cursedbelt-server 4.12.0 → 4.13.0

package/src/server/d1/scheduling.ts

@@ -34,7 +34,7 @@
  * a minute, which would change behaviour in production and nowhere else.
  */
 
-import type { D1LikeDatabase } from './types';
+import type { D1LikeDatabase } from './types.js';
 
 /** The Workers primitive a piece of scheduled work maps onto. */
 export type WorkersPrimitive = 'cron-trigger' | 'queue' | 'durable-object-alarm' | 'unportable';

package/src/server/d1/values.ts

@@ -12,7 +12,7 @@
  * recalled: the probe wrote each type into a `CREATE TABLE t (v)` column and read it back.
  */
 
-import { D1BindError, type D1LikeBindable, type D1LikeMeta, type D1LikeValue } from './types';
+import { D1BindError, type D1LikeBindable, type D1LikeMeta, type D1LikeValue } from './types.js';
 
 /**
  * The largest integer a JS number holds exactly. A `bigint` beyond this cannot survive the

package/src/server/db/kysely.spec.ts

@@ -1,6 +1,6 @@
 import { Database } from 'bun:sqlite';
 import { afterEach, beforeEach, describe, expect, test } from 'bun:test';
-import { createKysely, type PlumbingDb } from './kysely';
+import { createKysely, type PlumbingDb } from './kysely.js';
 
 const AUTH_SESSIONS_DDL = `CREATE TABLE auth_sessions (
   session_id TEXT PRIMARY KEY, user_id TEXT NOT NULL, created_at TEXT NOT NULL,

package/src/server/db/kysely.ts

@@ -1,7 +1,7 @@
 import type { Database } from 'bun:sqlite';
 import { Kysely } from 'kysely';
 import { BunSqliteDialect } from 'kysely-bun-sqlite';
-import type { PlumbingSchema } from './plumbingTypes';
+import type { PlumbingSchema } from './plumbingTypes.js';
 
 /**
  * A Kysely query builder typed to the {@link PlumbingSchema} plumbing tables, on the

package/src/server/dropzone/index.ts

@@ -21,10 +21,10 @@ export {
 	type DroppedFile,
 	type ScanOptions,
 	type SweepReport,
-} from "./scan";
+} from "./scan.js";
 export {
 	askBinaryServerAboutDuplicate,
 	hashFile,
 	type DuplicateVerdict,
 	type DuplicateQuestion,
-} from "./duplicates";
+} from "./duplicates.js";

package/src/server/dropzone/scan.spec.ts

@@ -10,7 +10,7 @@ import {
 	sweepDropzone,
 	type DropOutcome,
 	type DroppedFile,
-} from "./scan";
+} from "./scan.js";
 
 /**
  * The drop-folder scraper.

package/src/server/errors.spec.ts

@@ -1,5 +1,5 @@
 import { describe, expect, test } from 'bun:test';
-import { ApiError, isApiError, toErrorEnvelope } from './errors';
+import { ApiError, isApiError, toErrorEnvelope } from './errors.js';
 
 /** ISO-8601 timestamp check + strip, so the dynamic field doesn't break equality. */
 const withoutTimestamp = (env: ReturnType<typeof toErrorEnvelope>) => {

package/src/server/guard/argon2Binding.spec.ts

@@ -21,7 +21,7 @@ import {
   resolveArgon2idDeriver,
   setArgon2idDeriver,
 } from 'cwip/guard';
-import { argon2idDeriverFrom, nodeRsArgon2idBinding, type RawArgon2idBinding, registerNodeRsArgon2id } from './argon2Binding';
+import { argon2idDeriverFrom, nodeRsArgon2idBinding, type RawArgon2idBinding, registerNodeRsArgon2id } from './argon2Binding.js';
 
 /** Cheap parameters — this suite proves the WIRING, not the cost calibration. */
 const FAST = { m: 8_192, t: 1, p: 1 };

package/src/server/guard/argon2Binding.ts

@@ -29,7 +29,7 @@ import {
   CC_ARGON2ID_VERSION,
   setArgon2idDeriver,
 } from 'cwip/guard';
-import { AppError } from '../errors';
+import { AppError } from '../errors.js';
 
