cursedbelt-server 4.11.1 → 4.13.0

package/src/server/bench/index.ts

@@ -40,7 +40,7 @@ export {
   type CpuViolation,
   type CpuViolationKind,
   formatCpuBudgetReport,
-} from './assert';
+} from './assert.js';
 export {
   type CpuBudgetConfig,
   type CpuBudgetExemption,
@@ -60,8 +60,8 @@ export {
   WORKERS_PAID_INCLUDED_REQUESTS,
   WORKERS_PAID_USD_PER_MILLION_CPU_MS,
   WORKERS_PAID_USD_PER_MILLION_REQUESTS,
-} from './budget';
-export { type CpuBudgetOpts, cpuBudget } from './cpuBudget';
+} from './budget.js';
+export { type CpuBudgetOpts, cpuBudget } from './cpuBudget.js';
 export {
   type CpuClock,
   type CpuSpan,
@@ -70,7 +70,7 @@ export {
   resolveCpuClock,
   unavailableCpuClock,
   workerCpuClock,
-} from './cpuClock';
+} from './cpuClock.js';
 export {
   type CpuBudgetReport,
   type CpuRecorder,
@@ -78,5 +78,5 @@ export {
   createCpuRecorder,
   percentile,
   type RouteCpuStats,
-} from './recorder';
-export { BENCH_ORIGIN, type BenchCase, runCpuBench, type RunCpuBenchOpts } from './runBench';
+} from './recorder.js';
+export { BENCH_ORIGIN, type BenchCase, runCpuBench, type RunCpuBenchOpts } from './runBench.js';

package/src/server/bench/recorder.ts

@@ -11,8 +11,8 @@ import {
   type ResolvedBudget,
   resolveBudget,
   validateCpuBudgetConfig,
-} from './budget';
-import type { CpuClock } from './cpuClock';
+} from './budget.js';
+import type { CpuClock } from './cpuClock.js';
 
 /**
  * Nearest-rank percentile over an ASCENDING-sorted array: the smallest value at or below

package/src/server/bench/runBench.ts

@@ -1,5 +1,5 @@
-import type { CpuRecorder } from './recorder';
-import type { CpuBudgetReport } from './recorder';
+import type { CpuRecorder } from './recorder.js';
+import type { CpuBudgetReport } from './recorder.js';
 
 /**
  * Drive a Hono app's routes and measure what each costs in CPU.

package/src/server/ctgr.spec.ts

@@ -3,8 +3,8 @@ import { Hono } from 'hono';
 import { toBase64 } from 'cursedbelt-core/ctgr';
 import { ChunkStore } from 'cursedbelt-core/ctgr/chunk-store';
 import { encodeRequest } from 'cursedbelt-core/ctgr';
-import type { CursedbeltEnv } from './context';
-import { buildRoutes, CTGR_ROUTE_PATTERN, getCtgrDecoded, unGETify } from './ctgr';
+import type { CursedbeltEnv } from './context.js';
+import { buildRoutes, CTGR_ROUTE_PATTERN, getCtgrDecoded, unGETify } from './ctgr.js';
 
 const ORIGIN = 'http://localhost';
 const fetchChunk = (app: Hono<CursedbeltEnv>, url: string, init?: RequestInit) =>

package/src/server/ctgr.ts

@@ -19,8 +19,8 @@ import {
   METHOD_TO_ABBREV,
 } from 'cursedbelt-core/ctgr/types';
 import { V0ChunkStore } from 'cursedbelt-core/ctgr/v0compat';
-import type { CursedbeltEnv } from './context';
-import { ApiError, toErrorEnvelope } from './errors';
+import type { CursedbeltEnv } from './context.js';
+import { ApiError, toErrorEnvelope } from './errors.js';
 
