@rsdk/depdoc.cli 6.0.0-next.43 → 6.0.0-next.45

package/DEPDOC_MODEL.md

@@ -6,6 +6,36 @@ This document defines the dependency ownership model for the monorepo. The goal
 is to make dependency placement deterministic, checkable, and mostly
 autofixable.
 
+## Design Principle: Deterministic, Binary Output
+
+`depdoc` exists so a developer does not have to judge severity by hand. In the
+common case, a report must be actionable without reading source or reasoning
+about whether a finding "really" matters.
+
+- Every diagnostic is either a **violation** (blocks `check`/`fix`/`doctor`,
+  non-zero exit) or a **warning** (printed, does not block). There is no third,
+  ambiguous category that leaves the decision to the reader.
+- A check may only become a violation if the engine can derive the expected
+  state from facts it already has and the fix is mechanical (apply a rule,
+  move a dependency, add a peer, run `fix`). If depdoc cannot compute what
+  correct looks like, it must not fail the build over it.
+- Checks must respect ownership boundaries. A failure that cannot be resolved
+  by changing anything in this repository — for example, a peer mismatch
+  between two external packages with no repo-owned package on either side of
+  the edge — is not a dependency-model violation here, even if some
+  underlying tool (e.g. `yarn explain peer-requirements`) reports it as an
+  error. It gets surfaced (so it is not silently lost) but must not gate
+  `doctor`'s exit code.
+- When an external check surfaces something ambiguous, classify it from facts
+  depdoc already has (workspace ownership, declared roles, declared entry
+  points) instead of asking the developer to decide manually, and instead of
+  hard-coding an allowlist of "known-safe" failures that needs upkeep.
+- Prefer deriving a workspace's expectations from what its own manifest
+  already declares (`role`, `main`/`types`/`exports`) over introducing new
+  manual exception config. `depdoc.yml` overrides exist for cases the model
+  truly cannot derive (`V3`), not as a default escape hatch for cases a
+  smarter check could resolve on its own.
+
 ## Terms
 
 | Term | Meaning |
@@ -147,9 +177,11 @@ guess something that an earlier phase can derive.
 3. Classify each import as local or external.
 4. Classify each import as runtime, type-only, test-only, or tooling-only.
 5. Scan emitted `dist/**/*.d.ts` imports when `dist/` exists.
-6. In `--with-dts` mode, require `dist/` for workspaces with `src/`; without
-   `--with-dts`, missing `dist/` is allowed so local source-only checks remain
-   usable before build.
+6. In `--with-dts` mode, require `dist/` for `library` workspaces with `src/`;
+   without `--with-dts`, missing `dist/` is allowed so local source-only
+   checks remain usable before build. `service` and `cli` workspaces are never
+   required to have `dist/`: they have no public type surface to protect (see
+   S2/S3), so there is nothing for the check to guard.
 7. Mark all dependencies found in emitted `.d.ts` as public type surface.
 8. Skip generated entry-point roots such as `dist/`, `build/`, `coverage/`, and
    `node_modules/`.
@@ -250,7 +282,11 @@ Autofix should write manifests from the derived expected graph:
 5. Run the manifest model checker again, because `.d.ts` leaks can change the
    expected graph.
 6. Run package install again if manifests changed.
-7. Assert that package manager peer requirements have no failures.
+7. Assert that package manager peer requirements have no failures on any edge
+   touching a workspace of this repo. A failure between two external packages,
+   with no repo-owned package on either side, cannot be fixed by editing this
+   repository's manifests; it is reported as a warning with an example
+   `packageExtensions` fix instead of failing `doctor`.
 8. Run the full dependency check task.
 
 ## Target Tooling Shape
@@ -442,7 +478,7 @@ focused, because they invoke real tools.
 | Test | Proves |
 |---|---|
 | `yarn-install-clean` | After autofix, `yarn install` has no dependency placement warnings. |
-| `yarn-peer-requirements-clean` | `yarn explain peer-requirements` has no failed peer requirements. |
+| `yarn-peer-requirements-clean` | `yarn explain peer-requirements` has no failed peer requirements on any edge touching a workspace; vendor-only failures are warnings, not failures. |
 | `tsc-library-build` | A library with peer + dev mirror compiles. |
 | `tsc-dts-leak` | A public `.d.ts` leak is detected when `dist/` exists and changes expected manifests. |
 | `eslint-extraneous-compatible` | ESLint import/dependency rules do not contradict the model. |
@@ -464,7 +500,7 @@ Repo smoke tests verify that the model works on the real repository:
 3. Build packages.
 4. Run `depdoc check --with-dts`.
 5. Run `yarn install` again if manifests changed.
-6. Assert no failed peer requirements.
+6. Assert no failed peer requirements on any edge touching a workspace.
 7. Run repo lint/typecheck/dependency task.
 