 /**
  * The shape of a raw, synchronous argon2id binding, in the REFERENCE

package/src/server/guard/argon2Kat.spec.ts

@@ -43,7 +43,7 @@ import { afterEach, describe, expect, it } from 'bun:test';
 import { deriveArgon2idKey, resolveArgon2idDeriver, setArgon2idDeriver } from 'cwip/guard';
 import { type Algorithm, hashRawSync, type Version } from '@node-rs/argon2';
 
-import { argon2idDeriverFrom, nodeRsArgon2idBinding, registerNodeRsArgon2id } from './argon2Binding';
+import { argon2idDeriverFrom, nodeRsArgon2idBinding, registerNodeRsArgon2id } from './argon2Binding.js';
 /*
  * `Algorithm` and `Version` are declared as AMBIENT CONST ENUMS in the binding's
  * `.d.ts`, and `verbatimModuleSyntax` refuses to read a member off one — the

package/src/server/guard/guard.spec.ts

@@ -12,9 +12,9 @@
 import { generateKeyPairSync } from 'node:crypto';
 import { afterEach, describe, expect, it } from 'bun:test';
 import { deriveArgon2idKey, hasArgon2idDeriver, setArgon2idDeriver } from 'cwip/guard';
-import { ARGON2ID_ALGORITHM, argon2idDeriverFrom, registerArgon2idBinding, type RawArgon2idBinding } from './argon2Binding';
-import { createMemoryAsyncRevocationStore } from './revocationStore';
-import { createSessionSigner } from './sessionSigner';
+import { ARGON2ID_ALGORITHM, argon2idDeriverFrom, registerArgon2idBinding, type RawArgon2idBinding } from './argon2Binding.js';
+import { createMemoryAsyncRevocationStore } from './revocationStore.js';
+import { createSessionSigner } from './sessionSigner.js';
 
 afterEach(() => {
   setArgon2idDeriver(null);

package/src/server/guard/index.ts

@@ -1,7 +1,7 @@
 // The GuardEngine server wiring (02 §4): the argon2id binding adapter that arms
 // cwip's KDF seam, and the Ed25519 session signer that mints and revokes.
-export * from './argon2Binding';
-export * from './passwordVerifier';
-export * from './verifier';
-export * from './revocationStore';
-export * from './sessionSigner';
+export * from './argon2Binding.js';
+export * from './passwordVerifier.js';
+export * from './verifier.js';
+export * from './revocationStore.js';
+export * from './sessionSigner.js';

package/src/server/guard/kdfWorker.spec.ts

@@ -28,9 +28,9 @@ import {
   type KdfWorkerResponse,
   kdfWorkerEntryUrl,
   serveKdfWorker,
-} from './kdfWorker';
-import { createInProcessPasswordVerifier, verifyPasswordEnvelope } from './passwordVerifier';
-import { registerNodeRsArgon2id } from './argon2Binding';
+} from './kdfWorker.js';
+import { createInProcessPasswordVerifier, verifyPasswordEnvelope } from './passwordVerifier.js';
+import { registerNodeRsArgon2id } from './argon2Binding.js';
 
 const password = (value: string): Uint8Array => new TextEncoder().encode(value);
 

package/src/server/guard/kdfWorker.ts

@@ -41,14 +41,14 @@
  * `createMarshalWorkerClient` documents in `core/wire/marshalWorker.ts`; it is
  * repeated here deliberately in the same shape so both read alike.
  */
-import { AppError } from '../errors';
+import { AppError } from '../errors.js';
 import {
   createInProcessPasswordVerifier,
   type PasswordVerifierPort,
   sealPasswordVerifier,
   verifyPasswordEnvelope,
-} from './passwordVerifier';
-import { registerNodeRsArgon2id } from './argon2Binding';
+} from './passwordVerifier.js';
+import { registerNodeRsArgon2id } from './argon2Binding.js';
 
