autonomous-coding-toolkit 1.0.0

package/scripts/tests/test-common.sh

@@ -0,0 +1,168 @@
+#!/usr/bin/env bash
+# Test shared common.sh functions
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "$SCRIPT_DIR/../lib/common.sh"
+
+FAILURES=0
+TESTS=0
+
+assert_eq() {
+    local desc="$1" expected="$2" actual="$3"
+    TESTS=$((TESTS + 1))
+    if [[ "$expected" != "$actual" ]]; then
+        echo "FAIL: $desc"
+        echo "  expected: $expected"
+        echo "  actual:   $actual"
+        FAILURES=$((FAILURES + 1))
+    else
+        echo "PASS: $desc"
+    fi
+}
+
+assert_exit() {
+    local desc="$1" expected_exit="$2"
+    shift 2
+    local actual_exit=0
+    "$@" || actual_exit=$?
+    TESTS=$((TESTS + 1))
+    if [[ "$expected_exit" != "$actual_exit" ]]; then
+        echo "FAIL: $desc"
+        echo "  expected exit: $expected_exit"
+        echo "  actual exit:   $actual_exit"
+        FAILURES=$((FAILURES + 1))
+    else
+        echo "PASS: $desc"
+    fi
+}
+
+WORK=$(mktemp -d)
+trap 'rm -rf "$WORK"' EXIT
+
+# === detect_project_type tests ===
+
+# Python project (pyproject.toml)
+mkdir -p "$WORK/py-proj"
+touch "$WORK/py-proj/pyproject.toml"
+val=$(detect_project_type "$WORK/py-proj")
+assert_eq "detect_project_type: pyproject.toml -> python" "python" "$val"
+
+# Python project (setup.py)
+mkdir -p "$WORK/py-setup"
+touch "$WORK/py-setup/setup.py"
+val=$(detect_project_type "$WORK/py-setup")
+assert_eq "detect_project_type: setup.py -> python" "python" "$val"
+
+# Node project (package.json)
+mkdir -p "$WORK/node-proj"
+echo '{"name":"test"}' > "$WORK/node-proj/package.json"
+val=$(detect_project_type "$WORK/node-proj")
+assert_eq "detect_project_type: package.json -> node" "node" "$val"
+
+# Makefile project
+mkdir -p "$WORK/make-proj"
+echo 'test:' > "$WORK/make-proj/Makefile"
+val=$(detect_project_type "$WORK/make-proj")
+assert_eq "detect_project_type: Makefile -> make" "make" "$val"
+
+# Unknown project
+mkdir -p "$WORK/empty"
+val=$(detect_project_type "$WORK/empty")
+assert_eq "detect_project_type: empty -> unknown" "unknown" "$val"
+
+# Bash project detection (run-all-tests.sh)
+mkdir -p "$WORK/bash-proj/scripts/tests"
+echo '#!/bin/bash' > "$WORK/bash-proj/scripts/tests/run-all-tests.sh"
+chmod +x "$WORK/bash-proj/scripts/tests/run-all-tests.sh"
+val=$(detect_project_type "$WORK/bash-proj")
+assert_eq "detect_project_type: bash project with run-all-tests.sh" "bash" "$val"
+
+# Bash project with test-*.sh glob
+mkdir -p "$WORK/bash-proj2/scripts/tests"
+touch "$WORK/bash-proj2/scripts/tests/test-foo.sh"
+val=$(detect_project_type "$WORK/bash-proj2")
+assert_eq "detect_project_type: bash project with test-*.sh files" "bash" "$val"
+
+# === strip_json_fences tests ===
+
+val=$(echo '```json
+{"key":"value"}
+```' | strip_json_fences)
+assert_eq "strip_json_fences: removes fences" '{"key":"value"}' "$val"
+
+val=$(echo '{"key":"value"}' | strip_json_fences)
+assert_eq "strip_json_fences: plain JSON unchanged" '{"key":"value"}' "$val"
+
+# === check_memory_available tests ===
+
+# This test just verifies the function exists and returns 0/1
+# We can't control actual memory, so test the interface
+assert_exit "check_memory_available: runs without error" 0 \
+    check_memory_available 0
+
+# Test 1GB threshold: should also always pass on any real system
+assert_exit "check_memory_available: threshold 1 always passes" 0 \
