(janitor/dependencies) Remove unused vaul dependency from apps/web

[kilo-code-bot]

Summary

Removes the unused vaul runtime dependency from apps/web.

Dependencies removed

• vaul (1.1.2) from apps/web/package.json (dependencies)

Evidence that it was unused

• Repo-wide search found zero imports, require calls, dynamic imports, or type references to vaul in any apps/web source file. The only remaining matches are unrelated strings containing "vault" (e.g. 1Password "vault" copy).
• The last consumers were removed in refactor(web): consolidate overlay components #4375 ("refactor(web): consolidate overlay components"), which deleted every import { Drawer } from 'vaul' but left the dependency declared in apps/web/package.json.
• knip flagged vaul as an unused dependency of apps/web/package.json; after removal it no longer appears.

Dynamic, configuration, and tooling references checked

• No import('vaul') / require('vaul') / subpath (vaul/...) references.
• Not referenced in next.config.*, tsconfig*.json, jest/vitest/playwright configs, or any package script.
• Not present in .github/dependabot.yml ignore list.
• Not present in pnpm-workspace.yaml (catalog, overrides, packageExtensions, patchedDependencies).
• No CSS @import of the package (unlike the @fontsource-variable/* fonts, which knip also flags but which are legitimately imported via style.css).

Package publication and peer-dependency considerations

• apps/web is "private": true and is not published, so there is no published-package contract or peer-dependency surface to preserve.
• vaul remains in pnpm-lock.yaml as a transitive dependency of @expo/ui@57.0.12 (used by apps/mobile), so no other workspace is affected. Removing it only drops apps/web's direct entry.

Validation performed

• pnpm install (lockfile regenerated) — succeeded; lockfile diff is minimal (3 removed lines in the apps/web importer, 1 optional: true metadata change on a now-optional vaul snapshot).
• pnpm --filter web typecheck — passed (tsgo --noEmit).
• pnpm --filter web lint — passed (0 warnings, 0 errors).
• pnpm --filter web knip — vaul no longer reported as unused.
• pnpm install --frozen-lockfile --offline — succeeded (lockfile/manifest consistency confirmed; prepare and postinstall scripts ran successfully).

Not run (environment constraints)

• apps/web test (Jest) requires a reachable PostgreSQL database; PostgreSQL cannot be started in this environment.
• apps/web build (next build) requires deployment environment variables and is not run here.

Uncertainty

None material: vaul has no source-level consumer of any kind in apps/web. The only nuance is that vaul is retained in the lockfile via @expo/ui, which is expected and unaffected.

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (2 files)

• apps/web/package.json
• pnpm-lock.yaml

---

_{Reviewed by grok-4.6 · Input: 75.5K · Output: 4.6K · Cached: 147.7K}

_{Review guidance: REVIEW.md from base branch main}