cursedbelt-server 4.12.0 → 4.13.1

package/src/server/middleware/errorEnvelope.ts

@@ -1,8 +1,8 @@
 import type { ErrorHandler } from 'hono';
 import { HTTPException } from 'hono/http-exception';
 import type { ContentfulStatusCode } from 'hono/utils/http-status';
-import type { CursedbeltEnv } from '../context';
-import { ApiError, isAppError, toErrorEnvelope } from '../errors';
+import type { CursedbeltEnv } from '../context.js';
+import { ApiError, isAppError, toErrorEnvelope } from '../errors.js';
 
 /**
  * Hono `onError` handler. Converts ANY thrown value into the ONE canonical rich

package/src/server/middleware/index.ts

@@ -1,10 +1,10 @@
 // The cross-cutting cursedbelt server middleware set.
-export { correlationId } from './correlationId';
-export { type CorsOpts, corsAllowlist, corsOptsFromEnv } from './corsAllowlist';
-export { errorEnvelope } from './errorEnvelope';
-export { crossOriginRefusal } from './localOrigin';
-export { clientIp, createRateLimiter, type RateLimitOpts } from './rateLimit';
-export { type RequestLoggerOpts, requestLogger } from './requestLogger';
+export { correlationId } from './correlationId.js';
+export { type CorsOpts, corsAllowlist, corsOptsFromEnv } from './corsAllowlist.js';
+export { errorEnvelope } from './errorEnvelope.js';
+export { crossOriginRefusal } from './localOrigin.js';
+export { clientIp, createRateLimiter, type RateLimitOpts } from './rateLimit.js';
+export { type RequestLoggerOpts, requestLogger } from './requestLogger.js';
 // The telemetry seam `requestLogger` writes through — re-exported here so a caller
 // that reaches `./middleware` for the logger can bind Analytics Engine in the same import.
 export {
@@ -13,16 +13,16 @@ export {
   type TelemetryEvent,
   type TelemetrySink,
   type TelemetrySinkOptions,
-} from '../metrics/telemetrySink';
+} from '../metrics/telemetrySink.js';
 export {
   type CspDirectives,
   type SecurityHeadersOpts,
   securityHeaders,
-} from './securityHeaders';
+} from './securityHeaders.js';
 export {
   toValidationIssues,
   VALIDATION_ERROR_CODE,
   type ValidationIssue,
   validationEnvelope,
-} from '../errors';
-export { type ZValidatorTarget, zValidator } from './zValidator';
+} from '../errors.js';
+export { type ZValidatorTarget, zValidator } from './zValidator.js';

package/src/server/middleware/localOrigin.spec.ts

@@ -3,7 +3,7 @@
 // block is not padding — it is the reason this can ship without a login.
 
 import { describe, expect, test } from 'bun:test';
-import { crossOriginRefusal } from './localOrigin';
+import { crossOriginRefusal } from './localOrigin.js';
 
 function req(headers: Record<string, string>, url = 'http://127.0.0.1:4747/api/overview'): Request {
 	return new Request(url, { headers });

package/src/server/middleware/rateLimit.spec.ts

@@ -1,6 +1,6 @@
 import { describe, expect, it } from 'bun:test';
 import { Hono } from 'hono';
-import { clientIp, createRateLimiter } from './rateLimit';
+import { clientIp, createRateLimiter } from './rateLimit.js';
 
 /**
  * `x-forwarded-for` is written by the caller. If the limiter keys on it without

package/src/server/middleware/rateLimit.ts

@@ -1,6 +1,6 @@
 import type { Context, MiddlewareHandler } from 'hono';
 import { getConnInfo } from 'hono/bun';
-import { ApiError, toErrorEnvelope } from '../errors';
+import { ApiError, toErrorEnvelope } from '../errors.js';
 
