cursedbelt-server 4.12.0 → 4.13.0

package/src/server/jobs/runner.ts

@@ -1,9 +1,9 @@
 import type { Database } from 'bun:sqlite';
 import { defineQueue, defineWorker, type Queue, type Worker } from 'plainjob';
-import { ApiError } from '../errors';
-import { defaultJobLogger } from './logger';
-import { createPlainjobConnection } from './plainjobAdapter';
-import { withTimeout } from './timeout';
+import { ApiError } from '../errors.js';
+import { defaultJobLogger } from './logger.js';
+import { createPlainjobConnection } from './plainjobAdapter.js';
+import { withTimeout } from './timeout.js';
 import {
   type CreateJobRunnerOptions,
   DEFAULT_JOB_RETENTION,
@@ -13,7 +13,7 @@ import {
   type JobLogger,
   type JobRunner,
   type JobRunRecord,
-} from './types';
+} from './types.js';
 
 /**
  * Create the durable cron job runner — a thin facade over **plainjob** (MIT,

package/src/server/jobs/timeout.spec.ts

@@ -1,5 +1,5 @@
 import { describe, expect, test } from 'bun:test';
-import { JobTimeoutError, withTimeout } from './timeout';
+import { JobTimeoutError, withTimeout } from './timeout.js';
 
 const sleep = (ms: number) => new Promise<void>((r) => setTimeout(r, ms));
 

package/src/server/master-lock/accounts.spec.ts

@@ -20,8 +20,8 @@ import {
 	type MasterLockKdfParams,
 	deriveMasterLockVerifier,
 } from "cursedbelt-core/master-lock";
-import { FIRST_ACCOUNT_ID, MasterLock, readRecord } from "./masterLock";
-import { createMemoryMasterLockStore } from "./store";
+import { FIRST_ACCOUNT_ID, MasterLock, readRecord } from "./masterLock.js";
+import { createMemoryMasterLockStore } from "./store.js";
 
 /** `iter: 1` — the ROUND COUNT is pinned in `cursedbelt-core`'s `kdf.spec.ts`; 600k × N
  *  argon2 verifies here would be minutes of gate for nothing this file is testing. */

package/src/server/master-lock/accountsPage.spec.ts

@@ -22,10 +22,10 @@ import {
 	MASTER_LOCK_ACCOUNTS_SCRIPT,
 	MASTER_LOCK_ACCOUNTS_STYLE,
 	accountsPageHtml,
-} from "./accountsPage";
-import { createMasterLockGuard } from "./guard";
-import { MasterLock } from "./masterLock";
-import { createMemoryMasterLockStore } from "./store";
+} from "./accountsPage.js";
+import { createMasterLockGuard } from "./guard.js";
+import { MasterLock } from "./masterLock.js";
+import { createMemoryMasterLockStore } from "./store.js";
 
 const KDF: MasterLockKdfParams = {
 	v: 1,

package/src/server/master-lock/accountsPage.ts

@@ -33,7 +33,7 @@
  * only be watching one of them.
  */
 import { MASTER_LOCK_PATHS, MASTER_LOCK_PREFIX } from "cursedbelt-core/master-lock";
-import { MASTER_LOCK_DERIVE_SOURCE, type LockPageOptions } from "./lockPage";
+import { MASTER_LOCK_DERIVE_SOURCE, type LockPageOptions } from "./lockPage.js";
 
 /**
  * The page's own two assets.

package/src/server/master-lock/beaconNeverReachesTheWall.spec.ts

@@ -12,10 +12,10 @@ import {
 	foreignScriptSources,
 	htmlCarriesWebAnalytics,
 	scriptsRefusedByCsp,
-} from "../analytics";
-import { MASTER_LOCK_CSP, createMasterLockGuard } from "./guard";
-import { MasterLock } from "./masterLock";
-import { createMemoryMasterLockStore } from "./store";
+} from "../analytics/index.js";
+import { MASTER_LOCK_CSP, createMasterLockGuard } from "./guard.js";
+import { MasterLock } from "./masterLock.js";
+import { createMemoryMasterLockStore } from "./store.js";
 