 /**
  * The path pattern that matches EVERY ctgr GET twin (`/ctgr<XX>...`) and nothing

package/src/server/d1/backup.spec.ts

@@ -3,10 +3,10 @@ import { afterEach, describe, expect, test } from 'bun:test';
 import { existsSync, mkdtempSync, rmSync, statSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
-import { createTimeTravelBackup } from './backup';
+import { createTimeTravelBackup } from './backup.js';
 // The local half is a separate module on purpose — it reaches `bun:sqlite`, so it may not
 // sit in the `./d1` barrel a Worker imports. See `./localBackup.ts`'s header.
-import { backupFor, checkpointWal, createLocalBackup } from './localBackup';
+import { backupFor, checkpointWal, createLocalBackup } from './localBackup.js';
 
 const dirs: string[] = [];
 const scratch = (): string => {

package/src/server/d1/fakeD1.ts

@@ -35,8 +35,8 @@
  */
 
 import type { Database } from 'bun:sqlite';
-import type { D1BindingLike, D1BindingResult, D1BindingStatement } from './remote';
-import { isPureReadSql } from './values';
+import type { D1BindingLike, D1BindingResult, D1BindingStatement } from './remote.js';
+import { isPureReadSql } from './values.js';
 
 /** The bind types a real D1 binding accepts. Everything else throws. */
 function assertD1Bindable(value: unknown, index: number): void {

package/src/server/d1/index.ts

@@ -20,7 +20,7 @@ export {
 	createTimeTravelBackup,
 	type DatabaseBackup,
 	type TimeTravelOpts,
-} from './backup';
+} from './backup.js';
 // 🔴 `./localBackup` is deliberately NOT re-exported here — import `checkpointWal`,
 // `createLocalBackup`, `LocalBackupOpts` and `backupFor` from
 // `cursedbelt-server/d1/backup-local`. It reaches `bun:sqlite` for real (via
@@ -39,16 +39,16 @@ export {
 // that does not use the query builder — which per `../db/kysely.ts`'s own header is most
 // of them, since business tables stay on raw statements. Measured 2026-09-18 against the
 // published 4.3.0 tarball. `barrelsReachNoOptionalPeer.spec.ts` is what keeps it out.
-export { createPendingWrites, type InvocationD1, type PendingWrites, perInvocation, type WriteCollector } from './invocation';
-export { assertBatchSize, assertWithinLimits, chunkForBind, LIMITS } from './limits';
-export { createLocalD1, refuseInteractiveTransaction } from './local';
+export { createPendingWrites, type InvocationD1, type PendingWrites, perInvocation, type WriteCollector } from './invocation.js';
+export { assertBatchSize, assertWithinLimits, chunkForBind, LIMITS } from './limits.js';
+export { createLocalD1, refuseInteractiveTransaction } from './local.js';
 export {
 	createRemoteD1,
 	type D1BindingLike,
 	type D1BindingMeta,
 	type D1BindingResult,
 	type D1BindingStatement,
-} from './remote';
+} from './remote.js';
 export {
 	classifySchedule,
 	cronFieldCount,
@@ -60,7 +60,7 @@ export {
 	toFiveField,
 	type TriggerShape,
 	type WorkersPrimitive,
-} from './scheduling';
+} from './scheduling.js';
 export {
 	D1BindError,
 	type D1LikeBindable,
@@ -72,5 +72,5 @@ export {
 	type D1LikeValue,
 	D1LimitError,
 	D1UnsupportedError,
-} from './types';
-export { makeMeta, normalizeBind, normalizeBinds, normalizeRow, normalizeRows, normalizeValue } from './values';
+} from './types.js';
+export { makeMeta, normalizeBind, normalizeBinds, normalizeRow, normalizeRows, normalizeValue } from './values.js';

package/src/server/d1/invocation.spec.ts

@@ -1,11 +1,11 @@
 import { Database } from 'bun:sqlite';
 import { beforeEach, describe, expect, test } from 'bun:test';
-import { createFakeD1Binding } from './fakeD1';
-import { createPendingWrites, perInvocation } from './invocation';
-import { LIMITS } from './limits';
-import { createLocalD1 } from './local';
-import { createRemoteD1 } from './remote';
-import { D1LimitError, type D1LikeDatabase } from './types';
+import { createFakeD1Binding } from './fakeD1.js';
+import { createPendingWrites, perInvocation } from './invocation.js';
+import { LIMITS } from './limits.js';
+import { createLocalD1 } from './local.js';
+import { createRemoteD1 } from './remote.js';
+import { D1LimitError, type D1LikeDatabase } from './types.js';
 
