chore(ui): declare vitest in every ui package whose test script calls it (#26290)

<!-- claude-projects-attribution: {"github_login":"os-steve"} -->
_Requested by **Steve** · [project
thread](https://claude.ai/code/project/chan_01FdL1XeUyvVNxLreh3F4Qi9?thread=cmsg_01FdL1XeUyvVNxLreh3F4Qi93uHdrJhCaZjEQjoR2jXwwH)_

Fixes #26276

Clause-②: no
Metadata-protocol: none

## What was wrong

Every ui package `test` script reads `vitest run --root ../..
packages/PKG/`. A pnpm script finds binaries in the package's own
`node_modules/.bin` and in the workspace root's (`node_modules/.bin` at
the repo root). vitest is installed under `ui/node_modules/.bin` only,
which is on neither path. So a package that does not declare vitest
itself cannot run its own `test` script, from the repo root or from
`ui/`.

Measured on `e05e0de8` (origin/main) before the change, all 41 ui
packages that declare a `test` script, each run as `pnpm --filter NAME
run test` from the repo root and again from `ui/`:

- 24 packages: `sh: 1: vitest: not found`, from both roots. They are
exactly the 24 that do not declare `vitest`: app-shell, components,
fields, plugin-calendar, plugin-charts, plugin-chatbot,
plugin-dashboard, plugin-editor, plugin-form, plugin-gantt, plugin-grid,
plugin-kanban, plugin-map, plugin-markdown, plugin-timeline,
plugin-tree, plugin-view, providers, react, react-runtime, runner,
sdui-parser, test-support, types.
- 17 packages: vitest starts. Each declares `vitest: ^4.1.10` (auth,
cli, collaboration, core, create-plugin, data-objectstack, i18n, layout,
mobile, permissions, plugin-ai, plugin-designer, plugin-detail,
plugin-list, plugin-report, the vscode extension, and the console).

## The fix

The 24 packages now declare `vitest: ^4.1.10` in `devDependencies`, the
same range `ui/package.json` and the 17 working packages already
declare. No script changes, so the form CI and ui/AGENTS.md prescribe
(`pnpm --dir ui exec vitest run packages/PKG/`) is untouched.

`pnpm-lock.yaml`: +73 lines, 0 removed. That is one `vitest` importer
entry (3 lines) for each of the 24 packages, plus the `devDependencies:`
header for react-runtime, which had none. Every new entry resolves to
the existing snapshot the 17 working packages use (byte-identical
`version:` string to `ui/packages/auth`). `node
ui/scripts/check-lockfile-integrity.mjs --base-ref origin/main`:
`VERDICT clean — no package gained a copy` (1941 resolutions on both
sides).

Changeset: `.changeset/26276-ui-package-test-vitest.md`, `patch` for the
22 published packages whose `package.json` changes (runner and
test-support are private). Only the published `devDependencies` field
moves; nothing a consumer installs changes.

## Evidence (head `2ef77bb4`)

After the change, `pnpm --filter NAME exec sh -c 'command -v vitest'`
resolves for 41 of 41 packages from the repo root and from `ui/`.

The six packages the card names, each run from the repo root as `pnpm
--filter @object-ui/PKG test --maxWorkers=2` (the package's own `test`
script, echoed as `> @object-ui/PKG@18.1.0 test`), under the shared
verification lock, after building the `@objectstack/*` dependency
closure:

| package | Test Files | Tests |
|---|---|---|
| `@object-ui/sdui-parser` | 21 passed (21) | 301 passed |
| `@object-ui/plugin-chatbot` | 84 passed (84) | 805 passed |
| `@object-ui/react` | 119 passed (119) | 1479 passed |
| `@object-ui/types` | 390 passed (390) | 10602 passed |
| `@object-ui/components` | 435 passed, 1 skipped (436) | 4263 passed,
24 skipped |
| `@object-ui/app-shell` (narrowed: `--shard=1/40`) | 35 passed (35) |
358 passed |

All six exit 0. app-shell has about 1743 test files, too many for one
local run, so it was run through its own `test` script with
`--shard=1/40`. That still proves the binary resolves and the package's
tests run. The full suite is left to CI `Test UI`.

## Gates

`node scripts/pm/dispatch-gates.mjs --commands --repo
objectstack-ai/objectstack` derived 47 families. 46 exit 0. `pnpm
check:dual-build-cjs-loads` exited 3 (`PREREQUISITE NOT MET`: it reads
built `dist/` of every published `@objectstack/*` package, and only the
spec/client/formula/lint closure was built here), so it is NOT MEASURED
locally and left to CI. `--ran` reconciliation: 47 derived, 46 run, 1
NOT-MEASURED, 0 UNRUN.

## Acceptance notes

- `pnpm install` (non-frozen) prints `unmet peer @vitest/ui@4.1.12:
found 4.1.10` for the snapshot all these packages share. It is the same
snapshot the 17 working packages and the console already resolve to, so
this PR adds no new peer mismatch. Noted, not filed.

