@platform-mesh/portal-server-lib 0.11.17 → 0.12.0

package/AGENTS.md

@@ -36,7 +36,7 @@ npm run test:cov           # alias for npm run test
 npm run test:watch         # run tests in watch mode (no coverage)
 ```
 
-Tests use **Jest** with `ts-jest` (ESM preset). Coverage is collected and enforced at:
+Tests use **Vitest** (`vitest.config.ts`). Coverage is collected with the V8 provider and enforced at:
 
 - **Branches: 75%**
 - **Functions: 89%**
@@ -87,7 +87,7 @@ portal-server-lib/
 │           ├── account-hierarchy-resolver.ts   # account path / entity type manipulation
 │           ├── domain.ts                        # getOrganization, getDiscoveryEndpoint
 │           └── replace-string-deep.ts           # deep string replacement utility
-├── jest.config.ts
+├── vitest.config.ts
 ├── nest-cli.json
 ├── tsconfig.json
 └── package.json

package/CONTRIBUTING.md

@@ -27,7 +27,7 @@ The build artifacts will be stored in the `dist/` directory.
 
 > **NOTE:** You should always add tests, if you are adding code to our repository.
 
-Run `npm test` to execute the unit tests via [Jest](https://jestjs.io/) in the root directory of the repository.
+Run `npm test` to execute the unit tests via [Vitest](https://vitest.dev/) in the root directory of the repository.
 
 ## Issues
 

package/README.md

@@ -19,7 +19,7 @@ $ npm run build
 ```
 
 ## Running unit tests
-Run `npm run test` to execute the unit tests via Jest
+Run `npm run test` to execute the unit tests via Vitest
 
 ## Requirements
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@platform-mesh/portal-server-lib",
-  "version": "0.11.17",
+  "version": "0.12.0",
   "author": "Platform Mesh",
   "license": "Apache-2.0",
   "publishConfig": {
@@ -31,19 +31,19 @@
     "build:watch": "mkdirp dist && nodemon --ignore dist --ext js,yml,yaml,ts,html,css,scss,json,md --exec \"rimraf dist && npm run build && yalc publish --push --sig\"",
     "format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\" \"libs/**/*.ts\"",
     "lint": "eslint \"{src,apps,libs,test}/**/*.ts\" --fix",
-    "test": "jest",
-    "test:watch": "jest --watch",
-    "test:cov": "jest --coverage",
-    "test:debug": "node --inspect-brk -r tsconfig-paths/register -r ts-node/register node_modules/.bin/jest --runInBand"
+    "test": "vitest run",
+    "test:watch": "vitest --coverage.enabled=false",
+    "test:cov": "vitest run",
+    "test:debug": "vitest run --inspect-brk --no-file-parallelism --coverage.enabled=false"
   },
   "peerDependencies": {
     "@kubernetes/client-node": "^2.0.0",
-    "@nestjs/axios": "^4.0.1",
-    "@nestjs/common": "^11.1.17",
-    "@nestjs/core": "^11.1.9",
-    "@nestjs/platform-express": "^11.1.18",
-    "@nestjs/serve-static": "^5.0.5",
-    "@openmfp/portal-server-lib": "^0.163.7 || ^0.164.0 || ^0.165.1",
+    "@nestjs/axios": "^4.0.1 || ^12.0.0",
+    "@nestjs/common": "^11.1.17 || ^12.0.0",
+    "@nestjs/core": "^11.1.9 || ^12.0.0",
+    "@nestjs/platform-express": "^11.1.18 || ^12.0.0",
+    "@nestjs/serve-static": "^5.0.5 || ^12.0.0",
+    "@openmfp/portal-server-lib": "^0.163.7 || ^0.164.0 || ^0.165.1 || ^0.166.0",
     "axios": "^1.15.0",
     "cookie-parser": "^1.4.7",
     "express": "^5.2.1",
@@ -53,31 +53,28 @@
   "devDependencies": {
     "@eslint/js": "10.0.1",
     "@kubernetes/client-node": "2.0.0",
-    "@nestjs/cli": "11.0.24",
-    "@nestjs/testing": "11.1.28",
+    "@nestjs/cli": "12.0.11",
+    "@nestjs/testing": "12.3.3",
     "@openmfp/config-prettier": "0.9.3",
-    "@types/jest": "30.0.0",
     "@types/node": "26.6.5",
     "@types/supertest": "7.2.1",
     "eslint": "10.8.0",
     "eslint-config-prettier": "10.1.8",
     "globals": "17.9.0",
-    "jest": "30.4.2",
-    "jest-junit": "16.0.0",
-    "jest-mock-extended": "4.0.1",
     "mkdirp": "3.0.1",
-    "nock": "14.0.17",
+    "nock": "15.0.5",
     "nodemon": "3.1.14",
     "prettier": "3.9.6",
     "rimraf": "6.1.3",
     "supertest": "7.2.2",
-    "ts-jest": "29.4.12",
     "ts-loader": "9.6.2",
-    "ts-node": "10.9.2",
     "tsconfig-paths": "4.2.0",
     "typescript": "5.9.3",
     "typescript-eslint": "8.65.0",
-    "uri-js": "4.4.1"
+    "uri-js": "4.4.1",
+    "vitest": "5.1.0",
+    "@vitest/coverage-v8": "5.1.0",
+    "vitest-mock-extended": "5.1.1"
   },
   "type": "module",
   "overrides": {

package/src/portal-options/auth-config-provider.spec.ts

@@ -5,37 +5,38 @@ import * as domainUtils from './utils/domain.js';
 import { HttpException, HttpStatus } from '@nestjs/common';
 import { DiscoveryService } from '@openmfp/portal-server-lib';
 import type { Request } from 'express';
-import { mock } from 'jest-mock-extended';
+import { mock } from 'vitest-mock-extended';
+import type { Mocked } from 'vitest';
 