 /**
  * 🔴 Every test here would have passed against the seam as published in 4.2.0, because

package/src/server/d1/invocation.ts

@@ -49,8 +49,8 @@
  * here on 2026-09-19.
  */
 
-import { LIMITS } from './limits';
-import { D1LimitError, type D1LikeBindable, type D1LikeDatabase, type D1LikeResult, type D1LikeRow, type D1LikeStatement, type D1LikeValue } from './types';
+import { LIMITS } from './limits.js';
+import { D1LimitError, type D1LikeBindable, type D1LikeDatabase, type D1LikeResult, type D1LikeRow, type D1LikeStatement, type D1LikeValue } from './types.js';
 
 /**
  * A database handle that knows how much of its invocation budget it has spent.

package/src/server/d1/kysely.spec.ts

@@ -7,11 +7,11 @@
 import { Database } from 'bun:sqlite';
 import { describe, expect, test } from 'bun:test';
 import type { Kysely } from 'kysely';
-import { createFakeD1Binding } from './fakeD1';
-import { createD1Kysely } from './kysely';
-import { createLocalD1 } from './local';
-import { createRemoteD1 } from './remote';
-import { D1UnsupportedError, type D1LikeDatabase } from './types';
+import { createFakeD1Binding } from './fakeD1.js';
+import { createD1Kysely } from './kysely.js';
+import { createLocalD1 } from './local.js';
+import { createRemoteD1 } from './remote.js';
+import { D1UnsupportedError, type D1LikeDatabase } from './types.js';
 
 const DDL = `CREATE TABLE app_config (
   key TEXT PRIMARY KEY, value TEXT NOT NULL, updated_at TEXT NOT NULL, updated_by TEXT

package/src/server/d1/kysely.ts

@@ -41,9 +41,9 @@ import {
 	SqliteIntrospector,
 	SqliteQueryCompiler,
 } from 'kysely';
-import type { PlumbingSchema } from '../db/plumbingTypes';
-import { refuseInteractiveTransaction } from './local';
-import { type D1LikeBindable, type D1LikeDatabase, D1UnsupportedError } from './types';
+import type { PlumbingSchema } from '../db/plumbingTypes.js';
+import { refuseInteractiveTransaction } from './local.js';
+import { type D1LikeBindable, type D1LikeDatabase, D1UnsupportedError } from './types.js';
 
 /**
  * Kysely compiles to a parameter list that may contain values our seam refuses

package/src/server/d1/limits.spec.ts

@@ -1,8 +1,8 @@
 import { Database } from 'bun:sqlite';
 import { describe, expect, test } from 'bun:test';
-import { assertBatchSize, assertWithinLimits, chunkForBind, LIMITS } from './limits';
-import { createLocalD1 } from './local';
-import { D1LimitError } from './types';
+import { assertBatchSize, assertWithinLimits, chunkForBind, LIMITS } from './limits.js';
+import { createLocalD1 } from './local.js';
+import { D1LimitError } from './types.js';
 
 describe('D1 limits are enforced on the LOCAL driver too', () => {
 	// 🔴 The point of every test here: `bun:sqlite` has none of these caps, so without

package/src/server/d1/limits.ts

@@ -18,7 +18,7 @@
  * Values are the Workers **Paid** tier, which is what the owner already pays for.
  */
 
-import { D1LimitError, type D1LikeBindable } from './types';
+import { D1LimitError, type D1LikeBindable } from './types.js';
 
 export const LIMITS = {
 	/** Bound parameters in a single statement. */

package/src/server/d1/local.ts

@@ -15,7 +15,7 @@
  */
 
 import type { Database } from 'bun:sqlite';
-import { assertBatchSize, assertWithinLimits } from './limits';
+import { assertBatchSize, assertWithinLimits } from './limits.js';
 import {
 	type D1LikeBindable,
 	type D1LikeDatabase,
@@ -24,8 +24,8 @@ import {
 	type D1LikeStatement,
 	type D1LikeValue,
 	D1UnsupportedError,
-} from './types';
-import { isPureReadSql, makeMeta, normalizeBinds, normalizeRows, normalizeValue } from './values';
+} from './types.js';
+import { isPureReadSql, makeMeta, normalizeBinds, normalizeRows, normalizeValue } from './values.js';
 
