cursedbelt-server 4.11.1 → 4.13.0

package/dist/server/storage/files/index.d.ts

@@ -1,9 +1,9 @@
-export { createCatalogueMediaSource, createCataloguePhotoSource, createCatalogueVideoSource, createFileToPlayable, } from './adapter';
-export { catalogueUploadKey, createSqliteFileCatalogue, fileBinaryKey, type ImageDerivatives, type ImageDerivativesOptions, type SqliteFileCatalogueOptions, type VideoProcessor, } from './catalogue';
-export type { CatalogueStats } from './types';
-export { type ChunkedInit, type ChunkedUploadService, createChunkedUploadService, type MintChunkUpload, } from './chunkedUpload';
-export { createFileUrls, type FileUrls, type MountFileRoutesOptions, mountFileRoutes, SINGLE_UPLOAD_TOO_LARGE, } from './fileRoutes';
-export { FILE_CATALOGUE_MIGRATIONS } from './migrations';
-export { createFilesStack, type FilesStack, type FilesStackMountAuth, type FilesStackOptions, } from './stack';
-export { createLedgeredDeletes, createStorageOpsLedger, createStorageReconciler, type StorageAction, type StorageOpRow, type StorageOpsLedger, type StorageReconciler, } from './storageOps';
-export { type CollectionKind, type CollectionVisibility, classifyFileType, FILE_SORTS, type FileCatalogue, type FileCollection, type FilePage, type FileRecord, type FileSort, type FileToPlayable, type FileType, type ListFilesOptions, type TagFacet, } from './types';
+export { createCatalogueMediaSource, createCataloguePhotoSource, createCatalogueVideoSource, createFileToPlayable, } from './adapter.js';
+export { catalogueUploadKey, createSqliteFileCatalogue, fileBinaryKey, type ImageDerivatives, type ImageDerivativesOptions, type SqliteFileCatalogueOptions, type VideoProcessor, } from './catalogue.js';
+export type { CatalogueStats } from './types.js';
+export { type ChunkedInit, type ChunkedUploadService, createChunkedUploadService, type MintChunkUpload, } from './chunkedUpload.js';
+export { createFileUrls, type FileUrls, type MountFileRoutesOptions, mountFileRoutes, SINGLE_UPLOAD_TOO_LARGE, } from './fileRoutes.js';
+export { FILE_CATALOGUE_MIGRATIONS } from './migrations.js';
+export { createFilesStack, type FilesStack, type FilesStackMountAuth, type FilesStackOptions, } from './stack.js';
+export { createLedgeredDeletes, createStorageOpsLedger, createStorageReconciler, type StorageAction, type StorageOpRow, type StorageOpsLedger, type StorageReconciler, } from './storageOps.js';
+export { type CollectionKind, type CollectionVisibility, classifyFileType, FILE_SORTS, type FileCatalogue, type FileCollection, type FilePage, type FileRecord, type FileSort, type FileToPlayable, type FileType, type ListFilesOptions, type TagFacet, } from './types.js';

package/dist/server/storage/files/index.js

@@ -1,11 +1,11 @@
 // cursedbelt-server/storage FileCatalogue — a SQLite-backed tagged flat file system over the
 // MediaStore + media pipeline. One source of truth for a user's binaries; the
 // video gallery is a video-filtered view over it.
-export { createCatalogueMediaSource, createCataloguePhotoSource, createCatalogueVideoSource, createFileToPlayable, } from './adapter';
-export { catalogueUploadKey, createSqliteFileCatalogue, fileBinaryKey, } from './catalogue';
-export { createChunkedUploadService, } from './chunkedUpload';
-export { createFileUrls, mountFileRoutes, SINGLE_UPLOAD_TOO_LARGE, } from './fileRoutes';
-export { FILE_CATALOGUE_MIGRATIONS } from './migrations';
-export { createFilesStack, } from './stack';
-export { createLedgeredDeletes, createStorageOpsLedger, createStorageReconciler, } from './storageOps';
-export { classifyFileType, FILE_SORTS, } from './types';
+export { createCatalogueMediaSource, createCataloguePhotoSource, createCatalogueVideoSource, createFileToPlayable, } from './adapter.js';
+export { catalogueUploadKey, createSqliteFileCatalogue, fileBinaryKey, } from './catalogue.js';
+export { createChunkedUploadService, } from './chunkedUpload.js';
+export { createFileUrls, mountFileRoutes, SINGLE_UPLOAD_TOO_LARGE, } from './fileRoutes.js';
+export { FILE_CATALOGUE_MIGRATIONS } from './migrations.js';
+export { createFilesStack, } from './stack.js';
+export { createLedgeredDeletes, createStorageOpsLedger, createStorageReconciler, } from './storageOps.js';
+export { classifyFileType, FILE_SORTS, } from './types.js';

package/dist/server/storage/files/migrations.d.ts

@@ -1,2 +1,2 @@
-import type { Migration } from '../../migration/types';
+import type { Migration } from '../../migration/types.js';
 export declare const FILE_CATALOGUE_MIGRATIONS: readonly Migration[];