 /** How much of the forwarded-header chain, if any, this server may believe. */
 export interface ClientIpOptions {

package/src/server/middleware/requestLogger.ts

@@ -1,15 +1,15 @@
 import type { Database } from 'bun:sqlite';
 import type { MiddlewareHandler } from 'hono';
 import { HTTPException } from 'hono/http-exception';
-import type { CursedbeltEnv } from '../context';
-import { isApiError } from '../errors';
-import type { MetricsBuffer } from '../metrics/metricsBuffer';
-import { normalizeRoute } from '../metrics/normalizeRoute';
+import type { CursedbeltEnv } from '../context.js';
+import { isApiError } from '../errors.js';
+import type { MetricsBuffer } from '../metrics/metricsBuffer.js';
+import { normalizeRoute } from '../metrics/normalizeRoute.js';
 import {
   type AnalyticsEngineDataset,
   createTelemetrySink,
   type TelemetrySink,
-} from '../metrics/telemetrySink';
+} from '../metrics/telemetrySink.js';
 
 /**
  * Structured request/response logging. After each request it records one

package/src/server/middleware/zValidator.spec.ts

@@ -3,15 +3,15 @@ import { Hono } from 'hono';
 import { z } from 'zod';
 import { ChunkStore } from 'cursedbelt-core/ctgr/chunk-store';
 import { encodeRequest } from 'cursedbelt-core/ctgr';
-import type { CursedbeltEnv } from '../context';
-import { CTGR_ROUTE_PATTERN, unGETify } from '../ctgr';
+import type { CursedbeltEnv } from '../context.js';
+import { CTGR_ROUTE_PATTERN, unGETify } from '../ctgr.js';
 import {
   toValidationIssues,
   VALIDATION_ERROR_CODE,
   type ValidationIssue,
   validationEnvelope,
-} from '../errors';
-import { zValidator } from './zValidator';
+} from '../errors.js';
+import { zValidator } from './zValidator.js';
 
 const ORIGIN = 'http://localhost';
 const json = (path: string, body: unknown) =>

package/src/server/middleware/zValidator.ts

@@ -29,8 +29,8 @@
  */
 import type { Env, MiddlewareHandler } from 'hono';
 import type { ZodType, z } from 'zod';
-import type { CursedbeltEnv } from '../context';
-import { validationEnvelope } from '../errors';
+import type { CursedbeltEnv } from '../context.js';
+import { validationEnvelope } from '../errors.js';
 
 /** The request locations a schema can validate. Mirrors Hono's body/non-body split. */
 export type ZValidatorTarget = 'json' | 'form' | 'query' | 'param';

package/src/server/migration/runner.spec.ts

@@ -1,7 +1,7 @@
 import { Database } from 'bun:sqlite';
 import { describe, expect, test } from 'bun:test';
-import { addColumnIfMissing, applyRecommendedPragmas, columnExists, runMigrations } from './runner';
-import type { Migration } from './types';
+import { addColumnIfMissing, applyRecommendedPragmas, columnExists, runMigrations } from './runner.js';
+import type { Migration } from './types.js';
 
 describe('runMigrations', () => {
   test('applies pending migrations once, in order, and is idempotent', () => {

package/src/server/migration/runner.ts

@@ -1,6 +1,6 @@
 import type { Database } from 'bun:sqlite';
 import { applyCcPragmas } from 'cwip/sqlite';
-import type { Migration } from './types';
+import type { Migration } from './types.js';
 
 /**
  * The versioned SQLite migration runner — a tiny `_migrations`-sentinel runner, NOT

package/src/server/net/outboundGuard.spec.ts

@@ -1,5 +1,5 @@
 import { describe, expect, it } from 'bun:test';
-import { assertPublicOutboundUrl, assertResolvedPublicUrl, OUTBOUND_URL_BLOCKED } from './outboundGuard';
+import { assertPublicOutboundUrl, assertResolvedPublicUrl, OUTBOUND_URL_BLOCKED } from './outboundGuard.js';
 
 const code = (fn: () => unknown): string | undefined => {
   try {

package/src/server/net/outboundGuard.ts

@@ -33,7 +33,7 @@
  */
 import { isIP } from 'node:net';
 import { lookup } from 'node:dns/promises';
-import { AppError } from '../errors';
+import { AppError } from '../errors.js';
 
 export const OUTBOUND_URL_BLOCKED = 'OUTBOUND_URL_BLOCKED';
 