 /** Shared clock, so `meta.duration` means the same thing on both sides of the seam. */
 const now = (): number => performance.now();

package/src/server/d1/localBackup.ts

@@ -35,9 +35,9 @@
 import type { Database } from 'bun:sqlite';
 import { existsSync, mkdirSync } from 'node:fs';
 import { join } from 'node:path';
-import { snapshotSqlite } from '../sqlite/backup';
-import type { BackupPoint, DatabaseBackup, TimeTravelOpts } from './backup';
-import { createTimeTravelBackup } from './backup';
+import { snapshotSqlite } from '../sqlite/backup.js';
+import type { BackupPoint, DatabaseBackup, TimeTravelOpts } from './backup.js';
+import { createTimeTravelBackup } from './backup.js';
 
 export interface LocalBackupOpts {
 	/** The live handle — checkpointed before the snapshot is taken. */

package/src/server/d1/remote.ts

@@ -15,7 +15,7 @@
  * fake that has no `workerd` in sight.
  */
 
-import { assertBatchSize, assertWithinLimits } from './limits';
+import { assertBatchSize, assertWithinLimits } from './limits.js';
 import {
 	type D1LikeBindable,
 	type D1LikeDatabase,
@@ -24,8 +24,8 @@ import {
 	type D1LikeStatement,
 	type D1LikeValue,
 	D1UnsupportedError,
-} from './types';
-import { makeMeta, normalizeBinds, normalizeRows, normalizeValue } from './values';
+} from './types.js';
+import { makeMeta, normalizeBinds, normalizeRows, normalizeValue } from './values.js';
 
 /** What D1 reports back about a statement. Its `meta` is richer than the local driver's. */
 export interface D1BindingMeta {

package/src/server/d1/sameShape.spec.ts

@@ -16,10 +16,10 @@
 
 import { Database } from 'bun:sqlite';
 import { beforeEach, describe, expect, test } from 'bun:test';
-import { createFakeD1Binding } from './fakeD1';
-import { createLocalD1 } from './local';
-import { createRemoteD1 } from './remote';
-import { D1BindError, type D1LikeBindable, type D1LikeDatabase } from './types';
+import { createFakeD1Binding } from './fakeD1.js';
+import { createLocalD1 } from './local.js';
+import { createRemoteD1 } from './remote.js';
+import { D1BindError, type D1LikeBindable, type D1LikeDatabase } from './types.js';
 
 const DDL = `CREATE TABLE t (
   id INTEGER PRIMARY KEY,

package/src/server/d1/scheduling.spec.ts

@@ -6,7 +6,7 @@ import {
 	type PortableJob,
 	toCronTriggers,
 	toFiveField,
-} from './scheduling';
+} from './scheduling.js';
 
 const job = (name: string, shape: PortableJob['shape']): PortableJob => ({
 	name,

package/src/server/d1/scheduling.ts

@@ -34,7 +34,7 @@
  * a minute, which would change behaviour in production and nowhere else.
  */
 
-import type { D1LikeDatabase } from './types';
+import type { D1LikeDatabase } from './types.js';
 
 /** The Workers primitive a piece of scheduled work maps onto. */
 export type WorkersPrimitive = 'cron-trigger' | 'queue' | 'durable-object-alarm' | 'unportable';

package/src/server/d1/values.ts

@@ -12,7 +12,7 @@
  * recalled: the probe wrote each type into a `CREATE TABLE t (v)` column and read it back.
  */
 
-import { D1BindError, type D1LikeBindable, type D1LikeMeta, type D1LikeValue } from './types';
+import { D1BindError, type D1LikeBindable, type D1LikeMeta, type D1LikeValue } from './types.js';
 