 /** Raised when the worker thread dies, fails to start, or is disposed mid-flight. */
 export const GUARD_KDF_WORKER_FAILED = 'GUARD_KDF_WORKER_FAILED';

package/src/server/guard/kdfWorkerEntry.ts

@@ -11,6 +11,6 @@
  * is not "start the loop" is code running on a thread with a live argon2id
  * binding and a plaintext password in scope.
  */
-import { serveKdfWorker } from './kdfWorker';
+import { serveKdfWorker } from './kdfWorker.js';
 
 await serveKdfWorker();

package/src/server/guard/passwordVerifier.spec.ts

@@ -8,7 +8,7 @@
  */
 import { describe, expect, it } from 'bun:test';
 import type { Argon2idDeriver } from 'cwip/guard';
-import { sealPasswordVerifier, verifyPasswordEnvelope } from './passwordVerifier';
+import { sealPasswordVerifier, verifyPasswordEnvelope } from './passwordVerifier.js';
 
 // A deterministic, PASSWORD-SENSITIVE stand-in for argon2id (the real seam mixes
 // far more): the output must depend on the password, or a "wrong password" would

package/src/server/guard/passwordVerifier.ts

@@ -38,7 +38,7 @@ import {
   serializeSecretEnvelope,
   zeroize,
 } from 'cwip/guard';
-import { isAppError } from '../errors';
+import { isAppError } from '../errors.js';
 
 /**
  * The reserved AAD app namespace for password verifiers. `SecretEnvelope` forbids

package/src/server/guard/revocationStore.spec.ts

@@ -4,7 +4,7 @@ import {
   createMemoryAsyncRevocationStore,
   createMemoryRevocationStore,
   createSqliteRevocationStore,
-} from './revocationStore';
+} from './revocationStore.js';
 
 describe('sync memory revocation store', () => {
   it('records, answers, and sweeps by ms expiry', () => {
@@ -119,7 +119,7 @@ describe('async-backed revocation store (the cross-node bridge)', () => {
 
   it('a backing failure is reported, never thrown out of the request path', async () => {
     const ops: string[] = [];
-    const boom: import('./revocationStore').AsyncRevocationStore = {
+    const boom: import('./revocationStore.js').AsyncRevocationStore = {
       set: () => Promise.reject(new Error('set failed')),
       get: () => Promise.reject(new Error('get failed')),
       prune: () => Promise.reject(new Error('prune failed')),

package/src/server/guard/sessionSigner.ts

@@ -20,9 +20,9 @@
  */
 import { createPrivateKey, createPublicKey, generateKeyPairSync, type KeyObject, sign, verify } from 'node:crypto';
 import { type CCUserClaims, CCUserClaimsSchema } from 'cursedbelt-core/session/claims';
-import { AppError } from '../errors';
-import type { GuardVerification, GuardVerifier } from './verifier';
-import type { AsyncRevocationStore } from './revocationStore';
+import { AppError } from '../errors.js';
+import type { GuardVerification, GuardVerifier } from './verifier.js';
+import type { AsyncRevocationStore } from './revocationStore.js';
 
 export interface SessionSignerOptions {
   /**

package/src/server/incidents/checks.ts

@@ -18,8 +18,8 @@
  * a sweep reports its own failures so the console can show a detector that has
  * stopped working, rather than showing an empty incident list and looking calm.
  */
-import type { IncidentStore } from "./store";
-import type { IncidentReport, IncidentTransitions } from "./types";
+import type { IncidentStore } from "./store.js";
+import type { IncidentReport, IncidentTransitions } from "./types.js";
 
 export interface IncidentCheck {
 	/** Stable key. Owns every incident it has ever opened — see `reconcile`. */

package/src/server/incidents/incidents.spec.ts

@@ -14,13 +14,13 @@
  */
 import { Database } from "bun:sqlite";
 import { beforeEach, describe, expect, test } from "bun:test";
-import type { ChannelMessage, ChannelResult, IncidentChannel } from "./channels";
-import { createTextChannel } from "./channels";
-import { type IncidentCheck, runIncidentSweep } from "./checks";
-import { createIncidentNotifier, UNDELIVERED_RETRY_MS } from "./notifier";
-import { createIncidentReporter } from "./reporter";
-import { createIncidentStore, type IncidentStore } from "./store";
-import type { IncidentReport } from "./types";
+import type { ChannelMessage, ChannelResult, IncidentChannel } from "./channels.js";
+import { createTextChannel } from "./channels.js";
+import { type IncidentCheck, runIncidentSweep } from "./checks.js";
+import { createIncidentNotifier, UNDELIVERED_RETRY_MS } from "./notifier.js";
+import { createIncidentReporter } from "./reporter.js";
+import { createIncidentStore, type IncidentStore } from "./store.js";
+import type { IncidentReport } from "./types.js";
 
