cursedbelt-core 2.1.0 → 2.2.0

package/dist/core/offline/shellWorker.js

@@ -0,0 +1,200 @@
+/**
+ * The app-shell service worker, once, for every app that serves its shell offline
+ * (task 2073, 2026-09-22).
+ *
+ * `apps/roms` wrote this by hand as plain JS in `public/sw.js`, with a TypeScript
+ * twin in `src/offline/swRouting.ts` held in step by a comment saying "keep the two
+ * in step". `apps/music` needed the same worker, and a third hand copy is how a fix
+ * lands in one app and not the others. This module is the one body; an app's
+ * `src/sw.ts` passes a config and adds whatever is genuinely its own (background
+ * sync, an outbox, a digest-keyed media cache) as further listeners beside it.
+ *
+ * What it does, and it is deliberately all it does:
+ *  - `install`  — precache the shell and the config's `precache` list, then `skipWaiting`.
+ *  - `activate` — delete every cache named `<cachePrefix>*` that is not this version's,
+ *                 then `clients.claim()`.
+ *  - `fetch`    — same-origin static ASSETS cache-first; document NAVIGATIONS
+ *                 network-first, falling back offline to the exact URL, then the same
+ *                 path ignoring the query, then the shell. Everything else is left on
+ *                 the network: `respondWith` is never called for it.
+ *
+ * 🔴 `/api/` is NEVER cached and NEVER served from a cache. It is auth-gated, and a
+ * browser whose session has since been revoked must not read yesterday's copy of a
+ * private response out of its own cache. That is not a default a config can switch
+ * off: `apiPrefixes` ADDS prefixes to `/api/`, it cannot remove it, a precache entry
+ * under an API prefix is refused when the worker is installed, and `shouldCache`
+ * refuses to store an `api` route even if a caller asks.
+ *
+ * 🔴 `noShellFallback` exists because of the 2026-08-12 frame incident in roms. A game
+ * boots by loading `/emulator-frame.html` into a sandboxed iframe — a NAVIGATION, so it
+ * went network-first, and offline with nothing cached under that path the fallback
+ * handed it the APP SHELL. The iframe rendered a second copy of the library where the
+ * game should be: no canvas, no error, no clue. Any document that is not the shell (an
+ * iframe, a popup, a print view) must be listed there, and must be in `precache` if it
+ * is meant to work offline at all — an offline miss on it then REJECTS, which is the
+ * honest answer, rather than resolving the wrong document.
+ *
+ * Imports nothing at runtime (`leafSubpathsImportNothing.spec.ts` holds it to that):
+ * it is bundled into a service worker, where every byte ships on every install.
+ * `scope` is typed structurally so this compiles without the WebWorker lib, is testable
+ * with a fake, and still accepts the real `self` — `shellWorker.webworker.spec.ts`
+ * typechecks exactly that against `lib.webworker.d.ts`.
+ */
+/** roms' `ASSET_EXT`, verbatim. */
+export const DEFAULT_ASSET_EXT = /\.(?:js|mjs|css|wasm|woff2?|ttf|png|jpe?g|webp|svg|ico|json)$/i;
+/** Always an API prefix, whatever the config says. */
+export const ALWAYS_API_PREFIX = '/api/';
+const apiPrefixesOf = (config) => {
+    const extra = config.apiPrefixes ?? [];
+    return extra.includes(ALWAYS_API_PREFIX) ? extra : [ALWAYS_API_PREFIX, ...extra];
+};
+const startsWithAny = (pathname, prefixes) => prefixes.some((prefix) => pathname.startsWith(prefix));
+/**
+ * Classify a request. Order matters and is roms' order: non-GET and cross-origin
+ * first, then the API (so an API path that happens to end in `.json` is still `api`),
+ * then the app's own passthrough prefixes, then navigation, then assets.
+ */
+export function classifyRequest(facts, config = {}) {
+    if (facts.method !== 'GET')
+        return 'passthrough';
+    if (!facts.sameOrigin)
+        return 'passthrough';
+    if (startsWithAny(facts.pathname, apiPrefixesOf(config)))
+        return 'api';
+    if (startsWithAny(facts.pathname, config.passthroughPrefixes ?? []))
+        return 'passthrough';
+    if (facts.isNavigate)
+        return 'navigate';
+    if ((config.assetExtensions ?? DEFAULT_ASSET_EXT).test(facts.pathname))
+        return 'asset';
+    return 'passthrough';
+}
+/** Whether a response on this route may be written to the cache. Never `api`. */
+export function shouldCache(route) {
+    return route === 'asset' || route === 'navigate';
+}
+/** May an offline miss on this navigation be answered with the shell? */
+export function mayFallBackToShell(pathname, config = {}) {
+    return !(config.noShellFallback ?? []).includes(pathname);
+}
+/**
+ * Apply defaults and refuse the configs that would break a promise in the header.
+ * `installShellWorker` calls this; it is exported so an app's own test can prove its
+ * config is accepted without standing up a worker.
+ */
+export function resolveShellWorkerConfig(config) {
+    if (config.cachePrefix.trim() === '') {
+        // An empty prefix makes EVERY cache on the origin "an old version of ours", and
+        // activate would delete the app's other caches with it.
