@atproto/pds 0.4.223 → 0.4.225

package/src/auth-output.ts

@@ -1,6 +1,6 @@
 import { ScopePermissions } from '@atproto/oauth-scopes'
 import { DidString } from '@atproto/syntax'
-import { AuthScope } from './auth-scope'
+import { AuthScope } from './auth-scope.js'
 
 export type UnauthenticatedOutput = {
   credentials: null

package/src/auth-verifier.ts

@@ -1,7 +1,7 @@
 import { KeyObject, createPublicKey, createSecretKey } from 'node:crypto'
 import { IncomingMessage, ServerResponse } from 'node:http'
 import * as jose from 'jose'
-import KeyEncoder from 'key-encoder'
+import KeyEncoderModule from 'key-encoder'
 import { getVerificationMaterial } from '@atproto/common'
 import { IdResolver, getDidKeyFromMultibase } from '@atproto/identity'
 import { AtIdentifierString, DidString, isDidString } from '@atproto/lex'
@@ -27,8 +27,8 @@ import {
   parseReqNsid,
   verifyJwt as verifyServiceJwt,
 } from '@atproto/xrpc-server'
-import { AccountManager } from './account-manager/account-manager'
-import { ActorAccount } from './account-manager/helpers/account'
+import { AccountManager } from './account-manager/account-manager.js'
+import { ActorAccount } from './account-manager/helpers/account.js'
 import {
   AccessOutput,
   AdminTokenOutput,
@@ -37,11 +37,14 @@ import {
   RefreshOutput,
   UnauthenticatedOutput,
   UserServiceAuthOutput,
-} from './auth-output'
-import { ACCESS_STANDARD, AuthScope, isAuthScope } from './auth-scope'
-import { softDeleted } from './db'
-import { appendVary } from './util/http'
-import { WithRequired } from './util/types'
+} from './auth-output.js'
+import { ACCESS_STANDARD, AuthScope, isAuthScope } from './auth-scope.js'
+import { softDeleted } from './db/index.js'
+import { appendVary } from './util/http.js'
+import { WithRequired } from './util/types.js'
+
+// key-encoder is CJS with exports.default; Node ESM interop wraps it as { default: Class }
+const KeyEncoder = ((m) => m.default ?? m)(KeyEncoderModule)
 
 export type VerifiedOptions = {
   checkTakedown?: boolean

package/src/background.ts

@@ -1,10 +1,10 @@
 import PQueue from 'p-queue'
-import { dbLogger } from './logger'
+import { dbLogger } from './logger.js'
 
 // A simple queue for in-process, out-of-band/backgrounded work
 
 export class BackgroundQueue {
-  queue = new PQueue({ concurrency: 5 })
+  queue: InstanceType<typeof PQueue> = new PQueue({ concurrency: 5 })
   destroyed = false
   constructor() {}
 

package/src/basic-routes.ts

@@ -1,6 +1,6 @@
 import { Router } from 'express'
 import { sql } from 'kysely'
-import { AppContext } from './context'
+import { AppContext } from './context.js'
 
 export const createRouter = (ctx: AppContext): Router => {
   const router = Router()

package/src/config/config.ts

@@ -3,7 +3,7 @@ import path from 'node:path'
 import { DAY, HOUR, SECOND } from '@atproto/common'
 import { BrandingInput, HcaptchaConfig } from '@atproto/oauth-provider'
 import { ensureValidDid } from '@atproto/syntax'
-import { ServerEnvironment } from './env'
+import { ServerEnvironment } from './env.js'
 
