@timber-js/app 0.2.0-alpha.191 → 0.2.0-alpha.194

package/src/server/rsc-entry/deny-fallback.ts

@@ -10,16 +10,16 @@
  * Design docs: 04-authorization.md, 10-error-handling.md
  */
 
-import type { LayoutEntry } from '../deny-renderer.js';
-import { renderDenyPage, renderDenyPageAsRsc } from '../deny-renderer.js';
-import type { ClientBootstrapConfig } from '../html-injectors.js';
-import { logRenderError } from '../logger.js';
-import type { PipelineConfig, RouteMatch } from '../pipeline.js';
-import type { ManifestSegmentNode } from '../route-matcher.js';
-import { loadModule } from '../safe-load.js';
-import { createDebugChannelSink } from './helpers.js';
-import { isRscRequest } from '../../shared/rsc-media-type.js';
-import { callSsr } from './ssr-bridge.js';
+import type { LayoutEntry } from '../deny-renderer.ts';
+import { renderDenyPage, renderDenyPageAsRsc } from '../deny-renderer.ts';
+import type { ClientBootstrapConfig } from '../html-injectors.ts';
+import { logRenderError } from '../logger.ts';
+import type { PipelineConfig, RouteMatch } from '../pipeline.ts';
+import type { ManifestSegmentNode } from '../route-matcher.ts';
+import { loadModule } from '../safe-load.ts';
+import { createDebugChannelSink } from './helpers.ts';
+import { isRscRequest } from '../../shared/rsc-media-type.ts';
+import { callSsr } from './ssr-bridge.ts';
 
 /**
  * Create the pipeline's deny fallback renderer.

package/src/server/rsc-entry/error-renderer.ts

@@ -13,33 +13,33 @@
  */
 
 import { createElement } from 'react';
-import { renderToReadableStream } from '../../rsc-runtime/rsc.js';
-
-import type { RouteMatch } from '../pipeline.js';
-import { logRenderError } from '../logger.js';
-import { appVisibleSearch } from '../../shared/rsc-cache-key.js';
-import { getSlotParamsForClient } from '../request-context.js';
-import type { ManifestSegmentNode } from '../route-matcher.js';
-import { DenySignal, RenderError } from '../primitives.js';
-import type { ClientBootstrapConfig } from '../html-injectors.js';
-import { flightInitScript, htmlEscapeJsonString } from '../flight-scripts.js';
-import { renderDenyPage, renderDenyPageAsRsc } from '../deny-renderer.js';
-import type { DefaultPageRenderer, LayoutEntry } from '../deny-renderer.js';
-import type { NavContext } from '../ssr-bridge-types.js';
-import { createDebugChannelSink } from './helpers.js';
-import { isRscRequest } from '../../shared/rsc-media-type.js';
-import { withPublishedParams } from '../publish-params.js';
-import { getCookiesForSsr } from '../cookie-context.js';
-import { callSsr } from './ssr-bridge.js';
-import { teeWithErrorPropagation } from '../stream-utils.js';
-import { isDevMode } from '../debug.js';
-import { ErrorReconstituter } from '../../client/error-reconstituter.js';
-import type { SerializableError } from '../../client/error-reconstituter.js';
-import { loadModule } from '../safe-load.js';
-import { sourceMapError } from '../dev-source-map.js';
-import { isMdxFilePath as isMdxFile } from '../utils/mdx-file.js';
-import { defaultStatusPageResponse } from '../default-status-page.js';
-import { rscErrorEnvelope } from '../../shared/rsc-error-envelope.js';
+import { renderToReadableStream } from '../../rsc-runtime/rsc.ts';
+
+import type { RouteMatch } from '../pipeline.ts';
+import { logRenderError } from '../logger.ts';
+import { appVisibleSearch } from '../../shared/rsc-cache-key.ts';
+import { getSlotParamsForClient } from '../request-context.ts';
+import type { ManifestSegmentNode } from '../route-matcher.ts';
+import { DenySignal, RenderError } from '../primitives.ts';
+import type { ClientBootstrapConfig } from '../html-injectors.ts';
+import { flightInitScript, htmlEscapeJsonString } from '../flight-scripts.ts';
+import { renderDenyPage, renderDenyPageAsRsc } from '../deny-renderer.ts';
+import type { DefaultPageRenderer, LayoutEntry } from '../deny-renderer.ts';
+import type { NavContext } from '../ssr-bridge-types.ts';
+import { createDebugChannelSink } from './helpers.ts';
+import { isRscRequest } from '../../shared/rsc-media-type.ts';
+import { withPublishedParams } from '../publish-params.ts';
+import { getCookiesForSsr } from '../cookie-context.ts';
+import { callSsr } from './ssr-bridge.ts';
+import { teeWithErrorPropagation } from '../stream-utils.ts';
+import { isDevMode } from '../debug.ts';
+import { ErrorReconstituter } from '../../client/error-reconstituter.tsx';
+import type { SerializableError } from '../../client/error-reconstituter.tsx';
+import { loadModule } from '../safe-load.ts';
+import { sourceMapError } from '../dev-source-map.ts';
+import { isMdxFilePath as isMdxFile } from '../utils/mdx-file.ts';
+import { defaultStatusPageResponse } from '../default-status-page.ts';
+import { rscErrorEnvelope } from '../../shared/rsc-error-envelope.ts';
 