+    check_memory_available 1
+
+# Test that check_memory_available uses MB internally (not GB)
+# Verify it doesn't use free -g (which truncates)
+TESTS=$((TESTS + 1))
+if grep -q 'free -g' "$SCRIPT_DIR/../lib/common.sh"; then
+    echo "FAIL: check_memory_available should use free -m, not free -g"
+    FAILURES=$((FAILURES + 1))
+else
+    echo "PASS: check_memory_available uses free -m (no free -g in common.sh)"
+fi
+
+# Test that check_memory_available returns exit 2 when free is unavailable
+# Create a wrapper that hides the real free command
+_test_no_free() {
+    (
+        # Prepend fake bin to PATH so awk is still available, but free outputs nothing
+        local fake_bin
+        fake_bin=$(mktemp -d)
+        cat > "$fake_bin/free" <<'EOF'
+#!/bin/bash
+# Output nothing — simulates unavailability without breaking awk in PATH
+EOF
+        chmod +x "$fake_bin/free"
+        PATH="$fake_bin:$PATH" check_memory_available 4
+    )
+}
+assert_exit "check_memory_available: returns 2 when free unavailable" 2 \
+    _test_no_free
+
+# === detect_project_type nullglob safety (#24) ===
+
+# Test that bash detection works even with nullglob set
+mkdir -p "$WORK/bash-nullglob/scripts/tests"
+touch "$WORK/bash-nullglob/scripts/tests/test-bar.sh"
+val=$(shopt -s nullglob; detect_project_type "$WORK/bash-nullglob")
+assert_eq "detect_project_type: bash detection works with nullglob set" "bash" "$val"
+
+# Test that compgen -G is used instead of ls for glob detection
+TESTS=$((TESTS + 1))
+if grep -q 'compgen -G' "$SCRIPT_DIR/../lib/common.sh"; then
+    echo "PASS: detect_project_type uses compgen -G (nullglob-safe)"
+else
+    echo "FAIL: detect_project_type should use compgen -G, not ls"
+    FAILURES=$((FAILURES + 1))
+fi
+
+# === require_command tests ===
+
+assert_exit "require_command: bash exists" 0 \
+    require_command "bash"
+
+assert_exit "require_command: nonexistent-binary-xyz fails" 1 \
+    require_command "nonexistent-binary-xyz"
+
+# === Summary ===
+echo ""
+echo "Results: $((TESTS - FAILURES))/$TESTS passed"
+if [[ $FAILURES -gt 0 ]]; then
+    echo "FAILURES: $FAILURES"
+    exit 1
+fi
+echo "ALL PASSED"

package/scripts/tests/test-cost-tracking.sh

@@ -0,0 +1,158 @@
+#!/usr/bin/env bash
+# Test cost tracking functions
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "$SCRIPT_DIR/test-helpers.sh"
+source "$SCRIPT_DIR/../lib/run-plan-state.sh"
+source "$SCRIPT_DIR/../lib/cost-tracking.sh"
+
+# --- Setup ---
+WORK=$(mktemp -d)
+trap 'rm -rf "$WORK"' EXIT
+
+# Create mock JSONL session directory
+MOCK_SESSION_DIR="$WORK/.claude/projects/test-project"
+mkdir -p "$MOCK_SESSION_DIR"
+
+# Mock session JSONL with token usage data
+MOCK_SESSION_ID="test-session-abc-123"
+cat > "$MOCK_SESSION_DIR/${MOCK_SESSION_ID}.jsonl" << 'JSONL'
+{"type":"summary","costUSD":0.0423,"durationMs":12345,"inputTokens":8500,"outputTokens":2100,"cacheReadTokens":3200,"cacheWriteTokens":1000,"model":"claude-sonnet-4-6"}
+JSONL
+
+# --- Test: find_session_jsonl locates file ---
+result=$(find_session_jsonl "$MOCK_SESSION_ID" "$WORK/.claude")
+assert_contains "find_session_jsonl: returns path" "$MOCK_SESSION_ID" "$result"
+
+# --- Test: find_session_jsonl returns empty for missing session ---
+result=$(find_session_jsonl "nonexistent-session" "$WORK/.claude")
+assert_eq "find_session_jsonl: empty for missing" "" "$result"
+
+# --- Test: extract_session_cost returns JSON with token fields ---
