feat: achieve zero dependencies and production-ready

- refactor: span across all script files
- test: remove package.json and git submodules, run Bats and its libraries inside Docker
- test: redesign test suite structure
- ci: remove local git hooks
- ci: change test.yml to test inside Docker. Testing environment closely resembles production environment
- docs: redesign the header structure. Stripped version control out of script files

Author: Silverbullet069

.editorconfig

@@ -22,10 +22,9 @@ trim_trailing_whitespace = false
 max_line_length = 80
 
 binary_next_line = true         # shfmt: -bn
-keep_padding = true             # shfmt: -kp
 switch_case_indent = true       # shfmt: -ci
-space_redirects = true          # shfmt: -sr
-keep_padding = true             # shfmt: -kp
+# keep_padding = true             # shfmt: -kp
+# space_redirects = true          # shfmt: -sr
 
 # YAML
 [*.yml]

.gitconfig

@@ -2,7 +2,7 @@
 mode: "edit"
 ---
 
-Your goal is to set up test cases for the Bash script that's also a command-line application (now refers to as "target script")
+Your goal is to set up test cases for the Bash script that's also a command-line application (now referred to as "target script").
 
 The chosen testing framework is Bash Automated Testing System or Bats, [bats-core](https://github.com/bats-core/bats-core). 
 
@@ -13,27 +13,28 @@ The chosen testing auxiliary libraries are:
 
 Requirements:
 
-- `$BATS_SUITE_TMPDIR` is a temporary directory common to all tests of a suite. You MUST use `$BATS_SUITE_TMPDIR` to create files required by multiple tests.
-- `$BATS_FILE_TMPDIR` is a temporary directory common to all tests of a test file. You MUST use `$BATS_FILE_TMPDIR` to create files required by multiple tests in the same test file.
-- `$BATS_TEST_TMPDIR` is a temporary directory unique for each test. You MUST use `$BATS_TEST_TMPDIR` to create files required only for specific tests.
-- You MUST clone the target script and create all mock dependencies in `$BATS_FILE_TMPDIR`, then you MUST change working directory to `$BATS_TEST_TMPDIR` inside `setup()` function then execute the target script with current working directory set to `$BATS_TEST_TMPDIR`. This is to ensure the state of the project directory remains intact after test execution.
-- You MUST pay attention to not creating duplicate files and directories when provisioning in `$BATS_FILE_TMPDIR`.
-- You MUST place the generated script inside `tests/` directory.
-- You SHOULD NOT source the target script, unless the test case required internal function direct invocation.
-- You MUST NOT use destructive operations (e.g. `mv -f`, `cp -f`, `ln -f`, ...).
-- You MUST ignore backup original working directory at `setup()` function.
-- 
-- You MUST leave `teardown()` function blank:
+- If you're generating a new test script, you MUST place the script inside the `tests/` directory.
+- You MUST use `$BATS_SUITE_TMPDIR` - a temporary directory common to all tests of a suite - to create files required by multiple tests.
+- You MUST use `$BATS_FILE_TMPDIR` - a temporary directory common to all tests of a test file -  to create files required by multiple tests in the same test file.
+- You MUST use `$BATS_TEST_TMPDIR` - a temporary directory unique for each test - to create files required only for specific tests.
+- You MUST clone the target script and create all mock dependencies in `$BATS_FILE_TMPDIR`. This is to ensure the state of the project directory remains intact after test execution.
+- You MUST pay attention to not creating duplicate files and directories while doing provision to `$BATS_FILE_TMPDIR`.
+- You MUST leave the `teardown()` function blank:
     ```bash
     teardown() {
         :
     }
     ```
-- You MUST avoid test case duplication (i.e. 2 test cases testing the same logic) at all cost.
+- You MUST avoid sourcing the target script, unless the test case requires internal function direct invocation.
+- You MUST avoid duplicating test case (i.e. 2 test cases testing the same logic).
+- You MUST avoid using destructive operations (e.g. `mv -f`, `cp -f`, `ln -f`, ...).
+- You MUST avoid backing up the original working directory in the `setup()` function.
+- You MUST avoid changing current working directory to `$BATS_TEST_TMPDIR`, instead, every file operation (copying, moving, changing owner, changing permissions, executing, etc.) MUST construct its own path using `$BATS_TEST_TMPDIR`.
+
 
