@lenne.tech/nest-server 11.43.2 → 12.0.0

package/src/core/modules/ai/models/core-ai-interaction.model.ts

@@ -2,11 +2,11 @@ import { ObjectType } from '@nestjs/graphql';
 import { Schema as MongooseSchema, SchemaFactory } from '@nestjs/mongoose';
 import { Document, Schema } from 'mongoose';
 
-import { Restricted } from '../../../common/decorators/restricted.decorator';
-import { UnifiedField } from '../../../common/decorators/unified-field.decorator';
-import { RoleEnum } from '../../../common/enums/role.enum';
-import { JSON } from '../../../common/scalars/json.scalar';
-import { CorePersistenceModel } from '../../../common/models/core-persistence.model';
+import { Restricted } from '../../../common/decorators/restricted.decorator.js';
+import { UnifiedField } from '../../../common/decorators/unified-field.decorator.js';
+import { RoleEnum } from '../../../common/enums/role.enum.js';
+import { JSON } from '../../../common/scalars/json.scalar.js';
+import { CorePersistenceModel } from '../../../common/models/core-persistence.model.js';
 
 export type AiInteractionDocument = CoreAiInteraction & Document;
 

package/src/core/modules/ai/models/core-ai-message.model.ts

@@ -1,7 +1,7 @@
 import { Field, ObjectType } from '@nestjs/graphql';
 
-import { Restricted } from '../../../common/decorators/restricted.decorator';
-import { RoleEnum } from '../../../common/enums/role.enum';
+import { Restricted } from '../../../common/decorators/restricted.decorator.js';
+import { RoleEnum } from '../../../common/enums/role.enum.js';
 
 /**
  * A single message in an AI conversation (stored as a Mongoose Mixed subdocument).

package/src/core/modules/ai/models/core-ai-mode.model.ts

@@ -2,10 +2,10 @@ import { ObjectType } from '@nestjs/graphql';
 import { Schema as MongooseSchema, SchemaFactory } from '@nestjs/mongoose';
 import { Document } from 'mongoose';
 
-import { Restricted } from '../../../common/decorators/restricted.decorator';
-import { UnifiedField } from '../../../common/decorators/unified-field.decorator';
-import { RoleEnum } from '../../../common/enums/role.enum';
-import { CorePersistenceModel } from '../../../common/models/core-persistence.model';
+import { Restricted } from '../../../common/decorators/restricted.decorator.js';
+import { UnifiedField } from '../../../common/decorators/unified-field.decorator.js';
+import { RoleEnum } from '../../../common/enums/role.enum.js';
+import { CorePersistenceModel } from '../../../common/models/core-persistence.model.js';
 
 export type AiModeDocument = CoreAiMode & Document;
 

package/src/core/modules/ai/models/core-ai-prompt-hint.model.ts

@@ -2,10 +2,10 @@ import { ObjectType } from '@nestjs/graphql';
 import { Schema as MongooseSchema, SchemaFactory } from '@nestjs/mongoose';
 import { Document } from 'mongoose';
 
-import { Restricted } from '../../../common/decorators/restricted.decorator';
-import { UnifiedField } from '../../../common/decorators/unified-field.decorator';
-import { RoleEnum } from '../../../common/enums/role.enum';
-import { CorePersistenceModel } from '../../../common/models/core-persistence.model';
+import { Restricted } from '../../../common/decorators/restricted.decorator.js';
+import { UnifiedField } from '../../../common/decorators/unified-field.decorator.js';
+import { RoleEnum } from '../../../common/enums/role.enum.js';
+import { CorePersistenceModel } from '../../../common/models/core-persistence.model.js';
 
 export type AiPromptHintDocument = CoreAiPromptHint & Document;
 

package/src/core/modules/ai/models/core-ai-prompt.model.ts

@@ -2,10 +2,10 @@ import { ObjectType } from '@nestjs/graphql';
 import { Schema as MongooseSchema, SchemaFactory } from '@nestjs/mongoose';
 import { Document } from 'mongoose';
 
-import { Restricted } from '../../../common/decorators/restricted.decorator';
-import { UnifiedField } from '../../../common/decorators/unified-field.decorator';
-import { RoleEnum } from '../../../common/enums/role.enum';
-import { CorePersistenceModel } from '../../../common/models/core-persistence.model';
+import { Restricted } from '../../../common/decorators/restricted.decorator.js';
+import { UnifiedField } from '../../../common/decorators/unified-field.decorator.js';
+import { RoleEnum } from '../../../common/enums/role.enum.js';
+import { CorePersistenceModel } from '../../../common/models/core-persistence.model.js';
 
 export type AiPromptDocument = CoreAiPrompt & Document;
 

package/src/core/modules/ai/models/core-ai-response.model.ts

@@ -1,11 +1,11 @@
 import { Field, Int, ObjectType } from '@nestjs/graphql';
 