+cost_json=$(extract_session_cost "$MOCK_SESSION_ID" "$WORK/.claude")
+assert_contains "extract: has input_tokens" "input_tokens" "$cost_json"
+assert_contains "extract: has output_tokens" "output_tokens" "$cost_json"
+assert_contains "extract: has cache_read_tokens" "cache_read_tokens" "$cost_json"
+assert_contains "extract: has estimated_cost_usd" "estimated_cost_usd" "$cost_json"
+
+input_tokens=$(echo "$cost_json" | jq -r '.input_tokens')
+assert_eq "extract: input_tokens value" "8500" "$input_tokens"
+
+output_tokens=$(echo "$cost_json" | jq -r '.output_tokens')
+assert_eq "extract: output_tokens value" "2100" "$output_tokens"
+
+cache_read=$(echo "$cost_json" | jq -r '.cache_read_tokens')
+assert_eq "extract: cache_read_tokens value" "3200" "$cache_read"
+
+cost_usd=$(echo "$cost_json" | jq -r '.estimated_cost_usd')
+assert_eq "extract: cost from JSONL summary" "0.0423" "$cost_usd"
+
+# Fix #39: tracking_status field — found when real summary data exists
+tracking_status=$(echo "$cost_json" | jq -r '.tracking_status')
+assert_eq "extract: tracking_status is found for real session" "found" "$tracking_status"
+
+# --- Test: extract_session_cost handles missing session ---
+cost_json=$(extract_session_cost "nonexistent" "$WORK/.claude" 2>/dev/null)
+input_tokens=$(echo "$cost_json" | jq -r '.input_tokens')
+assert_eq "extract: missing session returns 0 input_tokens" "0" "$input_tokens"
+
+# Fix #39: tracking_status:"missing_file" distinguishes broken tracking from true $0 cost
+tracking_status=$(echo "$cost_json" | jq -r '.tracking_status')
+assert_eq "extract: missing session tracking_status is missing_file" "missing_file" "$tracking_status"
+
+# Fix #36: session_id with special chars must not corrupt JSON
+SPECIAL_SID='injected"value\with\backslash'
+MOCK_SPECIAL_DIR="$WORK/.claude/projects/test-project"
+# No JSONL for this session — tests injection-safe fallback path
+cost_json=$(extract_session_cost "$SPECIAL_SID" "$WORK/.claude" 2>/dev/null)
+assert_eq "extract: special chars in session_id produce valid JSON" "0" "$(echo "$cost_json" | jq -r '.input_tokens')"
+assert_eq "extract: tracking_status for special-char session" "missing_file" "$(echo "$cost_json" | jq -r '.tracking_status')"
+
+# Fix #39: tracking_status:"no_summary" for JSONL with no summary line
+NO_SUMMARY_SID="no-summary-session"
+cat > "$MOCK_SESSION_DIR/${NO_SUMMARY_SID}.jsonl" << 'JSONL'
+{"type":"user","message":"hello"}
+{"type":"assistant","message":"hi"}
+JSONL
+cost_json=$(extract_session_cost "$NO_SUMMARY_SID" "$WORK/.claude" 2>/dev/null)
+tracking_status=$(echo "$cost_json" | jq -r '.tracking_status')
+assert_eq "extract: no summary line tracking_status is no_summary" "no_summary" "$tracking_status"
+assert_eq "extract: no summary line returns 0 cost" "0" "$(echo "$cost_json" | jq -r '.estimated_cost_usd')"
+
+# Fix #35: grep on file with no summary line must not kill set -e callers
+# (tested implicitly above — test suite uses set -euo pipefail and did not die)
+
+# --- Test: record_batch_cost writes to state ---
+init_state "$WORK" "plan.md" "headless"
+record_batch_cost "$WORK" 1 "$MOCK_SESSION_ID" "$WORK/.claude"
+
+costs_batch_1=$(jq -r '.costs["1"].input_tokens' "$WORK/.run-plan-state.json")
+assert_eq "record: batch 1 input_tokens in state" "8500" "$costs_batch_1"
+
+cost_usd=$(jq -r '.costs["1"].estimated_cost_usd' "$WORK/.run-plan-state.json")