 /**
  * A manifest file reference with lazy import and path.

package/src/server/rsc-entry/helpers.ts

@@ -4,13 +4,13 @@
  * Small, stateless functions used across the RSC entry modules.
  */
 
-import type { ManifestSegmentNode } from '../route-matcher.js';
-import { swallow } from '../logger.js';
-import { computeSegmentKeys, computeSegmentTreePaths } from '../../routing/segment-keys.js';
-import type { SegmentInfo } from '../../shared/segment-info.js';
-import type { SlotSkipEntry } from '../slot-resolver.js';
-import { isClientReference } from '../route-element-builder.js';
-import { isStaticRequestDependent } from '../request-dep.js';
+import type { ManifestSegmentNode } from '../route-matcher.ts';
+import { swallow } from '../logger.ts';
+import { computeSegmentKeys, computeSegmentTreePaths } from '../../routing/segment-keys.ts';
+import type { SegmentInfo } from '../../shared/segment-info.ts';
+import type { SlotSkipEntry } from '../slot-resolver.ts';
+import { isClientReference } from '../route-element-builder.ts';
+import { isStaticRequestDependent } from '../request-dep.ts';
 
 /**
  * Create a debug channel sink that discards all debug data.
@@ -263,11 +263,11 @@ export function buildSegmentInfo(
 // Callers within rsc-entry/ import from this file; the implementations
 // live in pipeline-helpers.ts (buildRedirectResponse) and render-utils.ts
 // (isAbortError). See TIM-1071 item 1.
-export { buildRedirectResponse } from '../pipeline-helpers.js';
-export { isAbortError } from '../render-utils.js';
+export { buildRedirectResponse } from '../pipeline-helpers.ts';
+export { isAbortError } from '../render-utils.ts';
 
 // escapeHtml is now imported from server/utils/escape-html.ts
-export { escapeHtml } from '../utils/escape-html.js';
+export { escapeHtml } from '../utils/escape-html.ts';
 
 // Params no longer travel beside the payload. The payload root is the
 // outermost node of every tree the server sends (`server/publish-params.ts`),

package/src/server/rsc-entry/index.ts

@@ -38,34 +38,34 @@ import { loadCdnPurgeHandler } from 'virtual:timber-cache-handler';
 // @ts-expect-error — virtual module provided by timber-routing plugin
 import globalSchemaCodecs from 'virtual:timber-schema';
 