package/src/server/notifications/index.ts

@@ -36,22 +36,22 @@
  *    route that notifies somebody else; producing is server-side code calling
  *    `center.notify*`.
  */
-export { createNotificationHub } from "./hub";
+export { createNotificationHub } from "./hub.js";
 export type {
 	NotificationHub,
 	NotificationHubEvent,
 	NotificationHubListener,
 	NotificationHubOptions,
-} from "./hub";
-export { NOTIFICATION_MIGRATIONS, NOTIFICATIONS_TABLE } from "./migrations";
-export { mountNotificationRoutes } from "./routes";
-export type { NotificationRouteCenter, NotificationRoutesOptions } from "./routes";
-export { createNotificationService } from "./service";
+} from "./hub.js";
+export { NOTIFICATION_MIGRATIONS, NOTIFICATIONS_TABLE } from "./migrations.js";
+export { mountNotificationRoutes } from "./routes.js";
+export type { NotificationRouteCenter, NotificationRoutesOptions } from "./routes.js";
+export { createNotificationService } from "./service.js";
 export type {
 	CreateNotificationServiceOptions,
 	NotificationService,
 	NotificationServiceMountOptions,
-} from "./service";
+} from "./service.js";
 // Re-exported so a server consumer needs ONE import for the whole contract —
 // the same courtesy `server/sharing` extends over `cursedbelt-core/sharing`. The
 // engine remains cwip's; this is a door, not a copy.

package/src/server/notifications/migrations.ts

@@ -15,7 +15,7 @@
  */
 import type { Database } from "bun:sqlite";
 import { migrateNotificationsSchema, type NotificationDb } from "cwip/notifications";
-import type { Migration } from "../migration/types";
+import type { Migration } from "../migration/types.js";
 
 export const NOTIFICATIONS_TABLE = "notifications";
 

package/src/server/notifications/routes.ts

@@ -35,7 +35,7 @@
  */
 import type { Context, Hono } from "hono";
 import type { NotificationCenter, NotificationFilter } from "cwip/notifications";
-import type { NotificationHub } from "./hub";
+import type { NotificationHub } from "./hub.js";
 
 /** The slice of the center these routes use — `createNotificationCenter(...)`
  *  satisfies it, and so does any app-specific facade over one. */

package/src/server/notifications/service.spec.ts

@@ -10,9 +10,9 @@
 import { Database } from "bun:sqlite";
 import { afterEach, beforeEach, describe, expect, test } from "bun:test";
 import { Hono } from "hono";
-import { createNotificationHub } from "./hub";
-import { NOTIFICATION_MIGRATIONS, NOTIFICATIONS_TABLE } from "./migrations";
-import { createNotificationService, type NotificationService } from "./service";
+import { createNotificationHub } from "./hub.js";
+import { NOTIFICATION_MIGRATIONS, NOTIFICATIONS_TABLE } from "./migrations.js";
+import { createNotificationService, type NotificationService } from "./service.js";
 
 let db: Database;
 let service: NotificationService;

package/src/server/notifications/service.ts

@@ -21,8 +21,8 @@ import {
 	type NotificationStore,
 } from "cwip/notifications";
 import type { Context, Hono } from "hono";
-import { createNotificationHub, type NotificationHub } from "./hub";
-import { mountNotificationRoutes } from "./routes";
+import { createNotificationHub, type NotificationHub } from "./hub.js";
+import { mountNotificationRoutes } from "./routes.js";
 
 export interface CreateNotificationServiceOptions {
 	/** The app's own database — the table lands beside its rows. */

package/src/server/paths/appDataHome.spec.ts

@@ -1,7 +1,7 @@
 import { describe, expect, it } from "bun:test";
 import { homedir } from "node:os";
 import { join } from "node:path";
-import { APP_DATA_HOME_ENV, resolveAppDataHome, XDG_DATA_HOME_ENV } from "./appDataHome";
+import { APP_DATA_HOME_ENV, resolveAppDataHome, XDG_DATA_HOME_ENV } from "./appDataHome.js";
 
