cursedbelt-core 2.1.0 → 2.2.0

package/dist/core/activity/index.d.ts

@@ -4,5 +4,5 @@
  * The storage + query half is `cursedbelt-server/activity`; this entry is what a
  * browser, a spec or a wire type can import without pulling `bun:sqlite` in.
  */
-export { ACTIVITY_OUTCOMES, activityFromShareEvent, activitySubject, describeActivityEvent, describeActivityResource, isActivityAction, isActivityOutcome, } from "./model";
-export type { ActivityEvent, ActivityEventInput, ActivityOutcome, ActivityResource, } from "./model";
+export { ACTIVITY_OUTCOMES, activityFromShareEvent, activitySubject, describeActivityEvent, describeActivityResource, isActivityAction, isActivityOutcome, } from "./model.js";
+export type { ActivityEvent, ActivityEventInput, ActivityOutcome, ActivityResource, } from "./model.js";

package/dist/core/activity/index.js

@@ -4,4 +4,4 @@
  * The storage + query half is `cursedbelt-server/activity`; this entry is what a
  * browser, a spec or a wire type can import without pulling `bun:sqlite` in.
  */
-export { ACTIVITY_OUTCOMES, activityFromShareEvent, activitySubject, describeActivityEvent, describeActivityResource, isActivityAction, isActivityOutcome, } from "./model";
+export { ACTIVITY_OUTCOMES, activityFromShareEvent, activitySubject, describeActivityEvent, describeActivityResource, isActivityAction, isActivityOutcome, } from "./model.js";

package/dist/core/activity/model.d.ts

@@ -30,7 +30,7 @@
  *  - **`id` is source-qualified** (`log:41`, `share:12`), because the stream is a
  *    UNION over more than one table and two tables' autoincrements collide at 1.
  */
-import type { ShareEvent } from "../sharing/model";
+import type { ShareEvent } from "../sharing/model.js";
 /** How it went. `denied` is its own outcome rather than an `error`: a refused
  *  action is the single most interesting row in an audit trail, and one that
  *  reads as a crash gets triaged as one. */
@@ -39,7 +39,7 @@ export declare const ACTIVITY_OUTCOMES: readonly ActivityOutcome[];
 export declare const isActivityOutcome: (value: unknown) => value is ActivityOutcome;
 /**
  * What was acted on: `(app, kind, id)` — deliberately identical to
- * {@link import("../sharing/model").ShareResource}, so a resource can be handed
+ * {@link import("../sharing/model.js").ShareResource}, so a resource can be handed
  * from one primitive to the other without a translation layer.
  */
 export interface ActivityResource {

package/dist/core/analytics/index.d.ts

@@ -14,5 +14,5 @@
  *
  * The React furniture that renders it lives in `cursedbelt/react/analytics`.
  */
-export * from './range';
-export * from './schedule';
+export * from './range.js';
+export * from './schedule.js';

package/dist/core/analytics/index.js

@@ -14,5 +14,5 @@
  *
  * The React furniture that renders it lives in `cursedbelt/react/analytics`.
  */
-export * from './range';
-export * from './schedule';
+export * from './range.js';
+export * from './schedule.js';

package/dist/core/category/index.d.ts

@@ -1,3 +1,3 @@
-export type { Category, CategoryCreateInput, CategoryNode, CategoryStore, } from './types';
-export { buildCategoryForest, categoryPath, descendantCategoryIds, flattenCategoryForest, wouldCreateCycle, } from './tree';
-export { createMemoryCategoryStore } from './memoryStore';
+export type { Category, CategoryCreateInput, CategoryNode, CategoryStore, } from './types.js';
+export { buildCategoryForest, categoryPath, descendantCategoryIds, flattenCategoryForest, wouldCreateCycle, } from './tree.js';
+export { createMemoryCategoryStore } from './memoryStore.js';

package/dist/core/category/index.js

@@ -2,5 +2,5 @@
 // through `cursedbelt/react`'s categoryTree. Pure and
 // React-free (the `TreeView` adapter lives in `cursedbelt/react`), so servers
 // can import the contract + store without pulling any UI runtime.
-export { buildCategoryForest, categoryPath, descendantCategoryIds, flattenCategoryForest, wouldCreateCycle, } from './tree';
-export { createMemoryCategoryStore } from './memoryStore';
+export { buildCategoryForest, categoryPath, descendantCategoryIds, flattenCategoryForest, wouldCreateCycle, } from './tree.js';
+export { createMemoryCategoryStore } from './memoryStore.js';

package/dist/core/category/memoryStore.d.ts

@@ -1,4 +1,4 @@
-import type { Category, CategoryCreateInput } from './types';
+import type { Category, CategoryCreateInput } from './types.js';
 /**
  * Zero-config in-memory {@link CategoryStore}: a per-boot `Map` per tenant, so a
  * host that wires nothing up still gets a working (non-persistent) category

package/dist/core/category/memoryStore.js

@@ -1,4 +1,4 @@
-import { wouldCreateCycle } from './tree';
+import { wouldCreateCycle } from './tree.js';
 /**
  * Zero-config in-memory {@link CategoryStore}: a per-boot `Map` per tenant, so a
  * host that wires nothing up still gets a working (non-persistent) category

package/dist/core/category/tree.d.ts

@@ -1,4 +1,4 @@
-import type { Category, CategoryNode } from './types';
+import type { Category, CategoryNode } from './types.js';
 /**
  * Would setting `childId`'s parent to `candidateParentId` create a cycle?
  * True when the candidate parent is the child itself or one of its

