManagementPmpComponentType, RightsManagementPipComponentType, RightsManagementPxpComponentType, RightsManagementPdpComponentType, RightsManagementPepComponentType, RightsManagementPnpComponentType, RightsManagementPnapComponentType, RightsManagementDapComponentType, RightsManagementDarpComponentType, SynchronisedStorageComponentType, FederatedCatalogueComponentType, DataSpaceConnectorComponentType } from '@twin.org/engine-types';
 import { EntityStorageConnectorFactory } from '@twin.org/entity-storage-models';
 import { IdentityProfileConnectorFactory, IdentityConnectorFactory, IdentityResolverConnectorFactory, DocumentHelper } from '@twin.org/identity-models';
 import { VaultConnectorFactory, VaultKeyType } from '@twin.org/vault-models';
 import { WalletConnectorFactory } from '@twin.org/wallet-models';
-import { readFile, stat } from 'node:fs/promises';
+import { readFile, stat, readdir } from 'node:fs/promises';
 import path from 'node:path';
 import { PolicyNegotiationPointClient, DataAccessPointClient } from '@twin.org/rights-management-rest-client';
 import { addDefaultRestPaths, addDefaultSocketPaths, EngineServer } from '@twin.org/engine-server';
@@ -17,6 +17,15 @@ import { Engine } from '@twin.org/engine';
 import { FileStateStorage } from '@twin.org/engine-core';
 import { EngineCoreFactory } from '@twin.org/engine-models';
 
+// Copyright 2024 IOTA Stiftung.
+// SPDX-License-Identifier: Apache-2.0.
+const ATTESTATION_VERIFICATION_METHOD_ID = "attestation-assertion";
+const IMMUTABLE_PROOF_VERIFICATION_METHOD_ID = "immutable-proof-assertion";
+const BLOB_STORAGE_ENCRYPTION_KEY_ID = "blob-encryption";
+const SYNCHRONISED_STORAGE_BLOB_STORAGE_ENCRYPTION_KEY_ID = "synchronised-storage-blob-encryption";
+const VC_AUTHENTICATION_VERIFICATION_METHOD_ID = "node-authentication-assertion";
+const AUTH_SIGNING_KEY_ID = "auth-signing";
+
 // Copyright 2024 IOTA Stiftung.
 // SPDX-License-Identifier: Apache-2.0.
 /**
@@ -77,6 +86,64 @@ async function fileExists(filename) {
         return false;
     }
 }
+/**
+ * Does the specified directory exist.
+ * @param directory The directory to check for existence.
+ * @returns True if the directory exists.
+ */
+async function directoryExists(directory) {
+    try {
+        const stats = await stat(directory);
+        return stats.isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Get the sub folders for the folder.
+ * @param directory The directory to get the sub folders.
+ * @returns The list of sub folders.
+ */
+async function getSubFolders(directory) {
+    try {
+        const dir = await readdir(directory);
+        const folders = [];
+        for (const dirEntry of dir) {
+            const fullPath = path.join(directory, dirEntry);
+            const stats = await stat(fullPath);
+            if (stats.isDirectory()) {
+                folders.push(fullPath);
+            }
+        }
+        return folders;
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Get the files in the directory.
+ * @param directory The directory to get the files from.
+ * @returns The list of files in the directory.
+ */
+async function getFiles(directory) {
+    try {
+        const dir = await readdir(directory);
+        const files = [];
+        for (const dirEntry of dir) {
+            const fullPath = path.join(directory, dirEntry);
+            const stats = await stat(fullPath);
+            if (stats.isFile()) {
+                files.push(fullPath);
+            }
+        }
+        return files;
+    }
+    catch {
+        return [];
+    }
+}
 /**
  * Load the text file.
  * @param filename The filename of the text file to load.
@@ -130,10 +197,16 @@ async function bootstrap(engineCore, context, envVars) {
     await bootstrapNodeUser(engineCore, context, envVars, features);
     await bootstrapAuth(engineCore, context, envVars);
     await bootstrapBlobEncryption(engineCore, context, envVars);
-    await addVerificationMethod(engineCore, context, "attestation", envVars.attestationVerificationMethodId);
-    await addVerificationMethod(engineCore, context, "immutable proof", envVars.immutableProofVerificationMethodId);
+    const defaultAttestationConnectorType = engineCore.getRegisteredInstanceTypeOptional("attestationConnector");
+    if (!Is.empty(defaultAttestationConnectorType)) {
+        await addVerificationMethod(engineCore, context, "attestation", envVars.attestationVerificationMethodId ?? ATTESTATION_VERIFICATION_METHOD_ID);
+    }
+    const defaultImmutableProofComponentType = engineCore.getRegisteredInstanceTypeOptional("immutableProofComponent");
+    if (!Is.empty(defaultImmutableProofComponentType)) {
+        await addVerificationMethod(engineCore, context, "immutable proof", envVars.immutableProofVerificationMethodId ?? IMMUTABLE_PROOF_VERIFICATION_METHOD_ID);
+    }
     if (Coerce.boolean(envVars.vcAuthenticationEnabled) ?? false) {
-        await addVerificationMethod(engineCore, context, "verifiable credential authentication", envVars.vcAuthenticationVerificationMethodId);
+        await addVerificationMethod(engineCore, context, "verifiable credential authentication", envVars.vcAuthenticationVerificationMethodId ?? VC_AUTHENTICATION_VERIFICATION_METHOD_ID);
     }
     await bootstrapSynchronisedStorage(engineCore, context, envVars);
 }
@@ -246,7 +319,7 @@ async function finaliseWallet(engineCore, envVars, features, finalIdentity, addr
         // If we are using entity storage for wallet the identity associated with the
         // address will be wrong, so fix it
         if (defaultWalletConnectorType.startsWith(WalletConnectorType.EntityStorage)) {
-            const walletAddress = EntityStorageConnectorFactory.get(StringHelper.kebabCase("WalletAddress"));
+            const walletAddress = EntityStorageConnectorFactory.get("wallet-address");
             const addr = await walletAddress.get(addresses[0]);
             if (!Is.empty(addr)) {
                 addr.identity = finalIdentity;