-import { Restricted } from '../../../common/decorators/restricted.decorator';
-import { RoleEnum } from '../../../common/enums/role.enum';
-import { JSON } from '../../../common/scalars/json.scalar';
-import { CoreAiAction } from './core-ai-action.model';
-import { CoreAiBudgetSummary } from './core-ai-usage-info.model';
-import { CoreAiUsage } from './core-ai-usage.model';
+import { Restricted } from '../../../common/decorators/restricted.decorator.js';
+import { RoleEnum } from '../../../common/enums/role.enum.js';
+import { JSON } from '../../../common/scalars/json.scalar.js';
+import { CoreAiAction } from './core-ai-action.model.js';
+import { CoreAiBudgetSummary } from './core-ai-usage-info.model.js';
+import { CoreAiUsage } from './core-ai-usage.model.js';
 
 /**
  * Structured response of an AI prompt.

package/src/core/modules/ai/models/core-ai-slot.model.ts

@@ -2,10 +2,10 @@ import { ObjectType } from '@nestjs/graphql';
 import { Schema as MongooseSchema, SchemaFactory } from '@nestjs/mongoose';
 import { Document } from 'mongoose';
 
-import { Restricted } from '../../../common/decorators/restricted.decorator';
-import { UnifiedField } from '../../../common/decorators/unified-field.decorator';
-import { RoleEnum } from '../../../common/enums/role.enum';
-import { CorePersistenceModel } from '../../../common/models/core-persistence.model';
+import { Restricted } from '../../../common/decorators/restricted.decorator.js';
+import { UnifiedField } from '../../../common/decorators/unified-field.decorator.js';
+import { RoleEnum } from '../../../common/enums/role.enum.js';
+import { CorePersistenceModel } from '../../../common/models/core-persistence.model.js';
 
 export type AiSlotDocument = CoreAiSlot & Document;
 

package/src/core/modules/ai/models/core-ai-tool-grant.model.ts

@@ -2,10 +2,10 @@ import { ObjectType } from '@nestjs/graphql';
 import { Schema as MongooseSchema, SchemaFactory } from '@nestjs/mongoose';
 import { Document } from 'mongoose';
 
-import { Restricted } from '../../../common/decorators/restricted.decorator';
-import { UnifiedField } from '../../../common/decorators/unified-field.decorator';
-import { RoleEnum } from '../../../common/enums/role.enum';
-import { CorePersistenceModel } from '../../../common/models/core-persistence.model';
+import { Restricted } from '../../../common/decorators/restricted.decorator.js';
+import { UnifiedField } from '../../../common/decorators/unified-field.decorator.js';
+import { RoleEnum } from '../../../common/enums/role.enum.js';
+import { CorePersistenceModel } from '../../../common/models/core-persistence.model.js';
 
 export type AiToolGrantDocument = CoreAiToolGrant & Document;
 

package/src/core/modules/ai/models/core-ai-tool-policy.model.ts

@@ -2,11 +2,11 @@ import { Field, ObjectType } from '@nestjs/graphql';
 import { Schema as MongooseSchema, SchemaFactory } from '@nestjs/mongoose';
 import { Document } from 'mongoose';
 
-import { Restricted } from '../../../common/decorators/restricted.decorator';
-import { UnifiedField } from '../../../common/decorators/unified-field.decorator';
-import { RoleEnum } from '../../../common/enums/role.enum';
-import { CorePersistenceModel } from '../../../common/models/core-persistence.model';
-import { JSON } from '../../../common/scalars/json.scalar';
+import { Restricted } from '../../../common/decorators/restricted.decorator.js';
+import { UnifiedField } from '../../../common/decorators/unified-field.decorator.js';
+import { RoleEnum } from '../../../common/enums/role.enum.js';
+import { CorePersistenceModel } from '../../../common/models/core-persistence.model.js';
+import { JSON } from '../../../common/scalars/json.scalar.js';
 
 export type AiToolPolicyDocument = CoreAiToolPolicy & Document;
 

package/src/core/modules/ai/models/core-ai-usage-info.model.ts

@@ -1,7 +1,7 @@
 import { Field, Int, ObjectType } from '@nestjs/graphql';
 
-import { Restricted } from '../../../common/decorators/restricted.decorator';
-import { RoleEnum } from '../../../common/enums/role.enum';
+import { Restricted } from '../../../common/decorators/restricted.decorator.js';
+import { RoleEnum } from '../../../common/enums/role.enum.js';
 