package/dist/server/storage/files/stack.d.ts

@@ -1,12 +1,12 @@
 import type { Database } from 'bun:sqlite';
 import type { Context, Hono } from 'hono';
-import { type MediaUrls, SourceRegistry } from '../sources';
-import { type StreamTokenService } from '../streamToken';
-import type { MediaCtx, MediaGallerySource, MediaSource, MediaStore, PhotoSource } from '../types';
-import { type SqliteFileCatalogueOptions } from './catalogue';
-import { type ChunkedUploadService, type MintChunkUpload } from './chunkedUpload';
-import { type FileUrls } from './fileRoutes';
-import type { FileCatalogue } from './types';
+import { type MediaUrls, SourceRegistry } from '../sources.js';
+import { type StreamTokenService } from '../streamToken.js';
+import type { MediaCtx, MediaGallerySource, MediaSource, MediaStore, PhotoSource } from '../types.js';
+import { type SqliteFileCatalogueOptions } from './catalogue.js';
+import { type ChunkedUploadService, type MintChunkUpload } from './chunkedUpload.js';
+import { type FileUrls } from './fileRoutes.js';
+import type { FileCatalogue } from './types.js';
 export interface FilesStackOptions {
     /** The catalogue database. The stack runs FILE_CATALOGUE_MIGRATIONS on it itself. */
     db: Database;

package/dist/server/storage/files/stack.js

@@ -1,13 +1,13 @@
-import { runMigrations } from '../../migration/runner';
-import { mountMediaRoutes } from '../mountMediaRoutes';
-import { createMediaUrls, SourceRegistry } from '../sources';
-import { createStreamTokenService } from '../streamToken';
-import { createCatalogueMediaSource, createCataloguePhotoSource, createCatalogueVideoSource, } from './adapter';
-import { createSqliteFileCatalogue } from './catalogue';
-import { createChunkedUploadService, } from './chunkedUpload';
-import { createFileUrls, mountFileRoutes } from './fileRoutes';
-import { FILE_CATALOGUE_MIGRATIONS } from './migrations';
-import { createStorageOpsLedger } from './storageOps';
+import { runMigrations } from '../../migration/runner.js';
+import { mountMediaRoutes } from '../mountMediaRoutes.js';
+import { createMediaUrls, SourceRegistry } from '../sources.js';
+import { createStreamTokenService } from '../streamToken.js';
+import { createCatalogueMediaSource, createCataloguePhotoSource, createCatalogueVideoSource, } from './adapter.js';
+import { createSqliteFileCatalogue } from './catalogue.js';
+import { createChunkedUploadService, } from './chunkedUpload.js';
+import { createFileUrls, mountFileRoutes } from './fileRoutes.js';
+import { FILE_CATALOGUE_MIGRATIONS } from './migrations.js';
+import { createStorageOpsLedger } from './storageOps.js';
 /** Assemble the whole files/media server stack from one options bag. See {@link FilesStack}. */
 export function createFilesStack(opts) {
     const owner = opts.owner ?? ((c) => c.userId);

package/dist/server/storage/files/storageOps.d.ts

@@ -1,5 +1,5 @@
 import type { Database } from 'bun:sqlite';
-import type { MediaStore } from '../types';
+import type { MediaStore } from '../types.js';
 export type StorageAction = 'upload' | 'delete' | 'delete_prefix';
 export type StorageOpStatus = 'pending' | 'done' | 'failed';
 export type StorageOpRow = {

package/dist/server/storage/files/types.d.ts

@@ -1,5 +1,5 @@
 import type { PlayableVideo, ProcessingStatus } from 'cursedbelt-core/media';
-import type { MediaCtx } from '../types';
+import type { MediaCtx } from '../types.js';
 export type FileType = 'image' | 'video' | 'audio' | 'doc' | 'code' | 'other';
 /** User-defined groupings (Apple-Photos-style). `favorites` is a system singleton per owner;
  * `custom` are free-form. */

package/dist/server/storage/imageThumbnail.js

@@ -1,6 +1,6 @@
 import { mkdir, rm } from 'node:fs/promises';
 import path from 'node:path';
-import { imageThumbnailArgs, runFfmpegProgress } from '../media-bun';
+import { imageThumbnailArgs, runFfmpegProgress } from '../media-bun/index.js';
 // Image mimes browsers CANNOT render inline (so the full-view <img> needs a JPEG derivative, not
 // the original). Chrome/Firefox reject HEIC/HEIF; the rest (jpeg/png/webp/gif/avif/bmp/svg) render
 // natively. Safari can show HEIC, but we normalize for everyone.