+assert_eq "record: batch 1 cost_usd in state" "0.0423" "$cost_usd"
+
+session_id=$(jq -r '.costs["1"].session_id' "$WORK/.run-plan-state.json")
+assert_eq "record: batch 1 session_id in state" "$MOCK_SESSION_ID" "$session_id"
+
+total_cost=$(jq -r '.total_cost_usd' "$WORK/.run-plan-state.json")
+assert_eq "record: total_cost_usd updated" "0.0423" "$total_cost"
+
+# Fix #41: total_cost_usd must be 0 (not null) when costs object is empty
+WORK2=$(mktemp -d)
+trap 'rm -rf "$WORK2"' EXIT
+init_state "$WORK2" "plan.md" "headless"
+# Manually inject an empty costs object then verify // 0 guard
+jq '.costs = {}' "$WORK2/.run-plan-state.json" > "$WORK2/.run-plan-state.json.tmp" && mv "$WORK2/.run-plan-state.json.tmp" "$WORK2/.run-plan-state.json"
+record_batch_cost "$WORK2" 1 "nonexistent-for-null-test" "$WORK2/.claude" 2>/dev/null
+null_guard=$(jq -r '.total_cost_usd' "$WORK2/.run-plan-state.json")
+assert_eq "record: total_cost_usd is 0 not null for empty costs" "0" "$null_guard"
+
+# --- Test: record_batch_cost accumulates across batches ---
+MOCK_SESSION_ID_2="test-session-def-456"
+cat > "$MOCK_SESSION_DIR/${MOCK_SESSION_ID_2}.jsonl" << 'JSONL'
+{"type":"summary","costUSD":0.031,"durationMs":9000,"inputTokens":7200,"outputTokens":1800,"cacheReadTokens":5000,"cacheWriteTokens":500,"model":"claude-sonnet-4-6"}
+JSONL
+
+record_batch_cost "$WORK" 2 "$MOCK_SESSION_ID_2" "$WORK/.claude"
+
+total_cost=$(jq -r '.total_cost_usd' "$WORK/.run-plan-state.json")
+# 0.0423 + 0.031 = 0.0733
+assert_eq "record: total_cost accumulates" "0.0733" "$total_cost"
+
+# --- Test: check_budget returns 0 when under budget ---
+assert_exit "check_budget: under budget returns 0" 0 check_budget "$WORK" "1.00"
+
+# --- Test: check_budget returns 1 when over budget ---
+assert_exit "check_budget: over budget returns 1" 1 check_budget "$WORK" "0.05"
+
+# Fix #40: check_budget awk fallback — verify awk float comparison expressions
+# Build a PATH with awk but without bc (symlink all /usr/bin and /bin except bc)
+NO_BC_PATH_DIR=$(mktemp -d)
+trap 'rm -rf "$NO_BC_PATH_DIR"' EXIT
+for _f in /usr/bin/* /bin/*; do
+    _bn=$(basename "$_f")
+    [[ "$_bn" == "bc" ]] && continue
+    [[ -e "$NO_BC_PATH_DIR/$_bn" ]] && continue
+    ln -sf "$_f" "$NO_BC_PATH_DIR/$_bn" 2>/dev/null || true
+done
+# Also make other dirs in PATH available (nvm node, linuxbrew, .local/bin)
+WORK3=$(mktemp -d)
+trap 'rm -rf "$WORK3"' EXIT
+PATH="$NO_BC_PATH_DIR" bash -c "
+    source '$SCRIPT_DIR/../lib/run-plan-state.sh'
+    source '$SCRIPT_DIR/../lib/cost-tracking.sh'
+    init_state '$WORK3' 'plan.md' 'headless'
+    record_batch_cost '$WORK3' 1 '$MOCK_SESSION_ID' '$WORK/.claude' 2>/dev/null
+" 2>/dev/null
+assert_exit "check_budget: awk fallback under budget returns 0" 0 \
+    bash -c "PATH='$NO_BC_PATH_DIR' source '$SCRIPT_DIR/../lib/cost-tracking.sh' 2>/dev/null; check_budget '$WORK3' '1.00'" 2>/dev/null
+assert_exit "check_budget: awk fallback over budget returns 1" 1 \
+    bash -c "PATH='$NO_BC_PATH_DIR' source '$SCRIPT_DIR/../lib/cost-tracking.sh' 2>/dev/null; check_budget '$WORK3' '0.01'" 2>/dev/null
+
+# --- Test: get_total_cost returns accumulated cost ---
+total=$(get_total_cost "$WORK")
+assert_eq "get_total_cost: returns accumulated" "0.0733" "$total"
+
+report_results

package/scripts/tests/test-echo-back.sh

@@ -0,0 +1,180 @@
+#!/usr/bin/env bash
+# Test spec echo-back gate function