-import { wrapPipelineWithActionDispatch, buildActionDispatcher } from './wrap-action-dispatch.js';
-import type { BodyLimitsConfig } from '../body-limits.js';
-import type { BuildManifest } from '../build-manifest.js';
-import { resolveLogMode } from '../../dev-tools/logger.js';
-import { sendEarlyHints103 } from '../early-hints-sender.js';
-import { collectEarlyHintHeaders } from '../early-hints.js';
-import { buildClientScripts } from '../html-injectors.js';
-import type { InterceptionContext, PipelineConfig, RouteMatch } from '../pipeline.js';
-import { createPipeline } from '../pipeline.js';
-import { coerceSegmentParams, setGlobalSchemaCodecs } from '../param-coercion.js';
-import { createMetadataRouteMatcher, createRouteMatcher } from '../route-matcher.js';
-import { createInterceptedRouteMatcher } from '../children-interception.js';
-import { initDevTracing } from '../tracing.js';
-import { createRevalidateRendererFactory } from './revalidate-renderer.js';
-
-import { renderFallbackError as renderFallback } from '../fallback-error.js';
-import { loadInstrumentation } from '../instrumentation.js';
-import { createDenyFallbackRenderer } from './deny-fallback.js';
-import { renderNoMatchPage } from './error-renderer.js';
-import { renderRoute } from './render-route.js';
-import { isDebug, isDevMode, setDebugFromConfig } from '../debug.js';
-import { setSourceMapCallback } from '../dev-source-map.js';
-import { requestContextAls } from '../als-registry.js';
-import { capturePrebuiltPayloads } from '../prebuilt-builder.js';
-import { setPrebuiltPayloadSource } from '../prebuilt/payload-source.js';
-import { setRscFunctions, setComponentRefreshTimeout } from '../prebuilt-runtime.js';
-import { createAutoSitemapHandler } from '../sitemap-handler.js';
-import { generateStaticSite } from '../static-generator.js';
+import { wrapPipelineWithActionDispatch, buildActionDispatcher } from './wrap-action-dispatch.ts';
+import type { BodyLimitsConfig } from '../body-limits.ts';
+import type { BuildManifest } from '../build-manifest.ts';
+import { resolveLogMode } from '../../dev-tools/logger.ts';
+import { sendEarlyHints103 } from '../early-hints-sender.ts';
+import { collectEarlyHintHeaders } from '../early-hints.ts';
+import { buildClientScripts } from '../html-injectors.ts';
+import type { InterceptionContext, PipelineConfig, RouteMatch } from '../pipeline.ts';
+import { createPipeline } from '../pipeline.ts';
+import { coerceSegmentParams, setGlobalSchemaCodecs } from '../param-coercion.ts';
+import { createMetadataRouteMatcher, createRouteMatcher } from '../route-matcher.ts';
+import { createInterceptedRouteMatcher } from '../children-interception.ts';
+import { initDevTracing } from '../tracing.ts';
+import { createRevalidateRendererFactory } from './revalidate-renderer.ts';
+
+import { renderFallbackError as renderFallback } from '../fallback-error.ts';
+import { loadInstrumentation } from '../instrumentation.ts';
+import { createDenyFallbackRenderer } from './deny-fallback.ts';
+import { renderNoMatchPage } from './error-renderer.ts';
+import { renderRoute } from './render-route.ts';
+import { isDebug, isDevMode, setDebugFromConfig } from '../debug.ts';
+import { setSourceMapCallback } from '../dev-source-map.ts';
+import { requestContextAls } from '../als-registry.ts';
+import { capturePrebuiltPayloads } from '../prebuilt-builder.ts';
+import { setPrebuiltPayloadSource } from '../prebuilt/payload-source.ts';
+import { setRscFunctions, setComponentRefreshTimeout } from '../prebuilt-runtime.ts';
+import { createAutoSitemapHandler } from '../sitemap-handler.ts';
+import { generateStaticSite } from '../static-generator.ts';
 
 /**
  * Resolve the Server-Timing mode from timber.config.ts.
@@ -114,20 +114,20 @@ async function createRequestHandler(manifest: typeof routeManifest, runtimeConfi
     | string
     | undefined;
   if (deploymentId) {
-    const { setDeploymentId } = await import('../version-skew.js');
+    const { setDeploymentId } = await import('../version-skew.ts');
     setDeploymentId(deploymentId);
   }
 
   // Wire the CDN purge handler so revalidateTag triggers CDN purge (TIM-1166).
   const userCdnPurge = await loadCdnPurgeHandler();
   if (userCdnPurge) {
-    const { setCdnPurgeHandler } = await import('../../cdn/purge-store.js');
+    const { setCdnPurgeHandler } = await import('../../cdn/purge-store.ts');
     setCdnPurgeHandler(userCdnPurge as Parameters<typeof setCdnPurgeHandler>[0]);
   } else if (typeof process !== 'undefined' && process.env?.TIMBER_RUNTIME === 'cloudflare') {
     // Auto-wire Workers Cache purge on Cloudflare — no API token needed,
     // available on all plans via ctx.cache.purge({ tags }) (TIM-1170).
-    const { WorkersCachePurge } = await import('../../cdn/workers-cache-purge.js');
-    const { setCdnPurgeHandler } = await import('../../cdn/purge-store.js');
+    const { WorkersCachePurge } = await import('../../cdn/workers-cache-purge.ts');
+    const { setCdnPurgeHandler } = await import('../../cdn/purge-store.ts');
     setCdnPurgeHandler(new WorkersCachePurge());
   }
 
