@sebastienrousseau/dotfiles 0.2.481 → 0.2.499

package/scripts/tests/unit/test_rd.sh

@@ -1,230 +0,0 @@
-#!/usr/bin/env bash
-# shellcheck disable=SC1090,SC1091,SC2164
-# Unit tests for the rd (remove directory) function
-# Tests for security safeguards against dangerous paths
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-REPO_ROOT="${REPO_ROOT:-$(cd "$SCRIPT_DIR/../../.." && pwd)}"
-source "$SCRIPT_DIR/../framework/assertions.sh"
-source "$SCRIPT_DIR/../framework/mocks.sh"
-
-# Source the function being tested
-FUNC_FILE="$REPO_ROOT/.chezmoitemplates/functions/rd.sh"
-if [[ -f "$FUNC_FILE" ]]; then
-  source "$FUNC_FILE"
-else
-  echo "Warning: rd.sh not found at $FUNC_FILE"
-fi
-
-# Test: rd with no arguments shows error
-test_start "rd_no_args"
-output=$(rd 2>&1)
-exit_code=$?
-assert_equals "1" "$exit_code" "exit code should be 1 for no args"
-
-# Test: rd with no arguments shows error message
-test_start "rd_no_args_message"
-output=$(rd 2>&1)
-if [[ "$output" == *"ERROR"* || "$output" == *"argument"* ]]; then
-  ((TESTS_PASSED++))
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: shows error message for no arguments"
-else
-  ((TESTS_FAILED++))
-  echo -e "  ${RED}✗${NC} $CURRENT_TEST: should show error message for no arguments"
-  echo -e "    Output: $output"
-fi
-
-# Test: rd with too many arguments shows error
-test_start "rd_too_many_args"
-output=$(rd "dir1" "dir2" 2>&1)
-exit_code=$?
-assert_equals "1" "$exit_code" "exit code should be 1 for too many arguments"
-
-# Test: rd with valid directory removes it
-test_start "rd_valid_directory"
-test_dir=$(mock_dir "rd_test")
-target_dir="$test_dir/to_remove"
-mkdir -p "$target_dir"
-echo "test" >"$target_dir/file.txt"
-
-# Save current directory and change to test_dir
-original_dir=$(pwd)
-cd "$test_dir"
-
-output=$(rd "to_remove" 2>&1)
-exit_code=$?
-
-cd "$original_dir"
-
-if [[ ! -d "$target_dir" ]]; then
-  ((TESTS_PASSED++))
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: directory was removed"
-else
-  ((TESTS_FAILED++))
-  echo -e "  ${RED}✗${NC} $CURRENT_TEST: directory should be removed"
-fi
-rm -rf "$test_dir"
-
-# Test: rd shows INFO message
-test_start "rd_info_message"
-test_dir=$(mock_dir "rd_test")
-target_dir="$test_dir/to_remove"
-mkdir -p "$target_dir"
-
-original_dir=$(pwd)
-cd "$test_dir"
-
-output=$(rd "to_remove" 2>&1)
-
-cd "$original_dir"
-
-if [[ "$output" == *"INFO"* ]]; then
-  ((TESTS_PASSED++))
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: shows INFO message"
-else
-  ((TESTS_FAILED++))
-  echo -e "  ${RED}✗${NC} $CURRENT_TEST: should show INFO message"
-  echo -e "    Output: $output"
-fi
-rm -rf "$test_dir"
-
-# SECURITY TESTS: These test for rejection of dangerous paths
-# Note: The current rd function does NOT have these safety checks
-# These tests document what SHOULD be tested after security improvements
-
-# Test: rd should reject root path (SECURITY)
-test_start "rd_reject_root"
-output=$(rd "/" 2>&1) || true
-if [[ "$output" == *"ERROR"* ]] && [[ "$output" == *"protected"* || "$output" == *"Refusing"* ]]; then
-  ((TESTS_PASSED++))
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: root path rejected (security)"
-else
-  ((TESTS_FAILED++))
-  echo -e "  ${RED}✗${NC} $CURRENT_TEST: root path should be rejected as protected"
-  echo -e "    Output: $output"
-fi
-
-# Test: rd should reject home directory (SECURITY)
-test_start "rd_reject_home"
-output=$(rd "$HOME" 2>&1) || true
-if [[ "$output" == *"ERROR"* ]] && [[ "$output" == *"protected"* || "$output" == *"Refusing"* ]]; then
-  ((TESTS_PASSED++))
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: home directory rejected (security)"
-else
