@sebastienrousseau/dotfiles 0.2.520 → 0.2.522

package/scripts/qa/examples-coverage.sh

@@ -1,94 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-# Copyright (c) 2015-2026 Sebastien Rousseau
-# =============================================================================
-# examples-coverage.sh — enforce that every core feature domain ships a
-# runnable example under examples/. Mirrors scripts/qa/docs-coverage.sh:
-# it is a *coverage contract*, not a linter. Threshold defaults to 100%.
-#
-# A feature domain is "covered" when examples/example-<domain>.sh exists.
-# Keep REQUIRED_AREAS in lockstep with the feature surface — adding a major
-# user-facing capability (a new `dot` subsystem) means adding its example.
-# =============================================================================
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-REPO_ROOT="${REPO_ROOT:-$(cd "$SCRIPT_DIR/../.." && pwd)}"
-EXAMPLES_DIR="$REPO_ROOT/examples"
-DOT_CLI="$REPO_ROOT/bin/dot"
-MIN_EXAMPLES_COVERAGE="${MIN_EXAMPLES_COVERAGE:-100}"
-
-# Public commands/subcommands, extracted from bin/dot's _dot_help_specs — the
-# same source scripts/qa/docs-coverage.sh uses, so docs and examples stay in
-# lockstep at the command granularity.
-extract_public_commands() {
-  awk -F'|' '
-    /_dot_help_specs\(\)/ { in_func=1; next }
-    in_func && /cat <<'\''EOF'\''/ { in_block=1; next }
-    in_block && /^EOF$/ { exit }
-    in_block && NF>=2 { print $2 }
-  ' "$DOT_CLI"
-}
-
-# Core feature domains that must each have examples/example-<area>.sh.
-REQUIRED_AREAS=(
-  ai-patterns
-  cli-utilities
-  coverage-gate
-  diagnostics
-  dot-commands
-  functions
-  fleet
-  git-hooks
-  install-uninstall
-  ops
-  platform-contract
-  qa
-  secrets
-  security
-  test-suite
-  testing-framework
-  theme
-)
-
-total=0
-covered=0
-missing=()
-
-# --- Check 1: every feature domain has a dedicated example file. ---
-for area in "${REQUIRED_AREAS[@]}"; do
-  total=$((total + 1))
-  if [ -f "$EXAMPLES_DIR/example-$area.sh" ]; then
-    covered=$((covered + 1))
-  else
-    missing+=("domain:$area")
-  fi
-done
-
-# --- Check 2: every public command/subcommand is referenced in an example. ---
-while IFS= read -r cmd; do
-  [ -n "$cmd" ] || continue
-  total=$((total + 1))
-  # "dot <cmd>" followed by a non-identifier char (or EOL) — avoids matching
-  # `dot ai` against `dot ai-query`, and matches printf '...\n'-terminated refs.
-  if grep -rqE "dot ${cmd}([^A-Za-z0-9_-]|\$)" "$EXAMPLES_DIR" 2>/dev/null; then
-    covered=$((covered + 1))
-  else
-    missing+=("cmd:$cmd")
-  fi
-done < <(extract_public_commands | sort -u)
-
-pct="$(awk -v c="$covered" -v t="$total" \
-  'BEGIN{if(t==0){print "0.00"}else{printf "%.2f", (100*c/t)}}')"
-printf 'Examples coverage: %s/%s (%s%%)\n' "$covered" "$total" "$pct"
-printf 'Threshold: %s%%\n' "$MIN_EXAMPLES_COVERAGE"
-if [ "${#missing[@]}" -gt 0 ]; then
-  printf 'Missing coverage for: %s\n' "${missing[*]}" >&2
-fi
-
-if awk -v p="$pct" -v min="$MIN_EXAMPLES_COVERAGE" 'BEGIN{exit !(p+0 >= min+0)}'; then
-  printf 'PASS: every feature domain and every public command has an example.\n'
-  exit 0
-fi
-printf 'FAIL: examples coverage %s%% is below the %s%% threshold.\n' "$pct" "$MIN_EXAMPLES_COVERAGE" >&2
-exit 1

