Converts the entire server-side codebase from CommonJS (require/module.exports) to ES Modules (import/export), following ESM best practices throughout.

Core changes

• package.json: Added "type": "module"
• Removed all 'use strict' directives (implicit in ESM)
• All relative imports include explicit .js extensions (required by Node.js ESM resolver)

Export strategy

Files previously forced to bundle multiple exports into a single object now use proper named exports:

// Before
module.exports = { VIEWS_TYPE_UNIQUE, VIEWS_TYPE_TOTAL }

// After
export const VIEWS_TYPE_UNIQUE = 'UNIQUE'
export const VIEWS_TYPE_TOTAL = 'TOTAL'

• Named exports: constants, multi-function database modules (CRUD), utils with multiple related values
• Default exports: single-purpose files — aggregations, stages, models, single-function utils

Notable conversions

• __dirname → fileURLToPath(import.meta.url) + dirname()
• require('dotenv').config() → import 'dotenv/config'
• Lazy require() inside functions (src/ui/index.js) → dynamic import()
• require.resolve() → createRequire(import.meta.url).resolve()
• exports.handler = ... (functions/api.js) → export { handler } from '...'

CJS interop fixes

Some dependencies don't expose named ESM exports and needed workarounds:

• signale: default import + destructure for Signale
• date-fns-tz: import { utcToZonedTime } from 'date-fns-tz/esm' (uses the package's ESM entry point)
• micro / microrouter: default import + destructure for send, createError, router, del, etc.

UI scripts

src/ui/scripts/utils/rangeLabel.js was using a default import from constants/ranges which became named exports — updated to destructured named imports.

All test files converted to ESM accordingly.

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.