@@ -54,6 +54,11 @@ jobs:
       - name: Audit context regions
         run: npm run audit:context-regions
 
+      # Website tests run first without the provider SDK; the CLI's static imports
+      # require scripts/ dependencies even for its credential-free lint command.
+      - name: Install audiobook CLI dependencies
+        run: npm ci --prefix ../scripts
+
       - name: Lint audiobook dialogue
         run: npm run audio:dialogue:lint
 
 
@@ -47,6 +47,11 @@ jobs:
       - name: Audit context regions
         run: npm run audit:context-regions
 
+      # Website tests run first without the provider SDK; the CLI's static imports
+      # require scripts/ dependencies even for its credential-free lint command.
+      - name: Install audiobook CLI dependencies
+        run: npm ci --prefix ../scripts
+
       - name: Lint audiobook dialogue
         run: npm run audio:dialogue:lint
 
 
@@ -32,7 +32,8 @@ import { criticalTerms } from '../../website/src/audiobook/wer.ts';
 import { dialogueStream, chunkState, discardChunk, printDialoguePlan } from './dialogue.mjs';
 import { encodeChapter } from './encode.mjs';
 import { masterStream } from './master.mjs';
-import { CACHE_DIR, chapterMp3, exists, log, MANIFEST_FILE, readJsonIfExists, requireApiKey, seconds, table, warn } from './report.mjs';
+import { CACHE_DIR, chapterMp3, exists, MANIFEST_FILE, readJsonIfExists, requireApiKey, seconds, table } from './report.mjs';
+import { log, warn } from './primitives.mjs';
 import { printVerification, verifyChapter, verifyProblems } from './verify.mjs';
 
 const COMMANDS = { '--build': 'build', '--verify': 'verify', '--list': 'list', '--lint': 'lint', '--source': 'source' };
 
@@ -13,7 +13,8 @@ import { AUDIO_CONFIG } from '../../website/src/audiobook/config.ts';
 import { chunkTurns, turnSliceBounds, turnStartMs } from '../../website/src/audiobook/dialogueScript.ts';
 import { dialogueChunkCacheKey } from '../../website/src/audiobook/hash.ts';
 import { renderDialogueChunk } from './render.mjs';
-import { cacheFile, exists, log, pcmBytesForMs, pcmDurationMs, readBytes, readJsonIfExists, table, transcribe, warn, writeFile, writeJson } from './report.mjs';
+import { cacheFile, exists, pcmBytesForMs, pcmDurationMs, readBytes, readJsonIfExists, table, transcribe, writeFile, writeJson } from './report.mjs';
+import { log, warn } from './primitives.mjs';
 
 export function chunkState(turns, force = false) {
   const cacheKey = dialogueChunkCacheKey(turns);
 
@@ -16,7 +16,8 @@
  */
 import { linearityProblems } from '../../website/src/audiobook/artifacts.ts';
 import { AUDIO_CONFIG } from '../../website/src/audiobook/config.ts';
-import { asInt16, FFMPEG, log, measureChapter, PCM_HEAD, PCM_INPUT, pcmBytesForMs, runTool } from './report.mjs';
+import { FFMPEG, measureChapter, PCM_HEAD, PCM_INPUT, pcmBytesForMs, runTool } from './report.mjs';
+import { asInt16, log } from './primitives.mjs';
 
 const PCM_OUTPUT = [...PCM_HEAD, '-'];
 