package/scripts/qa/powershell-contract.ps1

@@ -1,95 +0,0 @@
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
-#
-# PowerShell parity contract — smoke test for the dotfiles PowerShell
-# profile. Run by the windows-latest CI job (#860). Asserts that:
-#
-#   1. The profile parses + loads without throwing.
-#   2. Core function shims (`dot`, `ll`, `la`, `cat`) are defined.
-#   3. PSScriptAnalyzer reports no errors against the profile (warnings
-#      surface but don't fail the gate; tighten later).
-#
-# Exit codes:
-#   0  contract intact.
-#   1  any check failed; details printed to host.
-
-$ErrorActionPreference = 'Stop'
-$Failures = New-Object System.Collections.Generic.List[string]
-
-$RepoRoot = if ($env:GITHUB_WORKSPACE) { $env:GITHUB_WORKSPACE } else { (Get-Location).Path }
-$ProfileSrc = Join-Path $RepoRoot 'defaults/dot_config/powershell/Microsoft.PowerShell_profile.ps1.tmpl'
-
-if (-not (Test-Path $ProfileSrc)) {
-    Write-Output "FAIL: profile source not found at $ProfileSrc"
-    exit 1
-}
-
-# Step 1 — chezmoi-render the template into a real .ps1 we can dot-source.
-# In CI, chezmoi is on PATH (installed by setup-chezmoi composite).
-$Rendered = Join-Path $env:TEMP 'Microsoft.PowerShell_profile.ps1'
-if (Get-Command chezmoi -ErrorAction SilentlyContinue) {
-    & chezmoi execute-template --init --promptString version=0.2.501 `
-        --in $ProfileSrc | Set-Content -Path $Rendered -NoNewline
-} else {
-    # Fallback: strip chezmoi template syntax with a simple regex so the
-    # contract still runs locally without chezmoi installed.
-    (Get-Content $ProfileSrc -Raw) -replace '\{\{[^}]+\}\}', '0.0.0-fallback' |
-        Set-Content -Path $Rendered -NoNewline
-}
-
-if (-not (Test-Path $Rendered)) {
-    $Failures.Add("profile template did not render to $Rendered")
-}
-
-# Step 2 — dot-source the rendered profile and verify it didn't throw.
-$loadOk = $false
-try {
-    . $Rendered
-    $loadOk = $true
-    Write-Output "OK: profile dot-sourced"
-} catch {
-    Write-Output "FAIL: profile threw during load: $_"
-    $Failures.Add("profile load: $_")
-}
-
-# Step 3 — verify required function shims are defined.
-$RequiredFunctions = @('dot', 'd', 'll', 'la', 'cat')
-foreach ($fn in $RequiredFunctions) {
-    if (Get-Command $fn -CommandType Function -ErrorAction SilentlyContinue) {
-        Write-Output "OK: function $fn defined"
-    } else {
-        Write-Output "FAIL: function $fn not defined"
-        $Failures.Add("missing function: $fn")
-    }
-}
-
-# Step 4 — PSScriptAnalyzer (static analysis). Pre-installed on the
-# windows-latest GitHub-hosted runner; install on demand if missing.
-if (-not (Get-Module -ListAvailable -Name PSScriptAnalyzer)) {
-    Write-Output "Installing PSScriptAnalyzer..."
-    Install-Module -Name PSScriptAnalyzer -Force -Scope CurrentUser -ErrorAction SilentlyContinue | Out-Null
-}
-
-if (Get-Module -ListAvailable -Name PSScriptAnalyzer) {
-    Import-Module PSScriptAnalyzer -Force
-    $Findings = Invoke-ScriptAnalyzer -Path $Rendered -Severity 'Error' -ErrorAction SilentlyContinue
-    if ($Findings) {
-        foreach ($f in $Findings) {
-            Write-Output "FAIL: PSScriptAnalyzer error: $($f.RuleName) at line $($f.Line): $($f.Message)"
-            $Failures.Add("PSScriptAnalyzer error: $($f.RuleName)")
-        }
-    } else {
-        Write-Output "OK: PSScriptAnalyzer clean (Error severity)"
-    }
-} else {
-    Write-Output "WARN: PSScriptAnalyzer not available — static analysis skipped"
-}
-
-Write-Output ""
-if ($Failures.Count -eq 0) {
-    Write-Output "PowerShell contract: PASS"
-    exit 0
-} else {
-    Write-Output "PowerShell contract: FAIL ($($Failures.Count) issue(s))"
-    foreach ($f in $Failures) { Write-Output "  - $f" }
-    exit 1
-}

