@akanjs/devkit 3.0.1 → 3.0.2-rc.0

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @akanjs/devkit
 
+## 3.0.1
+
+### Minor Changes
+
+- 4871ae5: New lint rule `no-static-in-object-light-model` for `*.constant.ts`: a `static` on an `XObject` or `LightX` class is an error. The full model `via(XObject, LightX, …)` mixes in their prototypes only, so such a static never reaches `X`; declare it on `XInput` (or a scalar), `X`, or `XInsight` instead.
+
+### Patch Changes
+
+- Updated dependencies [4871ae5]
+- Updated dependencies [4871ae5]
+- Updated dependencies [4871ae5]
+  - akanjs@3.1.0
+
 ## 3.0.0
 
 ### Minor Changes
@@ -542,11 +555,11 @@
 
   **Lint config now extends a config shipped in the package.** `@akanjs/devkit/biome.base.json` carries the
   formatter, the rule set, and every grit plugin registration; a workspace `biome.json` is `extends` plus its own
-  `files.includes`. Biome resolves the specifier through node_modules (it does not consult the package `exports`
+  `files.includes`. Biome resolves the specifier through node*modules (it does not consult the package `exports`
   map), and `plugins` paths inside an extended config resolve from the entry config's directory, so the
   `./node_modules/@akanjs/devkit/lint/*.grit` form the template already used is correct. Rule changes now reach a
   workspace on `bun update` with no command to run. Two merge behaviours decided the split: `overrides` concatenate,
-  so the generated-file opt-out moved there from `files.includes`, which _replaces_ and would silently drop the base
+  so the generated-file opt-out moved there from `files.includes`, which \_replaces* and would silently drop the base
   list the moment a workspace added one exclusion of its own. Because Biome moves rules between groups across minors
   (`noUnnecessaryConditions` is `nursery` at 2.4 and `suspicious` at 2.5, and the old position is a hard error), the
   base config and the Biome version travel together: `biomeBase.ts` pins the version `createWorkspace` installs

package/akanConfig/akanConfig.test.ts

@@ -678,6 +678,9 @@ describe("AkanAppConfig", () => {
     expect(make({ native: { server: { url: "http://x" } } })).toThrow(
       "native.server in apps/portal/akan.config.ts is not a native setting",
     );
+    expect(make({ native: { desktop: { dmg: { backgroundImage: "bg.png" } } } })).toThrow(
+      "native.desktop.dmg.backgroundImage in apps/portal/akan.config.ts is not a native setting",
+    );
   });
 
   test("derives a repo-scoped default appId and records an explicit native section", () => {

package/akanConfig/akanConfig.ts

@@ -401,8 +401,9 @@ export class AkanAppConfig implements AppConfigResult {
       "activity",
       "files",
     ],
-    desktop: ["indexPath", "server", "recovery", "window", "screenCapture", "entitlements"],
+    desktop: ["indexPath", "server", "recovery", "window", "screenCapture", "entitlements", "dmg"],
     desktopServer: ["omit"],
+    dmg: ["background", "background2x", "window", "iconSize", "textSize", "app", "applications"],
     deepLinks: ["schemes", "domains"],
   } as const;
   //* Settings that moved when `mobile` became `native` are named with where they went, instead of "unknown".
@@ -440,6 +441,7 @@ export class AkanAppConfig implements AppConfigResult {
       `${where}.desktop.server`,
       "desktopServer",
     );
+    check(settings.desktop?.dmg, AkanAppConfig.#nativeKeys.dmg, `${where}.desktop.dmg`, "dmg");
     check(settings.deepLinks, AkanAppConfig.#nativeKeys.deepLinks, `${where}.deepLinks`, "deepLinks");
   }
   static readonly #androidFilePattern = /^(?:res\/[^/]+\/[^/]+|assets\/.+)$/;