 const stuckIngest = (failed = 42): IncidentReport => ({
 	source: "station",

package/src/server/incidents/index.ts

@@ -53,14 +53,14 @@ export {
 	type IncidentChannel,
 	type SendEmail,
 	type TextChannelOptions,
-} from "./channels";
+} from "./channels.js";
 export {
 	type CheckOutcome,
 	type IncidentCheck,
 	runIncidentSweep,
 	type SweepResult,
-} from "./checks";
-export { INCIDENT_MIGRATIONS, INCIDENTS_TABLE } from "./migrations";
+} from "./checks.js";
+export { INCIDENT_MIGRATIONS, INCIDENTS_TABLE } from "./migrations.js";
 export {
 	type AnnounceResult,
 	composeOpened,
@@ -68,23 +68,23 @@ export {
 	type CreateNotifierOptions,
 	createIncidentNotifier,
 	type IncidentNotifier,
-} from "./notifier";
+} from "./notifier.js";
 export {
 	createIncidentReporter,
 	type IncidentReporter,
 	type IncidentReporterOptions,
-} from "./reporter";
+} from "./reporter.js";
 export {
 	type IncidentRoutesOptions,
 	mountIncidentMachineRoutes,
 	mountIncidentOwnerRoutes,
-} from "./routes";
+} from "./routes.js";
 export {
 	assertNoContent,
 	createIncidentStore,
 	type IncidentStore,
 	type ReconcileOptions,
-} from "./store";
+} from "./store.js";
 export {
 	fingerprint,
 	type Incident,
@@ -93,4 +93,4 @@ export {
 	type IncidentSeverity,
 	type IncidentState,
 	type IncidentTransitions,
-} from "./types";
+} from "./types.js";

package/src/server/incidents/migrations.ts

@@ -1,5 +1,5 @@
 import type { Database } from "bun:sqlite";
-import type { Migration } from "../migration/types";
+import type { Migration } from "../migration/types.js";
 
 /** The one table this primitive owns. */
 export const INCIDENTS_TABLE = "incidents";

package/src/server/incidents/notifier.ts

@@ -28,9 +28,9 @@
  * the store (`assertNoContent`). A text message is the least private surface
  * this fleet has and several of its apps are private by construction.
  */
-import type { ChannelMessage, ChannelResult, IncidentChannel } from "./channels";
-import type { IncidentStore } from "./store";
-import type { Incident, IncidentTransitions } from "./types";
+import type { ChannelMessage, ChannelResult, IncidentChannel } from "./channels.js";
+import type { IncidentStore } from "./store.js";
+import type { Incident, IncidentTransitions } from "./types.js";
 
 export interface IncidentNotifier {
 	/** Send for every transition in `t`. Returns one result per message sent. */

package/src/server/incidents/reporter.ts

@@ -28,7 +28,7 @@
  * than one with no alerting. Every failure here is logged and swallowed, and the
  * console notices the silence by other means (the service's own health probe).
  */
-import type { IncidentReport } from "./types";
+import type { IncidentReport } from "./types.js";
 
 export interface IncidentReporterOptions {
 	/** e.g. `http://127.0.0.1:3024/api/station/incidents/report`. */

package/src/server/incidents/routes.ts

@@ -35,11 +35,11 @@
  * correct.
  */
 import type { Hono } from "hono";
-import type { IncidentChannel } from "./channels";
-import type { IncidentNotifier } from "./notifier";
-import { assertNoContent, type IncidentStore } from "./store";
-import type { IncidentReport, IncidentSeverity } from "./types";
-import type { SweepResult } from "./checks";
+import type { IncidentChannel } from "./channels.js";
+import type { IncidentNotifier } from "./notifier.js";
+import { assertNoContent, type IncidentStore } from "./store.js";
+import type { IncidentReport, IncidentSeverity } from "./types.js";
+import type { SweepResult } from "./checks.js";
 
