test: repo-wide vitest console-intercept disarm + arrival gate (#10374) (#13522)

* test(infra): gate every vitest-running package on disableConsoleIntercept (#10374)

The late-console teardown race (#10374) is removed per suite by
disableConsoleIntercept: true; this gate makes the invariant hold for the
whole moving population — 38 vitest configs on 2026-08-21 were 43 by
2026-08-30, every arrival with the intercept armed, and 29 more packages run
vitest with no config file at all. The sweep that applies the setting to all
of them follows in this branch; the gate is what keeps the next arrival from
undoing it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Pk26oZ12t5N1hwGW1m1MgC

* fix(gate): put check-console-intercept-disarm's dispatch behind isEntrypoint (check:entry-guard)

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Pk26oZ12t5N1hwGW1m1MgC

* test(repo-wide): disarm vitest console interception in all 72 vitest-running packages (#10374)

Measured across the whole population (8,066 intercepted console RPCs per
full-repo run carrying 61,086 lines, every one discarded by the non-TTY
default reporter): 33/72 suites emit nothing and are disarmed for free;
dogfood alone carries 67% of the volume; and the one suite that actually
flaked (showcase) sits mid-tail at 340 lines — volume does not predict the
trigger, so the mechanism is removed everywhere rather than the trigger
narrowed anywhere. 42 configs edited, 29 created for packages that ran
vitest with no config; dogfood's setting is per-project because inline
projects do not inherit the root value (measured on vitest 4.1.10).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Pk26oZ12t5N1hwGW1m1MgC

---------

Co-authored-by: Claude <noreply@anthropic.com>

Author: claude[bot]

.github/workflows/lint.yml

@@ -2709,6 +2709,26 @@ jobs:
       - name: Cross-package test inputs
         run: pnpm check:cross-package-test-inputs
 
+      # Console-intercept disarm (#10374). vitest's worker forwards every
+      # console.* write to the main thread over RPC and DISCARDS the promise;
+      # a write that lands after teardown's `rpcDone()` snapshot is rejected
+      # into an unhandled error, failing a fully green suite (signature:
+      # `EnvironmentTeardownError: [vitest-worker]: Closing rpc while
+      # "onUserConsoleLog" was pending` — the file it names is where the
+      # worker WAS, not where the bug is). The window is load-width, so it
+      # presents as a merge-queue flake nobody can reproduce. The one general
+      # defence is `disableConsoleIntercept: true` in every package-root
+      # vitest config — it removes the mechanism (no RPC, nothing to reject)
+      # — and the population it must cover MOVES: five new vitest configs
+      # arrived in the nine days before this gate, every one with the
+      # intercept armed. This asserts every vitest-running package carries
+      # the disarm; the mechanism docblock lives in
+      # examples/app-showcase/vitest.config.ts and the teardown-race pin in
+      # that app proves the defect is still live in the installed vitest.
+      # Self-test first, then the real scan; reads ~72 manifests; sub-second.
+      - name: Console-intercept disarm
+        run: node scripts/check-console-intercept-disarm.mjs --self-test && node scripts/check-console-intercept-disarm.mjs
+
       # Live-server database isolation (#10382). CI provisions ONE Postgres and
       # ONE MySQL for the whole temporal-conformance job and points every live
       # leg at them, and every live suite in the repo issues a `drop` when it

examples/app-crm/vitest.config.ts

@@ -4,6 +4,15 @@ import { defineConfig } from 'vitest/config';
 import path from 'node:path';
 
 export default defineConfig({
+  test: {
+    // A late console.* must not redden a green suite (#10374): vitest's worker
+    // forwards console output over RPC and discards the promise, and a write
+    // landing after teardown's rpcDone() snapshot is rejected into an unhandled
+    // error — a fully green run that exits 1. Disarming removes the mechanism.
+    // Mechanism + measured costs: examples/app-showcase/vitest.config.ts.
+    // Enforced repo-wide by scripts/check-console-intercept-disarm.mjs.
+    disableConsoleIntercept: true,
+  },
   resolve: {
     // `action-predicate-sparse-face.test.ts` (#8990) drives this app's row
     // action predicate through the CEL engine itself, because the whole point

