chore(tooling): port upstream infra/tooling audit fixes

Ports the kept-file portions of the upstream infra audit-fix subset onto
the clean-slate template branch (auth-only shape; workspaces feature never
existed here, so its package.json edit is skipped):

- resolve the root playwright config in pnpm test:visual (S8)
- prune dead VERCEL_ENV from turbo.json globalEnv (S9)
- drop the duplicate chromium install in the storybook CI job (S10)
- wire scripts/**/*.test.mjs under a dedicated vitest runner
  (vitest.scripts.config.mjs + pnpm test:scripts + CI validate step);
  convert node:test imports to vitest keeping node:assert
- ignore *.tsbuildinfo repo-wide and untrack the committed build state
- align every @trpc/* range on ^11.18.0 so the workspace resolves to a
  single version (peer-warning-free install)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016j8z4VHjedXDTjEDNg7qHK

scripts/compliance/emit-data-map.test.mjs

@@ -1,4 +1,6 @@
-import { test, describe } from "node:test";
+// Runs under vitest (pnpm test:scripts picks up scripts/**/*.test.mjs);
+// node:assert keeps the original assertion style.
+import { test, describe } from "vitest";
 import assert from "node:assert/strict";
 import fs from "node:fs";
 import os from "node:os";

scripts/compliance/emit-retention-policy.test.mjs

@@ -1,4 +1,6 @@
-import { test, describe } from "node:test";
+// Runs under vitest (pnpm test:scripts picks up scripts/**/*.test.mjs);
+// node:assert keeps the original assertion style.
+import { test, describe } from "vitest";
 import assert from "node:assert/strict";
 import fs from "node:fs";
 import os from "node:os";

scripts/compliance/emit-sub-processors.test.mjs

@@ -1,4 +1,6 @@
-import { test, describe } from "node:test";
+// Runs under vitest (pnpm test:scripts picks up scripts/**/*.test.mjs);
+// node:assert keeps the original assertion style.
+import { test, describe } from "vitest";
 import assert from "node:assert/strict";
 import fs from "node:fs";
 import os from "node:os";

scripts/coverage/aggregate.test.mjs

@@ -1,4 +1,6 @@
-import { test, describe } from "node:test";
+// Runs under vitest (pnpm test:scripts picks up scripts/**/*.test.mjs);
+// node:assert keeps the original assertion style.
+import { test, describe } from "vitest";
 import assert from "node:assert/strict";
 import fs from "node:fs";
 import path from "node:path";

scripts/coverage/diff.test.mjs

@@ -1,4 +1,6 @@
-import { test, describe } from "node:test";
+// Runs under vitest (pnpm test:scripts picks up scripts/**/*.test.mjs);
+// node:assert keeps the original assertion style.
+import { test, describe } from "vitest";
 import assert from "node:assert/strict";
 import fs from "node:fs";
 import path from "node:path";

scripts/coverage/mutate.test.mjs

@@ -1,4 +1,6 @@
-import { test, describe } from "node:test";
+// Runs under vitest (pnpm test:scripts picks up scripts/**/*.test.mjs);
+// node:assert keeps the original assertion style.
+import { test, describe } from "vitest";
 import assert from "node:assert/strict";
 import fs from "node:fs";
 import path from "node:path";

scripts/library-decisions/check.test.mjs

@@ -1,4 +1,6 @@
-import { test, describe } from "node:test";
+// Runs under vitest (pnpm test:scripts picks up scripts/**/*.test.mjs);
+// node:assert keeps the original assertion style.
+import { test, describe } from "vitest";
 import assert from "node:assert/strict";
 import fs from "node:fs";
 import os from "node:os";

scripts/library-decisions/revalidate.test.mjs

@@ -1,4 +1,6 @@
-import { test, describe } from "node:test";
+// Runs under vitest (pnpm test:scripts picks up scripts/**/*.test.mjs);
+// node:assert keeps the original assertion style.
+import { test, describe } from "vitest";
 import assert from "node:assert/strict";
 import fs from "node:fs";
 import os from "node:os";

scripts/library-decisions/schema.test.mjs

@@ -1,4 +1,6 @@
-import { test, describe } from "node:test";
+// Runs under vitest (pnpm test:scripts picks up scripts/**/*.test.mjs);
+// node:assert keeps the original assertion style.
+import { test, describe } from "vitest";
 import assert from "node:assert/strict";
 import fs from "node:fs";
 import os from "node:os";

scripts/work/cli.test.mjs

@@ -52,8 +52,10 @@ describe("pnpm work cli", () => {
     expect(out.length).toBeGreaterThan(0);
   });
 
