@twin.org/node-core 0.0.2-next.16 → 0.0.2-next.18

package/dist/cjs/index.cjs

@@ -11,6 +11,7 @@ var vaultModels = require('@twin.org/vault-models');
 var walletModels = require('@twin.org/wallet-models');
 var promises = require('node:fs/promises');
 var path = require('node:path');
+var cliCore = require('@twin.org/cli-core');
 var rightsManagementRestClient = require('@twin.org/rights-management-rest-client');
 var engineServer = require('@twin.org/engine-server');
 var modules = require('@twin.org/modules');
@@ -38,6 +39,15 @@ function _interopNamespaceDefault(e) {
 
 var dotenv__namespace = /*#__PURE__*/_interopNamespaceDefault(dotenv);
 
+// Copyright 2024 IOTA Stiftung.
+// SPDX-License-Identifier: Apache-2.0.
+const ATTESTATION_VERIFICATION_METHOD_ID = "attestation-assertion";
+const IMMUTABLE_PROOF_VERIFICATION_METHOD_ID = "immutable-proof-assertion";
+const BLOB_STORAGE_ENCRYPTION_KEY_ID = "blob-encryption";
+const SYNCHRONISED_STORAGE_BLOB_STORAGE_ENCRYPTION_KEY_ID = "synchronised-storage-blob-encryption";
+const VC_AUTHENTICATION_VERIFICATION_METHOD_ID = "node-authentication-assertion";
+const AUTH_SIGNING_KEY_ID = "auth-signing";
+
 // Copyright 2024 IOTA Stiftung.
 // SPDX-License-Identifier: Apache-2.0.
 /**
@@ -61,20 +71,19 @@ const NodeFeatures = {
 
 // Copyright 2024 IOTA Stiftung.
 // SPDX-License-Identifier: Apache-2.0.
-/* eslint-disable no-console */
 /**
  * Initialise the locales for the application.
  * @param localesDirectory The directory containing the locales.
  */
 async function initialiseLocales(localesDirectory) {
     const localesFile = path.resolve(path.join(localesDirectory, "en.json"));
-    console.info("Locales File:", localesFile);
+    cliCore.CLIDisplay.value("Locales File", localesFile);
     if (await fileExists(localesFile)) {
         const enLangContent = await promises.readFile(localesFile, "utf8");
         core.I18n.addDictionary("en", JSON.parse(enLangContent));
     }
     else {
-        console.warn(`Locales file not found: ${localesFile}`);
+        cliCore.CLIDisplay.error(`Locales file not found: ${localesFile}`);
     }
 }
 /**
@@ -209,10 +218,16 @@ async function bootstrap(engineCore, context, envVars) {
     await bootstrapNodeUser(engineCore, context, envVars, features);
     await bootstrapAuth(engineCore, context, envVars);
     await bootstrapBlobEncryption(engineCore, context, envVars);
-    await addVerificationMethod(engineCore, context, "attestation", envVars.attestationVerificationMethodId);
-    await addVerificationMethod(engineCore, context, "immutable proof", envVars.immutableProofVerificationMethodId);
+    const defaultAttestationConnectorType = engineCore.getRegisteredInstanceTypeOptional("attestationConnector");
+    if (!core.Is.empty(defaultAttestationConnectorType)) {
+        await addVerificationMethod(engineCore, context, "attestation", envVars.attestationVerificationMethodId ?? ATTESTATION_VERIFICATION_METHOD_ID);
+    }
+    const defaultImmutableProofComponentType = engineCore.getRegisteredInstanceTypeOptional("immutableProofComponent");
+    if (!core.Is.empty(defaultImmutableProofComponentType)) {
+        await addVerificationMethod(engineCore, context, "immutable proof", envVars.immutableProofVerificationMethodId ?? IMMUTABLE_PROOF_VERIFICATION_METHOD_ID);
+    }
     if (core.Coerce.boolean(envVars.vcAuthenticationEnabled) ?? false) {
-        await addVerificationMethod(engineCore, context, "verifiable credential authentication", envVars.vcAuthenticationVerificationMethodId);
+        await addVerificationMethod(engineCore, context, "verifiable credential authentication", envVars.vcAuthenticationVerificationMethodId ?? VC_AUTHENTICATION_VERIFICATION_METHOD_ID);
     }
     await bootstrapSynchronisedStorage(engineCore, context, envVars);
 }
@@ -488,7 +503,7 @@ async function bootstrapBlobEncryption(engineCore, context, envVars, features) {
         // Create a new key for encrypting blobs
         const defaultVaultConnectorType = engineCore.getRegisteredInstanceType("vaultConnector");
         const vaultConnector = vaultModels.VaultConnectorFactory.get(defaultVaultConnectorType);