@@ -140,7 +140,7 @@ async function createRequestHandler(manifest: typeof routeManifest, runtimeConfi
   // all cache.component wrappers render dynamically.
   if (!isDevMode()) {
     const platformSource = (globalThis as Record<string, unknown>).__TIMBER_PREBUILT_SOURCE__ as
-      | import('../prebuilt/payload-source.js').PrebuiltPayloadSource
+      | import('../prebuilt/payload-source.ts').PrebuiltPayloadSource
       | undefined;
     if (platformSource) {
       setPrebuiltPayloadSource(platformSource);
@@ -179,7 +179,7 @@ async function createRequestHandler(manifest: typeof routeManifest, runtimeConfi
 
   // Wire RSC flight functions so prebuilt-runtime can revive cached payloads
   // and capture re-renders without a dynamic import (TIM-1165).
-  const rscMod = await import('../../rsc-runtime/rsc.js');
+  const rscMod = await import('../../rsc-runtime/rsc.ts');
   setRscFunctions({
     createFromReadableStream: rscMod.createFromReadableStream,
     renderToReadableStream: rscMod.renderToReadableStream,
@@ -217,10 +217,10 @@ async function createRequestHandler(manifest: typeof routeManifest, runtimeConfi
   // `timber.config.ts` without needing to plumb config through each action.
   // See TIM-816 and design/08-forms-and-actions.md §"Validation errors".
   const formsConfig = (runtimeConfig as Record<string, unknown>).forms as
-    | { stripSensitiveFields?: import('../sensitive-fields.js').SensitiveFieldsOption }
+    | { stripSensitiveFields?: import('../sensitive-fields.ts').SensitiveFieldsOption }
     | undefined;
   if (formsConfig) {
-    const { setGlobalSensitiveFieldsConfig } = await import('../sensitive-fields.js');
+    const { setGlobalSensitiveFieldsConfig } = await import('../sensitive-fields.ts');
     setGlobalSensitiveFieldsConfig(formsConfig.stripSensitiveFields);
   }
 
@@ -247,7 +247,7 @@ async function createRequestHandler(manifest: typeof routeManifest, runtimeConfi
       await initDevTracing({ mode: devLogMode, slowPhaseMs });
       // Patch globalThis.fetch to create OTEL spans for fetch calls.
       // Spans appear as children of the active component span in the dev log tree.
-      const { instrumentDevFetch } = await import('../../dev-tools/instrumentation.js');
+      const { instrumentDevFetch } = await import('../../dev-tools/instrumentation.ts');
       instrumentDevFetch();
     }
   }
@@ -318,7 +318,7 @@ async function createRequestHandler(manifest: typeof routeManifest, runtimeConfi
       // The dev page is loaded up front: the chain's terminal is synchronous,
       // and dev-tools must stay out of the production bundle (dynamic import).
       const devPage = wantsDev404
-        ? await import('../../dev-tools/404-page.js').catch(() => null)
+        ? await import('../../dev-tools/404-page.ts').catch(() => null)
         : null;
 
       const defaultPage = devPage
@@ -439,16 +439,20 @@ async function createRequestHandler(manifest: typeof routeManifest, runtimeConfi
 
 // Re-export for generated entry points (e.g., Nitro node-server/bun) to wrap
 // the handler with per-request 103 Early Hints sender via ALS.
-export { runWithEarlyHintsSender } from '../early-hints-sender.js';
+export { runWithEarlyHintsSender } from '../early-hints-sender.ts';
 
 // Re-export for generated entry points to wrap the handler with per-request
 // waitUntil support via ALS. See design/11-platform.md §"waitUntil()".
-export { runWithWaitUntil } from '../waituntil-bridge.js';
+export { runWithWaitUntil } from '../waituntil-bridge.ts';
 
 // Re-export for the Cloudflare adapter's generated _worker.js to bridge
 // ctx.cache from the ExecutionContext into the per-request ALS. The
 // WorkersCachePurge handler reads from this ALS to call ctx.cache.purge().
-export { runWithWorkersCachePurge } from '../workers-cache-bridge.js';
+export { runWithWorkersCachePurge } from '../workers-cache-bridge.ts';
+
+// Re-export for the Cloudflare adapter's generated _worker.js to strip the
+// body from edge-cache hits on HEAD requests (TIM-1325). RFC 9110 §9.3.2.
+export { stripHeadBody } from '../head-response.ts';
 