+        throw new Error('shell worker: cachePrefix must not be empty — activate deletes every cache it prefixes');
+    }
+    if (config.version.trim() === '')
+        throw new Error('shell worker: version must not be empty');
+    const shellPath = config.shellPath ?? '/';
+    const apiPrefixes = apiPrefixesOf(config);
+    const precache = config.precache.includes(shellPath) ? [...config.precache] : [shellPath, ...config.precache];
+    for (const path of precache) {
+        if (!path.startsWith('/')) {
+            throw new Error(`shell worker: precache entry "${path}" must be a same-origin path starting with "/"`);
+        }
+        if (startsWithAny(path, apiPrefixes)) {
+            throw new Error(`shell worker: precache entry "${path}" is under an API prefix — the API is never cached`);
+        }
+    }
+    if (config.noShellFallback?.includes(shellPath)) {
+        throw new Error(`shell worker: the shell path "${shellPath}" cannot also be in noShellFallback`);
+    }
+    return {
+        cachePrefix: config.cachePrefix,
+        version: config.version,
+        cacheName: `${config.cachePrefix}${config.version}`,
+        precache,
+        apiPrefixes,
+        passthroughPrefixes: config.passthroughPrefixes ?? [],
+        noShellFallback: config.noShellFallback ?? [],
+        assetExtensions: config.assetExtensions ?? DEFAULT_ASSET_EXT,
+        shellPath,
+    };
+}
+/**
+ * Wire `install`, `activate` and `fetch` onto `scope` (the worker's `self`).
+ * Returns the resolved config, so an app can read `cacheName` for its own use.
+ */
+export function installShellWorker(scope, config) {
+    const resolved = resolveShellWorkerConfig(config);
+    const { caches } = scope;
+    // Written after the response is handed back, like roms' `cache.put` — but kept
+    // alive with `waitUntil` so the worker is not stopped mid-write, and swallowed on
+    // failure: a full quota must not turn a good network response into an error.
+    const store = (event, route, response) => {
+        if (!shouldCache(route) || !response.ok)
+            return;
+        const copy = response.clone();
+        event.waitUntil(caches
+            .open(resolved.cacheName)
+            .then((cache) => cache.put(event.request, copy))
+            .catch(() => undefined));
+    };
+    const cacheFirst = async (event) => {
+        const cached = await caches.match(event.request);
+        if (cached)
+            return cached;
+        const response = await scope.fetch(event.request);
+        store(event, 'asset', response);
+        return response;
+    };
+    const networkFirst = async (event) => {
+        const { request } = event;
+        try {
+            const response = await scope.fetch(request);
+            store(event, 'navigate', response);
+            return response;
+        }
+        catch (error) {
+            // Offline. The exact URL first, then the same path ignoring the query — roms'
+            // frame is `/emulator-frame.html?system=nes`, and one cached copy answers for
+            // every console.
+            const cached = (await caches.match(request)) ?? (await caches.match(request, { ignoreSearch: true }));
+            if (cached)
+                return cached;
+            if (mayFallBackToShell(new URL(request.url).pathname, resolved)) {
+                const shell = await caches.match(resolved.shellPath);
+                if (shell)
+                    return shell;
+            }
+            // Nothing honest to serve: reject, and the browser shows its own offline page
+            // rather than a document that is not the one asked for.
+            throw error;
+        }
+    };
+    scope.addEventListener('install', (event) => {
+        event.waitUntil(caches
+            .open(resolved.cacheName)
+            .then((cache) => cache.addAll([...resolved.precache]))
+            .then(() => scope.skipWaiting()));
+    });
+    scope.addEventListener('activate', (event) => {
+        event.waitUntil(caches
+            .keys()
+            .then((keys) => Promise.all(keys
+            .filter((key) => key.startsWith(resolved.cachePrefix) && key !== resolved.cacheName)
+            .map((key) => caches.delete(key))))
+            .then(() => scope.clients.claim()));
+    });
+    scope.addEventListener('fetch', (event) => {
+        const url = new URL(event.request.url);
+        const route = classifyRequest({
+            method: event.request.method,
+            sameOrigin: url.origin === scope.location.origin,
+            pathname: url.pathname,
+            isNavigate: event.request.mode === 'navigate',
+        }, resolved);
+        if (route === 'asset')
+            event.respondWith(cacheFirst(event));
+        else if (route === 'navigate')
+            event.respondWith(networkFirst(event));
+        // `api` and `passthrough`: no respondWith, so the browser goes to the network as
+        // if this worker did not exist. Never a cache read, never a cache write.
+    });
+    return resolved;
+}