 // off-config but still from env:
 // logging: LOG_LEVEL, LOG_SYSTEMS, LOG_ENABLED, LOG_DESTINATION

package/src/config/index.ts

@@ -1,3 +1,3 @@
-export * from './config'
-export * from './env'
-export * from './secrets'
+export * from './config.js'
+export * from './env.js'
+export * from './secrets.js'

package/src/config/secrets.ts

@@ -1,4 +1,4 @@
-import { ServerEnvironment } from './env'
+import { ServerEnvironment } from './env.js'
 
 export const envToSecrets = (env: ServerEnvironment): ServerSecrets => {
   let plcRotationKey: ServerSecrets['plcRotationKey']

package/src/context.ts

@@ -27,29 +27,29 @@ import {
   safeFetchWrap,
   unicastLookup,
 } from '@atproto-labs/fetch-node'
-import { AccountManager } from './account-manager/account-manager'
-import { OAuthStore } from './account-manager/oauth-store'
-import { ScopeReferenceGetter } from './account-manager/scope-reference-getter'
-import { ActorStore } from './actor-store/actor-store'
-import { authPassthru, forwardedFor } from './api/proxy'
+import { AccountManager } from './account-manager/account-manager.js'
+import { OAuthStore } from './account-manager/oauth-store.js'
+import { ScopeReferenceGetter } from './account-manager/scope-reference-getter.js'
+import { ActorStore } from './actor-store/actor-store.js'
+import { authPassthru, forwardedFor } from './api/proxy.js'
 import {
   AuthVerifier,
   createPublicKeyObject,
   createSecretKeyObject,
-} from './auth-verifier'
-import { BackgroundQueue } from './background'
-import { BskyAppView } from './bsky-app-view'
-import { ServerConfig, ServerSecrets } from './config'
-import { Crawlers } from './crawlers'
-import { DidSqliteCache } from './did-cache'
-import { DiskBlobStore } from './disk-blobstore'
-import { ImageUrlBuilder } from './image/image-url-builder'
-import { fetchLogger, lexiconResolverLogger, oauthLogger } from './logger'
-import { ServerMailer } from './mailer'
-import { ModerationMailer } from './mailer/moderation'
-import { LocalViewer, LocalViewerCreator } from './read-after-write/viewer'
-import { getRedisClient } from './redis'
-import { Sequencer } from './sequencer'
+} from './auth-verifier.js'
+import { BackgroundQueue } from './background.js'
+import { BskyAppView } from './bsky-app-view.js'
+import { ServerConfig, ServerSecrets } from './config/index.js'
+import { Crawlers } from './crawlers.js'
+import { DidSqliteCache } from './did-cache/index.js'
+import { DiskBlobStore } from './disk-blobstore.js'
+import { ImageUrlBuilder } from './image/image-url-builder.js'
+import { fetchLogger, lexiconResolverLogger, oauthLogger } from './logger.js'
+import { ServerMailer } from './mailer/index.js'
+import { ModerationMailer } from './mailer/moderation.js'
+import { LocalViewer, LocalViewerCreator } from './read-after-write/viewer.js'
+import { getRedisClient } from './redis.js'
+import { Sequencer } from './sequencer/index.js'
 
 export type AppContextOptions = {
   actorStore: ActorStore
@@ -338,15 +338,6 @@ export class AppContext {
       responseMaxSize: cfg.fetch.maxResponseSize,
       ssrfProtection: !cfg.fetch.disableSsrfProtection,
 
-      // @NOTE Since we are using NodeJS <= 20, unicastFetchWrap would normally
-      // *not* be using a keep-alive agent if it we are providing a fetch
-      // function that is different from `globalThis.fetch`. However, since the
-      // fetch function below is indeed calling `globalThis.fetch` without
-      // altering any argument, we can safely force the use of the keep-alive
-      // agent. This would not be the case if we used "loggedFetch" as that
-      // function does wrap the input & init arguments into a Request object,
-      // which, on NodeJS<=20, results in init.dispatcher *not* being used.
-      dangerouslyForceKeepAliveAgent: true,
       fetch: function (input, init) {
         const method =
           init?.method ?? (input instanceof Request ? input.method : 'GET')