package/dist/core/colorScheme/index.d.ts

@@ -4,4 +4,4 @@
  * on app boot (before React mounts → no flash); the React control + hook live in
  * `cursedbelt/react` (`ThemeToggle`, `useColorScheme`).
  */
-export { applyColorSchemeToDocument, COLOR_SCHEME_STORAGE_KEY, type ColorSchemeMode, type ColorSchemeStorage, type ColorSchemeStore, type ColorSchemeStoreOptions, colorSchemeStore, createColorSchemeStore, getColorSchemeMode, getResolvedColorScheme, initColorScheme, type ResolvedColorScheme, setColorSchemeMode, subscribeColorScheme, toggleColorScheme, } from './colorSchemeStore';
+export { applyColorSchemeToDocument, COLOR_SCHEME_STORAGE_KEY, type ColorSchemeMode, type ColorSchemeStorage, type ColorSchemeStore, type ColorSchemeStoreOptions, colorSchemeStore, createColorSchemeStore, getColorSchemeMode, getResolvedColorScheme, initColorScheme, type ResolvedColorScheme, setColorSchemeMode, subscribeColorScheme, toggleColorScheme, } from './colorSchemeStore.js';

package/dist/core/colorScheme/index.js

@@ -4,4 +4,4 @@
  * on app boot (before React mounts → no flash); the React control + hook live in
  * `cursedbelt/react` (`ThemeToggle`, `useColorScheme`).
  */
-export { applyColorSchemeToDocument, COLOR_SCHEME_STORAGE_KEY, colorSchemeStore, createColorSchemeStore, getColorSchemeMode, getResolvedColorScheme, initColorScheme, setColorSchemeMode, subscribeColorScheme, toggleColorScheme, } from './colorSchemeStore';
+export { applyColorSchemeToDocument, COLOR_SCHEME_STORAGE_KEY, colorSchemeStore, createColorSchemeStore, getColorSchemeMode, getResolvedColorScheme, initColorScheme, setColorSchemeMode, subscribeColorScheme, toggleColorScheme, } from './colorSchemeStore.js';

package/dist/core/folder-tree/actions.d.ts

@@ -28,7 +28,7 @@
  * place that can count what is about to be lost or refuse the operation. Modelling it here
  * would mean inventing an item, and an item this model cannot see is one it cannot protect.
  */
-import type { FolderNode, FolderRemap } from "./tree";
+import type { FolderNode, FolderRemap } from "./tree.js";
 /**
  * Move everything at or under `source` INTO `destination`, and stop `source` existing.
  *

package/dist/core/folder-tree/actions.js

@@ -28,7 +28,7 @@
  * place that can count what is about to be lost or refuse the operation. Modelling it here
  * would mean inventing an item, and an item this model cannot see is one it cannot protect.
  */
-import { folderPathKey, isFolderPathUnder, parseFolderPath, serializeFolderPath, } from "./path";
+import { folderPathKey, isFolderPathUnder, parseFolderPath, serializeFolderPath, } from "./path.js";
 /**
  * Move everything at or under `source` INTO `destination`, and stop `source` existing.
  *

package/dist/core/folder-tree/index.d.ts

@@ -1,3 +1,3 @@
-export { FOLDER_PATH_DELIMITER, FOLDER_PATH_ESCAPE, folderDescendantPrefix, folderPathKey, formatFolderPath, isFolderPathUnder, isValidFolderName, normalizeFolderName, parseFolderPath, serializeFolderPath, } from "./path";
-export { buildFolderIndex, buildFolderTree, flattenFolderTree, type FolderIndex, type FolderNode, type FolderRemap, planFolderDelete, planFolderMove, planFolderRename, } from "./tree";
-export { type FolderDeleteMode, type FolderTarget, folderMoveTargets, planFolderMergeInto, } from "./actions";
+export { FOLDER_PATH_DELIMITER, FOLDER_PATH_ESCAPE, folderDescendantPrefix, folderPathKey, formatFolderPath, isFolderPathUnder, isValidFolderName, normalizeFolderName, parseFolderPath, serializeFolderPath, } from "./path.js";
+export { buildFolderIndex, buildFolderTree, flattenFolderTree, type FolderIndex, type FolderNode, type FolderRemap, planFolderDelete, planFolderMove, planFolderRename, } from "./tree.js";
+export { type FolderDeleteMode, type FolderTarget, folderMoveTargets, planFolderMergeInto, } from "./actions.js";

package/dist/core/folder-tree/index.js

@@ -15,6 +15,6 @@
 // and bulk-moved by SQL. Importing the React barrel into a Bun server to reach
 // `isFolderPathUnder` would drag `Button`/`Input` and the whole component graph into a
 // process that renders nothing. Same law as `cursedbelt-core/sharing` vs `cursedbelt/react/sharing`.
-export { FOLDER_PATH_DELIMITER, FOLDER_PATH_ESCAPE, folderDescendantPrefix, folderPathKey, formatFolderPath, isFolderPathUnder, isValidFolderName, normalizeFolderName, parseFolderPath, serializeFolderPath, } from "./path";
-export { buildFolderIndex, buildFolderTree, flattenFolderTree, planFolderDelete, planFolderMove, planFolderRename, } from "./tree";
-export { folderMoveTargets, planFolderMergeInto, } from "./actions";
+export { FOLDER_PATH_DELIMITER, FOLDER_PATH_ESCAPE, folderDescendantPrefix, folderPathKey, formatFolderPath, isFolderPathUnder, isValidFolderName, normalizeFolderName, parseFolderPath, serializeFolderPath, } from "./path.js";
+export { buildFolderIndex, buildFolderTree, flattenFolderTree, planFolderDelete, planFolderMove, planFolderRename, } from "./tree.js";
+export { folderMoveTargets, planFolderMergeInto, } from "./actions.js";