package/dist/core/palette/fuzzyRank.d.ts

@@ -1,4 +1,4 @@
-import type { NavItem } from '../navigation';
+import type { NavItem } from '../navigation/index.js';
 /**
  * The initials of a multi-word label (`'Query Builder'` → `'qb'`). Single-word labels
  * return `''` (their prefix already matches via the label itself). Powers initialism

package/dist/core/palette/index.d.ts

@@ -1,3 +1,3 @@
-export { fuzzyRankItems, searchInitials, } from './fuzzyRank';
-export { formatHotkey, isApplePlatform, matchHotkey, type ParsedHotkey, parseHotkey, } from './hotkeys';
-export { type ShortcutEntry, ShortcutRegistry, shortcutRegistry, } from './ShortcutRegistry';
+export { fuzzyRankItems, searchInitials, } from './fuzzyRank.js';
+export { formatHotkey, isApplePlatform, matchHotkey, type ParsedHotkey, parseHotkey, } from './hotkeys.js';
+export { type ShortcutEntry, ShortcutRegistry, shortcutRegistry, } from './ShortcutRegistry.js';

package/dist/core/palette/index.js

@@ -3,6 +3,6 @@
 // browser dependency beyond optional `navigator`/event reads — usable in a startup
 // module, a server test, or the React layer alike. The `CommandPalette` component +
 // its hooks live in `cursedbelt/react` and build on exactly this.
-export { fuzzyRankItems, searchInitials, } from './fuzzyRank';
-export { formatHotkey, isApplePlatform, matchHotkey, parseHotkey, } from './hotkeys';
-export { ShortcutRegistry, shortcutRegistry, } from './ShortcutRegistry';
+export { fuzzyRankItems, searchInitials, } from './fuzzyRank.js';
+export { formatHotkey, isApplePlatform, matchHotkey, parseHotkey, } from './hotkeys.js';
+export { ShortcutRegistry, shortcutRegistry, } from './ShortcutRegistry.js';

package/dist/core/sharing/index.d.ts

@@ -1,5 +1,5 @@
 /** The fleet's sharing/access vocabulary — see `./model.ts` for the whole
  *  contract. Storage lives in `cursedbelt-server/sharing`, the UI in
  *  `cursedbelt/react/sharing`; both speak these words. */
-export { accessMeets, describeAccess, describeShareEvent, isShareAccess, isShareLevel, isShareSubjectType, levelsMeeting, normalizeSubject, normalizeSubjectId, resolveAccess, resourceKey, sameResource, sameSubject, SHARE_ACTIONS, strongerAccess, } from "./model";
-export type { ShareAccess, ShareAction, ShareEvent, ShareGrant, ShareGroup, ShareGroupMember, ShareLevel, ShareResource, ShareSubject, ShareSubjectType, ShareViewer, } from "./model";
+export { accessMeets, describeAccess, describeShareEvent, isShareAccess, isShareLevel, isShareSubjectType, levelsMeeting, normalizeSubject, normalizeSubjectId, resolveAccess, resourceKey, sameResource, sameSubject, SHARE_ACTIONS, strongerAccess, } from "./model.js";
+export type { ShareAccess, ShareAction, ShareEvent, ShareGrant, ShareGroup, ShareGroupMember, ShareLevel, ShareResource, ShareSubject, ShareSubjectType, ShareViewer, } from "./model.js";

package/dist/core/sharing/index.js

@@ -1,4 +1,4 @@
 /** The fleet's sharing/access vocabulary — see `./model.ts` for the whole
  *  contract. Storage lives in `cursedbelt-server/sharing`, the UI in
  *  `cursedbelt/react/sharing`; both speak these words. */
-export { accessMeets, describeAccess, describeShareEvent, isShareAccess, isShareLevel, isShareSubjectType, levelsMeeting, normalizeSubject, normalizeSubjectId, resolveAccess, resourceKey, sameResource, sameSubject, SHARE_ACTIONS, strongerAccess, } from "./model";
+export { accessMeets, describeAccess, describeShareEvent, isShareAccess, isShareLevel, isShareSubjectType, levelsMeeting, normalizeSubject, normalizeSubjectId, resolveAccess, resourceKey, sameResource, sameSubject, SHARE_ACTIONS, strongerAccess, } from "./model.js";

package/dist/core/tokens/registry.d.ts

@@ -50,8 +50,8 @@ export interface TokenDef<S extends z.ZodType = z.ZodType> {
  * They used to be a second, divergent declaration of the same names — see the
  * unification note on `CCWireMarshaller` (05 §B1).
  */
-import type { CCWireMarshaller } from '../wire/marshalling';
-export { type CCWireMarshaller, MARSHALLER_WORKER_OFFLOAD_BYTES, requiresWorkerOffload, } from '../wire/marshalling';
+import type { CCWireMarshaller } from '../wire/marshalling.js';
+export { type CCWireMarshaller, MARSHALLER_WORKER_OFFLOAD_BYTES, requiresWorkerOffload, } from '../wire/marshalling.js';
 export type TokenRegistryIssueCode = 'token-collision' | 'token-namespace-violation' | 'subtype-inversion' | 'token-supertype-missing' | 'token-subtype-cycle' | 'token-sample-invalid';
 export interface TokenRegistryIssue {
     code: TokenRegistryIssueCode;