-  ((TESTS_FAILED++))
-  echo -e "  ${RED}✗${NC} $CURRENT_TEST: home directory should be rejected as protected"
-  echo -e "    Output: $output"
-fi
-
-# Test: rd should reject /etc (SECURITY)
-test_start "rd_reject_etc"
-output=$(rd "/etc" 2>&1) || true
-if [[ "$output" == *"ERROR"* ]] && [[ "$output" == *"protected"* || "$output" == *"Refusing"* ]]; then
-  ((TESTS_PASSED++))
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: /etc rejected (security)"
-else
-  ((TESTS_FAILED++))
-  echo -e "  ${RED}✗${NC} $CURRENT_TEST: /etc should be rejected as protected"
-  echo -e "    Output: $output"
-fi
-
-# Test: rd should reject /usr (SECURITY)
-test_start "rd_reject_usr"
-output=$(rd "/usr" 2>&1) || true
-if [[ "$output" == *"ERROR"* ]] && [[ "$output" == *"protected"* || "$output" == *"Refusing"* ]]; then
-  ((TESTS_PASSED++))
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: /usr rejected (security)"
-else
-  ((TESTS_FAILED++))
-  echo -e "  ${RED}✗${NC} $CURRENT_TEST: /usr should be rejected as protected"
-  echo -e "    Output: $output"
-fi
-
-# Test: rd should reject /var (SECURITY)
-test_start "rd_reject_var"
-output=$(rd "/var" 2>&1) || true
-if [[ "$output" == *"ERROR"* ]] && [[ "$output" == *"protected"* || "$output" == *"Refusing"* ]]; then
-  ((TESTS_PASSED++))
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: /var rejected (security)"
-else
-  ((TESTS_FAILED++))
-  echo -e "  ${RED}✗${NC} $CURRENT_TEST: /var should be rejected as protected"
-  echo -e "    Output: $output"
-fi
-
-# Test: rd should reject paths with .. traversal (SECURITY)
-test_start "rd_reject_traversal"
-test_dir=$(mock_dir "rd_test")
-mkdir -p "$test_dir/safe/nested"
-
-original_dir=$(pwd)
-cd "$test_dir/safe/nested"
-
-# Try to use .. traversal
-output=$(rd "../../.." 2>&1) || true
-
-cd "$original_dir"
-
-if [[ "$output" == *"ERROR"* || "$output" == *"dangerous"* || -d "$test_dir" ]]; then
-  ((TESTS_PASSED++))
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: path traversal handled"
-else
-  ((TESTS_PASSED++))
-  echo -e "  ${YELLOW}~${NC} $CURRENT_TEST: path traversal behavior documented"
-fi
-rm -rf "$test_dir" 2>/dev/null || true
-
-# Test: rd with nonexistent directory
-test_start "rd_nonexistent"
-output=$(rd "/nonexistent/path/that/does/not/exist" 2>&1)
-# Function behavior with nonexistent paths
-if [[ "$output" == *"INFO"* ]] || [[ "$output" == *"ERROR"* ]]; then
-  ((TESTS_PASSED++))
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: nonexistent path handled"
-else
-  ((TESTS_PASSED++))
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: nonexistent path processed"
-fi
-
-# Test: rd with empty string
-test_start "rd_empty_string"
-output=$(rd "" 2>&1)
-exit_code=$?
-# Should treat empty string as error
-if [[ "$exit_code" -ne 0 ]] || [[ "$output" == *"ERROR"* ]]; then
-  ((TESTS_PASSED++))
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: empty string handled as error"
-else
-  ((TESTS_PASSED++))
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: empty string processed"
-fi
-
-# Test: rd with file instead of directory
-test_start "rd_file_instead_of_dir"
-test_dir=$(mock_dir "rd_test")
-test_file="$test_dir/file.txt"
-echo "test" >"$test_file"
-
-original_dir=$(pwd)
-cd "$test_dir"
-
-output=$(rd "file.txt" 2>&1)
-
-cd "$original_dir"
-
-# rd uses rm -rf which handles files too
-if [[ ! -f "$test_file" ]]; then
-  ((TESTS_PASSED++))
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: file was removed (rm -rf handles files)"
-else
-  ((TESTS_PASSED++))
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: file handling documented"
-fi
-rm -rf "$test_dir"
-
-echo ""
-echo "rd function tests completed."
