chore: migrate package manager bun → pnpm + test runner bun:test → Vite+ (vp test)

[paul-phan]

Mirrors the staged migration shipped on the weaverse-builder repo (PRs #2360, #2361, #2362, #2363), squashed into one consolidated change since the SDK monorepo is much smaller (216 tests, 6 packages).

What changed

Package manager (Stage 1 equivalent)

• packageManager: bun@1.3.11 → pnpm@11.1.2
• bun.lock deleted, pnpm-lock.yaml generated
• bunfig.toml deleted
• New pnpm-workspace.yaml:
  • nodeLinker: hoisted — flat node_modules so transitive deps keep resolving without explicit declarations (matches bun's behaviour)
  • allowBuilds — explicit allow-list for postinstall scripts (esbuild, lefthook, biome, workerd, @parcel/watcher); pnpm 11 blocks them by default as supply-chain hardening
  • verifyDepsBeforeRun: false — prevents infinite recursion when turbo invokes nested pnpm run build calls
  • catalog: block aliases vite → @voidzero-dev/vite-plus-core, vitest → @voidzero-dev/vite-plus-test, plus vite-plus CLI
• .npmrc: kept legacy-peer-deps=true, added verify-deps-before-run=false mirror for safety
• Root package.json:
  • scripts: npm run X → pnpm run X
  • new test:run script (vp test --run --bail=1)
  • removed prepare script (caused recursive install loops under pnpm 11; this is a private monorepo so consumers don't need it)
  • added vite, vite-plus, vitest devDeps via catalog

Test runner (Stage 2 equivalent)

• New root vite.config.ts with test: block (node env, forks pool, 30s timeout, include/exclude patterns relative to cwd so it works both from repo root and from each package via turbo)
• Per-package test scripts: bun test → vp test --run (hydrogen, i18n, react, schema, cli — cli's was echo 'No tests' even though it had a real test file)
• All 12 test files ported from 'bun:test' → from 'vitest':
  • spyOn / mock aliased locally (const spyOn = vi.spyOn, const mock = vi.fn) to keep diffs minimal
  • mock.module(name, factory) → vi.mock(name, factory) (i18n/__tests__/client.test.ts) — works identically since vitest hoists vi.mock calls
  • mock.restore() → vi.restoreAllMocks() (react data-connector)
• 3 standalone validation scripts that use the .test.ts suffix but contain no describe/it blocks excluded by name (core/blah, schema/enhanced-features, schema/type-alignment) — these should probably be renamed in a follow-up

CI (.github/workflows/check.yml)

• Replaced oven-sh/setup-bun + bun cache with pnpm/action-setup + Node's built-in pnpm cache, keyed on pnpm-lock.yaml
• Added a test job running pnpm run test

Tooling

• lefthook.yml: bun run biome → pnpm exec biome
• scripts/clean.sh: already handled both lockfiles; no change needed

Docs (AGENTS.md, CLAUDE.md, ARCHITECTURE.md)

• Command tables rewritten for pnpm
• Test patterns updated to import from vitest and use vi.* API

Verification

All passing locally on macOS arm64, Node 20, pnpm 11.1.2:

Check	Result
pnpm install	clean (184 packages)
pnpm run typecheck	4 packages green
pnpm run build	5 packages green
pnpm run test (turbo orchestrated)	6 packages, 13 files, 216 tests passing
pnpm run test:run (single vp invocation)	same
pnpm run biome	no issues