package/dist/core/folder-tree/tree.js

@@ -10,7 +10,7 @@
  * entries and for notes' groups) and keeps the dangerous part — rewriting stored
  * items — a small, testable list of string swaps.
  */
-import { folderPathKey, isFolderPathUnder, normalizeFolderName, parseFolderPath, serializeFolderPath, } from "./path";
+import { folderPathKey, isFolderPathUnder, normalizeFolderName, parseFolderPath, serializeFolderPath, } from "./path.js";
 /**
  * Build the nested tree from a flat collection of serialized folder-path strings
  * (one per item, duplicates fine). EVERY prefix becomes a node, so a tree with only

package/dist/core/master-lock/index.d.ts

@@ -8,7 +8,7 @@
  * What the whole feature is, and what it is NOT, is written once in the engine's module
  * note — read that before changing anything here.
  */
-export { MASTER_LOCK_KDF, type MasterLockKdfParams, b64u, deriveMasterLockVerifier, isMasterLockKdfParams, newMasterLockKdfParams, unb64u, } from "./kdf";
-export { BASE_DELAY_MS, DEFAULT_IDLE_MS, FREE_ATTEMPTS, MAX_DELAY_MS, MAX_IDLE_MS, MIN_IDLE_MS, clampIdleMs, delayAfter, windowRemaining, } from "./policy";
-export { MASTER_LOCK_COOKIE, masterLockCookieName, MASTER_LOCK_HEADER, MASTER_LOCK_PATHS, MASTER_LOCK_PREFIX, MASTER_LOCK_STATE_HEADER, type MasterLockAccountSummary, type MasterLockAccountsResponse, type MasterLockAddAccountRequest, type MasterLockChangeRequest, type MasterLockEditAccountRequest, type MasterLockEnrollRequest, type MasterLockHintsResponse, type MasterLockRefusal, type MasterLockSettingsRequest, type MasterLockStatus, type MasterLockUnlockRequest, } from "./wire";
-export { PRESENCE_ATTRIBUTE, type PresenceMedia, isPresenceMedia, isSomebodyWatching, } from "./presence";
+export { MASTER_LOCK_KDF, type MasterLockKdfParams, b64u, deriveMasterLockVerifier, isMasterLockKdfParams, newMasterLockKdfParams, unb64u, } from "./kdf.js";
+export { BASE_DELAY_MS, DEFAULT_IDLE_MS, FREE_ATTEMPTS, MAX_DELAY_MS, MAX_IDLE_MS, MIN_IDLE_MS, clampIdleMs, delayAfter, windowRemaining, } from "./policy.js";
+export { MASTER_LOCK_COOKIE, masterLockCookieName, MASTER_LOCK_HEADER, MASTER_LOCK_PATHS, MASTER_LOCK_PREFIX, MASTER_LOCK_STATE_HEADER, type MasterLockAccountSummary, type MasterLockAccountsResponse, type MasterLockAddAccountRequest, type MasterLockChangeRequest, type MasterLockEditAccountRequest, type MasterLockEnrollRequest, type MasterLockHintsResponse, type MasterLockRefusal, type MasterLockSettingsRequest, type MasterLockStatus, type MasterLockUnlockRequest, } from "./wire.js";
+export { PRESENCE_ATTRIBUTE, type PresenceMedia, isPresenceMedia, isSomebodyWatching, } from "./presence.js";

package/dist/core/master-lock/index.js

@@ -8,7 +8,7 @@
  * What the whole feature is, and what it is NOT, is written once in the engine's module
  * note — read that before changing anything here.
  */
-export { MASTER_LOCK_KDF, b64u, deriveMasterLockVerifier, isMasterLockKdfParams, newMasterLockKdfParams, unb64u, } from "./kdf";
-export { BASE_DELAY_MS, DEFAULT_IDLE_MS, FREE_ATTEMPTS, MAX_DELAY_MS, MAX_IDLE_MS, MIN_IDLE_MS, clampIdleMs, delayAfter, windowRemaining, } from "./policy";
-export { MASTER_LOCK_COOKIE, masterLockCookieName, MASTER_LOCK_HEADER, MASTER_LOCK_PATHS, MASTER_LOCK_PREFIX, MASTER_LOCK_STATE_HEADER, } from "./wire";
-export { PRESENCE_ATTRIBUTE, isPresenceMedia, isSomebodyWatching, } from "./presence";
+export { MASTER_LOCK_KDF, b64u, deriveMasterLockVerifier, isMasterLockKdfParams, newMasterLockKdfParams, unb64u, } from "./kdf.js";
+export { BASE_DELAY_MS, DEFAULT_IDLE_MS, FREE_ATTEMPTS, MAX_DELAY_MS, MAX_IDLE_MS, MIN_IDLE_MS, clampIdleMs, delayAfter, windowRemaining, } from "./policy.js";
+export { MASTER_LOCK_COOKIE, masterLockCookieName, MASTER_LOCK_HEADER, MASTER_LOCK_PATHS, MASTER_LOCK_PREFIX, MASTER_LOCK_STATE_HEADER, } from "./wire.js";
+export { PRESENCE_ATTRIBUTE, isPresenceMedia, isSomebodyWatching, } from "./presence.js";

package/dist/core/master-lock/wire.d.ts

@@ -4,7 +4,7 @@
  * One module both halves import, so a rename cannot make the browser talk to a route that
  * no longer exists.
  */
-import type { MasterLockKdfParams } from "./kdf";
+import type { MasterLockKdfParams } from "./kdf.js";
 /**
  * The mount prefix. Everything under it is reachable while LOCKED (it is how you unlock);
  * everything else on the origin is not.