package/dist/core/tokens/registry.js

@@ -19,7 +19,7 @@
  *     (the core would stop compiling the moment the plugin is deleted).
  */
 import { z } from 'zod';
-export { MARSHALLER_WORKER_OFFLOAD_BYTES, requiresWorkerOffload, } from '../wire/marshalling';
+export { MARSHALLER_WORKER_OFFLOAD_BYTES, requiresWorkerOffload, } from '../wire/marshalling.js';
 const TOKEN_ID_RE = /^[a-z][a-z0-9-]*:[a-z0-9-]+$/;
 const EXTENSION_ID_RE = /^x-[a-z0-9-]+:[a-z0-9-]+$/;
 export const isExtensionTokenId = (id) => id.startsWith('x-');

package/dist/core/uiScale/index.d.ts

@@ -4,5 +4,5 @@
  * the saved size on app boot (before React mounts → no flash); the React control +
  * hook live in `cursedbelt/react`.
  */
-export { clampUiScale, DEFAULT_UI_SCALE, MAX_UI_SCALE, MIN_UI_SCALE, nearestUiScaleLevel, stepUiScale, UI_SCALE_LEVELS, UI_SCALE_STEP, type UiScaleLevel, type UiScaleLevelId, uiScaleToFontSize, } from './scale';
-export { applyUiScaleToDocument, createUiScaleStore, getUiScale, initUiScale, setUiScale, subscribeUiScale, UI_SCALE_STORAGE_KEY, type UiScaleStorage, type UiScaleStore, type UiScaleStoreOptions, uiScaleStore, } from './uiScaleStore';
+export { clampUiScale, DEFAULT_UI_SCALE, MAX_UI_SCALE, MIN_UI_SCALE, nearestUiScaleLevel, stepUiScale, UI_SCALE_LEVELS, UI_SCALE_STEP, type UiScaleLevel, type UiScaleLevelId, uiScaleToFontSize, } from './scale.js';
+export { applyUiScaleToDocument, createUiScaleStore, getUiScale, initUiScale, setUiScale, subscribeUiScale, UI_SCALE_STORAGE_KEY, type UiScaleStorage, type UiScaleStore, type UiScaleStoreOptions, uiScaleStore, } from './uiScaleStore.js';

package/dist/core/uiScale/index.js

@@ -4,5 +4,5 @@
  * the saved size on app boot (before React mounts → no flash); the React control +
  * hook live in `cursedbelt/react`.
  */
-export { clampUiScale, DEFAULT_UI_SCALE, MAX_UI_SCALE, MIN_UI_SCALE, nearestUiScaleLevel, stepUiScale, UI_SCALE_LEVELS, UI_SCALE_STEP, uiScaleToFontSize, } from './scale';
-export { applyUiScaleToDocument, createUiScaleStore, getUiScale, initUiScale, setUiScale, subscribeUiScale, UI_SCALE_STORAGE_KEY, uiScaleStore, } from './uiScaleStore';
+export { clampUiScale, DEFAULT_UI_SCALE, MAX_UI_SCALE, MIN_UI_SCALE, nearestUiScaleLevel, stepUiScale, UI_SCALE_LEVELS, UI_SCALE_STEP, uiScaleToFontSize, } from './scale.js';
+export { applyUiScaleToDocument, createUiScaleStore, getUiScale, initUiScale, setUiScale, subscribeUiScale, UI_SCALE_STORAGE_KEY, uiScaleStore, } from './uiScaleStore.js';

package/dist/core/uiScale/uiScaleStore.js

@@ -8,7 +8,7 @@
  * real store with fakes; the exported default singleton binds them to
  * `localStorage` + the `<html>` element.
  */
-import { clampUiScale, DEFAULT_UI_SCALE, stepUiScale, uiScaleToFontSize } from './scale';
+import { clampUiScale, DEFAULT_UI_SCALE, stepUiScale, uiScaleToFontSize } from './scale.js';
 export const UI_SCALE_STORAGE_KEY = 'cwip.uiScale';
 export function createUiScaleStore(options = {}) {
     const { storage = null, apply, key = UI_SCALE_STORAGE_KEY } = options;

package/dist/core/wire/__fixtures__/rowsMarshalWorker.js

@@ -8,7 +8,7 @@
  * and the worker imports it.
  */
 import { z } from 'zod';
-import { serveMarshalWorker } from '../marshalWorker';
+import { serveMarshalWorker } from '../marshalWorker.js';
 const schema = z.object({ rows: z.array(z.object({ id: z.string() })) });
 await serveMarshalWorker({
     id: 'rows',