 /**
  * The published-library defect this file is the gate for: a resolver that knows

package/src/server/resume/index.ts

@@ -4,5 +4,5 @@ export {
   type ResumeRecord,
   type ResumeStore,
   type ResumeStoreOptions,
-} from './store';
-export { mountResumeRoutes, RESUME_KEY_PATTERN, type ResumeRoutesOptions } from './routes';
+} from './store.js';
+export { mountResumeRoutes, RESUME_KEY_PATTERN, type ResumeRoutesOptions } from './routes.js';

package/src/server/resume/resume.spec.ts

@@ -1,8 +1,8 @@
 import { describe, expect, test } from 'bun:test';
 import { Database } from 'bun:sqlite';
 import { Hono } from 'hono';
-import { mountResumeRoutes } from './routes';
-import { createSqliteResumeStore, MAX_LOCATION_LENGTH } from './store';
+import { mountResumeRoutes } from './routes.js';
+import { createSqliteResumeStore, MAX_LOCATION_LENGTH } from './store.js';
 
 const storeOf = () => createSqliteResumeStore(new Database(':memory:'));
 

package/src/server/resume/routes.ts

@@ -17,7 +17,7 @@
  * screen it names.
  */
 import type { Context, Hono } from 'hono';
-import { MAX_LOCATION_LENGTH, type ResumeStore } from './store';
+import { MAX_LOCATION_LENGTH, type ResumeStore } from './store.js';
 
 export interface ResumeRoutesOptions {
   store: ResumeStore;

package/src/server/retention/archive.spec.ts

@@ -9,14 +9,14 @@ import { afterEach, describe, expect, test } from "bun:test";
 import { chmodSync, existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import { resolveAppDataHome } from "../paths/appDataHome";
+import { resolveAppDataHome } from "../paths/appDataHome.js";
 import {
 	archiveStamp,
 	createJsonlArchive,
 	resolveArchiveHome,
 	verifyArchive,
 	type ArchiveHome,
-} from "./archive";
+} from "./archive.js";
 
 const temps: string[] = [];
 const tmp = (): string => {

package/src/server/retention/archive.ts

@@ -58,7 +58,7 @@ import {
 	writeSync,
 } from "node:fs";
 import { join } from "node:path";
-import { APP_DATA_HOME_ENV, resolveAppDataHome } from "../paths/appDataHome";
+import { APP_DATA_HOME_ENV, resolveAppDataHome } from "../paths/appDataHome.js";
 
 /** One sealed archive file. */
 export interface ArchiveSegment {

package/src/server/retention/fleet.ts

@@ -9,10 +9,10 @@
  * up as data that vanished earlier than the screen said it would — which is the
  * one failure mode that would make the owner stop trusting the control.
  */
-import type { EffectiveRetentionPolicy, RetentionOverride } from "./policy";
-import { RETENTION_CATEGORIES, resolveRetentionPolicy } from "./policy";
-import type { PublishedResource, RetentionPublication } from "./store";
-import { readRetentionOverrides, readRetentionRegistry, resolveRetentionHome } from "./store";
+import type { EffectiveRetentionPolicy, RetentionOverride } from "./policy.js";
+import { RETENTION_CATEGORIES, resolveRetentionPolicy } from "./policy.js";
+import type { PublishedResource, RetentionPublication } from "./store.js";
+import { readRetentionOverrides, readRetentionRegistry, resolveRetentionHome } from "./store.js";
 
 export interface RetentionFleetRow extends PublishedResource {
 	key: string;