 /**
  * Post-build flight capture entry point (TIM-1119). The capture pass must
@@ -460,8 +464,8 @@ export { runWithWorkersCachePurge } from '../workers-cache-bridge.js';
  * See design/44-render-at-build-time.md §Build Phase.
  */
 export function __timber_capturePrebuilt(
-  options: import('../prebuilt-builder.js').CaptureOptions
-): Promise<import('../prebuilt-builder.js').CaptureSummary> {
+  options: import('../prebuilt-builder.ts').CaptureOptions
+): Promise<import('../prebuilt-builder.ts').CaptureSummary> {
   return capturePrebuiltPayloads(routeManifest, options);
 }
 
@@ -477,8 +481,8 @@ export function __timber_capturePrebuilt(
  * See design/11-platform.md §"static output mode".
  */
 export function __timber_generateStaticSite(
-  options: import('../static-generator.js').StaticGenerationOptions
-): Promise<import('../static-generator.js').StaticGenerationSummary> {
+  options: import('../static-generator.ts').StaticGenerationOptions
+): Promise<import('../static-generator.ts').StaticGenerationSummary> {
   if (!_handler) {
     throw new Error(
       '[timber] __timber_generateStaticSite requires the full request handler. ' +
@@ -496,7 +500,7 @@ setGlobalSchemaCodecs(globalSchemaCodecs);
 // in both capture mode (components may call timber.cache) and normal mode.
 const renderTimeoutMs = (config as Record<string, unknown>).renderTimeoutMs as number | undefined;
 if (renderTimeoutMs) {
-  const { setDefaultSingleflightTimeout } = await import('../../cache/timber-cache.js');
+  const { setDefaultSingleflightTimeout } = await import('../../cache/timber-cache.ts');
   setDefaultSingleflightTimeout(renderTimeoutMs);
   setComponentRefreshTimeout(renderTimeoutMs);
 }
@@ -509,7 +513,7 @@ await loadInstrumentation(loadUserInstrumentation);
 // during capture and must see the configured store, not the fallback.
 const userCacheHandler = await loadCacheHandler();
 if (userCacheHandler) {
-  const { setCacheHandler } = await import('../../cache/handler-store.js');
+  const { setCacheHandler } = await import('../../cache/handler-store.ts');
   setCacheHandler(userCacheHandler as Parameters<typeof setCacheHandler>[0]);
 }
 

package/src/server/rsc-entry/render-route.ts

@@ -18,7 +18,7 @@
  * Design docs: 02-rendering-pipeline.md, 19-client-navigation.md.
  */
 
-import type { BuildManifest } from '../build-manifest.js';
+import type { BuildManifest } from '../build-manifest.ts';
 import {
   buildCssLinkTags,
   buildFontPreloadTags,
@@ -26,30 +26,30 @@ import {
   collectRouteCss,
   collectRouteFonts,
   collectRouteModulepreloads,
-} from '../build-manifest.js';
-import type { LayoutEntry } from '../deny-renderer.js';
-import { renderDenyPage, renderDenyPageAsRsc } from '../deny-renderer.js';
-import type { ClientBootstrapConfig } from '../html-injectors.js';
-import type { InterceptionContext, RouteMatch } from '../pipeline.js';
+} from '../build-manifest.ts';
+import type { LayoutEntry } from '../deny-renderer.ts';
+import { renderDenyPage, renderDenyPageAsRsc } from '../deny-renderer.ts';
+import type { ClientBootstrapConfig } from '../html-injectors.ts';
+import type { InterceptionContext, RouteMatch } from '../pipeline.ts';
 import {
   buildRouteElement,
   NoPageComponentError,
   ParamCoercionError,
-} from '../route-element-builder.js';
-import type { ManifestSegmentNode } from '../route-matcher.js';
-import { recordTiming } from '../server-timing.js';
-import { requestContextAls } from '../als-registry.js';
-import { parseClientStateTree } from '../state-tree-diff.js';
+} from '../route-element-builder.ts';
+import type { ManifestSegmentNode } from '../route-matcher.ts';
+import { recordTiming } from '../server-timing.ts';
+import { requestContextAls } from '../als-registry.ts';
+import { parseClientStateTree } from '../state-tree-diff.ts';
 