package/akanContext.ts

@@ -16,7 +16,14 @@ import {
   workflowRunArtifactPath,
   workflowSyncDir,
 } from "./workflow";
-import { isScannedRootEntry, rootAllowedDirs, rootAllowedFiles, rootEntryHintOf } from "./workspaceLayout";
+import {
+  barrelFacetDirs,
+  facetIndexShadowOf,
+  isScannedRootEntry,
+  rootAllowedDirs,
+  rootAllowedFiles,
+  rootEntryHintOf,
+} from "./workspaceLayout";
 
 export type AkanContextFormat = "json" | "markdown";
 export type AkanModuleKind = "domain" | "service" | "scalar";
@@ -676,6 +683,16 @@ export class AkanContextAnalyzer {
             ),
           );
       }
+      for (const facet of barrelFacetDirs)
+        for (const entry of await safeReadDir(path.join(sysPath, facet))) {
+          const shadow = entry.isDirectory() ? null : facetIndexShadowOf(`${facet}/${entry.name}`);
+          if (!shadow) continue;
+          const entryPath = `${sys.path}/${facet}/${entry.name}`;
+          report(
+            { severity: "error", code: "facet-index-shadowed", path: entryPath, message: `${entryPath} ${shadow}` },
+            repairAction("generated", `akan sync ${sys.name}`, `Delete ${entryPath} by hand, then sync.`, false),
+          );
+        }
     }
 
     const agentDrift = await AkanContextAnalyzer.#agentGuideDrift(workspace);

package/biome.base.json

@@ -186,7 +186,14 @@
     },
     {
       "includes": ["{apps,libs}/**/*.signal.ts"],
-      "plugins": ["./node_modules/@akanjs/devkit/lint/no-redeclare-predefined-endpoint.grit"]
+      "plugins": [
+        "./node_modules/@akanjs/devkit/lint/no-redeclare-predefined-endpoint.grit",
+        "./node_modules/@akanjs/devkit/lint/no-unguarded-endpoint.grit"
+      ]
+    },
+    {
+      "includes": ["{apps,libs}/**/*.dictionary.ts"],
+      "plugins": ["./node_modules/@akanjs/devkit/lint/no-double-brace-placeholder.grit"]
     },
     {
       "includes": ["{apps,libs}/**/*.Util.tsx", "{apps,libs}/**/*.Zone.tsx"],

package/commandDecorators/command.ts

@@ -128,6 +128,8 @@ export const getOptionValue = async (argMeta: ArgMeta, opt: Record<string, unkno
     assertEnumChoice(argMeta, opt[argMeta.name]);
     return convertArgValue(opt[argMeta.name] as string, type ?? "string");
   } else if (defaultValue !== undefined) return defaultValue;
+  //? Before the choices: a nullable option left out means something (`--arch`: this computer's), so it is not asked.
+  else if (nullable) return null;
 
   if (enumChoices) {
     const choices = normalizeEnumChoices(
@@ -135,8 +137,7 @@ export const getOptionValue = async (argMeta: ArgMeta, opt: Record<string, unkno
     );
     if (choices.length === 1) return choices[0]?.value;
     return await select({ message: ask ?? desc ?? `Select the ${name} value`, choices });
-  } else if (nullable) return null;
-  else if (type === "boolean") {
+  } else if (type === "boolean") {
     const message = ask ?? desc ?? `Do you want to set ${name}? ${desc ? ` (${desc})` : ""}: `;
     return await confirm({ message });
   } else return convertArgValue(await input({ message: inputMessageOf(argMeta) }), type ?? "string");

package/commandDecorators/commandDecorators.test.ts

@@ -277,6 +277,13 @@ describe("enum arg choices", () => {
     ).toBe("anything");
   });
 