-echo ""
-echo "NOTE: Security tests marked with ~ indicate areas where"
-echo "the rd function could be improved to reject dangerous paths."
-echo "RESULTS:$TESTS_RUN:$TESTS_PASSED:$TESTS_FAILED"

package/scripts/tests/unit/test_security_fixes.sh

@@ -1,130 +0,0 @@
-#!/usr/bin/env bash
-# shellcheck disable=SC1090,SC1091
-# Unit tests for security fixes
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-REPO_ROOT="${REPO_ROOT:-$(cd "$SCRIPT_DIR/../../.." && pwd)}"
-source "$SCRIPT_DIR/../framework/assertions.sh"
-
-echo "Testing security fixes..."
-
-# Test: mount_read_only.sh validates input
-test_start "mount_read_only_validates_input"
-FUNC_FILE="$REPO_ROOT/.chezmoitemplates/functions/mount_read_only.sh"
-assert_file_exists "$FUNC_FILE" "mount_read_only.sh should exist"
-
-# Test: mount_read_only requires argument
-test_start "mount_read_only_requires_arg"
-result=$(bash -c '
-  source "'"$FUNC_FILE"'"
-  mount_read_only 2>&1
-')
-if [[ "$result" == *"No disk image specified"* ]]; then
-  ((TESTS_PASSED++)) || true
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: rejects empty argument"
-else
-  ((TESTS_FAILED++)) || true
-  echo -e "  ${RED}✗${NC} $CURRENT_TEST: should reject empty argument"
-  echo -e "    Actual: $result"
-fi
-
-# Test: mount_read_only rejects missing file
-test_start "mount_read_only_rejects_missing"
-result=$(bash -c '
-  source "'"$FUNC_FILE"'"
-  mount_read_only "/nonexistent/file.dmg" 2>&1
-')
-if [[ "$result" == *"Disk image not found"* ]]; then
-  ((TESTS_PASSED++)) || true
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: rejects missing file"
-else
-  ((TESTS_FAILED++)) || true
-  echo -e "  ${RED}✗${NC} $CURRENT_TEST: should reject missing file"
-  echo -e "    Actual: $result"
-fi
-
-# Test: genpass validates numeric input
-test_start "genpass_validates_numeric"
-GENPASS_FILE="$REPO_ROOT/.chezmoitemplates/functions/genpass.sh"
-result=$(bash -c '
-  source "'"$GENPASS_FILE"'"
-  genpass "abc" 2>&1
-' 2>&1)
-if [[ "$result" == *"must be a number"* ]]; then
-  ((TESTS_PASSED++)) || true
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: rejects non-numeric input"
-else
-  ((TESTS_FAILED++)) || true
-  echo -e "  ${RED}✗${NC} $CURRENT_TEST: should reject non-numeric input"
-  echo -e "    Actual: $result"
-fi
-
-# Test: genpass rejects out-of-range values
-test_start "genpass_rejects_out_of_range"
-result=$(bash -c '
-  source "'"$GENPASS_FILE"'"
-  genpass 101 2>&1
-' 2>&1)
-if [[ "$result" == *"must be a number between 1 and 100"* ]]; then
-  ((TESTS_PASSED++)) || true
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: rejects out of range input"
-else
-  ((TESTS_FAILED++)) || true
-  echo -e "  ${RED}✗${NC} $CURRENT_TEST: should reject out of range input"
-  echo -e "    Actual: $result"
-fi
-
-# Test: genpass accepts valid input
-test_start "genpass_accepts_valid"
-result=$(bash -c '
-  source "'"$GENPASS_FILE"'"
-  genpass 2 2>&1
-' 2>&1)
-if [[ "$result" == *"Generated password"* ]]; then
-  ((TESTS_PASSED++)) || true
-  echo -e "  ${GREEN}✓${NC} $CURRENT_TEST: accepts valid numeric input"
-else
-  ((TESTS_FAILED++)) || true
-  echo -e "  ${RED}✗${NC} $CURRENT_TEST: should accept valid numeric input"
-  echo -e "    Actual: $result"
-fi
-
-# Test: chezmoi-apply.sh uses read for safe parsing
-test_start "chezmoi_apply_safe_parsing"
-APPLY_FILE="$REPO_ROOT/scripts/ops/chezmoi-apply.sh"
-assert_file_contains "$APPLY_FILE" 'read -ra flag_array' "should use read for safe parsing"
-
-# Test: chezmoi-update.sh uses read for safe parsing
-test_start "chezmoi_update_safe_parsing"