 
@@ -0,0 +1,18 @@
+/**
+ * Zero-provider helpers shared by every audio stage and the website unit tests.
+ *
+ * Kept apart from report.mjs on purpose: importing them must never drag a
+ * provider SDK (`@google/genai`) into a pure-function test's module graph. CI
+ * installs only `website/` deps, so a static SDK import reached from a website
+ * test fails the whole test file (see verifyUnits.mjs).
+ */
+
+/**
+ * Copy of s16le PCM as int16 samples: sample math without a per-sample Buffer read. The copy keeps
+ * this correct for any byteOffset alignment, which a zero-copy view would not be.
+ */
+export const asInt16 = (pcm) =>
+  new Int16Array(pcm.buffer.slice(pcm.byteOffset, pcm.byteOffset + (pcm.byteLength >> 1 << 1)));
+
+export const log = (stage, message) => console.log(`[${stage}] ${message}`);
+export const warn = (stage, message) => console.warn(`[${stage}] ${message}`);
@@ -1,14 +1,15 @@
 /**
- * Shared primitives for the local-only audio stages (render, verify, stitch,
- * encode).
+ * Shared report/pipeline helpers for the local-only audio stages (render,
+ * verify, stitch, encode).
  *
- * Every stage needs the artifact layout, the cache reader and the same stdout
- * shape, so all three live here; duplicating any of them would let the stages
- * drift. The Gemini provider seam (client, retry, WAV wrap, ASR) lives here too
- * because render/dialogue TTS and verify/dialogue ASR share it; the ffmpeg
- * encoder stays in encode.mjs.
+ * Every stage needs the artifact layout and the cache reader, so both live
+ * here; duplicating either would let the stages drift. The Gemini provider seam
+ * (client, retry, WAV wrap, ASR) lives here too because render/dialogue TTS and
+ * verify/dialogue ASR share it; the ffmpeg encoder stays in encode.mjs.
  *
- * All of it is local-only tooling: nothing here is imported by the website build.
+ * Provider-free helpers (PCM view, stdout shape) live in primitives.mjs so the
+ * website unit tests can import them without this module's `@google/genai`.
+ * Nothing here is imported by the website build.
  */
 import { GoogleGenAI } from '@google/genai';
 import { spawnSync } from 'node:child_process';
@@ -44,13 +45,6 @@ export const exists = (file) => existsSync(file);
 const readJson = (file) => JSON.parse(readFileSync(file, 'utf8'));
 export const readJsonIfExists = (file) => (existsSync(file) ? readJson(file) : undefined);
 export const readBytes = (file) => readFileSync(file);
-/**
- * Copy of s16le PCM as int16 samples: sample math without a per-sample Buffer read. The copy keeps
- * this correct for any byteOffset alignment, which a zero-copy view would not be.
- */
-export const asInt16 = (pcm) =>
-  new Int16Array(pcm.buffer.slice(pcm.byteOffset, pcm.byteOffset + (pcm.byteLength >> 1 << 1)));
-
 /** Every artifact is written through here so directories can never be forgotten. */
 export function writeFile(file, data) {
   mkdirSync(dirname(file.pathname), { recursive: true });
@@ -173,9 +167,6 @@ export function runTool(tool, args, input) {
   return { stdout: result.stdout, stderr: String(result.stderr) };
 }
 
-export const log = (stage, message) => console.log(`[${stage}] ${message}`);
-export const warn = (stage, message) => console.warn(`[${stage}] ${message}`);
-
 /**
  * The one PCM stream shape the whole pipeline speaks (24 kHz 16-bit mono), shared
  * by every ffmpeg invocation that reads it — a stage that disagrees with the rest
 
@@ -11,9 +11,10 @@
  */
 import { spliceProblems } from '../../website/src/audiobook/artifacts.ts';
 import { AUDIO_CONFIG } from '../../website/src/audiobook/config.ts';
-import { missingCriticalTerms, normalizeForWer, wordErrorRate } from '../../website/src/audiobook/wer.ts';
-import { medianPitchHz, voiceProblems } from '../../website/src/audiobook/voice.ts';
-import { asInt16, log, measureChapter, measureLevels, pcmBytesForMs, reportFile, statusLine, table, transcribe, warn, writeJson } from './report.mjs';
+import { missingCriticalTerms, wordErrorRate } from '../../website/src/audiobook/wer.ts';
+import { measureChapter, measureLevels, pcmBytesForMs, reportFile, statusLine, table, transcribe, writeJson } from './report.mjs';
+import { asInt16, log } from './primitives.mjs';
+import { attachVoiceProblems, turnPitches, unitRequiredTerms } from './verifyUnits.mjs';
 
 /**
  * Integrated loudness is a chapter-file contract, not a per-segment one: natural
@@ -40,12 +41,6 @@ async function verifySegment(segment, pcm, requiredTerms = []) {
   return { segmentId: segment.id, kind: segment.kind, wer, missing, ...levels, transcript, problems: segmentProblems(wer, missing, levels) };
 }
 