 /**
  * The largest integer a JS number holds exactly. A `bigint` beyond this cannot survive the

package/src/server/db/kysely.spec.ts

@@ -1,6 +1,6 @@
 import { Database } from 'bun:sqlite';
 import { afterEach, beforeEach, describe, expect, test } from 'bun:test';
-import { createKysely, type PlumbingDb } from './kysely';
+import { createKysely, type PlumbingDb } from './kysely.js';
 
 const AUTH_SESSIONS_DDL = `CREATE TABLE auth_sessions (
   session_id TEXT PRIMARY KEY, user_id TEXT NOT NULL, created_at TEXT NOT NULL,

package/src/server/db/kysely.ts

@@ -1,7 +1,7 @@
 import type { Database } from 'bun:sqlite';
 import { Kysely } from 'kysely';
 import { BunSqliteDialect } from 'kysely-bun-sqlite';
-import type { PlumbingSchema } from './plumbingTypes';
+import type { PlumbingSchema } from './plumbingTypes.js';
 
 /**
  * A Kysely query builder typed to the {@link PlumbingSchema} plumbing tables, on the

package/src/server/dropzone/index.ts

@@ -21,10 +21,10 @@ export {
 	type DroppedFile,
 	type ScanOptions,
 	type SweepReport,
-} from "./scan";
+} from "./scan.js";
 export {
 	askBinaryServerAboutDuplicate,
 	hashFile,
 	type DuplicateVerdict,
 	type DuplicateQuestion,
-} from "./duplicates";
+} from "./duplicates.js";

package/src/server/dropzone/scan.spec.ts

@@ -10,7 +10,7 @@ import {
 	sweepDropzone,
 	type DropOutcome,
 	type DroppedFile,
-} from "./scan";
+} from "./scan.js";
 
 /**
  * The drop-folder scraper.

package/src/server/errors.spec.ts

@@ -1,5 +1,5 @@
 import { describe, expect, test } from 'bun:test';
-import { ApiError, isApiError, toErrorEnvelope } from './errors';
+import { ApiError, isApiError, toErrorEnvelope } from './errors.js';
 
 /** ISO-8601 timestamp check + strip, so the dynamic field doesn't break equality. */
 const withoutTimestamp = (env: ReturnType<typeof toErrorEnvelope>) => {

package/src/server/guard/argon2Binding.spec.ts

@@ -21,7 +21,7 @@ import {
   resolveArgon2idDeriver,
   setArgon2idDeriver,
 } from 'cwip/guard';
-import { argon2idDeriverFrom, nodeRsArgon2idBinding, type RawArgon2idBinding, registerNodeRsArgon2id } from './argon2Binding';
+import { argon2idDeriverFrom, nodeRsArgon2idBinding, type RawArgon2idBinding, registerNodeRsArgon2id } from './argon2Binding.js';
 
 /** Cheap parameters — this suite proves the WIRING, not the cost calibration. */
 const FAST = { m: 8_192, t: 1, p: 1 };

package/src/server/guard/argon2Binding.ts

@@ -29,7 +29,7 @@ import {
   CC_ARGON2ID_VERSION,
   setArgon2idDeriver,
 } from 'cwip/guard';
-import { AppError } from '../errors';
+import { AppError } from '../errors.js';
 
 /**
  * The shape of a raw, synchronous argon2id binding, in the REFERENCE

package/src/server/guard/argon2Kat.spec.ts

@@ -43,7 +43,7 @@ import { afterEach, describe, expect, it } from 'bun:test';
 import { deriveArgon2idKey, resolveArgon2idDeriver, setArgon2idDeriver } from 'cwip/guard';
 import { type Algorithm, hashRawSync, type Version } from '@node-rs/argon2';
 