-  it("dispatch prints a plan", () => {
+  it("dispatch prints a plan or reports nothing is ready", () => {
+    // Runs against the real docs/work tree, so the outcome depends on
+    // whether a ready task exists — both branches are valid CLI output.
     const out = run("dispatch");
-    expect(out).toContain("Dispatch plan");
+    expect(out).toMatch(/Dispatch plan|No ready task to dispatch/);
   });
 });

scripts/work/decompose.test.mjs

@@ -1,4 +1,6 @@
-import { test, describe } from "node:test";
+// Runs under vitest (pnpm test:scripts picks up scripts/**/*.test.mjs);
+// node:assert keeps the original assertion style.
+import { test, describe } from "vitest";
 import assert from "node:assert/strict";
 import fs from "node:fs";
 import path from "node:path";

scripts/work/dispatch.test.mjs

@@ -12,7 +12,8 @@ import {
 function makeWorkTree({ epics }) {
   const root = fs.mkdtempSync(path.join(os.tmpdir(), "dispatch-"));
   for (const [epicId, epicData] of Object.entries(epics)) {
-    const epicDir = path.join(root, epicId);
+    // findNextTask/buildState walk <workRoot>/epics/ — mirror docs/work.
+    const epicDir = path.join(root, "epics", epicId);
     fs.mkdirSync(epicDir, { recursive: true });
     fs.writeFileSync(
       path.join(epicDir, "_epic.md"),

scripts/work/prd-ship.test.mjs

@@ -1,4 +1,6 @@
-import { test, describe } from "node:test";
+// Runs under vitest (pnpm test:scripts picks up scripts/**/*.test.mjs);
+// node:assert keeps the original assertion style.
+import { test, describe } from "vitest";
 import assert from "node:assert/strict";
 import fs from "node:fs";
 import path from "node:path";

scripts/work/state-builder.test.mjs

@@ -12,7 +12,8 @@ import {
 function makeWorkTree({ epics }) {
   const root = fs.mkdtempSync(path.join(os.tmpdir(), "work-state-"));
   for (const [epicId, epicData] of Object.entries(epics)) {
-    const epicDir = path.join(root, epicId);
+    // buildState walks <workRoot>/epics/ — mirror the real docs/work layout.
+    const epicDir = path.join(root, "epics", epicId);
     fs.mkdirSync(epicDir, { recursive: true });
     fs.writeFileSync(
       path.join(epicDir, "_epic.md"),
@@ -85,6 +86,7 @@ describe("buildState", () => {
       epic1: {
         status: "in-progress",
         title: "epic1",
+        prd: null,
         stories: {
           story1: {
             status: "done",
@@ -127,7 +129,7 @@ describe("buildState", () => {
 
   it("parses depends-on and blocks frontmatter arrays", () => {
     const root = fs.mkdtempSync(path.join(os.tmpdir(), "work-dep-"));
-    const epicDir = path.join(root, "epic1");
+    const epicDir = path.join(root, "epics", "epic1");
     fs.mkdirSync(epicDir, { recursive: true });
     fs.writeFileSync(
       path.join(epicDir, "_epic.md"),

scripts/work/state-sync-guard.test.mjs

@@ -8,9 +8,10 @@ const GUARD = path.join(__dirname, "state-sync-guard.mjs");
 
 describe("state-sync-guard smoke", () => {
   it("exits 0 when run against the repo's current state (since main is in sync)", () => {
-    // Run the guard; if main's _state.json drifts, this test will fail and tell us.
-    execSync(`node "${GUARD}"`, { encoding: "utf8" });
-    // No assertion on output; the exit code is 0 if we got here without throwing.
-    expect(true).toBe(true);
+    // Run the guard; if main's _state.json drifts, execSync throws (non-zero
+    // exit) and this test fails with the guard's output.
+    expect(() =>
+      execSync(`node "${GUARD}"`, { encoding: "utf8" }),
+    ).not.toThrow();
   });
 });