 This is the final confidence layer. Most edge cases should still be covered by

package/__tests__/config-validation.test.ts

@@ -1,6 +1,7 @@
 import {
   validateDependencyRules,
   validateIgnoredImports,
+  validateToolingFiles,
 } from '../src/model/config-validation';
 
 describe('validateDependencyRules', () => {
@@ -55,3 +56,32 @@ describe('validateIgnoredImports', () => {
     ]);
   });
 });
+
+describe('validateToolingFiles', () => {
+  it('allows a global rule with no workspace scoping', () => {
+    expect(validateToolingFiles([{ match: 'sidebars.ts' }])).toEqual([]);
+  });
+
+  it('allows a workspace-scoped rule with an array of matches', () => {
+    expect(
+      validateToolingFiles([
+        {
+          match: ['sidebars.ts', 'sidebars.js'],
+          workspace: 'niisokb.artifactory.docusaurus',
+        },
+      ]),
+    ).toEqual([]);
+  });
+
+  it('rejects entries missing match', () => {
+    expect(validateToolingFiles([{ workspace: 'foo' }])).toEqual([
+      expect.stringContaining('toolingFiles[0].match must be a string'),
+    ]);
+  });
+
+  it('rejects a non-array value', () => {
+    expect(validateToolingFiles('sidebars.ts')).toEqual([
+      expect.stringContaining('toolingFiles must be an array'),
+    ]);
+  });
+});

package/__tests__/engine.test.ts

@@ -1,8 +1,8 @@
 import {
-  deriveDependencyModel,
   type DependencyModelFacts,
-  type WorkspaceFacts,
+  deriveDependencyModel,
   type UsageSummary,
+  type WorkspaceFacts,
 } from '../src/dependency-model';
 
 // ---------------------------------------------------------------------------
@@ -36,6 +36,7 @@ function makeWorkspace(
   hasSrc = false,
   hasDist = false,
   sourceFileCount?: number,
+  toolingFiles: Set<string> = new Set(),
 ): WorkspaceFacts {
   const basePkg: WorkspaceFacts['pkg'] = { name };
   if (role !== undefined) basePkg.role = role;
@@ -49,6 +50,7 @@ function makeWorkspace(
     dtsImports,
     hasSrc,
     hasDist,
+    toolingFiles,
     ...(sourceFileCount === undefined ? {} : { sourceFileCount }),
   };
 }
@@ -88,6 +90,7 @@ describe('deriveDependencyModel engine', () => {
       const root = makeRoot({ name: '@test/root' }); // no private field
       const facts = emptyFacts([root]);
       const result = deriveDependencyModel(facts);
+
       expect(result.violations.some((v) => v.code === 'root-private')).toBe(true);
     });
 
@@ -99,6 +102,7 @@ describe('deriveDependencyModel engine', () => {
       });
       const facts = emptyFacts([root]);
       const result = deriveDependencyModel(facts);
+
       expect(result.violations.some((v) => v.code === 'root-section')).toBe(true);
     });
 
@@ -125,6 +129,7 @@ describe('deriveDependencyModel engine', () => {
       const ws = makeWorkspace('@test/noop', 'packages/noop', undefined, { name: '@test/noop' });
       const facts = emptyFacts([root, ws]);
       const result = deriveDependencyModel(facts);
+
       expect(result.violations.some((v) => v.code === 'role-missing' && v.workspaceLocation === 'packages/noop')).toBe(true);
     });
 