package/dist/core/wire/index.d.ts

@@ -11,7 +11,7 @@
  * `wireHub` is re-exported from `cursedbelt-cc/client` as well; that entry is where
  * a shell host looks, this one is where the wire tier lives.
  */
-export { type CCWireMarshaller, createMarshallerRegistry, MARSHALLER_PAYLOAD_TOO_LARGE, MARSHALLER_SCHEMA_VIOLATION, MARSHALLER_VALIDATION_FAILED, MARSHALLER_WORKER_OFFLOAD_BYTES, type MarshallerRegistry, type MarshalOptions, type MarshalWorker, marshalInbound, payloadBytes, requiresWorkerOffload, } from './marshalling';
-export { createMarshalWorkerClient, MARSHAL_WORKER_DEFAULT_TIMEOUT_MS, MARSHALLER_WORKER_FAILED, MARSHALLER_WORKER_TIMEOUT, type MarshalWorkerClient, type MarshalWorkerClientOptions, type MarshalWorkerRequest, type MarshalWorkerResponse, serveMarshalWorker, } from './marshalWorker';
-export { createMarshalledIngress, INGRESS_TOKEN_UNKNOWN, type MarshalledIngress, type MarshalledIngressOptions, } from './ingress';
-export { createInstanceRuntime, createWireHub, type InstanceRuntime, type InstanceRuntimeOptions, type WireEnvelope, type WireHub, type WireHubOptions, } from './wireHub';
+export { type CCWireMarshaller, createMarshallerRegistry, MARSHALLER_PAYLOAD_TOO_LARGE, MARSHALLER_SCHEMA_VIOLATION, MARSHALLER_VALIDATION_FAILED, MARSHALLER_WORKER_OFFLOAD_BYTES, type MarshallerRegistry, type MarshalOptions, type MarshalWorker, marshalInbound, payloadBytes, requiresWorkerOffload, } from './marshalling.js';
+export { createMarshalWorkerClient, MARSHAL_WORKER_DEFAULT_TIMEOUT_MS, MARSHALLER_WORKER_FAILED, MARSHALLER_WORKER_TIMEOUT, type MarshalWorkerClient, type MarshalWorkerClientOptions, type MarshalWorkerRequest, type MarshalWorkerResponse, serveMarshalWorker, } from './marshalWorker.js';
+export { createMarshalledIngress, INGRESS_TOKEN_UNKNOWN, type MarshalledIngress, type MarshalledIngressOptions, } from './ingress.js';
+export { createInstanceRuntime, createWireHub, type InstanceRuntime, type InstanceRuntimeOptions, type WireEnvelope, type WireHub, type WireHubOptions, } from './wireHub.js';

package/dist/core/wire/index.js

@@ -11,7 +11,7 @@
  * `wireHub` is re-exported from `cursedbelt-cc/client` as well; that entry is where
  * a shell host looks, this one is where the wire tier lives.
  */
-export { createMarshallerRegistry, MARSHALLER_PAYLOAD_TOO_LARGE, MARSHALLER_SCHEMA_VIOLATION, MARSHALLER_VALIDATION_FAILED, MARSHALLER_WORKER_OFFLOAD_BYTES, marshalInbound, payloadBytes, requiresWorkerOffload, } from './marshalling';
-export { createMarshalWorkerClient, MARSHAL_WORKER_DEFAULT_TIMEOUT_MS, MARSHALLER_WORKER_FAILED, MARSHALLER_WORKER_TIMEOUT, serveMarshalWorker, } from './marshalWorker';
-export { createMarshalledIngress, INGRESS_TOKEN_UNKNOWN, } from './ingress';
-export { createInstanceRuntime, createWireHub, } from './wireHub';
+export { createMarshallerRegistry, MARSHALLER_PAYLOAD_TOO_LARGE, MARSHALLER_SCHEMA_VIOLATION, MARSHALLER_VALIDATION_FAILED, MARSHALLER_WORKER_OFFLOAD_BYTES, marshalInbound, payloadBytes, requiresWorkerOffload, } from './marshalling.js';
+export { createMarshalWorkerClient, MARSHAL_WORKER_DEFAULT_TIMEOUT_MS, MARSHALLER_WORKER_FAILED, MARSHALLER_WORKER_TIMEOUT, serveMarshalWorker, } from './marshalWorker.js';
+export { createMarshalledIngress, INGRESS_TOKEN_UNKNOWN, } from './ingress.js';
+export { createInstanceRuntime, createWireHub, } from './wireHub.js';

package/dist/core/wire/ingress.d.ts

@@ -1,4 +1,4 @@
-import { type MarshallerRegistry } from './marshalling';
+import { type MarshallerRegistry } from './marshalling.js';
 /** No marshaller is registered for the token an ingress was asked to feed. */
 export declare const INGRESS_TOKEN_UNKNOWN = "INGRESS_TOKEN_UNKNOWN";
 export interface MarshalledIngressOptions {

package/dist/core/wire/ingress.js

@@ -50,9 +50,9 @@
  * A CSV import is the same three lines with a different marshaller and a
  * different service call. Neither needs to know that a worker exists.
  */
-import { AppError } from '../../shared/errors';
-import { createMarshalWorkerClient } from './marshalWorker';
-import { marshalInbound, } from './marshalling';
+import { AppError } from '../../shared/errors.js';
+import { createMarshalWorkerClient } from './marshalWorker.js';
+import { marshalInbound, } from './marshalling.js';
 /** No marshaller is registered for the token an ingress was asked to feed. */
 export const INGRESS_TOKEN_UNKNOWN = 'INGRESS_TOKEN_UNKNOWN';
 /**

