@everystack/cli 0.4.60 → 0.4.64

package/src/cli/migration-generate.ts

@@ -16,12 +16,12 @@
  */
 
 import type { ModelDescriptor, SequenceDescriptor } from '@everystack/model';
-import type { SchemaSnapshot } from './schema-introspect.js';
-import type { AuthzContract } from './authz-contract.js';
-import { compileTableSchema, compileRenames, compileTableRenames, compileTableMoves, compileCreateTable, compileEnums, compileSequences } from './schema-compile.js';
-import { compileTableContract } from './authz-compile.js';
-import { emitReconcileSql, governedRoleSet } from './authz-reconcile.js';
-import { diffSchema, emitSchemaSql, type SchemaChange } from './schema-diff.js';
+import type { SchemaSnapshot } from './schema-introspect';
+import type { AuthzContract } from './authz-contract';
+import { compileTableSchema, compileRenames, compileTableRenames, compileTableMoves, compileCreateTable, compileEnums, compileSequences } from './schema-compile';
+import { compileTableContract } from './authz-compile';
+import { emitReconcileSql, governedRoleSet } from './authz-reconcile';
+import { diffSchema, emitSchemaSql, type SchemaChange } from './schema-diff';
 
 export interface GenerateOptions {
   /** The Postgres schema the Models live in. Default: `public`. */

package/src/cli/model-api.ts

@@ -15,25 +15,25 @@
  */
 
 // --- data layer: compile, introspect, diff, render -------------------------
-export * from './schema-compile.js';
-export * from './schema-introspect.js';
-export * from './schema-diff.js';
-export * from './schema-source.js';
-export * from './model-render.js';
-export * from './migration-compile.js';
-export * from './migration-generate.js';
+export * from './schema-compile';
+export * from './schema-introspect';
+export * from './schema-diff';
+export * from './schema-source';
+export * from './model-render';
+export * from './migration-compile';
+export * from './migration-generate';
 
 // --- authz layer: contract compile/introspect/diff/reconcile ---------------
-export * from './authz-compile.js';
-export * from './authz-contract.js';
-export * from './authz-reconcile.js';
+export * from './authz-compile';
+export * from './authz-contract';
+export * from './authz-reconcile';
 
 // --- red-team: grant enforcement + owner isolation -------------------------
-export * from './authz-redteam.js';
-export * from './authz-owner-probe.js';
+export * from './authz-redteam';
+export * from './authz-owner-probe';
 
 // --- the SECDEF function catalog the contract introspection needs -----------
-export { FUNCTIONS_SQL, catalogFunctionToDescriptor } from './security-catalog.js';
+export { FUNCTIONS_SQL, catalogFunctionToDescriptor } from './security-catalog';
 
 // --- how you HAND a database to the VERIFY calls ---------------------------
 // `introspectSchema` and `introspectContract` take a `SessionRunner`, not a `QueryRunner`:
@@ -47,7 +47,7 @@ export { FUNCTIONS_SQL, catalogFunctionToDescriptor } from './security-catalog.j
 // `sessionRunnerOver(sql)` wraps a postgres.js client whose pool is a SINGLE connection.
 // `INTROSPECTION_SESSION` is the options both introspections expect — read only, repeatable
 // read, canonical `search_path`. Pass it through; do not re-derive it.
-export { sessionRunnerOver } from './db-source.js';
+export { sessionRunnerOver } from './db-source';
 export {
   INTROSPECTION_SESSION,
   borrowedSessionRunner,
@@ -57,11 +57,11 @@ export {
   type SessionStatement,
   type SessionOptions,
   type SessionResult,
-} from './session.js';
+} from './session';
 
 // --- databases FROM the declared state: ephemeral test DBs + the builder ----
 // `createEphemeralDatabase(adminUrl, models, { sources })` is the packaged
 // create-sync-drop shape for consumer test suites: a fresh database at the
 // declared state (state + authz + derived), verified to fingerprint MATCH,
 // dropped when you're done — never long-lived, never poisoned.
-export * from './db-build.js';
+export * from './db-build';

package/src/cli/model-render.ts

@@ -15,12 +15,12 @@
  * Pure and deterministic — the command shell (commands/db-pull.ts) does the IO.
  */
 