-import { argon2idDeriverFrom, nodeRsArgon2idBinding, registerNodeRsArgon2id } from './argon2Binding';
+import { argon2idDeriverFrom, nodeRsArgon2idBinding, registerNodeRsArgon2id } from './argon2Binding.js';
 /*
  * `Algorithm` and `Version` are declared as AMBIENT CONST ENUMS in the binding's
  * `.d.ts`, and `verbatimModuleSyntax` refuses to read a member off one — the

package/src/server/guard/guard.spec.ts

@@ -12,9 +12,9 @@
 import { generateKeyPairSync } from 'node:crypto';
 import { afterEach, describe, expect, it } from 'bun:test';
 import { deriveArgon2idKey, hasArgon2idDeriver, setArgon2idDeriver } from 'cwip/guard';
-import { ARGON2ID_ALGORITHM, argon2idDeriverFrom, registerArgon2idBinding, type RawArgon2idBinding } from './argon2Binding';
-import { createMemoryAsyncRevocationStore } from './revocationStore';
-import { createSessionSigner } from './sessionSigner';
+import { ARGON2ID_ALGORITHM, argon2idDeriverFrom, registerArgon2idBinding, type RawArgon2idBinding } from './argon2Binding.js';
+import { createMemoryAsyncRevocationStore } from './revocationStore.js';
+import { createSessionSigner } from './sessionSigner.js';
 
 afterEach(() => {
   setArgon2idDeriver(null);

package/src/server/guard/index.ts

@@ -1,7 +1,7 @@
 // The GuardEngine server wiring (02 §4): the argon2id binding adapter that arms
 // cwip's KDF seam, and the Ed25519 session signer that mints and revokes.
-export * from './argon2Binding';
-export * from './passwordVerifier';
-export * from './verifier';
-export * from './revocationStore';
-export * from './sessionSigner';
+export * from './argon2Binding.js';
+export * from './passwordVerifier.js';
+export * from './verifier.js';
+export * from './revocationStore.js';
+export * from './sessionSigner.js';

package/src/server/guard/kdfWorker.spec.ts

@@ -28,9 +28,9 @@ import {
   type KdfWorkerResponse,
   kdfWorkerEntryUrl,
   serveKdfWorker,
-} from './kdfWorker';
-import { createInProcessPasswordVerifier, verifyPasswordEnvelope } from './passwordVerifier';
-import { registerNodeRsArgon2id } from './argon2Binding';
+} from './kdfWorker.js';
+import { createInProcessPasswordVerifier, verifyPasswordEnvelope } from './passwordVerifier.js';
+import { registerNodeRsArgon2id } from './argon2Binding.js';
 
 const password = (value: string): Uint8Array => new TextEncoder().encode(value);
 

package/src/server/guard/kdfWorker.ts

@@ -41,14 +41,14 @@
  * `createMarshalWorkerClient` documents in `core/wire/marshalWorker.ts`; it is
  * repeated here deliberately in the same shape so both read alike.
  */
-import { AppError } from '../errors';
+import { AppError } from '../errors.js';
 import {
   createInProcessPasswordVerifier,
   type PasswordVerifierPort,
   sealPasswordVerifier,
   verifyPasswordEnvelope,
-} from './passwordVerifier';
-import { registerNodeRsArgon2id } from './argon2Binding';
+} from './passwordVerifier.js';
+import { registerNodeRsArgon2id } from './argon2Binding.js';
 
 /** Raised when the worker thread dies, fails to start, or is disposed mid-flight. */
 export const GUARD_KDF_WORKER_FAILED = 'GUARD_KDF_WORKER_FAILED';

package/src/server/guard/kdfWorkerEntry.ts

@@ -11,6 +11,6 @@
  * is not "start the loop" is code running on a thread with a live argon2id
  * binding and a plaintext password in scope.
  */
-import { serveKdfWorker } from './kdfWorker';
+import { serveKdfWorker } from './kdfWorker.js';
 
 await serveKdfWorker();

package/src/server/guard/passwordVerifier.spec.ts

@@ -8,7 +8,7 @@
  */
 import { describe, expect, it } from 'bun:test';
 import type { Argon2idDeriver } from 'cwip/guard';
-import { sealPasswordVerifier, verifyPasswordEnvelope } from './passwordVerifier';
+import { sealPasswordVerifier, verifyPasswordEnvelope } from './passwordVerifier.js';
 