package/dist/core/wire/marshalWorker.d.ts

@@ -1,4 +1,4 @@
-import { type CCWireMarshaller, MARSHALLER_SCHEMA_VIOLATION, MARSHALLER_VALIDATION_FAILED, type MarshalWorker } from './marshalling';
+import { type CCWireMarshaller, MARSHALLER_SCHEMA_VIOLATION, MARSHALLER_VALIDATION_FAILED, type MarshalWorker } from './marshalling.js';
 export declare const MARSHALLER_WORKER_FAILED = "MARSHALLER_WORKER_FAILED";
 export declare const MARSHALLER_WORKER_TIMEOUT = "MARSHALLER_WORKER_TIMEOUT";
 /** How long one payload may occupy the worker before the host gives up. */

package/dist/core/wire/marshalWorker.js

@@ -33,8 +33,8 @@
  * inside the server branch — a static import would put a Node builtin in the
  * module graph of every client bundle that touches wire code.
  */
-import { AppError } from '../../shared/errors';
-import { MARSHALLER_SCHEMA_VIOLATION, MARSHALLER_VALIDATION_FAILED, } from './marshalling';
+import { AppError } from '../../shared/errors.js';
+import { MARSHALLER_SCHEMA_VIOLATION, MARSHALLER_VALIDATION_FAILED, } from './marshalling.js';
 export const MARSHALLER_WORKER_FAILED = 'MARSHALLER_WORKER_FAILED';
 export const MARSHALLER_WORKER_TIMEOUT = 'MARSHALLER_WORKER_TIMEOUT';
 /** How long one payload may occupy the worker before the host gives up. */

package/dist/core/wire/marshalling.js

@@ -1,4 +1,4 @@
-import { AppError } from '../../shared/errors';
+import { AppError } from '../../shared/errors.js';
 /** Above this, `validate` + `transform` are offloaded to a Worker (02 §7.1). */
 export const MARSHALLER_WORKER_OFFLOAD_BYTES = 512 * 1024;
 /**

package/dist/ctgr/chunkAccumulator.d.ts

@@ -61,7 +61,7 @@
  * - Inconsistency errors (e.g., second chunk claims different total count) delete the entry immediately; recovery requires retransmitting all chunks from the client
  * - The service itself is a singleton; do NOT create multiple instances per server or request thread
  */
-import type { CtgrDecoded } from './types';
+import type { CtgrDecoded } from './types.js';
 /**
  * Configuration for ChunkAccumulator resource limits and timing behavior.
  *

package/dist/ctgr/chunkAccumulator.js

@@ -61,8 +61,8 @@
  * - Inconsistency errors (e.g., second chunk claims different total count) delete the entry immediately; recovery requires retransmitting all chunks from the client
  * - The service itself is a singleton; do NOT create multiple instances per server or request thread
  */
-import { decodePayload, parseChunk } from './codec';
-import { sha256Hex } from './digest';
+import { decodePayload, parseChunk } from './codec.js';
+import { sha256Hex } from './digest.js';
 /**
  * ChunkAccumulator — The hardened service for multi-chunk payload assembly.
  *

package/dist/ctgr/chunkStore.d.ts

@@ -1,4 +1,4 @@
-import type { CtgrDecoded } from './types';
+import type { CtgrDecoded } from './types.js';
 export interface ChunkStoreOpts {
     /** Max concurrent in-flight (incomplete) payloads. Default 200. */
     maxInFlight?: number;

package/dist/ctgr/chunkStore.js

@@ -9,8 +9,8 @@
  * It NEVER throws: a malformed/corrupt/oversized payload returns an `Error` the
  * middleware maps to a 400; an intermediate chunk returns `false` (→ 202).
  */
-import { decodePayload, parseChunk } from './codec';
-import { sha256Hex } from './digest';
+import { decodePayload, parseChunk } from './codec.js';
+import { sha256Hex } from './digest.js';
 export class ChunkStore {
     entries = new Map();
     maxInFlight;

package/dist/ctgr/codec.d.ts

@@ -1,4 +1,4 @@
-import { type CtgrDecoded, type CtgrMethod, type EncodedRequest, type EncodeOpts, type UploadedFile } from './types';
+import { type CtgrDecoded, type CtgrMethod, type EncodedRequest, type EncodeOpts, type UploadedFile } from './types.js';
 /**
  * Encode a mutating request into one or more `/ctgr<XX>` GET-twin chunks. Small
  * bodies become a single chunk; large bodies gzip (when over the threshold) and split