@@ -134,6 +139,7 @@ describe('deriveDependencyModel engine', () => {
       const ws = makeWorkspace('@test/noop', 'packages/noop', undefined, { name: '@test/noop', role: 'invalid' as any });
       const facts = emptyFacts([root, ws]);
       const result = deriveDependencyModel(facts);
+
       expect(result.violations.some((v) => v.code === 'role-invalid')).toBe(true);
     });
   });
@@ -154,6 +160,7 @@ describe('deriveDependencyModel engine', () => {
       ]);
       const result = deriveDependencyModel(facts);
       const exp = result.expected.get('packages/lib')!;
+
       expect(exp.sections.peerDependencies.get('lodash')).toBe('^4.17.21');
       expect(exp.sections.devDependencies.get('lodash')).toBe('^4.17.21'); // mirror
       expect(exp.sections.dependencies.has('lodash')).toBe(false);
@@ -176,6 +183,7 @@ describe('deriveDependencyModel engine', () => {
       ]);
       const result = deriveDependencyModel(facts);
       const exp = result.expected.get('packages/lib')!;
+
       expect(exp.sections.dependencies.get('some-lib')).toBe('1.0.0');
       expect(exp.sections.peerDependencies.has('some-lib')).toBe(false);
       expect(exp.sections.devDependencies.has('some-lib')).toBe(false);
@@ -227,10 +235,59 @@ describe('deriveDependencyModel engine', () => {
       ]);
       const result = deriveDependencyModel(facts);
       const exp = result.expected.get('packages/svc')!;
+
       expect(exp.sections.dependencies.get('express')).toBe('^4.0.0');
       expect(exp.sections.peerDependencies.has('express')).toBe(false);
       expect(exp.sections.devDependencies.has('express')).toBe(false);
     });
+
+    it('sends a root config file runtime import to root devDependencies, not the workspace', () => {
+      const root = makeRoot();
+      const ws = makeWorkspace(
+        '@test/svc',
+        'packages/svc',
+        'service',
+        undefined,
+        new Map([['vite', runtimeUsage(['vite.config.ts'])]]),
+        new Set(),
+        false,
+        false,
+        undefined,
+        new Set(['vite.config.ts']),
+      );
+      const facts = emptyFacts([root, ws], [
+        { match: 'vite', version: '^5.0.0' },
+      ]);
+      const result = deriveDependencyModel(facts);
+      const rootExp = result.expected.get('.')!;
+      const wsExp = result.expected.get('packages/svc')!;
+
+      expect(rootExp.sections.devDependencies.get('vite')).toBe('^5.0.0');
+      expect(wsExp.sections.dependencies.has('vite')).toBe(false);
+    });
+
+    it('does not misclassify a src/ file that merely looks like a config file by name', () => {
+      const root = makeRoot();
+      const ws = makeWorkspace(
+        '@test/svc',
+        'packages/svc',
+        'service',
+        undefined,
+        new Map([['yaml', runtimeUsage(['src/auth.config.ts'])]]),
+        new Set(),
+        false,
+        false,
+        undefined,
+        new Set(['vite.config.ts']), // unrelated tooling file; src/auth.config.ts is not in it
+      );
+      const facts = emptyFacts([root, ws], [
+        { match: 'yaml', version: '^2.0.0' },
+      ]);
+      const result = deriveDependencyModel(facts);
+      const wsExp = result.expected.get('packages/svc')!;
+
+      expect(wsExp.sections.dependencies.get('yaml')).toBe('^2.0.0');
+    });
   });
 
   describe('declaration-independent-expected-graph', () => {
@@ -390,6 +447,7 @@ describe('deriveDependencyModel engine', () => {
       const facts = emptyFacts([root, lib, svc]);
       const result = deriveDependencyModel(facts);
       const exp = result.expected.get('packages/svc')!;
+
       expect(exp.sections.dependencies.get('@test/shared')).toBe('workspace:*');
     });
   });
@@ -398,6 +456,7 @@ describe('deriveDependencyModel engine', () => {
   describe('peer-propagation-local-library', () => {
     it('propagates peerDependencies from local library to consuming service', () => {
       const root = makeRoot();
+
       // foo is a library with peerDep on react
       const foo = makeWorkspace(
         '@test/foo',
@@ -406,6 +465,7 @@ describe('deriveDependencyModel engine', () => {
         { name: '@test/foo', role: 'library' },
         new Map([['react', runtimeUsage(['src/index.ts'])]]),
       );
+
       // bar is a service that depends on foo at runtime
       const bar = makeWorkspace(
         '@test/bar',
@@ -422,6 +482,8 @@ describe('deriveDependencyModel engine', () => {
       };
       const result = deriveDependencyModel(facts);
       const exp = result.expected.get('packages/bar')!;
+
+
       // service gets react propagated into dependencies
       expect(exp.sections.dependencies.get('react')).toBeDefined();
     });
@@ -441,6 +503,7 @@ describe('deriveDependencyModel engine', () => {
         { match: 'some-tool', rootOnly: true },
       ]);
       const result = deriveDependencyModel(facts);
+
       expect(result.violations.some((v) => v.code === 'root-only' && v.dependency === 'some-tool')).toBe(true);
     });
 