-jest.mock('@kubernetes/client-node', () => {
-  const mockReadNamespacedSecret = jest.fn();
+vi.mock('@kubernetes/client-node', () => {
+  const mockReadNamespacedSecret = vi.fn();
   class KubeConfig {
-    loadFromDefault = jest.fn();
-    loadFromFile = jest.fn();
-    getCurrentCluster = jest.fn().mockReturnValue({
+    loadFromDefault = vi.fn();
+    loadFromFile = vi.fn();
+    getCurrentCluster = vi.fn().mockReturnValue({
       server: 'https://k8s.example.com',
       name: 'test-cluster',
     });
-    makeApiClient = jest.fn().mockReturnValue({
+    makeApiClient = vi.fn().mockReturnValue({
       readNamespacedSecret: mockReadNamespacedSecret,
     });
-    addUser = jest.fn();
-    addContext = jest.fn();
-    setCurrentContext = jest.fn();
+    addUser = vi.fn();
+    addContext = vi.fn();
+    setCurrentContext = vi.fn();
   }
   class CoreV1Api {}
   class CustomObjectsApi {}
   return { KubeConfig, CoreV1Api, CustomObjectsApi, mockReadNamespacedSecret };
 });
 
-jest.mock('@kubernetes/client-node/dist/gen/middleware.js', () => ({
+vi.mock('@kubernetes/client-node/dist/gen/middleware.js', () => ({
   PromiseMiddlewareWrapper: class {},
 }));
 
 describe('PMAuthConfigProvider', () => {
   let provider: PMAuthConfigProvider;
-  let discoveryService: jest.Mocked<DiscoveryService>;
-  let kcpKubernetesService: jest.Mocked<KcpKubernetesService>;
+  let discoveryService: Mocked<DiscoveryService>;
+  let kcpKubernetesService: Mocked<KcpKubernetesService>;
   let mockRequest: Request;
 
   const mockOidcDiscovery = {
@@ -58,18 +59,18 @@ describe('PMAuthConfigProvider', () => {
       TOKEN_URL_DEFAULT: 'https://default-auth.com/token',
     };
 
-    jest
+    vi
       .spyOn(domainUtils, 'getDiscoveryEndpoint')
       .mockReturnValue(
         'https://oidc.example.com/.well-known/openid-configuration',
       );
-    jest.spyOn(domainUtils, 'getOrganization').mockReturnValue('org1');
+    vi.spyOn(domainUtils, 'getOrganization').mockReturnValue('org1');
 
     discoveryService.getOIDC.mockResolvedValue(mockOidcDiscovery);
   });
 
   afterEach(() => {
-    jest.clearAllMocks();
+    vi.clearAllMocks();
   });
 
   describe('getAuthConfig', () => {
@@ -118,7 +119,7 @@ describe('PMAuthConfigProvider', () => {
     });
 
     it('should handle welcome organization', async () => {
-      jest.spyOn(domainUtils, 'getOrganization').mockReturnValue('welcome');
+      vi.spyOn(domainUtils, 'getOrganization').mockReturnValue('welcome');
 
       const mockIdpConfig: IdentityProviderConfiguration = {
         status: {
@@ -300,7 +301,7 @@ describe('PMAuthConfigProvider', () => {
 
       try {
         await provider.getAuthConfig(mockRequest);
-        fail('Should have thrown HttpException');
+        expect.fail('Should have thrown HttpException');
       } catch (error) {
         expect(error).toBeInstanceOf(HttpException);
         const response = (error as HttpException).getResponse() as any;
@@ -481,7 +482,7 @@ describe('PMAuthConfigProvider', () => {
 
       try {
         await provider.getAuthConfig(mockRequest);
-        fail('Should have thrown');
+        expect.fail('Should have thrown');
       } catch (error) {
         const response = (error as HttpException).getResponse() as any;
         expect(response.error).toContain('has client secret: false');

package/src/portal-options/logout-callback.service.spec.ts

@@ -8,6 +8,7 @@ import {
 } from '@openmfp/portal-server-lib';
 import { Request, Response } from 'express';
 import { of, throwError } from 'rxjs';
+import type { Mock } from 'vitest';
 
 describe('PMLogoutService', () => {
   let service: PMLogoutService;
@@ -21,15 +22,15 @@ describe('PMLogoutService', () => {
         PMLogoutService,
         {
           provide: HttpService,
-          useValue: { post: jest.fn() },
+          useValue: { post: vi.fn() },
         },
         {
           provide: AUTH_CONFIG_INJECTION_TOKEN,
-          useValue: { getAuthConfig: jest.fn() },
+          useValue: { getAuthConfig: vi.fn() },
         },
         {
           provide: CookiesService,
-          useValue: { getAuthCookie: jest.fn() },
+          useValue: { getAuthCookie: vi.fn() },
         },
         {
           provide: 'AUTH_CONFIG_INJECTION_TOKEN',
@@ -48,15 +49,15 @@ describe('PMLogoutService', () => {
     const mockRequest = {} as Request;
     const mockResponse = {} as Response;
 
