@assembly-js/app-foundation 0.0.1-rc.1 → 0.0.1-rc.2

package/dist/app-storage.js

@@ -1,4 +1,4 @@
-import { getAssembly } from './assembly';
+import { getAssembly } from './assembly.js';
 // fileName must be a bare file name (e.g. 'invoice.pdf'), never a path:
 // the platform rejects any value containing '/' or '..'. Do NOT prefix
 // folders or construct the S3 key yourself — the platform scopes the key

package/dist/assembly.d.ts

@@ -1,6 +1,6 @@
 import { type AssemblyAPI } from '@assembly-js/node-sdk';
 import { NextRequest, NextResponse } from 'next/server';
-import { type ExchangedSession } from './session-exchange';
+import { type ExchangedSession } from './session-exchange.js';
 type AssemblyInput = {
     token?: string;
 } | string | undefined;

package/dist/assembly.js

@@ -1,8 +1,8 @@
 import { assemblyApi } from '@assembly-js/node-sdk';
 import { cookies, headers } from 'next/headers';
 import { NextResponse } from 'next/server';
-import { BEARER_COOKIE_NAME, BEARER_HEADER_NAME, decodeBearer, isSessionExchangeEnabled, } from './session-exchange';
-import { mintBearerFromAppKey } from './mint-bearer';
+import { BEARER_COOKIE_NAME, BEARER_HEADER_NAME, decodeBearer, isSessionExchangeEnabled, } from './session-exchange.js';
+import { mintBearerFromAppKey } from './mint-bearer.js';
 // Trusted API origin for this stack, supplied by the build environment — NOT by
 // a token claim. Empty in prod/shared-staging (the SDK's env default is already
 // correct); set to a per-dev private stack's platform-api URL otherwise. Passed

package/dist/auth.js

@@ -1,6 +1,6 @@
 import { NextResponse } from 'next/server';
-import { getAssembly } from './assembly';
-import { BEARER_COOKIE_NAME, BEARER_HEADER_NAME, decodeBearer, isSessionExchangeEnabled, } from './session-exchange';
+import { getAssembly } from './assembly.js';
+import { BEARER_COOKIE_NAME, BEARER_HEADER_NAME, decodeBearer, isSessionExchangeEnabled, } from './session-exchange.js';
 // Detect an expired/undecryptable-token error from the SDK by shape rather than
 // by importing a concrete class — the foundation builds against whatever SDK
 // version is published, which may not export the error type.

package/dist/client.d.ts

@@ -1,5 +1,5 @@
-export * from './session-exchange';
-export * from './network-capture';
-export * from './client-companies';
-export * from './theme';
-export * from './resource-resolution';
+export * from './session-exchange.js';
+export * from './network-capture.js';
+export * from './client-companies.js';
+export * from './theme.js';
+export * from './resource-resolution.js';

package/dist/client.js

@@ -5,13 +5,13 @@
 // string compare against a build-time-inlined flag rather than a secret, and its
 // JWT decode is written on Web APIs only (atob/TextDecoder) so the same module
 // also runs in the Edge middleware runtime that proxy.ts uses.
-export * from './session-exchange';
-export * from './network-capture';
-export * from './client-companies';
-export * from './theme';
+export * from './session-exchange.js';
+export * from './network-capture.js';
+export * from './client-companies.js';
+export * from './theme.js';
 // Pure data-shaping over resolver responses — no imports, no secrets, no
 // next/headers. It lives here rather than in ./server because <ResourcePicker>
 // is a 'use client' component: today it imports only the types, which are erased
 // at compile time, but a value import from ./server would trip the server-only
 // guard for no reason.
-export * from './resource-resolution';
+export * from './resource-resolution.js';

package/dist/mint-bearer.d.ts

@@ -1,4 +1,4 @@
-import { type ExchangedSession, type MintFailure } from './session-exchange';
+import { type ExchangedSession, type MintFailure } from './session-exchange.js';
 export interface MintedBearer {
     bearer: string;
     bearerExpiresAt: number;