 /**
  * 🔴 **The wall never carries the beacon, and the public shells always do.** Both halves, in

package/src/server/master-lock/guard.spec.ts

@@ -13,9 +13,9 @@ import {
 	deriveMasterLockVerifier,
 	newMasterLockKdfParams,
 } from "cursedbelt-core/master-lock";
-import { createMasterLockGuard } from "./guard";
-import { MasterLock } from "./masterLock";
-import { createMemoryMasterLockStore } from "./store";
+import { createMasterLockGuard } from "./guard.js";
+import { MasterLock } from "./masterLock.js";
+import { createMemoryMasterLockStore } from "./store.js";
 
 const KDF: MasterLockKdfParams = {
 	v: 1,

package/src/server/master-lock/guard.ts

@@ -22,9 +22,9 @@ import {
 	MASTER_LOCK_ACCOUNTS_SCRIPT,
 	MASTER_LOCK_ACCOUNTS_STYLE,
 	accountsPageHtml,
-} from "./accountsPage";
-import { LOCK_SCRIPT, LOCK_STYLE, type LockPageOptions, lockPageHtml } from "./lockPage";
-import type { MasterLock } from "./masterLock";
+} from "./accountsPage.js";
+import { LOCK_SCRIPT, LOCK_STYLE, type LockPageOptions, lockPageHtml } from "./lockPage.js";
+import type { MasterLock } from "./masterLock.js";
 
 export interface MasterLockGuardOptions extends LockPageOptions {
 	/**

package/src/server/master-lock/index.ts

@@ -26,26 +26,26 @@ export {
 	MASTER_LOCK_ACCOUNTS_STYLE,
 	MASTER_LOCK_MIN_PASSWORD_LENGTH,
 	accountsPageHtml,
-} from "./accountsPage";
+} from "./accountsPage.js";
 export {
 	MASTER_LOCK_CSP,
 	type MasterLockGuard,
 	type MasterLockGuardOptions,
 	createMasterLockGuard,
-} from "./guard";
+} from "./guard.js";
 export {
 	LOCK_SCRIPT,
 	LOCK_STYLE,
 	MASTER_LOCK_DERIVE_SOURCE,
 	type LockPageOptions,
 	lockPageHtml,
-} from "./lockPage";
+} from "./lockPage.js";
 export {
 	MASTER_LOCK_PRINCIPAL_KEY_PREFIX,
 	MasterLockDirectory,
 	type MasterLockDirectoryOptions,
 	masterLockPrincipalKey,
-} from "./principals";
+} from "./principals.js";
 export {
 	FIRST_ACCOUNT_ID,
 	MasterLock,
@@ -57,17 +57,17 @@ export {
 	type MasterLockStore,
 	type MasterLockUnlockResult,
 	readRecord,
-} from "./masterLock";
+} from "./masterLock.js";
 export {
 	DEFAULT_SEED_IDLE_MS,
 	generateStagePassword,
 	type MintMasterLockSeedOptions,
 	mintMasterLockSeed,
 	serializeMasterLockSeed,
-} from "./seed";
+} from "./seed.js";
 export {
 	MASTER_LOCK_SETTING_KEY,
 	MASTER_LOCK_STATE_KEY,
 	createKvMasterLockStore,
 	createMemoryMasterLockStore,
-} from "./store";
+} from "./store.js";

package/src/server/master-lock/lockPage.spec.ts

@@ -13,8 +13,8 @@
  */
 import { describe, expect, test } from "bun:test";
 import { MASTER_LOCK_PATHS, type MasterLockKdfParams, deriveMasterLockVerifier } from "cursedbelt-core/master-lock";
-import { MASTER_LOCK_ACCOUNTS_SCRIPT } from "./accountsPage";
-import { LOCK_SCRIPT, LOCK_STYLE, MASTER_LOCK_DERIVE_SOURCE, lockPageHtml } from "./lockPage";
+import { MASTER_LOCK_ACCOUNTS_SCRIPT } from "./accountsPage.js";
+import { LOCK_SCRIPT, LOCK_STYLE, MASTER_LOCK_DERIVE_SOURCE, lockPageHtml } from "./lockPage.js";
 