-import { getFirstDeniedSegmentIndex } from '../deny-boundary.js';
-import { handleApiRoute } from './api-handler.js';
-import { renderErrorPage, renderNoMatchPage } from './error-renderer.js';
-import { buildRedirectResponse, createDebugChannelSink } from './helpers.js';
-import { isRscRequest } from '../../shared/rsc-media-type.js';
-import { buildRscPayloadResponse } from './rsc-payload.js';
-import { renderRscStream } from './rsc-stream.js';
-import { renderSsrResponse } from './ssr-renderer.js';
-import { callSsr } from './ssr-bridge.js';
+import { getFirstDeniedSegmentIndex } from '../deny-boundary.ts';
+import { handleApiRoute } from './api-handler.ts';
+import { renderErrorPage, renderNoMatchPage } from './error-renderer.ts';
+import { buildRedirectResponse, createDebugChannelSink } from './helpers.ts';
+import { isRscRequest } from '../../shared/rsc-media-type.ts';
+import { buildRscPayloadResponse } from './rsc-payload.ts';
+import { renderRscStream } from './rsc-stream.ts';
+import { renderSsrResponse } from './ssr-renderer.ts';
+import { callSsr } from './ssr-bridge.ts';
 
 /**
  * Static-per-handler dependencies for `renderRoute` — captured once at

package/src/server/rsc-entry/revalidate-renderer.ts

@@ -28,19 +28,19 @@
 
 import { stringifyCookie } from 'cookie';
 
-import type { BuildManifest } from '../build-manifest.js';
-import { canonicalize } from '../canonicalize.js';
-import { getCookiesForSsr, seedRequestCookies } from '../cookie-context.js';
-import { logRenderError } from '../logger.js';
-import type { RouteMatch, RouteMatcher } from '../pipeline.js';
-import { DenySignal, RedirectSignal } from '../primitives.js';
-import { applyRequestHeaderOverlay, setSegmentParams } from '../request-context.js';
-import { requestContextAls } from '../als-registry.js';
-import { buildRouteElement } from '../route-element-builder.js';
-import type { RevalidateRenderer, RevalidationResult } from '../actions.js';
+import type { BuildManifest } from '../build-manifest.ts';
+import { canonicalize } from '../canonicalize.ts';
+import { getCookiesForSsr, seedRequestCookies } from '../cookie-context.ts';
+import { logRenderError } from '../logger.ts';
+import type { RouteMatch, RouteMatcher } from '../pipeline.ts';
+import { DenySignal, RedirectSignal } from '../primitives.ts';
+import { applyRequestHeaderOverlay, setSegmentParams } from '../request-context.ts';
+import { requestContextAls } from '../als-registry.ts';
+import { buildRouteElement } from '../route-element-builder.ts';
+import type { RevalidateRenderer, RevalidationResult } from '../actions.ts';
 
-import { runMiddlewareForAction, type CoerceSegmentParamsFn } from './action-middleware-runner.js';
-import { RSC_CONTENT_TYPE } from '../../shared/rsc-media-type.js';
+import { runMiddlewareForAction, type CoerceSegmentParamsFn } from './action-middleware-runner.ts';
+import { RSC_CONTENT_TYPE } from '../../shared/rsc-media-type.ts';
 
 /**
  * Sentinel thrown when revalidation cannot proceed because middleware

package/src/server/rsc-entry/rsc-payload.ts

@@ -8,19 +8,19 @@
  * Design docs: 19-client-navigation.md §"RSC Payload Handling"
  */
 
-import type { LayoutEntry } from '../deny-renderer.js';
-import { renderDenyPageAsRsc } from '../deny-renderer.js';
-import type { RedirectSignal } from '../primitives.js';
-import type { LayoutComponentEntry } from '../route-element-builder.js';
-import type { ManifestSegmentNode } from '../route-matcher.js';
-import type { SlotSkipEntry } from '../slot-resolver.js';
+import type { LayoutEntry } from '../deny-renderer.ts';
+import { renderDenyPageAsRsc } from '../deny-renderer.ts';
+import type { RedirectSignal } from '../primitives.ts';
+import type { LayoutComponentEntry } from '../route-element-builder.ts';
+import type { ManifestSegmentNode } from '../route-matcher.ts';
+import type { SlotSkipEntry } from '../slot-resolver.ts';
 
-import { buildRedirectResponse, buildSegmentInfo, createDebugChannelSink } from './helpers.js';
-import { RSC_CONTENT_TYPE } from '../../shared/rsc-media-type.js';
+import { buildRedirectResponse, buildSegmentInfo, createDebugChannelSink } from './helpers.ts';
+import { RSC_CONTENT_TYPE } from '../../shared/rsc-media-type.ts';
 