package/src/server/retention/index.ts

@@ -40,7 +40,7 @@ export {
 	type ArchiveSegment,
 	type ArchiveSink,
 	type JsonlArchiveOptions,
-} from "./archive";
+} from "./archive.js";
 export {
 	ARCHIVING_RETENTION_CATEGORIES,
 	assertRetentionDeclaration,
@@ -65,7 +65,7 @@ export {
 	type RetentionFieldSource,
 	type RetentionOverride,
 	type RetentionUnit,
-} from "./policy";
+} from "./policy.js";
 export {
 	publishRetention,
 	readRetentionOverrides,
@@ -78,7 +78,7 @@ export {
 	type RetentionOverridesFile,
 	type RetentionPublication,
 	type RetentionSweepReport,
-} from "./store";
+} from "./store.js";
 export {
 	createArchivingSqliteTableTarget,
 	createFileDirTarget,
@@ -88,7 +88,7 @@ export {
 	type RetentionPreview,
 	type RetentionTarget,
 	type SqliteTableTargetOptions,
-} from "./target";
+} from "./target.js";
 export {
 	createRetentionSweeper,
 	DEFAULT_SWEEP_INTERVAL_MS,
@@ -97,5 +97,5 @@ export {
 	type ResourceOutcome,
 	type RetentionRunReport,
 	type RetentionSweeper,
-} from "./sweeper";
-export { buildRetentionFleetView, type RetentionFleetRow, type RetentionFleetView } from "./fleet";
+} from "./sweeper.js";
+export { buildRetentionFleetView, type RetentionFleetRow, type RetentionFleetView } from "./fleet.js";

package/src/server/retention/policy.spec.ts

@@ -11,7 +11,7 @@ import {
 	resolveRetentionPolicy,
 	retentionKey,
 	type RetentionDeclaration,
-} from "./policy";
+} from "./policy.js";
 
 const decl = (over: Partial<RetentionDeclaration> = {}): RetentionDeclaration => ({
 	app: "orch",

package/src/server/retention/store.spec.ts

@@ -2,8 +2,8 @@ import { afterEach, beforeEach, describe, expect, test } from "bun:test";
 import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import { resolveAppDataHome } from "../paths/appDataHome";
-import type { RetentionDeclaration } from "./policy";
+import { resolveAppDataHome } from "../paths/appDataHome.js";
+import type { RetentionDeclaration } from "./policy.js";
 import {
 	publishRetention,
 	readRetentionOverrides,
@@ -11,7 +11,7 @@ import {
 	resolveRetentionHome,
 	setRetentionHomeForTests,
 	writeRetentionOverride,
-} from "./store";
+} from "./store.js";
 
 const decl = (app: string, id: string): RetentionDeclaration => ({
 	app,

package/src/server/retention/store.ts

@@ -54,9 +54,9 @@ import {
 	writeFileSync,
 } from "node:fs";
 import { join } from "node:path";
-import { APP_DATA_HOME_ENV, resolveAppDataHome } from "../paths/appDataHome";
-import type { RetentionDeclaration, RetentionOverride } from "./policy";
-import { retentionKey } from "./policy";
+import { APP_DATA_HOME_ENV, resolveAppDataHome } from "../paths/appDataHome.js";
+import type { RetentionDeclaration, RetentionOverride } from "./policy.js";
+import { retentionKey } from "./policy.js";
 
 /** What one sweep of one resource did. Published so the UI can show it. */
 export interface RetentionSweepReport {

package/src/server/retention/sweeper.spec.ts

@@ -3,11 +3,11 @@ import { afterEach, beforeEach, describe, expect, test } from "bun:test";
 import { mkdtempSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import { buildRetentionFleetView } from "./fleet";
-import { DAY_MS, type RetentionDeclaration } from "./policy";
-import { readRetentionRegistry, setRetentionHomeForTests, writeRetentionOverride } from "./store";
-import { createRetentionSweeper } from "./sweeper";
-import { createSqliteTableTarget, type RetentionTarget } from "./target";
+import { buildRetentionFleetView } from "./fleet.js";
+import { DAY_MS, type RetentionDeclaration } from "./policy.js";
+import { readRetentionRegistry, setRetentionHomeForTests, writeRetentionOverride } from "./store.js";
+import { createRetentionSweeper } from "./sweeper.js";
+import { createSqliteTableTarget, type RetentionTarget } from "./target.js";
 
 const NOW = 1_800_000_000_000;
 

package/src/server/retention/sweeper.ts

@@ -19,11 +19,11 @@
  */
 import { statSync } from "node:fs";
 import { join } from "node:path";
-import type { EffectiveRetentionPolicy } from "./policy";
-import { assertRetentionDeclaration, resolveRetentionPolicy, retentionKey } from "./policy";
-import type { PublishedResource, RetentionSweepReport } from "./store";
-import { publishRetention, readRetentionOverrides, resolveRetentionHome } from "./store";
-import type { RetentionTarget } from "./target";
+import type { EffectiveRetentionPolicy } from "./policy.js";
+import { assertRetentionDeclaration, resolveRetentionPolicy, retentionKey } from "./policy.js";
+import type { PublishedResource, RetentionSweepReport } from "./store.js";
+import { publishRetention, readRetentionOverrides, resolveRetentionHome } from "./store.js";
+import type { RetentionTarget } from "./target.js";
 