 const KDF: MasterLockKdfParams = {
 	v: 1,

package/src/server/master-lock/masterLock.spec.ts

@@ -13,8 +13,8 @@ import {
 	deriveMasterLockVerifier,
 	newMasterLockKdfParams,
 } from "cursedbelt-core/master-lock";
-import { MasterLock, readRecord } from "./masterLock";
-import { createMemoryMasterLockStore } from "./store";
+import { MasterLock, readRecord } from "./masterLock.js";
+import { createMemoryMasterLockStore } from "./store.js";
 
 const KDF: MasterLockKdfParams = {
 	v: 1,

package/src/server/master-lock/masterLock.ts

@@ -48,6 +48,7 @@
  * one who has been guessing.
  */
 import { createHash } from "node:crypto";
+import { constantTimeEqual } from "cwip/constant-time";
 import {
 	type MasterLockAccountSummary,
 	type MasterLockKdfParams,
@@ -1064,13 +1065,3 @@ function presentedTokens(req: Request): string[] {
 	}
 	return out;
 }
-
-function constantTimeEqual(a: string, b: string): boolean {
-	const x = Buffer.from(a);
-	const y = Buffer.from(b);
-	// A length difference is already a non-match, and `timingSafeEqual` throws on one.
-	if (x.length !== y.length) return false;
-	let diff = 0;
-	for (let i = 0; i < x.length; i += 1) diff |= x[i] ^ y[i];
-	return diff === 0;
-}

package/src/server/master-lock/principals.spec.ts

@@ -22,10 +22,10 @@ import {
 	deriveMasterLockVerifier,
 	newMasterLockKdfParams,
 } from "cursedbelt-core/master-lock";
-import { createMasterLockGuard } from "./guard";
-import { MasterLock, type MasterLockStore } from "./masterLock";
-import { MASTER_LOCK_PRINCIPAL_KEY_PREFIX, MasterLockDirectory, masterLockPrincipalKey } from "./principals";
-import { createMemoryMasterLockStore } from "./store";
+import { createMasterLockGuard } from "./guard.js";
+import { MasterLock, type MasterLockStore } from "./masterLock.js";
+import { MASTER_LOCK_PRINCIPAL_KEY_PREFIX, MasterLockDirectory, masterLockPrincipalKey } from "./principals.js";
+import { createMemoryMasterLockStore } from "./store.js";
 
 const KDF: MasterLockKdfParams = {
 	v: 1,

package/src/server/master-lock/principals.ts

@@ -46,7 +46,7 @@
  * record is stored under, which is the only thing it ever really was.
  */
 import { createHash } from "node:crypto";
-import { MasterLock, type MasterLockStore, readRecord } from "./masterLock";
+import { MasterLock, type MasterLockStore, readRecord } from "./masterLock.js";
 
 /** Namespace for every per-person record, so one glance at the table says what they are. */
 export const MASTER_LOCK_PRINCIPAL_KEY_PREFIX = "master_lock:principal:";

package/src/server/master-lock/seed.spec.ts

@@ -1,8 +1,8 @@
 import { describe, expect, it } from "bun:test";
 import { deriveMasterLockVerifier } from "cursedbelt-core/master-lock/kdf";
-import { MasterLock, readRecord } from "./masterLock";
-import { createMemoryMasterLockStore } from "./store";
-import { generateStagePassword, mintMasterLockSeed, serializeMasterLockSeed } from "./seed";
+import { MasterLock, readRecord } from "./masterLock.js";
+import { createMemoryMasterLockStore } from "./store.js";
+import { generateStagePassword, mintMasterLockSeed, serializeMasterLockSeed } from "./seed.js";
 
 describe("mintMasterLockSeed", () => {
 	// The whole point: a seed minted here must UNLOCK, through the real engine,

package/src/server/master-lock/seed.ts

@@ -28,7 +28,7 @@ import {
 	deriveMasterLockVerifier,
 	newMasterLockKdfParams,
 } from "cursedbelt-core/master-lock/kdf";
-import { FIRST_ACCOUNT_ID, type MasterLockRecord } from "./masterLock";
+import { FIRST_ACCOUNT_ID, type MasterLockRecord } from "./masterLock.js";
 