examples/app-todo/vitest.config.ts

@@ -0,0 +1,19 @@
+// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.
+
+// This config exists for exactly one setting; everything else stays on
+// vitest's defaults, deliberately — a key added here re-specifies behaviour
+// for every test file in the package (packages/cli/vitest.config.ts's header
+// records the incident that taught that).
+import { defineConfig } from 'vitest/config';
+
+export default defineConfig({
+  test: {
+    // A late console.* must not redden a green suite (#10374): vitest's worker
+    // forwards console output over RPC and discards the promise, and a write
+    // landing after teardown's rpcDone() snapshot is rejected into an unhandled
+    // error — a fully green run that exits 1. Disarming removes the mechanism.
+    // Mechanism + measured costs: examples/app-showcase/vitest.config.ts.
+    // Enforced repo-wide by scripts/check-console-intercept-disarm.mjs.
+    disableConsoleIntercept: true,
+  },
+});

examples/embed-objectql/vitest.config.ts

@@ -0,0 +1,19 @@
+// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.
+
+// This config exists for exactly one setting; everything else stays on
+// vitest's defaults, deliberately — a key added here re-specifies behaviour
+// for every test file in the package (packages/cli/vitest.config.ts's header
+// records the incident that taught that).
+import { defineConfig } from 'vitest/config';
+
+export default defineConfig({
+  test: {
+    // A late console.* must not redden a green suite (#10374): vitest's worker
+    // forwards console output over RPC and discards the promise, and a write
+    // landing after teardown's rpcDone() snapshot is rejected into an unhandled
+    // error — a fully green run that exits 1. Disarming removes the mechanism.
+    // Mechanism + measured costs: examples/app-showcase/vitest.config.ts.
+    // Enforced repo-wide by scripts/check-console-intercept-disarm.mjs.
+    disableConsoleIntercept: true,
+  },
+});

packages/adapters/hono/vitest.config.ts

@@ -5,6 +5,13 @@ import path from 'node:path';
 
 export default defineConfig({
   test: {
+    // A late console.* must not redden a green suite (#10374): vitest's worker
+    // forwards console output over RPC and discards the promise, and a write
+    // landing after teardown's rpcDone() snapshot is rejected into an unhandled
+    // error — a fully green run that exits 1. Disarming removes the mechanism.
+    // Mechanism + measured costs: examples/app-showcase/vitest.config.ts.
+    // Enforced repo-wide by scripts/check-console-intercept-disarm.mjs.
+    disableConsoleIntercept: true,
     globals: true,
     environment: 'node',
   },

packages/cli/vitest.config.ts

@@ -3,10 +3,11 @@
 // This package had NO vitest config until #9832, and that is the fact this
 // header exists to keep visible: adding one changes how every test file in
 // `packages/cli` is configured, not just the file that needed it. So the
-// config is deliberately minimal — anchored `resolve.alias` entries and no
-// `test` block at all, because the test files here run on vitest's defaults
-// (`globals: false`, `environment: 'node'`) and a `test` block would silently
-// re-specify them. Sibling configs in this repo do carry
+// config is deliberately minimal — anchored `resolve.alias` entries and a
+// `test` block that only carries keys with a recorded warrant (`server.deps`,
+// and the #10374 console-intercept disarm), because the test files here run on
+// vitest's defaults (`globals: false`, `environment: 'node'`) and re-specifying
+// THOSE keys would silently flip them. Sibling configs in this repo do carry
 // `test: { globals: true, … }`; copying that shape here would have flipped
 // `globals` for every existing file in the package.
 //
@@ -378,6 +379,13 @@ export default defineConfig({
     ],
   },
   test: {
+    // A late console.* must not redden a green suite (#10374): vitest's worker
+    // forwards console output over RPC and discards the promise, and a write
+    // landing after teardown's rpcDone() snapshot is rejected into an unhandled
+    // error — a fully green run that exits 1. Disarming removes the mechanism.
+    // Mechanism + measured costs: examples/app-showcase/vitest.config.ts.
+    // Enforced repo-wide by scripts/check-console-intercept-disarm.mjs.
+    disableConsoleIntercept: true,
     server: {
       deps: {
         external: [/packages[\/]types[\/]dist/],