@@ -316,7 +389,7 @@ async function bootstrapNodeUser(engineCore, context, envVars, features) {
         const defaultAuthenticationComponentType = engineCore.getRegisteredInstanceType("authenticationComponent");
         if (defaultAuthenticationComponentType.startsWith(AuthenticationComponentType.EntityStorage) &&
             Is.stringValue(context.state.nodeIdentity)) {
-            const authUserEntityStorage = EntityStorageConnectorFactory.get(StringHelper.kebabCase("AuthenticationUser"));
+            const authUserEntityStorage = EntityStorageConnectorFactory.get("authentication-user");
             const email = envVars.username ?? DEFAULT_NODE_USERNAME;
             let nodeAdminUser = await authUserEntityStorage.get(email);
             if (Is.empty(nodeAdminUser)) {
@@ -409,7 +482,7 @@ async function bootstrapBlobEncryption(engineCore, context, envVars, features) {
         // Create a new key for encrypting blobs
         const defaultVaultConnectorType = engineCore.getRegisteredInstanceType("vaultConnector");
         const vaultConnector = VaultConnectorFactory.get(defaultVaultConnectorType);
-        const keyName = `${context.state.nodeIdentity}/${envVars.blobStorageEncryptionKeyId}`;
+        const keyName = `${context.state.nodeIdentity}/${envVars.blobStorageEncryptionKeyId ?? BLOB_STORAGE_ENCRYPTION_KEY_ID}`;
         let existingKey;
         try {
             existingKey = await vaultConnector.getKey(keyName);
@@ -449,7 +522,7 @@ async function bootstrapAuth(engineCore, context, envVars, features) {
         // Create a new JWT signing key and a user login for the node
         const defaultVaultConnectorType = engineCore.getRegisteredInstanceType("vaultConnector");
         const vaultConnector = VaultConnectorFactory.get(defaultVaultConnectorType);
-        const keyName = `${context.state.nodeIdentity}/${envVars.authSigningKeyId}`;
+        const keyName = `${context.state.nodeIdentity}/${envVars.authSigningKeyId ?? AUTH_SIGNING_KEY_ID}`;
         let existingKey;
         try {
             existingKey = await vaultConnector.getKey(keyName);
@@ -474,11 +547,11 @@ async function bootstrapAuth(engineCore, context, envVars, features) {
 async function bootstrapSynchronisedStorage(engineCore, context, envVars, features) {
     if (Coerce.boolean(envVars.synchronisedStorageEnabled) ?? false) {
         // If this is a trusted node we need to add the blob encryption key pair
-        if (Is.stringValue(envVars.synchronisedStorageBlobStorageEncryptionKeyId) &&
-            Is.stringBase64(envVars.synchronisedStorageBlobStorageKey)) {
+        if (Is.stringBase64(envVars.synchronisedStorageBlobStorageKey)) {
             const defaultVaultConnectorType = engineCore.getRegisteredInstanceType("vaultConnector");
             const vaultConnector = VaultConnectorFactory.get(defaultVaultConnectorType);
-            const keyName = envVars.synchronisedStorageBlobStorageEncryptionKeyId;
+            const keyName = envVars.synchronisedStorageBlobStorageEncryptionKeyId ??
+                SYNCHRONISED_STORAGE_BLOB_STORAGE_ENCRYPTION_KEY_ID;
             let existingKey;
             try {
                 existingKey = await vaultConnector.getKey(keyName);
@@ -540,49 +613,43 @@ async function addVerificationMethod(engineCore, context, verificationMethodTitl
  * @param envVars The environment variables.
  * @returns The config for the core.
  */
-function buildEngineConfiguration(envVars) {
+async function buildEngineConfiguration(envVars) {
     if (Is.stringValue(envVars.storageFileRoot)) {
         envVars.stateFilename ??= "engine-state.json";
         envVars.storageFileRoot = path.resolve(envVars.storageFileRoot);
         envVars.stateFilename = path.join(envVars.storageFileRoot, envVars.stateFilename);
     }
-    envVars.attestationVerificationMethodId ??= "attestation-assertion";
-    envVars.immutableProofVerificationMethodId ??= "immutable-proof-assertion";
-    envVars.blobStorageEnableEncryption ??= "false";
-    envVars.blobStorageEncryptionKeyId ??= "blob-encryption";
-    envVars.synchronisedStorageBlobStorageEncryptionKeyId ??= "synchronised-storage-blob-encryption";
-    envVars.vcAuthenticationVerificationMethodId ??= "node-authentication-assertion";
     const coreConfig = {
         debug: Coerce.boolean(envVars.debug) ?? false,
         types: {}
     };
-    configureEntityStorage(coreConfig, envVars);
-    configureBlobStorage(coreConfig, envVars);
-    configureVault(coreConfig, envVars);
-    configureDlt(coreConfig, envVars);
-    configureLogging(coreConfig, envVars);
-    configureBackgroundTask(coreConfig, envVars);
-    configureTaskScheduler(coreConfig, envVars);
-    configureEventBus(coreConfig, envVars);
-    configureTelemetry(coreConfig, envVars);
-    configureMessaging(coreConfig, envVars);
-    configureFaucet(coreConfig, envVars);
-    configureWallet(coreConfig, envVars);
-    configureNft(coreConfig, envVars);
-    configureVerifiableStorage(coreConfig, envVars);
-    configureIdentity(coreConfig, envVars);
-    configureIdentityResolver(coreConfig, envVars);
-    configureIdentityProfile(coreConfig, envVars);
-    configureAttestation(coreConfig, envVars);
-    configureDataProcessing(coreConfig, envVars);
-    configureAuditableItemGraph(coreConfig, envVars);
-    configureAuditableItemStream(coreConfig, envVars);
-    configureDocumentManagement(coreConfig, envVars);
-    configureVerifiableCredentialAuthentication(coreConfig, envVars);
-    configureRightsManagement(coreConfig, envVars);
-    configureSynchronisedStorage(coreConfig, envVars);
-    configureFederatedCatalogue(coreConfig, envVars);
-    configureDataSpaceConnector(coreConfig, envVars);
+    await configureEntityStorage(coreConfig, envVars);
+    await configureBlobStorage(coreConfig, envVars);
+    await configureVault(coreConfig, envVars);
+    await configureDlt(coreConfig, envVars);
+    await configureLogging(coreConfig, envVars);
