fix: declare ms + debug as direct deps to unblock packaged auto-updater

electron-builder.yml

@@ -10,6 +10,15 @@ files:
   - '!{.env,.env.*,.npmrc,pnpm-lock.yaml}'
   - '!{tsconfig.json,tsconfig.node.json,tsconfig.web.json}'
   - '!{_tmp,_local}/**'
+# Note on dependency packaging:
+# `debug` and `ms` are declared as direct dependencies in package.json
+# even though they're transitives of electron-updater. This works around
+# electron-builder #9654 — its pnpm-aware dep walker, triggered by the
+# `packageManager` field in package.json, drops `ms` from the asar even
+# when node_modules is hoisted flat. Without the explicit declaration,
+# packaged builds crash on launch with `Cannot find module 'ms'` the
+# moment electron-updater loads. Remove the explicit deps when #9654 is
+# resolved upstream.
 asarUnpack:
   - resources/**
 mac:

package.json

@@ -56,8 +56,10 @@
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
     "date-fns": "^4.1.0",
+    "debug": "^4.4.3",
     "electron-updater": "^6.8.3",
     "lucide-react": "^1.14.0",
+    "ms": "^2.1.3",
     "radix-ui": "^1.4.3",
     "react-day-picker": "^10.0.0",
     "react-router-dom": "^7.1.5",

pnpm-workspace.yaml

@@ -2,3 +2,10 @@ allowBuilds:
   electron: true
   electron-winstaller: false
   esbuild: true
+
+# pnpm 10+ reads these from pnpm-workspace.yaml (not .npmrc). Required
+# so electron-builder's asar walker finds transitive deps of bundled
+# packages — without this, electron-updater's `debug` dep ships without
+# `ms`, crashing the main process at module load on packaged builds.
+nodeLinker: hoisted
+shamefullyHoist: true