+  test("a nullable option left out is null, not a prompt for one of its choices", async () => {
+    const arch = { ...optionMeta(["arm64", "x64"]), name: "arch" };
+    expect(await getOptionValue({ ...arch, argsOption: { ...arch.argsOption, nullable: true } }, {}, context)).toBe(
+      null,
+    );
+  });
+
   test("an option with no enum is unaffected", async () => {
     expect(await getOptionValue(optionMeta(undefined), { format: "whatever" }, context)).toBe("whatever");
   });

package/csrE2e/csrPageStack.e2e.test.ts

@@ -209,13 +209,22 @@ describe.skipIf(!CsrE2eHarness.enabled)("CSR page stack (minimal, /e2e/stack)",
     expect(await csr.reloaded()).toBe(false);
   }, 60_000);
 
-  test("an async render that throws is logged with its route instead of leaving a blank page in silence", async () => {
+  test("an async render that throws is logged with its route and shows a retry instead of a blank page", async () => {
     await csr.open("/e2e/stack/broken");
-    await csr.waitFor(() => true);
-    await Bun.sleep(500);
+    await csr.waitFor(() => !!document.querySelector("[role=alert] button"), { timeout: 10_000 });
     expect(
       csr.consoleMessages().some((line) => /render of page \d+ of \S*\/e2e\/stack\/broken failed/.test(line)),
     ).toBe(true);
+    const failure = await csr.evaluate(() => {
+      const alert = document.querySelector("[role=alert]");
+      const button = alert?.querySelector("button");
+      return {
+        message: alert?.querySelector("p")?.textContent ?? "",
+        retry: button?.textContent ?? "",
+        painted: button ? getComputedStyle(button).backgroundColor !== "rgba(0, 0, 0, 0)" : false,
+      };
+    });
+    expect(failure).toEqual({ message: "This page could not be loaded.", retry: "Try again", painted: true });
   }, 60_000);
 
   test("the memory frame trace records navigation without writing it to the console", async () => {

package/executors.test.ts

@@ -1,15 +1,33 @@
-import { describe, expect, test } from "bun:test";
+import { describe, expect, spyOn, test } from "bun:test";
 import { existsSync } from "node:fs";
 import { lstat, mkdir, readFile, readlink, rm, stat, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { AkanAppConfig } from "./akanConfig";
-import { AppExecutor, CommandExecutionError, Executor, PkgExecutor, WorkspaceExecutor } from "./executors";
+import {
+  AppExecutor,
+  CommandExecutionError,
+  Executor,
+  type LibExecutor,
+  PkgExecutor,
+  WorkspaceExecutor,
+} from "./executors";
+import { DevGeneratedIndexSync } from "./frontendBuild/devGeneratedIndexSync";
 import { AppInfo } from "./scanInfo";
-import { isolateEnv, tempDirs, writeJson, writeText } from "./testHelpers";
+import {
+  createTempLib,
+  formatWithBiome,
+  hasBiome,
+  isolateEnv,
+  tempDirs,
+  tempRoots,
+  writeJson,
+  writeText,
+} from "./testHelpers";
 import type { PackageJson } from "./types";
 
 isolateEnv();
 const makeTempRoot = tempDirs("akan-devkit-");
+const trackRoot = tempRoots();
 
 const PAGE_SOURCE = "export default function Page() {\n  return null;\n}\n";
 
@@ -309,11 +327,16 @@ describe("Workspace and app executor environment contracts", () => {
     expect(env.EXTRA).toBe("ok");
 