-import type { SchemaSnapshot, TableSchema, ColumnSchema, CheckConstraint } from './schema-introspect.js';
-import type { DerivedRenderResult } from './derived-render.js';
-import type { TableContract } from './authz-contract.js';
-import { deriveAbilities, renderDerivedAbilities } from './authz-derive.js';
-import { normalizeDefault, normalizeCheck } from './schema-diff.js';
-import { generatedIndexName, generatedForeignKeyName } from './schema-compile.js';
+import type { SchemaSnapshot, TableSchema, ColumnSchema, CheckConstraint } from './schema-introspect';
+import type { DerivedRenderResult } from './derived-render';
+import type { TableContract } from './authz-contract';
+import { deriveAbilities, renderDerivedAbilities } from './authz-derive';
+import { normalizeDefault, normalizeCheck } from './schema-diff';
+import { generatedIndexName, generatedForeignKeyName } from './schema-compile';
 // The soft-delete RULE itself — one boolean combination, shared with `defineModel`'s refusal.
 // Only the FACT EXTRACTION is duplicated here (this renderer holds text, not descriptors);
 // the rule is not, so the two surfaces cannot drift on when a declaration is required.

package/src/cli/mutation-lease.ts

@@ -20,7 +20,7 @@
  * lives in `pg_locks`, discoverable from the catalog rather than bookkeeping that can lie.
  */
 
-import type { QueryRunner } from './authz-contract.js';
+import type { QueryRunner } from './authz-contract';
 
 /**
  * The fixed lease key: `('ES','TK')` as two 16-bit ints — 0x4553, 0x544B. One key covers

package/src/cli/observability.ts

@@ -17,7 +17,7 @@
  * pulls React Native (admin/ui) through its peer graph — wrong for a standalone CLI.
  */
 
-import { listS3, getFromS3 } from './aws.js';
+import { listS3, getFromS3 } from './aws';
 
 /** Severity ordering — mirrors LogLevel in @everystack/logging core/types. */
 const LOG_LEVELS: Record<string, number> = {

package/src/cli/refresh-execute.ts

@@ -13,8 +13,8 @@
  * deliberate follow-on, not a silent default.
  */
 
-import { quoteQualified } from './pg-ident.js';
-import type { SourceObject } from './derived-source.js';
+import { quoteQualified } from './pg-ident';
+import type { SourceObject } from './derived-source';
 
 export type RefreshRunner = (sql: string) => Promise<any[]>;
 

package/src/cli/runbook/generate.ts

@@ -9,9 +9,9 @@
  * idempotent: unchanged project → byte-identical output.
  */
 
-import type { ProjectReality } from './detect.js';
-import { parseRunbook, composeRunbook, sha8, type Block } from './markers.js';
-import { buildStructure, headerStamp, PLACEHOLDER_PREFIX, type RunbookContext } from './sections.js';
+import type { ProjectReality } from './detect';
+import { parseRunbook, composeRunbook, sha8, type Block } from './markers';
+import { buildStructure, headerStamp, PLACEHOLDER_PREFIX, type RunbookContext } from './sections';
 
 export interface RunbookResult {
   text: string;

package/src/cli/runbook/index.ts

@@ -11,10 +11,10 @@
  *   expect(status).toBe('current');
  */
 
-export * from './detect.js';
-export * from './markers.js';
-export * from './sections.js';
-export * from './generate.js';
-export * from './model-section.js';
-export { runRunbook, checkRunbook, diffSummary } from '../commands/runbook.js';
-export type { RunbookRun, RunbookCheck, RunbookDiffSummary } from '../commands/runbook.js';
+export * from './detect';
+export * from './markers';
+export * from './sections';
+export * from './generate';
+export * from './model-section';
+export { runRunbook, checkRunbook, diffSummary } from '../commands/runbook';
+export type { RunbookRun, RunbookCheck, RunbookDiffSummary } from '../commands/runbook';

package/src/cli/runbook/sections.ts

@@ -10,8 +10,8 @@
  * markdown) → same blocks, so `runbook --check` is trustworthy in CI.
  */
 