-        const keyName = `${context.state.nodeIdentity}/${envVars.blobStorageEncryptionKeyId}`;
+        const keyName = `${context.state.nodeIdentity}/${envVars.blobStorageEncryptionKeyId ?? BLOB_STORAGE_ENCRYPTION_KEY_ID}`;
         let existingKey;
         try {
             existingKey = await vaultConnector.getKey(keyName);
@@ -528,7 +543,7 @@ async function bootstrapAuth(engineCore, context, envVars, features) {
         // Create a new JWT signing key and a user login for the node
         const defaultVaultConnectorType = engineCore.getRegisteredInstanceType("vaultConnector");
         const vaultConnector = vaultModels.VaultConnectorFactory.get(defaultVaultConnectorType);
-        const keyName = `${context.state.nodeIdentity}/${envVars.authSigningKeyId}`;
+        const keyName = `${context.state.nodeIdentity}/${envVars.authSigningKeyId ?? AUTH_SIGNING_KEY_ID}`;
         let existingKey;
         try {
             existingKey = await vaultConnector.getKey(keyName);
@@ -553,11 +568,11 @@ async function bootstrapAuth(engineCore, context, envVars, features) {
 async function bootstrapSynchronisedStorage(engineCore, context, envVars, features) {
     if (core.Coerce.boolean(envVars.synchronisedStorageEnabled) ?? false) {
         // If this is a trusted node we need to add the blob encryption key pair
-        if (core.Is.stringValue(envVars.synchronisedStorageBlobStorageEncryptionKeyId) &&
-            core.Is.stringBase64(envVars.synchronisedStorageBlobStorageKey)) {
+        if (core.Is.stringBase64(envVars.synchronisedStorageBlobStorageKey)) {
             const defaultVaultConnectorType = engineCore.getRegisteredInstanceType("vaultConnector");
             const vaultConnector = vaultModels.VaultConnectorFactory.get(defaultVaultConnectorType);
-            const keyName = envVars.synchronisedStorageBlobStorageEncryptionKeyId;
+            const keyName = envVars.synchronisedStorageBlobStorageEncryptionKeyId ??
+                SYNCHRONISED_STORAGE_BLOB_STORAGE_ENCRYPTION_KEY_ID;
             let existingKey;
             try {
                 existingKey = await vaultConnector.getKey(keyName);
@@ -625,12 +640,6 @@ async function buildEngineConfiguration(envVars) {
         envVars.storageFileRoot = path.resolve(envVars.storageFileRoot);
         envVars.stateFilename = path.join(envVars.storageFileRoot, envVars.stateFilename);
     }
-    envVars.attestationVerificationMethodId ??= "attestation-assertion";
-    envVars.immutableProofVerificationMethodId ??= "immutable-proof-assertion";
-    envVars.blobStorageEnableEncryption ??= "false";
-    envVars.blobStorageEncryptionKeyId ??= "blob-encryption";
-    envVars.synchronisedStorageBlobStorageEncryptionKeyId ??= "synchronised-storage-blob-encryption";
-    envVars.vcAuthenticationVerificationMethodId ??= "node-authentication-assertion";
     const coreConfig = {
         debug: core.Coerce.boolean(envVars.debug) ?? false,
         types: {}
@@ -693,9 +702,10 @@ async function configureEntityStorage(coreConfig, envVars) {
             options: {
                 config: {
                     region: envVars.awsDynamodbRegion ?? "",
-                    accessKeyId: envVars.awsDynamodbAccessKeyId ?? "",
-                    secretAccessKey: envVars.awsDynamodbSecretAccessKey ?? "",
-                    endpoint: envVars.awsDynamodbEndpoint ?? ""
+                    authMode: envVars.awsDynamodbAuthMode,
+                    accessKeyId: envVars.awsDynamodbAccessKeyId,
+                    secretAccessKey: envVars.awsDynamodbSecretAccessKey,
+                    endpoint: envVars.awsDynamodbEndpoint
                 },
                 tablePrefix: envVars.entityStorageTablePrefix
             }
@@ -852,9 +862,10 @@ async function configureBlobStorage(coreConfig, envVars) {
                 config: {
                     region: envVars.awsS3Region ?? "",
                     bucketName: envVars.awsS3BucketName ?? "",
-                    accessKeyId: envVars.awsS3AccessKeyId ?? "",
-                    secretAccessKey: envVars.awsS3SecretAccessKey ?? "",
-                    endpoint: envVars.awsS3Endpoint ?? ""
+                    authMode: envVars.awsS3AuthMode,
