@@ -0,0 +1,36 @@
+name: Set up tests
+description: Install the pinned toolchain and optional browser with the same runner policy.
+inputs:
+  browser:
+    description: Install Chromium for browser integration tests.
+    default: 'false'
+runs:
+  using: composite
+  steps:
+    # Preserve scanning for fork PRs. Maintainer jobs may exclude generated paths
+    # on their ephemeral runner; refusal warns and never skips a check.
+    - name: Exclude build paths from Windows Defender
+      if: >-
+        ${{ runner.os == 'Windows'
+        && (github.event_name == 'push'
+        || github.event.pull_request.head.repo.full_name == github.repository) }}
+      shell: pwsh
+      run: |
+        foreach ($path in @('${{ github.workspace }}', '${{ runner.temp }}')) {
+          try {
+            Add-MpPreference -ExclusionPath $path -ErrorAction Stop
+            Write-Host "Defender exclusion added: $path"
+          } catch {
+            Write-Host "::warning::could not add Defender exclusion for ${path}: $_"
+          }
+        }
+    - uses: voidzero-dev/setup-vp@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1 # v1.12.0
+      with:
+        node-version-file: .node-version
+        cache: true
+    - run: vp exec playwright install chromium
+      shell: bash
+      if: ${{ inputs.browser == 'true' && (runner.os != 'Linux' || github.repository == 'voidzero-dev/void') }}
+    - run: vp exec playwright install --with-deps chromium
+      shell: bash
+      if: ${{ inputs.browser == 'true' && runner.os == 'Linux' && github.repository != 'voidzero-dev/void' }}
@@ -16,6 +16,25 @@ on:
 permissions: {}
 
 jobs:
+  checks:
+    name: build and typecheck (${{ matrix.os }})
+    runs-on: ${{ matrix.os == 'ubuntu-latest' && github.repository == 'voidzero-dev/void' && 'blacksmith-4vcpu-ubuntu-2404' || matrix.os }}
+    permissions:
+      contents: read
+    strategy:
+      fail-fast: false
+      matrix:
+        os: '${{ ((github.event_name == ''push'' || contains(github.event.pull_request.labels.*.name, ''test: windows'')) && !inputs.skip_windows) && fromJSON(''["ubuntu-latest","windows-latest"]'') || fromJSON(''["ubuntu-latest"]'') }}'
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
+      - uses: ./.github/actions/test-setup
+      # Build every playground once per OS for complete build/type coverage.
+      # Integration tests build their own selected fixtures in separate checkouts.
+      - run: vp run build:all
+      - run: vp run check
+
   test:
     name: test (${{ matrix.os }}, ${{ matrix.shard }})
     runs-on: ${{ matrix.os == 'ubuntu-latest' && github.repository == 'voidzero-dev/void' && 'blacksmith-4vcpu-ubuntu-2404' || matrix.os }}
@@ -30,52 +49,16 @@ jobs:
         # Windows runs on branch/tag pushes and on PRs labeled "test: windows",
         # unless a reusable workflow caller explicitly disables it.
         os: '${{ ((github.event_name == ''push'' || contains(github.event.pull_request.labels.*.name, ''test: windows'')) && !inputs.skip_windows) && fromJSON(''["ubuntu-latest","windows-latest"]'') || fromJSON(''["ubuntu-latest"]'') }}'
-        # Unit tests and two integration shards run on separate runners. Each integration
-        # shard builds its own checkout first, so generated playground state is never shared.
+        # Weighted integration shards own separate checkouts and build only the
+        # fixtures they exercise. No generated playground state crosses runners.
         shard: [unit, '1/2', '2/2']
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false
-      # Defender's real-time scan is synchronous on every file write, and this suite writes a lot of
-      # them (dependency install, ~26 playground builds, per-worker temp dirs). Excluding the paths
-      # we generate is purely a speed measure: it never changes what runs.
-      #
-      # Skipped for fork pull requests, the only case where the checkout is code no maintainer has
-      # pushed. Not because scanning is a boundary for this job — it has no secrets, a read-only
-      # token, an ephemeral runner, and already executes the PR's own build and test code by design
-      # — but because leaving the scan on for untrusted checkouts costs us nothing: Windows runs on
-      # a PR only when a maintainer applies the `test: windows` label, so this is rare, while main
-      # pushes and maintainer branches (the everyday path) keep the speedup.
-      #
-      # Warns instead of failing, so a runner image that refuses the call still runs the suite.
-      - name: Exclude build paths from Windows Defender
-        if: >-
-          ${{ contains(matrix.os, 'windows')
-          && (github.event_name == 'push'
-          || github.event.pull_request.head.repo.full_name == github.repository) }}
-        shell: pwsh
-        run: |
-          foreach ($path in @('${{ github.workspace }}', '${{ runner.temp }}')) {
-            try {
-              Add-MpPreference -ExclusionPath $path -ErrorAction Stop
-              Write-Host "Defender exclusion added: $path"
-            } catch {
-              Write-Host "::warning::could not add Defender exclusion for ${path}: $_"
-            }
-          }
-
-      - uses: voidzero-dev/setup-vp@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1 # v1.12.0
+      - uses: ./.github/actions/test-setup
         with:
-          node-version-file: .node-version
-          cache: true
-
-      # The upstream Linux image and Windows already provide browser libraries.
-      # Forks use GitHub's Ubuntu image and install Chromium's system dependencies.
-      - run: vp exec playwright install chromium
-        if: ${{ matrix.shard != 'unit' && (runner.os != 'Linux' || github.repository == 'voidzero-dev/void') }}
-      - run: vp exec playwright install --with-deps chromium
-        if: ${{ matrix.shard != 'unit' && runner.os == 'Linux' && github.repository != 'voidzero-dev/void' }}
+          browser: ${{ matrix.shard != 'unit' }}
 