package/dist/server/storage/index.d.ts

@@ -1,15 +1,15 @@
-export { DERIVATIVE_SUFFIXES, hlsMasterKeyFor, hlsPrefixFor, isDerivativeKey, posterKeyFor, spriteKeyFor, spriteVttKeyFor, webPlayableKeyFor, } from './videoDerivativeKeys';
-export type { BinaryServerConfig, FileTokenClaims, FileTokenSigner } from './binaryServerStore';
-export { createBinaryServerStore } from './binaryServerStore';
-export { type BinaryServerProcessingConfig, createBinaryServerProcessing, } from './binaryServerProcessing';
-export { createTranscodeJobClient, type TranscodeJobClient, type TranscodeJobClientConfig, type TranscodeJobResult, type TranscodeJobStatus, type TranscodeJobStatusBody, } from './transcodeJobs';
-export { createDiskStore } from './diskStore';
-export { type CatalogueStats, type ChunkedInit, type ChunkedUploadService, catalogueUploadKey, classifyFileType, createCatalogueMediaSource, createCataloguePhotoSource, createCatalogueVideoSource, createChunkedUploadService, createFilesStack, createFileToPlayable, createFileUrls, createLedgeredDeletes, createSqliteFileCatalogue, createStorageOpsLedger, createStorageReconciler, FILE_CATALOGUE_MIGRATIONS, type FileCatalogue, type FilePage, type FileRecord, type FilesStack, type FilesStackMountAuth, type FilesStackOptions, type FileToPlayable, type FileType, type FileUrls, fileBinaryKey, type ImageDerivatives, type ImageDerivativesOptions, type ListFilesOptions, type MintChunkUpload, type MountFileRoutesOptions, mountFileRoutes, type SqliteFileCatalogueOptions, type StorageAction, type StorageOpRow, type StorageOpsLedger, type StorageReconciler, type VideoProcessor, } from './files';
-export { type CorsResolver, type MountMediaOptions, mountMediaRoutes } from './mountMediaRoutes';
-export { createDiskSource, createMediaUrls, type DiskSource, type MediaUrls, SourceRegistry, } from './sources';
-export { createS3ObjectStore, type S3ClientLike, type S3ObjectHandle, type S3ObjectStoreOptions, type S3ObjectWriter, } from './s3ObjectStore';
-export { decodeRange, type RangeDecision, type ServeRangeOpts, serveRange } from './streamRange';
-export { createStreamTokenService, type StreamGrant, type StreamTokenService } from './streamToken';
-export { fsHlsFileKey, fsHlsMasterKey, fsHlsPrefix, fsMp4Key, fsPosterKey, fsSourceKey, fsSpriteKey, fsVttKey, type MediaCtx, type MediaGallerySource, type MediaSource, type MediaStore, type PhotoSource, } from './types';
-export { type ProcessOptions, type ProcessResult, processVideo, } from './videoProcessor';
-export { objectStoreAsMediaStore } from './objectStoreMediaStore';
+export { DERIVATIVE_SUFFIXES, hlsMasterKeyFor, hlsPrefixFor, isDerivativeKey, posterKeyFor, spriteKeyFor, spriteVttKeyFor, webPlayableKeyFor, } from './videoDerivativeKeys.js';
+export type { BinaryServerConfig, FileTokenClaims, FileTokenSigner } from './binaryServerStore.js';
+export { createBinaryServerStore } from './binaryServerStore.js';
+export { type BinaryServerProcessingConfig, createBinaryServerProcessing, } from './binaryServerProcessing.js';
+export { createTranscodeJobClient, type TranscodeJobClient, type TranscodeJobClientConfig, type TranscodeJobResult, type TranscodeJobStatus, type TranscodeJobStatusBody, } from './transcodeJobs.js';
+export { createDiskStore } from './diskStore.js';
+export { type CatalogueStats, type ChunkedInit, type ChunkedUploadService, catalogueUploadKey, classifyFileType, createCatalogueMediaSource, createCataloguePhotoSource, createCatalogueVideoSource, createChunkedUploadService, createFilesStack, createFileToPlayable, createFileUrls, createLedgeredDeletes, createSqliteFileCatalogue, createStorageOpsLedger, createStorageReconciler, FILE_CATALOGUE_MIGRATIONS, type FileCatalogue, type FilePage, type FileRecord, type FilesStack, type FilesStackMountAuth, type FilesStackOptions, type FileToPlayable, type FileType, type FileUrls, fileBinaryKey, type ImageDerivatives, type ImageDerivativesOptions, type ListFilesOptions, type MintChunkUpload, type MountFileRoutesOptions, mountFileRoutes, type SqliteFileCatalogueOptions, type StorageAction, type StorageOpRow, type StorageOpsLedger, type StorageReconciler, type VideoProcessor, } from './files/index.js';
+export { type CorsResolver, type MountMediaOptions, mountMediaRoutes } from './mountMediaRoutes.js';
+export { createDiskSource, createMediaUrls, type DiskSource, type MediaUrls, SourceRegistry, } from './sources.js';
+export { createS3ObjectStore, type S3ClientLike, type S3ObjectHandle, type S3ObjectStoreOptions, type S3ObjectWriter, } from './s3ObjectStore.js';
+export { decodeRange, type RangeDecision, type ServeRangeOpts, serveRange } from './streamRange.js';
+export { createStreamTokenService, type StreamGrant, type StreamTokenService } from './streamToken.js';
+export { fsHlsFileKey, fsHlsMasterKey, fsHlsPrefix, fsMp4Key, fsPosterKey, fsSourceKey, fsSpriteKey, fsVttKey, type MediaCtx, type MediaGallerySource, type MediaSource, type MediaStore, type PhotoSource, } from './types.js';
+export { type ProcessOptions, type ProcessResult, processVideo, } from './videoProcessor.js';
+export { objectStoreAsMediaStore } from './objectStoreMediaStore.js';