 /**
  * Compact token-budget summary attached to every prompt response.

package/src/core/modules/ai/models/core-ai-usage.model.ts

@@ -1,7 +1,7 @@
 import { Field, Int, ObjectType } from '@nestjs/graphql';
 
-import { Restricted } from '../../../common/decorators/restricted.decorator';
-import { RoleEnum } from '../../../common/enums/role.enum';
+import { Restricted } from '../../../common/decorators/restricted.decorator.js';
+import { RoleEnum } from '../../../common/enums/role.enum.js';
 
 /**
  * Token usage of an AI prompt (best effort, summed across agent-loop iterations).

package/src/core/modules/ai/providers/claude-cli.provider.ts

@@ -2,8 +2,8 @@ import { BadGatewayException, Logger, ServiceUnavailableException } from '@nestj
 import { spawn } from 'node:child_process';
 import { tmpdir } from 'node:os';
 
-import { ConfigService } from '../../../common/services/config.service';
-import { ErrorCode } from '../../error-code';
+import { ConfigService } from '../../../common/services/config.service.js';
+import { ErrorCode } from '../../error-code/index.js';
 import {
   ILlmProvider,
   LlmCapabilities,
@@ -11,8 +11,8 @@ import {
   LlmMessage,
   LlmResponse,
   LlmToolSchema,
-} from '../interfaces/llm-provider.interface';
-import { ResolvedAiConnection } from '../interfaces/resolved-ai-connection.interface';
+} from '../interfaces/llm-provider.interface.js';
+import { ResolvedAiConnection } from '../interfaces/resolved-ai-connection.interface.js';
 
 /**
  * Provider that drives the local Claude Code CLI (`claude`) as an LLM backend.

package/src/core/modules/ai/providers/llm-provider.factory.ts

@@ -1,8 +1,8 @@
 import { Injectable, Logger } from '@nestjs/common';
 
-import { ILlmProvider } from '../interfaces/llm-provider.interface';
-import { ResolvedAiConnection } from '../interfaces/resolved-ai-connection.interface';
-import { OpenAiCompatibleProvider } from './openai-compatible.provider';
+import { ILlmProvider } from '../interfaces/llm-provider.interface.js';
+import { ResolvedAiConnection } from '../interfaces/resolved-ai-connection.interface.js';
+import { OpenAiCompatibleProvider } from './openai-compatible.provider.js';
 
 /**
  * Builds an {@link ILlmProvider} from a resolved connection.

package/src/core/modules/ai/providers/openai-compatible.provider.ts

@@ -1,7 +1,7 @@
 import { BadGatewayException, Logger, ServiceUnavailableException } from '@nestjs/common';
 
-import { ConfigService } from '../../../common/services/config.service';
-import { ErrorCode } from '../../error-code';
+import { ConfigService } from '../../../common/services/config.service.js';
+import { ErrorCode } from '../../error-code/index.js';
 import {
   ILlmProvider,
   LlmCapabilities,
@@ -10,8 +10,8 @@ import {
   LlmResponse,
   LlmToolSchema,
   LlmUsage,
-} from '../interfaces/llm-provider.interface';
-import { ResolvedAiConnection } from '../interfaces/resolved-ai-connection.interface';
+} from '../interfaces/llm-provider.interface.js';
+import { ResolvedAiConnection } from '../interfaces/resolved-ai-connection.interface.js';
 
 /**
  * Provider for OpenAI-compatible chat-completions endpoints.

package/src/core/modules/ai/services/ai-crypto.service.ts

@@ -1,8 +1,8 @@
 import { Injectable, Logger, OnModuleInit } from '@nestjs/common';
 import { createCipheriv, createDecipheriv, createHash, randomBytes } from 'node:crypto';
 
-import { isProductionLikeEnv } from '../../../common/helpers/cookies.helper';
-import { ConfigService } from '../../../common/services/config.service';
+import { isProductionLikeEnv } from '../../../common/helpers/cookies.helper.js';
+import { ConfigService } from '../../../common/services/config.service.js';
 
 /**
  * AES-256-GCM wrapper for AI connection secrets (API keys).

package/src/core/modules/ai/services/core-ai-budget.service.ts

@@ -1,24 +1,24 @@
 import { HttpException, HttpStatus, Inject, Injectable } from '@nestjs/common';
 import { InjectConnection, InjectModel } from '@nestjs/mongoose';
-import { Connection, Model } from 'mongoose';
+import { type Connection, Model } from 'mongoose';
 