package/scripts/qa/reliability-audit.sh

@@ -1,139 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-# Copyright (c) 2015-2026 Sebastien Rousseau
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-REPO_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
-
-mode="full"
-run_integration=0
-min_coverage="${MIN_COVERAGE:-100}"
-
-platform_name() {
-  case "$(uname -s)" in
-    Darwin) echo "macOS" ;;
-    Linux)
-      if grep -qi microsoft /proc/version 2>/dev/null; then
-        echo "WSL"
-      else
-        echo "Linux"
-      fi
-      ;;
-    *) echo "Unknown" ;;
-  esac
-}
-
-usage() {
-  cat <<'EOF'
-Reliability Audit
-
-Usage:
-  reliability-audit.sh [--quick] [--unit-only] [--with-integration]
-
-Options:
-  --quick             Run syntax, unit, coverage, and examples
-  --unit-only         Run syntax, unit, coverage, and examples
-  --with-integration  Include integration tests
-EOF
-}
-
-run_step() {
-  local label="$1"
-  shift
-  printf '\n[%s] %s\n' "$(date +%H:%M:%S)" "$label"
-  "$@"
-}
-
-shell_syntax() {
-  local failed=0
-  local file
-
-  while IFS= read -r -d '' file; do
-    if ! bash -n "$file"; then
-      failed=$((failed + 1))
-    fi
-  done < <(find "$REPO_ROOT" \
-    \( -path "$REPO_ROOT/.git" -o -path "$REPO_ROOT/.coverage" \) -prune \
-    -o -type f \( -name "*.sh" -o -name "*.bash" \) -print0)
-
-  if [ "$failed" -ne 0 ]; then
-    printf 'Syntax failures: %s\n' "$failed" >&2
-    return 1
-  fi
-}
-
-unit_tests() {
-  cd "$REPO_ROOT"
-  ./tests/framework/test_runner.sh --jobs auto
-}
-
-integration_tests() {
-  cd "$REPO_ROOT"
-  ./tests/framework/test_runner.sh --jobs auto --integration-only
-}
-
-coverage_gate() {
-  cd "$REPO_ROOT"
-  MIN_COVERAGE="$min_coverage" ./tests/framework/module_coverage.sh
-}
-
-example_gate() {
-  cd "$REPO_ROOT"
-  bash ./scripts/qa/validate-examples.sh
-}
-
-docs_coverage_gate() {
-  cd "$REPO_ROOT"
-  bash ./scripts/qa/docs-coverage.sh
-}
-
-traceability_gate() {
-  cd "$REPO_ROOT"
-  bash ./scripts/qa/traceability-coverage.sh
-}
-
-while [ "$#" -gt 0 ]; do
-  case "$1" in
-    --quick)
-      mode="quick"
-      ;;
-    --unit-only)
-      mode="unit"
-      ;;
-    --with-integration)
-      run_integration=1
-      ;;
-    -h | --help)
-      usage
-      exit 0
-      ;;
-    *)
-      printf 'Unknown option: %s\n' "$1" >&2
-      usage >&2
-      exit 1
-      ;;
-  esac
-  shift
-done
-
-if [ "$mode" = "full" ]; then
-  run_integration=1
-fi
-
-printf 'Reliability Audit\n'
-printf 'Platform: %s\n' "$(platform_name)"
-printf 'Executable module-mapping floor: %s%%\n' "$min_coverage"
-
-run_step "Shell syntax" shell_syntax
-run_step "Unit suite" unit_tests
-run_step "Executable module mapping" coverage_gate
-run_step "Docs coverage" docs_coverage_gate
-run_step "Traceability coverage" traceability_gate
-run_step "Executable examples" example_gate
-
-if [ "$run_integration" -eq 1 ]; then
-  run_step "Integration suite" integration_tests
-fi
-
-printf '\nReliability audit passed.\n'