package/dist/mint-bearer.js

@@ -1,5 +1,5 @@
 import { assemblyApi, OpenAPI } from '@assembly-js/node-sdk';
-import { BEARER_TTL_MS, classifyExchangeFailure, } from './session-exchange';
+import { BEARER_TTL_MS, classifyExchangeFailure, } from './session-exchange.js';
 // Trusted API origin for this stack (build-env supplied); empty in prod where
 // the SDK default is correct.
 const mintBaseUrl = process.env.ASSEMBLY_API_BASE_URL || undefined;

package/dist/nango.d.ts

@@ -1,4 +1,4 @@
-import { type ResourceFieldMap, type ResourcePage } from './resource-resolution';
+import { type ResourceFieldMap, type ResourcePage } from './resource-resolution.js';
 export type Provider = 'slack' | 'gmail' | 'google-calendar' | 'google-drive' | 'google-sheet' | 'hubspot' | 'salesforce' | 'notion' | 'linear' | 'stripe' | 'github';
 export type ConnectorErrorCode = 'app_key_required' | 'provider_not_declared' | 'connection_required' | 'needs_reauth' | 'needs_reauth_scope' | 'connection_throttled' | 'connector_unavailable' | 'action_failed' | 'invalid_request';
 export interface ConnectionStatus {

package/dist/nango.js

@@ -1,5 +1,5 @@
-import { getAssembly } from './assembly';
-import { findResource, normalizeResourcePage, TtlCache, } from './resource-resolution';
+import { getAssembly } from './assembly.js';
+import { findResource, normalizeResourcePage, TtlCache, } from './resource-resolution.js';
 // Thrown when the broker returns a structured `{ error, provider }` fail-closed
 // response. Catch it server-side and branch on `code` to render the right empty
 // state (e.g. "reconnect required" for needs_reauth, "not configured" for

package/dist/params.js

@@ -1,4 +1,4 @@
-import { badRequest } from './api-errors';
+import { badRequest } from './api-errors.js';
 // RFC 4122 UUID. Call before passing a value into a uuid-typed Drizzle column —
 // Postgres throws on bad syntax and route handlers must not leak that string.
 const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;

package/dist/server.d.ts

@@ -1,10 +1,10 @@
 import 'server-only';
-export * from './assembly';
-export * from './auth';
-export * from './mint-bearer';
-export * from './nango';
-export * from './app-storage';
-export * from './labels';
-export * from './api-errors';
-export * from './params';
-export * from './client';
+export * from './assembly.js';
+export * from './auth.js';
+export * from './mint-bearer.js';
+export * from './nango.js';
+export * from './app-storage.js';
+export * from './labels.js';
+export * from './api-errors.js';
+export * from './params.js';
+export * from './client.js';

package/dist/server.js

@@ -3,18 +3,18 @@
 // condition) is what makes a client bundle importing them fail at build time
 // instead of silently shipping ASSEMBLY_API_KEY to the browser.
 import 'server-only';
-export * from './assembly';
-export * from './auth';
-export * from './mint-bearer';
-export * from './nango';
-export * from './app-storage';
-export * from './labels';
+export * from './assembly.js';
+export * from './auth.js';
+export * from './mint-bearer.js';
+export * from './nango.js';
+export * from './app-storage.js';
+export * from './labels.js';
 // Returns NextResponse, so route handlers only — but nothing here reads a
 // secret, which is why a client file may still `import type` from them.
-export * from './api-errors';
-export * from './params';
+export * from './api-errors.js';
+export * from './params.js';
 // The client-safe surface is re-exported so a server file needs one import, not
 // two. Importing './client' rather than the package's own ./client subpath keeps
 // this a single module graph — a self-import would resolve through node_modules
 // and duplicate every constant.
-export * from './client';
+export * from './client.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@assembly-js/app-foundation",
-  "version": "0.0.1-rc.1",
+  "version": "0.0.1-rc.2",
   "description": "Versioned foundation helpers and build context for Assembly generated apps",
   "type": "module",
   "files": [
@@ -21,7 +21,8 @@
   "scripts": {
     "build": "tsc",
     "test": "bun test",
-    "prepublishOnly": "npm run build"
+    "prepublishOnly": "npm run build && npm run verify:dist",
+    "verify:dist": "node scripts/verify-dist-resolves.mjs"
   },
   "peerDependencies": {
     "@assembly-js/node-sdk": ">=4.2.3-beta.2",