-    (authConfigService.getAuthConfig as jest.Mock).mockResolvedValue({
+    (authConfigService.getAuthConfig as Mock).mockResolvedValue({
       clientId: 'client-id',
       clientSecret: 'secret',
       endSessionUrl: 'https://keycloak/logout',
     });
-    (cookiesService.getAuthCookie as jest.Mock).mockReturnValue(
+    (cookiesService.getAuthCookie as Mock).mockReturnValue(
       'refresh-token',
     );
-    (httpService.post as jest.Mock).mockReturnValue(of({ data: {} }));
+    (httpService.post as Mock).mockReturnValue(of({ data: {} }));
 
     await service.handleLogout(mockRequest, mockResponse);
 
@@ -74,19 +75,19 @@ describe('PMLogoutService', () => {
     const mockRequest = {} as Request;
     const mockResponse = {} as Response;
 
-    (authConfigService.getAuthConfig as jest.Mock).mockResolvedValue({
+    (authConfigService.getAuthConfig as Mock).mockResolvedValue({
       clientId: 'client-id',
       clientSecret: 'secret',
       endSessionUrl: 'https://keycloak/logout',
     });
-    (cookiesService.getAuthCookie as jest.Mock).mockReturnValue(
+    (cookiesService.getAuthCookie as Mock).mockReturnValue(
       'refresh-token',
     );
-    (httpService.post as jest.Mock).mockReturnValue(of({ data: {} }));
+    (httpService.post as Mock).mockReturnValue(of({ data: {} }));
 
     await service.handleLogout(mockRequest, mockResponse);
 
-    const body = (httpService.post as jest.Mock).mock
+    const body = (httpService.post as Mock).mock
       .calls[0][1] as URLSearchParams;
     expect(body.get('refresh_token')).toBe('refresh-token');
     expect(body.get('client_secret')).toBeNull();
@@ -102,15 +103,15 @@ describe('PMLogoutService', () => {
     } as unknown as Request;
     const mockResponse = {} as Response;
 
-    (authConfigService.getAuthConfig as jest.Mock).mockResolvedValue({
+    (authConfigService.getAuthConfig as Mock).mockResolvedValue({
       clientId: 'client-id',
       clientSecret: 'secret',
       endSessionUrl: 'https://keycloak/logout',
     });
-    (cookiesService.getAuthCookie as jest.Mock).mockReturnValue(
+    (cookiesService.getAuthCookie as Mock).mockReturnValue(
       'refresh-token',
     );
-    (httpService.post as jest.Mock).mockReturnValue(
+    (httpService.post as Mock).mockReturnValue(
       throwError(() => new Error('Network error')),
     );
 

package/src/portal-options/pm-portal-context.service.spec.ts

@@ -3,38 +3,39 @@ import { KcpKubernetesService } from './services/kcp-k8s.service.js';
 import { getOrganization } from './utils/domain.js';
 import { Test, TestingModule } from '@nestjs/testing';
 import { Request } from 'express';
-import { mock } from 'jest-mock-extended';
+import { mock } from 'vitest-mock-extended';
 import process from 'node:process';
+import type { Mocked } from 'vitest';
 
-jest.mock('@kubernetes/client-node', () => {
+vi.mock('@kubernetes/client-node', () => {
   class KubeConfig {
-    loadFromDefault = jest.fn();
-    loadFromFile = jest.fn();
-    getCurrentCluster = jest.fn().mockReturnValue({
+    loadFromDefault = vi.fn();
+    loadFromFile = vi.fn();
+    getCurrentCluster = vi.fn().mockReturnValue({
       server: 'https://k8s.example.com/base',
       name: 'test-cluster',
     });
-    makeApiClient = jest.fn();
-    addUser = jest.fn();
-    addContext = jest.fn();
-    setCurrentContext = jest.fn();
+    makeApiClient = vi.fn();
+    addUser = vi.fn();
+    addContext = vi.fn();
+    setCurrentContext = vi.fn();
   }
   class CustomObjectsApi {}
   return { KubeConfig, CustomObjectsApi };
 });
 
-jest.mock('./utils/domain.js', () => ({
-  getOrganization: jest.fn(),
+vi.mock('./utils/domain.js', () => ({
+  getOrganization: vi.fn(),
 }));
 
-jest.mock('@kubernetes/client-node/dist/gen/middleware.js', () => ({
+vi.mock('@kubernetes/client-node/dist/gen/middleware.js', () => ({
   PromiseMiddlewareWrapper: class {},
 }));
 
 describe('PMPortalContextService', () => {
   let service: PMPortalContextService;
-  let kcpKubernetesServiceMock: jest.Mocked<KcpKubernetesService>;
-  const mockedGetDomainAndOrganization = jest.mocked(getOrganization);
+  let kcpKubernetesServiceMock: Mocked<KcpKubernetesService>;
+  const mockedGetDomainAndOrganization = vi.mocked(getOrganization);
   let mockRequest: any;
 
   beforeEach(async () => {
@@ -54,11 +55,11 @@ describe('PMPortalContextService', () => {
       hostname: 'test.example.com',
     };
 
-    jest.spyOn(console, 'log').mockImplementation();
+    vi.spyOn(console, 'log').mockImplementation(() => {});
   });
 
   afterEach(() => {
-    jest.restoreAllMocks();
+    vi.restoreAllMocks();
   });
 
   it('should be defined', () => {

package/src/portal-options/pm-request-context-provider.spec.ts

@@ -2,39 +2,40 @@ import { PMRequestContextProvider } from './pm-request-context-provider.js';
 import { getOrganization } from './utils/domain.js';
 import { PortalContextProviderImpl } from '@openmfp/portal-server-lib';
 import type { Request } from 'express';
-import { mock } from 'jest-mock-extended';
+import { mock } from 'vitest-mock-extended';
+import type { Mock } from 'vitest';
 