       - run: vp check
         if: ${{ matrix.shard == 'unit' }}
@@ -89,12 +72,9 @@ jobs:
       - run: vp test run --project unit
         if: ${{ matrix.shard == 'unit' }}
 
-      - run: vp run build:all
+      - run: vp run build
         if: ${{ matrix.shard != 'unit' }}
 
-      - run: vp run check
-        if: ${{ matrix.shard == '1/2' }}
-
       - run: vp test run --project parallel-integration --shard=${{ matrix.shard }}
         if: ${{ matrix.shard != 'unit' }}
 
@@ -143,6 +123,7 @@ jobs:
     runs-on: ubuntu-latest
     if: always()
     needs:
+      - checks
       - test
       - live-e2e
     steps:
 
@@ -123,6 +123,8 @@ vp run dev:docs        # local docs dev server
 
 See [TESTING.md](./TESTING.md) for targeted verification and the account-neutral, non-destructive
 native Cloudflare live E2E procedure.
+The [test-suite performance audit](./test/PERFORMANCE.md) records duplicate coverage, scheduling,
+and measured end-to-end verification times.
 
 Build the public packages and smoke-test their actual tarballs outside the workspace:
 
 
@@ -9,6 +9,17 @@ vp test run packages/void
 vp run check
 ```
 
+The named shortcuts select the current test projects:
+
+```sh
+vp run test:unit
+vp run test:integration
+vp run test:metaframeworks
+vp run test:pages:react-vue
+vp run test:pages:svelte-solid
+vp run test:platform
+```
+
 Run the complete SDK and platform verification before handing off a finished change:
 
 ```sh
@@ -18,6 +29,40 @@ vpr test:all
 `vpr test:all` formats, lints, builds, typechecks, and tests the merged monorepo. Investigate slow
 or hanging tests when they occur instead of routinely increasing timeouts.
 
+Platform projects run first; SDK unit and integration files then share a worker pool. This keeps
+database engines from competing with all framework compilers at startup. Keep module isolation
+enabled: these suites mock globals, keep database state, and exercise real process/lock boundaries.
+The full verification command builds before running the platform's type-aware lint, so it also
+works without a pre-existing dashboard `.void/tsconfig.json`.
+
+## Suite organization and CI scheduling
+
+CI builds and typechecks every playground once per OS in a dedicated required job. Integration
+shards build the public packages and then only the fixtures their tests use; they do not depend
+on generated output from another job. The `done` check requires both the tests and build/type
+checks. Linux and Windows coverage and the credentialed live-deploy gate are unchanged.
+
+Integration sharding uses [measured duration estimates](test/integration-timings.ts), rather than
+filename hashes. [The sequencer](test/sequencer.ts) packs the longest files first and starts costly
+fixtures early. Estimates affect scheduling only: new files receive a fallback estimate, and
+membership tests ensure every discovered file appears exactly once. Refresh the estimates when
+the suite's costs change materially. Seeded file shuffling remains available for isolation checks.
+
+The four adapter suites share their client and island test definitions in `test/`, while retaining
+each framework's own dev, preview, SSR, hydration, and HMR execution. Before integrations start,
+their sources are snapshotted so another test cloning a fixture cannot capture an in-flight HMR
+edit. Dependencies stay linked to the installed workspace, and snapshots are removed afterward.
+
+Use production functions in unit tests. A copy of a hook's implementation inside a test cannot
+catch regressions in the real hook. Shared form-value equality has one direct suite, and actual
+form interactions run in the adapter browser matrix.
+
+The in-memory API deletion tests schedule the fixed container-orphan sweep delay immediately.
+They still execute both sweeps and all provider/database assertions. Production timing and the
+real subprocess/lock deadline tests retain their actual timing semantics.
+
+See [the performance audit](test/PERFORMANCE.md) for baseline measurements, changes, and validation.
+
 ## Prepublish Test
 
 Packed tests install the current tarballs into fresh applications through a temporary local
 
@@ -15,10 +15,10 @@
     "lint": "vp lint",
     "prepare": "vp config",
     "test": "vp test run",
-    "test:integration": "vp test run --project core-markdown",
-    "test:metaframeworks": "vp test run --project metaframeworks",
-    "test:pages:react-vue": "vp test run --project pages-react-vue",
-    "test:pages:svelte-solid": "vp test run --project pages-svelte-solid",
+    "test:integration": "vp test run --project parallel-integration",
+    "test:metaframeworks": "vp test run --project parallel-integration analog.test.ts astro.test.ts nuxt.test.ts react-router.test.ts sveltekit.test.ts tanstack-start.test.ts vinext-app.test.ts vinext-pages.test.ts",
+    "test:pages:react-vue": "vp test run --project parallel-integration packages/react packages/vue",
+    "test:pages:svelte-solid": "vp test run --project parallel-integration packages/svelte packages/solid",
     "test:platform": "vp test run --project 'platform-*'",
     "test:unit": "vp test run --project unit"
   },
 
@@ -219,8 +219,9 @@ export const loader = defineHandler(() => ({ title: 'Home' }));
 
 ## Tests
 
-- `test/unit/use-form.test.ts`
 - `test/unit/link.test.ts`
 - `test/integration/react-pages-client.test.ts`
 
 Cross-package SSR/protocol coverage for React pages mode also lives in `packages/void/test/integration/*`.
+
+The [shared client](../../test/pages-client-contract.ts) and [island](../../test/pages-island-contract.ts) contracts run against this adapter in both dev and preview. Shared form equality is tested directly in [Void](../void/test/unit/form-value-equality.test.ts); tests do not copy the hook implementation.