package/src/db/db.ts

@@ -11,8 +11,8 @@ import {
   UnknownRow,
   sql,
 } from 'kysely'
-import { dbLogger } from '../logger'
-import { retrySqlite } from './util'
+import { dbLogger } from '../logger.js'
+import { retrySqlite } from './util.js'
 
 const DEFAULT_PRAGMAS = {
   // strict: 'ON', // @TODO strictness should live on table defs instead

package/src/db/index.ts

@@ -1,4 +1,4 @@
-export * from './db'
-export * from './cast'
-export * from './migrator'
-export * from './util'
+export * from './db.js'
+export * from './cast.js'
+export * from './migrator.js'
+export * from './util.js'

package/src/db/pagination.ts

@@ -1,6 +1,6 @@
 import { sql } from 'kysely'
 import { InvalidRequestError } from '@atproto/xrpc-server'
-import { AnyQb, DbRef } from './util'
+import { AnyQb, DbRef } from './util.js'
 
 export type Cursor = { primary: string; secondary: string }
 export type LabeledResult = {

package/src/did-cache/db/index.ts

@@ -1,8 +1,8 @@
-import { Database, Migrator } from '../../db'
-import migrations from './migrations'
-import { DidCacheSchema } from './schema'
+import { Database, Migrator } from '../../db/index.js'
+import migrations from './migrations.js'
+import { DidCacheSchema } from './schema.js'
 
-export * from './schema'
+export * from './schema.js'
 
 export type DidCacheDb = Database<DidCacheSchema>
 

package/src/did-cache/index.ts

@@ -1,8 +1,8 @@
 import PQueue from 'p-queue'
 import { CacheResult, DidCache, DidDocument } from '@atproto/identity'
-import { excluded } from '../db/util'
-import { didCacheLogger } from '../logger'
-import { DidCacheDb, getDb, getMigrator } from './db'
+import { excluded } from '../db/util.js'
+import { didCacheLogger } from '../logger.js'
+import { DidCacheDb, getDb, getMigrator } from './db/index.js'
 
 export class DidSqliteCache implements DidCache {
   db: DidCacheDb

package/src/disk-blobstore.ts

@@ -12,7 +12,7 @@ import {
 import { randomStr } from '@atproto/crypto'
 import { Cid } from '@atproto/lex-data'
 import { BlobNotFoundError, BlobStore } from '@atproto/repo'
-import { blobStoreLogger as log } from './logger'
+import { blobStoreLogger as log } from './logger.js'
 
 export class DiskBlobStore implements BlobStore {
   constructor(

package/src/error.ts

@@ -1,7 +1,7 @@
 import { ErrorRequestHandler } from 'express'
 import { OAuthError } from '@atproto/oauth-provider'
 import { XRPCError } from '@atproto/xrpc-server'
-import { httpLogger as log } from './logger'
+import { httpLogger as log } from './logger.js'
 
 export const handler: ErrorRequestHandler = (err, _req, res, next) => {
   log.error({ err }, 'unexpected internal server error')

package/src/handle/index.ts

@@ -3,7 +3,7 @@ import {
   normalizeAndEnsureValidHandle,
 } from '@atproto/syntax'
 import { InvalidRequestError } from '@atproto/xrpc-server'
-import { reservedSubdomains } from './reserved'
+import { reservedSubdomains } from './reserved.js'
 
 export const baseNormalizeAndValidate = (handle: string) => {
   try {

package/src/image/image-url-builder.ts

@@ -1,4 +1,4 @@
-import { BskyAppView } from '../bsky-app-view'
+import { BskyAppView } from '../bsky-app-view.js'
 import { com } from '../lexicons/index.js'
 