-import { ConfigService } from '../../../common/services/config.service';
-import { CrudService } from '../../../common/services/crud.service';
-import { CoreModelConstructor } from '../../../common/types/core-model-constructor.type';
-import { ErrorCode } from '../../error-code';
-import { CoreAiBudgetLimitCreateInput } from '../inputs/core-ai-budget-limit-create.input';
-import { CoreAiBudgetLimitInput } from '../inputs/core-ai-budget-limit.input';
-import { AiBudgetLimitDocument, CoreAiBudgetLimit } from '../models/core-ai-budget-limit.model';
-import { CoreAiBudgetSummary, CoreAiUsageInfo, CoreAiUsageScope } from '../models/core-ai-usage-info.model';
+import { ConfigService } from '../../../common/services/config.service.js';
+import { CrudService } from '../../../common/services/crud.service.js';
+import type { CoreModelConstructor } from '../../../common/types/core-model-constructor.type.js';
+import { ErrorCode } from '../../error-code/index.js';
+import { CoreAiBudgetLimitCreateInput } from '../inputs/core-ai-budget-limit-create.input.js';
+import { CoreAiBudgetLimitInput } from '../inputs/core-ai-budget-limit.input.js';
+import { AiBudgetLimitDocument, CoreAiBudgetLimit } from '../models/core-ai-budget-limit.model.js';
+import { CoreAiBudgetSummary, CoreAiUsageInfo, CoreAiUsageScope } from '../models/core-ai-usage-info.model.js';
 
-import { AI_BUDGET_LIMIT_CLASS, AI_BUDGET_LIMIT_MODEL } from '../core-ai.constants';
+import { AI_BUDGET_LIMIT_CLASS, AI_BUDGET_LIMIT_MODEL } from '../core-ai.constants.js';
 
 /**
  * @deprecated Import from `../core-ai.constants` instead. Re-exported only so existing deep imports
  * keep working; the tokens are declared in an import-free leaf so no cycle can form around them
  * (SWC-safe — see core-ai.constants.ts).
  */
-export { AI_BUDGET_LIMIT_CLASS, AI_BUDGET_LIMIT_MODEL } from '../core-ai.constants';
+export { AI_BUDGET_LIMIT_CLASS, AI_BUDGET_LIMIT_MODEL } from '../core-ai.constants.js';
 
 /** Resolved effective limit for a scope. */
 export interface ResolvedAiBudgetLimit {

package/src/core/modules/ai/services/core-ai-connection-preference.service.ts

@@ -2,22 +2,22 @@ import { Inject, Injectable } from '@nestjs/common';
 import { InjectModel } from '@nestjs/mongoose';
 import { Model } from 'mongoose';
 
-import { CrudService } from '../../../common/services/crud.service';
-import { CoreModelConstructor } from '../../../common/types/core-model-constructor.type';
-import { CoreAiConnectionPreferenceInput } from '../inputs/core-ai-connection-preference.input';
+import { CrudService } from '../../../common/services/crud.service.js';
+import type { CoreModelConstructor } from '../../../common/types/core-model-constructor.type.js';
+import { CoreAiConnectionPreferenceInput } from '../inputs/core-ai-connection-preference.input.js';
 import {
   AiConnectionPreferenceDocument,
   CoreAiConnectionPreference,
-} from '../models/core-ai-connection-preference.model';
+} from '../models/core-ai-connection-preference.model.js';
 
-import { AI_CONNECTION_PREFERENCE_CLASS, AI_CONNECTION_PREFERENCE_MODEL } from '../core-ai.constants';
+import { AI_CONNECTION_PREFERENCE_CLASS, AI_CONNECTION_PREFERENCE_MODEL } from '../core-ai.constants.js';
 
 /**
  * @deprecated Import from `../core-ai.constants` instead. Re-exported only so existing deep imports
  * keep working; the tokens are declared in an import-free leaf so no cycle can form around them
  * (SWC-safe — see core-ai.constants.ts).
  */
-export { AI_CONNECTION_PREFERENCE_CLASS, AI_CONNECTION_PREFERENCE_MODEL } from '../core-ai.constants';
+export { AI_CONNECTION_PREFERENCE_CLASS, AI_CONNECTION_PREFERENCE_MODEL } from '../core-ai.constants.js';
 