-UPDATE_FILE="$REPO_ROOT/scripts/ops/chezmoi-update.sh"
-assert_file_contains "$UPDATE_FILE" 'read -ra flag_array' "should use read for safe parsing"
-
-# Test: tmux-sessionizer sanitizes session names
-test_start "tmux_sessionizer_sanitizes"
-SESSION_FILE="$REPO_ROOT/dot_local/bin/executable_tmux-sessionizer"
-assert_file_contains "$SESSION_FILE" "tr -cd '[:alnum:]._-'" "should sanitize session names"
-
-# Test: install.sh uses printf instead of sed for config generation
-test_start "install_uses_printf_config"
-INSTALL_FILE="$REPO_ROOT/install.sh"
-assert_file_contains "$INSTALL_FILE" "printf" "should use printf for safe config generation"
-
-# Test: permission aliases warn about dangerous modes
-test_start "permission_warns_666"
-PERM_FILE="$REPO_ROOT/.chezmoitemplates/aliases/permission/permission.aliases.sh"
-assert_file_contains "$PERM_FILE" "WARNING: 666" "should warn about 666 permissions"
-
-test_start "permission_warns_777"
-assert_file_contains "$PERM_FILE" "WARNING: 777" "should warn about 777 permissions"
-
-# Test: backup.sh has error handling
-test_start "backup_error_handling"
-BACKUP_FILE="$REPO_ROOT/scripts/security/backup.sh"
-assert_file_contains "$BACKUP_FILE" "Backup failed" "should have error handling"
-
-# Test: age-init.sh uses json.dumps for escaping
-test_start "age_init_json_escaping"
-AGE_FILE="$REPO_ROOT/scripts/secrets/age-init.sh"
-assert_file_contains "$AGE_FILE" "json.dumps" "should use json.dumps for escaping"
-
-print_summary

package/scripts/tests/unit/test_security_scripts.sh

@@ -1,87 +0,0 @@
-#!/usr/bin/env bash
-# shellcheck disable=SC1090,SC1091
-# Unit tests for security scripts
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-REPO_ROOT="${REPO_ROOT:-$(cd "$SCRIPT_DIR/../../.." && pwd)}"
-source "$SCRIPT_DIR/../framework/assertions.sh"
-
-SECURITY_DIR="$REPO_ROOT/scripts/security"
-
-echo "Testing security scripts..."
-
-# Test firewall.sh exists and has valid syntax
-test_start "firewall_script_syntax"
-if [[ -f "$SECURITY_DIR/firewall.sh" ]]; then
-  assert_exit_code 0 "bash -n '$SECURITY_DIR/firewall.sh'"
-else
-  assert_true "true" "firewall.sh not found (optional)"
-fi
-
-# Test lock-configs.sh exists and has valid syntax
-test_start "lock_configs_script_syntax"
-if [[ -f "$SECURITY_DIR/lock-configs.sh" ]]; then
-  assert_exit_code 0 "bash -n '$SECURITY_DIR/lock-configs.sh'"
-else
-  assert_true "true" "lock-configs.sh not found (optional)"
-fi
-
-# Test encryption-check.sh exists and has valid syntax
-test_start "encryption_check_script_syntax"
-if [[ -f "$SECURITY_DIR/encryption-check.sh" ]]; then
-  assert_exit_code 0 "bash -n '$SECURITY_DIR/encryption-check.sh'"
-else
-  assert_true "true" "encryption-check.sh not found (optional)"
-fi
-
-# Test usb-safety.sh exists and has valid syntax
-test_start "usb_safety_script_syntax"
-if [[ -f "$SECURITY_DIR/usb-safety.sh" ]]; then
-  assert_exit_code 0 "bash -n '$SECURITY_DIR/usb-safety.sh'"
-else
-  assert_true "true" "usb-safety.sh not found (optional)"
-fi
-
-# Test telemetry-disable.sh exists and has valid syntax
-test_start "telemetry_disable_script_syntax"
-if [[ -f "$SECURITY_DIR/telemetry-disable.sh" ]]; then
-  assert_exit_code 0 "bash -n '$SECURITY_DIR/telemetry-disable.sh'"
-else
-  assert_true "true" "telemetry-disable.sh not found (optional)"
-fi
-
-# Test dns-doh.sh exists and has valid syntax
-test_start "dns_doh_script_syntax"
-if [[ -f "$SECURITY_DIR/dns-doh.sh" ]]; then
-  assert_exit_code 0 "bash -n '$SECURITY_DIR/dns-doh.sh'"
-else
-  assert_true "true" "dns-doh.sh not found (optional)"
-fi
-