 export class ImageUrlBuilder {

package/src/index.ts

@@ -9,7 +9,11 @@ import http from 'node:http'
 import { PlcClientError } from '@did-plc/lib'
 import cors from 'cors'
 import express from 'express'
-import { HttpTerminator, createHttpTerminator } from 'http-terminator'
+// eslint-disable-next-line import/default, import/no-named-as-default-member
+import httpTerminator from 'http-terminator'
+// eslint-disable-next-line import/no-named-as-default-member
+const { createHttpTerminator } = httpTerminator
+type HttpTerminator = ReturnType<typeof createHttpTerminator>
 import { DAY, HOUR, MINUTE, SECOND } from '@atproto/common'
 import {
   MemoryRateLimiter,
@@ -19,33 +23,33 @@ import {
   XRPCError,
   createServer,
 } from '@atproto/xrpc-server'
-import apiRoutes from './api'
-import * as authRoutes from './auth-routes'
-import * as basicRoutes from './basic-routes'
-import { ServerConfig, ServerSecrets } from './config'
-import { AppContext, AppContextOptions } from './context'
-import * as error from './error'
+import apiRoutes from './api/index.js'
+import * as authRoutes from './auth-routes.js'
+import * as basicRoutes from './basic-routes.js'
+import { ServerConfig, ServerSecrets } from './config/index.js'
+import { AppContext, AppContextOptions } from './context.js'
+import * as error from './error.js'
 import { app } from './lexicons.js'
-import { loggerMiddleware } from './logger'
-import { proxyHandler } from './pipethrough'
-import compression from './util/compression'
-import * as wellKnown from './well-known'
+import { loggerMiddleware } from './logger.js'
+import { proxyHandler } from './pipethrough.js'
+import compression from './util/compression.js'
+import * as wellKnown from './well-known.js'
 
 export * from './lexicons.js'
 export {
   bearerTokenFromReq,
   createPublicKeyObject,
   createSecretKeyObject,
-} from './auth-verifier'
-export * from './config'
-export { AppContext } from './context'
-export { Database } from './db'
-export { DiskBlobStore } from './disk-blobstore'
-export { httpLogger } from './logger'
-export { type CommitDataWithOps, type PreparedWrite } from './repo'
-export * as repoPrepare from './repo/prepare'
-export { scripts } from './scripts'
-export * as sequencer from './sequencer'
+} from './auth-verifier.js'
+export * from './config/index.js'
+export { AppContext } from './context.js'
+export { Database } from './db/index.js'
+export { DiskBlobStore } from './disk-blobstore.js'
+export { httpLogger } from './logger.js'
+export { type CommitDataWithOps, type PreparedWrite } from './repo/index.js'
+export * as repoPrepare from './repo/prepare.js'
+export { scripts } from './scripts/index.js'
+export * as sequencer from './sequencer/index.js'
 
 /**
  * @deprecated Legacy export for backwards compatibility

package/src/mailer/index.ts

@@ -1,16 +1,14 @@
-import { Transporter } from 'nodemailer'
-import Mail from 'nodemailer/lib/mailer'
-import SMTPTransport from 'nodemailer/lib/smtp-transport'
+import { SendMailOptions, Transporter } from 'nodemailer'
 import { htmlToText } from 'nodemailer-html-to-text'
-import { ServerConfig } from '../config'
-import { mailerLogger } from '../logger'
-import * as templates from './templates'
+import { ServerConfig } from '../config/index.js'
+import { mailerLogger } from '../logger.js'
+import * as templates from './templates.js'
 
 // @TODO Add support for i18n
 
 export class ServerMailer {
   constructor(
-    public readonly transporter: Transporter<SMTPTransport.SentMessageInfo>,
+    public readonly transporter: Transporter,
     private readonly config: ServerConfig,
   ) {
     transporter.use('compile', htmlToText())
@@ -23,7 +21,7 @@ export class ServerMailer {
 
   async sendResetPassword(
     params: { handle: string; token: string },
-    mailOpts: Mail.Options,
+    mailOpts: SendMailOptions,
   ) {
     await this.sendTemplate('resetPassword', params, {
       subject: 'Password Reset Requested',
@@ -31,28 +29,31 @@ export class ServerMailer {
     })
   }
 
