fix: use file-local createRequire for relative lazy requires in src/

The require-shim.mjs anchors globalThis.require at the project root
(package.json), which works for node:* builtins but breaks relative
paths — require("../telemetry.js") resolves to /project-root/../
instead of relative to the calling file.

The shim assumed relative require() calls in src/ only ran during
script/*.ts tsx runs, but pnpm cli (which also uses tsx) hits both
db/index.ts and list-command.ts at runtime. db/index.ts crashed hard;
list-command.ts was silently swallowed by try/catch, leaving
getSubcommandsForRoute() always returning an empty map.

Fix: replace the global require() with a file-local createRequire
anchored to import.meta.url in each affected file. Update the shim
comment to reflect the constraint.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

Author: betegon

script/require-shim.mjs

@@ -8,10 +8,10 @@
  *
  * The `require` function is anchored at the project root (package.json) so
  * that `node:*` builtins and npm package requires resolve correctly. Note
- * that relative `require("./foo.js")` calls will resolve from the project
- * root, not from the calling file — this is acceptable because all relative
- * `require()` calls in `src/` are behind runtime-only code paths (DB init,
- * telemetry) that don't execute during tsx script runs.
+ * that relative `require("./foo.js")` calls resolve from the project root,
+ * not from the calling file. Files in `src/` that use lazy relative requires
+ * must use a file-local `createRequire(import.meta.url)` instead of relying
+ * on this global shim.
  *
  * Usage: NODE_OPTIONS="--import ./script/require-shim.mjs" tsx script/...
  * Or in package.json scripts via the `pnpm tsx` alias.

src/lib/db/index.ts

@@ -5,8 +5,12 @@
  */
 
 import { chmodSync, mkdirSync } from "node:fs";
+import { createRequire } from "node:module";
 import { join } from "node:path";
 import { getEnv } from "../env.js";
+
+const _require = createRequire(import.meta.url);
+
 import { migrateFromJson } from "./migration.js";
 import { initSchema, runMigrations } from "./schema.js";
 import { Database } from "./sqlite.js";
@@ -107,7 +111,7 @@ export function getDatabase(): Database {
     if (getEnv().SENTRY_CLI_NO_TELEMETRY === "1") {
       db = rawDb;
     } else {
-      const { createTracedDatabase } = require("../telemetry.js") as {
+      const { createTracedDatabase } = _require("../telemetry.js") as {
         createTracedDatabase: (d: Database) => Database;
       };
       db = createTracedDatabase(rawDb);

src/lib/db/schema.ts

@@ -11,11 +11,14 @@
  * - Migration checks
  */
 
+import { createRequire } from "node:module";
 import { getEnv } from "../env.js";
 import { stringifyUnknown } from "../errors.js";
 import { logger } from "../logger.js";
 import type { Database } from "./sqlite.js";
 
+const _require = createRequire(import.meta.url);
+
 export const CURRENT_SCHEMA_VERSION = 16;
 
 /** Environment variable to disable auto-repair */
@@ -671,7 +674,7 @@ export function tryRepairAndRetry<T>(
   let repairSucceeded = false;
   try {
     // Dynamic imports to avoid circular dependencies with db/index.js
-    const { getRawDatabase } = require("./index.js") as {
+    const { getRawDatabase } = _require("./index.js") as {
       getRawDatabase: () => Database;
     };
 

src/lib/list-command.ts

@@ -13,8 +13,12 @@
  *   buildOrgListCommand
  */
 
+import { createRequire } from "node:module";
 import type { Aliases, Command, CommandContext } from "@stricli/core";
 import type { SentryContext } from "../context.js";
+
+const _require = createRequire(import.meta.url);
+
 import { parseOrgProjectArg } from "./arg-parsing.js";
 import { buildCommand, numberParser } from "./command.js";
 import { disableOrgCache } from "./db/regions.js";
@@ -414,7 +418,7 @@ function getSubcommandsForRoute(routeName: string): Set<string> {
     _subcommandsByRoute = new Map();
 
     try {
-      const { routes } = require("../app.js") as {
+      const { routes } = _require("../app.js") as {
         routes: { getAllEntries: () => readonly RouteEntry[] };
       };
 

src/lib/telemetry.ts

@@ -10,8 +10,12 @@
  */
 
 import { chmodSync, statSync } from "node:fs";
+import { createRequire } from "node:module";
 // biome-ignore lint/performance/noNamespaceImport: Sentry SDK recommends namespace import
 import * as Sentry from "@sentry/node-core/light";
+
+const _require = createRequire(import.meta.url);
+
 import { isMusl } from "./binary.js";
 import {
   CLI_VERSION,
@@ -1017,7 +1021,7 @@ const noop = (): void => {};
 /** Resolves the database path, falling back to a default if the import fails. */
 function resolveDbPath(): string {
   try {
-    const { getDbPath } = require("./db/index.js") as {
+    const { getDbPath } = _require("./db/index.js") as {
       getDbPath: () => string;
     };
     return getDbPath();