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "$SCRIPT_DIR/../lib/run-plan-parser.sh"
+source "$SCRIPT_DIR/../lib/run-plan-echo-back.sh" 2>/dev/null || true
+
+# Source just the echo_back_check function if full sourcing fails
+# (run-plan-headless.sh references globals that may not be set)
+type echo_back_check &>/dev/null || {
+    echo "ERROR: echo_back_check function not available"
+    exit 1
+}
+
+FAILURES=0
+TESTS=0
+
+assert_eq() {
+    local desc="$1" expected="$2" actual="$3"
+    TESTS=$((TESTS + 1))
+    if [[ "$expected" != "$actual" ]]; then
+        echo "FAIL: $desc (expected: $expected, got: $actual)"
+        FAILURES=$((FAILURES + 1))
+    else
+        echo "PASS: $desc"
+    fi
+}
+
+TMPDIR_ROOT=$(mktemp -d)
+trap 'rm -rf "$TMPDIR_ROOT"' EXIT
+
+LOG_DIR="$TMPDIR_ROOT/logs"
+mkdir -p "$LOG_DIR"
+
+# =============================================================================
+# Mock claude command: returns canned responses based on prompt content
+# =============================================================================
+
+MOCK_SCRIPT="$TMPDIR_ROOT/mock-claude"
+cat > "$MOCK_SCRIPT" << 'MOCK'
+#!/usr/bin/env bash
+# Mock claude CLI for testing echo-back
+# Reads prompt from -p arg, returns canned response
+
+prompt=""
+model=""
+while [[ $# -gt 0 ]]; do
+    case "$1" in
+        -p) prompt="$2"; shift 2 ;;
+        --model) model="$2"; shift 2 ;;
+        *) shift ;;
+    esac
+done
+
+# Retry restatement (check BEFORE initial restatement — both contain "restate")
+if [[ "$prompt" == *"Re-read the specification"* && -z "$model" ]]; then
+    echo "This batch builds the authentication system as specified."
+    exit 0
+fi
+
+# Echo-back restatement request → return matching restatement
+if [[ "$prompt" == *"restate in one paragraph"* && -z "$model" ]]; then
+    if [[ "$prompt" == *"data model"* ]]; then
+        echo "This batch creates a data model with validation and tests."
+    elif [[ "$prompt" == *"MISMATCH_TEST"* ]]; then
+        echo "This batch does something completely unrelated to the spec."
+    else
+        echo "This batch implements the specified functionality."
+    fi
+    exit 0
+fi
+
+# Haiku verification → check if restatement mentions key terms
+if [[ -n "$model" && "$model" == "haiku" ]]; then
+    if [[ "$prompt" == *"unrelated"* ]]; then
+        echo "NO - The restatement does not match the original spec."
+    else
+        echo "YES - The restatement captures the key goals."
+    fi
+    exit 0
+fi
+
+echo "Unknown mock scenario"
+exit 0
+MOCK
+chmod +x "$MOCK_SCRIPT"
+
+# =============================================================================
+# Test 1: Matching restatement passes
+# =============================================================================
+
+batch_text="Create data model with validation.
+Add tests for the model."
+
+exit_code=0
+echo_back_check "$batch_text" "$LOG_DIR" 1 "$MOCK_SCRIPT" >/dev/null 2>&1 || exit_code=$?
+assert_eq "matching restatement passes" "0" "$exit_code"
+
+# =============================================================================
+# Test 2: Mismatched restatement triggers retry
+# =============================================================================
+
+mismatch_text="MISMATCH_TEST: Build the authentication system."
+
+exit_code=0
+echo_back_check "$mismatch_text" "$LOG_DIR" 2 "$MOCK_SCRIPT" >/dev/null 2>&1 || exit_code=$?