+    await configureBackgroundTask(coreConfig, envVars);
+    await configureTaskScheduler(coreConfig, envVars);
+    await configureEventBus(coreConfig, envVars);
+    await configureTelemetry(coreConfig, envVars);
+    await configureMessaging(coreConfig, envVars);
+    await configureFaucet(coreConfig, envVars);
+    await configureWallet(coreConfig, envVars);
+    await configureNft(coreConfig, envVars);
+    await configureVerifiableStorage(coreConfig, envVars);
+    await configureIdentity(coreConfig, envVars);
+    await configureIdentityResolver(coreConfig, envVars);
+    await configureIdentityProfile(coreConfig, envVars);
+    await configureAttestation(coreConfig, envVars);
+    await configureDataProcessing(coreConfig, envVars);
+    await configureAuditableItemGraph(coreConfig, envVars);
+    await configureAuditableItemStream(coreConfig, envVars);
+    await configureDocumentManagement(coreConfig, envVars);
+    await configureVerifiableCredentialAuthentication(coreConfig, envVars);
+    await configureRightsManagement(coreConfig, envVars);
+    await configureSynchronisedStorage(coreConfig, envVars);
+    await configureFederatedCatalogue(coreConfig, envVars);
+    await configureDataSpaceConnector(coreConfig, envVars);
     return coreConfig;
 }
 /**
@@ -590,7 +657,7 @@ function buildEngineConfiguration(envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureEntityStorage(coreConfig, envVars) {
+async function configureEntityStorage(coreConfig, envVars) {
     coreConfig.types ??= {};
     coreConfig.types.entityStorageConnector ??= [];
     const entityStorageConnectorTypes = envVars.entityStorageConnectorType?.split(",") ?? [];
@@ -614,9 +681,10 @@ function configureEntityStorage(coreConfig, envVars) {
             options: {
                 config: {
                     region: envVars.awsDynamodbRegion ?? "",
-                    accessKeyId: envVars.awsDynamodbAccessKeyId ?? "",
-                    secretAccessKey: envVars.awsDynamodbSecretAccessKey ?? "",
-                    endpoint: envVars.awsDynamodbEndpoint ?? ""
+                    authMode: envVars.awsDynamodbAuthMode,
+                    accessKeyId: envVars.awsDynamodbAccessKeyId,
+                    secretAccessKey: envVars.awsDynamodbSecretAccessKey,
+                    endpoint: envVars.awsDynamodbEndpoint
                 },
                 tablePrefix: envVars.entityStorageTablePrefix
             }
@@ -734,7 +802,7 @@ function configureEntityStorage(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureBlobStorage(coreConfig, envVars) {
+async function configureBlobStorage(coreConfig, envVars) {
     coreConfig.types.blobStorageConnector ??= [];
     const blobStorageConnectorTypes = envVars.blobStorageConnectorType?.split(",") ?? [];
     if (blobStorageConnectorTypes.includes(BlobStorageConnectorType.Memory)) {
@@ -773,9 +841,10 @@ function configureBlobStorage(coreConfig, envVars) {
                 config: {
                     region: envVars.awsS3Region ?? "",
                     bucketName: envVars.awsS3BucketName ?? "",
-                    accessKeyId: envVars.awsS3AccessKeyId ?? "",
-                    secretAccessKey: envVars.awsS3SecretAccessKey ?? "",
-                    endpoint: envVars.awsS3Endpoint ?? ""
+                    authMode: envVars.awsS3AuthMode,
+                    accessKeyId: envVars.awsS3AccessKeyId,
+                    secretAccessKey: envVars.awsS3SecretAccessKey,
+                    endpoint: envVars.awsS3Endpoint
                 },
                 storagePrefix: envVars.blobStoragePrefix
             }
@@ -832,7 +901,7 @@ function configureBlobStorage(coreConfig, envVars) {
             options: {
                 config: {
                     vaultKeyId: (envVars.blobStorageEnableEncryption ?? false)
-                        ? envVars.blobStorageEncryptionKeyId
+                        ? (envVars.blobStorageEncryptionKeyId ?? BLOB_STORAGE_ENCRYPTION_KEY_ID)
                         : undefined
                 }
             }
@@ -844,7 +913,7 @@ function configureBlobStorage(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureLogging(coreConfig, envVars) {
+async function configureLogging(coreConfig, envVars) {
     coreConfig.types.loggingConnector ??= [];
     const loggingConnectors = (envVars.loggingConnector ?? "").split(",");
     for (const loggingConnector of loggingConnectors) {
@@ -886,7 +955,7 @@ function configureLogging(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureVault(coreConfig, envVars) {
+async function configureVault(coreConfig, envVars) {
     coreConfig.types.vaultConnector ??= [];
     if (envVars.vaultConnector === VaultConnectorType.EntityStorage) {
         coreConfig.types.vaultConnector.push({
@@ -910,7 +979,7 @@ function configureVault(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureBackgroundTask(coreConfig, envVars) {
+async function configureBackgroundTask(coreConfig, envVars) {
     coreConfig.types.backgroundTaskConnector ??= [];
     if (envVars.backgroundTaskConnector === BackgroundTaskConnectorType.EntityStorage) {
         coreConfig.types.backgroundTaskConnector.push({
@@ -923,7 +992,7 @@ function configureBackgroundTask(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureEventBus(coreConfig, envVars) {
+async function configureEventBus(coreConfig, envVars) {
     coreConfig.types.eventBusConnector ??= [];
     if (envVars.eventBusConnector === EventBusConnectorType.Local) {
         coreConfig.types.eventBusConnector.push({
@@ -940,7 +1009,7 @@ function configureEventBus(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureTelemetry(coreConfig, envVars) {
+async function configureTelemetry(coreConfig, envVars) {
     coreConfig.types.telemetryConnector ??= [];
     if (envVars.telemetryConnector === TelemetryConnectorType.EntityStorage) {
         coreConfig.types.telemetryConnector.push({