package/dist/ctgr/codec.js

@@ -11,11 +11,11 @@
  * double-base64'd and whose swap/reverse was trivially-reversible obfuscation, not
  * protection — the real protection (getOnly JWT claim + CSRF guard) is unchanged.
  */
-import { fromBase64, fromBase64url, toBase64url } from './base64url';
-import { gunzip, gzip } from './compress';
-import { crc32 } from './crc32';
-import { sha256Hex } from './digest';
-import { ABBREV_TO_METHOD, CTGR_WIRE_VERSION, METHOD_TO_ABBREV, } from './types';
+import { fromBase64, fromBase64url, toBase64url } from './base64url.js';
+import { gunzip, gzip } from './compress.js';
+import { crc32 } from './crc32.js';
+import { sha256Hex } from './digest.js';
+import { ABBREV_TO_METHOD, CTGR_WIRE_VERSION, METHOD_TO_ABBREV, } from './types.js';
 const DEFAULT_CHUNK_SIZE = 1800;
 const DEFAULT_GZIP_THRESHOLD = 1024;
 const textEncoder = new TextEncoder();

package/dist/ctgr/index.d.ts

@@ -1,9 +1,9 @@
-export { fromBase64, fromBase64url, toBase64, toBase64url } from './base64url';
-export { ChunkAccumulator, type ChunkAccumulatorConfig, } from './chunkAccumulator';
-export { ChunkStore, type ChunkStoreOpts } from './chunkStore';
-export { decodePayload, decodeRequest, encodeRequest, extractFiles, type ParsedChunk, parseChunk, } from './codec';
-export { gunzip, gzip } from './compress';
-export { crc32 } from './crc32';
-export { sha256Hex } from './digest';
-export { ABBREV_TO_METHOD, CTGR_WIRE_VERSION, type CtgrAbbrev, type CtgrDecoded, type CtgrMethod, type EncodedChunk, type EncodedRequest, type EncodeOpts, METHOD_TO_ABBREV, type SerializedFile, type UploadedFile, } from './types';
-export { decodeV0Payload, V0ChunkStore, type V0ChunkStoreOpts } from './v0compat';
+export { fromBase64, fromBase64url, toBase64, toBase64url } from './base64url.js';
+export { ChunkAccumulator, type ChunkAccumulatorConfig, } from './chunkAccumulator.js';
+export { ChunkStore, type ChunkStoreOpts } from './chunkStore.js';
+export { decodePayload, decodeRequest, encodeRequest, extractFiles, type ParsedChunk, parseChunk, } from './codec.js';
+export { gunzip, gzip } from './compress.js';
+export { crc32 } from './crc32.js';
+export { sha256Hex } from './digest.js';
+export { ABBREV_TO_METHOD, CTGR_WIRE_VERSION, type CtgrAbbrev, type CtgrDecoded, type CtgrMethod, type EncodedChunk, type EncodedRequest, type EncodeOpts, METHOD_TO_ABBREV, type SerializedFile, type UploadedFile, } from './types.js';
+export { decodeV0Payload, V0ChunkStore, type V0ChunkStoreOpts } from './v0compat.js';

package/dist/ctgr/index.js

@@ -6,12 +6,12 @@
  * The ChunkAccumulator is the primary abstraction for multi-chunk payload assembly;
  * ChunkStore is kept for backward compatibility (they are identical implementations).
  */
-export { fromBase64, fromBase64url, toBase64, toBase64url } from './base64url';
-export { ChunkAccumulator, } from './chunkAccumulator';
-export { ChunkStore } from './chunkStore';
-export { decodePayload, decodeRequest, encodeRequest, extractFiles, parseChunk, } from './codec';
-export { gunzip, gzip } from './compress';
-export { crc32 } from './crc32';
-export { sha256Hex } from './digest';
-export { ABBREV_TO_METHOD, CTGR_WIRE_VERSION, METHOD_TO_ABBREV, } from './types';
-export { decodeV0Payload, V0ChunkStore } from './v0compat';
+export { fromBase64, fromBase64url, toBase64, toBase64url } from './base64url.js';
+export { ChunkAccumulator, } from './chunkAccumulator.js';
+export { ChunkStore } from './chunkStore.js';
+export { decodePayload, decodeRequest, encodeRequest, extractFiles, parseChunk, } from './codec.js';
+export { gunzip, gzip } from './compress.js';
+export { crc32 } from './crc32.js';
+export { sha256Hex } from './digest.js';
+export { ABBREV_TO_METHOD, CTGR_WIRE_VERSION, METHOD_TO_ABBREV, } from './types.js';
+export { decodeV0Payload, V0ChunkStore } from './v0compat.js';

package/dist/ctgr/v0compat.d.ts

@@ -1,4 +1,4 @@
-import type { CtgrDecoded, CtgrMethod } from './types';
+import type { CtgrDecoded, CtgrMethod } from './types.js';
 /** Reverse the v0 client pipeline (`encode→reverse→swap→encode→swap`) and parse JSON. */
 export declare function decodeV0Payload(encoded: string): unknown;
 export interface V0ChunkStoreOpts {

package/dist/ctgr/v0compat.js

@@ -9,8 +9,8 @@
  * heuristic, since v1 always sets `_cv=1`. v0 carried the method only in the path
  * (`/ctgr<XX>`), so the middleware passes the path-derived method in.
  */
-import { fromBase64 } from './base64url';
-import { extractFiles } from './codec';
+import { fromBase64 } from './base64url.js';
+import { extractFiles } from './codec.js';
 const decodeBase64Utf8 = (str) => new TextDecoder().decode(fromBase64(str));
 const reverseString = (str) => str.split('').reverse().join('');
 const swapEnds = (str) => {