 /**
  * CRUD + lookup for {@link CoreAiConnectionPreference} (tenant/user connection
@@ -70,7 +70,11 @@ export class CoreAiConnectionPreferenceService extends CrudService<
     enforced = false,
   ): Promise<CoreAiConnectionPreference> {
     const doc = await this.mainDbModel
-      .findOneAndUpdate({ refId, scope }, { $set: { connectionId, enforced } }, { new: true, upsert: true })
+      .findOneAndUpdate(
+        { refId, scope },
+        { $set: { connectionId, enforced } },
+        { returnDocument: 'after', upsert: true },
+      )
       .lean()
       .exec();
     return this.mainModelConstructor.map(doc);

package/src/core/modules/ai/services/core-ai-connection-resolver.service.ts

@@ -1,11 +1,11 @@
 import { ForbiddenException, Injectable, Logger, NotFoundException, Optional } from '@nestjs/common';
 
-import { ErrorCode } from '../../error-code';
-import { ResolvedAiConnection } from '../interfaces/resolved-ai-connection.interface';
-import { CoreAiAvailableConnection } from '../models/core-ai-available-connection.model';
-import { CoreAiConnectionPreference } from '../models/core-ai-connection-preference.model';
-import { CoreAiConnectionPreferenceService } from './core-ai-connection-preference.service';
-import { CoreAiConnectionService } from './core-ai-connection.service';
+import { ErrorCode } from '../../error-code/index.js';
+import { ResolvedAiConnection } from '../interfaces/resolved-ai-connection.interface.js';
+import { CoreAiAvailableConnection } from '../models/core-ai-available-connection.model.js';
+import { CoreAiConnectionPreference } from '../models/core-ai-connection-preference.model.js';
+import { CoreAiConnectionPreferenceService } from './core-ai-connection-preference.service.js';
+import { CoreAiConnectionService } from './core-ai-connection.service.js';
 
 /**
  * Lightweight connection shape used during resolution (no secrets). `model` and

package/src/core/modules/ai/services/core-ai-connection.service.ts

@@ -10,27 +10,27 @@ import {
 import { InjectModel } from '@nestjs/mongoose';
 import { Model } from 'mongoose';
 
-import { ServiceOptions } from '../../../common/interfaces/service-options.interface';
-import { CrudService } from '../../../common/services/crud.service';
-import { ConfigService } from '../../../common/services/config.service';
-import { CoreModelConstructor } from '../../../common/types/core-model-constructor.type';
-import { ErrorCode } from '../../error-code';
-import { CoreAiConnectionCreateInput } from '../inputs/core-ai-connection-create.input';
-import { CoreAiConnectionInput } from '../inputs/core-ai-connection.input';
-import { ResolvedAiConnection } from '../interfaces/resolved-ai-connection.interface';
-import { AiConnectionDocument, CoreAiConnection } from '../models/core-ai-connection.model';
-import { LlmProviderFactory } from '../providers/llm-provider.factory';
-import { AiCryptoService } from './ai-crypto.service';
-import { CoreAiConnectionPreferenceService } from './core-ai-connection-preference.service';
+import { ServiceOptions } from '../../../common/interfaces/service-options.interface.js';
+import { CrudService } from '../../../common/services/crud.service.js';
+import { ConfigService } from '../../../common/services/config.service.js';
+import type { CoreModelConstructor } from '../../../common/types/core-model-constructor.type.js';
+import { ErrorCode } from '../../error-code/index.js';
+import { CoreAiConnectionCreateInput } from '../inputs/core-ai-connection-create.input.js';
+import { CoreAiConnectionInput } from '../inputs/core-ai-connection.input.js';
+import { ResolvedAiConnection } from '../interfaces/resolved-ai-connection.interface.js';
+import { AiConnectionDocument, CoreAiConnection } from '../models/core-ai-connection.model.js';
+import { LlmProviderFactory } from '../providers/llm-provider.factory.js';
+import { AiCryptoService } from './ai-crypto.service.js';
+import { CoreAiConnectionPreferenceService } from './core-ai-connection-preference.service.js';
 
-import { AI_CONNECTION_CLASS, AI_CONNECTION_MODEL } from '../core-ai.constants';
+import { AI_CONNECTION_CLASS, AI_CONNECTION_MODEL } from '../core-ai.constants.js';
 
 /**
  * @deprecated Import from `../core-ai.constants` instead. Re-exported only so existing deep imports
  * keep working; the tokens are declared in an import-free leaf so no cycle can form around them
  * (SWC-safe — see core-ai.constants.ts).
  */
-export { AI_CONNECTION_CLASS, AI_CONNECTION_MODEL } from '../core-ai.constants';
+export { AI_CONNECTION_CLASS, AI_CONNECTION_MODEL } from '../core-ai.constants.js';
 
 /**
  * Minimal shape of a persisted (lean) connection document that the boot-time drift

package/src/core/modules/ai/services/core-ai-conversation.service.ts

@@ -1,23 +1,23 @@
 import { Inject, Injectable } from '@nestjs/common';
 import { InjectConnection, InjectModel } from '@nestjs/mongoose';
-import { Connection, Model, Types } from 'mongoose';
+import { type Connection, Model, Types } from 'mongoose';
 