 const noStore = { "cache-control": "no-store" } as const;
 

package/src/server/incidents/store.ts

@@ -28,15 +28,15 @@
  * of all across the restart a deploy of the console itself performs.
  */
 import type { Database } from "bun:sqlite";
-import { runMigrations } from "../migration/runner";
-import { INCIDENT_MIGRATIONS, INCIDENTS_TABLE } from "./migrations";
+import { runMigrations } from "../migration/runner.js";
+import { INCIDENT_MIGRATIONS, INCIDENTS_TABLE } from "./migrations.js";
 import {
 	fingerprint,
 	type Incident,
 	type IncidentFact,
 	type IncidentReport,
 	type IncidentTransitions,
-} from "./types";
+} from "./types.js";
 
 interface Row {
 	fingerprint: string;

package/src/server/index.ts

@@ -19,7 +19,7 @@ export {
   type UploadedFile,
 } from 'cursedbelt-core/ctgr';
 // ── HTTP app ────────────────────────────────────────────────────────────────
-export { type CreateAppOpts, createApp, type ServeBunOpts, serveBun } from './app';
+export { type CreateAppOpts, createApp, type ServeBunOpts, serveBun } from './app.js';
 // ── Auth toolkit (task 26): jose JWT, cookies, CSRF, getOnly, session store, ──
 //    login throttle, argon2id passwords, TOTP, vault crypto, the composed middleware.
 export {
@@ -65,11 +65,11 @@ export {
   verifyRecoveryCode,
   verifyToken,
   verifyTotpCode,
-} from './auth';
-export type { CursedbeltEnv, CursedbeltVariables } from './context';
-export { buildRoutes, CTGR_ROUTE_PATTERN, getCtgrDecoded, unGETify } from './ctgr';
+} from './auth/index.js';
+export type { CursedbeltEnv, CursedbeltVariables } from './context.js';
+export { buildRoutes, CTGR_ROUTE_PATTERN, getCtgrDecoded, unGETify } from './ctgr.js';
 // ── Kysely-typed plumbing tables ────────────────────────────────────────────
-export { createKysely, type PlumbingDb } from './db/kysely';
+export { createKysely, type PlumbingDb } from './db/kysely.js';
 export type {
   AppConfigRow,
   AuthSessionRow,
@@ -81,7 +81,7 @@ export type {
   PlumbingSchema,
   RequestMetricRow,
   SystemSampleRow,
-} from './db/plumbingTypes';
+} from './db/plumbingTypes.js';
 // ── Errors ──────────────────────────────────────────────────────────────────
 export {
   ApiError,
@@ -93,7 +93,7 @@ export {
   VALIDATION_ERROR_CODE,
   type ValidationIssue,
   validationEnvelope,
-} from './errors';
+} from './errors.js';
 // ── Jobs & scheduler (task 29): plainjob-backed cron runner + restart-aware ───
 //    pollers + the due-row fire queue. App job *definitions* stay business.
 export {
@@ -114,7 +114,7 @@ export {
   JobTimeoutError,
   type PollingJob,
   type PollingJobOpts,
-} from './jobs';
+} from './jobs/index.js';
 // ── Media adapter (task 19): image rendering via sharp (lazy/optional peer) + ──
 //    video trim / probe / thumbnail via native ffmpeg. Also at the dedicated
 //    media-bun entry below; sharp is imported lazily inside renderImage,
@@ -135,15 +135,15 @@ export {
   trimVideo,
   type VideoCodecPlan,
   videoCodecPlan,
-} from './media-bun';
+} from './media-bun/index.js';
 // ── Metrics ───────────────────────────────────────────────────────────────────
 export {
   createMetricsBuffer,
   type MetricRow,
   type MetricsBuffer,
   type MetricsBufferOptions,
-} from './metrics/metricsBuffer';
-export { normalizeRoute } from './metrics/normalizeRoute';