     const shellOperationMode = process.env.AKAN_PUBLIC_OPERATION_MODE;
+    const shellServerPort = process.env.AKAN_PUBLIC_SERVER_PORT;
     process.env.AKAN_PUBLIC_OPERATION_MODE = "local";
+    process.env.AKAN_PUBLIC_SERVER_PORT = "8282";
     const prepared = await app.prepareCommand("build");
     const bakedOperationMode = process.env.AKAN_PUBLIC_OPERATION_MODE;
+    const bakedServerPort = process.env.AKAN_PUBLIC_SERVER_PORT;
     if (shellOperationMode === undefined) delete process.env.AKAN_PUBLIC_OPERATION_MODE;
     else process.env.AKAN_PUBLIC_OPERATION_MODE = shellOperationMode;
+    if (shellServerPort !== undefined) process.env.AKAN_PUBLIC_SERVER_PORT = shellServerPort;
+    expect(bakedServerPort).toBeUndefined();
     expect(bakedOperationMode).toBeUndefined();
     expect(prepared.env.AKAN_COMMAND_TYPE).toBe("build");
     expect(prepared.env.AKAN_PUBLIC_BASE_PATHS).toBe("admin");
@@ -327,7 +350,7 @@ describe("Workspace and app executor environment contracts", () => {
     expect((await stat(path.join(root, "dist/apps/demo/public"))).isDirectory()).toBe(true);
   });
 