+# The retry restatement doesn't mention "unrelated", so haiku says YES → passes on retry
+assert_eq "mismatch with successful retry passes" "0" "$exit_code"
+
+# =============================================================================
+# Test 3: Empty restatement skips check
+# =============================================================================
+
+EMPTY_MOCK="$TMPDIR_ROOT/mock-empty"
+cat > "$EMPTY_MOCK" << 'MOCK'
+#!/usr/bin/env bash
+# Returns empty for all calls
+exit 0
+MOCK
+chmod +x "$EMPTY_MOCK"
+
+exit_code=0
+echo_back_check "some batch text" "$LOG_DIR" 3 "$EMPTY_MOCK" >/dev/null 2>&1 || exit_code=$?
+assert_eq "empty restatement skips gracefully" "0" "$exit_code"
+
+# =============================================================================
+# Test 4: Log file is created
+# =============================================================================
+
+TESTS=$((TESTS + 1))
+if [[ -f "$LOG_DIR/batch-1-echo-back.log" ]]; then
+    echo "PASS: echo-back log file created"
+else
+    echo "FAIL: echo-back log file not created"
+    FAILURES=$((FAILURES + 1))
+fi
+
+# =============================================================================
+# Test 5: Persistent failure mock (both attempts fail)
+# =============================================================================
+
+FAIL_MOCK="$TMPDIR_ROOT/mock-fail"
+cat > "$FAIL_MOCK" << 'MOCK'
+#!/usr/bin/env bash
+prompt=""
+model=""
+while [[ $# -gt 0 ]]; do
+    case "$1" in
+        -p) prompt="$2"; shift 2 ;;
+        --model) model="$2"; shift 2 ;;
+        *) shift ;;
+    esac
+done
+
+if [[ "$prompt" == *"restate"* || "$prompt" == *"Re-read"* ]]; then
+    echo "This is completely wrong and unrelated."
+    exit 0
+fi
+
+if [[ -n "$model" && "$model" == "haiku" ]]; then
+    echo "NO - The restatement is completely wrong."
+    exit 0
+fi
+
+exit 0
+MOCK
+chmod +x "$FAIL_MOCK"
+
+exit_code=0
+echo_back_check "Build the user dashboard" "$LOG_DIR" 5 "$FAIL_MOCK" >/dev/null 2>&1 || exit_code=$?
+assert_eq "persistent mismatch fails" "1" "$exit_code"
+
+echo ""
+echo "Results: $((TESTS - FAILURES))/$TESTS passed"
+if [[ $FAILURES -gt 0 ]]; then
+    echo "FAILURES: $FAILURES"
+    exit 1
+fi
+echo "ALL PASSED"

package/scripts/tests/test-entropy-audit.sh

@@ -0,0 +1,146 @@
+#!/usr/bin/env bash
+# Test entropy-audit.sh — verifies refactored behavior
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EA="$SCRIPT_DIR/../entropy-audit.sh"
+
+FAILURES=0
+TESTS=0
+
+assert_eq() {
+    local desc="$1" expected="$2" actual="$3"
+    TESTS=$((TESTS + 1))
+    if [[ "$expected" != "$actual" ]]; then
+        echo "FAIL: $desc"
+        echo "  expected: $expected"
+        echo "  actual:   $actual"
+        FAILURES=$((FAILURES + 1))
+    else
+        echo "PASS: $desc"
+    fi
+}
+
+assert_exit() {
+    local desc="$1" expected_exit="$2"
+    shift 2
+    local actual_exit=0
+    "$@" >/dev/null 2>&1 || actual_exit=$?