+                    accessKeyId: envVars.awsS3AccessKeyId,
+                    secretAccessKey: envVars.awsS3SecretAccessKey,
+                    endpoint: envVars.awsS3Endpoint
                 },
                 storagePrefix: envVars.blobStoragePrefix
             }
@@ -911,7 +922,7 @@ async function configureBlobStorage(coreConfig, envVars) {
             options: {
                 config: {
                     vaultKeyId: (envVars.blobStorageEnableEncryption ?? false)
-                        ? envVars.blobStorageEncryptionKeyId
+                        ? (envVars.blobStorageEncryptionKeyId ?? BLOB_STORAGE_ENCRYPTION_KEY_ID)
                         : undefined
                 }
             }
@@ -1051,10 +1062,11 @@ async function configureMessaging(coreConfig, envVars) {
                 type: engineTypes.MessagingEmailConnectorType.Aws,
                 options: {
                     config: {
-                        region: envVars.awsS3Region ?? "",
-                        accessKeyId: envVars.awsS3AccessKeyId ?? "",
-                        secretAccessKey: envVars.awsS3SecretAccessKey ?? "",
-                        endpoint: envVars.awsS3Endpoint ?? ""
+                        region: envVars.awsSesRegion ?? "",
+                        authMode: envVars.awsSesAuthMode,
+                        accessKeyId: envVars.awsSesAccessKeyId,
+                        secretAccessKey: envVars.awsSesSecretAccessKey,
+                        endpoint: envVars.awsSesEndpoint
                     }
                 }
             });
@@ -1069,10 +1081,11 @@ async function configureMessaging(coreConfig, envVars) {
                 type: engineTypes.MessagingSmsConnectorType.Aws,
                 options: {
                     config: {
-                        region: envVars.awsS3Region ?? "",
-                        accessKeyId: envVars.awsS3AccessKeyId ?? "",
-                        secretAccessKey: envVars.awsS3SecretAccessKey ?? "",
-                        endpoint: envVars.awsS3Endpoint ?? ""
+                        region: envVars.awsSesRegion ?? "",
+                        authMode: envVars.awsSesAuthMode,
+                        accessKeyId: envVars.awsSesAccessKeyId,
+                        secretAccessKey: envVars.awsSesSecretAccessKey,
+                        endpoint: envVars.awsSesEndpoint
                     }
                 }
             });
@@ -1089,8 +1102,9 @@ async function configureMessaging(coreConfig, envVars) {
                 options: {
                     config: {
                         region: envVars.awsSesRegion ?? "",
-                        accessKeyId: envVars.awsSesAccessKeyId ?? "",
-                        secretAccessKey: envVars.awsSesSecretAccessKey ?? "",
+                        authMode: envVars.awsSesAuthMode,
+                        accessKeyId: envVars.awsSesAccessKeyId,
+                        secretAccessKey: envVars.awsSesSecretAccessKey,
                         endpoint: envVars.awsSesEndpoint,
                         applicationsSettings: core.Is.json(envVars.awsMessagingPushNotificationApplications)
                             ? JSON.parse(envVars.awsMessagingPushNotificationApplications)
@@ -1220,7 +1234,7 @@ async function configureVerifiableStorage(coreConfig, envVars) {
             type: engineTypes.ImmutableProofComponentType.Service,
             options: {
                 config: {
-                    verificationMethodId: envVars.immutableProofVerificationMethodId
+                    verificationMethodId: envVars.immutableProofVerificationMethodId ?? IMMUTABLE_PROOF_VERIFICATION_METHOD_ID
                 }
             }
         });
@@ -1325,7 +1339,7 @@ async function configureAttestation(coreConfig, envVars) {
             type: engineTypes.AttestationComponentType.Service,
             options: {
                 config: {
-                    verificationMethodId: envVars.attestationVerificationMethodId
+                    verificationMethodId: envVars.attestationVerificationMethodId ?? ATTESTATION_VERIFICATION_METHOD_ID
                 }
             }
         });
@@ -1416,7 +1430,9 @@ async function configureVerifiableCredentialAuthentication(coreConfig, envVars)