@@ -524,6 +587,7 @@ describe('deriveDependencyModel engine', () => {
       ]);
       const result = deriveDependencyModel(facts);
       const exp = result.expected.get('packages/lib')!;
+
       expect([...exp.sections.devDependencies.entries()]).toEqual(
         [...exp.sections.peerDependencies.entries()],
       );
@@ -547,6 +611,7 @@ describe('deriveDependencyModel engine', () => {
         { match: 'react', version: '^18.0.0' },
       ]);
       const result = deriveDependencyModel(facts);
+
       expect(
         result.violations.some((v) => v.code === 'mirror' && v.dependency === 'react'),
       ).toBe(true);
@@ -571,6 +636,7 @@ describe('deriveDependencyModel engine', () => {
       ]);
       const result = deriveDependencyModel(facts);
       const exp = result.expected.get('packages/lib')!;
+
       expect(exp.sections.devDependencies.has('extra-dev')).toBe(false);
       expect(exp.sections.devDependencies.get('react')).toBe('^18.0.0');
     });
@@ -594,6 +660,7 @@ describe('deriveDependencyModel engine', () => {
       const result = deriveDependencyModel(facts);
       const rootExp = result.expected.get('.')!;
       const wsExp   = result.expected.get('packages/lib')!;
+
       expect(rootExp.sections.devDependencies.get('some-types')).toBe('^1.0.0');
       expect(wsExp.sections.peerDependencies.has('some-types')).toBe(false);
       expect(wsExp.sections.devDependencies.has('some-types')).toBe(false);
@@ -617,9 +684,11 @@ describe('deriveDependencyModel engine', () => {
       ]);
       const result = deriveDependencyModel(facts);
       const wsExp = result.expected.get('packages/lib')!;
+
       expect(wsExp.sections.peerDependencies.get('some-types')).toBe('^1.0.0');
       expect(wsExp.sections.devDependencies.get('some-types')).toBe('^1.0.0'); // mirror
       const rootExp = result.expected.get('.')!;
+
       expect(rootExp.sections.devDependencies.has('some-types')).toBe(false);
     });
   });
@@ -640,6 +709,7 @@ describe('deriveDependencyModel engine', () => {
       ]);
       const result = deriveDependencyModel(facts);
       const exp = result.expected.get('packages/cli')!;
+
       expect(exp.sections.dependencies.get('commander')).toBe('^12.0.0');
       expect(exp.sections.peerDependencies.size).toBe(0);
       expect(exp.sections.devDependencies.size).toBe(0);
@@ -655,6 +725,7 @@ describe('deriveDependencyModel engine', () => {
       );
       const facts = emptyFacts([root, ws]);
       const result = deriveDependencyModel(facts);
+
       expect(
         result.violations.some(
           (v) => v.code === 'forbidden-section' && v.workspace === '@test/cli',
@@ -686,6 +757,7 @@ describe('deriveDependencyModel engine', () => {
       };
       const result = deriveDependencyModel(facts);
       const exp = result.expected.get('packages/svc')!;
+
       expect(exp.sections.dependencies.get('react')).toBe('^18.0.0');
     });
 
