Fix API ESM module resolution (production 500s)

api/_shared/rate-limit.ts

@@ -1,6 +1,6 @@
 import type { IncomingHttpHeaders } from 'http';
 
-import type { ApiResponse } from './http-types';
+import type { ApiResponse } from './http-types.js';
 import recaptcha from './recaptcha.js';
 
 const { extractClientIp } = recaptcha;

api/booking/_lib/d1.ts

@@ -1,4 +1,4 @@
-import { getRuntimeEnv } from './config';
+import { getRuntimeEnv } from './config.js';
 
 // We're on Vercel, not on Cloudflare, so we hit D1's HTTP query API rather
 // than binding the database. The API accepts a single SQL statement plus an

api/booking/_lib/google-calendar.ts

@@ -1,4 +1,4 @@
-import { getRuntimeEnv } from './config';
+import { getRuntimeEnv } from './config.js';
 
 // Thin wrapper around the Google Calendar v3 REST API. We avoid pulling the
 // `googleapis` package (heavy, slow cold-start) and stay on direct `fetch`

api/booking/_lib/mailer.ts

@@ -5,7 +5,7 @@ import {
   MAIL_FROM,
   NOTIFICATION_EMAIL,
   getRuntimeEnv,
-} from './config';
+} from './config.js';
 
 // Render-side helpers are kept lean and inline: no template engine, no
 // per-locale dispatch table, just two functions per email kind (subject + html)

api/booking/_lib/slots.test.ts

@@ -4,7 +4,7 @@ import {
   buildAvailableSlots,
   isSlotValid,
   type BusyInterval,
-} from './slots';
+} from './slots.js';
 
 // All test inputs are anchored in UTC. The slots module renders them against
 // Europe/Zurich (UTC+1 in winter, UTC+2 in summer), so the expected wall-clock

api/booking/_lib/slots.ts

@@ -6,7 +6,7 @@ import {
   MEETING_DURATION_MIN,
   MIN_NOTICE_MS,
   SLOT_GRANULARITY_MIN,
-} from './config';
+} from './config.js';
 
 // All timestamps in this module are UTC. The "9-18 Europe/Zurich" window is
 // resolved per-day using Intl.DateTimeFormat in BOOKING_TIMEZONE because that

api/booking/_lib/tokens.ts

@@ -1,6 +1,6 @@
 import { createHmac, randomUUID, timingSafeEqual } from 'crypto';
 
-import { getRuntimeEnv } from './config';
+import { getRuntimeEnv } from './config.js';
 
 // Cancellation / reschedule links are stateless-ish: each booking gets a token
 // derived from `HMAC(secret, bookingId + ":" + purpose + ":" + exp + ":" + version)`.

api/booking/availability.ts

@@ -1,13 +1,13 @@
-import type { ApiRequest, ApiResponse } from '../_shared/http-types';
+import type { ApiRequest, ApiResponse } from '../_shared/http-types.js';
 import {
   applyRateLimitHeaders,
   checkRateLimit,
   getRateLimitIdentifier,
-} from '../_shared/rate-limit';
+} from '../_shared/rate-limit.js';
 
-import { getBusyIntervals } from './_lib/google-calendar';
-import { buildAvailableSlots } from './_lib/slots';
-import { parseAvailabilityRange } from './_lib/validators';
+import { getBusyIntervals } from './_lib/google-calendar.js';
+import { buildAvailableSlots } from './_lib/slots.js';
+import { parseAvailabilityRange } from './_lib/validators.js';
 
 const AVAILABILITY_RATE_LIMIT = {
   limit: 60,

api/booking/cancel.ts

@@ -1,15 +1,15 @@
-import type { ApiRequest, ApiResponse } from '../_shared/http-types';
+import type { ApiRequest, ApiResponse } from '../_shared/http-types.js';
 import {
   applyRateLimitHeaders,
   checkRateLimit,
   getRateLimitIdentifier,
-} from '../_shared/rate-limit';
+} from '../_shared/rate-limit.js';
 
-import { getRuntimeEnv } from './_lib/config';
-import { exec, queryFirst } from './_lib/d1';
-import { deleteEvent } from './_lib/google-calendar';
-import { sendBookingCancellation } from './_lib/mailer';
-import { verifyToken } from './_lib/tokens';
+import { getRuntimeEnv } from './_lib/config.js';
+import { exec, queryFirst } from './_lib/d1.js';
+import { deleteEvent } from './_lib/google-calendar.js';
+import { sendBookingCancellation } from './_lib/mailer.js';
+import { verifyToken } from './_lib/tokens.js';
 
