pnpm Hoisting — Peer Dep Not Found

Diagnose pnpm strict node_modules layout causing peer dependency not found errors that npm's flat layout would hide.

intermediatedebuggingciphase-16

Symptoms

A package fails to find its peer dependency because pnpm uses a strict, non-flat node_modules.
Error message: Error: Cannot find module "react" (peer dependency not hoisted in pnpm)
Failure occurs intermittently or after a specific code path

Possible causes

pnpm creates a nested node_modules with symlinks, not a flat hoist.
A package relies on a peer dep being hoisted to the top level (works in npm, fails in pnpm).
Environment or runtime version mismatch introduces the defect

Diagnosis steps

Reproduce the error in a minimal isolated test case

node -e "require('./repro')"

Interpretation

If the minimal case reproduces, the bug is in the logic itself, not the environment. If not, collect environment details.

Capture the full error stack trace and identify the originating line

Set NODE_OPTIONS=--stack-trace-limit=100 and run with verbose logging

Interpretation

The first frame in user code is the trigger. Compare against the expected execution path to find the divergence point.

Inspect the values of all variables at the failure point

Add console.log / debugger / breakpoint at the line before the throw

Interpretation

Check for undefined, null, wrong type, or unexpected shape. The error message tells you what was wrong; the variables tell you why.

Root cause

pnpm uses a strict layout where only declared dependencies are accessible; undeclared peer deps are not hoisted.

Fix

Add the peer dep to dependencies or use pnpm.peerDependencyRules.allowedVersions, or use shamefully-hoist.

Risk note

Applying the fix without understanding the root cause may mask the symptom and introduce a different defect. Always verify with the reproduction case.

Verify the fix

Run pnpm install and the build; confirm the peer dep is resolvable.

Symptom and Error Message

When running the CI/CD code, the runtime raises the following error:

Error: Cannot find module "react" (peer dependency not hoisted in pnpm)

This error indicates that a package fails to find its peer dependency because pnpm uses a strict, non-flat node_modules. The error is reproducible and appears consistently once the triggering condition is met. In production, you may see this error sporadically because the triggering condition depends on runtime state that is not always present.

Root Cause Analysis

The fundamental cause is: pnpm uses a strict layout where only declared dependencies are accessible; undeclared peer deps are not hoisted. Two factors converge to produce the visible error. First, pnpm creates a nested node_modules with symlinks, not a flat hoist. Second, a package relies on a peer dep being hoisted to the top level (works in npm, fails in pnpm). Either factor alone might not trigger the error, but together they create the conditions for failure.

Diagnosis Walkthrough

Start by reproducing the error in isolation. Strip away everything except the minimum code path that triggers the error. Once you have a minimal reproduction, inspect every variable at the failure point. Look for: undefined where an object is expected, wrong types, stale references, and off-by-one indices. The error message tells you what went wrong; the surrounding state tells you why.

Fix and Code Example

// Before (buggy)
// ... code that triggers the error ...

// After (fixed)
// ... corrected code with proper guard or type check ...

The fix addresses the root cause directly: add the peer dep to dependencies or use pnpm.peerdependencyrules.allowedversions, or use shamefully-hoist. After applying the fix, the error no longer occurs because the triggering condition is either prevented or handled gracefully.

Verification

Run pnpm install and the build; confirm the peer dep is resolvable. Run the reproduction case again and confirm the error is gone. Then run the full test suite to check for regressions. In production, monitor error logs for 24 hours to confirm the fix is effective under real load.

Common Pitfalls

A frequent mistake is to suppress the error with a try/catch or conditional without addressing the underlying cause. This masks the symptom but the defective logic remains, and the error will resurface in a different form. Always fix the root cause, not just the error message. Another pitfall is fixing the symptom only in the happy path while ignoring edge cases like empty input, null values, or concurrent access.