+} from './metrics/metricsBuffer.js';
+export { normalizeRoute } from './metrics/normalizeRoute.js';
 export {
   type AnalyticsEngineDataset,
   createTelemetrySink,
@@ -152,26 +152,26 @@ export {
   type TelemetrySink,
   type TelemetrySinkOptions,
   toDataPoint,
-} from './metrics/telemetrySink';
+} from './metrics/telemetrySink.js';
 // ── Middleware ────────────────────────────────────────────────────────────────
-export { correlationId } from './middleware/correlationId';
-export { type CorsOpts, corsAllowlist, corsOptsFromEnv } from './middleware/corsAllowlist';
-export { errorEnvelope } from './middleware/errorEnvelope';
-export { crossOriginRefusal } from './middleware/localOrigin';
-export { clientIp, createRateLimiter, type RateLimitOpts } from './middleware/rateLimit';
-export { type RequestLoggerOpts, requestLogger } from './middleware/requestLogger';
+export { correlationId } from './middleware/correlationId.js';
+export { type CorsOpts, corsAllowlist, corsOptsFromEnv } from './middleware/corsAllowlist.js';
+export { errorEnvelope } from './middleware/errorEnvelope.js';
+export { crossOriginRefusal } from './middleware/localOrigin.js';
+export { clientIp, createRateLimiter, type RateLimitOpts } from './middleware/rateLimit.js';
+export { type RequestLoggerOpts, requestLogger } from './middleware/requestLogger.js';
 export {
   type CspDirectives,
   type SecurityHeadersOpts,
   securityHeaders,
-} from './middleware/securityHeaders';
+} from './middleware/securityHeaders.js';
 // ── zod validation toolkit ────────────────────────────────────────────────────
 //    (the `validationEnvelope`/`toValidationIssues`/`ValidationIssue` builders now
 //     live with the canonical envelope in `./errors`, re-exported above.)
-export { type ZValidatorTarget, zValidator } from './middleware/zValidator';
+export { type ZValidatorTarget, zValidator } from './middleware/zValidator.js';
 // ── Migration runner ──────────────────────────────────────────────────────────
-export { addColumnIfMissing, applyRecommendedPragmas, columnExists, runMigrations } from './migration/runner';
-export type { Migration } from './migration/types';
+export { addColumnIfMissing, applyRecommendedPragmas, columnExists, runMigrations } from './migration/runner.js';
+export type { Migration } from './migration/types.js';
 // ── Audit log: the SQLite-backed AuditSink cursedshell's service dispatch ─────
 //    writes to (see `cwip/audit` for the storage-agnostic contract + the
 //    zero-config in-memory default).
@@ -181,7 +181,7 @@ export {
   auditStateAtVersion,
   auditStep,
   createSqliteAuditSink,
-} from './audit';
+} from './audit/index.js';
 // ── SQLite toolkit extras (task 30): FTS5 ranked search + DDL generator, the ───
 //    read-only DB viewer middleware, the VACUUM-INTO backup service, DB health probes.
 export {
@@ -232,7 +232,7 @@ export {
   type TableExportFormat,
   type TableStat,
   UnknownTableError,
-} from './sqlite';
+} from './sqlite/index.js';
 // ── WebSocket hub (task 28): Bun-native upgrade, channel registry, heartbeat, ──
 //    presence-as-a-view, room helpers, and the push-only event-bus subset (ru).
 export {
@@ -254,9 +254,9 @@ export {
   type WsHub,
   type WsHubOpts,
   type WsMessage,
-} from './ws';
+} from './ws/index.js';
 