-  async sendAccountDelete(params: { token: string }, mailOpts: Mail.Options) {
+  async sendAccountDelete(
+    params: { token: string },
+    mailOpts: SendMailOptions,
+  ) {
     await this.sendTemplate('deleteAccount', params, {
       subject: 'Account Deletion Requested',
       ...mailOpts,
     })
   }
 
-  async sendConfirmEmail(params: { token: string }, mailOpts: Mail.Options) {
+  async sendConfirmEmail(params: { token: string }, mailOpts: SendMailOptions) {
     await this.sendTemplate('confirmEmail', params, {
       subject: 'Email Confirmation',
       ...mailOpts,
     })
   }
 
-  async sendUpdateEmail(params: { token: string }, mailOpts: Mail.Options) {
+  async sendUpdateEmail(params: { token: string }, mailOpts: SendMailOptions) {
     await this.sendTemplate('updateEmail', params, {
       subject: 'Email Update Requested',
       ...mailOpts,
     })
   }
 
-  async sendPlcOperation(params: { token: string }, mailOpts: Mail.Options) {
+  async sendPlcOperation(params: { token: string }, mailOpts: SendMailOptions) {
     await this.sendTemplate('plcOperation', params, {
       subject: 'PLC Update Operation Requested',
       ...mailOpts,
@@ -62,7 +63,7 @@ export class ServerMailer {
   private async sendTemplate<K extends keyof typeof templates>(
     templateName: K,
     params: Parameters<(typeof templates)[K]>[0],
-    mailOpts: Mail.Options,
+    mailOpts: SendMailOptions,
   ) {
     const html = templates[templateName]({
       ...params,

package/src/mailer/moderation.ts

@@ -1,24 +1,19 @@
-import { Transporter } from 'nodemailer'
-import Mail from 'nodemailer/lib/mailer'
-import SMTPTransport from 'nodemailer/lib/smtp-transport'
+import { SendMailOptions, Transporter } from 'nodemailer'
 import { htmlToText } from 'nodemailer-html-to-text'
-import { ServerConfig } from '../config'
-import { mailerLogger } from '../logger'
+import { ServerConfig } from '../config/index.js'
+import { mailerLogger } from '../logger.js'
 
 export class ModerationMailer {
   private config: ServerConfig
-  transporter: Transporter<SMTPTransport.SentMessageInfo>
+  transporter: Transporter
 
-  constructor(
-    transporter: Transporter<SMTPTransport.SentMessageInfo>,
-    config: ServerConfig,
-  ) {
+  constructor(transporter: Transporter, config: ServerConfig) {
     this.config = config
     this.transporter = transporter
     this.transporter.use('compile', htmlToText())
   }
 
-  async send({ content }: { content: string }, mailOpts: Mail.Options) {
+  async send({ content }: { content: string }, mailOpts: SendMailOptions) {
     const mail = {
       ...mailOpts,
       html: content,

package/src/mailer/templates.ts

@@ -1,5 +1,5 @@
-export { default as resetPassword } from './templates/reset-password'
-export { default as deleteAccount } from './templates/delete-account'
-export { default as confirmEmail } from './templates/confirm-email'
-export { default as updateEmail } from './templates/update-email'
-export { default as plcOperation } from './templates/plc-operation'
+export { default as resetPassword } from './templates/reset-password.js'
+export { default as deleteAccount } from './templates/delete-account.js'
+export { default as confirmEmail } from './templates/confirm-email.js'
+export { default as updateEmail } from './templates/update-email.js'
+export { default as plcOperation } from './templates/plc-operation.js'