package/dist/server/storage/index.js

@@ -5,23 +5,23 @@
 // The derivative NAME contract — the seam between binary-server (which writes these names),
 // satellite-kit (which re-exports them for the satellite apps) and this package's own token
 // minting. Pure string transforms: nothing here can resolve a stored object.
-export { DERIVATIVE_SUFFIXES, hlsMasterKeyFor, hlsPrefixFor, isDerivativeKey, posterKeyFor, spriteKeyFor, spriteVttKeyFor, webPlayableKeyFor, } from './videoDerivativeKeys';
-export { createBinaryServerStore } from './binaryServerStore';
-export { createBinaryServerProcessing, } from './binaryServerProcessing';
+export { DERIVATIVE_SUFFIXES, hlsMasterKeyFor, hlsPrefixFor, isDerivativeKey, posterKeyFor, spriteKeyFor, spriteVttKeyFor, webPlayableKeyFor, } from './videoDerivativeKeys.js';
+export { createBinaryServerStore } from './binaryServerStore.js';
+export { createBinaryServerProcessing, } from './binaryServerProcessing.js';
 // The transcode API as a plain job client, for apps whose binaries do NOT live in the file
 // catalogue (apps/notes keys attachments by sha256). One derivative pipeline, two doors.
-export { createTranscodeJobClient, } from './transcodeJobs';
-export { createDiskStore } from './diskStore';
+export { createTranscodeJobClient, } from './transcodeJobs.js';
+export { createDiskStore } from './diskStore.js';
 // The FileCatalogue: a SQLite-backed tagged flat file system over this storage layer — one
 // source of truth for a user's binaries (the video gallery is a video-filtered view over it).
-export { catalogueUploadKey, classifyFileType, createCatalogueMediaSource, createCataloguePhotoSource, createCatalogueVideoSource, createChunkedUploadService, createFilesStack, createFileToPlayable, createFileUrls, createLedgeredDeletes, createSqliteFileCatalogue, createStorageOpsLedger, createStorageReconciler, FILE_CATALOGUE_MIGRATIONS, fileBinaryKey, mountFileRoutes, } from './files';
-export { mountMediaRoutes } from './mountMediaRoutes';
-export { createDiskSource, createMediaUrls, SourceRegistry, } from './sources';
+export { catalogueUploadKey, classifyFileType, createCatalogueMediaSource, createCataloguePhotoSource, createCatalogueVideoSource, createChunkedUploadService, createFilesStack, createFileToPlayable, createFileUrls, createLedgeredDeletes, createSqliteFileCatalogue, createStorageOpsLedger, createStorageReconciler, FILE_CATALOGUE_MIGRATIONS, fileBinaryKey, mountFileRoutes, } from './files/index.js';
+export { mountMediaRoutes } from './mountMediaRoutes.js';
+export { createDiskSource, createMediaUrls, SourceRegistry, } from './sources.js';
 // The saas profile's `ObjectStore` (08 §1b). Its local counterpart is
 // `createFsObjectStore` in `cwip/storage` — same interface, different issuer.
-export { createS3ObjectStore, } from './s3ObjectStore';
-export { decodeRange, serveRange } from './streamRange';
-export { createStreamTokenService } from './streamToken';
-export { fsHlsFileKey, fsHlsMasterKey, fsHlsPrefix, fsMp4Key, fsPosterKey, fsSourceKey, fsSpriteKey, fsVttKey, } from './types';
-export { processVideo, } from './videoProcessor';
-export { objectStoreAsMediaStore } from './objectStoreMediaStore';
+export { createS3ObjectStore, } from './s3ObjectStore.js';
+export { decodeRange, serveRange } from './streamRange.js';
+export { createStreamTokenService } from './streamToken.js';
+export { fsHlsFileKey, fsHlsMasterKey, fsHlsPrefix, fsMp4Key, fsPosterKey, fsSourceKey, fsSpriteKey, fsVttKey, } from './types.js';
+export { processVideo, } from './videoProcessor.js';
+export { objectStoreAsMediaStore } from './objectStoreMediaStore.js';

package/dist/server/storage/mountMediaRoutes.d.ts

@@ -1,7 +1,7 @@
 import type { Context, Hono } from 'hono';
-import type { SourceRegistry } from './sources';
-import type { StreamTokenService } from './streamToken';
-import { type MediaCtx, type MediaStore } from './types';
+import type { SourceRegistry } from './sources.js';
+import type { StreamTokenService } from './streamToken.js';
+import { type MediaCtx, type MediaStore } from './types.js';
 /** Resolves the Access-Control-Allow-Origin for a request origin: a fixed origin, an allowlist
  * (echoes the request origin when allowed), or a custom resolver (return null to deny). */
 export type CorsResolver = string | string[] | ((requestOrigin: string | undefined) => string | null | undefined);

package/dist/server/storage/mountMediaRoutes.js

@@ -1,5 +1,5 @@
-import { serveRange } from './streamRange';
-import { fsDisplayKey, fsHlsFileKey, fsMp4Key, fsPosterKey, fsSourceKey, fsSpriteKey, fsVttKey, } from './types';
+import { serveRange } from './streamRange.js';
+import { fsDisplayKey, fsHlsFileKey, fsMp4Key, fsPosterKey, fsSourceKey, fsSpriteKey, fsVttKey, } from './types.js';
 const EXPOSE_HEADERS = 'Content-Range, Content-Length, Accept-Ranges';
 function resolveAcao(cors, reqOrigin) {
     if (!cors)

package/dist/server/storage/objectStoreMediaStore.d.ts

@@ -1,4 +1,4 @@
 import type { ObjectStore } from 'cwip/storage';
-import type { MediaStore } from './types';
+import type { MediaStore } from './types.js';
 /** Adapt an {@link ObjectStore} to the {@link MediaStore} contract `processVideo` expects. */
 export declare function objectStoreAsMediaStore(objects: ObjectStore): MediaStore;