-import { RoleEnum } from '../../../common/enums/role.enum';
-import { ServiceOptions } from '../../../common/interfaces/service-options.interface';
-import { CrudService } from '../../../common/services/crud.service';
-import { CoreModelConstructor } from '../../../common/types/core-model-constructor.type';
-import { CoreAiConversationCreateInput } from '../inputs/core-ai-conversation-create.input';
-import { CoreAiConversationInput } from '../inputs/core-ai-conversation.input';
-import { AiConversationDocument, CoreAiConversation } from '../models/core-ai-conversation.model';
+import { RoleEnum } from '../../../common/enums/role.enum.js';
+import { ServiceOptions } from '../../../common/interfaces/service-options.interface.js';
+import { CrudService } from '../../../common/services/crud.service.js';
+import type { CoreModelConstructor } from '../../../common/types/core-model-constructor.type.js';
+import { CoreAiConversationCreateInput } from '../inputs/core-ai-conversation-create.input.js';
+import { CoreAiConversationInput } from '../inputs/core-ai-conversation.input.js';
+import { AiConversationDocument, CoreAiConversation } from '../models/core-ai-conversation.model.js';
 
-import { AI_CONVERSATION_CLASS, AI_CONVERSATION_MODEL } from '../core-ai.constants';
+import { AI_CONVERSATION_CLASS, AI_CONVERSATION_MODEL } from '../core-ai.constants.js';
 
 /**
  * @deprecated Import from `../core-ai.constants` instead. Re-exported only so existing deep imports
  * keep working; the tokens are declared in an import-free leaf so no cycle can form around them
  * (SWC-safe — see core-ai.constants.ts).
  */
-export { AI_CONVERSATION_CLASS, AI_CONVERSATION_MODEL } from '../core-ai.constants';
+export { AI_CONVERSATION_CLASS, AI_CONVERSATION_MODEL } from '../core-ai.constants.js';
 
 /**
  * CRUD service for multi-turn {@link CoreAiConversation}s.

package/src/core/modules/ai/services/core-ai-interaction.service.ts

@@ -2,19 +2,19 @@ import { Inject, Injectable } from '@nestjs/common';
 import { InjectModel } from '@nestjs/mongoose';
 import { Model } from 'mongoose';
 
-import { CrudService } from '../../../common/services/crud.service';
-import { CoreModelConstructor } from '../../../common/types/core-model-constructor.type';
-import { AiInteractionDocument, CoreAiInteraction } from '../models/core-ai-interaction.model';
-import type { AiInteractionRecord } from '../interfaces/ai-interaction-record.interface';
+import { CrudService } from '../../../common/services/crud.service.js';
+import type { CoreModelConstructor } from '../../../common/types/core-model-constructor.type.js';
+import { AiInteractionDocument, CoreAiInteraction } from '../models/core-ai-interaction.model.js';
+import type { AiInteractionRecord } from '../interfaces/ai-interaction-record.interface.js';
 
-import { AI_INTERACTION_CLASS, AI_INTERACTION_MODEL } from '../core-ai.constants';
+import { AI_INTERACTION_CLASS, AI_INTERACTION_MODEL } from '../core-ai.constants.js';
 
 /**
  * @deprecated Import from `../core-ai.constants` instead. Re-exported only so existing deep imports
  * keep working; the tokens are declared in an import-free leaf so no cycle can form around them
  * (SWC-safe — see core-ai.constants.ts).
  */
-export { AI_INTERACTION_CLASS, AI_INTERACTION_MODEL } from '../core-ai.constants';
+export { AI_INTERACTION_CLASS, AI_INTERACTION_MODEL } from '../core-ai.constants.js';
 
 /**
  * CRUD + write service for {@link CoreAiInteraction} audit records.

package/src/core/modules/ai/services/core-ai-mcp-client.service.ts

@@ -1,8 +1,8 @@
 import { Injectable, Logger } from '@nestjs/common';
 
-import { RoleEnum } from '../../../common/enums/role.enum';
-import { AiToolContext, AiToolResult, IAiTool } from '../interfaces/ai-tool.interface';
-import { AiToolRegistry } from '../tools/ai-tool.registry';
+import { RoleEnum } from '../../../common/enums/role.enum.js';
+import { AiToolContext, AiToolResult, IAiTool } from '../interfaces/ai-tool.interface.js';
+import { AiToolRegistry } from '../tools/ai-tool.registry.js';
 