         coreConfig.types.authenticationGeneratorComponent.push({
             type: engineTypes.AuthenticationGeneratorComponentType.VerifiableCredential,
             options: {
-                config: { verificationMethodId: envVars.vcAuthenticationVerificationMethodId ?? "" }
+                config: {
+                    verificationMethodId: envVars.vcAuthenticationVerificationMethodId ?? VC_AUTHENTICATION_VERIFICATION_METHOD_ID
+                }
             },
             features: ["verifiable-credential"]
         });
@@ -1544,7 +1560,8 @@ async function configureSynchronisedStorage(coreConfig, envVars) {
             options: {
                 config: {
                     verifiableStorageKeyId: verifiableStorageKeyId ?? "",
-                    blobStorageEncryptionKeyId: envVars.synchronisedStorageBlobStorageEncryptionKeyId,
+                    blobStorageEncryptionKeyId: envVars.synchronisedStorageBlobStorageEncryptionKeyId ??
+                        SYNCHRONISED_STORAGE_BLOB_STORAGE_ENCRYPTION_KEY_ID,
                     entityUpdateIntervalMinutes: core.Coerce.number(envVars.synchronisedStorageEntityUpdateIntervalMinutes),
                     consolidationIntervalMinutes: core.Coerce.number(envVars.synchronisedStorageConsolidationIntervalMinutes),
                     consolidationBatchSize: core.Coerce.number(envVars.synchronisedStorageConsolidationBatchSize),
@@ -1597,9 +1614,8 @@ async function configureDataSpaceConnector(coreConfig, envVars) {
             type: engineTypes.DataSpaceConnectorComponentType.Service,
             options: {
                 config: {
-                    dataSpaceConnectorAppDescriptors: core.Is.arrayValue(envVars.dataSpaceConnectorApps)
-                        ? envVars.dataSpaceConnectorApps
-                        : undefined
+                    retainActivityLogsFor: core.Coerce.number(envVars.dataSpaceConnectorRetainActivityLogsFor),
+                    activityLogsCleanUpInterval: core.Coerce.number(envVars.dataSpaceConnectorActivityLogsCleanUpInterval)
                 }
             }
         });
@@ -1645,10 +1661,9 @@ async function configureDlt(coreConfig, envVars) {
  * @param serverInfo The server information.
  * @param openApiSpecPath The path to the open api spec.
  * @param favIconPath The path to the favicon.
- * @returns The the config for the core and the server.
+ * @returns The config for the core and the server.
  */
 async function buildEngineServerConfiguration(envVars, coreEngineConfig, serverInfo, openApiSpecPath, favIconPath) {
-    envVars.authSigningKeyId ??= "auth-signing";
     const webServerOptions = {
         port: core.Coerce.number(envVars.port),
         host: core.Coerce.string(envVars.host),
@@ -1764,7 +1779,7 @@ async function buildEngineServerConfiguration(envVars, coreEngineConfig, serverI
             type: engineServerTypes.AuthenticationComponentType.EntityStorage,
             options: {
                 config: {
-                    signingKeyName: envVars.authSigningKeyId
+                    signingKeyName: envVars.authSigningKeyId ?? AUTH_SIGNING_KEY_ID
                 }
             }
         });
@@ -1772,7 +1787,7 @@ async function buildEngineServerConfiguration(envVars, coreEngineConfig, serverI
             type: engineServerTypes.RestRouteProcessorType.AuthHeader,
             options: {
                 config: {
-                    signingKeyName: envVars.authSigningKeyId
+                    signingKeyName: envVars.authSigningKeyId ?? AUTH_SIGNING_KEY_ID
                 }
             }
         });
@@ -1780,7 +1795,7 @@ async function buildEngineServerConfiguration(envVars, coreEngineConfig, serverI
             type: engineServerTypes.SocketRouteProcessorType.AuthHeader,
             options: {
                 config: {
-                    signingKeyName: envVars.authSigningKeyId
+                    signingKeyName: envVars.authSigningKeyId ?? AUTH_SIGNING_KEY_ID
                 }
             }
         });
@@ -1800,15 +1815,111 @@ async function buildEngineServerConfiguration(envVars, coreEngineConfig, serverI
 
 // Copyright 2024 IOTA Stiftung.