 /** Default cadence. Diagnostic data is not urgent; four sweeps a day is plenty. */
 export const DEFAULT_SWEEP_INTERVAL_MS = 6 * 60 * 60 * 1000;

package/src/server/retention/target.spec.ts

@@ -11,13 +11,13 @@ import {
 } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import { DAY_MS, resolveRetentionPolicy, type RetentionDeclaration } from "./policy";
-import { createJsonlArchive, verifyArchive } from "./archive";
+import { DAY_MS, resolveRetentionPolicy, type RetentionDeclaration } from "./policy.js";
+import { createJsonlArchive, verifyArchive } from "./archive.js";
 import {
 	createArchivingSqliteTableTarget,
 	createFileDirTarget,
 	createSqliteTableTarget,
-} from "./target";
+} from "./target.js";
 
 const NOW = 1_800_000_000_000;
 const daysAgo = (n: number): number => NOW - n * DAY_MS;

package/src/server/retention/target.ts

@@ -17,11 +17,11 @@
 import type { Database } from "bun:sqlite";
 import { readdirSync, rmSync, statSync } from "node:fs";
 import { join } from "node:path";
-import type { ArchiveSink } from "./archive";
-import { DEFAULT_PENDING_ARCHIVE_BUDGET_BYTES } from "./archive";
-import type { EffectiveRetentionPolicy, RetentionDeclaration } from "./policy";
-import { categoryArchivesBeforeDelete, cutoffFor, retentionKey } from "./policy";
-import type { RetentionMeasurement, RetentionSweepReport } from "./store";
+import type { ArchiveSink } from "./archive.js";
+import { DEFAULT_PENDING_ARCHIVE_BUDGET_BYTES } from "./archive.js";
+import type { EffectiveRetentionPolicy, RetentionDeclaration } from "./policy.js";
+import { categoryArchivesBeforeDelete, cutoffFor, retentionKey } from "./policy.js";
+import type { RetentionMeasurement, RetentionSweepReport } from "./store.js";
 
 export interface RetentionPreview {
 	/** Items the age rule would remove. */

package/src/server/search/index.ts

@@ -2,11 +2,11 @@
 // Postgres. `createSaasHostServices` is the near side a deployment actually
 // calls; these are exported for a host that wires the tier by hand and for the
 // migration step that creates the schema.
-export { createPgSearchProvider, type PgSearchProviderOptions } from './pgSearchProvider';
+export { createPgSearchProvider, type PgSearchProviderOptions } from './pgSearchProvider.js';
 export {
   ensureSaasSearchSchema,
   PG_RANK_WEIGHTS,
   PG_SEARCH_CHUNKS_DDL,
   PG_SEARCH_DDL,
   PG_SEARCH_DOCS_DDL,
-} from './pgSearchSchema';
+} from './pgSearchSchema.js';

package/src/server/search/pgSearchProvider.pg.test.ts

@@ -24,8 +24,8 @@
 import { SQL } from 'bun';
 import { afterAll, beforeAll, beforeEach, describe, expect, it } from 'bun:test';
 import type { SaasConnection, SaasPool } from 'cwip/storage';
-import { createPgSearchProvider } from './pgSearchProvider';
-import { ensureSaasSearchSchema } from './pgSearchSchema';
+import { createPgSearchProvider } from './pgSearchProvider.js';
+import { ensureSaasSearchSchema } from './pgSearchSchema.js';
 
 const ADMIN_URL = process.env.CC_PG_URL;
 

package/src/server/search/pgSearchProvider.ts

@@ -87,8 +87,8 @@ import {
   type StatementExecutor,
   type WriteResult,
 } from 'cwip/storage';
-import { AppError } from '../errors';
-import { PG_RANK_WEIGHTS } from './pgSearchSchema';
+import { AppError } from '../errors.js';
+import { PG_RANK_WEIGHTS } from './pgSearchSchema.js';
 