 /**
  * The MCP-client side of `@modelcontextprotocol/sdk` that we need to talk to. Kept

package/src/core/modules/ai/services/core-ai-mcp-oauth.service.ts

@@ -1,14 +1,13 @@
-import type * as OAuthErrors from '@modelcontextprotocol/sdk/server/auth/errors.js';
 import { Injectable, Logger, OnModuleInit } from '@nestjs/common';
 import { InjectConnection } from '@nestjs/mongoose';
 import { AsyncLocalStorage } from 'node:async_hooks';
 import { createHash, createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
-import { Connection } from 'mongoose';
+import type { Connection } from 'mongoose';
 
-import { isLocalEnv, resolveAppUrlFromConfig } from '../../../common/helpers/cookies.helper';
-import { ConfigService } from '../../../common/services/config.service';
-import { getApiTokenContext, hasApiTokenCredential } from '../../api-token/core-api-token.helpers';
-import { getBetterAuthTokenService } from '../../better-auth/core-better-auth.registry';
+import { isLocalEnv, resolveAppUrlFromConfig } from '../../../common/helpers/cookies.helper.js';
+import { ConfigService } from '../../../common/services/config.service.js';
+import { getApiTokenContext, hasApiTokenCredential } from '../../api-token/core-api-token.helpers.js';
+import { getBetterAuthTokenService } from '../../better-auth/core-better-auth.registry.js';
 import {
   IMcpOAuthConsentView,
   MCP_OAUTH_CONSENT_DECISION_FIELD,
@@ -16,8 +15,45 @@ import {
   mcpOAuthConsentHeaders,
   mcpOAuthConsentLocale,
   renderMcpOAuthConsentPage,
-} from '../helpers/ai-mcp-oauth-consent.helper';
-import { getMountedMcpOAuth } from '../helpers/ai-mcp-oauth.registry';
+} from '../helpers/ai-mcp-oauth-consent.helper.js';
+import { getMountedMcpOAuth } from '../helpers/ai-mcp-oauth.registry.js';
+
+/** One of the MCP SDK's OAuth error classes: constructed with a message (and optionally an error URI) and thrown. */
+export interface IMcpOAuthErrorClass {
+  new (message: string, errorUri?: string): Error & { readonly errorCode: string };
+}
+
+/**
+ * The MCP SDK's OAuth error classes by name — what {@link CoreAiMcpOAuthService.loadOAuthErrors} resolves to,
+ * and what a project's own consent step (`authorizeConsent()` override) throws from. A thrown instance is
+ * answered by the SDK with the matching OAuth error response; anything else becomes a 500.
+ *
+ * Structural on purpose. The SDK ships separate CJS and ESM builds, the lazy `import()` loads the ESM one
+ * under `module: nodenext` and the CJS one under `module: commonjs` (a vendor project's tsconfig), and the
+ * classes of one build are not assignable to the other's. A type derived from either build also cannot be
+ * named in a consumer's declarations once its pnpm layout is isolated (TS2883, measured in a vendor project
+ * on `module: commonjs`). Every class the SDK exports with the `(message, errorUri?)` constructor is listed.
+ */
+export interface IMcpOAuthErrorClasses {
+  AccessDeniedError: IMcpOAuthErrorClass;
+  InsufficientScopeError: IMcpOAuthErrorClass;
+  InvalidClientError: IMcpOAuthErrorClass;
+  InvalidClientMetadataError: IMcpOAuthErrorClass;
+  InvalidGrantError: IMcpOAuthErrorClass;
+  InvalidRequestError: IMcpOAuthErrorClass;
+  InvalidScopeError: IMcpOAuthErrorClass;
+  InvalidTargetError: IMcpOAuthErrorClass;
+  InvalidTokenError: IMcpOAuthErrorClass;
+  MethodNotAllowedError: IMcpOAuthErrorClass;
+  OAuthError: IMcpOAuthErrorClass;
+  ServerError: IMcpOAuthErrorClass;
+  TemporarilyUnavailableError: IMcpOAuthErrorClass;
+  TooManyRequestsError: IMcpOAuthErrorClass;
+  UnauthorizedClientError: IMcpOAuthErrorClass;
+  UnsupportedGrantTypeError: IMcpOAuthErrorClass;
+  UnsupportedResponseTypeError: IMcpOAuthErrorClass;
+  UnsupportedTokenTypeError: IMcpOAuthErrorClass;
+}
 