package/scripts/qa/scorecard-snapshot.sh

@@ -1,128 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-# Copyright (c) 2015-2026 Sebastien Rousseau
-#
-# Fetch the current OpenSSF Scorecard result and refresh the
-# per-check posture table in docs/security/SCORECARD.md.
-#
-# The narrative sections (open findings, exceptions, closed-this-
-# cycle log) are preserved as-is — only the auto-generated
-# baseline block between the BEGIN/END markers is rewritten.
-#
-# Usage:
-#   scripts/qa/scorecard-snapshot.sh           # refresh
-#   scripts/qa/scorecard-snapshot.sh --check   # exit 1 if stale
-#
-# Exit codes:
-#   0  snapshot up-to-date / written
-#   1  --check mode and content drifted
-#   2  bad usage / Scorecard API unreachable
-
-set -euo pipefail
-
-REPO_ROOT="${REPO_ROOT:-$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)}"
-cd "$REPO_ROOT"
-
-mode="write"
-for arg in "$@"; do
-  case "$arg" in
-    --check) mode="check" ;;
-    -h | --help)
-      sed -n '2,16p' "$0"
-      exit 0
-      ;;
-    *)
-      echo "unknown flag: $arg" >&2
-      exit 2
-      ;;
-  esac
-done
-
-api='https://api.scorecard.dev/projects/github.com/sebastienrousseau/dotfiles'
-target='docs/security/SCORECARD.md'
-
-[[ -f "$target" ]] || {
-  echo "target not found: $target" >&2
-  exit 2
-}
-
-if ! command -v jq >/dev/null 2>&1; then
-  echo "jq required" >&2
-  exit 2
-fi
-
-payload="$(curl --proto '=https' --tlsv1.2 -fsSL --connect-timeout 10 --max-time 30 "$api")" || {
-  echo "Scorecard API unreachable: $api" >&2
-  exit 2
-}
-
-aggregate="$(printf '%s' "$payload" | jq -r '.score')"
-date="$(printf '%s' "$payload" | jq -r '.date')"
-
-# Build the auto-block: per-check status + score, one row each.
-block="$(mktemp)"
-trap 'rm -f "$block"' EXIT
-
-{
-  printf '<!-- BEGIN scorecard-snapshot (auto-generated, do not edit by hand) -->\n'
-  printf 'Aggregate score **%s / 10** at %s.\n\n' "$aggregate" "$date"
-  printf '| Check | Score | Reason |\n'
-  printf '|---|---:|---|\n'
-  printf '%s' "$payload" |
-    jq -r '.checks
-        | sort_by(.name)
-        | .[]
-        | [.name, (.score|tostring), ((.reason // "") | gsub("\\|"; "\\|") | .[0:100])]
-        | "| " + (. | join(" | ")) + " |"'
-  # shellcheck disable=SC2016 # backticks here are markdown code-spans, not subshells
-  printf '\n_Refresh: `scripts/qa/scorecard-snapshot.sh` · Monitoring: `.github/workflows/scorecard.yml`._\n'
-  printf '<!-- END scorecard-snapshot -->\n'
-} >"$block"
-
-# Splice the block into the target. Find the BEGIN/END markers; if
-# they're not yet present, append the block after the "## Live
-# score" section header.
-out="$(mktemp)"
-trap 'rm -f "$block" "$out"' EXIT
-
-if grep -q '<!-- BEGIN scorecard-snapshot' "$target"; then
-  awk -v blockfile="$block" '
-    BEGIN { skip = 0 }
-    /<!-- BEGIN scorecard-snapshot/ {
-      skip = 1
-      while ((getline line < blockfile) > 0) print line
-      close(blockfile)
-      next
-    }
-    /<!-- END scorecard-snapshot -->/ {
-      skip = 0
-      next
-    }
-    skip == 0 { print }
-  ' "$target" >"$out"
-else
-  # First run — inject right after the "## Live score" h2.
-  awk -v blockfile="$block" '
-    { print }
-    /^## Live score$/ && !inserted {
-      print ""
-      while ((getline line < blockfile) > 0) print line
-      close(blockfile)
-      inserted = 1
-    }
-  ' "$target" >"$out"
-fi
-
-if [[ "$mode" == "check" ]]; then
-  if ! diff -q "$target" "$out" >/dev/null 2>&1; then
-    echo "SCORECARD.md snapshot is stale (live score: $aggregate)." >&2
-    diff -u "$target" "$out" | head -50 >&2
-    exit 1
-  fi
-  echo "SCORECARD.md snapshot is in sync (aggregate: $aggregate)"
-  exit 0
-fi
-
-mv "$out" "$target"
-trap - EXIT
-echo "Refreshed $target (aggregate: $aggregate as of $date)"

