diff --git a/.changeset/bundle-evlog-cjs.md b/.changeset/bundle-evlog-cjs.md
new file mode 100644
index 00000000..b30b9d30
--- /dev/null
+++ b/.changeset/bundle-evlog-cjs.md
@@ -0,0 +1,5 @@
+---
+"@cipherstash/stack": patch
+---
+
+Bundle `evlog` into the CJS output. `evlog` is pure ESM (no `require` condition in its `exports` map), so CJS consumers of `@cipherstash/stack` (e.g. webpack bundles) were failing with `ERR_PACKAGE_PATH_NOT_EXPORTED` when the stack's `index.cjs` tried to `require("evlog")`. `evlog` is now inlined at build time and no longer resolved at runtime.
diff --git a/packages/stack/tsup.config.ts b/packages/stack/tsup.config.ts
index e46103b5..2bcb6f2c 100644
--- a/packages/stack/tsup.config.ts
+++ b/packages/stack/tsup.config.ts
@@ -22,5 +22,6 @@ export default defineConfig([
     target: 'es2022',
     tsconfig: './tsconfig.json',
     external: ['drizzle-orm', '@supabase/supabase-js'],
+    noExternal: ['evlog'],
   },
 ])