 /**
  * Stored OAuth client (dynamically registered).
@@ -727,7 +763,7 @@ export class CoreAiMcpOAuthService implements OnModuleInit {
    * `mountAiMcpOAuth()` imports the router, so both resolve the same build of the SDK: a class
    * from its other build (CJS vs. ESM) would fail that `instanceof` just like a plain `Error`.
    */
-  protected loadOAuthErrors(): Promise<typeof OAuthErrors> {
+  protected loadOAuthErrors(): Promise<IMcpOAuthErrorClasses> {
     return import('@modelcontextprotocol/sdk/server/auth/errors.js');
   }
 

package/src/core/modules/ai/services/core-ai-mcp.service.ts

@@ -1,7 +1,7 @@
 import { Injectable, Logger } from '@nestjs/common';
 
-import { AiToolContext } from '../interfaces/ai-tool.interface';
-import { AiToolRegistry, AiToolUser } from '../tools/ai-tool.registry';
+import { AiToolContext } from '../interfaces/ai-tool.interface.js';
+import { AiToolRegistry, AiToolUser } from '../tools/ai-tool.registry.js';
 
 /**
  * MCP tool descriptor (name + description + JSON-schema input).

package/src/core/modules/ai/services/core-ai-mode.service.ts

@@ -2,18 +2,18 @@ import { Inject, Injectable, Logger } from '@nestjs/common';
 import { InjectModel } from '@nestjs/mongoose';
 import { Model } from 'mongoose';
 
-import { CrudService } from '../../../common/services/crud.service';
-import { CoreModelConstructor } from '../../../common/types/core-model-constructor.type';
-import { AiModeDocument, CoreAiMode } from '../models/core-ai-mode.model';
+import { CrudService } from '../../../common/services/crud.service.js';
+import type { CoreModelConstructor } from '../../../common/types/core-model-constructor.type.js';
+import { AiModeDocument, CoreAiMode } from '../models/core-ai-mode.model.js';
 
-import { AI_MODE_CLASS, AI_MODE_MODEL } from '../core-ai.constants';
+import { AI_MODE_CLASS, AI_MODE_MODEL } from '../core-ai.constants.js';
 
 /**
  * @deprecated Import from `../core-ai.constants` instead. Re-exported only so existing deep imports
  * keep working; the tokens are declared in an import-free leaf so no cycle can form around them
  * (SWC-safe — see core-ai.constants.ts).
  */
-export { AI_MODE_CLASS, AI_MODE_MODEL } from '../core-ai.constants';
+export { AI_MODE_CLASS, AI_MODE_MODEL } from '../core-ai.constants.js';
 
 /**
  * Named-mode store. See {@link CoreAiMode}. Override via

package/src/core/modules/ai/services/core-ai-placeholder.registry.ts

@@ -1,8 +1,8 @@
 import { Injectable, Logger, OnModuleInit } from '@nestjs/common';
 
-import { ConfigService } from '../../../common/services/config.service';
-import { AiPlaceholderContext, AiPlaceholderInfo, IAiPlaceholder } from '../interfaces/ai-placeholder.interface';
-import { CoreAiPromptHintService } from './core-ai-prompt-hint.service';
+import { ConfigService } from '../../../common/services/config.service.js';
+import { AiPlaceholderContext, AiPlaceholderInfo, IAiPlaceholder } from '../interfaces/ai-placeholder.interface.js';
+import { CoreAiPromptHintService } from './core-ai-prompt-hint.service.js';
 
 /**
  * Runtime registry of `{{placeholder}}` resolvers used by slots and user

package/src/core/modules/ai/services/core-ai-prompt-builder.service.ts

@@ -1,11 +1,11 @@
 import { Injectable, Logger, Optional } from '@nestjs/common';
 
-import { ConfigService } from '../../../common/services/config.service';
-import { IAiTool } from '../interfaces/ai-tool.interface';
-import { LlmToolSchema } from '../interfaces/llm-provider.interface';
-import { CoreAiPlaceholderRegistry } from './core-ai-placeholder.registry';
-import { CoreAiPromptHintService } from './core-ai-prompt-hint.service';
-import { CoreAiSlotService, getSystemDefaultSlots, ResolvedPromptFragment } from './core-ai-slot.service';
+import { ConfigService } from '../../../common/services/config.service.js';
+import { IAiTool } from '../interfaces/ai-tool.interface.js';
+import { LlmToolSchema } from '../interfaces/llm-provider.interface.js';
+import { CoreAiPlaceholderRegistry } from './core-ai-placeholder.registry.js';
+import { CoreAiPromptHintService } from './core-ai-prompt-hint.service.js';
+import { CoreAiSlotService, getSystemDefaultSlots, ResolvedPromptFragment } from './core-ai-slot.service.js';
 
 /** Options for a prompt build (locale for template/hint selection). */
 export interface BuildPromptOptions {