-jest.mock('@kubernetes/client-node', () => {
+vi.mock('@kubernetes/client-node', () => {
   class KubeConfig {
-    loadFromDefault = jest.fn();
-    loadFromFile = jest.fn();
-    getCurrentCluster = jest.fn().mockReturnValue({
+    loadFromDefault = vi.fn();
+    loadFromFile = vi.fn();
+    getCurrentCluster = vi.fn().mockReturnValue({
       server: 'https://k8s.example.com/base',
       name: 'test-cluster',
     });
-    makeApiClient = jest.fn();
-    addUser = jest.fn();
-    addContext = jest.fn();
-    setCurrentContext = jest.fn();
+    makeApiClient = vi.fn();
+    addUser = vi.fn();
+    addContext = vi.fn();
+    setCurrentContext = vi.fn();
   }
   class CustomObjectsApi {}
   return { KubeConfig, CustomObjectsApi };
 });
 
-jest.mock('./utils/domain.js', () => ({
-  getOrganization: jest.fn(),
+vi.mock('./utils/domain.js', () => ({
+  getOrganization: vi.fn(),
 }));
 
 describe('PMRequestContextProvider', () => {
   let provider: PMRequestContextProvider;
   const portalContextService = mock<PortalContextProviderImpl>();
-  const mockedGetOrganization = jest.mocked(getOrganization);
+  const mockedGetOrganization = vi.mocked(getOrganization);
 
   beforeEach(() => {
-    jest.resetAllMocks();
+    vi.resetAllMocks();
     mockedGetOrganization.mockReturnValue('org1');
     (
-      portalContextService.getContextValues as unknown as jest.Mock
+      portalContextService.getContextValues as unknown as Mock
     ).mockResolvedValue({
       crdGatewayApiUrl: 'http://gateway/graphql',
       other: 'x',

package/src/portal-options/service-providers/content-configuration-service-providers.service.spec.ts

@@ -3,12 +3,15 @@ import { PermissionsProxyService } from '../services/permissions/permissions-pro
 import { ContentConfigurationServiceProvidersService } from './content-configuration-service-providers.service.js';
 import { welcomeNodeConfig } from './models/welcome-node-config.js';
 import { GraphQLClient } from 'graphql-request';
+import type { Mock, Mocked } from 'vitest';
 
-jest.mock('graphql-request', () => {
+vi.mock('graphql-request', () => {
   return {
-    GraphQLClient: jest.fn().mockImplementation(() => ({
-      request: jest.fn(),
-    })),
+    GraphQLClient: vi.fn().mockImplementation(function () {
+      return {
+        request: vi.fn(),
+      };
+    }),
     gql(query: TemplateStringsArray) {
       return query[0];
     },
@@ -17,19 +20,21 @@ jest.mock('graphql-request', () => {
 
 describe('ContentConfigurationServiceProvidersService', () => {
   let service: ContentConfigurationServiceProvidersService;
-  let mockClient: jest.Mocked<GraphQLClient>;
+  let mockClient: Mocked<GraphQLClient>;
   let context: RequestContext;
-  let permissionsProxyService: jest.Mocked<PermissionsProxyService>;
+  let permissionsProxyService: Mocked<PermissionsProxyService>;
 
   beforeEach(() => {
     permissionsProxyService = {
-      resolvePermissions: jest.fn().mockResolvedValue([]),
-    } as unknown as jest.Mocked<PermissionsProxyService>;
+      resolvePermissions: vi.fn().mockResolvedValue([]),
+    } as unknown as Mocked<PermissionsProxyService>;
     service = new ContentConfigurationServiceProvidersService(
       permissionsProxyService,
     );
     mockClient = new GraphQLClient('') as any;
-    (GraphQLClient as jest.Mock).mockReturnValue(mockClient);
+    (GraphQLClient as Mock).mockImplementation(function () {
+      return mockClient;
+    });
     context = {
       isSubDomain: true,
       organization: 'org1',
@@ -46,7 +51,7 @@ describe('ContentConfigurationServiceProvidersService', () => {
   });
 
   it.each([{ entities: [] }, { entities: ['core_platform-mesh_io_account'] }])(
-    'normalizes root and entity configuration through the GraphQL provider for %p',
+    'normalizes root and entity configuration through the GraphQL provider for %o',
     async ({ entities }) => {
       const config = {
         name: 'accounts',

package/src/portal-options/service-providers/kubernetes-service-providers.service.spec.ts

@@ -5,37 +5,38 @@ import { KubernetesServiceProvidersService } from './kubernetes-service-provider
 import { welcomeNodeConfig } from './models/welcome-node-config.js';
 import { Test, TestingModule } from '@nestjs/testing';
 import { ContentConfiguration } from '@openmfp/portal-server-lib';
-import { mock } from 'jest-mock-extended';
+import { mock } from 'vitest-mock-extended';
+import type { Mocked } from 'vitest';
 
-const listClusterCustomObject = jest.fn();
+const listClusterCustomObject = vi.fn();
 