+    TESTS=$((TESTS + 1))
+    if [[ "$expected_exit" != "$actual_exit" ]]; then
+        echo "FAIL: $desc"
+        echo "  expected exit: $expected_exit"
+        echo "  actual exit:   $actual_exit"
+        FAILURES=$((FAILURES + 1))
+    else
+        echo "PASS: $desc"
+    fi
+}
+
+assert_contains() {
+    local desc="$1" needle="$2" haystack="$3"
+    TESTS=$((TESTS + 1))
+    if echo "$haystack" | grep -qF "$needle"; then
+        echo "PASS: $desc"
+    else
+        echo "FAIL: $desc"
+        echo "  expected to contain: $needle"
+        FAILURES=$((FAILURES + 1))
+    fi
+}
+
+WORK=$(mktemp -d)
+trap 'rm -rf "$WORK"' EXIT
+
+# === Sources common.sh ===
+
+TESTS=$((TESTS + 1))
+if grep -q 'source.*lib/common.sh' "$EA"; then
+    echo "PASS: entropy-audit.sh sources lib/common.sh"
+else
+    echo "FAIL: entropy-audit.sh sources lib/common.sh"
+    FAILURES=$((FAILURES + 1))
+fi
+
+# === No hardcoded $HOME/Documents/projects ===
+
+TESTS=$((TESTS + 1))
+if grep -q 'PROJECTS_DIR="\$HOME/Documents/projects"' "$EA"; then
+    echo "FAIL: still has hardcoded PROJECTS_DIR"
+    FAILURES=$((FAILURES + 1))
+else
+    echo "PASS: no hardcoded PROJECTS_DIR"
+fi
+
+# === Accepts --projects-dir argument ===
+
+TESTS=$((TESTS + 1))
+if grep -q '\-\-projects-dir' "$EA"; then
+    echo "PASS: accepts --projects-dir argument"
+else
+    echo "FAIL: should accept --projects-dir argument"
+    FAILURES=$((FAILURES + 1))
+fi
+
+# === Uses env var with default ===
+
+TESTS=$((TESTS + 1))
+if grep -qE 'PROJECTS_DIR="\$\{PROJECTS_DIR:-' "$EA"; then
+    echo "PASS: uses PROJECTS_DIR env var with default"
+else
+    echo "FAIL: should use PROJECTS_DIR env var with default"
+    FAILURES=$((FAILURES + 1))
+fi
+
+# === CLI tests ===
+
+assert_exit "--help exits 0" 0 bash "$EA" --help
+
+# === --projects-dir overrides default ===
+
+mkdir -p "$WORK/test-proj/.git"
+echo "# Test" > "$WORK/test-proj/CLAUDE.md"
+output=$(bash "$EA" --projects-dir "$WORK" --project test-proj 2>&1) || true
+assert_contains "custom projects-dir used" "Auditing test-proj" "$output"
+
+# === PROJECTS_DIR env var works ===
+
+output=$(PROJECTS_DIR="$WORK" bash "$EA" --project test-proj 2>&1) || true
+assert_contains "env var PROJECTS_DIR works" "Auditing test-proj" "$output"
+
+# === Empty find produces zero iterations (bug #13) ===
+# Create a project with no code files — only a CLAUDE.md
+mkdir -p "$WORK/empty-proj"
+echo "# Empty project" > "$WORK/empty-proj/CLAUDE.md"
+bash "$EA" --projects-dir "$WORK" --project empty-proj 2>&1 || true
+# Find the report file (audit writes to a timestamped dir)
+report=$(ls -t /tmp/entropy-audit-*/empty-proj.md 2>/dev/null | head -1)
+TESTS=$((TESTS + 1))
+if [[ -z "$report" ]]; then
+    echo "FAIL: empty find: no report file generated"
+    FAILURES=$((FAILURES + 1))
+else
+    echo "PASS: empty find: report file generated"
+    report_content=$(cat "$report")
+    # Should report "All files within limit" (zero violations, zero iterations)
+    assert_contains "empty find: no size violations" "All files within limit" "$report_content"
+    # Should NOT contain any file-specific warnings (phantom iteration would produce one)
+    TESTS=$((TESTS + 1))
+    if echo "$report_content" | grep -qE '⚠️.*lines$'; then
+        echo "FAIL: empty find produced phantom file size warning"
+        FAILURES=$((FAILURES + 1))
+    else
+        echo "PASS: empty find: no phantom file size warnings"
+    fi
+    # Naming check should also report clean
+    assert_contains "empty find: no naming drift" "No naming drift detected" "$report_content"
+fi
+
+# === Summary ===
+echo ""
+echo "Results: $((TESTS - FAILURES))/$TESTS passed"
+if [[ $FAILURES -gt 0 ]]; then
+    echo "FAILURES: $FAILURES"
+    exit 1
+fi
+echo "ALL PASSED"