@@ -957,71 +1026,84 @@ function configureTelemetry(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureMessaging(coreConfig, envVars) {
-    coreConfig.types.messagingEmailConnector ??= [];
-    coreConfig.types.messagingSmsConnector ??= [];
-    coreConfig.types.messagingPushNotificationConnector ??= [];
-    if (envVars.messagingEmailConnector === MessagingEmailConnectorType.EntityStorage) {
-        coreConfig.types.messagingEmailConnector.push({
-            type: MessagingEmailConnectorType.EntityStorage
-        });
-    }
-    else if (envVars.messagingEmailConnector === MessagingEmailConnectorType.Aws) {
-        coreConfig.types.messagingEmailConnector.push({
-            type: MessagingEmailConnectorType.Aws,
-            options: {
-                config: {
-                    region: envVars.awsS3Region ?? "",
-                    accessKeyId: envVars.awsS3AccessKeyId ?? "",
-                    secretAccessKey: envVars.awsS3SecretAccessKey ?? "",
-                    endpoint: envVars.awsS3Endpoint ?? ""
+async function configureMessaging(coreConfig, envVars) {
+    if (Coerce.boolean(envVars.messagingEnabled) ?? false) {
+        coreConfig.types.messagingEmailConnector ??= [];
+        coreConfig.types.messagingSmsConnector ??= [];
+        coreConfig.types.messagingPushNotificationConnector ??= [];
+        if (envVars.messagingEmailConnector === MessagingEmailConnectorType.EntityStorage) {
+            coreConfig.types.messagingEmailConnector.push({
+                type: MessagingEmailConnectorType.EntityStorage
+            });
+        }
+        else if (envVars.messagingEmailConnector === MessagingEmailConnectorType.Aws) {
+            coreConfig.types.messagingEmailConnector.push({
+                type: MessagingEmailConnectorType.Aws,
+                options: {
+                    config: {
+                        region: envVars.awsSesRegion ?? "",
+                        authMode: envVars.awsSesAuthMode,
+                        accessKeyId: envVars.awsSesAccessKeyId,
+                        secretAccessKey: envVars.awsSesSecretAccessKey,
+                        endpoint: envVars.awsSesEndpoint
+                    }
                 }
-            }
-        });
-    }
-    if (envVars.messagingSmsConnector === MessagingSmsConnectorType.EntityStorage) {
-        coreConfig.types.messagingSmsConnector.push({
-            type: MessagingSmsConnectorType.EntityStorage
-        });
-    }
-    else if (envVars.messagingSmsConnector === MessagingSmsConnectorType.Aws) {
-        coreConfig.types.messagingSmsConnector.push({
-            type: MessagingSmsConnectorType.Aws,
-            options: {
-                config: {
-                    region: envVars.awsS3Region ?? "",
-                    accessKeyId: envVars.awsS3AccessKeyId ?? "",
-                    secretAccessKey: envVars.awsS3SecretAccessKey ?? "",
-                    endpoint: envVars.awsS3Endpoint ?? ""
+            });
+        }
+        if (envVars.messagingSmsConnector === MessagingSmsConnectorType.EntityStorage) {
+            coreConfig.types.messagingSmsConnector.push({
+                type: MessagingSmsConnectorType.EntityStorage
+            });
+        }
+        else if (envVars.messagingSmsConnector === MessagingSmsConnectorType.Aws) {
+            coreConfig.types.messagingSmsConnector.push({
+                type: MessagingSmsConnectorType.Aws,
+                options: {
+                    config: {
+                        region: envVars.awsSesRegion ?? "",
+                        authMode: envVars.awsSesAuthMode,
+                        accessKeyId: envVars.awsSesAccessKeyId,
+                        secretAccessKey: envVars.awsSesSecretAccessKey,
+                        endpoint: envVars.awsSesEndpoint
+                    }
                 }
-            }
-        });
-    }
-    if (envVars.messagingPushNotificationConnector ===
-        MessagingPushNotificationConnectorType.EntityStorage) {
-        coreConfig.types.messagingPushNotificationConnector.push({
-            type: MessagingPushNotificationConnectorType.EntityStorage
-        });
-    }
-    else if (envVars.messagingPushNotificationConnector === MessagingPushNotificationConnectorType.Aws) {
-        coreConfig.types.messagingPushNotificationConnector.push({
-            type: MessagingPushNotificationConnectorType.Aws,
+            });
+        }
+        if (envVars.messagingPushNotificationConnector ===
+            MessagingPushNotificationConnectorType.EntityStorage) {
+            coreConfig.types.messagingPushNotificationConnector.push({
+                type: MessagingPushNotificationConnectorType.EntityStorage
+            });
+        }
+        else if (envVars.messagingPushNotificationConnector === MessagingPushNotificationConnectorType.Aws) {
+            coreConfig.types.messagingPushNotificationConnector.push({
+                type: MessagingPushNotificationConnectorType.Aws,
+                options: {
+                    config: {
+                        region: envVars.awsSesRegion ?? "",
+                        authMode: envVars.awsSesAuthMode,
+                        accessKeyId: envVars.awsSesAccessKeyId,
+                        secretAccessKey: envVars.awsSesSecretAccessKey,
+                        endpoint: envVars.awsSesEndpoint,
+                        applicationsSettings: Is.json(envVars.awsMessagingPushNotificationApplications)
+                            ? JSON.parse(envVars.awsMessagingPushNotificationApplications)
+                            : []
+                    }
+                }
+            });
+        }
+        const templates = Is.arrayValue(envVars.messagingTemplates)
+            ? envVars.messagingTemplates
+            : undefined;
+        coreConfig.types.messagingAdminComponent ??= [];
+        coreConfig.types.messagingAdminComponent.push({
+            type: MessagingAdminComponentType.Service,
             options: {
                 config: {