 /**
  * The idle window a freshly minted lock starts with.

package/src/server/master-lock/store.ts

@@ -6,7 +6,7 @@
  * `app_settings`, a `Map` in a test. Asking for a whole table would be asking each adopter
  * to write a migration for three fields.
  */
-import type { MasterLockStore } from "./masterLock";
+import type { MasterLockStore } from "./masterLock.js";
 
 /** The default key, so two apps' rows look the same when somebody goes looking. */
 export const MASTER_LOCK_SETTING_KEY = "master_lock:record";

package/src/server/media-bun/image.spec.ts

@@ -1,6 +1,6 @@
 import { describe, expect, test } from 'bun:test';
 import type { ImagePipelineSpec } from 'cursedbelt-core/media';
-import { renderImage } from './image';
+import { renderImage } from './image.js';
 
 // sharp is an OPTIONAL peer — skip this whole suite cleanly when it isn't installed.
 let sharpFactory: typeof import('sharp').default | null = null;

package/src/server/media-bun/index.ts

@@ -14,7 +14,7 @@ export {
   type VideoCodecPlan,
   videoCodecPlan,
 } from 'cursedbelt-core/media/ffmpeg';
-export { renderImage } from './image';
+export { renderImage } from './image.js';
 // Streaming pipeline: faststart remux, HLS adaptive-bitrate ladder, scrub sprite + WebVTT,
 // poster, codec-aware probe — pure builders/parsers (testable without ffmpeg).
 export {
@@ -39,7 +39,7 @@ export {
   type SpritePlan,
   spriteArgs,
   type VideoProbe,
-} from './streaming';
+} from './streaming.js';
 export {
   extractFrameJpeg,
   extractThumbnail,
@@ -49,4 +49,4 @@ export {
   probeVideoStream,
   runFfmpegProgress,
   trimVideo,
-} from './video';
+} from './video.js';

package/src/server/media-bun/streaming.spec.ts

@@ -9,7 +9,7 @@ import {
   planSprite,
   resolveLadder,
   type VideoProbe,
-} from './streaming';
+} from './streaming.js';
 
 const probe = (over: Partial<VideoProbe> = {}): VideoProbe => ({
   duration: 100,

package/src/server/media-bun/video.spec.ts

@@ -3,7 +3,7 @@ import { mkdtempSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import type { VideoProgressEvent } from 'cursedbelt-core/media';
-import { extractThumbnail, isFfmpegAvailable, probeMedia, trimVideo } from './video';
+import { extractThumbnail, isFfmpegAvailable, probeMedia, trimVideo } from './video.js';
 
 // ffmpeg/ffprobe are required for these; skip cleanly if absent (CI without them).
 const haveFfmpeg = await isFfmpegAvailable();

package/src/server/media-bun/video.ts

@@ -23,7 +23,7 @@ import {
   parseProgressMicros,
   parseStreamProbe,
   type VideoProbe,
-} from './streaming';
+} from './streaming.js';
 
 const FFMPEG = process.env.FFMPEG_PATH || 'ffmpeg';
 const FFPROBE = process.env.FFPROBE_PATH || 'ffprobe';

package/src/server/metrics/normalizeRoute.spec.ts

@@ -1,6 +1,6 @@
 import { describe, expect, test } from 'bun:test';
 import { Hono } from 'hono';
-import { normalizeRoute } from './normalizeRoute';
+import { normalizeRoute } from './normalizeRoute.js';
 
 // Probe through a real Hono app so `c.req.routePath` is the genuine matched pattern.
 async function labelFor(register: (app: Hono) => void, request: Request): Promise<string> {

package/src/server/metrics/telemetrySink.spec.ts

@@ -1,14 +1,14 @@
 import { Database } from 'bun:sqlite';
 import { beforeEach, describe, expect, it } from 'bun:test';
 import { Hono } from 'hono';
-import { type RequestLoggerOpts, requestLogger } from '../middleware/requestLogger';
-import { createMetricsBuffer } from './metricsBuffer';
+import { type RequestLoggerOpts, requestLogger } from '../middleware/requestLogger.js';
+import { createMetricsBuffer } from './metricsBuffer.js';
 import {
   type AnalyticsEngineDataset,
   createTelemetrySink,
   type TelemetrySink,
   toDataPoint,
-} from './telemetrySink';
+} from './telemetrySink.js';
 