 // SPDX-License-Identifier: Apache-2.0.
-/* eslint-disable no-console */
+/**
+ * Handles the configuration of the extensions.
+ * @param envVars The environment variables for the node.
+ * @param nodeEngineConfig The node engine config.
+ * @returns The config for the core and the server.
+ */
+async function extensionsConfiguration(envVars, nodeEngineConfig) {
+    if (core.Is.stringValue(envVars.extensions)) {
+        const extensions = envVars.extensions.split(",");
+        for (const extension of extensions) {
+            let initialiseConfigMethod;
+            try {
+                cliCore.CLIDisplay.value(core.I18n.formatMessage("node.extensionLoading"), extension);
+                initialiseConfigMethod = await modules.ModuleHelper.getModuleMethod(extension, "extensionInitialise");
+            }
+            catch (err) {
+                throw new core.GeneralError("node", "extensionLoadingError", { extension }, err);
+            }
+            if (core.Is.function(initialiseConfigMethod)) {
+                await initialiseConfigMethod(envVars, nodeEngineConfig);
+            }
+        }
+    }
+    return nodeEngineConfig;
+}
+/**
+ * Handles the initialisation of the extensions when the engine has been constructed.
+ * @param envVars The environment variables for the node.
+ * @param engineCore The engine core instance.
+ * @returns Nothing.
+ */
+async function extensionsInitialiseEngine(envVars, engineCore) {
+    if (core.Is.stringValue(envVars.extensions)) {
+        const extensions = envVars.extensions.split(",");
+        for (const extension of extensions) {
+            let initialiseEngineMethod;
+            try {
+                engineCore.logInfo(core.I18n.formatMessage("node.extensionInitialisingEngine", { extension }));
+                initialiseEngineMethod =
+                    await modules.ModuleHelper.getModuleMethod(extension, "extensionInitialiseEngine");
+            }
+            catch { }
+            if (core.Is.function(initialiseEngineMethod)) {
+                await initialiseEngineMethod(engineCore);
+            }
+        }
+    }
+}
+/**
+ * Handles the initialisation of the extensions when the engine server has been constructed.
+ * @param envVars The environment variables for the node.
+ * @param engineCore The engine core instance.
+ * @param engineServer The engine server instance.
+ * @returns Nothing.
+ */
+async function extensionsInitialiseEngineServer(envVars, engineCore, engineServer) {
+    if (core.Is.stringValue(envVars.extensions)) {
+        const extensions = envVars.extensions.split(",");
+        for (const extension of extensions) {
+            let initialiseEngineServerMethod;
+            try {
+                engineCore.logInfo(core.I18n.formatMessage("node.extensionInitialisingEngineServer", { extension }));
+                initialiseEngineServerMethod =
+                    await modules.ModuleHelper.getModuleMethod(extension, "extensionInitialiseEngineServer");
+            }
+            catch { }
+            if (core.Is.function(initialiseEngineServerMethod)) {
+                await initialiseEngineServerMethod(engineCore, engineServer);
+            }
+        }
+    }
+}
+/**
+ * Handles the shutdown of the extensions.
+ * @param envVars The environment variables for the node.
+ * @param engineCore The engine core instance.
+ * @returns Nothing.
+ */
+async function shutdownExtensions(envVars, engineCore) {
+    if (core.Is.stringValue(envVars.extensions)) {
+        const extensions = envVars.extensions.split(",");
+        for (const extension of extensions) {
+            let shutdownMethod;
+            try {
+                engineCore.logInfo(core.I18n.formatMessage("node.extensionShutdown", { extension }));
+                shutdownMethod = await modules.ModuleHelper.getModuleMethod(extension, "extensionShutdown");
+            }
+            catch { }
+            if (core.Is.function(shutdownMethod)) {
+                await shutdownMethod();
+            }
+        }
+    }
+}
+
+// Copyright 2024 IOTA Stiftung.
