Vitest, shared config in tooling/vitest/. API tests use createTestCaller() for authed tRPC calls. Single package: pnpm --filter @zrm/api test. Coverage v8 (text + lcov).