 const DEFAULT_LIMIT = 20;
 const MAX_LIMIT = 200;

package/src/server/sharing/index.ts

@@ -6,23 +6,23 @@
  * `./store.ts`'s header for the five properties it guarantees and `./sql.ts` for
  * why the row filter is a SQL fragment rather than a list of ids.
  */
-export { SHARE_MIGRATIONS } from "./migrations";
+export { SHARE_MIGRATIONS } from "./migrations.js";
 export {
 	SHARE_EVENTS_TABLE,
 	SHARE_GRANTS_TABLE,
 	SHARE_GROUPS_TABLE,
 	SHARE_GROUP_MEMBERS_TABLE,
-} from "./migrations";
+} from "./migrations.js";
 export {
 	GROUP_SUBJECT_PREFIX,
 	mountShareRoutes,
 	parseSubjectParam,
 	subjectParam,
-} from "./router";
-export type { ShareRouterOptions, ShareRouterViewer, ShareRoutesPayload } from "./router";
-export { sharedResourceSql, sqlColumn, sqlLiteral } from "./sql";
-export type { SharedResourceSqlOptions } from "./sql";
-export { createShareStore, group, user } from "./store";
+} from "./router.js";
+export type { ShareRouterOptions, ShareRouterViewer, ShareRoutesPayload } from "./router.js";
+export { sharedResourceSql, sqlColumn, sqlLiteral } from "./sql.js";
+export type { SharedResourceSqlOptions } from "./sql.js";
+export { createShareStore, group, user } from "./store.js";
 export type {
 	GrantInput,
 	RevokeInput,
@@ -30,7 +30,7 @@ export type {
 	ShareStore,
 	ShareStoreOptions,
 	ShareTarget,
-} from "./store";
+} from "./store.js";
 // Re-exported so a server consumer needs ONE import for the whole contract; the
 // pure entry (`cursedbelt-core/sharing`) stays available for a browser or a test.
 export {

package/src/server/sharing/migrations.ts

@@ -31,7 +31,7 @@
  * deleting a group deletes its membership and appends one per removal.
  */
 import type { Database } from "bun:sqlite";
-import type { Migration } from "../migration/types";
+import type { Migration } from "../migration/types.js";
 
 export const SHARE_GRANTS_TABLE = "share_grants";
 export const SHARE_GROUPS_TABLE = "share_groups";

package/src/server/sharing/router.spec.ts

@@ -10,8 +10,8 @@
 import { Database } from "bun:sqlite";
 import { beforeEach, describe, expect, test } from "bun:test";
 import { Hono } from "hono";
-import { mountShareRoutes, parseSubjectParam, subjectParam } from "./router";
-import { createShareStore, user } from "./store";
+import { mountShareRoutes, parseSubjectParam, subjectParam } from "./router.js";
+import { createShareStore, user } from "./store.js";
 
 let db: Database;
 let shares: ReturnType<typeof createShareStore>;

package/src/server/sharing/router.ts

@@ -44,7 +44,7 @@
  */
 import type { Context, Hono } from 'hono';
 import type { ShareEvent, ShareGrant, ShareLevel } from 'cursedbelt-core/sharing/model';
-import type { ShareStore } from './store';
+import type { ShareStore } from './store.js';
 
 /** The `group:` prefix that lets a group subject travel in a path segment. Exported so a
  *  client and a route cannot disagree about it. */

package/src/server/sharing/sql.ts

@@ -26,7 +26,7 @@
  * tested with hostile input; a consumer never quotes anything itself.
  */
 import { levelsMeeting, normalizeSubjectId, type ShareLevel } from "cursedbelt-core/sharing/model";
-import { SHARE_GRANTS_TABLE, SHARE_GROUP_MEMBERS_TABLE } from "./migrations";
+import { SHARE_GRANTS_TABLE, SHARE_GROUP_MEMBERS_TABLE } from "./migrations.js";
 
 /**
  * Quote a string as a SQL literal.