-                    region: envVars.awsS3Region ?? "",
-                    accessKeyId: envVars.awsS3AccessKeyId ?? "",
-                    secretAccessKey: envVars.awsS3SecretAccessKey ?? "",
-                    endpoint: envVars.awsS3Endpoint ?? "",
-                    applicationsSettings: Is.json(envVars.awsMessagingPushNotificationApplications)
-                        ? JSON.parse(envVars.awsMessagingPushNotificationApplications)
-                        : []
+                    templates
                 }
             }
         });
-    }
-    if (coreConfig.types.messagingEmailConnector.length > 0 ||
-        coreConfig.types.messagingSmsConnector.length > 0 ||
-        coreConfig.types.messagingPushNotificationConnector.length > 0) {
         coreConfig.types.messagingComponent ??= [];
         coreConfig.types.messagingComponent.push({ type: MessagingComponentType.Service });
     }
@@ -1031,7 +1113,7 @@ function configureMessaging(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureFaucet(coreConfig, envVars) {
+async function configureFaucet(coreConfig, envVars) {
     coreConfig.types.faucetConnector ??= [];
     if (envVars.faucetConnector === FaucetConnectorType.EntityStorage) {
         coreConfig.types.faucetConnector.push({
@@ -1057,7 +1139,7 @@ function configureFaucet(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureWallet(coreConfig, envVars) {
+async function configureWallet(coreConfig, envVars) {
     coreConfig.types.walletConnector ??= [];
     if (envVars.walletConnector === WalletConnectorType.EntityStorage) {
         coreConfig.types.walletConnector.push({
@@ -1079,7 +1161,7 @@ function configureWallet(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureNft(coreConfig, envVars) {
+async function configureNft(coreConfig, envVars) {
     coreConfig.types.nftConnector ??= [];
     if (envVars.nftConnector === NftConnectorType.EntityStorage) {
         coreConfig.types.nftConnector.push({
@@ -1105,7 +1187,7 @@ function configureNft(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureVerifiableStorage(coreConfig, envVars) {
+async function configureVerifiableStorage(coreConfig, envVars) {
     coreConfig.types.verifiableStorageConnector ??= [];
     if (envVars.verifiableStorageConnector === VerifiableStorageConnectorType.EntityStorage) {
         coreConfig.types.verifiableStorageConnector.push({
@@ -1131,7 +1213,7 @@ function configureVerifiableStorage(coreConfig, envVars) {
             type: ImmutableProofComponentType.Service,
             options: {
                 config: {
-                    verificationMethodId: envVars.immutableProofVerificationMethodId
+                    verificationMethodId: envVars.immutableProofVerificationMethodId ?? IMMUTABLE_PROOF_VERIFICATION_METHOD_ID
                 }
             }
         });
@@ -1142,7 +1224,7 @@ function configureVerifiableStorage(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureIdentity(coreConfig, envVars) {
+async function configureIdentity(coreConfig, envVars) {
     coreConfig.types.identityConnector ??= [];
     if (envVars.identityConnector === IdentityConnectorType.EntityStorage) {
         coreConfig.types.identityConnector.push({
@@ -1168,7 +1250,7 @@ function configureIdentity(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureIdentityResolver(coreConfig, envVars) {
+async function configureIdentityResolver(coreConfig, envVars) {
     coreConfig.types.identityResolverConnector ??= [];
     if (envVars.identityResolverConnector === IdentityResolverConnectorType.EntityStorage) {
         coreConfig.types.identityResolverConnector.push({
@@ -1206,7 +1288,7 @@ function configureIdentityResolver(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureIdentityProfile(coreConfig, envVars) {
+async function configureIdentityProfile(coreConfig, envVars) {
     coreConfig.types.identityProfileConnector ??= [];
     if (envVars.identityProfileConnector === IdentityConnectorType.EntityStorage) {
         coreConfig.types.identityProfileConnector.push({
@@ -1223,7 +1305,7 @@ function configureIdentityProfile(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureAttestation(coreConfig, envVars) {
+async function configureAttestation(coreConfig, envVars) {
     coreConfig.types.attestationConnector ??= [];
     if (envVars.attestationConnector === AttestationConnectorType.Nft) {
         coreConfig.types.attestationConnector.push({
@@ -1236,7 +1318,7 @@ function configureAttestation(coreConfig, envVars) {
             type: AttestationComponentType.Service,
             options: {
                 config: {
-                    verificationMethodId: envVars.attestationVerificationMethodId
+                    verificationMethodId: envVars.attestationVerificationMethodId ?? ATTESTATION_VERIFICATION_METHOD_ID
                 }
             }
         });
@@ -1247,7 +1329,7 @@ function configureAttestation(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureAuditableItemGraph(coreConfig, envVars) {
+async function configureAuditableItemGraph(coreConfig, envVars) {
     if (Coerce.boolean(envVars.auditableItemGraphEnabled) ?? false) {
         coreConfig.types.auditableItemGraphComponent ??= [];
         coreConfig.types.auditableItemGraphComponent.push({
@@ -1260,7 +1342,7 @@ function configureAuditableItemGraph(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureAuditableItemStream(coreConfig, envVars) {
+async function configureAuditableItemStream(coreConfig, envVars) {
     if (Coerce.boolean(envVars.auditableItemStreamEnabled) ?? false) {
         coreConfig.types.auditableItemStreamComponent ??= [];
         coreConfig.types.auditableItemStreamComponent.push({
@@ -1273,7 +1355,7 @@ function configureAuditableItemStream(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureDataProcessing(coreConfig, envVars) {
+async function configureDataProcessing(coreConfig, envVars) {
     if (Coerce.boolean(envVars.dataProcessingEnabled) ?? false) {