 Example:
 
-```bash
+```bats
 #!/usr/bin/env bats
 
 setup() {

.github/prompts/test.prompt.md

@@ -23,48 +23,19 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Cache Bats dependencies
-        id: cache-bats-libs
-        uses: actions/cache@v4
-        env:
-          cache-name: cache-bats-libs
-        with:
-          path: "${{ github.workspace }}/tests/test_helper"
-          key: ${{ runner.os }}-tests-${{ env.cache-name }}-${{ hashFiles('**/package.json') }} # not every submodules have package-lock.json? Weird
-          # a new cache is created when the content of `package.json` change, or when the runner's operating system changes
-          restore-keys: |
-            ${{ runner.os }}-tests-${{ env.cache-name }}
-            ${{ runner.os }}-tests-
-            ${{ runner.os }}-
+      - name: Pull Bats Docker image
+        run: docker pull bats/bats:latest
 
-      - name: Setup Bats and bats libs
-        # provide subsequent steps with output from the step
-        id: setup-bats
-        uses: bats-core/bats-action@3.0.0
-        timeout-minutes: 10
-        # inputs
-        with:
-          # by default, Bats libs are installed in default location
-          # the inputs are set to `/usr/lib/bats-LIB_NAME`
-          # to enable caching Bats libs, installed them inside HOME directory
-          # NOTE: works for linux/win/mac
-          support-path: "${{ github.workspace }}/tests/test_helper/bats-support"
-          assert-path: "${{ github.workspace }}/tests/test_helper/bats-assert"
-          file-path: "${{ github.workspace }}/tests/test_helper/bats-file"
-      - name: Test script.sh
-        shell: bash
-        env:
-          TERM: xterm
-        run: bats tests/test.sh
-      - name: Test template.sh
-        shell: bash
-        env:
-          SCRIPT_NAME: template.sh
-          TERM: xterm
-        run: bats tests/test.sh
       - name: Test clone_bash_template.sh
         shell: bash
         env:
-          SCRIPT_NAME: template.sh
           TERM: xterm
-        run: bats tests/test_clone.sh
+        run: |
+          docker run \
+            --rm \
+            --user="$(id -u):$(id -g)" \
+            --network none \
+            --security-opt=no-new-privileges:true \
+            --volume="$PWD:/code:ro" \
+            bats/bats:latest \
+            /code/tests

.github/workflows/test.yml

@@ -35,9 +35,6 @@ temp/
 [._]ss[a-gi-z]
 [._]sw[a-p]
 
-# Node
-node_modules
-
 # Misc
-template-symlink
-script-symlink
+node_modules
+hooks