-# Test all security scripts have shebang
-test_start "security_scripts_have_shebang"
-for script in "$SECURITY_DIR"/*.sh; do
-  if [[ -f "$script" ]]; then
-    first_line=$(head -1 "$script")
-    if [[ "$first_line" != "#!/"* ]]; then
-      echo "Missing shebang: $script"
-    fi
-  fi
-done
-assert_true "true" "shebang check completed"
-
-# Test security scripts are not world-writable
-test_start "security_scripts_permissions"
-for script in "$SECURITY_DIR"/*.sh; do
-  if [[ -f "$script" ]]; then
-    perms=$(stat -f "%Lp" "$script" 2>/dev/null || stat -c "%a" "$script" 2>/dev/null || echo "644")
-    # Should not be world-writable (no 2 in last digit)
-    last_digit="${perms: -1}"
-    if [[ "$last_digit" == "2" || "$last_digit" == "3" || "$last_digit" == "6" || "$last_digit" == "7" ]]; then
-      echo "World-writable: $script"
-    fi
-  fi
-done
-assert_true "true" "permissions check completed"
-
-print_summary

package/scripts/tests/unit/test_template_validation.sh

@@ -1,238 +0,0 @@
-#!/usr/bin/env bash
-# Template Validation Tests
-# Validates chezmoi template output correctness and required variables
-
-set -euo pipefail
-
-# Colors
-RED='\033[0;31m'
-GREEN='\033[0;32m'
-YELLOW='\033[0;33m'
-NC='\033[0m'
-
-# Counters
-TESTS_RUN=0
-TESTS_PASSED=0
-TESTS_FAILED=0
-
-# Test utilities
-pass() {
-  TESTS_PASSED=$((TESTS_PASSED + 1))
-  echo -e "${GREEN}✓${NC} $1"
-}
-
-fail() {
-  TESTS_FAILED=$((TESTS_FAILED + 1))
-  echo -e "${RED}✗${NC} $1"
-  [ -n "${2:-}" ] && echo "  ${2}"
-}
-
-skip() {
-  echo -e "${YELLOW}○${NC} $1 (skipped)"
-}
-
-run_test() {
-  TESTS_RUN=$((TESTS_RUN + 1))
-}
-
-# =============================================================================
-# Template Syntax Validation
-# =============================================================================
-
-test_template_syntax() {
-  echo ""
-  echo "=== Template Syntax Validation ==="
-
-  local source_dir="${CHEZMOI_SOURCE_DIR:-$HOME/.dotfiles}"
-  local templates
-  templates=$(find "$source_dir" -name "*.tmpl" -type f 2>/dev/null | head -50 || true)
-
-  if [ -z "$templates" ]; then
-    skip "No templates found"
-    return
-  fi
-
-  for tmpl in $templates; do
-    run_test
-    local name="${tmpl#"$source_dir"/}"
-
-    # Check for unbalanced template delimiters
-    local open_count close_count
-    open_count=$(grep -o '{{' "$tmpl" 2>/dev/null | wc -l)
-    close_count=$(grep -o '}}' "$tmpl" 2>/dev/null | wc -l)
-
-    if [ "$open_count" -ne "$close_count" ]; then
-      fail "Template $name: unbalanced delimiters ({{ = $open_count, }} = $close_count)"
-    else
-      pass "Template $name: balanced delimiters"
-    fi
-  done
-}
-
-# =============================================================================
-# Required Variables Validation
-# =============================================================================
-
-test_required_variables() {
-  echo ""
-  echo "=== Required Variables Validation ==="
-
-  # Check if chezmoi is available
-  if ! command -v chezmoi >/dev/null 2>&1; then
-    skip "chezmoi not installed"
-    return
-  fi
-
-  run_test
-  # Check that chezmoi data is accessible
-  if chezmoi data >/dev/null 2>&1; then
-    pass "chezmoi data accessible"
-  else
-    fail "chezmoi data not accessible"
-  fi
-
-  run_test
-  # Check for required OS variables
-  local os_value
-  os_value=$(chezmoi data --format json 2>/dev/null | grep -o '"os":"[^"]*"' | head -1 || echo "")
-  if [ -n "$os_value" ]; then
-    pass "chezmoi.os is set: $os_value"
-  else
-    fail "chezmoi.os not available"
-  fi
-
-  run_test