package/dist/server/storage/s3ObjectStore.js

@@ -29,7 +29,7 @@
  * this module has no ambient authority and a test can hand it a fake client.
  */
 import { assertObjectKey } from 'cwip/storage';
-import { AppError } from '../errors';
+import { AppError } from '../errors.js';
 const DEFAULT_PART_SIZE = 8 * 1024 * 1024;
 const DEFAULT_EXPIRES_IN_SECONDS = 300;
 const MAX_EXPIRES_IN_SECONDS = 86_400;

package/dist/server/storage/sources.d.ts

@@ -1,6 +1,6 @@
 import type { ProcessingStatus } from 'cursedbelt-core/media';
-import type { StreamTokenService } from './streamToken';
-import { type MediaCtx, type MediaSource, type MediaStore } from './types';
+import type { StreamTokenService } from './streamToken.js';
+import { type MediaCtx, type MediaSource, type MediaStore } from './types.js';
 export interface MediaUrls {
     build(ctx: MediaCtx, sourceId: string, videoId: string): Promise<{
         streamUrl: string;

package/dist/server/storage/sources.js

@@ -1,5 +1,5 @@
-import { fsMp4Key, fsPosterKey, fsSourceKey, fsSpriteKey, fsVttKey, } from './types';
-import { processVideo } from './videoProcessor';
+import { fsMp4Key, fsPosterKey, fsSourceKey, fsSpriteKey, fsVttKey, } from './types.js';
+import { processVideo } from './videoProcessor.js';
 export function createMediaUrls(opts) {
     const ownerOf = opts.owner ?? ((c) => c.tenantId);
     // Trim a trailing slash so 'https://api…/_media/' and '/_media' behave identically.

package/dist/server/storage/streamRange.d.ts

@@ -1,4 +1,4 @@
-import type { MediaStore } from './types';
+import type { MediaStore } from './types.js';
 export type RangeDecision = {
     kind: 'full';
 } | {

package/dist/server/storage/streamToken.js

@@ -5,7 +5,7 @@
 // to install a one-time-password library for code it never calls. Import the leaf module that
 // has what you need; never the index that has everything. `src/leafSubpathsImportNothing.spec.ts`
 // fails if this file (or anything else the storage barrel reaches) undoes it.
-import { signToken, verifyPurposeToken } from '../auth/jwt';
+import { signToken, verifyPurposeToken } from '../auth/jwt.js';
 // ── Stream tokens ───────────────────────────────────────────────────────────────
 // Media bytes are loaded by <video>/hls.js/<img>, which cannot send the platform Bearer
 // header an app's auth uses. So byte-serving routes live OUTSIDE the guarded API and

package/dist/server/storage/videoProcessor.d.ts

@@ -1,5 +1,5 @@
 import type { ProcessingStatus } from 'cursedbelt-core/media';
-import { type MediaStore } from './types';
+import { type MediaStore } from './types.js';
 export type ProcessProgress = (status: ProcessingStatus, pct: number) => void;
 export type ProcessResult = {
     status: ProcessingStatus;

package/dist/server/storage/videoProcessor.js

@@ -1,7 +1,7 @@
 import { mkdir, readdir, rm } from 'node:fs/promises';
 import path from 'node:path';
-import { buildSpriteVtt, canStreamCopy, faststartArgs, hlsLadderArgs, isFfmpegAvailable, LIBRARY_CRF, planSprite, posterArgs, probeVideoStream, resolveLadder, runFfmpegProgress, spriteArgs, } from '../media-bun';
-import { fsHlsFileKey, fsHlsMasterKey, fsMp4Key, fsPosterKey, fsSpriteKey, fsVttKey, } from './types';
+import { buildSpriteVtt, canStreamCopy, faststartArgs, hlsLadderArgs, isFfmpegAvailable, LIBRARY_CRF, planSprite, posterArgs, probeVideoStream, resolveLadder, runFfmpegProgress, spriteArgs, } from '../media-bun/index.js';
+import { fsHlsFileKey, fsHlsMasterKey, fsMp4Key, fsPosterKey, fsSpriteKey, fsVttKey, } from './types.js';
 // Stream a produced local file into the store under `key` (no full heap copy).
 async function uploadFile(store, localPath, key, mime) {
     const file = Bun.file(localPath);

package/dist/server/sync/engine.d.ts

@@ -13,8 +13,8 @@
  * instead of wedging with an error that reads like corruption. Nothing is dropped —
  * the moment the peer is upgraded, the next push resumes from exactly that op.
  */
-import type { OpLog } from "./opLog";
-import { type ApplyContext, type ApplyOne, type ApplyReport, type PeerInfo, type RemoteApi, type SyncOp, type SyncSummary } from "./types";
+import type { OpLog } from "./opLog.js";
+import { type ApplyContext, type ApplyOne, type ApplyReport, type PeerInfo, type RemoteApi, type SyncOp, type SyncSummary } from "./types.js";
 /** Kit-owned dedupe + ledger insert around the app's per-op merge logic. Everything
  *  for one op happens in one transaction: state change AND ledger insert, so a crash
  *  can never apply without recording (double-apply) or record without applying