-import type { ProjectReality } from './detect.js';
-import type { Block } from './markers.js';
+import type { ProjectReality } from './detect';
+import type { Block } from './markers';
 
 export interface RunbookContext {
   cliVersion: string;

package/src/cli/schema-compile.ts

@@ -20,9 +20,9 @@
  */
 
 import type { ModelDescriptor, FieldSpec, SequenceDescriptor } from '@everystack/model';
-import type { TableSchema, EnumType, SequenceSchema, UniqueConstraint, CheckConstraint, IndexSchema, ForeignKey } from './schema-introspect.js';
-import { nextvalSequence, identityClause, type RenameMap } from './schema-diff.js';
-import { normalizeDeparsedExpr } from './deparse-normal.js';
+import type { TableSchema, EnumType, SequenceSchema, UniqueConstraint, CheckConstraint, IndexSchema, ForeignKey } from './schema-introspect';
+import { nextvalSequence, identityClause, type RenameMap } from './schema-diff';
+import { normalizeDeparsedExpr } from './deparse-normal';
 
 /** `authorId` -> `author_id`. SQL identifiers are snake_case. */
 export function toSnakeCase(name: string): string {
@@ -606,7 +606,7 @@ export function compileSequences(sequences: readonly SequenceDescriptor[]): Sequ
 
 // The DDL renderer lives in schema-diff (emitOne needs it; this file already imports
 // schema-diff, so defining it there avoids a cycle) — re-exported here beside its compiler.
-export { sequenceCreateSql } from './schema-diff.js';
+export { sequenceCreateSql } from './schema-diff';
 
 /**
  * Foreign-key constraints for a model — its `.references()` fields and its table-level

package/src/cli/schema-diff.ts

@@ -31,7 +31,7 @@ import type {
   EnumType,
   IndexSchema,
   SequenceSchema,
-} from './schema-introspect.js';
+} from './schema-introspect';
 
 // ---------------------------------------------------------------------------
 // The change set.

package/src/cli/schema-fingerprint.ts

@@ -50,14 +50,14 @@
  */
 
 import { createHash } from 'node:crypto';
-import { canonicalAuthz } from './authz-canonical.js';
+import { canonicalAuthz } from './authz-canonical';
 import type { ModelDescriptor, SequenceDescriptor } from '@everystack/model';
-import type { SchemaSnapshot, TableSchema } from './schema-introspect.js';
-import type { AuthzContract, TableContract } from './authz-contract.js';
-import { compileTableSchema, compileEnums, compileSequences } from './schema-compile.js';
-import { compileTableContract } from './authz-compile.js';
-import { governedRoleSet } from './authz-reconcile.js';
-import { normalizeDefault, normalizeCheck, indexKey } from './schema-diff.js';
+import type { SchemaSnapshot, TableSchema } from './schema-introspect';
+import type { AuthzContract, TableContract } from './authz-contract';
+import { compileTableSchema, compileEnums, compileSequences } from './schema-compile';
+import { compileTableContract } from './authz-compile';
+import { governedRoleSet } from './authz-reconcile';
+import { normalizeDefault, normalizeCheck, indexKey } from './schema-diff';
 
 // v2: expression fields (defaults, checks, partial-index WHERE) normalize through
 // the diff's pg-deparse normalizers before hashing, so the model form and the live

package/src/cli/schema-introspect.ts

@@ -13,9 +13,9 @@
  * 'numeric(12,2)', 'uuid' the Model compiler also emits), so the two sides diff.
  */
 