package/src/pipethrough.ts

@@ -21,10 +21,10 @@ import {
   parseReqNsid,
 } from '@atproto/xrpc-server'
 import { buildProxiedContentEncoding } from '@atproto-labs/xrpc-utils'
-import { isAccessPrivileged } from './auth-scope'
-import { AppContext } from './context'
+import { isAccessPrivileged } from './auth-scope.js'
+import { AppContext } from './context.js'
 import { chat, com, tools } from './lexicons/index.js'
-import { httpLogger } from './logger'
+import { httpLogger } from './logger.js'
 
 export const proxyHandler = (ctx: AppContext): CatchallHandler => {
   const performAuth = ctx.authVerifier.authorization<RpcPermissionMatch>({

package/src/read-after-write/index.ts

@@ -1,3 +1,3 @@
-export * from './types'
-export * from './util'
-export * from './viewer'
+export * from './types.js'
+export * from './util.js'
+export * from './viewer.js'

package/src/read-after-write/types.ts

@@ -1,7 +1,7 @@
 import { Cid } from '@atproto/lex-data'
 import { AtUri, DatetimeString } from '@atproto/syntax'
 import { app } from '../lexicons/index.js'
-import { LocalViewer } from './viewer'
+import { LocalViewer } from './viewer.js'
 
 export type LocalRecords = {
   count: number

package/src/read-after-write/util.ts

@@ -5,14 +5,14 @@ import {
   HandlerPipeThrough,
   HandlerPipeThroughBuffer,
 } from '@atproto/xrpc-server'
-import { AppContext } from '../context'
-import { readStickyLogger as log } from '../logger'
+import { AppContext } from '../context.js'
+import { readStickyLogger as log } from '../logger.js'
 import {
   asPipeThroughBuffer,
   isJsonContentType,
   pipethrough,
-} from '../pipethrough'
-import { HandlerResponse, LocalRecords, MungeFn } from './types'
+} from '../pipethrough.js'
+import { HandlerResponse, LocalRecords, MungeFn } from './types.js'
 
 export const getLocalLag = (local: LocalRecords): number | undefined => {
   let oldest: string | undefined = local.profile?.indexedAt

package/src/read-after-write/viewer.ts

@@ -1,12 +1,12 @@
 import { LexMap, UriString, getBlobCidString } from '@atproto/lex'
 import { AtUri, DidString, HandleString, INVALID_HANDLE } from '@atproto/syntax'
 import { createServiceAuthHeaders } from '@atproto/xrpc-server'
-import { AccountManager } from '../account-manager/account-manager'
-import { ActorStoreReader } from '../actor-store/actor-store-reader'
-import { BskyAppView } from '../bsky-app-view'
-import { ImageUrlBuilder } from '../image/image-url-builder'
+import { AccountManager } from '../account-manager/account-manager.js'
+import { ActorStoreReader } from '../actor-store/actor-store-reader.js'
+import { BskyAppView } from '../bsky-app-view.js'
+import { ImageUrlBuilder } from '../image/image-url-builder.js'
 import { app } from '../lexicons/index.js'
-import { LocalRecords, RecordDescript } from './types'
+import { LocalRecords, RecordDescript } from './types.js'
 
 type CommonSignedUris = 'avatar' | 'banner' | 'feed_thumbnail' | 'feed_fullsize'
 

package/src/redis.ts

@@ -1,6 +1,6 @@
 import assert from 'node:assert'
 import { Redis } from 'ioredis'
-import { redisLogger } from './logger'
+import { redisLogger } from './logger.js'
 
 export const getRedisClient = (host: string, password?: string): Redis => {
   const redisAddr = redisAddressParts(host)

package/src/repo/index.ts

@@ -1,2 +1,2 @@
-export * from './prepare'
-export * from './types'
+export * from './prepare.js'
+export * from './types.js'

package/src/repo/prepare.ts

@@ -24,7 +24,7 @@ import {
   RecordKeyString,
   isValidRecordKey,
 } from '@atproto/syntax'
-import { hasExplicitSlur } from '../handle/explicit-slurs'
+import { hasExplicitSlur } from '../handle/explicit-slurs.js'
 import { app, chat, com } from '../lexicons/index.js'
 import {
   InvalidRecordError,
@@ -33,7 +33,7 @@ import {
   PreparedUpdate,
   PreparedWrite,
   ValidationStatus,
-} from './types'
+} from './types.js'
 