package/dist/server/sync/engine.js

@@ -1,4 +1,4 @@
-import { StopBatch, } from "./types";
+import { StopBatch, } from "./types.js";
 const BATCH = 500;
 /** Kit-owned dedupe + ledger insert around the app's per-op merge logic. Everything
  *  for one op happens in one transaction: state change AND ledger insert, so a crash

package/dist/server/sync/http.d.ts

@@ -9,9 +9,9 @@
  * probe.
  */
 import { Hono } from "hono";
-import type { OpLog } from "./opLog";
-import type { ApplyOne, ApplyReport, RemoteApi } from "./types";
-import { type SyncSignalHub } from "./signal";
+import type { OpLog } from "./opLog.js";
+import type { ApplyOne, ApplyReport, RemoteApi } from "./types.js";
+import { type SyncSignalHub } from "./signal.js";
 /**
  * Trim a page to the byte budget, keeping it a PREFIX so `cursor` stays the seq
  * of the last op actually returned. Anything else silently drops ops: the caller
@@ -74,7 +74,7 @@ export interface ReceiverOptions {
  * served a single integer — "was Sync now pressed here?" — and existed only to be
  * asked, every 20 seconds, by a dialer that otherwise had nothing to say. That made
  * it **68 % of `vault`'s entire traffic**. A receiver with news now says so over
- * {@link import("./signal")} instead of waiting to be asked; deleting the route is
+ * {@link import("./signal.js")} instead of waiting to be asked; deleting the route is
  * what stops a stale consumer from keeping the poll alive against a new build.
  */
 export declare function createSyncReceiver(options: ReceiverOptions): Hono;

package/dist/server/sync/http.js

@@ -9,8 +9,8 @@
  * probe.
  */
 import { Hono } from "hono";
-import { createSyncApplier } from "./engine";
-import { signalResponse } from "./signal";
+import { createSyncApplier } from "./engine.js";
+import { signalResponse } from "./signal.js";
 const noStore = { "cache-control": "no-store" };
 const SYNC_PAGE = 500;
 /**
@@ -60,7 +60,7 @@ function peerIdOf(header, query) {
  * served a single integer — "was Sync now pressed here?" — and existed only to be
  * asked, every 20 seconds, by a dialer that otherwise had nothing to say. That made
  * it **68 % of `vault`'s entire traffic**. A receiver with news now says so over
- * {@link import("./signal")} instead of waiting to be asked; deleting the route is
+ * {@link import("./signal.js")} instead of waiting to be asked; deleting the route is
  * what stops a stale consumer from keeping the poll alive against a new build.
  */
 export function createSyncReceiver(options) {

package/dist/server/sync/index.d.ts

@@ -29,14 +29,14 @@
  * `bun:sqlite` and `node:crypto` only resolve on this side of the split. The
  * directory decides the types; the `exports` key decides the spelling.
  */
-export { StopBatch, type ApplyContext, type ApplyOne, type ApplyReport, type PeerInfo, type RemoteApi, type SyncOp, type SyncSummary, } from "./types";
-export { createOpLog, type OpLog } from "./opLog";
-export { createTokenStore, type DeviceToken, type TokenStore } from "./tokens";
-export { createSyncApplier, pushToRemote, pullFromRemote, runSync, type EngineOptions, type ExportPolicy, type PeerRefusal, } from "./engine";
-export { capPageBytes, createHttpRemote, createSyncReceiver, type ReceiverHooks, type ReceiverOptions, } from "./http";
-export { DEFAULT_LOOP, isUnreachable, planNextSync, type SyncLoopConfig, type SyncLoopState, type SyncPlan, } from "./planner";
-export { SIGNAL_SSE_HEADERS, connectSyncSignal, createSyncSignalHub, encodeNewsFrame, parseNewsFrame, signalResponse, signalStream, type SignalClient, type SignalClientOptions, type SignalStreamOptions, type SyncNews, type SyncSignalHub, } from "./signal";
-export { OFFLINE_STATUS, PEER_CONTACT_WRITE_MS, createSyncStatusReporter, type SyncStatus, type SyncStatusReporter, type SyncStatusStore, } from "./status";
+export { StopBatch, type ApplyContext, type ApplyOne, type ApplyReport, type PeerInfo, type RemoteApi, type SyncOp, type SyncSummary, } from "./types.js";
+export { createOpLog, type OpLog } from "./opLog.js";
+export { createTokenStore, type DeviceToken, type TokenStore } from "./tokens.js";
+export { createSyncApplier, pushToRemote, pullFromRemote, runSync, type EngineOptions, type ExportPolicy, type PeerRefusal, } from "./engine.js";
+export { capPageBytes, createHttpRemote, createSyncReceiver, type ReceiverHooks, type ReceiverOptions, } from "./http.js";
+export { DEFAULT_LOOP, isUnreachable, planNextSync, type SyncLoopConfig, type SyncLoopState, type SyncPlan, } from "./planner.js";
+export { SIGNAL_SSE_HEADERS, connectSyncSignal, createSyncSignalHub, encodeNewsFrame, parseNewsFrame, signalResponse, signalStream, type SignalClient, type SignalClientOptions, type SignalStreamOptions, type SyncNews, type SyncSignalHub, } from "./signal.js";
+export { OFFLINE_STATUS, PEER_CONTACT_WRITE_MS, createSyncStatusReporter, type SyncStatus, type SyncStatusReporter, type SyncStatusStore, } from "./status.js";
 /**
  * 🔴 `REQUEST_POLL_MS` was exported from here until 2026-09-15 and is GONE — that
  * removal is why this package went to 2.0.0. It was a 20-second dial at a configured
@@ -44,6 +44,6 @@ export { OFFLINE_STATUS, PEER_CONTACT_WRITE_MS, createSyncStatusReporter, type S
  * deleting it would have been a breaking change rather than an edit. `./timer`'s
  * header has the ruling and the measurement; `./signal` is what replaced it.
  */
-export { startSyncTimer, type SyncTimerDeps, type SyncTimerHandle, type WakeReason } from "./timer";
-export { createSyncAlarm, type AlarmOutcome, type SyncAlarm, type SyncAlarmOptions } from "./alarm";
-export { DEFAULT_HOLD_MS, createCommandQueue, createCommandReceiver, createCommandRemote, startCommandWorker, type CommandQueue, type CommandRemote, type CommandRoutesOptions, type CommandStatus, type CommandWorkerDeps, type CommandWorkerHandle, type SyncCommand, } from "./commands";
+export { startSyncTimer, type SyncTimerDeps, type SyncTimerHandle, type WakeReason } from "./timer.js";
+export { createSyncAlarm, type AlarmOutcome, type SyncAlarm, type SyncAlarmOptions } from "./alarm.js";
+export { DEFAULT_HOLD_MS, createCommandQueue, createCommandReceiver, createCommandRemote, startCommandWorker, type CommandQueue, type CommandRemote, type CommandRoutesOptions, type CommandStatus, type CommandWorkerDeps, type CommandWorkerHandle, type SyncCommand, } from "./commands.js";