+// SPDX-License-Identifier: Apache-2.0.
 /**
  * Start the engine server.
  * @param nodeOptions Optional run options for the engine server.
- * @param engineServerConfig The configuration for the engine server.
+ * @param nodeEngineConfig The configuration for the engine server.
  * @param envVars The environment variables.
  * @returns The engine server.
  */
-async function start(nodeOptions, engineServerConfig, envVars) {
+async function start(nodeOptions, nodeEngineConfig, envVars) {
     const entityStorageConnectorType = envVars.entityStorageConnectorType?.split(",") ?? [];
     const blobStorageConnectorType = envVars.blobStorageConnectorType?.split(",") ?? [];
     // If the blob storage or entity storage is configured with file connectors
@@ -1823,7 +1934,7 @@ async function start(nodeOptions, engineServerConfig, envVars) {
     }
     // Create the engine instance using file state storage unless one is configured in options
     const engine$1 = new engine.Engine({
-        config: engineServerConfig,
+        config: nodeEngineConfig,
         stateStorage: nodeOptions?.stateStorage ?? new engineCore.FileStateStorage(envVars.stateFilename ?? ""),
         customBootstrap: async (core, engineContext) => bootstrap(core, engineContext, envVars)
     });
@@ -1831,14 +1942,16 @@ async function start(nodeOptions, engineServerConfig, envVars) {
     const server = new engineServer.EngineServer({ engineCore: engine$1 });
     // Extend the engine.
     if (core.Is.function(nodeOptions?.extendEngine)) {
-        console.info("Extending Engine");
+        engine$1.logInfo(core.I18n.formatMessage("node.extendingEngine"));
         await nodeOptions.extendEngine(engine$1);
     }
+    await extensionsInitialiseEngine(envVars, engine$1);
     // Extend the engine server.
     if (core.Is.function(nodeOptions?.extendEngineServer)) {
-        console.info("Extending Engine Server");
+        engine$1.logInfo(core.I18n.formatMessage("node.extendingEngineServer"));
         await nodeOptions?.extendEngineServer(server);
     }
+    await extensionsInitialiseEngineServer(envVars, engine$1, server);
     // Need to register the engine with the factory so that background tasks
     // can clone it to spawn new instances.
     engineModels.EngineCoreFactory.register("engine", () => engine$1);
@@ -1847,14 +1960,17 @@ async function start(nodeOptions, engineServerConfig, envVars) {
     if (canContinue) {
         return {
             engine: engine$1,
-            server
+            server,
+            shutdown: async () => {
+                await server.stop();
+                await shutdownExtensions(envVars, engine$1);
+            }
         };
     }
 }
 
 // Copyright 2024 IOTA Stiftung.
 // SPDX-License-Identifier: Apache-2.0.
-/* eslint-disable no-console */
 /**
  * Run the TWIN Node server.
  * @param nodeOptions Optional configuration options for running the server.
@@ -1865,50 +1981,59 @@ async function run(nodeOptions) {
         nodeOptions ??= {};
         const serverInfo = {
             name: nodeOptions?.serverName ?? "TWIN Node Server",
-            version: nodeOptions?.serverVersion ?? "0.0.2-next.16" // x-release-please-version
+            version: nodeOptions?.serverVersion ?? "0.0.2-next.18" // x-release-please-version
         };
-        console.log(`\u001B[4m🌩️  ${serverInfo.name} v${serverInfo.version}\u001B[24m\n`);
+        cliCore.CLIDisplay.header(serverInfo.name, serverInfo.version, "🌩️ ");
         if (!core.Is.stringValue(nodeOptions?.executionDirectory)) {
             nodeOptions.executionDirectory = getExecutionDirectory();
         }
-        console.info("Execution Directory:", nodeOptions.executionDirectory);
+        cliCore.CLIDisplay.value("Execution Directory", nodeOptions.executionDirectory);
         nodeOptions.localesDirectory =
             nodeOptions?.localesDirectory ??