package/dist/core/media/ffmpeg.d.ts

@@ -1,4 +1,4 @@
-import type { VideoFormat, VideoProgressEvent, VideoQuality, VideoTrimSpec } from './types';
+import type { VideoFormat, VideoProgressEvent, VideoQuality, VideoTrimSpec } from './types.js';
 /** Codec + rate-control plan for an output container at a quality preset. */
 export interface VideoCodecPlan {
     videoCodec: string;

package/dist/core/media/format.d.ts

@@ -1,4 +1,4 @@
-import type { ImageOutputFormat } from './types';
+import type { ImageOutputFormat } from './types.js';
 export declare const IMAGE_OUTPUT_FORMATS: readonly ImageOutputFormat[];
 export declare function imageFormatToMime(format: ImageOutputFormat): string;
 export declare function imageFormatToExtension(format: ImageOutputFormat): string;

package/dist/core/media/index.d.ts

@@ -1,12 +1,12 @@
-export { type FloodFillBGOptions, floodFillBGS } from './bgRemoval';
-export { buildProbeArgs, buildThumbnailArgs, buildTrimArgs, ffmpegTimeToSeconds, type ProbeResult, parseFfmpegProgress, parseFfprobe, type VideoCodecPlan, videoCodecPlan, } from './ffmpeg';
-export { clampQuality, IMAGE_OUTPUT_FORMATS, imageFormatToExtension, imageFormatToMime, mimeToImageFormat, pickThumbnailFormat, } from './format';
-export { isAudioItem, isImageItem, isVideoItem, mediaItemAspect, mediaItemDimensions, } from './mediaItem';
-export { buildAtempoChain, buildTimelineRenderPlan, DEFAULT_NORMALIZE, type FfmpegCommand, type NormalizeSpec, type RenderPlanFile, speedFilters, type TimelineRenderOptions, type TimelineRenderPlan, } from './renderPlan';
-export { closeMask, createRegionSegmenter, DEFAULT_CLOSE_RADIUS, DEFAULT_TOLERANCE, dilateMask, downscaleRgba, erodeMask, fitWorkingSize, type ImageSegmenter, type SegmentOptions, type SegmentPrompt, type SegmentSource, sensitivityToTolerance, upscaleMask, } from './segment';
-export { formatBytes } from './size';
-export { type ClampTrimOptions, clampTrimRange, formatTimecode, type TrimRange, trimDurationSeconds, } from './trim';
-export type { GalleryMedia, GalleryPhoto, ImageOperation, ImageOutputFormat, ImagePipelineSpec, MediaItem, MediaKind, MediaKindFilter, PlayableVideo, ProcessingStatus, VideoFormat, VideoProgressEvent, VideoQuality, VideoTrimSpec, } from './types';
-export { DEFAULT_UPLOAD_CHUNK_SIZE, MAX_SINGLE_UPLOAD_BYTES } from './uploadLimits';
-export { assertValidImagePipelineSpec, assertValidVideoTrimSpec, type ValidationResult, validateImagePipelineSpec, validateVideoTrimSpec, } from './validate';
-export { cutListProblem, cutSeconds, cutTimecode, keptSeconds, keptSegments, MIN_CUT_SECONDS, normalizeCuts, type VideoCut, } from './videoCuts';
+export { type FloodFillBGOptions, floodFillBGS } from './bgRemoval.js';
+export { buildProbeArgs, buildThumbnailArgs, buildTrimArgs, ffmpegTimeToSeconds, type ProbeResult, parseFfmpegProgress, parseFfprobe, type VideoCodecPlan, videoCodecPlan, } from './ffmpeg.js';
+export { clampQuality, IMAGE_OUTPUT_FORMATS, imageFormatToExtension, imageFormatToMime, mimeToImageFormat, pickThumbnailFormat, } from './format.js';
+export { isAudioItem, isImageItem, isVideoItem, mediaItemAspect, mediaItemDimensions, } from './mediaItem.js';
+export { buildAtempoChain, buildTimelineRenderPlan, DEFAULT_NORMALIZE, type FfmpegCommand, type NormalizeSpec, type RenderPlanFile, speedFilters, type TimelineRenderOptions, type TimelineRenderPlan, } from './renderPlan.js';
+export { closeMask, createRegionSegmenter, DEFAULT_CLOSE_RADIUS, DEFAULT_TOLERANCE, dilateMask, downscaleRgba, erodeMask, fitWorkingSize, type ImageSegmenter, type SegmentOptions, type SegmentPrompt, type SegmentSource, sensitivityToTolerance, upscaleMask, } from './segment.js';
+export { formatBytes } from './size.js';
+export { type ClampTrimOptions, clampTrimRange, formatTimecode, type TrimRange, trimDurationSeconds, } from './trim.js';
+export type { GalleryMedia, GalleryPhoto, ImageOperation, ImageOutputFormat, ImagePipelineSpec, MediaItem, MediaKind, MediaKindFilter, PlayableVideo, ProcessingStatus, VideoFormat, VideoProgressEvent, VideoQuality, VideoTrimSpec, } from './types.js';
+export { DEFAULT_UPLOAD_CHUNK_SIZE, MAX_SINGLE_UPLOAD_BYTES } from './uploadLimits.js';
+export { assertValidImagePipelineSpec, assertValidVideoTrimSpec, type ValidationResult, validateImagePipelineSpec, validateVideoTrimSpec, } from './validate.js';
+export { cutListProblem, cutSeconds, cutTimecode, keptSeconds, keptSegments, MIN_CUT_SECONDS, normalizeCuts, type VideoCut, } from './videoCuts.js';