         coreConfig.types.dataProcessingComponent ??= [];
         coreConfig.types.dataProcessingComponent.push({ type: DataProcessingComponentType.Service });
@@ -1307,7 +1389,7 @@ function configureDataProcessing(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureDocumentManagement(coreConfig, envVars) {
+async function configureDocumentManagement(coreConfig, envVars) {
     if (Coerce.boolean(envVars.documentManagementEnabled) ?? false) {
         coreConfig.types.documentManagementComponent ??= [];
         coreConfig.types.documentManagementComponent.push({
@@ -1320,14 +1402,16 @@ function configureDocumentManagement(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureVerifiableCredentialAuthentication(coreConfig, envVars) {
+async function configureVerifiableCredentialAuthentication(coreConfig, envVars) {
     if (Coerce.boolean(envVars.vcAuthenticationEnabled) ?? false) {
         // Can only perform VC authentication if identity component is available
         coreConfig.types.authenticationGeneratorComponent ??= [];
         coreConfig.types.authenticationGeneratorComponent.push({
             type: AuthenticationGeneratorComponentType.VerifiableCredential,
             options: {
-                config: { verificationMethodId: envVars.vcAuthenticationVerificationMethodId ?? "" }
+                config: {
+                    verificationMethodId: envVars.vcAuthenticationVerificationMethodId ?? VC_AUTHENTICATION_VERIFICATION_METHOD_ID
+                }
             },
             features: ["verifiable-credential"]
         });
@@ -1338,7 +1422,7 @@ function configureVerifiableCredentialAuthentication(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureRightsManagement(coreConfig, envVars) {
+async function configureRightsManagement(coreConfig, envVars) {
     if (Coerce.boolean(envVars.rightsManagementEnabled) ?? false) {
         coreConfig.types.rightsManagementPapComponent ??= [];
         coreConfig.types.rightsManagementPapComponent.push({
@@ -1427,7 +1511,7 @@ function configureRightsManagement(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureTaskScheduler(coreConfig, envVars) {
+async function configureTaskScheduler(coreConfig, envVars) {
     if (Coerce.boolean(envVars.taskSchedulerEnabled) ?? false) {
         coreConfig.types.taskSchedulerComponent ??= [];
         coreConfig.types.taskSchedulerComponent.push({
@@ -1440,7 +1524,7 @@ function configureTaskScheduler(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureSynchronisedStorage(coreConfig, envVars) {
+async function configureSynchronisedStorage(coreConfig, envVars) {
     if (Is.arrayValue(coreConfig.types.identityResolverComponent) &&
         (Coerce.boolean(envVars.synchronisedStorageEnabled) ?? false)) {
         // Check if the config provides a custom verifiable storage key id
@@ -1455,7 +1539,8 @@ function configureSynchronisedStorage(coreConfig, envVars) {
             options: {
                 config: {
                     verifiableStorageKeyId: verifiableStorageKeyId ?? "",
-                    blobStorageEncryptionKeyId: envVars.synchronisedStorageBlobStorageEncryptionKeyId,
+                    blobStorageEncryptionKeyId: envVars.synchronisedStorageBlobStorageEncryptionKeyId ??
+                        SYNCHRONISED_STORAGE_BLOB_STORAGE_ENCRYPTION_KEY_ID,
                     entityUpdateIntervalMinutes: Coerce.number(envVars.synchronisedStorageEntityUpdateIntervalMinutes),
                     consolidationIntervalMinutes: Coerce.number(envVars.synchronisedStorageConsolidationIntervalMinutes),
                     consolidationBatchSize: Coerce.number(envVars.synchronisedStorageConsolidationBatchSize),
@@ -1482,7 +1567,7 @@ function configureSynchronisedStorage(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureFederatedCatalogue(coreConfig, envVars) {
+async function configureFederatedCatalogue(coreConfig, envVars) {
     if (Coerce.boolean(envVars.federatedCatalogueEnabled) ?? false) {
         coreConfig.types.federatedCatalogueComponent ??= [];
         coreConfig.types.federatedCatalogueComponent.push({
@@ -1501,16 +1586,15 @@ function configureFederatedCatalogue(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureDataSpaceConnector(coreConfig, envVars) {
+async function configureDataSpaceConnector(coreConfig, envVars) {
     if (Coerce.boolean(envVars.dataSpaceConnectorEnabled) ?? false) {
         coreConfig.types.dataSpaceConnectorComponent ??= [];
         coreConfig.types.dataSpaceConnectorComponent.push({
             type: DataSpaceConnectorComponentType.Service,
             options: {
                 config: {
-                    dataSpaceConnectorAppDescriptors: Is.arrayValue(envVars.dataSpaceConnectorApps)
-                        ? envVars.dataSpaceConnectorApps
-                        : undefined
+                    retainActivityLogsFor: Coerce.number(envVars.dataSpaceConnectorRetainActivityLogsFor),
+                    activityLogsCleanUpInterval: Coerce.number(envVars.dataSpaceConnectorActivityLogsCleanUpInterval)
                 }
             }
         });
@@ -1521,7 +1605,7 @@ function configureDataSpaceConnector(coreConfig, envVars) {
  * @param coreConfig The core config.
  * @param envVars The environment variables.
  */
-function configureDlt(coreConfig, envVars) {
+async function configureDlt(coreConfig, envVars) {
     // Create centralized DLT configuration for IOTA if essential IOTA variables are set
     if (Is.stringValue(envVars.iotaNodeEndpoint) && Is.stringValue(envVars.iotaNetwork)) {
         coreConfig.types.dltConfig ??= [];
@@ -1556,10 +1640,9 @@ function configureDlt(coreConfig, envVars) {
  * @param serverInfo The server information.
  * @param openApiSpecPath The path to the open api spec.
  * @param favIconPath The path to the favicon.
- * @returns The the config for the core and the server.
+ * @returns The config for the core and the server.