@@ -710,6 +782,7 @@ describe('deriveDependencyModel engine', () => {
       };
       const result = deriveDependencyModel(facts);
       const exp = result.expected.get('packages/lib')!;
+
       expect(exp.sections.peerDependencies.get('react')).toBe('^18.0.0');
       expect(exp.sections.devDependencies.get('react')).toBe('^18.0.0'); // mirror
     });
@@ -726,6 +799,7 @@ describe('deriveDependencyModel engine', () => {
         undefined,
         new Map([['some-pkg', runtimeUsage(['src/index.ts'])]]),
       );
+
       // null = коллектор отфильтровал все optional peers; required peers отсутствуют
       const facts: DependencyModelFacts = {
         workspaces: [root, ws],
@@ -734,6 +808,7 @@ describe('deriveDependencyModel engine', () => {
       };
       const result = deriveDependencyModel(facts);
       const exp = result.expected.get('packages/svc')!;
+
       expect(exp.sections.dependencies.get('some-pkg')).toBe('^3.0.0');
       expect(exp.sections.dependencies.size).toBe(1); // никакие peers не добавились
     });
@@ -755,6 +830,7 @@ describe('deriveDependencyModel engine', () => {
       );
       const facts = emptyFacts([root, ws1, ws2]); // нет правил → нет версионного правила для lodash
       const result = deriveDependencyModel(facts);
+
       expect(
         result.violations.some(
           (v) => v.code === 'unconstrained-version' && v.dependency === 'lodash',
@@ -776,6 +852,7 @@ describe('deriveDependencyModel engine', () => {
         { match: 'lodash', version: '^4.17.21' },
       ]);
       const result = deriveDependencyModel(facts);
+
       expect(
         result.violations.some(
           (v) => v.code === 'unconstrained-version' && v.dependency === 'lodash',
@@ -801,6 +878,7 @@ describe('deriveDependencyModel engine', () => {
       ]);
       const result = deriveDependencyModel(facts);
       const exp = result.expected.get('packages/lib')!;
+
       expect(exp.sections.peerDependencies.get('react')).toBe('^18.0.0');
     });
 
@@ -815,11 +893,13 @@ describe('deriveDependencyModel engine', () => {
       );
       const facts = emptyFacts([root, ws], [
         { match: 'some-pkg', version: '^1.0.0' },
+
         // workspace-overrides переводит dep из peerDeps в deps для конкретной библиотеки
         { match: 'some-pkg', workspace: '@test/lib', section: 'dependencies', version: '^1.0.0' },
       ]);
       const result = deriveDependencyModel(facts);
       const exp = result.expected.get('packages/lib')!;
+
       expect(exp.sections.dependencies.has('some-pkg')).toBe(true);
       expect(exp.sections.peerDependencies.has('some-pkg')).toBe(false);
     });
@@ -843,6 +923,7 @@ describe('deriveDependencyModel engine', () => {
         { match: '@nestjs/*', version: '^10.0.0' },
       ]);
       const result = deriveDependencyModel(facts);
+
       expect(
         result.violations.some((v) => v.code === 'unconstrained-version'),
       ).toBe(false);
@@ -860,6 +941,7 @@ describe('deriveDependencyModel engine', () => {
       ]);
       const result = deriveDependencyModel(facts);
       const exp = result.expected.get('packages/svc')!;
+
       expect(exp.sections.dependencies.get('@nestjs/core')).toBe('^10.3.0');
     });
   });
@@ -1054,12 +1136,38 @@ describe('deriveDependencyModel engine', () => {
         false,
       );
       const facts = emptyFacts([root, ws]);
+
       facts.withDts = true;
       const result = deriveDependencyModel(facts);
 
       expect(result.violations.some((v) => v.code === 'dist-missing')).toBe(true);
     });
 
+    it.each(['service', 'cli'] as const)(
+      'does not report missing dist for %s workspaces even when withDts is enabled',
+      (role) => {
+        const root = makeRoot();
+        const ws = makeWorkspace(
+          '@test/app',
+          'packages/app',
+          role,
+          { name: '@test/app', role },
+          new Map(),
+          new Set(),
+          true,
+          false,
+        );
+        const facts = emptyFacts([root, ws]);
+
+        facts.withDts = true;
+        const result = deriveDependencyModel(facts);
+
+        expect(
+          result.violations.some((v) => v.code === 'dist-missing'),
+        ).toBe(false);
+      },
+    );
+
     it('promotes matching DefinitelyTyped provider for public dts imports', () => {
       const root = makeRoot({
         name: '@test/root',

package/__tests__/fixtures/imports/plain-root-file.ts

@@ -0,0 +1,3 @@
+import { unused } from 'non-config-root-dep'
+
+export { unused }

package/__tests__/fixtures/imports/sidebars.ts

@@ -0,0 +1,5 @@
+import type { SidebarsConfig } from 'sidebars-config-dep'
+
+const sidebars: SidebarsConfig = {}
+
+export default sidebars

package/__tests__/fixtures/imports/vite.config.ts

@@ -0,0 +1,3 @@
+import { defineConfig } from 'root-config-dep'
+
+export default defineConfig({})

package/__tests__/imports.test.ts

@@ -1,11 +1,11 @@
 import path from 'node:path';
 