package/dist/core/media/index.js

@@ -2,17 +2,17 @@
 // the Bun server adapter (`src/server/media-bun`), the React components
 // (`cursedbelt/react/media`), and any consuming app/test. No React, no Bun, no npm
 // dep — the same module loads identically everywhere.
-export { floodFillBGS } from './bgRemoval';
-export { buildProbeArgs, buildThumbnailArgs, buildTrimArgs, ffmpegTimeToSeconds, parseFfmpegProgress, parseFfprobe, videoCodecPlan, } from './ffmpeg';
-export { clampQuality, IMAGE_OUTPUT_FORMATS, imageFormatToExtension, imageFormatToMime, mimeToImageFormat, pickThumbnailFormat, } from './format';
-export { isAudioItem, isImageItem, isVideoItem, mediaItemAspect, mediaItemDimensions, } from './mediaItem';
-export { buildAtempoChain, buildTimelineRenderPlan, DEFAULT_NORMALIZE, speedFilters, } from './renderPlan';
-export { closeMask, createRegionSegmenter, DEFAULT_CLOSE_RADIUS, DEFAULT_TOLERANCE, dilateMask, downscaleRgba, erodeMask, fitWorkingSize, sensitivityToTolerance, upscaleMask, } from './segment';
-export { formatBytes } from './size';
-export { clampTrimRange, formatTimecode, trimDurationSeconds, } from './trim';
-export { DEFAULT_UPLOAD_CHUNK_SIZE, MAX_SINGLE_UPLOAD_BYTES } from './uploadLimits';
-export { assertValidImagePipelineSpec, assertValidVideoTrimSpec, validateImagePipelineSpec, validateVideoTrimSpec, } from './validate';
+export { floodFillBGS } from './bgRemoval.js';
+export { buildProbeArgs, buildThumbnailArgs, buildTrimArgs, ffmpegTimeToSeconds, parseFfmpegProgress, parseFfprobe, videoCodecPlan, } from './ffmpeg.js';
+export { clampQuality, IMAGE_OUTPUT_FORMATS, imageFormatToExtension, imageFormatToMime, mimeToImageFormat, pickThumbnailFormat, } from './format.js';
+export { isAudioItem, isImageItem, isVideoItem, mediaItemAspect, mediaItemDimensions, } from './mediaItem.js';
+export { buildAtempoChain, buildTimelineRenderPlan, DEFAULT_NORMALIZE, speedFilters, } from './renderPlan.js';
+export { closeMask, createRegionSegmenter, DEFAULT_CLOSE_RADIUS, DEFAULT_TOLERANCE, dilateMask, downscaleRgba, erodeMask, fitWorkingSize, sensitivityToTolerance, upscaleMask, } from './segment.js';
+export { formatBytes } from './size.js';
+export { clampTrimRange, formatTimecode, trimDurationSeconds, } from './trim.js';
+export { DEFAULT_UPLOAD_CHUNK_SIZE, MAX_SINGLE_UPLOAD_BYTES } from './uploadLimits.js';
+export { assertValidImagePipelineSpec, assertValidVideoTrimSpec, validateImagePipelineSpec, validateVideoTrimSpec, } from './validate.js';
 // Marking sections of a video to CUT OUT. Framework-free on purpose: the dialog
 // (`react/media/VideoCutEditor`), the app route that refuses an unexecutable list and the
 // binary-server job that runs it all read the same rules from here.
-export { cutListProblem, cutSeconds, cutTimecode, keptSeconds, keptSegments, MIN_CUT_SECONDS, normalizeCuts, } from './videoCuts';
+export { cutListProblem, cutSeconds, cutTimecode, keptSeconds, keptSegments, MIN_CUT_SECONDS, normalizeCuts, } from './videoCuts.js';

package/dist/core/media/mediaItem.d.ts

@@ -1,4 +1,4 @@
-import type { MediaItem } from './types';
+import type { MediaItem } from './types.js';
 export declare const isImageItem: (item: MediaItem) => boolean;
 export declare const isVideoItem: (item: MediaItem) => boolean;
 export declare const isAudioItem: (item: MediaItem) => boolean;

package/dist/core/media/renderPlan.d.ts

@@ -1,5 +1,5 @@
 import { type TimelineTrack } from 'cwip/timeline';
-import type { VideoFormat, VideoQuality } from './types';
+import type { VideoFormat, VideoQuality } from './types.js';
 /** An auxiliary text file the executor writes before running the commands. */
 export interface RenderPlanFile {
     name: string;

package/dist/core/media/renderPlan.js

@@ -15,7 +15,7 @@
 // end-to-end in timeline order, so close gaps before exporting if you want cuts
 // where the gaps were. Audio clip offsets are their absolute `timelineStart`.
 import { clipDuration, roundSeconds } from 'cwip/timeline';
-import { videoCodecPlan } from './ffmpeg';
+import { videoCodecPlan } from './ffmpeg.js';
 /** 720p30 keeps in-browser (wasm) export times tolerable; hosts can raise it. */
 export const DEFAULT_NORMALIZE = {
     width: 1280,

package/dist/core/media/validate.d.ts

@@ -1,4 +1,4 @@
-import type { ImagePipelineSpec, VideoTrimSpec } from './types';
+import type { ImagePipelineSpec, VideoTrimSpec } from './types.js';
 export interface ValidationResult {
     valid: boolean;
     errors: string[];