  */
-function buildEngineServerConfiguration(envVars, coreEngineConfig, serverInfo, openApiSpecPath, favIconPath) {
-    envVars.authSigningKeyId ??= "auth-signing";
+async function buildEngineServerConfiguration(envVars, coreEngineConfig, serverInfo, openApiSpecPath, favIconPath) {
     const webServerOptions = {
         port: Coerce.number(envVars.port),
         host: Coerce.string(envVars.host),
@@ -1675,7 +1758,7 @@ function buildEngineServerConfiguration(envVars, coreEngineConfig, serverInfo, o
             type: AuthenticationComponentType.EntityStorage,
             options: {
                 config: {
-                    signingKeyName: envVars.authSigningKeyId
+                    signingKeyName: envVars.authSigningKeyId ?? AUTH_SIGNING_KEY_ID
                 }
             }
         });
@@ -1683,7 +1766,7 @@ function buildEngineServerConfiguration(envVars, coreEngineConfig, serverInfo, o
             type: RestRouteProcessorType.AuthHeader,
             options: {
                 config: {
-                    signingKeyName: envVars.authSigningKeyId
+                    signingKeyName: envVars.authSigningKeyId ?? AUTH_SIGNING_KEY_ID
                 }
             }
         });
@@ -1691,7 +1774,7 @@ function buildEngineServerConfiguration(envVars, coreEngineConfig, serverInfo, o
             type: SocketRouteProcessorType.AuthHeader,
             options: {
                 config: {
-                    signingKeyName: envVars.authSigningKeyId
+                    signingKeyName: envVars.authSigningKeyId ?? AUTH_SIGNING_KEY_ID
                 }
             }
         });
@@ -1709,17 +1792,111 @@ function buildEngineServerConfiguration(envVars, coreEngineConfig, serverInfo, o
     return serverConfig;
 }
 
+// Copyright 2024 IOTA Stiftung.
+// SPDX-License-Identifier: Apache-2.0.
+/* eslint-disable no-console */
+/**
+ * Handles the configuration of the extensions.
+ * @param envVars The environment variables for the node.
+ * @param nodeEngineConfig The node engine config.
+ * @returns The config for the core and the server.
+ */
+async function extensionsConfiguration(envVars, nodeEngineConfig) {
+    if (Is.stringValue(envVars.extensions)) {
+        const extensions = envVars.extensions.split(",");
+        for (const extension of extensions) {
+            let initialiseConfigMethod;
+            try {
+                console.info(`Loading extension "${extension}"`);
+                initialiseConfigMethod = await ModuleHelper.getModuleMethod(extension, "extensionInitialise");
+            }
+            catch (err) {
+                console.error(`Failed to load extension "${extension}":`, err);
+            }
+            if (Is.function(initialiseConfigMethod)) {
+                await initialiseConfigMethod(envVars, nodeEngineConfig);
+            }
+        }
+    }
+    return nodeEngineConfig;
+}
+/**
+ * Handles the initialisation of the extensions when the engine has been constructed.
+ * @param envVars The environment variables for the node.
+ * @param engineCore The engine core instance.
+ * @returns Nothing.
+ */
+async function extensionsInitialiseEngine(envVars, engineCore) {
+    if (Is.stringValue(envVars.extensions)) {
+        const extensions = envVars.extensions.split(",");
+        for (const extension of extensions) {
+            let initialiseEngineMethod;
+            try {
+                initialiseEngineMethod =
+                    await ModuleHelper.getModuleMethod(extension, "extensionInitialiseEngine");
+            }
+            catch { }
+            if (Is.function(initialiseEngineMethod)) {
+                await initialiseEngineMethod(engineCore);
+            }
+        }
+    }
+}
+/**
+ * Handles the initialisation of the extensions when the engine server has been constructed.
+ * @param envVars The environment variables for the node.
+ * @param engineCore The engine core instance.
+ * @param engineServer The engine server instance.
+ * @returns Nothing.
+ */
+async function extensionsInitialiseEngineServer(envVars, engineCore, engineServer) {
+    if (Is.stringValue(envVars.extensions)) {
+        const extensions = envVars.extensions.split(",");
+        for (const extension of extensions) {
+            let initialiseEngineServerMethod;
+            try {
+                initialiseEngineServerMethod =
+                    await ModuleHelper.getModuleMethod(extension, "extensionInitialiseEngineServer");
+            }
+            catch { }
+            if (Is.function(initialiseEngineServerMethod)) {
+                await initialiseEngineServerMethod(engineCore, engineServer);
+            }
+        }
+    }
+}
+/**
+ * Handles the shutdown of the extensions.
+ * @param envVars The environment variables for the node.
+ * @returns Nothing.
+ */
+async function shutdownExtensions(envVars) {
+    if (Is.stringValue(envVars.extensions)) {
+        const extensions = envVars.extensions.split(",");
+        for (const extension of extensions) {
+            let shutdownMethod;
+            try {
+                shutdownMethod = await ModuleHelper.getModuleMethod(extension, "extensionShutdown");
+            }
+            catch { }
+            if (Is.function(shutdownMethod)) {
+                await shutdownMethod();
+            }
+        }
+    }
+}
+
 // Copyright 2024 IOTA Stiftung.
 // SPDX-License-Identifier: Apache-2.0.
 /* eslint-disable no-console */
 /**
  * Start the engine server.
  * @param nodeOptions Optional run options for the engine server.
- * @param engineServerConfig The configuration for the engine server.
+ * @param nodeEngineConfig The configuration for the engine server.
  * @param envVars The environment variables.
  * @returns The engine server.