+import { collectTsConfigPathAliases } from '../src/collectors/tsconfig-aliases';
 import {
   collectDtsImports,
   collectSourceImports,
   getPackageName,
 } from '../src/lib/imports';
-import { collectTsConfigPathAliases } from '../src/collectors/tsconfig-aliases';
 
 const FIXTURES = path.join(__dirname, 'fixtures/imports');
 
@@ -69,6 +69,7 @@ describe('collectSourceImports', () => {
 
   it('collects runtime imports', () => {
     const pkgs = names();
+
     expect(pkgs.has('lodash')).toBe(true);
     expect(pkgs.has('@scope/pkg')).toBe(true);
     expect(pkgs.has('mixed-dep')).toBe(true);
@@ -101,30 +102,35 @@ describe('collectSourceImports', () => {
 
   it('marks import type entries as isTypeOnly', () => {
     const typeOnlyEntry = entries.find((e) => e.packageName === 'some-types');
+
     expect(typeOnlyEntry).toBeDefined();
     expect(typeOnlyEntry!.isTypeOnly).toBe(true);
   });
 
   it('marks export type entries as isTypeOnly', () => {
     const entry = entries.find((e) => e.packageName === 'reexport-type-dep');
+
     expect(entry).toBeDefined();
     expect(entry!.isTypeOnly).toBe(true);
   });
 
   it('marks import specifiers with only type bindings as isTypeOnly', () => {
     const entry = entries.find((e) => e.packageName === 'only-type-dep');
+
     expect(entry).toBeDefined();
     expect(entry!.isTypeOnly).toBe(true);
   });
 
   it('treats mixed value and type specifiers as runtime imports', () => {
     const entry = entries.find((e) => e.packageName === 'mixed-dep');
+
     expect(entry).toBeDefined();
     expect(entry!.isTypeOnly).toBe(false);
   });
 
   it('marks runtime imports as not isTypeOnly', () => {
     const entry = entries.find((e) => e.packageName === 'lodash');
+
     expect(entry).toBeDefined();
     expect(entry!.isTypeOnly).toBe(false);
   });
@@ -145,6 +151,7 @@ describe('collectSourceImports', () => {
 
   it('includes the file path in each entry', () => {
     const entry = entries.find((e) => e.packageName === 'lodash');
+
     expect(entry!.file).toContain('index.ts');
   });
 
@@ -154,6 +161,7 @@ describe('collectSourceImports', () => {
 
   it('collects supported source extensions', () => {
     const pkgs = names();
+
     expect(pkgs.has('tsx-runtime-dep')).toBe(true);
     expect(pkgs.has('tsx-type-dep')).toBe(true);
     expect(pkgs.has('mts-dep')).toBe(true);
@@ -194,10 +202,43 @@ describe('collectSourceImports', () => {
     expect(pkgs.has('external-test-dep')).toBe(true);
   });
 
+  it('collects imports from *.config.* files at the workspace root', () => {
+    const workspaceEntries = collectSourceImports(FIXTURES, {
+      name: '@test/imports',
+    });
+    const pkgs = new Set(workspaceEntries.map((e) => e.packageName));
+
+    expect(pkgs.has('root-config-dep')).toBe(true);
+  });
+
+  it('does not collect root filenames outside the *.config.* convention by default', () => {
+    const workspaceEntries = collectSourceImports(FIXTURES, {
+      name: '@test/imports',
+    });
+    const pkgs = new Set(workspaceEntries.map((e) => e.packageName));
+
+    expect(pkgs.has('sidebars-config-dep')).toBe(false);
+    expect(pkgs.has('non-config-root-dep')).toBe(false);
+  });
+
+  it('collects extra root filenames passed in via toolingFilePatterns', () => {
+    const workspaceEntries = collectSourceImports(
+      FIXTURES,
+      { name: '@test/imports' },
+      {},
+      ['sidebars.ts'],
+    );
+    const pkgs = new Set(workspaceEntries.map((e) => e.packageName));
+
+    expect(pkgs.has('sidebars-config-dep')).toBe(true);
+    expect(pkgs.has('non-config-root-dep')).toBe(false);
+  });
+
   it('does not collect .d.ts files (only .ts source files)', () => {
     // dist/ is a sibling of src/, not inside it — so even if we somehow
     // end up scanning it, .d.ts files are explicitly excluded.
     const dtsEntry = entries.find((e) => e.file.endsWith('.d.ts'));
+
     expect(dtsEntry).toBeUndefined();
   });
 });