                 path.resolve(path.join(nodeOptions.executionDirectory, "dist", "locales"));
-        console.info("Locales Directory:", nodeOptions.localesDirectory);
+        cliCore.CLIDisplay.value("Locales Directory", nodeOptions.localesDirectory);
         await initialiseLocales(nodeOptions.localesDirectory);
         if (core.Is.empty(nodeOptions?.openApiSpecFile)) {
             const specFile = path.resolve(path.join(nodeOptions.executionDirectory ?? "", "docs", "open-api", "spec.json"));
-            console.info("Default OpenAPI Spec File:", specFile);
+            cliCore.CLIDisplay.value("Default OpenAPI Spec File", specFile);
             if (await fileExists(specFile)) {
                 nodeOptions ??= {};
                 nodeOptions.openApiSpecFile = specFile;
             }
         }
+        else {
+            cliCore.CLIDisplay.value("OpenAPI Spec File", nodeOptions.openApiSpecFile);
+        }
         if (core.Is.empty(nodeOptions?.favIconFile)) {
             const favIconFile = path.resolve(path.join(nodeOptions.executionDirectory ?? "", "static", "favicon.png"));
-            console.info("Default Favicon File:", favIconFile);
+            cliCore.CLIDisplay.value("Default Favicon File", favIconFile);
             if (await fileExists(favIconFile)) {
                 nodeOptions ??= {};
                 nodeOptions.favIconFile = favIconFile;
             }
         }
+        else {
+            cliCore.CLIDisplay.value("Favicon File", nodeOptions.favIconFile);
+        }
         nodeOptions.envPrefix ??= "TWIN_NODE_";
-        console.info("Environment Prefix:", nodeOptions.envPrefix);
+        cliCore.CLIDisplay.value("Environment Variable Prefix", nodeOptions.envPrefix);
         overrideModuleImport(nodeOptions.executionDirectory ?? "");
-        const { engineServerConfig, nodeEnvVars: envVars } = await buildConfiguration(process.env, nodeOptions, serverInfo);
-        console.info();
-        const startResult = await start(nodeOptions, engineServerConfig, envVars);
+        const { nodeEngineConfig, nodeEnvVars: envVars } = await buildConfiguration(
+        // This is the only location in the code base that should access process.env directly
+        // eslint-disable-next-line no-restricted-syntax
+        process.env, nodeOptions, serverInfo);
+        cliCore.CLIDisplay.break();
+        const startResult = await start(nodeOptions, nodeEngineConfig, envVars);
         if (!core.Is.empty(startResult)) {
             for (const signal of ["SIGHUP", "SIGINT", "SIGTERM"]) {
                 process.on(signal, async () => {
-                    await startResult.server.stop();
+                    await startResult.shutdown();
                 });
             }
         }
     }
     catch (err) {
-        console.error(core.ErrorHelper.formatErrors(err).join("\n"));
+        cliCore.CLIDisplay.error(err);
         // eslint-disable-next-line unicorn/no-process-exit
         process.exit(1);
     }
@@ -1925,7 +2050,7 @@ async function buildConfiguration(processEnv, options, serverInfo) {
     let defaultEnvOnly = false;
     if (core.Is.empty(options?.envFilenames)) {
         const envFile = path.resolve(path.join(options.executionDirectory ?? "", ".env"));
-        console.info("Default Environment File:", envFile);
+        cliCore.CLIDisplay.value("Default Environment File", envFile);
         options ??= {};
         options.envFilenames = [envFile];
         defaultEnvOnly = true;
@@ -1953,18 +2078,18 @@ async function buildConfiguration(processEnv, options, serverInfo) {
             const filePath = envVars[key].slice(6).trim();
             const embeddedFile = path.resolve(path.join(options.executionDirectory ?? "", filePath));
             if (envVars[key].startsWith("@text:")) {
-                console.info(`Expanding Environment Variable: ${key} from text file: ${embeddedFile}`);
+                cliCore.CLIDisplay.value(`Expanding Environment Variable: ${key} from text file`, embeddedFile);
                 envVars[key] = await loadTextFile(embeddedFile);
             }
             else if (envVars[key].startsWith("@json:")) {
-                console.info(`Expanding Environment Variable: ${key} from JSON file: ${embeddedFile}`);
+                cliCore.CLIDisplay.value(`Expanding Environment Variable: ${key} from JSON file`, embeddedFile);
                 envVars[key] = await loadJsonFile(embeddedFile);
             }
         }
     }
     // Extend the environment variables with any additional custom configuration.
     if (core.Is.function(options?.extendEnvVars)) {
-        console.info("Extending Environment Variables");
+        cliCore.CLIDisplay.task("Extending Environment Variables");
         await options.extendEnvVars(envVars);
     }
     // Build the engine configuration from the environment variables.