-  test("akan start clears the dev output and keeps native builds, update releases and the bin downloads", async () => {
+  test("akan start clears the dev output and keeps the bin downloads and a native folder from before dist/native", async () => {
     const root = await makeTempRoot();
     process.env.AKAN_PUBLIC_REPO_NAME = "repo";
     process.env.AKAN_PUBLIC_SERVE_DOMAIN = "example.com";
@@ -1055,3 +1078,305 @@ describe("SysExecutor module listing", () => {
     ]);
   });
 });
+
+interface ScannableLibOptions {
+  root?: Pick<PackageJson, "dependencies" | "devDependencies">;
+  manifest?: Partial<PackageJson>;
+  config?: string;
+  files?: Record<string, string>;
+}
+
+//* `LibInfo.libInfos` caches a scan by lib name for the whole file, so every test passes a name of its own.
+const createScannableLib = async (
+  libName: string,
+  { root = {}, manifest = {}, config = "export default {};\n", files = {} }: ScannableLibOptions = {},
+) => {
+  const temp = trackRoot(await createTempLib(libName));
+  const libDir = path.join(temp.root, "libs", libName);
+  await writeJson(path.join(temp.root, "package.json"), {
+    name: "repo",
+    version: "1.0.0",
+    description: "repo",
+    ...root,
+  });
+  await writeJson(path.join(libDir, "package.json"), {
+    type: "module",
+    name: `@${libName}`,
+    version: "0.0.1",
+    ...manifest,
+  });
+  await writeJson(path.join(libDir, "tsconfig.json"), { compilerOptions: { target: "ESNext", paths: {} } });
+  await writeText(path.join(libDir, "akan.config.ts"), config);
+  await mkdir(path.join(libDir, "lib", "__scalar"), { recursive: true });
+  for (const [file, content] of Object.entries(files)) await writeText(path.join(libDir, file), content);
+  return { ...temp, libDir };
+};
+
+describe("SysExecutor scan", () => {
+  test("gives a facet folder with nothing to export an empty barrel, so a barrel a deleted file left heals", async () => {
+    const { lib } = await createScannableLib("barrelheal", {
+      files: {
+        "common/index.ts": 'export * from "./commonLogic";\n',
+        "webkit/thing.helper.ts": "export const thing = 1;\n",
+      },
+    });
+
+    await lib.scan();
+
+    expect(await lib.readFile("common/index.ts")).toBe("export {};\n");
+    expect(await lib.readFile("webkit/index.ts")).toBe("export {};\n");
+    expect(await lib.exists("ui")).toBe(false);
+  });
+
+  test("imports into the generated lib/dict.ts and lib/srv.ts only the helpers their code calls", async () => {
+    const { lib: bare } = await createScannableLib("nomodulelib");
+    await bare.scan();
+    expect(await bare.readFile("lib/dict.ts")).toContain(
+      'import { makeDictionary, makeTrans, dictionary as base } from "akanjs/dictionary";',
+    );
+    const bareSrv = await bare.readFile("lib/srv.ts");
+    for (const unused of ["ServiceModel", '"./cnst"', '"./db"']) expect(bareSrv).not.toContain(unused);
+
+    const { lib: full } = await createScannableLib("allmodulelib", {
+      files: {
+        "lib/post/post.constant.ts": "export class Post {}\n",
+        "lib/post/post.service.ts": "export class PostService {}\n",
+        "lib/_mail/mail.service.ts": "export class MailService {}\n",
+        "lib/__scalar/money/money.constant.ts": "export class Money {}\n",
+      },
+    });
+    await full.scan();
+    expect(await full.readFile("lib/dict.ts")).toContain(
+      "import { makeDictionary, makeTrans, registerScalarTrans, registerServiceTrans, registerModelTrans, dictionary as base }",
+    );
+    const fullSrv = await full.readFile("lib/srv.ts");
+    expect(fullSrv).toContain('import { ServiceModel } from "akanjs/service";');
+    expect(fullSrv).toContain('import * as cnst from "./cnst";\nimport * as db from "./db";');
+  });
+
+  test.skipIf(!hasBiome)("writes barrels, module indexes and akan.lib.json the way Biome prints them", async () => {
+    const component = "export const C = () => null;\n";
+    const uiFiles = ["QRCode", "Qa", "SSOButton", "Select", "Icon10", "Icon2"].map((name) => [
+      `ui/${name}.tsx`,
+      component,
+    ]);
+    const srvkitFiles = ["aB", "aa", "a10", "a9"].map((name) => [`srvkit/${name}.ts`, "export const x = 1;\n"]);
+    const moduleFiles = ["Template", "Unit", "View"].map((role) => [`lib/post/Post.${role}.tsx`, component]);
+    const { root, lib, libDir } = await createScannableLib("biomestable", {