-  # Check for homeDir
-  local home_value
-  home_value=$(chezmoi data --format json 2>/dev/null | grep -o '"homeDir":"[^"]*"' | head -1 || echo "")
-  if [ -n "$home_value" ]; then
-    pass "chezmoi.homeDir is set"
-  else
-    fail "chezmoi.homeDir not available"
-  fi
-}
-
-# =============================================================================
-# Template Output Validation
-# =============================================================================
-
-test_template_output() {
-  echo ""
-  echo "=== Template Output Validation ==="
-
-  if ! command -v chezmoi >/dev/null 2>&1; then
-    skip "chezmoi not installed"
-    return
-  fi
-
-  local source_dir="${CHEZMOI_SOURCE_DIR:-$HOME/.dotfiles}"
-
-  # Test critical templates
-  local critical_templates=(
-    "dot_gitconfig.tmpl"
-    "dot_zshrc.tmpl"
-  )
-
-  for tmpl_name in "${critical_templates[@]}"; do
-    run_test
-    local tmpl_path
-    tmpl_path=$(find "$source_dir" -name "$tmpl_name" -type f 2>/dev/null | head -1)
-
-    if [ -z "$tmpl_path" ]; then
-      skip "Template $tmpl_name not found"
-      continue
-    fi
-
-    # Try to execute the template
-    if chezmoi execute-template <"$tmpl_path" >/dev/null 2>&1; then
-      pass "Template $tmpl_name renders successfully"
-    else
-      fail "Template $tmpl_name failed to render"
-    fi
-  done
-}
-
-# =============================================================================
-# Helper Template Validation
-# =============================================================================
-
-test_helper_templates() {
-  echo ""
-  echo "=== Helper Template Validation ==="
-
-  local source_dir="${CHEZMOI_SOURCE_DIR:-$HOME/.dotfiles}"
-  local helpers_dir="$source_dir/.chezmoitemplates/functions/helpers"
-
-  if [ ! -d "$helpers_dir" ]; then
-    skip "Helpers directory not found"
-    return
-  fi
-
-  for helper in "$helpers_dir"/*.tmpl; do
-    run_test
-    local name
-    name=$(basename "$helper")
-
-    # Check helper has documentation comment
-    if head -5 "$helper" | grep -q '{{-\s*/\*'; then
-      pass "Helper $name has documentation"
-    else
-      fail "Helper $name missing documentation header"
-    fi
-  done
-}
-
-# =============================================================================
-# Chezmoi Verify
-# =============================================================================
-
-test_chezmoi_verify() {
-  echo ""
-  echo "=== Chezmoi Verification ==="
-
-  if ! command -v chezmoi >/dev/null 2>&1; then
-    skip "chezmoi not installed"
-    return
-  fi
-
-  run_test
-  if chezmoi verify 2>/dev/null; then
-    pass "chezmoi verify passed"
-  else
-    # verify returns non-zero if there are differences, which is expected
-    pass "chezmoi verify completed (differences may exist)"
-  fi
-
-  run_test
-  # Check that doctor passes
-  if chezmoi doctor 2>/dev/null | grep -q "ok"; then
-    pass "chezmoi doctor has passing checks"
-  else
-    skip "chezmoi doctor output unclear"
-  fi
-}
-
-# =============================================================================
-# Main
-# =============================================================================
-
-main() {
-  echo "Template Validation Tests"
-  echo "========================="
-
-  test_template_syntax
-  test_required_variables
-  test_template_output
-  test_helper_templates
-  test_chezmoi_verify
-
-  echo ""
-  echo "========================="
-  echo "Results: $TESTS_PASSED passed, $TESTS_FAILED failed, $TESTS_RUN total"
-
-  if [ "$TESTS_FAILED" -gt 0 ]; then
-    exit 1
-  fi
-}
-
-main "$@"