packages/client-react/vitest.config.ts

@@ -2,6 +2,13 @@ import { defineConfig } from 'vitest/config';
 
 export default defineConfig({
   test: {
+    // A late console.* must not redden a green suite (#10374): vitest's worker
+    // forwards console output over RPC and discards the promise, and a write
+    // landing after teardown's rpcDone() snapshot is rejected into an unhandled
+    // error — a fully green run that exits 1. Disarming removes the mechanism.
+    // Mechanism + measured costs: examples/app-showcase/vitest.config.ts.
+    // Enforced repo-wide by scripts/check-console-intercept-disarm.mjs.
+    disableConsoleIntercept: true,
     // The only DOM environment in the workspace, and deliberately so (#4682):
     // these hooks are exercised through React's real renderer, so `document`
     // and friends must exist. Every other package here runs `environment:

packages/client/vitest.config.ts

@@ -3,6 +3,13 @@ import path from 'path';
 
 export default defineConfig({
   test: {
+    // A late console.* must not redden a green suite (#10374): vitest's worker
+    // forwards console output over RPC and discards the promise, and a write
+    // landing after teardown's rpcDone() snapshot is rejected into an unhandled
+    // error — a fully green run that exits 1. Disarming removes the mechanism.
+    // Mechanism + measured costs: examples/app-showcase/vitest.config.ts.
+    // Enforced repo-wide by scripts/check-console-intercept-disarm.mjs.
+    disableConsoleIntercept: true,
     // Exclude integration tests that require a running server
     exclude: [
       '**/node_modules/**',

packages/cloud-connection/vitest.config.ts

@@ -4,6 +4,15 @@ import { defineConfig } from 'vitest/config';
 import path from 'node:path';
 
 export default defineConfig({
+  test: {
+    // A late console.* must not redden a green suite (#10374): vitest's worker
+    // forwards console output over RPC and discards the promise, and a write
+    // landing after teardown's rpcDone() snapshot is rejected into an unhandled
+    // error — a fully green run that exits 1. Disarming removes the mechanism.
+    // Mechanism + measured costs: examples/app-showcase/vitest.config.ts.
+    // Enforced repo-wide by scripts/check-console-intercept-disarm.mjs.
+    disableConsoleIntercept: true,
+  },
   resolve: {
     // One entry, for `canonical-expression-envelopes.test.ts` (#11480) — the
     // only suite here that imports `@objectstack/lint` as a VALUE. It runs the

packages/connectors/connector-mcp/vitest.config.ts

@@ -0,0 +1,19 @@
+// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.
+
+// This config exists for exactly one setting; everything else stays on
+// vitest's defaults, deliberately — a key added here re-specifies behaviour
+// for every test file in the package (packages/cli/vitest.config.ts's header
+// records the incident that taught that).
+import { defineConfig } from 'vitest/config';
+
+export default defineConfig({
+  test: {
+    // A late console.* must not redden a green suite (#10374): vitest's worker
+    // forwards console output over RPC and discards the promise, and a write
+    // landing after teardown's rpcDone() snapshot is rejected into an unhandled
+    // error — a fully green run that exits 1. Disarming removes the mechanism.
+    // Mechanism + measured costs: examples/app-showcase/vitest.config.ts.
+    // Enforced repo-wide by scripts/check-console-intercept-disarm.mjs.
+    disableConsoleIntercept: true,
+  },
+});