package/dist/server/sync/index.js

@@ -29,14 +29,14 @@
  * `bun:sqlite` and `node:crypto` only resolve on this side of the split. The
  * directory decides the types; the `exports` key decides the spelling.
  */
-export { StopBatch, } from "./types";
-export { createOpLog } from "./opLog";
-export { createTokenStore } from "./tokens";
-export { createSyncApplier, pushToRemote, pullFromRemote, runSync, } from "./engine";
-export { capPageBytes, createHttpRemote, createSyncReceiver, } from "./http";
-export { DEFAULT_LOOP, isUnreachable, planNextSync, } from "./planner";
-export { SIGNAL_SSE_HEADERS, connectSyncSignal, createSyncSignalHub, encodeNewsFrame, parseNewsFrame, signalResponse, signalStream, } from "./signal";
-export { OFFLINE_STATUS, PEER_CONTACT_WRITE_MS, createSyncStatusReporter, } from "./status";
+export { StopBatch, } from "./types.js";
+export { createOpLog } from "./opLog.js";
+export { createTokenStore } from "./tokens.js";
+export { createSyncApplier, pushToRemote, pullFromRemote, runSync, } from "./engine.js";
+export { capPageBytes, createHttpRemote, createSyncReceiver, } from "./http.js";
+export { DEFAULT_LOOP, isUnreachable, planNextSync, } from "./planner.js";
+export { SIGNAL_SSE_HEADERS, connectSyncSignal, createSyncSignalHub, encodeNewsFrame, parseNewsFrame, signalResponse, signalStream, } from "./signal.js";
+export { OFFLINE_STATUS, PEER_CONTACT_WRITE_MS, createSyncStatusReporter, } from "./status.js";
 /**
  * 🔴 `REQUEST_POLL_MS` was exported from here until 2026-09-15 and is GONE — that
  * removal is why this package went to 2.0.0. It was a 20-second dial at a configured
@@ -44,6 +44,6 @@ export { OFFLINE_STATUS, PEER_CONTACT_WRITE_MS, createSyncStatusReporter, } from
  * deleting it would have been a breaking change rather than an edit. `./timer`'s
  * header has the ruling and the measurement; `./signal` is what replaced it.
  */
-export { startSyncTimer } from "./timer";
-export { createSyncAlarm } from "./alarm";
-export { DEFAULT_HOLD_MS, createCommandQueue, createCommandReceiver, createCommandRemote, startCommandWorker, } from "./commands";
+export { startSyncTimer } from "./timer.js";
+export { createSyncAlarm } from "./alarm.js";
+export { DEFAULT_HOLD_MS, createCommandQueue, createCommandReceiver, createCommandRemote, startCommandWorker, } from "./commands.js";

package/dist/server/sync/opLog.d.ts

@@ -9,7 +9,7 @@
  * stream every peer pages over.
  */
 import type { Database } from "bun:sqlite";
-import type { SyncOp } from "./types";
+import type { SyncOp } from "./types.js";
 export interface OpLog {
     /** This instance's stable id (minted once, persisted in sync_meta). */
     instanceId(): string;

package/dist/server/sync/signal.d.ts

@@ -117,7 +117,7 @@ export interface SignalClientOptions {
     /** This instance's id, echoed as `x-sync-peer` so the far side can label us. */
     selfId: string;
     /**
-     * The peer has news. Wire this to {@link import("./timer").SyncTimerHandle.syncNow}
+     * The peer has news. Wire this to {@link import("./timer.js").SyncTimerHandle.syncNow}
      * — the whole point is that a reconciliation now happens for a REASON.
      */
     onNews: (news: SyncNews) => void;