  */
-async function start(nodeOptions, engineServerConfig, envVars) {
+async function start(nodeOptions, nodeEngineConfig, envVars) {
     const entityStorageConnectorType = envVars.entityStorageConnectorType?.split(",") ?? [];
     const blobStorageConnectorType = envVars.blobStorageConnectorType?.split(",") ?? [];
     // If the blob storage or entity storage is configured with file connectors
@@ -1734,7 +1911,7 @@ async function start(nodeOptions, engineServerConfig, envVars) {
     }
     // Create the engine instance using file state storage unless one is configured in options
     const engine = new Engine({
-        config: engineServerConfig,
+        config: nodeEngineConfig,
         stateStorage: nodeOptions?.stateStorage ?? new FileStateStorage(envVars.stateFilename ?? ""),
         customBootstrap: async (core, engineContext) => bootstrap(core, engineContext, envVars)
     });
@@ -1745,11 +1922,13 @@ async function start(nodeOptions, engineServerConfig, envVars) {
         console.info("Extending Engine");
         await nodeOptions.extendEngine(engine);
     }
+    await extensionsInitialiseEngine(envVars, engine);
     // Extend the engine server.
     if (Is.function(nodeOptions?.extendEngineServer)) {
         console.info("Extending Engine Server");
         await nodeOptions?.extendEngineServer(server);
     }
+    await extensionsInitialiseEngineServer(envVars, engine, server);
     // Need to register the engine with the factory so that background tasks
     // can clone it to spawn new instances.
     EngineCoreFactory.register("engine", () => engine);
@@ -1758,7 +1937,11 @@ async function start(nodeOptions, engineServerConfig, envVars) {
     if (canContinue) {
         return {
             engine,
-            server
+            server,
+            shutdown: async () => {
+                await server.stop();
+                await shutdownExtensions(envVars);
+            }
         };
     }
 }
@@ -1776,7 +1959,7 @@ async function run(nodeOptions) {
         nodeOptions ??= {};
         const serverInfo = {
             name: nodeOptions?.serverName ?? "TWIN Node Server",
-            version: nodeOptions?.serverVersion ?? "0.0.2-next.15" // x-release-please-version
+            version: nodeOptions?.serverVersion ?? "0.0.2-next.17" // x-release-please-version
         };
         console.log(`\u001B[4m🌩️  ${serverInfo.name} v${serverInfo.version}\u001B[24m\n`);
         if (!Is.stringValue(nodeOptions?.executionDirectory)) {
@@ -1807,13 +1990,16 @@ async function run(nodeOptions) {
         nodeOptions.envPrefix ??= "TWIN_NODE_";
         console.info("Environment Prefix:", nodeOptions.envPrefix);
         overrideModuleImport(nodeOptions.executionDirectory ?? "");
-        const { engineServerConfig, nodeEnvVars: envVars } = await buildConfiguration(process.env, nodeOptions, serverInfo);
+        const { nodeEngineConfig, nodeEnvVars: envVars } = await buildConfiguration(
+        // This is the only location in the code base that should access process.env directly
+        // eslint-disable-next-line no-restricted-syntax
+        process.env, nodeOptions, serverInfo);
         console.info();
-        const startResult = await start(nodeOptions, engineServerConfig, envVars);
+        const startResult = await start(nodeOptions, nodeEngineConfig, envVars);
         if (!Is.empty(startResult)) {
             for (const signal of ["SIGHUP", "SIGINT", "SIGTERM"]) {
                 process.on(signal, async () => {
-                    await startResult.server.stop();
+                    await startResult.shutdown();
                 });
             }
         }
@@ -1879,8 +2065,8 @@ async function buildConfiguration(processEnv, options, serverInfo) {
         await options.extendEnvVars(envVars);
     }
     // Build the engine configuration from the environment variables.
-    const coreConfig = buildEngineConfiguration(envVars);
-    const engineServerConfig = buildEngineServerConfiguration(envVars, coreConfig, serverInfo, options?.openApiSpecFile, options?.favIconFile);
+    const coreConfig = await buildEngineConfiguration(envVars);
+    const engineServerConfig = await buildEngineServerConfiguration(envVars, coreConfig, serverInfo, options?.openApiSpecFile, options?.favIconFile);
     // Merge any custom configuration provided in the options.
     if (Is.arrayValue(options?.configFilenames)) {
         for (const configFile of options.configFilenames) {
@@ -1897,9 +2083,10 @@ async function buildConfiguration(processEnv, options, serverInfo) {
     // Merge any custom configuration provided in the options.
     if (Is.function(options?.extendConfig)) {
         console.info("Extending Configuration");
-        await options.extendConfig(engineServerConfig);
+        await options.extendConfig(envVars, engineServerConfig);
     }
-    return { engineServerConfig, nodeEnvVars: envVars };
+    const nodeEngineConfig = await extensionsConfiguration(envVars, engineServerConfig);
+    return { nodeEngineConfig, nodeEnvVars: envVars };
 }
 /**
  * Override module imports to use local files where possible.
@@ -1936,4 +2123,4 @@ function overrideModuleImport(executionDirectory) {
     });
 }
 
-export { NodeFeatures, bootstrap, bootstrapAuth, bootstrapBlobEncryption, bootstrapImmutableProofMethod, bootstrapNodeIdentity, bootstrapNodeUser, bootstrapSynchronisedStorage, buildConfiguration, buildEngineConfiguration, buildEngineServerConfiguration, fileExists, getExecutionDirectory, getFeatures, initialiseLocales, loadJsonFile, loadTextFile, overrideModuleImport, run, start };
+export { ATTESTATION_VERIFICATION_METHOD_ID, AUTH_SIGNING_KEY_ID, BLOB_STORAGE_ENCRYPTION_KEY_ID, IMMUTABLE_PROOF_VERIFICATION_METHOD_ID, NodeFeatures, SYNCHRONISED_STORAGE_BLOB_STORAGE_ENCRYPTION_KEY_ID, VC_AUTHENTICATION_VERIFICATION_METHOD_ID, bootstrap, bootstrapAuth, bootstrapBlobEncryption, bootstrapImmutableProofMethod, bootstrapNodeIdentity, bootstrapNodeUser, bootstrapSynchronisedStorage, buildConfiguration, buildEngineConfiguration, buildEngineServerConfiguration, directoryExists, extensionsConfiguration, extensionsInitialiseEngine, extensionsInitialiseEngineServer, fileExists, getExecutionDirectory, getFeatures, getFiles, getSubFolders, initialiseLocales, loadJsonFile, loadTextFile, overrideModuleImport, run, shutdownExtensions, start };