-import { rscErrorEnvelope } from '../../shared/rsc-error-envelope.js';
+import { rscErrorEnvelope } from '../../shared/rsc-error-envelope.ts';
 
-import type { RenderSignals } from './rsc-stream.js';
+import type { RenderSignals } from './rsc-stream.ts';
 
 /**
  * Ceiling on waiting for a first chunk that is already in flight, used only
@@ -106,15 +106,19 @@ export async function buildRscPayloadResponse(
     // Sync deny (AccessGate pre-pass replay) sets getDenyStatus() during
     // renderToReadableStream — before the first chunk is read. Skip the
     // wait entirely: components below the denied gate never execute.
-    const { getDenyStatus: earlyDenyCheck } = await import('../deny-boundary.js');
+    const { getDenyStatus: earlyDenyCheck } = await import('../deny-boundary.ts');
     if (signals.shellSettled && !earlyDenyCheck()) {
       // Wait for all deny-capable shell components to finish, or for an
       // in-tree layout deny to short-circuit (setDenyStatus already
       // called), or for a signal to escape to onError. TIM-1045, TIM-1208.
       await Promise.race([signals.shellSettled, signalDetected]);
-      // Shell components' finally blocks resolve before React Flight's
-      // onError fires. Yield one macrotask so onError can set
+      // onSettled fires from the raw metadata promise's rejection handler,
+      // which runs in the same microtask as the rejection. React Flight's
+      // onError fires synchronously inside that microtask (serializeThenable
+      // rejection → erroredTask → logRecoverableError → onError). One
+      // macrotask yield is enough for onError to set signals.denySignal /
       // signals.redirectSignal / signals.renderError before we check.
+      // Pinned by tests/react-server/metadata-signal-ordering.test.ts.
       await new Promise<void>((r) => setTimeout(r, 0));
     } else if (!earlyDenyCheck()) {
       // No deny-capable shell components (client component page, no deny
@@ -159,7 +163,7 @@ export async function buildRscPayloadResponse(
 
     // Read the denied segment index from ALS — set by AccessGate during
     // render. See TIM-1358, TIM-1365.
-    const { getFirstDeniedSegmentIndex: getDeniedIdx } = await import('../deny-boundary.js');
+    const { getFirstDeniedSegmentIndex: getDeniedIdx } = await import('../deny-boundary.ts');
     return renderDenyPageAsRsc(
       signals.unplacedDeny,
       segments,
@@ -264,7 +268,7 @@ export async function buildRscPayloadResponse(
   // See design/19-client-navigation.md §"X-Timber-State-Tree Header"
   // Read the deny state before describing the tree — what mounted depends on it.
   // Both values are recorded in ALS during render by AccessGate's catch path.
-  const { getDenyStatus, getFirstDeniedSegmentIndex } = await import('../deny-boundary.js');
+  const { getDenyStatus, getFirstDeniedSegmentIndex } = await import('../deny-boundary.ts');
   const denyStatus = getDenyStatus();
   const resolvedDenyIndex = getFirstDeniedSegmentIndex();
 

package/src/server/rsc-entry/rsc-stream.ts

@@ -10,23 +10,23 @@
  *              13-security.md §"Errors don't leak"
  */
 
-import { renderToReadableStream } from '../../rsc-runtime/rsc.js';
-import type { RscPayloadRoot } from '../../shared/payload-root.js';
+import { renderToReadableStream } from '../../rsc-runtime/rsc.ts';
+import type { RscPayloadRoot } from '../../shared/payload-root.ts';
 
 import { randomUUID } from 'node:crypto';
 
-import { logRenderError } from '../logger.js';
-import { DenySignal, RedirectSignal, RenderError } from '../primitives.js';
-import { checkAndWarnRscPropError } from '../rsc-prop-warnings.js';
+import { logRenderError } from '../logger.ts';
+import { DenySignal, RedirectSignal, RenderError } from '../primitives.ts';
+import { checkAndWarnRscPropError } from '../rsc-prop-warnings.ts';
 
 import {
   createDebugChannelSink,
   createDebugChannelCollector,
   isAbortError,
   type DebugComponentEntry,
-} from './helpers.js';
-import { isDebug } from '../debug.js';
-import { isDevMode } from '../debug.js';
+} from './helpers.ts';
+import { isDebug } from '../debug.ts';
+import { isDevMode } from '../debug.ts';
 