package/dist/index.d.ts

@@ -11,5 +11,5 @@
  * drag 47 dependencies into every consumer.
  */
 export declare const VERSION = "1.0.0";
-export { contrastText } from './core/color';
-export { isSiteCopyKey, SITE_COPY_BAKED_ONLY, SITE_COPY_DEFAULTS, SITE_COPY_KEYS, SITE_COPY_MAX_VALUE_LENGTH, type SiteCopyKey, } from './core/site/siteCopy';
+export { contrastText } from './core/color.js';
+export { isSiteCopyKey, SITE_COPY_BAKED_ONLY, SITE_COPY_DEFAULTS, SITE_COPY_KEYS, SITE_COPY_MAX_VALUE_LENGTH, type SiteCopyKey, } from './core/site/siteCopy.js';

package/dist/index.js

@@ -13,5 +13,5 @@
 export const VERSION = '1.0.0';
 // The two root-level conveniences the pre-split "." barrel actually served:
 // the WCAG readable-foreground picker and the baked marketing-copy contract.
-export { contrastText } from './core/color';
-export { isSiteCopyKey, SITE_COPY_BAKED_ONLY, SITE_COPY_DEFAULTS, SITE_COPY_KEYS, SITE_COPY_MAX_VALUE_LENGTH, } from './core/site/siteCopy';
+export { contrastText } from './core/color.js';
+export { isSiteCopyKey, SITE_COPY_BAKED_ONLY, SITE_COPY_DEFAULTS, SITE_COPY_KEYS, SITE_COPY_MAX_VALUE_LENGTH, } from './core/site/siteCopy.js';

package/dist/testing/index.d.ts

@@ -1,3 +1,3 @@
-export { installCheapDomInspect } from "./domInspect";
-export { asBody, bytesResponse, bytesStream } from "./bytes";
-export { type FetchImpl, fakeFetch } from "./fakeFetch";
+export { installCheapDomInspect } from "./domInspect.js";
+export { asBody, bytesResponse, bytesStream } from "./bytes.js";
+export { type FetchImpl, fakeFetch } from "./fakeFetch.js";

package/dist/testing/index.js

@@ -6,6 +6,6 @@
 // can `import { installCheapDomInspect } from "cursedbelt-core/testing"` instead of
 // keeping a ~60-line hand-port of domInspect.ts — the file already lived here,
 // it just had no export.
-export { installCheapDomInspect } from "./domInspect";
-export { asBody, bytesResponse, bytesStream } from "./bytes";
-export { fakeFetch } from "./fakeFetch";
+export { installCheapDomInspect } from "./domInspect.js";
+export { asBody, bytesResponse, bytesStream } from "./bytes.js";
+export { fakeFetch } from "./fakeFetch.js";

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "cursedbelt-core",
-	"version": "2.1.0",
+	"version": "2.2.0",
 	"license": "ISC",
 	"type": "module",
 	"description": "Framework-agnostic core of the cursedbelt split — isomorphic domain logic. cwip below it, cursedbelt-server and cursedbelt (react) above it.",
@@ -251,6 +251,12 @@
 			"source": "./src/core/net/reconnectSchedule.ts",
 			"import": "./dist/core/net/reconnectSchedule.js"
 		},
+		"./offline/shell-worker": {
+			"types": "./dist/core/offline/shellWorker.d.ts",
+			"bun": "./src/core/offline/shellWorker.ts",
+			"source": "./src/core/offline/shellWorker.ts",
+			"import": "./dist/core/offline/shellWorker.js"
+		},
 		"./palette": {
 			"types": "./dist/core/palette/index.d.ts",
 			"bun": "./src/core/palette/index.ts",
@@ -362,7 +368,7 @@
 	},
 	"dependencies": {
 		"@leeoniya/ufuzzy": "^1.0.19",
-		"cwip": "^4.1.0"
+		"cwip": "^4.6.0"
 	},
 	"peerDependencies": {
 		"zod": "^4.4.0"

package/src/config/appConfig.spec.ts

@@ -1,5 +1,5 @@
 import { describe, expect, it } from 'bun:test';
-import { AppConfigSchema, effectiveSignupMode, featureKeysOf, resolveInstanceFeatures, ROUTE_PATH_RE } from './appConfig';
+import { AppConfigSchema, effectiveSignupMode, featureKeysOf, resolveInstanceFeatures, ROUTE_PATH_RE } from './appConfig.js';
 
 const base = (over: Record<string, unknown> = {}) => ({
   configVersion: 1,

package/src/core/activity/index.ts

@@ -12,10 +12,10 @@ export {
 	describeActivityResource,
 	isActivityAction,
 	isActivityOutcome,
-} from "./model";
+} from "./model.js";
 export type {
 	ActivityEvent,
 	ActivityEventInput,
 	ActivityOutcome,
 	ActivityResource,
-} from "./model";
+} from "./model.js";