Initial Commit

packages/api-stack/api/api-sandbox-wasm/tests/dep-graph.test.ts

@@ -0,0 +1,41 @@
+import { readFileSync } from "node:fs";
+import { resolve as resolvePath } from "node:path";
+import { describe, expect, it } from "@suaveplan/testing/runner";
+
+interface PackageJsonShape {
+    readonly dependencies?: Readonly<Record<string, string>>;
+}
+
+describe("@suaveplan/api-sandbox-wasm — dep graph", () => {
+    it("pins the runtime dep set to the documented allowlist", {
+        timeout: 5000,
+    }, () => {
+        const pkg = JSON.parse(
+            readFileSync(resolvePath(__dirname, "..", "package.json"), "utf8")
+        ) as PackageJsonShape;
+        const deps = Object.keys(pkg.dependencies ?? {}).sort();
+        // The proposal pins the @suaveplan/* runtime surface; external
+        // deps (zod, tslib, @opentelemetry/api) come from the host
+        // stack and are intentionally not enumerated here.
+        expect(deps).toEqual([
+            "@opentelemetry/api",
+            "@suaveplan/api-types",
+            "@suaveplan/error",
+            "@suaveplan/logger",
+            "tslib",
+            "zod",
+        ]);
+    });
+
+    it("does not depend on any sandbox-host sibling", { timeout: 5000 }, () => {
+        const pkg = JSON.parse(
+            readFileSync(resolvePath(__dirname, "..", "package.json"), "utf8")
+        ) as PackageJsonShape;
+        const deps = Object.keys(pkg.dependencies ?? {});
+        expect(deps.some((d) => d.startsWith("@suaveplan/api-sandbox-"))).toBe(
+            false
+        );
+        expect(deps).not.toContain("@suaveplan/api-host");
+        expect(deps).not.toContain("@suaveplan/api-worker-host");
+    });
+});