-jest.mock('@kubernetes/client-node', () => {
+vi.mock('@kubernetes/client-node', () => {
   class KubeConfig {
-    loadFromDefault = jest.fn();
-    loadFromFile = jest.fn();
-    getCurrentCluster = jest.fn().mockReturnValue({
+    loadFromDefault = vi.fn();
+    loadFromFile = vi.fn();
+    getCurrentCluster = vi.fn().mockReturnValue({
       server: 'https://k8s.example.com/base',
       name: 'test-cluster',
     });
-    makeApiClient = jest.fn().mockImplementation(() => ({
+    makeApiClient = vi.fn().mockImplementation(() => ({
       listClusterCustomObject,
     }));
-    addUser = jest.fn();
-    addContext = jest.fn();
-    setCurrentContext = jest.fn();
+    addUser = vi.fn();
+    addContext = vi.fn();
+    setCurrentContext = vi.fn();
   }
   class CustomObjectsApi {}
   return { KubeConfig, CustomObjectsApi };
 });
 
-jest.mock('@kubernetes/client-node/dist/gen/middleware.js', () => ({
+vi.mock('@kubernetes/client-node/dist/gen/middleware.js', () => ({
   PromiseMiddlewareWrapper: class {},
 }));
 
 describe('KubernetesServiceProvidersService', () => {
   let service: KubernetesServiceProvidersService;
-  let kcpKubernetesServiceMock: jest.Mocked<KcpKubernetesService>;
-  let permissionsProxyServiceMock: jest.Mocked<PermissionsProxyService>;
+  let kcpKubernetesServiceMock: Mocked<KcpKubernetesService>;
+  let permissionsProxyServiceMock: Mocked<PermissionsProxyService>;
 
   const mockToken = 'test-token-123';
   const mockEntities = ['test-entity'];
@@ -47,8 +48,8 @@ describe('KubernetesServiceProvidersService', () => {
   beforeEach(async () => {
     kcpKubernetesServiceMock = mock<KcpKubernetesService>();
     permissionsProxyServiceMock = {
-      resolvePermissions: jest.fn().mockResolvedValue([]),
-    } as unknown as jest.Mocked<PermissionsProxyService>;
+      resolvePermissions: vi.fn().mockResolvedValue([]),
+    } as unknown as Mocked<PermissionsProxyService>;
 
     const module: TestingModule = await Test.createTestingModule({
       providers: [
@@ -71,7 +72,7 @@ describe('KubernetesServiceProvidersService', () => {
 
   describe('getServiceProviders', () => {
     it.each([{ entities: [] }, { entities: ['core_platform-mesh_io_account'] }])(
-      'normalizes built-in and provider bundle nodes for entity selection %p',
+      'normalizes built-in and provider bundle nodes for entity selection %o',
       async ({ entities }) => {
         const portalOrigin = 'https://portal.example.test';
         const config = {
@@ -391,9 +392,9 @@ describe('KubernetesServiceProvidersService', () => {
         .mockRejectedValueOnce(error)
         .mockResolvedValueOnce(mockResponse as any);
 
-      jest.spyOn(console, 'error').mockImplementation();
-      jest.spyOn(console, 'log').mockImplementation();
-      jest.spyOn(global, 'setTimeout');
+      vi.spyOn(console, 'error').mockImplementation(() => {});
+      vi.spyOn(console, 'log').mockImplementation(() => {});
+      vi.spyOn(global, 'setTimeout');
 
       await service.getServiceProviders(mockToken, mockEntities, mockContext);
 
@@ -402,7 +403,7 @@ describe('KubernetesServiceProvidersService', () => {
       ).toHaveBeenCalledTimes(2);
       expect(setTimeout).toHaveBeenCalledWith(expect.any(Function), 1000);
 
-      jest.restoreAllMocks();
+      vi.restoreAllMocks();
     });
 
     it('should retry once on statusCode 429 error', async () => {
@@ -413,8 +414,8 @@ describe('KubernetesServiceProvidersService', () => {
         .mockRejectedValueOnce(error)
         .mockResolvedValueOnce(mockResponse as any);
 
-      jest.spyOn(console, 'error').mockImplementation();
-      jest.spyOn(console, 'log').mockImplementation();
+      vi.spyOn(console, 'error').mockImplementation(() => {});
+      vi.spyOn(console, 'log').mockImplementation(() => {});
 
       await service.getServiceProviders(mockToken, mockEntities, mockContext);
 
@@ -422,7 +423,7 @@ describe('KubernetesServiceProvidersService', () => {
         kcpKubernetesServiceMock.listClusterCustomObjectInKcpVirtualWorkspace,
       ).toHaveBeenCalledTimes(2);
 
-      jest.restoreAllMocks();
+      vi.restoreAllMocks();
     });
 
     it('should log error on kubernetes service failure', async () => {
@@ -431,7 +432,9 @@ describe('KubernetesServiceProvidersService', () => {
         error,
       );
 
-      const consoleSpy = jest.spyOn(console, 'error').mockImplementation();
+      const consoleSpy = vi
+        .spyOn(console, 'error')
+        .mockImplementation(() => {});
 
       await service.getServiceProviders(mockToken, mockEntities, mockContext);
 
@@ -446,7 +449,7 @@ describe('KubernetesServiceProvidersService', () => {
         error,
       );
 
-      jest.spyOn(console, 'error').mockImplementation();
+      vi.spyOn(console, 'error').mockImplementation(() => {});
 
       await service.getServiceProviders(mockToken, mockEntities, mockContext);
 