-/** Declared terms this unit owns: those that actually occur in its text (they live in one chunk). */
-export const unitRequiredTerms = (text, requiredTerms) => {
-  const haystack = ` ${normalizeForWer(text)} `;
-  return requiredTerms.filter((term) => haystack.includes(` ${normalizeForWer(term)} `));
-};
-
 /**
  * Loudness is a WINDOW, not a target: the master picks the loudest gain the true peak
  * allows, so a chapter may come out quieter than the book, never louder. The floor
@@ -105,36 +100,6 @@ function chapterReport(script, stream, segments) {
   };
 }
 
-/**
- * Per-turn pitch, tagged with the render unit that owns the turn.
- * `unitId` is what the build's re-roll loop discards, so a collapsed take is retried.
- */
-export function turnPitches(stream) {
-  const unitOfPart = new Map();
-  stream.units.forEach((unit) => unit.partIndexes.forEach((index) => unitOfPart.set(index, unit.id)));
-  return stream.parts.map((part, index) => {
-    const unitId = unitOfPart.get(index);
-    // A part with no owning unit would verify under `undefined`: warn loudly instead of passing silently.
-    if (unitId === undefined) warn('verify', `part ${index} (${part.segment.id}) has no owning unit`);
-    return {
-      unitId,
-      segmentId: part.segment.id,
-      speaker: part.segment.speaker,
-      pitchHz: medianPitchHz(asInt16(part.pcm), AUDIO_CONFIG.sourceSampleRate, AUDIO_CONFIG.voice),
-    };
-  });
-}
-
-/** Appends each voice-identity failure to the render unit it belongs to. */
-export function attachVoiceProblems(segments, turns) {
-  voiceProblems(turns, AUDIO_CONFIG.voice).forEach(({ unitId, problem }) => {
-    const segment = segments.find((segment) => segment.segmentId === unitId);
-    // A problem with no owning segment would vanish: warn loudly instead of dropping it.
-    if (!segment) warn('verify', `voice problem for unit ${unitId} has no matching segment: ${problem}`);
-    else segment.problems.push(problem);
-  });
-}
-
 export async function verifyChapter(script, stream) {
   if (!stream.units) throw new Error(`${script.chapterId}: stream carries no verify units`);
   const segments = await verifyUnits(stream, script.requiredTerms ?? []);
 
