@everystack/cli 0.4.74 → 0.4.76

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `@everystack/cli` are documented here.
 
 Format based on [Keep a Changelog](https://keepachangelog.com/).
 
+## [0.4.76] - 2026-09-07
+
+### Fixed
+
+- ship @aws-sdk/client-rds as a real dependency (db:snapshot)
+
+## [0.4.75] - 2026-09-06
+
+### Fixed
+
+- db:adopt proof-compile renders inside the project, not $TMPDIR
+
 ## [0.4.74] - 2026-09-06
 
 ### BREAKING CHANGES

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@everystack/cli",
-  "version": "0.4.74",
+  "version": "0.4.76",
   "description": "CLI and OTA updates for Expo apps on everystack",
   "license": "AGPL-3.0-only",
   "author": "Scalable Technology, Inc. <licensing@scalable.technology>",
@@ -117,6 +117,7 @@
     "@aws-sdk/client-cloudfront-keyvaluestore": "3.1053.0",
     "@aws-sdk/client-cloudwatch-logs": "3.1053.0",
     "@aws-sdk/client-lambda": "3.1053.0",
+    "@aws-sdk/client-rds": "3.1053.0",
     "@aws-sdk/client-s3": "3.1053.0",
     "@aws-sdk/client-ssm": "3.1053.0",
     "@aws-sdk/lib-storage": "3.1053.0",
@@ -132,7 +133,6 @@
   "peerDependencies": {
     "@everystack/server": ">=0.4.0",
     "@aws-sdk/client-cloudwatch": "3.1053.0",
-    "@aws-sdk/client-rds": "3.1053.0",
     "@aws-sdk/s3-request-presigner": "3.1053.0",
     "drizzle-orm": "0.41.0",
     "expo-updates": "55.0.21",
@@ -150,9 +150,6 @@
     "@aws-sdk/client-cloudwatch": {
       "optional": true
     },
-    "@aws-sdk/client-rds": {
-      "optional": true
-    },
     "expo-updates": {
       "optional": true
     },
@@ -168,7 +165,6 @@
   },
   "devDependencies": {
     "@aws-sdk/client-cloudwatch": "3.1053.0",
-    "@aws-sdk/client-rds": "3.1053.0",
     "@aws-sdk/s3-request-presigner": "3.1053.0",
     "@types/jest": "29.5.14",
     "@types/node": "22.19.18",

package/src/cli/commands/db-adopt.ts

@@ -24,7 +24,6 @@
  */
 
 import fs from 'node:fs/promises';
-import os from 'node:os';
 import path from 'node:path';
 import { introspectSchema, type SchemaSnapshot } from '../schema-introspect';
 import { introspectContract, type AuthzContract, type QueryRunner } from '../authz-contract';
@@ -186,7 +185,14 @@ export async function dbAdoptCommand(
     process.exit(1);
   }
 
-  const sandboxDir = opts.sandboxDir ?? await fs.mkdtemp(path.join(os.tmpdir(), 'everystack-adopt-'));
+  // The proof-compile sandbox MUST live inside the project, never the OS temp dir. The rendered
+  // barrel imports `@everystack/model`, and Node resolves a bare specifier by walking UP from the
+  // importing file looking for node_modules. pnpm hoists workspace packages to the repo root (an
+  // app dir has no local copy), so a dir under $TMPDIR cannot reach them and the compile crashes
+  // with "Cannot find module '@everystack/model'". cwd is inside the project, so a sandbox under it
+  // resolves exactly as the real db/models barrel will. (Reported by a consumer on 0.4.74; the
+  // scratch-sweep harness documents the same rule: $TMPDIR → MODULE_NOT_FOUND, project dir resolves.)
+  const sandboxDir = opts.sandboxDir ?? await fs.mkdtemp(path.join(process.cwd(), '.everystack-adopt-'));
   let exitCode: 0 | 1 = 1;
   let end: (() => Promise<void>) | undefined;
   try {
@@ -209,7 +215,12 @@ export async function dbAdoptCommand(
     ({ exitCode } = await applyAdoptVerdict(result, outDir));
   } catch (err: any) {
     fail(err.message);
-    if (dbSource.kind === 'url') {
+    // A failure to load the rendered barrel is a COMPILE error, not a connection or IAM problem —
+    // don't send the operator to check their credentials for it.
+    if (/Could not load models|Cannot find module/i.test(err.message ?? '')) {
+      info('This is the proof-compile step, not the database. The rendered Models could not be loaded —');
+      info('run db:adopt from inside your project (where @everystack/model resolves), and check the models compile.');
+    } else if (dbSource.kind === 'url') {
       info('Check the connection string and that the database is accepting connections.');
     } else {
       for (const line of opsAdviceLines(err, [