package/scripts/qa/traceability-coverage.sh

@@ -1,124 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-# Copyright (c) 2015-2026 Sebastien Rousseau
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-REPO_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
-TRACE_DOC="$REPO_ROOT/docs/operations/TRACEABILITY.md"
-MIN_TRACEABILITY_COVERAGE="${MIN_TRACEABILITY_COVERAGE:-100}"
-
-TOTAL_TRACE_CHECKS=0
-COVERED_TRACE_CHECKS=0
-
-extract_impl_paths() {
-  awk '
-    /^\| BT-/ {
-      cols = $0
-      sub(/^\|[[:space:]]*/, "", cols)
-      sub(/[[:space:]]*\|[[:space:]]*$/, "", cols)
-      n = split(cols, parts, /\|/)
-      gsub(/^[[:space:]]+|[[:space:]]+$/, "", parts[3])
-      split(parts[3], impls, /,/)
-      for (i in impls) {
-        gsub(/^[[:space:]]+|[[:space:]]+$/, "", impls[i])
-        gsub(/`/, "", impls[i])
-        print impls[i]
-      }
-    }
-  ' "$TRACE_DOC" | sort -u
-}
-
-trim() {
-  sed 's/^[[:space:]]*//; s/[[:space:]]*$//'
-}
-
-record_trace_check() {
-  local label="$1"
-  local target="$2"
-
-  TOTAL_TRACE_CHECKS=$((TOTAL_TRACE_CHECKS + 1))
-  if [ -e "$target" ]; then
-    COVERED_TRACE_CHECKS=$((COVERED_TRACE_CHECKS + 1))
-  else
-    printf 'Missing traceability target: %s (%s)\n' "$label" "$target" >&2
-  fi
-}
-
-check_path_list() {
-  local kind="$1"
-  local value="$2"
-  local behavior_id="$3"
-  local rel=""
-
-  while IFS= read -r rel; do
-    rel="$(printf '%s' "$rel" | trim)"
-    [ -n "$rel" ] || continue
-    rel="${rel#\`}"
-    rel="${rel%\`}"
-    record_trace_check "$behavior_id $kind" "$REPO_ROOT/$rel"
-  done < <(printf '%s\n' "$value" | tr ',' '\n')
-}
-
-report_traceability() {
-  local pct
-  pct="$(awk -v c="$COVERED_TRACE_CHECKS" -v t="$TOTAL_TRACE_CHECKS" 'BEGIN{if(t==0){print "0.00"}else{printf "%.2f", (100*c/t)}}')"
-
-  printf 'Traceability coverage: %s/%s (%s%%)\n' "$COVERED_TRACE_CHECKS" "$TOTAL_TRACE_CHECKS" "$pct"
-  printf 'Threshold: %s%%\n' "$MIN_TRACEABILITY_COVERAGE"
-
-  awk -v p="$pct" -v min="$MIN_TRACEABILITY_COVERAGE" 'BEGIN{exit !(p+0 >= min+0)}'
-}
-
-main() {
-  local line=""
-  local cols=""
-  local behavior_id=""
-  local impls=""
-  local tests=""
-  local docs=""
-
-  while IFS= read -r line; do
-    case "$line" in
-      \|\ BT-*)
-        cols="$(printf '%s\n' "$line" | sed 's/^|//; s/|$//')"
-        behavior_id="$(printf '%s\n' "$cols" | cut -d'|' -f1 | trim)"
-        impls="$(printf '%s\n' "$cols" | cut -d'|' -f3 | trim)"
-        tests="$(printf '%s\n' "$cols" | cut -d'|' -f4 | trim)"
-        docs="$(printf '%s\n' "$cols" | cut -d'|' -f5 | trim)"
-
-        check_path_list "implementation" "$impls" "$behavior_id"
-        check_path_list "test" "$tests" "$behavior_id"
-        check_path_list "doc" "$docs" "$behavior_id"
-        ;;
-    esac
-  done <"$TRACE_DOC"
-
-  while IFS= read -r required; do
-    [ -n "$required" ] || continue
-    TOTAL_TRACE_CHECKS=$((TOTAL_TRACE_CHECKS + 1))
-    if extract_impl_paths | grep -Fxq "$required"; then
-      COVERED_TRACE_CHECKS=$((COVERED_TRACE_CHECKS + 1))
-    else
-      printf 'Missing traceability row for implementation: %s\n' "$required" >&2
-    fi
-  done < <(
-    {
-      find "$REPO_ROOT/scripts/dot/commands" -maxdepth 1 -type f -name '*.sh' | sed "s#^$REPO_ROOT/##"
-      find "$REPO_ROOT/scripts/qa" -maxdepth 1 -type f -name '*.sh' | sed "s#^$REPO_ROOT/##"
-    } | sort -u
-  )
-
-  # Capture report_traceability's exit — without this the trailing
-  # `printf PASS...` returns 0 and overwrites the awk threshold verdict,
-  # so a below-threshold run silently exits 0 (same bug as docs-coverage.sh).
-  if ! report_traceability; then
-    printf 'FAIL: traceability coverage below MIN_TRACEABILITY_COVERAGE=%s%%\n' \
-      "$MIN_TRACEABILITY_COVERAGE" >&2
-    return 1
-  fi
-
-  printf 'PASS: core internal behaviors have implementation, test, and documentation traceability at or above the required threshold\n'
-}
-
-main "$@"