 // The app-data root resolver. Exported at the root (2026-09-15, task 148) because
 // `cursedbelt-cc`'s localHost needs it and it answers a question about the HOST, not
 // about any one subsystem — so no subpath barrel is its natural home.
-export { resolveAppDataHome } from './paths/appDataHome';
+export { resolveAppDataHome } from './paths/appDataHome.js';

package/src/server/jobs/fireQueue.spec.ts

@@ -1,6 +1,6 @@
 import { Database } from 'bun:sqlite';
 import { afterEach, beforeEach, describe, expect, test } from 'bun:test';
-import { createFireQueue } from './fireQueue';
+import { createFireQueue } from './fireQueue.js';
 
 const JOB_STATE_DDL = `CREATE TABLE job_state (name TEXT PRIMARY KEY, last_run_at TEXT, meta TEXT)`;
 const sleep = (ms: number) => new Promise<void>((r) => setTimeout(r, ms));

package/src/server/jobs/fireQueue.ts

@@ -1,6 +1,6 @@
-import { defaultJobLogger } from './logger';
-import { createPollingJob } from './polling';
-import { DEFAULT_FIRE_INTERVAL_MS, type FireQueue, type FireQueueOpts } from './types';
+import { defaultJobLogger } from './logger.js';
+import { createPollingJob } from './polling.js';
+import { DEFAULT_FIRE_INTERVAL_MS, type FireQueue, type FireQueueOpts } from './types.js';
 
 /**
  * The "select due rows → deliver each → mark sent" pattern, as a {@link PollingJob}.

package/src/server/jobs/index.ts

@@ -3,12 +3,12 @@
 // restart-aware pollers, the due-row fire queue, run auditing); app job
 // *definitions* stay business and consume these primitives.
 
-export { createFireQueue } from './fireQueue';
-export { defaultJobLogger } from './logger';
-export { createPlainjobConnection } from './plainjobAdapter';
-export { createPollingJob } from './polling';
-export { createJobRunner } from './runner';
-export { JobTimeoutError } from './timeout';
+export { createFireQueue } from './fireQueue.js';
+export { defaultJobLogger } from './logger.js';
+export { createPlainjobConnection } from './plainjobAdapter.js';
+export { createPollingJob } from './polling.js';
+export { createJobRunner } from './runner.js';
+export { JobTimeoutError } from './timeout.js';
 export {
   type CreateJobRunnerOptions,
   DEFAULT_FIRE_INTERVAL_MS,
@@ -24,4 +24,4 @@ export {
   type JobRunRecord,
   type PollingJob,
   type PollingJobOpts,
-} from './types';
+} from './types.js';

package/src/server/jobs/logger.ts

@@ -1,4 +1,4 @@
-import type { JobLogger } from './types';
+import type { JobLogger } from './types.js';
 
 /**
  * The default job logger: warn/info/error go to the console, `debug` is a no-op.

package/src/server/jobs/plainjobAdapter.spec.ts

@@ -1,6 +1,6 @@
 import { Database } from 'bun:sqlite';
 import { afterEach, beforeEach, describe, expect, test } from 'bun:test';
-import { createPlainjobConnection } from './plainjobAdapter';
+import { createPlainjobConnection } from './plainjobAdapter.js';
 
 describe('createPlainjobConnection', () => {
   let db: Database;

package/src/server/jobs/polling.spec.ts

@@ -1,6 +1,6 @@
 import { Database } from 'bun:sqlite';
 import { afterEach, beforeEach, describe, expect, test } from 'bun:test';
-import { createPollingJob } from './polling';
+import { createPollingJob } from './polling.js';
 
 const JOB_STATE_DDL = `CREATE TABLE job_state (
   name TEXT PRIMARY KEY,

package/src/server/jobs/polling.ts

@@ -1,5 +1,5 @@
-import { defaultJobLogger } from './logger';
-import type { JobContext, PollingJob, PollingJobOpts } from './types';
+import { defaultJobLogger } from './logger.js';
+import type { JobContext, PollingJob, PollingJobOpts } from './types.js';
 
 /**
  * A periodic, restart-aware poller — the engine behind ca's `setInterval`

package/src/server/jobs/runner.spec.ts

@@ -1,8 +1,8 @@
 import { Database } from 'bun:sqlite';
 import { afterEach, beforeEach, describe, expect, test } from 'bun:test';
-import { ApiError } from '../errors';
-import { createJobRunner } from './runner';
-import { JobTimeoutError } from './timeout';
+import { ApiError } from '../errors.js';
+import { createJobRunner } from './runner.js';
+import { JobTimeoutError } from './timeout.js';
 
 const JOB_RUNS_DDL = `CREATE TABLE job_runs (
   id TEXT PRIMARY KEY,