 // A deterministic, PASSWORD-SENSITIVE stand-in for argon2id (the real seam mixes
 // far more): the output must depend on the password, or a "wrong password" would

package/src/server/guard/passwordVerifier.ts

@@ -38,7 +38,7 @@ import {
   serializeSecretEnvelope,
   zeroize,
 } from 'cwip/guard';
-import { isAppError } from '../errors';
+import { isAppError } from '../errors.js';
 
 /**
  * The reserved AAD app namespace for password verifiers. `SecretEnvelope` forbids

package/src/server/guard/revocationStore.spec.ts

@@ -4,7 +4,7 @@ import {
   createMemoryAsyncRevocationStore,
   createMemoryRevocationStore,
   createSqliteRevocationStore,
-} from './revocationStore';
+} from './revocationStore.js';
 
 describe('sync memory revocation store', () => {
   it('records, answers, and sweeps by ms expiry', () => {
@@ -119,7 +119,7 @@ describe('async-backed revocation store (the cross-node bridge)', () => {
 
   it('a backing failure is reported, never thrown out of the request path', async () => {
     const ops: string[] = [];
-    const boom: import('./revocationStore').AsyncRevocationStore = {
+    const boom: import('./revocationStore.js').AsyncRevocationStore = {
       set: () => Promise.reject(new Error('set failed')),
       get: () => Promise.reject(new Error('get failed')),
       prune: () => Promise.reject(new Error('prune failed')),

package/src/server/guard/sessionSigner.ts

@@ -20,9 +20,9 @@
  */
 import { createPrivateKey, createPublicKey, generateKeyPairSync, type KeyObject, sign, verify } from 'node:crypto';
 import { type CCUserClaims, CCUserClaimsSchema } from 'cursedbelt-core/session/claims';
-import { AppError } from '../errors';
-import type { GuardVerification, GuardVerifier } from './verifier';
-import type { AsyncRevocationStore } from './revocationStore';
+import { AppError } from '../errors.js';
+import type { GuardVerification, GuardVerifier } from './verifier.js';
+import type { AsyncRevocationStore } from './revocationStore.js';
 
 export interface SessionSignerOptions {
   /**

package/src/server/incidents/checks.ts

@@ -18,8 +18,8 @@
  * a sweep reports its own failures so the console can show a detector that has
  * stopped working, rather than showing an empty incident list and looking calm.
  */
-import type { IncidentStore } from "./store";
-import type { IncidentReport, IncidentTransitions } from "./types";
+import type { IncidentStore } from "./store.js";
+import type { IncidentReport, IncidentTransitions } from "./types.js";
 
 export interface IncidentCheck {
 	/** Stable key. Owns every incident it has ever opened — see `reconcile`. */

package/src/server/incidents/incidents.spec.ts

@@ -14,13 +14,13 @@
  */
 import { Database } from "bun:sqlite";
 import { beforeEach, describe, expect, test } from "bun:test";
-import type { ChannelMessage, ChannelResult, IncidentChannel } from "./channels";
-import { createTextChannel } from "./channels";
-import { type IncidentCheck, runIncidentSweep } from "./checks";
-import { createIncidentNotifier, UNDELIVERED_RETRY_MS } from "./notifier";
-import { createIncidentReporter } from "./reporter";
-import { createIncidentStore, type IncidentStore } from "./store";
-import type { IncidentReport } from "./types";
+import type { ChannelMessage, ChannelResult, IncidentChannel } from "./channels.js";
+import { createTextChannel } from "./channels.js";
+import { type IncidentCheck, runIncidentSweep } from "./checks.js";
+import { createIncidentNotifier, UNDELIVERED_RETRY_MS } from "./notifier.js";
+import { createIncidentReporter } from "./reporter.js";
+import { createIncidentStore, type IncidentStore } from "./store.js";
+import type { IncidentReport } from "./types.js";
 
 const stuckIngest = (failed = 42): IncidentReport => ({
 	source: "station",