feat(build): adopt electron-vite for dev + build pipeline (#228)

Closes #144

## Summary

- Adds `electron-vite ^5.0.0` as the build orchestrator at the workspace
root, replacing separate `tsc -b` / `vite` invocations with a single
three-pipeline build (main, preload, renderer)
- Introduces `electron-entry.ts` — the Electron app shell that creates
the `BrowserWindow`, wires the preload script, loads
`ELECTRON_RENDERER_URL` in dev (HMR) or the production
`out/renderer/index.html`, and starts the NestJS IPC microservice;
bootstrap failures surface via `.catch()` + `app.quit()` instead of
being silently swallowed
- Exports `bootstrap()` from `main.ts` so `electron-entry.ts` controls
call timing; wires `desktop:dev` / `desktop:build` scripts at root and
removes Epic A placeholder stubs

## Changes

```
CLAUDE.md                                        +5   docs: desktop:dev / desktop:build commands
app/eslint.config.js                             +1   ignore **/out/** (electron-vite build output)
app/package.json                                 ±4   replace echo/exit-1 stubs with electron-vite scripts
app/packages/desktop-main/package.json           ±4   same
app/packages/desktop-main/src/electron-entry.ts  +55  new Electron app entry
app/packages/desktop-main/src/electron-entry.test.ts  +241  6 unit tests (dev/prod/bootstrap/quit/macOS/rejection)
app/packages/desktop-main/src/main.ts            ±10  export bootstrap(), remove module-level call
app/packages/desktop-main/src/main.test.ts       ±13  explicit bootstrap() calls; accurate descriptions
electron.vite.config.ts                          +40  main/preload/renderer pipelines
package.json                                     +2   desktop:dev + desktop:build scripts
```

## Test plan

- [x] 559 unit tests pass (`npm run app:test`)
- [x] Lint passes — 0 errors (`npm run app:lint`)
- [x] TypeScript clean (`tsc --noEmit`)
- [x] `electron-vite build` exits 0 and produces `out/main`,
`out/preload`, `out/renderer`
- [ ] Manual: `npm run desktop:dev` launches Electron with HMR on
renderer saves
- [ ] Manual: editing a main-process file triggers auto-restart

<details>
<summary>🚀 Mission log</summary>

```
═══════════════════════════════════════════════════════
  MISSION  issue #144 — feat(build): adopt electron-vite for dev + build pipeline
═══════════════════════════════════════════════════════
  pre-launch      ✓  (6 tasks planned)
  liftoff         ✓  (6/6 passed — Apollo Borman Collins Duke Eisele Frost)
  systems-check   ✓  (2 repairs — Glenn Haise)
  docking         ✓
═══════════════════════════════════════════════════════
```

</details>

🤖 Generated via /mission

Author: CoderCoco

.github/workflows/claude-code-review.yml

@@ -11,6 +11,7 @@ permissions:
 jobs:
   e2e:
     runs-on: ubuntu-latest
+    timeout-minutes: 20
     steps:
       - uses: actions/checkout@v5
 
@@ -22,9 +23,11 @@ jobs:
 
       - run: npm ci
 
-      - name: Install Playwright browsers
-        run: npx playwright install chromium --with-deps
+      - name: Install Playwright system dependencies
+        run: DEBIAN_FRONTEND=noninteractive npx playwright install-deps chromium
         working-directory: app/packages/web
+        timeout-minutes: 5
+
 
       - run: npm run app:test:e2e
 

.github/workflows/claude.yml

@@ -11,6 +11,7 @@ permissions:
 jobs:
   integration:
     runs-on: ubuntu-latest
+    timeout-minutes: 20
     steps:
       - uses: actions/checkout@v5
 
@@ -22,9 +23,11 @@ jobs:
 
       - run: npm ci
 
-      - name: Install Playwright browsers
-        run: npx playwright install chromium --with-deps
+      - name: Install Playwright system dependencies
+        run: DEBIAN_FRONTEND=noninteractive npx playwright install-deps chromium
         working-directory: app/packages/web
+        timeout-minutes: 5
+
 
       - run: npm run app:test:integration
 

.github/workflows/e2e.yml

@@ -14,11 +14,18 @@ The repo uses a single **npm-workspaces** tree rooted at the repo root. Workspac
 # Install all workspaces in one go (run from repo root)
 npm install
 
-# Run the dev servers (Nest on 3001, Vite on 5173 with /api proxy)
-npm run app:dev
-
-# Production build (shared → server → web)
-npm run app:build && npm run app:start  # http://localhost:3001
+# Launch the Electron desktop app in dev mode (HMR on renderer saves, auto-restarts main+preload)
+npm run app:dev          # delegates to desktop:dev — equivalent to: npm run desktop:dev
+
+# Production build then launch
+npm run app:build        # compiles shared → desktop-main → web TypeScript (not the Electron bundle)
+npm run desktop:build    # electron-vite build → produces out/main, out/preload, out/renderer
+npm run app:start        # starts the built Electron app (requires desktop:build to have run first)
+
+# Electron desktop app — electron-vite drives three pipelines (main/preload/renderer)
+# configured in electron.vite.config.ts; outputs land in out/main, out/preload, out/renderer
+npm run desktop:dev    # electron-vite dev: HMR on renderer saves, auto-restarts main+preload
+npm run desktop:build  # electron-vite build: produces out/main, out/preload, out/renderer
 
 # Build all Lambda bundles (required before `terraform apply`)
 npm run app:build:lambdas

.github/workflows/integration.yml

@@ -10,6 +10,7 @@ export default tseslint.config(
   {
     ignores: [
       '**/dist/**',
+      '**/out/**',
       '**/node_modules/**',
       '**/*.d.ts',
       'packages/web/vite.config.ts',

CLAUDE.md

@@ -5,11 +5,11 @@
   "type": "module",
   "scripts": {
     "predev": "node scripts/embed-tfstate.mjs",
-    "dev": "echo 'app:dev requires the Electron launcher from Epic A (#136). Run npm run dev -w @hyveon/web for the web-only dev server.' && exit 1",
+    "dev": "electron-vite dev --config ../electron.vite.config.ts",
     "prebuild": "node scripts/embed-tfstate.mjs",
     "build": "npm run build -w @hyveon/shared && npm run build -w @hyveon/desktop-main && npm run build -w @hyveon/web",
     "build:lambdas": "npm run build -w @hyveon/shared && npm run build -w @hyveon/lambda-interactions -w @hyveon/lambda-followup -w @hyveon/lambda-update-dns -w @hyveon/lambda-watchdog -w @hyveon/lambda-efs-seeder",
-    "start": "echo 'app:start requires the Electron launcher from Epic A (#136).' && exit 1",
+    "start": "electron ../out/main/index.js",
     "test": "vitest run",
     "test:coverage": "vitest run --coverage",
     "test:watch": "vitest",

app/eslint.config.js

@@ -5,9 +5,9 @@
   "type": "module",
   "main": "./dist/main.js",
   "scripts": {
-    "dev": "echo 'desktop-main now runs as an Electron IPC microservice. The Electron launcher is wired in Epic A (#136).' && exit 1",
+    "dev": "electron-vite dev --config ../../../electron.vite.config.ts",
     "build": "tsc -b",
-    "start": "echo 'desktop-main now runs as an Electron IPC microservice. The Electron launcher is wired in Epic A (#136).' && exit 1"
+    "start": "electron ../../../out/main/index.js"
   },
   "dependencies": {
     "@aws-sdk/client-cloudwatch-logs": "^3.600.0",