package/dist/server/sync/timer.d.ts

@@ -41,9 +41,9 @@
  * `syncNow()` / `markDirty()` rather than by a timer that was watching for it —
  * call `syncNow()` after a link and it is immediate.
  */
-import { type SyncLoopConfig } from "./planner";
-import type { SyncStatusReporter } from "./status";
-import type { SyncSummary } from "./types";
+import { type SyncLoopConfig } from "./planner.js";
+import type { SyncStatusReporter } from "./status.js";
+import type { SyncSummary } from "./types.js";
 /**
  * 🔴 Every reason this loop is allowed to wake up. There is deliberately no
  * `"interval"` / `"poll"` member, and adding one is the change this whole file

package/dist/server/sync/timer.js

@@ -41,7 +41,7 @@
  * `syncNow()` / `markDirty()` rather than by a timer that was watching for it —
  * call `syncNow()` after a link and it is immediate.
  */
-import { isUnreachable, DEFAULT_LOOP, planNextSync, } from "./planner";
+import { isUnreachable, DEFAULT_LOOP, planNextSync, } from "./planner.js";
 /**
  * One reconciliation shortly after start: catch up on whatever happened while this
  * process was down. A single shot at boot, not a cadence — the same catch-up a push

package/dist/server/ws/eventBus.d.ts

@@ -1,4 +1,4 @@
-import type { EventBus } from './types';
+import type { EventBus } from './types.js';
 /**
  * The push-only subset ru uses: broadcast-to-all, no auth, no inbound routing. ru
  * mounts one bus and pushes from its task queue / caSync / Forge workers

package/dist/server/ws/hub.d.ts

@@ -1,4 +1,4 @@
-import type { WsChannel, WsClient, WsHub, WsHubOpts } from './types';
+import type { WsChannel, WsClient, WsHub, WsHubOpts } from './types.js';
 /**
  * The heartbeat sweep, factored out as a pure function so it's testable without faking
  * timers: ping every live client, close (don't delete — let the `close` handler fire

package/dist/server/ws/hub.js

@@ -1,6 +1,6 @@
-import { ApiError, toErrorEnvelope } from '../errors';
-import { computePresence } from './presence';
-import { joinRoom, ROOM_META_KEY } from './room';
+import { ApiError, toErrorEnvelope } from '../errors.js';
+import { computePresence } from './presence.js';
+import { joinRoom, ROOM_META_KEY } from './room.js';
 const DEFAULT_HEARTBEAT_MS = 30_000;
 const DEFAULT_STALE_MS = 120_000;
 /** Bun's `idleTimeout` ceiling (seconds). */

package/dist/server/ws/index.d.ts

@@ -1,5 +1,5 @@
-export { createEventBus } from './eventBus';
-export { createWsHub } from './hub';
-export { computePresence } from './presence';
-export { joinRoom, leaveRoom, ROOM_META_KEY, roomOf } from './room';
-export type { EventBus, EventBusData, PresenceEntry, PresenceState, WsChannel, WsClient, WsData, WsHandshake, WsHub, WsHubOpts, WsMessage, } from './types';
+export { createEventBus } from './eventBus.js';
+export { createWsHub } from './hub.js';
+export { computePresence } from './presence.js';
+export { joinRoom, leaveRoom, ROOM_META_KEY, roomOf } from './room.js';
+export type { EventBus, EventBusData, PresenceEntry, PresenceState, WsChannel, WsClient, WsData, WsHandshake, WsHub, WsHubOpts, WsMessage, } from './types.js';

package/dist/server/ws/index.js

@@ -1,7 +1,7 @@
 // cursedbelt-server WS hub — Bun-native upgrade, typed channel registry, heartbeat,
 // presence-as-a-view, and the push-only event-bus subset. Pairs with the partysocket
 // client in `cursedbelt/client`.
-export { createEventBus } from './eventBus';
-export { createWsHub } from './hub';
-export { computePresence } from './presence';
-export { joinRoom, leaveRoom, ROOM_META_KEY, roomOf } from './room';
+export { createEventBus } from './eventBus.js';
+export { createWsHub } from './hub.js';
+export { computePresence } from './presence.js';
+export { joinRoom, leaveRoom, ROOM_META_KEY, roomOf } from './room.js';

package/dist/server/ws/presence.d.ts

@@ -1,4 +1,4 @@
-import type { PresenceState, WsClient } from './types';
+import type { PresenceState, WsClient } from './types.js';
 /**
  * Presence is a *view* over the live client map, not a tracked structure — there is no
  * `PresenceTracker` class to keep in sync. The hub's `getPresence(channel)` delegates

package/dist/server/ws/room.d.ts

@@ -1,4 +1,4 @@
-import type { WsClient } from './types';
+import type { WsClient } from './types.js';
 /**
  * Rooms are not a separate stateful abstraction — they are a typed convention over
  * {@link WsClient.meta}. A channel puts a client in a room with {@link joinRoom}; the

package/dist/server/ws/types.d.ts

@@ -1,6 +1,6 @@
 import type { ServerWebSocket, WebSocketHandler } from 'bun';
 import type { MiddlewareHandler } from 'hono';
-import type { AuthUser } from '../auth/types';
+import type { AuthUser } from '../auth/types.js';
 /**
  * Shared types for the cursedbelt WebSocket hub.
  *