 /**
  * The two claims the seam makes, and nothing else:

package/src/server/metrics/telemetrySink.ts

@@ -1,5 +1,5 @@
 import type { Database } from 'bun:sqlite';
-import { createMetricsBuffer, type MetricRow, type MetricsBuffer } from './metricsBuffer';
+import { createMetricsBuffer, type MetricRow, type MetricsBuffer } from './metricsBuffer.js';
 
 /**
  * ONE seam for "this app served a request", with two backends and no third.

package/src/server/middleware/bodyLimit.spec.ts

@@ -7,7 +7,7 @@ import {
   readBoundedJson,
   readBoundedText,
   refuseOversizedBody,
-} from './bodyLimit';
+} from './bodyLimit.js';
 
 /**
  * 🔴 A guard that is the LAST line of defense ships with the test of its failure path,

package/src/server/middleware/correlationId.ts

@@ -1,5 +1,5 @@
 import type { MiddlewareHandler } from 'hono';
-import type { CursedbeltEnv } from '../context';
+import type { CursedbeltEnv } from '../context.js';
 
 const HEADER = 'x-correlation-id';
 // Accept a client-supplied id only if it is a sane, header-safe token (no CRLF /

package/src/server/middleware/corsAllowlist.spec.ts

@@ -1,6 +1,6 @@
 import { describe, expect, test } from 'bun:test';
-import { createApp } from '../app';
-import { corsAllowlist, corsOptsFromEnv } from './corsAllowlist';
+import { createApp } from '../app.js';
+import { corsAllowlist, corsOptsFromEnv } from './corsAllowlist.js';
 
 const SITE = 'example.com';
 const APEX = 'https://example.com';

package/src/server/middleware/errorEnvelope.ts

@@ -1,8 +1,8 @@
 import type { ErrorHandler } from 'hono';
 import { HTTPException } from 'hono/http-exception';
 import type { ContentfulStatusCode } from 'hono/utils/http-status';
-import type { CursedbeltEnv } from '../context';
-import { ApiError, isAppError, toErrorEnvelope } from '../errors';
+import type { CursedbeltEnv } from '../context.js';
+import { ApiError, isAppError, toErrorEnvelope } from '../errors.js';
 
 /**
  * Hono `onError` handler. Converts ANY thrown value into the ONE canonical rich

package/src/server/middleware/index.ts

@@ -1,10 +1,10 @@
 // The cross-cutting cursedbelt server middleware set.
-export { correlationId } from './correlationId';
-export { type CorsOpts, corsAllowlist, corsOptsFromEnv } from './corsAllowlist';
-export { errorEnvelope } from './errorEnvelope';
-export { crossOriginRefusal } from './localOrigin';
-export { clientIp, createRateLimiter, type RateLimitOpts } from './rateLimit';
-export { type RequestLoggerOpts, requestLogger } from './requestLogger';
+export { correlationId } from './correlationId.js';
+export { type CorsOpts, corsAllowlist, corsOptsFromEnv } from './corsAllowlist.js';
+export { errorEnvelope } from './errorEnvelope.js';
+export { crossOriginRefusal } from './localOrigin.js';
+export { clientIp, createRateLimiter, type RateLimitOpts } from './rateLimit.js';
+export { type RequestLoggerOpts, requestLogger } from './requestLogger.js';
 // The telemetry seam `requestLogger` writes through — re-exported here so a caller
 // that reaches `./middleware` for the logger can bind Analytics Engine in the same import.
 export {
@@ -13,16 +13,16 @@ export {
   type TelemetryEvent,
   type TelemetrySink,
   type TelemetrySinkOptions,
-} from '../metrics/telemetrySink';
+} from '../metrics/telemetrySink.js';
 export {
   type CspDirectives,
   type SecurityHeadersOpts,
   securityHeaders,
-} from './securityHeaders';
+} from './securityHeaders.js';
 export {
   toValidationIssues,
   VALIDATION_ERROR_CODE,
   type ValidationIssue,
   validationEnvelope,
-} from '../errors';
-export { type ZValidatorTarget, zValidator } from './zValidator';
+} from '../errors.js';
+export { type ZValidatorTarget, zValidator } from './zValidator.js';

package/src/server/middleware/localOrigin.spec.ts

@@ -3,7 +3,7 @@
 // block is not padding — it is the reason this can ship without a login.
 