package/dist/core/media/validate.js

@@ -1,7 +1,7 @@
 // Pure spec validation — catches a malformed pipeline/trim spec BEFORE it reaches
 // sharp or ffmpeg (where the failure mode is an opaque native error). No deps;
 // `validate*` returns a collected error list, `assert*` throws on the first problem.
-import { IMAGE_OUTPUT_FORMATS } from './format';
+import { IMAGE_OUTPUT_FORMATS } from './format.js';
 function ok(errors) {
     return { valid: errors.length === 0, errors };
 }

package/dist/core/navigation/coverageTest.d.ts

@@ -1,4 +1,4 @@
-import type { NavigationModel } from './navigationModel';
+import type { NavigationModel } from './navigationModel.js';
 /**
  * Build the coverage assertion for `model` against `allRoutePaths` (the app's full
  * route list, e.g. derived from `routes.tsx`). The returned `() => void` throws —

package/dist/core/navigation/coverageTest.js

@@ -5,7 +5,7 @@
 // model, a registered route is automatically discoverable — and an unregistered one
 // can never silently bury. Framework-agnostic (throws a plain Error; works under
 // bun:test, vitest, jest) so the same factory drops into any app's spec file.
-import { deriveAllPaths, normalizeNavPath } from './navigationSelectors';
+import { deriveAllPaths, normalizeNavPath } from './navigationSelectors.js';
 /**
  * Build the coverage assertion for `model` against `allRoutePaths` (the app's full
  * route list, e.g. derived from `routes.tsx`). The returned `() => void` throws —

package/dist/core/navigation/index.d.ts

@@ -1,6 +1,6 @@
-export { type BreadcrumbItem, type BreadcrumbNode, buildBreadcrumbTrail, } from './breadcrumbCompat';
-export { createCoverageTest, findCoverageGaps, } from './coverageTest';
-export { CURRENT_NAV_PREFS_VERSION, type LegacyNavPrefs, type MigrateNavPrefsOptions, migrateNavPreferences, type NavPreferences, type NavTilePrefs, } from './migrateNavPreferences';
-export { allowAllGate, type GateFn, type NavDomain, type NavGate, type NavGroup, type NavHostLimit, type NavItem, type NavigationModel, } from './navigationModel';
-export { deriveAllPaths, deriveBreadcrumbTrail, deriveDomain, deriveDomainGroups, deriveDomainItems, deriveSearchCatalogue, deriveSideNavDomains, type NavCrumb, normalizeNavPath, type SearchCatalogueEntry, } from './navigationSelectors';
-export { type CatalogueHit, type CatalogueResultGroup, groupCatalogueHits, rankCatalogue, } from './searchCatalogue';
+export { type BreadcrumbItem, type BreadcrumbNode, buildBreadcrumbTrail, } from './breadcrumbCompat.js';
+export { createCoverageTest, findCoverageGaps, } from './coverageTest.js';
+export { CURRENT_NAV_PREFS_VERSION, type LegacyNavPrefs, type MigrateNavPrefsOptions, migrateNavPreferences, type NavPreferences, type NavTilePrefs, } from './migrateNavPreferences.js';
+export { allowAllGate, type GateFn, type NavDomain, type NavGate, type NavGroup, type NavHostLimit, type NavItem, type NavigationModel, } from './navigationModel.js';
+export { deriveAllPaths, deriveBreadcrumbTrail, deriveDomain, deriveDomainGroups, deriveDomainItems, deriveSearchCatalogue, deriveSideNavDomains, type NavCrumb, normalizeNavPath, type SearchCatalogueEntry, } from './navigationSelectors.js';
+export { type CatalogueHit, type CatalogueResultGroup, groupCatalogueHits, rankCatalogue, } from './searchCatalogue.js';

package/dist/core/navigation/index.js

@@ -2,9 +2,9 @@
 // routing-free: the single source of truth (the IA tree) plus every derivation off
 // it (side nav, hub tiles, breadcrumbs, search catalogue, coverage test, prefs
 // migration). The React components in `cursedbelt/react` consume exactly this.
-export { buildBreadcrumbTrail, } from './breadcrumbCompat';
-export { createCoverageTest, findCoverageGaps, } from './coverageTest';
-export { CURRENT_NAV_PREFS_VERSION, migrateNavPreferences, } from './migrateNavPreferences';
-export { allowAllGate, } from './navigationModel';
-export { deriveAllPaths, deriveBreadcrumbTrail, deriveDomain, deriveDomainGroups, deriveDomainItems, deriveSearchCatalogue, deriveSideNavDomains, normalizeNavPath, } from './navigationSelectors';
-export { groupCatalogueHits, rankCatalogue, } from './searchCatalogue';
+export { buildBreadcrumbTrail, } from './breadcrumbCompat.js';
+export { createCoverageTest, findCoverageGaps, } from './coverageTest.js';
+export { CURRENT_NAV_PREFS_VERSION, migrateNavPreferences, } from './migrateNavPreferences.js';
+export { allowAllGate, } from './navigationModel.js';
+export { deriveAllPaths, deriveBreadcrumbTrail, deriveDomain, deriveDomainGroups, deriveDomainItems, deriveSearchCatalogue, deriveSideNavDomains, normalizeNavPath, } from './navigationSelectors.js';
+export { groupCatalogueHits, rankCatalogue, } from './searchCatalogue.js';

package/dist/core/navigation/migrateNavPreferences.d.ts

@@ -1,4 +1,4 @@
-import type { NavigationModel } from './navigationModel';
+import type { NavigationModel } from './navigationModel.js';
 /** Bump when the migration logic or the prefs shape changes. */
 export declare const CURRENT_NAV_PREFS_VERSION = 1;
 /** Per-hub tile customization (keyed by item path/id within a domain). */