-import { IGNORED_SCHEMAS, coerceBool, type QueryRunner } from './authz-contract.js';
-import { INTROSPECTION_SESSION, type SessionRunner } from './session.js';
-import { normalizeDeparsedExpr } from './deparse-normal.js';
+import { IGNORED_SCHEMAS, coerceBool, type QueryRunner } from './authz-contract';
+import { INTROSPECTION_SESSION, type SessionRunner } from './session';
+import { normalizeDeparsedExpr } from './deparse-normal';
 
 // ---------------------------------------------------------------------------
 // The data-layer snapshot — the structured shape both producers target.

package/src/cli/schema-source.ts

@@ -26,7 +26,7 @@
  */
 
 import type { ModelDescriptor, FieldSpec, DerivedDescriptor, ViewDescriptor, MaterializedViewDescriptor } from '@everystack/model';
-import { parseQualified } from './derived-source.js';
+import { parseQualified } from './derived-source';
 
 /** `author_id` is the SQL identifier; `authorId` the field key. The single snake-case rule. */
 function toSnakeCase(name: string): string {

package/src/cli/schema-swap.ts

@@ -31,10 +31,10 @@
  */
 
 import type { ModelDescriptor } from '@everystack/model';
-import { modelForeignKeys, qualifiedTable } from './schema-compile.js';
-import { compileTableContract } from './authz-compile.js';
-import { emitSwapAuthzSql } from './authz-reconcile.js';
-import { schemaOf } from './schema-fingerprint.js';
+import { modelForeignKeys, qualifiedTable } from './schema-compile';
+import { compileTableContract } from './authz-compile';
+import { emitSwapAuthzSql } from './authz-reconcile';
+import { schemaOf } from './schema-fingerprint';
 
 const SAFE_SCHEMA = /^[a-z_][a-z0-9_$]*$/;
 

package/src/cli/security-catalog.ts

@@ -14,7 +14,7 @@ import type {
   FunctionDescriptor,
   ViewDescriptor,
   ReturnClass,
-} from './security-audit.js';
+} from './security-audit';
 
 /**
  * Enumerate every function with its security context. Excludes system schemas and

package/src/cli/stage-backup.ts

@@ -22,8 +22,8 @@
  * without AWS.
  */
 
-import { invokeAction, lambdaSessionRunner } from './aws.js';
-import { pollTaskUntilStopped } from './task-poll.js';
+import { invokeAction, lambdaSessionRunner } from './aws';
+import { pollTaskUntilStopped } from './task-poll';
 
 /** The verdict on a completed dump's fingerprint pair. Pure — the heart of the sandwich. */
 export type SandwichVerdict = { ok: true } | { ok: false; reason: string };
@@ -188,7 +188,7 @@ export function stageBackupDeps(
     // override both.
     readFingerprint: async () => {
       // The SAME helper db:apply's concurrency lock uses — that shared definition is the point.
-      const { liveBaseFingerprint } = await import('./apply-execute.js');
+      const { liveBaseFingerprint } = await import('./apply-execute');
       return (await liveBaseFingerprint(lambdaSessionRunner(config.region, opsFn))).hash;
     },
     dispatch: async (fingerprint) => {

package/src/cli/stage-read-consistency.ts

@@ -30,12 +30,12 @@
  * Lambda's db:apply action, for refusals that reach it.
  */
 
-import type { AuthzContract } from './authz-contract.js';
-import type { SessionRunner } from './session.js';
-import { introspectContract } from './authz-contract.js';
-import { introspectSchema, type SchemaSnapshot } from './schema-introspect.js';
-import { FUNCTIONS_SQL, contractFunctionRow } from './security-catalog.js';
-import { fingerprintLive } from './schema-fingerprint.js';
+import type { AuthzContract } from './authz-contract';
+import type { SessionRunner } from './session';
+import { introspectContract } from './authz-contract';
+import { introspectSchema, type SchemaSnapshot } from './schema-introspect';
+import { FUNCTIONS_SQL, contractFunctionRow } from './security-catalog';
+import { fingerprintLive } from './schema-fingerprint';
 