 // @TODO replace this with automatically fetched (& built) schemas
 const knownSchemas = new Map<string, RecordSchema>(

package/src/scripts/index.ts

@@ -1,12 +1,12 @@
-import { publishIdentity, publishIdentityFromFile } from './publish-identity'
-import { rebuildRepo } from './rebuild-repo'
+import { publishIdentity, publishIdentityFromFile } from './publish-identity.js'
+import { rebuildRepo } from './rebuild-repo.js'
 import {
   rotateKeys,
   rotateKeysFromFile,
   rotateKeysRecovery,
-} from './rotate-keys'
-import { sequencerRecovery } from './sequencer-recovery'
-import { repairRepos } from './sequencer-recovery/repair-repos'
+} from './rotate-keys.js'
+import { sequencerRecovery } from './sequencer-recovery/index.js'
+import { repairRepos } from './sequencer-recovery/repair-repos.js'
 
 export const scripts = {
   'rebuild-repo': rebuildRepo,

package/src/scripts/publish-identity.ts

@@ -3,8 +3,8 @@ import fs from 'node:fs/promises'
 import { wait } from '@atproto/common'
 import { isDidString } from '@atproto/lex'
 import { DidString } from '@atproto/syntax'
-import { Sequencer } from '../sequencer'
-import { parseIntArg } from './util'
+import { Sequencer } from '../sequencer/index.js'
+import { parseIntArg } from './util.js'
 
 export type PublishIdentityContext = {
   sequencer: Sequencer

package/src/scripts/rebuild-repo.ts

@@ -9,9 +9,9 @@ import {
   MemoryBlockstore,
   signCommit,
 } from '@atproto/repo'
-import { AccountManager } from '../account-manager/account-manager'
-import { ActorStore } from '../actor-store/actor-store'
-import { Sequencer } from '../sequencer'
+import { AccountManager } from '../account-manager/account-manager.js'
+import { ActorStore } from '../actor-store/actor-store.js'
+import { Sequencer } from '../sequencer/index.js'
 
 export interface RebuildContext {
   sequencer: Sequencer

package/src/scripts/rotate-keys.ts

@@ -6,11 +6,11 @@ import AtpAgent from '@atproto/api'
 import { Keypair } from '@atproto/crypto'
 import { IdResolver } from '@atproto/identity'
 import { DidString, isDidString } from '@atproto/lex'
-import { ActorStore } from '../actor-store/actor-store'
-import { SyncEvtData } from '../repo'
-import { Sequencer } from '../sequencer'
-import { getRecoveryDbFromSequencerLoc } from './sequencer-recovery/recovery-db'
-import { parseIntArg } from './util'
+import { ActorStore } from '../actor-store/actor-store.js'
+import { SyncEvtData } from '../repo/index.js'
+import { Sequencer } from '../sequencer/index.js'
+import { getRecoveryDbFromSequencerLoc } from './sequencer-recovery/recovery-db.js'
+import { parseIntArg } from './util.js'
 
 export type RotateKeysContext = {
   sequencer: Sequencer

package/src/scripts/sequencer-recovery/index.ts

@@ -1,6 +1,6 @@
-import { parseIntArg } from '../util'
-import { Recoverer, RecovererContextNoDb } from './recoverer'
-import { getRecoveryDbFromSequencerLoc } from './recovery-db'
+import { parseIntArg } from '../util.js'
+import { Recoverer, RecovererContextNoDb } from './recoverer.js'
+import { getRecoveryDbFromSequencerLoc } from './recovery-db.js'
 
 export const sequencerRecovery = async (
   ctx: RecovererContextNoDb,