package/dist/core/navigation/navigationSelectors.d.ts

@@ -1,4 +1,4 @@
-import { type GateFn, type NavDomain, type NavGroup, type NavItem, type NavigationModel } from './navigationModel';
+import { type GateFn, type NavDomain, type NavGroup, type NavItem, type NavigationModel } from './navigationModel.js';
 /**
  * Normalize a path for route *matching* — drop the query string, the hash (the
  * `#tab=…` in-page target), and a trailing slash. `'/'` stays `'/'`. Used so a tab

package/dist/core/navigation/navigationSelectors.js

@@ -3,7 +3,7 @@
 // model exclusively through these — there is no second list to keep in sync. They
 // import nothing from React, so they run identically in the client, in a server
 // test, and in the CI coverage check.
-import { allowAllGate, } from './navigationModel';
+import { allowAllGate, } from './navigationModel.js';
 /**
  * Normalize a path for route *matching* — drop the query string, the hash (the
  * `#tab=…` in-page target), and a trailing slash. `'/'` stays `'/'`. Used so a tab

package/dist/core/navigation/searchCatalogue.d.ts

@@ -1,4 +1,4 @@
-import type { SearchCatalogueEntry } from './navigationSelectors';
+import type { SearchCatalogueEntry } from './navigationSelectors.js';
 /** A query hit with its computed relevance score (higher = better). */
 export interface CatalogueHit extends SearchCatalogueEntry {
     score: number;