 /** One complete read of a target's base state, with its content address. */
 export interface StageReadPair {

package/src/cli/state-apply.ts

@@ -19,14 +19,14 @@
 
 import { execSync } from 'node:child_process';
 import type { ModelDescriptor } from '@everystack/model';
-import { introspectContract, type AuthzContract, type QueryRunner } from './authz-contract.js';
-import type { SessionRunner } from './session.js';
-import { introspectSchema, type SchemaSnapshot } from './schema-introspect.js';
-import { FUNCTIONS_SQL, contractFunctionRow } from './security-catalog.js';
-import { generateMigrationSql, HELD_DROP_PREFIX } from './migration-generate.js';
+import { introspectContract, type AuthzContract, type QueryRunner } from './authz-contract';
+import type { SessionRunner } from './session';
+import { introspectSchema, type SchemaSnapshot } from './schema-introspect';
+import { FUNCTIONS_SQL, contractFunctionRow } from './security-catalog';
+import { generateMigrationSql, HELD_DROP_PREFIX } from './migration-generate';
 import type { SequenceDescriptor } from '@everystack/model';
-import { fingerprintLive } from './schema-fingerprint.js';
-import { ENSURE_RECONCILER_SQL, renderSchemaLogInsert, renderSchemaLogFingerprintUpdate } from './derived-apply.js';
+import { fingerprintLive } from './schema-fingerprint';
+import { ENSURE_RECONCILER_SQL, renderSchemaLogInsert, renderSchemaLogFingerprintUpdate } from './derived-apply';
 
 const NOTICE_PREFIX = '-- NOTICE';
 

package/src/cli/swap-execute.ts

@@ -20,9 +20,9 @@
  */
 
 import type { ModelDescriptor } from '@everystack/model';
-import type { QueryRunner } from './authz-contract.js';
-import type { SessionRunner } from './session.js';
-import { renderSchemaSwap, dropRetiringSql } from './schema-swap.js';
+import type { QueryRunner } from './authz-contract';
+import type { SessionRunner } from './session';
+import { renderSchemaSwap, dropRetiringSql } from './schema-swap';
 
 /** One validator's result. A `fatal` (default) failure rolls back; a `warn` failure is surfaced only. */
 export interface SwapCheck {

package/src/cli/swap-heartbeat.ts

@@ -39,7 +39,7 @@
  * waiting for a client that has stopped sending. `Lock` is never healthy here and reports at once.
  */
 
-import type { QueryRunner } from './authz-contract.js';
+import type { QueryRunner } from './authz-contract';
 
 /** One poll: what has landed, and what the loading backend is doing. */
 export interface HeartbeatSample {

package/src/cli/swap-pair.ts

@@ -50,13 +50,13 @@
  */
 
 import type { ModelDescriptor, DerivedDescriptor } from '@everystack/model';
-import { parseQualified } from './derived-source.js';
-import type { SourceObject } from './derived-source.js';
-import { rewriteStatementLineMulti, splitCodeSpans } from './schema-rewrite.js';
-import { parseGrantAttachments } from './derived-grants.js';
-import { derivedSearchPath, renderSetSearchPath, renderProvenanceUpsert, ENSURE_RECONCILER_SQL } from './derived-apply.js';
-import type { LiveObject } from './derived-introspect.js';
-import { compileTableContract } from './authz-compile.js';
+import { parseQualified } from './derived-source';
+import type { SourceObject } from './derived-source';
+import { rewriteStatementLineMulti, splitCodeSpans } from './schema-rewrite';
+import { parseGrantAttachments } from './derived-grants';
+import { derivedSearchPath, renderSetSearchPath, renderProvenanceUpsert, ENSURE_RECONCILER_SQL } from './derived-apply';
+import type { LiveObject } from './derived-introspect';
+import { compileTableContract } from './authz-compile';
 
 const SAFE_SCHEMA = /^[a-z_][a-z0-9_$]*$/;
 

package/src/cli/task-poll.ts

@@ -9,8 +9,8 @@
  * row + ECS both carry it). This owns the loop; the caller owns the success/failure messaging.
  */
 