 import { describe, expect, test } from 'bun:test';
-import { crossOriginRefusal } from './localOrigin';
+import { crossOriginRefusal } from './localOrigin.js';
 
 function req(headers: Record<string, string>, url = 'http://127.0.0.1:4747/api/overview'): Request {
 	return new Request(url, { headers });

package/src/server/middleware/rateLimit.spec.ts

@@ -1,6 +1,6 @@
 import { describe, expect, it } from 'bun:test';
 import { Hono } from 'hono';
-import { clientIp, createRateLimiter } from './rateLimit';
+import { clientIp, createRateLimiter } from './rateLimit.js';
 
 /**
  * `x-forwarded-for` is written by the caller. If the limiter keys on it without

package/src/server/middleware/rateLimit.ts

@@ -1,6 +1,6 @@
 import type { Context, MiddlewareHandler } from 'hono';
 import { getConnInfo } from 'hono/bun';
-import { ApiError, toErrorEnvelope } from '../errors';
+import { ApiError, toErrorEnvelope } from '../errors.js';
 
 /** How much of the forwarded-header chain, if any, this server may believe. */
 export interface ClientIpOptions {

package/src/server/middleware/requestLogger.ts

@@ -1,15 +1,15 @@
 import type { Database } from 'bun:sqlite';
 import type { MiddlewareHandler } from 'hono';
 import { HTTPException } from 'hono/http-exception';
-import type { CursedbeltEnv } from '../context';
-import { isApiError } from '../errors';
-import type { MetricsBuffer } from '../metrics/metricsBuffer';
-import { normalizeRoute } from '../metrics/normalizeRoute';
+import type { CursedbeltEnv } from '../context.js';
+import { isApiError } from '../errors.js';
+import type { MetricsBuffer } from '../metrics/metricsBuffer.js';
+import { normalizeRoute } from '../metrics/normalizeRoute.js';
 import {
   type AnalyticsEngineDataset,
   createTelemetrySink,
   type TelemetrySink,
-} from '../metrics/telemetrySink';
+} from '../metrics/telemetrySink.js';
 
 /**
  * Structured request/response logging. After each request it records one

package/src/server/middleware/zValidator.spec.ts

@@ -3,15 +3,15 @@ import { Hono } from 'hono';
 import { z } from 'zod';
 import { ChunkStore } from 'cursedbelt-core/ctgr/chunk-store';
 import { encodeRequest } from 'cursedbelt-core/ctgr';
-import type { CursedbeltEnv } from '../context';
-import { CTGR_ROUTE_PATTERN, unGETify } from '../ctgr';
+import type { CursedbeltEnv } from '../context.js';
+import { CTGR_ROUTE_PATTERN, unGETify } from '../ctgr.js';
 import {
   toValidationIssues,
   VALIDATION_ERROR_CODE,
   type ValidationIssue,
   validationEnvelope,
-} from '../errors';
-import { zValidator } from './zValidator';
+} from '../errors.js';
+import { zValidator } from './zValidator.js';
 
 const ORIGIN = 'http://localhost';
 const json = (path: string, body: unknown) =>

package/src/server/middleware/zValidator.ts

@@ -29,8 +29,8 @@
  */
 import type { Env, MiddlewareHandler } from 'hono';
 import type { ZodType, z } from 'zod';
-import type { CursedbeltEnv } from '../context';
-import { validationEnvelope } from '../errors';
+import type { CursedbeltEnv } from '../context.js';
+import { validationEnvelope } from '../errors.js';
 