 /**
  * Mutable signal state captured during RSC rendering.

package/src/server/rsc-entry/ssr-bridge.ts

@@ -8,15 +8,15 @@
 
 /// <reference types="@vitejs/plugin-rsc/types" />
 
-import type { NavContext } from '../ssr-bridge-types.js';
+import type { NavContext } from '../ssr-bridge-types.ts';
 
 export async function callSsr(
   rscStream: ReadableStream<Uint8Array>,
   navContext: NavContext
 ): Promise<Response> {
-  let ssrEntry: typeof import('../ssr-entry.js');
+  let ssrEntry: typeof import('../ssr-entry.ts');
   try {
-    ssrEntry = await import.meta.viteRsc.import<typeof import('../ssr-entry.js')>(
+    ssrEntry = await import.meta.viteRsc.import<typeof import('../ssr-entry.ts')>(
       '../ssr-entry.js',
       { environment: 'ssr' }
     );

package/src/server/rsc-entry/ssr-renderer.ts

@@ -12,35 +12,35 @@
  *              05-streaming.md §"deferSuspenseFor and the Hold Window"
  */
 
-import type { ClientBootstrapConfig } from '../html-injectors.js';
-import { flightInitScript } from '../flight-scripts.js';
-import { appVisibleSearch } from '../../shared/rsc-cache-key.js';
-import { getSlotParamsForClient } from '../request-context.js';
-import type { LayoutEntry } from '../deny-renderer.js';
-import { renderDenyPage } from '../deny-renderer.js';
-import type { RouteMatch } from '../pipeline.js';
-import { SsrStreamError } from '../primitives.js';
-import type { LayoutComponentEntry } from '../route-element-builder.js';
-import type { ManifestSegmentNode } from '../route-matcher.js';
-import type { SlotSkipEntry } from '../slot-resolver.js';
-import type { NavContext } from '../ssr-bridge-types.js';
+import type { ClientBootstrapConfig } from '../html-injectors.ts';
+import { flightInitScript } from '../flight-scripts.ts';
+import { appVisibleSearch } from '../../shared/rsc-cache-key.ts';
+import { getSlotParamsForClient } from '../request-context.ts';
+import type { LayoutEntry } from '../deny-renderer.ts';
+import { renderDenyPage } from '../deny-renderer.ts';
+import type { RouteMatch } from '../pipeline.ts';
+import { SsrStreamError } from '../primitives.ts';
+import type { LayoutComponentEntry } from '../route-element-builder.ts';
+import type { ManifestSegmentNode } from '../route-matcher.ts';
+import type { SlotSkipEntry } from '../slot-resolver.ts';
+import type { NavContext } from '../ssr-bridge-types.ts';
 
-import { htmlEscapeJsonString } from '../flight-scripts.js';
+import { htmlEscapeJsonString } from '../flight-scripts.ts';
 import {
   buildRedirectResponse,
   buildSegmentInfo,
   createDebugChannelSink,
   isAbortError,
-} from './helpers.js';
-import { getCookiesForSsr } from '../cookie-context.js';
-import { getDenyStatus, getFirstDeniedSegmentIndex } from '../deny-boundary.js';
-import { renderErrorPage, type GlobalErrorFile } from './error-renderer.js';
-import { callSsr } from './ssr-bridge.js';
-import type { RenderSignals } from './rsc-stream.js';
-import { recordTiming } from '../server-timing.js';
-import { teeWithErrorPropagation } from '../stream-utils.js';
-import { addSpanEventSync } from '../tracing.js';
-import { isDevMode } from '../debug.js';
+} from './helpers.ts';
+import { getCookiesForSsr } from '../cookie-context.ts';
+import { getDenyStatus, getFirstDeniedSegmentIndex } from '../deny-boundary.ts';
+import { renderErrorPage, type GlobalErrorFile } from './error-renderer.ts';
+import { callSsr } from './ssr-bridge.ts';
+import type { RenderSignals } from './rsc-stream.ts';
+import { recordTiming } from '../server-timing.ts';
+import { teeWithErrorPropagation } from '../stream-utils.ts';
+import { addSpanEventSync } from '../tracing.ts';
+import { isDevMode } from '../debug.ts';
 
 /**
  * Maximum number of queueMicrotask yields during signal promotion.