package/dist/core/offline/shellWorker.d.ts

@@ -0,0 +1,185 @@
+/**
+ * The app-shell service worker, once, for every app that serves its shell offline
+ * (task 2073, 2026-09-22).
+ *
+ * `apps/roms` wrote this by hand as plain JS in `public/sw.js`, with a TypeScript
+ * twin in `src/offline/swRouting.ts` held in step by a comment saying "keep the two
+ * in step". `apps/music` needed the same worker, and a third hand copy is how a fix
+ * lands in one app and not the others. This module is the one body; an app's
+ * `src/sw.ts` passes a config and adds whatever is genuinely its own (background
+ * sync, an outbox, a digest-keyed media cache) as further listeners beside it.
+ *
+ * What it does, and it is deliberately all it does:
+ *  - `install`  — precache the shell and the config's `precache` list, then `skipWaiting`.
+ *  - `activate` — delete every cache named `<cachePrefix>*` that is not this version's,
+ *                 then `clients.claim()`.
+ *  - `fetch`    — same-origin static ASSETS cache-first; document NAVIGATIONS
+ *                 network-first, falling back offline to the exact URL, then the same
+ *                 path ignoring the query, then the shell. Everything else is left on
+ *                 the network: `respondWith` is never called for it.
+ *
+ * 🔴 `/api/` is NEVER cached and NEVER served from a cache. It is auth-gated, and a
+ * browser whose session has since been revoked must not read yesterday's copy of a
+ * private response out of its own cache. That is not a default a config can switch
+ * off: `apiPrefixes` ADDS prefixes to `/api/`, it cannot remove it, a precache entry
+ * under an API prefix is refused when the worker is installed, and `shouldCache`
+ * refuses to store an `api` route even if a caller asks.
+ *
+ * 🔴 `noShellFallback` exists because of the 2026-08-12 frame incident in roms. A game
+ * boots by loading `/emulator-frame.html` into a sandboxed iframe — a NAVIGATION, so it
+ * went network-first, and offline with nothing cached under that path the fallback
+ * handed it the APP SHELL. The iframe rendered a second copy of the library where the
+ * game should be: no canvas, no error, no clue. Any document that is not the shell (an
+ * iframe, a popup, a print view) must be listed there, and must be in `precache` if it
+ * is meant to work offline at all — an offline miss on it then REJECTS, which is the
+ * honest answer, rather than resolving the wrong document.
+ *
+ * Imports nothing at runtime (`leafSubpathsImportNothing.spec.ts` holds it to that):
+ * it is bundled into a service worker, where every byte ships on every install.
+ * `scope` is typed structurally so this compiles without the WebWorker lib, is testable
+ * with a fake, and still accepts the real `self` — `shellWorker.webworker.spec.ts`
+ * typechecks exactly that against `lib.webworker.d.ts`.
+ */
+/** Where a request goes. */
+export type ShellRoute = 
+/** A document navigation — network-first, cached-document fallback offline. */
+'navigate'
+/** A same-origin static asset (JS/CSS/WASM/font/image/JSON) — cache-first. */
+ | 'asset'
+/** An auth-gated API call — never cached, never answered from a cache. */
+ | 'api'
+/** Everything else (non-GET, cross-origin, `passthroughPrefixes`) — untouched. */
+ | 'passthrough';
+/** The facts about a request that classification reads — nothing else. */
+export interface RequestFacts {
+    method: string;
+    /** Same origin as the worker (`new URL(request.url).origin === location.origin`). */
+    sameOrigin: boolean;
+    /** URL pathname, no query. */
+    pathname: string;
+    /** `request.mode === 'navigate'`. */
+    isNavigate: boolean;
+}
+export interface ShellWorkerConfig {
+    /**
+     * Every cache this worker owns is named `<cachePrefix><version>`, and `activate`
+     * deletes every OTHER cache starting with `cachePrefix`. So the prefix must be one
+     * nothing else in the app shares — `roms-shell-`, not `roms-`, or the app's own
+     * digest-keyed caches go with it.
+     */
+    cachePrefix: string;
+    /** Bump to evict the previous shell on the next activate. */
+    version: string;
+    /**
+     * Same-origin paths fetched into the cache at install. `shellPath` is always
+     * precached whether listed or not — a shell fallback with no shell is no fallback.
+     */
+    precache: readonly string[];
+    /**
+     * Extra API prefixes. `/api/` is ALWAYS one of them and cannot be removed — see the
+     * header. Default: `['/api/']`.
+     */
+    apiPrefixes?: readonly string[];
+    /**
+     * Same-origin prefixes the worker must leave alone even for GET assets — e.g. roms'
+     * `/_nes-roms/`, whose bytes the app caches itself under a content digest.
+     */
+    passthroughPrefixes?: readonly string[];
+    /**
+     * Exact pathnames that must NEVER be answered with the shell offline (roms'
+     * `/emulator-frame.html`). An offline miss on one rejects instead. See the header.
+     */
+    noShellFallback?: readonly string[];
+    /** Which same-origin pathnames count as static assets. Default: `DEFAULT_ASSET_EXT`. */
+    assetExtensions?: RegExp;
+    /** The app shell's path, the navigation fallback. Default: `'/'`. */
+    shellPath?: string;
+}
+/** A config with every default applied and every refusal already checked. */
+export interface ResolvedShellWorkerConfig {
+    cachePrefix: string;
+    version: string;
+    cacheName: string;
+    precache: readonly string[];
+    apiPrefixes: readonly string[];
+    passthroughPrefixes: readonly string[];
+    noShellFallback: readonly string[];
+    assetExtensions: RegExp;
+    shellPath: string;
+}
+/** roms' `ASSET_EXT`, verbatim. */
+export declare const DEFAULT_ASSET_EXT: RegExp;
+/** Always an API prefix, whatever the config says. */
+export declare const ALWAYS_API_PREFIX = "/api/";
+/**
+ * Classify a request. Order matters and is roms' order: non-GET and cross-origin
+ * first, then the API (so an API path that happens to end in `.json` is still `api`),
+ * then the app's own passthrough prefixes, then navigation, then assets.
+ */
+export declare function classifyRequest(facts: RequestFacts, config?: Pick<ShellWorkerConfig, 'apiPrefixes' | 'passthroughPrefixes' | 'assetExtensions'>): ShellRoute;
+/** Whether a response on this route may be written to the cache. Never `api`. */
+export declare function shouldCache(route: ShellRoute): boolean;
+/** May an offline miss on this navigation be answered with the shell? */
+export declare function mayFallBackToShell(pathname: string, config?: Pick<ShellWorkerConfig, 'noShellFallback'>): boolean;
+/**
+ * Apply defaults and refuse the configs that would break a promise in the header.
+ * `installShellWorker` calls this; it is exported so an app's own test can prove its
+ * config is accepted without standing up a worker.
+ */
+export declare function resolveShellWorkerConfig(config: ShellWorkerConfig): ResolvedShellWorkerConfig;
+export interface ShellWorkerRequest {
+    readonly url: string;
+    readonly method: string;
+    readonly mode: string;
+}
+/**
+ * The structural mirror of `RequestInfo | URL` — a request, a string, or a URL-like —
+ * which is what the real `fetch`, `Cache` and `CacheStorage` accept. It has to be the
+ * whole union: with `ShellWorkerRequest` alone the real `self` is refused, because a
+ * `URL` is not a request in either direction (measured by the webworker spec).
+ */
+export type ShellWorkerRequestInfo = ShellWorkerRequest | string | {
+    readonly href: string;
+};
+export interface ShellWorkerResponse {
+    readonly ok: boolean;
+    clone(): ShellWorkerResponse;
+}
+export interface ShellWorkerCache {
+    addAll(requests: string[]): Promise<void>;
+    put(request: ShellWorkerRequestInfo, response: ShellWorkerResponse): Promise<void>;
+}
+export interface ShellWorkerCacheStorage {
+    open(cacheName: string): Promise<ShellWorkerCache>;
+    keys(): Promise<string[]>;
+    delete(cacheName: string): Promise<boolean>;
+    match(request: ShellWorkerRequestInfo, options?: {
+        ignoreSearch?: boolean;
+    }): Promise<ShellWorkerResponse | undefined>;
+}
+export interface ShellExtendableEvent {
+    waitUntil(promise: Promise<unknown>): void;
+}
+export interface ShellFetchEvent extends ShellExtendableEvent {
+    readonly request: ShellWorkerRequest;
+    respondWith(response: Promise<ShellWorkerResponse>): void;
+}
+export interface ShellWorkerScope {
+    addEventListener(type: 'install', listener: (event: ShellExtendableEvent) => void): void;
+    addEventListener(type: 'activate', listener: (event: ShellExtendableEvent) => void): void;
+    addEventListener(type: 'fetch', listener: (event: ShellFetchEvent) => void): void;
+    readonly caches: ShellWorkerCacheStorage;
+    readonly clients: {
+        claim(): Promise<void>;
+    };
+    readonly location: {
+        readonly origin: string;
+    };
+    fetch(request: ShellWorkerRequestInfo): Promise<ShellWorkerResponse>;
+    skipWaiting(): Promise<void>;
+}
+/**
+ * Wire `install`, `activate` and `fetch` onto `scope` (the worker's `self`).
+ * Returns the resolved config, so an app can read `cacheName` for its own use.
+ */
+export declare function installShellWorker(scope: ShellWorkerScope, config: ShellWorkerConfig): ResolvedShellWorkerConfig;