@@ -454,7 +457,7 @@ describe('KubernetesServiceProvidersService', () => {
         kcpKubernetesServiceMock.listClusterCustomObjectInKcpVirtualWorkspace,
       ).toHaveBeenCalledTimes(1);
 
-      jest.restoreAllMocks();
+      vi.restoreAllMocks();
     });
 
     it('should return result after successful retry', async () => {
@@ -477,8 +480,8 @@ describe('KubernetesServiceProvidersService', () => {
         .mockRejectedValueOnce(error)
         .mockResolvedValueOnce(mockResponse as any);
 
-      jest.spyOn(console, 'error').mockImplementation();
-      jest.spyOn(console, 'log').mockImplementation();
+      vi.spyOn(console, 'error').mockImplementation(() => {});
+      vi.spyOn(console, 'log').mockImplementation(() => {});
 
       const result = await service.getServiceProviders(
         mockToken,
@@ -493,7 +496,7 @@ describe('KubernetesServiceProvidersService', () => {
         'https://test.com',
       );
 
-      jest.restoreAllMocks();
+      vi.restoreAllMocks();
     });
   });
 

package/src/portal-options/services/kcp-k8s.service.spec.ts

@@ -2,37 +2,43 @@ import { K8sRequestContext, K8sResourceDescriptor } from '../models/k8s.js';
 import { KcpKubernetesService } from './kcp-k8s.service.js';
 import type { Request } from 'express';
 
-const mockListClusterCustomObject = jest.fn();
-const mockReadNamespacedSecret = jest.fn();
-const mockMakeApiClient = jest.fn();
-const mockGetCurrentCluster = jest.fn();
-const mockLoadFromFile = jest.fn();
-const mockAddUser = jest.fn();
-const mockAddContext = jest.fn();
-const mockSetCurrentContext = jest.fn();
-
-jest.mock('@kubernetes/client-node', () => ({
-  CustomObjectsApi: jest.fn().mockImplementation(() => ({
-    listClusterCustomObject: mockListClusterCustomObject,
-  })),
-  CoreV1Api: jest.fn().mockImplementation(() => ({
-    readNamespacedSecret: mockReadNamespacedSecret,
-  })),
-  KubeConfig: jest.fn().mockImplementation(() => ({
-    loadFromFile: mockLoadFromFile,
-    addUser: mockAddUser,
-    addContext: mockAddContext,
-    setCurrentContext: mockSetCurrentContext,
-    getCurrentCluster: mockGetCurrentCluster,
-    makeApiClient: mockMakeApiClient,
-  })),
+const mockListClusterCustomObject = vi.fn();
+const mockReadNamespacedSecret = vi.fn();
+const mockMakeApiClient = vi.fn();
+const mockGetCurrentCluster = vi.fn();
+const mockLoadFromFile = vi.fn();
+const mockAddUser = vi.fn();
+const mockAddContext = vi.fn();
+const mockSetCurrentContext = vi.fn();
+
+vi.mock('@kubernetes/client-node', () => ({
+  CustomObjectsApi: vi.fn().mockImplementation(function () {
+    return {
+      listClusterCustomObject: mockListClusterCustomObject,
+    };
+  }),
+  CoreV1Api: vi.fn().mockImplementation(function () {
+    return {
+      readNamespacedSecret: mockReadNamespacedSecret,
+    };
+  }),
+  KubeConfig: vi.fn().mockImplementation(function () {
+    return {
+      loadFromFile: mockLoadFromFile,
+      addUser: mockAddUser,
+      addContext: mockAddContext,
+      setCurrentContext: mockSetCurrentContext,
+      getCurrentCluster: mockGetCurrentCluster,
+      makeApiClient: mockMakeApiClient,
+    };
+  }),
 }));
 
-jest.mock('../utils/domain.js', () => ({
-  getOrganization: jest.fn(() => 'org-1'),
+vi.mock('../utils/domain.js', () => ({
+  getOrganization: vi.fn(() => 'org-1'),
 }));
 
-jest.mock('@kubernetes/client-node/dist/gen/middleware.js', () => ({
+vi.mock('@kubernetes/client-node/dist/gen/middleware.js', () => ({
   PromiseMiddlewareWrapper: class {
     constructor(public options: any) {}
   },
@@ -42,7 +48,7 @@ describe('KcpKubernetesService', () => {
   const OLD_ENV = process.env;
 