---
_Generated by [Claude
Code](https://claude.ai/code/session_01CQYwcp65XPKU6W8H7gaJ9x)_

Co-authored-by: Claude <noreply@anthropic.com>

Author: objectstack-fleet[bot]

.changeset/26276-ui-package-test-vitest.md

@@ -0,0 +1,31 @@
+---
+'@object-ui/app-shell': patch
+'@object-ui/components': patch
+'@object-ui/fields': patch
+'@object-ui/plugin-calendar': patch
+'@object-ui/plugin-charts': patch
+'@object-ui/plugin-chatbot': patch
+'@object-ui/plugin-dashboard': patch
+'@object-ui/plugin-editor': patch
+'@object-ui/plugin-form': patch
+'@object-ui/plugin-gantt': patch
+'@object-ui/plugin-grid': patch
+'@object-ui/plugin-kanban': patch
+'@object-ui/plugin-map': patch
+'@object-ui/plugin-markdown': patch
+'@object-ui/plugin-timeline': patch
+'@object-ui/plugin-tree': patch
+'@object-ui/plugin-view': patch
+'@object-ui/providers': patch
+'@object-ui/react': patch
+'@object-ui/react-runtime': patch
+'@object-ui/sdui-parser': patch
+'@object-ui/types': patch
+---
+
+chore(ui): every ui package whose `test` script calls `vitest` now declares `vitest` as a devDependency, so `pnpm --filter @object-ui/PKG test` runs from the repository root
+
+Clause-②: no
+Metadata-protocol: none
+
+The package `test` scripts run `vitest run --root ../.. packages/PKG/`. A pnpm script resolves its binaries from the package's own `node_modules/.bin` and the workspace root's, and vitest was installed only under `ui/node_modules/.bin`, so 24 of the 41 ui packages with a `test` script failed with `vitest: not found` from both the repository root and `ui/`. Each of them now declares `vitest: ^4.1.10`, the range `ui/package.json` and the other 17 packages already declare; the lockfile resolves every new entry to the snapshot those packages already use, so no package gains a copy. Nothing a consumer installs changes: only the `devDependencies` field of the published `package.json` moves.

pnpm-lock.yaml

@@ -137,7 +137,8 @@
     "react-router-dom": "^7.18.2",
     "sonner": "^2.0.8",
     "typescript": "^6.0.3",
-    "vite": "^8.2.1"
+    "vite": "^8.2.1",
+    "vitest": "^4.1.10"
   },
   "keywords": [
     "objectui",

ui/packages/app-shell/package.json

@@ -102,6 +102,7 @@
     "typescript": "^6.0.3",
     "vite": "^8.2.1",
     "vite-plugin-dts": "^5.0.3",
+    "vitest": "^4.1.10",
     "zod": "^4.6.5"
   },
   "keywords": [

ui/packages/components/package.json

@@ -59,7 +59,8 @@
     "tailwindcss": "^4.3.3",
     "typescript": "^6.0.3",
     "vite": "^8.2.1",
-    "vite-plugin-dts": "^5.0.3"
+    "vite-plugin-dts": "^5.0.3",
+    "vitest": "^4.1.10"
   },
   "publishConfig": {
     "access": "public"

ui/packages/fields/package.json

@@ -61,7 +61,8 @@
     "@vitejs/plugin-react": "^6.0.5",
     "typescript": "^6.0.3",
     "vite": "^8.2.1",
-    "vite-plugin-dts": "^5.0.3"
+    "vite-plugin-dts": "^5.0.3",
+    "vitest": "^4.1.10"
   },
   "keywords": [
     "objectui",

ui/packages/plugin-calendar/package.json

@@ -58,7 +58,8 @@
     "@vitejs/plugin-react": "^6.0.5",
     "typescript": "^6.0.3",
     "vite": "^8.2.1",
-    "vite-plugin-dts": "^5.0.3"
+    "vite-plugin-dts": "^5.0.3",
+    "vitest": "^4.1.10"
   },
   "keywords": [
     "objectui",

ui/packages/plugin-charts/package.json

@@ -64,7 +64,8 @@
     "@vitejs/plugin-react": "^6.0.5",
     "typescript": "^6.0.3",
     "vite": "^8.2.1",
-    "vite-plugin-dts": "^5.0.3"
+    "vite-plugin-dts": "^5.0.3",
+    "vitest": "^4.1.10"
   },
   "keywords": [
     "objectui",

ui/packages/plugin-chatbot/package.json

@@ -50,7 +50,8 @@
     "react-grid-layout": "^2.2.4",
     "typescript": "^6.0.3",
     "vite": "^8.2.1",
-    "vite-plugin-dts": "^5.0.3"
+    "vite-plugin-dts": "^5.0.3",
+    "vitest": "^4.1.10"
   },
   "keywords": [
     "objectui",

ui/packages/plugin-dashboard/package.json

@@ -52,7 +52,8 @@
     "@vitejs/plugin-react": "^6.0.5",
     "typescript": "^6.0.3",
     "vite": "^8.2.1",
-    "vite-plugin-dts": "^5.0.3"
+    "vite-plugin-dts": "^5.0.3",
+    "vitest": "^4.1.10"
   },
   "keywords": [
     "objectui",