@@ -0,0 +1,49 @@
+/**
+ * The render-unit model: the grain the build's re-roll loop discards and the
+ * website unit test gates (`website/src/audiobook/verifyUnits.test.ts`).
+ *
+ * Imported by verify.mjs and the test, but never by the provider path: the test
+ * runs under the website suite, which installs only `website/` deps, so pulling
+ * report.mjs (and its `@google/genai`) in here would fail CI. Keep this module's
+ * graph to pure website logic plus primitives.mjs.
+ */
+import { AUDIO_CONFIG } from '../../website/src/audiobook/config.ts';
+import { normalizeForWer } from '../../website/src/audiobook/wer.ts';
+import { medianPitchHz, voiceProblems } from '../../website/src/audiobook/voice.ts';
+import { asInt16, warn } from './primitives.mjs';
+
+/** Declared terms this unit owns: those that actually occur in its text (they live in one chunk). */
+export const unitRequiredTerms = (text, requiredTerms) => {
+  const haystack = ` ${normalizeForWer(text)} `;
+  return requiredTerms.filter((term) => haystack.includes(` ${normalizeForWer(term)} `));
+};
+
+/**
+ * Per-turn pitch, tagged with the render unit that owns the turn.
+ * `unitId` is what the build's re-roll loop discards, so a collapsed take is retried.
+ */
+export function turnPitches(stream) {
+  const unitOfPart = new Map();
+  stream.units.forEach((unit) => unit.partIndexes.forEach((index) => unitOfPart.set(index, unit.id)));
+  return stream.parts.map((part, index) => {
+    const unitId = unitOfPart.get(index);
+    // A part with no owning unit would verify under `undefined`: warn loudly instead of passing silently.
+    if (unitId === undefined) warn('verify', `part ${index} (${part.segment.id}) has no owning unit`);
+    return {
+      unitId,
+      segmentId: part.segment.id,
+      speaker: part.segment.speaker,
+      pitchHz: medianPitchHz(asInt16(part.pcm), AUDIO_CONFIG.sourceSampleRate, AUDIO_CONFIG.voice),
+    };
+  });
+}
+
+/** Appends each voice-identity failure to the render unit it belongs to. */
+export function attachVoiceProblems(segments, turns) {
+  voiceProblems(turns, AUDIO_CONFIG.voice).forEach(({ unitId, problem }) => {
+    const segment = segments.find((segment) => segment.segmentId === unitId);
+    // A problem with no owning segment would vanish: warn loudly instead of dropping it.
+    if (!segment) warn('verify', `voice problem for unit ${unitId} has no matching segment: ${problem}`);
+    else segment.problems.push(problem);
+  });
+}
@@ -1,12 +1,61 @@
 import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
 import test from 'node:test';
 import { AUDIO_CONFIG } from './config.ts';
 import type { TurnPitch } from './voice.ts';
 import {
   attachVoiceProblems,
   turnPitches,
   unitRequiredTerms,
-} from '../../../scripts/audiobook/verify.mjs';
+} from '../../../scripts/audiobook/verifyUnits.mjs';
+
+// The verifyUnits module graph must never reach the provider SDK: the website
+// suite runs before scripts/ deps are installed in CI, so a static SDK import
+// anywhere in this graph fails the test file. Walk the graph instead of relying
+// on that install order alone; literal dynamic imports must stay outside it too.
+const importSpecifiers = (source: string): string[] =>
+  [
+    ...source.matchAll(
+      /(?:\bfrom\s+|\bimport\s*(?:\(\s*|\s+))['"]([^'"]+)['"]/g
+    ),
+  ].map(([, specifier]) => specifier);
+const importsProvider = (specifier: string): boolean =>
+  specifier === '@google/genai' || specifier.startsWith('@google/genai/');
+
+const importGraph = (entry: URL): string[] => {
+  const visited = new Set<string>();
+  const walk = (file: URL): void => {
+    if (visited.has(file.pathname)) return;
+    visited.add(file.pathname);
+    for (const specifier of importSpecifiers(readFileSync(file, 'utf8')))
+      if (specifier.startsWith('.')) walk(new URL(specifier, file));
+      else visited.add(specifier);
+  };
+  walk(entry);
+  return [...visited];
+};
+
+test('the verifyUnits module graph never reaches the provider SDK', () => {
+  const audiobook = new URL('../../../scripts/audiobook/', import.meta.url);
+  const graph = [
+    ...importGraph(new URL('verifyUnits.mjs', audiobook)),
+    ...importGraph(new URL('primitives.mjs', audiobook)),
+  ];
+  assert.ok(
+    !graph.some(importsProvider),
+    'graph must not import @google/genai'
+  );
+  assert.ok(
+    !graph.some((file) => file.endsWith('report.mjs')),
+    'graph must not import report.mjs'
+  );
+});
+
+test('the graph guard recognizes literal dynamic SDK subpath imports', () => {
+  assert.ok(
+    importSpecifiers("await import('@google/genai/web')").some(importsProvider)
+  );
+});
 
 // The verify unit is the render unit: each chunk is gated only on the terms it
 // actually speaks, so a chapter-level required term must not fail a chunk that
@@ -38,8 +87,7 @@ test('unitRequiredTerms matches case- and punctuation-insensitively', () => {
 // turnPitches tags every part with its owning render unit: unitId is what the
 // build's re-roll loop discards, so a misattributed turn would retry the wrong take.
 // Silence keeps the test on the real DSP path with a deterministic null pitch.
-const silence = (): Buffer =>
-  Buffer.alloc(AUDIO_CONFIG.sourceSampleRate * 2);
+const silence = (): Buffer => Buffer.alloc(AUDIO_CONFIG.sourceSampleRate * 2);
 
 test('turnPitches attributes every part to its owning render unit', () => {
   const stream = {
@@ -62,6 +110,11 @@ test('turnPitches attributes every part to its owning render unit', () => {
       ['c2', 'c2-alex', 'alex'],
     ]
   );
+  // The silence contract the comment above relies on: no pitch detected.
+  assert.deepEqual(
+    turns.map((turn: TurnPitch) => turn.pitchHz),
+    [null, null, null]
+  );
 });
 
 const turn = (