 /** The request locations a schema can validate. Mirrors Hono's body/non-body split. */
 export type ZValidatorTarget = 'json' | 'form' | 'query' | 'param';

package/src/server/migration/runner.spec.ts

@@ -1,7 +1,7 @@
 import { Database } from 'bun:sqlite';
 import { describe, expect, test } from 'bun:test';
-import { addColumnIfMissing, applyRecommendedPragmas, columnExists, runMigrations } from './runner';
-import type { Migration } from './types';
+import { addColumnIfMissing, applyRecommendedPragmas, columnExists, runMigrations } from './runner.js';
+import type { Migration } from './types.js';
 
 describe('runMigrations', () => {
   test('applies pending migrations once, in order, and is idempotent', () => {

package/src/server/migration/runner.ts

@@ -1,6 +1,6 @@
 import type { Database } from 'bun:sqlite';
 import { applyCcPragmas } from 'cwip/sqlite';
-import type { Migration } from './types';
+import type { Migration } from './types.js';
 
 /**
  * The versioned SQLite migration runner — a tiny `_migrations`-sentinel runner, NOT

package/src/server/net/outboundGuard.spec.ts

@@ -1,5 +1,5 @@
 import { describe, expect, it } from 'bun:test';
-import { assertPublicOutboundUrl, assertResolvedPublicUrl, OUTBOUND_URL_BLOCKED } from './outboundGuard';
+import { assertPublicOutboundUrl, assertResolvedPublicUrl, OUTBOUND_URL_BLOCKED } from './outboundGuard.js';
 
 const code = (fn: () => unknown): string | undefined => {
   try {

package/src/server/net/outboundGuard.ts

@@ -33,7 +33,7 @@
  */
 import { isIP } from 'node:net';
 import { lookup } from 'node:dns/promises';
-import { AppError } from '../errors';
+import { AppError } from '../errors.js';
 
 export const OUTBOUND_URL_BLOCKED = 'OUTBOUND_URL_BLOCKED';
 

package/src/server/notifications/index.ts

@@ -36,22 +36,22 @@
  *    route that notifies somebody else; producing is server-side code calling
  *    `center.notify*`.
  */
-export { createNotificationHub } from "./hub";
+export { createNotificationHub } from "./hub.js";
 export type {
 	NotificationHub,
 	NotificationHubEvent,
 	NotificationHubListener,
 	NotificationHubOptions,
-} from "./hub";
-export { NOTIFICATION_MIGRATIONS, NOTIFICATIONS_TABLE } from "./migrations";
-export { mountNotificationRoutes } from "./routes";
-export type { NotificationRouteCenter, NotificationRoutesOptions } from "./routes";
-export { createNotificationService } from "./service";
+} from "./hub.js";
+export { NOTIFICATION_MIGRATIONS, NOTIFICATIONS_TABLE } from "./migrations.js";
+export { mountNotificationRoutes } from "./routes.js";
+export type { NotificationRouteCenter, NotificationRoutesOptions } from "./routes.js";
+export { createNotificationService } from "./service.js";
 export type {
 	CreateNotificationServiceOptions,
 	NotificationService,
 	NotificationServiceMountOptions,
-} from "./service";
+} from "./service.js";
 // Re-exported so a server consumer needs ONE import for the whole contract —
 // the same courtesy `server/sharing` extends over `cursedbelt-core/sharing`. The
 // engine remains cwip's; this is a door, not a copy.

package/src/server/notifications/migrations.ts

@@ -15,7 +15,7 @@
  */
 import type { Database } from "bun:sqlite";
 import { migrateNotificationsSchema, type NotificationDb } from "cwip/notifications";
-import type { Migration } from "../migration/types";
+import type { Migration } from "../migration/types.js";
 
 export const NOTIFICATIONS_TABLE = "notifications";
 

package/src/server/notifications/routes.ts

@@ -35,7 +35,7 @@
  */
 import type { Context, Hono } from "hono";
 import type { NotificationCenter, NotificationFilter } from "cwip/notifications";
-import type { NotificationHub } from "./hub";
+import type { NotificationHub } from "./hub.js";
 
 /** The slice of the center these routes use — `createNotificationCenter(...)`
  *  satisfies it, and so does any app-specific facade over one. */