-import { invokeAction } from './aws.js';
-import { info } from './output.js';
+import { invokeAction } from './aws';
+import { info } from './output';
 
 const POLL_INTERVAL_MS = 5_000;
 /** Backup/export/restore can run minutes on large databases — far longer than the probe's handshake. */

package/src/cli/ui-bloat.ts

@@ -29,7 +29,7 @@
  * mangled, pathless) — that is the local source auditor's job; this proves magnitude.
  */
 
-import type { AuditFinding } from './bundle-audit.js';
+import type { AuditFinding } from './bundle-audit';
 
 /** Thresholds for the design-bloat gates. All counts are occurrences in the bundle. */
 export interface UiBloatBudget {

package/src/cli/utils/secrets.ts

@@ -15,7 +15,7 @@
 
 import crypto from 'node:crypto';
 import { gunzipSync } from 'node:zlib';
-import { ensureOptionalAws } from '../aws.js';
+import { ensureOptionalAws } from '../aws';
 
 /**
  * Preflight the two optional-peer clients EVERY secrets operation needs (ssm for the passphrase,

package/src/exec.ts

@@ -8,13 +8,13 @@
  * URL on the operator's machine.
  */
 
-export { executeExec, assertNoTxnControl, execSha } from './cli/exec-execute.js';
-export type { ExecIntent, ExecOutcome, ExecuteExecOptions, ExecResult } from './cli/exec-execute.js';
+export { executeExec, assertNoTxnControl, execSha } from './cli/exec-execute';
+export type { ExecIntent, ExecOutcome, ExecuteExecOptions, ExecResult } from './cli/exec-execute';
 
-export { runExecInTx, SchemaChangedError, railStatements, EXEC_RAIL_DEFAULTS } from './cli/exec-run.js';
-export type { TxRunner, ExecStmtResult, ExecRails, RunExecInTxOptions } from './cli/exec-run.js';
+export { runExecInTx, SchemaChangedError, railStatements, EXEC_RAIL_DEFAULTS } from './cli/exec-run';
+export type { TxRunner, ExecStmtResult, ExecRails, RunExecInTxOptions } from './cli/exec-run';
 
-export { catalogDigestQuery } from './cli/exec-digest.js';
+export { catalogDigestQuery } from './cli/exec-digest';
 
-export { ENSURE_EXEC_LOG_SQL, renderExecIntentInsert, renderExecOutcomeUpdate } from './cli/exec-log.js';
-export type { ExecIntentRow, ExecOutcomeRow } from './cli/exec-log.js';
+export { ENSURE_EXEC_LOG_SQL, renderExecIntentInsert, renderExecOutcomeUpdate } from './cli/exec-log';
+export type { ExecIntentRow, ExecOutcomeRow } from './cli/exec-log';

package/src/reconcile.ts

@@ -7,5 +7,5 @@
  * --stage` needs no raw admin URL on the deployer's machine.
  */
 
-export { executeReconcile, buildReconcileReport } from './cli/commands/db-reconcile.js';
-export type { ReconcileRun, ExecuteOptions } from './cli/commands/db-reconcile.js';
+export { executeReconcile, buildReconcileReport } from './cli/commands/db-reconcile';
+export type { ReconcileRun, ExecuteOptions } from './cli/commands/db-reconcile';

package/src/refresh.ts

@@ -7,5 +7,5 @@
  * machine. The CLI ships the declared matview identities (dependency order); this refreshes them.
  */
 
-export { executeRefresh, matviewIdentities } from './cli/refresh-execute.js';
-export type { RefreshRun, RefreshRunner } from './cli/refresh-execute.js';
+export { executeRefresh, matviewIdentities } from './cli/refresh-execute';
+export type { RefreshRun, RefreshRunner } from './cli/refresh-execute';

package/src/sst.ts

@@ -11,7 +11,7 @@
  * @module
  */
 
-import { loadEnvConfig, type EnvConfig } from './env.js';
+import { loadEnvConfig, type EnvConfig } from './env';
 
 export { loadEnvConfig, type EnvConfig };