 const CANCEL_RATE_LIMIT = {
   limit: 10,

api/booking/create.ts

@@ -1,22 +1,22 @@
-import type { ApiRequest, ApiResponse } from '../_shared/http-types';
+import type { ApiRequest, ApiResponse } from '../_shared/http-types.js';
 import {
   applyRateLimitHeaders,
   checkRateLimit,
   getRateLimitIdentifier,
-} from '../_shared/rate-limit';
+} from '../_shared/rate-limit.js';
 import recaptcha from '../_shared/recaptcha.js';
 
 import {
   BOOKING_TIMEZONE,
   MEETING_DURATION_MIN,
   getRuntimeEnv,
-} from './_lib/config';
-import { exec, isUniqueConstraintError, queryFirst } from './_lib/d1';
-import { createEvent, deleteEvent, getBusyIntervals } from './_lib/google-calendar';
-import { sendBookingConfirmation } from './_lib/mailer';
-import { isSlotValid } from './_lib/slots';
-import { generateToken, newBookingId } from './_lib/tokens';
-import { validateCreatePayload } from './_lib/validators';
+} from './_lib/config.js';
+import { exec, isUniqueConstraintError, queryFirst } from './_lib/d1.js';
+import { createEvent, deleteEvent, getBusyIntervals } from './_lib/google-calendar.js';
+import { sendBookingConfirmation } from './_lib/mailer.js';
+import { isSlotValid } from './_lib/slots.js';
+import { generateToken, newBookingId } from './_lib/tokens.js';
+import { validateCreatePayload } from './_lib/validators.js';
 
 const { extractClientIp, verifyRecaptcha } = recaptcha;
 

api/booking/lookup.ts

@@ -1,12 +1,12 @@
-import type { ApiRequest, ApiResponse } from '../_shared/http-types';
+import type { ApiRequest, ApiResponse } from '../_shared/http-types.js';
 import {
   applyRateLimitHeaders,
   checkRateLimit,
   getRateLimitIdentifier,
-} from '../_shared/rate-limit';
+} from '../_shared/rate-limit.js';
 
-import { queryFirst } from './_lib/d1';
-import { verifyToken } from './_lib/tokens';
+import { queryFirst } from './_lib/d1.js';
+import { verifyToken } from './_lib/tokens.js';
 
 const LOOKUP_RATE_LIMIT = {
   limit: 30,

api/booking/reschedule.ts

@@ -1,20 +1,20 @@
-import type { ApiRequest, ApiResponse } from '../_shared/http-types';
+import type { ApiRequest, ApiResponse } from '../_shared/http-types.js';
 import {
   applyRateLimitHeaders,
   checkRateLimit,
   getRateLimitIdentifier,
-} from '../_shared/rate-limit';
+} from '../_shared/rate-limit.js';
 
 import {
   BOOKING_TIMEZONE,
   MEETING_DURATION_MIN,
   getRuntimeEnv,
-} from './_lib/config';
-import { exec, isUniqueConstraintError, queryFirst } from './_lib/d1';
-import { getBusyIntervals, updateEventTime } from './_lib/google-calendar';
-import { sendBookingConfirmation } from './_lib/mailer';
-import { isSlotValid } from './_lib/slots';
-import { generateToken, verifyToken } from './_lib/tokens';
+} from './_lib/config.js';
+import { exec, isUniqueConstraintError, queryFirst } from './_lib/d1.js';
+import { getBusyIntervals, updateEventTime } from './_lib/google-calendar.js';
+import { sendBookingConfirmation } from './_lib/mailer.js';
+import { isSlotValid } from './_lib/slots.js';
+import { generateToken, verifyToken } from './_lib/tokens.js';
 
 const RESCHEDULE_RATE_LIMIT = {
   limit: 5,

api/newsletter.ts

@@ -1,11 +1,11 @@
 import { Resend } from 'resend';
-import type { ApiRequest, ApiResponse } from './_shared/http-types';
+import type { ApiRequest, ApiResponse } from './_shared/http-types.js';
 import newsletterMailer from './_shared/newsletter-mailer.js';
 import {
   applyRateLimitHeaders,
   checkRateLimit,
   getRateLimitIdentifier,
-} from './_shared/rate-limit';
+} from './_shared/rate-limit.js';
 import recaptcha from './_shared/recaptcha.js';
 
 const { newsletterApiErrors, sendNewsletterEmail, validateNewsletterPayload } = newsletterMailer;

api/send.ts

@@ -1,11 +1,11 @@
 import { Resend } from 'resend';
-import type { ApiRequest, ApiResponse } from './_shared/http-types';
+import type { ApiRequest, ApiResponse } from './_shared/http-types.js';
 import contactMailer from './_shared/contact-mailer.js';
 import {
   applyRateLimitHeaders,
   checkRateLimit,
   getRateLimitIdentifier,
-} from './_shared/rate-limit';
+} from './_shared/rate-limit.js';
 import recaptcha from './_shared/recaptcha.js';
 
 const { contactApiErrors, sendContactEmails, validateContactPayload } = contactMailer;