Vitest, shared config in tooling/vitest/. API tests use createTestCaller() for authed tRPC calls. Run via root pnpm test—scripts/run-tests.sh resolves Postgres/MinIO from .env.local (or the compose defaults) and provisions zrm_test. zrm_test is a template, not a workplace: tooling/vitest/global-setup.ts clones it per vitest worker and drops the clones on teardown, so fixtures never accumulate and two consecutive runs are identical (ZRM_TEST_DB_ISOLATION=off opts out). Coverage v8 (text + lcov). Running one package has two traps that will bite you—correct invocation in services/api/CLAUDE.md, and docs/superpowers/ERRATA.md records why.