fix: harden runtime imports for package loading