+      files: Object.fromEntries([
+        ...uiFiles,
+        ...srvkitFiles,
+        ...moduleFiles,
+        ["lib/post/post.constant.ts", "export class Post {}\n"],
+      ]),
+    });
+    expect(await formatWithBiome('export * from "./b";\nexport * from "./a";\n', "libs/x/srvkit/index.ts")).toBe(
+      'export * from "./a";\nexport * from "./b";\n',
+    );
+
+    await lib.scan();
+
+    expect(await lib.readFile("ui/index.ts")).toBe(
+      ["Icon2", "Icon10", "Qa", "QRCode", "Select", "SSOButton"].map((name) => `export * from "./${name}";\n`).join(""),
+    );
+    expect(await lib.readFile("srvkit/index.ts")).toBe(
+      ["a9", "a10", "aa", "aB"].map((name) => `export * from "./${name}";\n`).join(""),
+    );
+    for (const file of ["ui/index.ts", "srvkit/index.ts", "lib/post/index.ts", "akan.lib.json"]) {
+      const generated = await lib.readFile(file);
+      expect(await formatWithBiome(generated, `libs/biomestable/${file}`)).toBe(generated);
+    }
+    const devSync = new DevGeneratedIndexSync({ workspaceRoot: root });
+    const events = ["ui/QRCode.tsx", "srvkit/a9.ts", "lib/post"].map((file) => path.join(libDir, file));
+    expect(await devSync.syncForBatch(events)).toEqual({ changedFiles: [], errors: [] });
+  });
+
+  test("refuses a hand-written ui/index.tsx beside the generated barrel, naming the file and the fix", async () => {
+    const { lib } = await createScannableLib("shadowedbarrel", {
+      files: {
+        "ui/Chat.tsx": "export const Chat = () => null;\n",
+        "ui/index.tsx": 'export { Chat } from "./Chat";\n',
+        "ui/Page/index.tsx": 'export { Inner } from "./Inner";\n',
+        "ui/Page/index_.tsx": '"use client";\nexport { Inner } from "./Inner";\n',
+      },
+    });
+
+    const error = await lib.scan().catch((caught: unknown) => caught);
+
+    expect(error).toBeInstanceOf(Error);
+    const { message } = error as Error;
+    expect(message).toContain("libs/shadowedbarrel/ui/index.tsx: shadows the generated ui/index.ts");
+    expect(message).toContain("Delete it");
+    expect(message).not.toContain("ui/Page/");
+  });
+});
+
+describe("SysExecutor dependency sync", () => {
+  const root: Pick<PackageJson, "dependencies" | "devDependencies"> = {
+    dependencies: {
+      chalk: "^5.6.2",
+      esbuild: "^0.25.0",
+      lodash: "^4.17.21",
+      react: "19.3.0",
+      "react-dom": "19.3.0",
+      sharp: "^0.34.0",
+      zod: "3.25.76",
+    },
+    devDependencies: { dayjs: "^1.11.20", "happy-dom": "20.11.2", typescript: "^6.0.3" },
+  };
+  const readManifest = async (libDir: string) =>
+    (await Bun.file(path.join(libDir, "package.json")).json()) as PackageJson;
+  const silenced = (lib: LibExecutor) => ({
+    info: spyOn(lib.logger, "info").mockImplementation(() => undefined),
+    warn: spyOn(lib.logger, "warn").mockImplementation(() => undefined),
+  });
+
+  test("prunes what the root declares and nothing imports, and keeps and warns once about what it does not", async () => {
+    const { lib, libDir } = await createScannableLib("prunedeps", {
+      root,
+      manifest: {
+        dependencies: { lodash: "^4.0.0", "react-dom": "19.2.6", "left-pad": "^1.3.0", "is-odd": "^3.0.1" },
+        devDependencies: {},
+      },
+      files: { "srvkit/pad.ts": 'import padStart from "lodash/padStart";\nexport const pad = padStart;\n' },
+    });
+    const { info, warn } = silenced(lib);
+
+    await lib.scan();
+
+    expect((await readManifest(libDir)).dependencies).toEqual({
+      lodash: "^4.17.21",
+      "left-pad": "^1.3.0",
+      "is-odd": "^3.0.1",
+    });
+    expect(info).toHaveBeenCalledTimes(1);
+    expect(info.mock.calls[0]?.[0]).toContain(": react-dom (");
+    expect(warn).toHaveBeenCalledTimes(1);
+    expect(warn.mock.calls[0]?.[0]).toContain("libs/prunedeps/package.json lists left-pad, is-odd");
+  });
+
+  test("keeps what externalLibs, trustedDependencies or akan.keepDependencies names", async () => {
+    const akan = { keepDependencies: ["chalk"] };
+    const { lib, libDir } = await createScannableLib("keptdeps", {
+      root,
+      config: 'export default { externalLibs: ["sharp"], trustedDependencies: ["esbuild"] };\n',
+      manifest: {
+        dependencies: { sharp: "^0.33.0", esbuild: "^0.24.0", chalk: "^5.0.0", "react-dom": "19.2.6" },
+        devDependencies: {},