@@ -1973,22 +2098,23 @@ async function buildConfiguration(processEnv, options, serverInfo) {
     // Merge any custom configuration provided in the options.
     if (core.Is.arrayValue(options?.configFilenames)) {
         for (const configFile of options.configFilenames) {
-            console.info("Loading Configuration File:", configFile);
+            cliCore.CLIDisplay.value("Loading Configuration File", configFile);
             const configFilePath = path.resolve(path.join(options.executionDirectory ?? "", configFile));
             const config = await loadJsonFile(configFilePath);
             Object.assign(engineServerConfig, config);
         }
     }
     if (core.Is.objectValue(options?.config)) {
-        console.info("Merging Custom Configuration");
+        cliCore.CLIDisplay.task("Merging Custom Configuration");
         Object.assign(engineServerConfig, options.config);
     }
     // Merge any custom configuration provided in the options.
     if (core.Is.function(options?.extendConfig)) {
-        console.info("Extending Configuration");
-        await options.extendConfig(engineServerConfig);
+        cliCore.CLIDisplay.task("Extending Configuration");
+        await options.extendConfig(envVars, engineServerConfig);
     }
-    return { engineServerConfig, nodeEnvVars: envVars };
+    const nodeEngineConfig = await extensionsConfiguration(envVars, engineServerConfig);
+    return { nodeEngineConfig, nodeEnvVars: envVars };
 }
 /**
  * Override module imports to use local files where possible.
@@ -2025,7 +2151,13 @@ function overrideModuleImport(executionDirectory) {
     });
 }
 
+exports.ATTESTATION_VERIFICATION_METHOD_ID = ATTESTATION_VERIFICATION_METHOD_ID;
+exports.AUTH_SIGNING_KEY_ID = AUTH_SIGNING_KEY_ID;
+exports.BLOB_STORAGE_ENCRYPTION_KEY_ID = BLOB_STORAGE_ENCRYPTION_KEY_ID;
+exports.IMMUTABLE_PROOF_VERIFICATION_METHOD_ID = IMMUTABLE_PROOF_VERIFICATION_METHOD_ID;
 exports.NodeFeatures = NodeFeatures;
+exports.SYNCHRONISED_STORAGE_BLOB_STORAGE_ENCRYPTION_KEY_ID = SYNCHRONISED_STORAGE_BLOB_STORAGE_ENCRYPTION_KEY_ID;
+exports.VC_AUTHENTICATION_VERIFICATION_METHOD_ID = VC_AUTHENTICATION_VERIFICATION_METHOD_ID;
 exports.bootstrap = bootstrap;
 exports.bootstrapAuth = bootstrapAuth;
 exports.bootstrapBlobEncryption = bootstrapBlobEncryption;
@@ -2037,6 +2169,9 @@ exports.buildConfiguration = buildConfiguration;
 exports.buildEngineConfiguration = buildEngineConfiguration;
 exports.buildEngineServerConfiguration = buildEngineServerConfiguration;
 exports.directoryExists = directoryExists;
+exports.extensionsConfiguration = extensionsConfiguration;
+exports.extensionsInitialiseEngine = extensionsInitialiseEngine;
+exports.extensionsInitialiseEngineServer = extensionsInitialiseEngineServer;
 exports.fileExists = fileExists;
 exports.getExecutionDirectory = getExecutionDirectory;
 exports.getFeatures = getFeatures;
@@ -2047,4 +2182,5 @@ exports.loadJsonFile = loadJsonFile;
 exports.loadTextFile = loadTextFile;
 exports.overrideModuleImport = overrideModuleImport;
 exports.run = run;
+exports.shutdownExtensions = shutdownExtensions;
 exports.start = start;