package/scripts/qa/validate-examples.sh

@@ -1,90 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-# Copyright (c) 2015-2026 Sebastien Rousseau
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-REPO_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
-EXAMPLES_DIR="$REPO_ROOT/examples"
-
-# Per-example wall-clock budget. Bounding each example individually means one
-# slow or hanging example is reported by name instead of silently consuming the
-# whole script's budget and surfacing as an opaque rc=124 from the caller.
-EXAMPLE_TIMEOUT="${EXAMPLE_TIMEOUT:-60}"
-
-usage() {
-  cat <<'USAGE'
-Usage: validate-examples.sh [--help]
-
-Runs every executable example in examples/ and fails if any of them fails or
-exceeds the per-example timeout.
-
-Environment:
-  EXAMPLE_TIMEOUT   Per-example timeout in seconds (default: 60). Set to 0 to
-                    disable the timeout.
-USAGE
-}
-
-# Parse arguments before doing any work. Previously this script ignored its
-# arguments entirely, so `--help` silently executed the whole examples suite —
-# which meant asking for help ran a multi-minute job.
-case "${1:-}" in
-  -h | --help)
-    usage
-    exit 0
-    ;;
-  "") ;;
-  *)
-    printf 'Unknown option: %s\n\n' "$1" >&2
-    usage >&2
-    exit 2
-    ;;
-esac
-
-if [ ! -d "$EXAMPLES_DIR" ]; then
-  echo "No examples directory found: $EXAMPLES_DIR" >&2
-  exit 1
-fi
-
-# Resolve a timeout binary. GNU coreutils ships `timeout`; on macOS it is
-# `gtimeout` when coreutils is installed. Without either, run unbounded rather
-# than failing outright.
-timeout_cmd=()
-if [ "$EXAMPLE_TIMEOUT" != "0" ]; then
-  if command -v timeout >/dev/null 2>&1; then
-    timeout_cmd=(timeout --kill-after=5 "$EXAMPLE_TIMEOUT")
-  elif command -v gtimeout >/dev/null 2>&1; then
-    timeout_cmd=(gtimeout --kill-after=5 "$EXAMPLE_TIMEOUT")
-  else
-    printf 'warning: no timeout binary found; examples run unbounded\n' >&2
-  fi
-fi
-
-found=0
-failed=0
-while IFS= read -r -d '' example; do
-  found=1
-  name="$(basename "$example")"
-  printf 'Running example: %s\n' "$name"
-  rc=0
-  "${timeout_cmd[@]+"${timeout_cmd[@]}"}" bash "$example" </dev/null || rc=$?
-  if [ "$rc" -eq 124 ]; then
-    printf 'FAIL: %s exceeded the %ss timeout\n' "$name" "$EXAMPLE_TIMEOUT" >&2
-    failed=$((failed + 1))
-  elif [ "$rc" -ne 0 ]; then
-    printf 'FAIL: %s exited %s\n' "$name" "$rc" >&2
-    failed=$((failed + 1))
-  fi
-done < <(find "$EXAMPLES_DIR" -maxdepth 1 -type f -name "*.sh" -print0 | sort -z)
-
-if [ "$found" -eq 0 ]; then
-  echo "No executable examples found in $EXAMPLES_DIR" >&2
-  exit 1
-fi
-
-if [ "$failed" -ne 0 ]; then
-  printf '%s example(s) failed.\n' "$failed" >&2
-  exit 1
-fi
-
-printf 'Examples passed.\n'

package/scripts/qa/wsl-contract.sh

@@ -1,12 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-# Copyright (c) 2015-2026 Sebastien Rousseau
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-REPO_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
-
-cd "$REPO_ROOT"
-
-bash tests/unit/install/test_os_detection_comprehensive.sh
-bash tests/unit/functions/test_platform_detection_behavior.sh