+        akan,
+      },
+    });
+    silenced(lib);
+
+    await lib.scan();
+
+    const manifest = await readManifest(libDir);
+    expect(manifest.dependencies).toEqual({ sharp: "^0.34.0", esbuild: "^0.25.0", chalk: "^5.6.2" });
+    expect(manifest.akan).toEqual(akan);
+  });
+
+  test("gives every surviving entry the root version, leaving peer, optional and the akan source alone", async () => {
+    const untouched = {
+      peerDependencies: { react: "^19.0.0" },
+      optionalDependencies: { fsevents: "^2.3.3" },
+      akan: { source: { origin: "akanjs", sha: "3.0.0", hash: "0f0f", syncedAt: "2026-01-01T00:00:00.000Z" } },
+    };
+    const { lib, libDir } = await createScannableLib("realigneddeps", {
+      root,
+      manifest: {
+        dependencies: { react: "19.2.7", lodash: "^4.0.0" },
+        devDependencies: { dayjs: "^1.11.13" },
+        ...untouched,
+      },
+      files: {
+        "ui/Thing.tsx": 'import { useState } from "react";\nexport const Thing = () => useState(0);\n',
+        "srvkit/pick.ts": 'import pick from "lodash/pick";\nexport const pickOf = pick;\n',
+      },
+    });
+    silenced(lib);
+
+    await lib.scan();
+
+    const manifest = await readManifest(libDir);
+    expect(manifest.dependencies).toEqual({ react: "19.3.0", lodash: "^4.17.21" });
+    expect(manifest.devDependencies).toEqual({ dayjs: "^1.11.20" });
+    expect(manifest).toMatchObject(untouched);
+  });
+
+  test("keeps the existing order, appends new names sorted, and a second scan rewrites nothing", async () => {
+    const { lib, libDir } = await createScannableLib("ordereddeps", {
+      root,
+      manifest: { dependencies: { zod: "3.25.76", lodash: "^4.17.21" }, devDependencies: {} },
+      files: {
+        "srvkit/uses.ts": [
+          'import { z } from "zod";',
+          'import chunk from "lodash/chunk";',
+          'import { createElement } from "react";',
+          'import chalk from "chalk";',
+          "export const uses = [z, chunk, createElement, chalk];",
+          "",
+        ].join("\n"),
+      },
+    });
+    silenced(lib);
+
+    await lib.scan();
+    const manifestFile = path.join(libDir, "package.json");
+    const [first, { mtimeMs }] = await Promise.all([readFile(manifestFile, "utf8"), stat(manifestFile)]);
+    expect(Object.keys((JSON.parse(first) as PackageJson).dependencies ?? {})).toEqual([
+      "zod",
+      "lodash",
+      "chalk",
+      "react",
+    ]);
+
+    await lib.scan({ refresh: true });
+    expect(await readFile(manifestFile, "utf8")).toBe(first);
+    expect((await stat(manifestFile)).mtimeMs).toBe(mtimeMs);
+  });
+
+  test("moves a type-only import to devDependencies", async () => {
+    const { lib, libDir } = await createScannableLib("typeonlydeps", {
+      root,
+      manifest: { dependencies: { zod: "3.25.76" }, devDependencies: {} },
+      files: { "common/schema.ts": 'import type { ZodType } from "zod";\nexport type Schema = ZodType;\n' },
+    });
+    silenced(lib);
+
+    await lib.scan();
+
+    const manifest = await readManifest(libDir);
+    expect(manifest.dependencies).toEqual({});
+    expect(manifest.devDependencies).toEqual({ zod: "3.25.76" });
+  });
+
+  test("leaves a runtime import the root lists only in devDependencies in devDependencies", async () => {
+    const { lib, libDir } = await createScannableLib("devonlydeps", {
+      root,
+      manifest: { dependencies: {}, devDependencies: { "happy-dom": "20.0.0" } },
+      files: {
+        "srvkit/dom.ts": 'import { Window } from "happy-dom";\nexport const createWindow = () => new Window();\n',
+      },
+    });
+    silenced(lib);
+
+    await lib.scan();
+
+    const manifest = await readManifest(libDir);
+    expect(manifest.dependencies).toEqual({});
+    expect(manifest.devDependencies).toEqual({ "happy-dom": "20.11.2" });
+  });
+
+  test("has written the manifest by the time scan returns", async () => {
+    const { lib, libDir } = await createScannableLib("settleddeps", {
+      root,
+      manifest: { dependencies: { "react-dom": "19.2.6" }, devDependencies: {} },
+      files: { "srvkit/pick.ts": 'import pick from "lodash/pick";\nexport const pickOf = pick;\n' },
+    });
+    silenced(lib);
+
+    await lib.scan({ writeLib: false });
+
+    expect((await readManifest(libDir)).dependencies).toEqual({ lodash: "^4.17.21" });
+  });
+});