   beforeEach(() => {
-    jest.clearAllMocks();
+    vi.clearAllMocks();
     process.env = {
       ...OLD_ENV,
       KUBECONFIG_KCP: '/tmp/kcp.kubeconfig',
@@ -367,7 +373,7 @@ describe('KcpKubernetesService', () => {
       mockListClusterCustomObject.mockImplementation(async (_gvr, options) => {
         const middleware = options.middleware[0];
         const mockContext = {
-          setUrl: jest.fn(),
+          setUrl: vi.fn(),
         };
         await middleware.options.pre(mockContext);
         postResult = await middleware.options.post(mockContext);
@@ -397,7 +403,7 @@ describe('KcpKubernetesService', () => {
         async (gvrParam, options) => {
           const middleware = options.middleware[0];
           const mockContext = {
-            setUrl: jest.fn(),
+            setUrl: vi.fn(),
           };
           capturedContext = mockContext;
           await middleware.options.pre(mockContext);
@@ -429,7 +435,7 @@ describe('KcpKubernetesService', () => {
         async (gvrParam, options) => {
           const middleware = options.middleware[0];
           const mockContext = {
-            setUrl: jest.fn(),
+            setUrl: vi.fn(),
           };
           capturedContext = mockContext;
           await middleware.options.pre(mockContext);
@@ -490,8 +496,8 @@ describe('KcpKubernetesService', () => {
         async (gvrParam, options) => {
           const middleware = options.middleware[0];
           const mockContext = {
-            setUrl: jest.fn(),
-            setHeaderParam: jest.fn(),
+            setUrl: vi.fn(),
+            setHeaderParam: vi.fn(),
           };
           capturedContext = mockContext;
           await middleware.options.pre(mockContext);
@@ -529,8 +535,8 @@ describe('KcpKubernetesService', () => {
         async (gvrParam, options) => {
           const middleware = options.middleware[0];
           const mockContext = {
-            setUrl: jest.fn(),
-            setHeaderParam: jest.fn(),
+            setUrl: vi.fn(),
+            setHeaderParam: vi.fn(),
           };
           capturedContext = mockContext;
           await middleware.options.pre(mockContext);
@@ -604,7 +610,7 @@ describe('KcpKubernetesService', () => {
       mockReadNamespacedSecret.mockImplementation(async (params, options) => {
         const middleware = options.middleware[0];
         const mockContext = {
-          setUrl: jest.fn(),
+          setUrl: vi.fn(),
         };
         capturedContext = mockContext;
         await middleware.options.pre(mockContext);
@@ -630,7 +636,7 @@ describe('KcpKubernetesService', () => {
       mockReadNamespacedSecret.mockImplementation(async (_params, options) => {
         const middleware = options.middleware[0];
         const mockContext = {
-          setUrl: jest.fn(),
+          setUrl: vi.fn(),
         };
         await middleware.options.pre(mockContext);
         postResult = await middleware.options.post(mockContext);

package/src/portal-options/services/permissions/adapters/authz-webhook.service.spec.ts

@@ -6,6 +6,7 @@ import {
   SubjectAccessReview,
 } from '../models/permissions.model.js';
 import { AuthzWebhookService } from './authz-webhook.service.js';
+import type { Mock } from 'vitest';
 
 // Build a valid JWT token with the given payload
 function makeJwt(payload: Record<string, unknown>): string {
@@ -21,7 +22,7 @@ const WEBHOOK_URL = 'https://authz.example.com';
 const BATCH_URL = `${WEBHOOK_URL}/batch-authz`;
 
 // The posted body is the SubjectAccessReview[] array itself.
-function postedItems(post: jest.Mock): SubjectAccessReview[] {
+function postedItems(post: Mock): SubjectAccessReview[] {
   return post.mock.calls[0][1] as SubjectAccessReview[];
 }
 
@@ -73,14 +74,14 @@ function makeInstanceRequest(
 
 describe('AuthzWebhookService', () => {
   let service: AuthzWebhookService;
-  let httpService: { post: jest.Mock };
+  let httpService: { post: Mock };
   const OLD_ENV = process.env;
 
   beforeEach(async () => {
     process.env = { ...OLD_ENV };
     process.env['OPENMFP_PORTAL_CONTEXT_AUTHZ_WEBHOOK_URL'] = WEBHOOK_URL;
 
-    httpService = { post: jest.fn() };
+    httpService = { post: vi.fn() };
 
     const module: TestingModule = await Test.createTestingModule({
       providers: [

package/src/portal-options/services/permissions/permissions-proxy.service.spec.ts

@@ -1,5 +1,5 @@
 import { ContentConfiguration } from '@openmfp/portal-server-lib';
-import { mock } from 'jest-mock-extended';
+import { mock } from 'vitest-mock-extended';
 import { AuthzWebhookService } from './adapters/authz-webhook.service.js';
 import {
   AuthorizationRequest,
@@ -7,6 +7,7 @@ import {
   PermissionsDefinition,
 } from './models/permissions.model.js';
 import { PermissionsProxyService } from './permissions-proxy.service.js';
+import type { Mocked } from 'vitest';
 
 function makeCC(
   nodes: ContentConfiguration['luigiConfigFragment']['data']['nodes'] = [],
@@ -66,7 +67,7 @@ function makeAuthzRequest(
 }
 
 describe('PermissionsProxyService', () => {
-  let authzWebhook: jest.Mocked<AuthzWebhookService>;
+  let authzWebhook: Mocked<AuthzWebhookService>;
   let svc: PermissionsProxyService;
 
   beforeEach(() => {

package/src/portal-options/services/permissions/permissions.controller.spec.ts

@@ -1,10 +1,11 @@
 import { UnauthorizedException } from '@nestjs/common';
 import { HeaderParserService } from '@openmfp/portal-server-lib';
 import { Test, TestingModule } from '@nestjs/testing';
-import { mock } from 'jest-mock-extended';
+import { mock } from 'vitest-mock-extended';
 import { PermissionsController } from './permissions.controller.js';
 import { PermissionsProxyService } from './permissions-proxy.service.js';
 import { AuthorizationRequest, Permission } from './models/permissions.model.js';
+import type { Mocked } from 'vitest';
 
 function makeBody(
   overrides: Partial<AuthorizationRequest> = {},
@@ -30,8 +31,8 @@ const request = {} as Request;
 
 describe('PermissionsController', () => {
   let controller: PermissionsController;
-  let proxyService: jest.Mocked<PermissionsProxyService>;
-  let headerParser: jest.Mocked<HeaderParserService>;
+  let proxyService: Mocked<PermissionsProxyService>;
+  let headerParser: Mocked<HeaderParserService>;
 
   beforeEach(async () => {
     proxyService = mock<PermissionsProxyService>();

package/src/portal-options/utils/domain.spec.ts

@@ -5,7 +5,7 @@ describe('getOrganization', () => {
   const OLD_ENV = process.env;
 
   beforeEach(() => {
-    jest.resetModules();
+    vi.resetModules();
     process.env = { ...OLD_ENV };
     process.env.OIDC_CLIENT_ID_DEFAULT = 'default-client';
     process.env.BASE_DOMAINS_DEFAULT = 'example.com';
@@ -53,7 +53,7 @@ describe('getDiscoveryEndpoint', () => {
     ({ hostname }) as unknown as Request;
 
   beforeEach(() => {
-    jest.resetModules();
+    vi.resetModules();
     process.env = { ...OLD_ENV };
     process.env.OIDC_CLIENT_ID_DEFAULT = 'default-client';
     process.env.BASE_DOMAINS_DEFAULT = 'example.com';

package/src/portal-options/utils/portal-web-component-modules.spec.ts

@@ -151,7 +151,7 @@ describe('normalizePortalWebComponentModules', () => {
   });
 
   it.each(['module', 'classic', '', null])(
-    'preserves explicitly configured type %p',
+    'preserves explicitly configured type %o',
     (type) => {
       const config = configuration([
         node({ webcomponent: { selfRegistered: true, type } }),
@@ -165,7 +165,7 @@ describe('normalizePortalWebComponentModules', () => {
   );
 
   it.each([undefined, false, true, { selfRegistered: false }])(
-    'preserves non-self-registered setting %p',
+    'preserves non-self-registered setting %o',
     (webcomponent) => {
       const config = configuration([node({ webcomponent })]);
       normalizePortalWebComponentModules(config);
@@ -259,7 +259,7 @@ describe('normalizePortalWebComponentModules', () => {
     {},
     { luigiConfigFragment: {} },
     { luigiConfigFragment: { data: { nodes: null } } },
-  ])('ignores absent node structures %p', (value) => {
+  ])('ignores absent node structures %o', (value) => {
     expect(() =>
       normalizePortalWebComponentModules(value as ContentConfiguration),
     ).not.toThrow();

package/tsconfig.build.json

@@ -4,7 +4,6 @@
     "node_modules",
     "dist",
     "**/*spec.ts",
-    "jest.config.ts",
-    "base.jest.config.ts"
+    "vitest.config.ts"
   ]
 }

package/tsconfig.json

@@ -14,6 +14,6 @@
     "experimentalDecorators": true,
     "sourceMap": true,
     "skipLibCheck": true,
-    "types": ["jest"]
+    "types": ["vitest/globals"]
   },
 }

package/vitest.config.ts

@@ -0,0 +1,20 @@
+import { defineConfig } from 'vitest/config';
+
+export default defineConfig({
+  test: {
+    globals: true,
+    include: ['src/**/*.spec.ts'],
+    coverage: {
+      enabled: true,
+      provider: 'v8',
+      reporter: ['text', 'cobertura', 'lcov'],
+      reportsDirectory: 'test-run-reports/coverage/unit',
+      thresholds: {
+        branches: 75,
+        functions: 89,
+        lines: 90,
+        statements: -12,
+      },
+    },
+  },
+});

package/base.jest.config.js

@@ -1,15 +0,0 @@
-export default {
-  testEnvironment: 'node',
-  coverageReporters: ['text', 'cobertura', 'lcov'],
-  transform: {
-    '^.+\\.(t|j)s$': [
-      'ts-jest',
-      {
-        tsconfig: 'tsconfig.test.json',
-      },
-    ],
-  },
-  moduleNameMapper: {
-    '^(\\.{1,2}/.*)\\.js$': '$1',
-  },
-};

package/jest.config.ts

@@ -1,42 +0,0 @@
-/* eslint-disable @typescript-eslint/no-require-imports */
-import baseConfig from './base.jest.config.js';
-
-export default {
-  ...baseConfig,
-  rootDir: 'src',
-  testRegex: '.spec.ts$',
-  collectCoverage: true,
-  reporters: ['default'],
-  coverageThreshold: {
-    global: {
-      branches: 75,
-      functions: 89,
-      lines: 90,
-      statements: -12,
-    },
-  },
-  coveragePathIgnorePatterns: ['/node_modules/', '/integration-tests/'],
-  coverageDirectory: '../test-run-reports/coverage/unit',
-  transformIgnorePatterns: [
-    '/node_modules/(?!(@openmfp/portal-server-lib|graphql-request)/)',
-  ],
-  transform: {
-    '^.+\\.(t|j)s$': [
-      'ts-jest',
-      {
-        tsconfig: 'tsconfig.test.json',
-        useESM: true,
-      },
-    ],
-  },
-  testEnvironment: 'node',
-  passWithNoTests: true,
-  roots: ['<rootDir>'],
-  moduleNameMapper: {
-    '^@openmfp/portal-lib(|/.*)$': '<rootDir>/libs/portal-lib/src/$1',
-    '^(\\.{1,2}/.*)\\.js$': '$1',
-  },
-  preset: 'ts-jest/presets/default-esm',
-  extensionsToTreatAsEsm: ['.ts'],
-  moduleFileExtensions: ['js', 'json', 'ts'],
-};

package/tsconfig.test.json

@@ -1,3 +0,0 @@
-{
-  "extends": "./tsconfig.json",
-}