.gitignore

@@ -1,11 +1,60 @@
 #!/usr/bin/env bash
 
-## FILE        : build.sh
-## VERSION     : v2.3.1
-## DESCRIPTION : Merge source.sh and script.sh to template.sh
-## AUTHOR      : Silverbullet069
-## REPOSITORY  : https://github.com/Silverbullet069/bash-script-template
-## LICENSE     : MIT License
+# ============================================================================ #
+
+## FILE         : build.sh
+## VERSION      : v0.0.1
+## DESCRIPTION  : Merge source.sh and script.sh to template.sh
+## AUTHOR       : silverbullet069
+## REPOSITORY   : https://github.com/Silverbullet069/bash-script-template
+## LICENSE      : MIT License
+
+## TEMREPO      : https://github.com/Silverbullet069/bash-script-template
+## TEMMODE      : lite
+## TEMUPDATED   : 2025-06-21 19:15:03.788041997 +0700
+## TEMLIC       : MIT License
+
+# ============================================================================ #
+
+# DESC: Acquire script lock, extracted from script.sh
+# ARGS: $1 (optional): Scope of script execution lock (system or user)
+# OUTS: None
+# RETS: None
+# NOTE: This lock implementation is extremely simple but should be reliable
+#       across all platforms. It does *not* support locking a script with
+#       symlinks or multiple hardlinks as there's no portable way of doing so.
+#       If the lock was acquired it's automatically released on script exit.
+function lock_init() {
+    local lock_dir
+    if [[ "${1}" = "system" ]]; then
+        lock_dir="/tmp/$(basename "${BASH_SOURCE[0]}").lock"
+    elif [[ "${1}" = "user" ]]; then
+        lock_dir="/tmp/$(basename "${BASH_SOURCE[0]}").${UID}.lock"
+    else
+        echo "Missing or invalid argument to ${FUNCNAME[0]}()!" >&2
+        exit 1
+    fi
+
+    if mkdir "${lock_dir}" 2>/dev/null; then
+        readonly script_lock="${lock_dir}"
+        echo "Acquired script lock: ${script_lock}"
+    else
+        echo "Unable to acquire script lock: ${lock_dir}" >&2
+        exit 2
+    fi
+}
+
+# DESC: Handler for exiting the script
+# ARGS: None
+# OUTS: None
+# RETS: None
+function script_trap_exit() {
+    # Remove script execution lock
+    if [[ -d "${script_lock-}" ]]; then
+        rmdir "${script_lock}"
+        echo "Clean up script lock: ${script_lock}" >&2
+    fi
+}
 
 # ============================================================================ #
 
@@ -22,26 +71,44 @@ set -o pipefail # Use last non-zero exit code in a pipeline
 
 # Main control flow
 function main() {
+    trap script_trap_exit EXIT
+    lock_init "user"
+
+    local -r script_dir="$(dirname "${BASH_SOURCE[0]}")"
 
-    local -r source_body=$(sed -n '/# =\+/,$p' source.sh | tail -n +2) || true
+    # Check if required files exist
+    if [[ ! -f "${script_dir}/script.sh" ]]; then
+        echo "Error: script.sh not found in ${script_dir}" >&2
+        exit 1
+    fi
 
-    # NOTE: leave the comment divider
-    local -r script_header=$(sed -n '1,/# =\+/p' script.sh) || true
+    if [[ ! -f "${script_dir}/source.sh" ]]; then
+        echo "Error: source.sh not found in ${script_dir}" >&2
+        exit 1
+    fi
 
-    # Extract + remove shellcheck source lines
-    local -r script_body=$(sed -n '/# =\+/,$p' script.sh | tail -n +2 | grep -v -e "# shellcheck source=source.sh" -e "# shellcheck disable=SC1091" -e '^source.*source\.sh"') || true
+    # Arbitrary values
+    # shellcheck disable=SC2312
+    local -r script_header=$(head -n 17 "${script_dir}/script.sh" || exit 1)
+    # shellcheck disable=SC2312
+    local -r source_body=$(tail -n +12 "${script_dir}/source.sh" || exit 1)
+    # shellcheck disable=SC2312
+    local -r script_body=$(tail -n +18 "${script_dir}/script.sh" | grep -vE -e '^# shellcheck source=source.sh$' -e '^# shellcheck disable=SC1091$' -e '^source.*source\.sh"$' || exit 1)
 
     # Combine parts in desired order and write to template.sh
+    # Make template.sh temporately writeable for updating
+    chmod 755 "${script_dir}/template.sh"
     {
         echo "${script_header}"
         echo "${source_body}"
         echo "${script_body}"
-    } > template.sh
+    } >"${script_dir}/template.sh"
 
-    # Make template.sh executable
-    chmod +x template.sh
+    # Make template.sh executable and read-only
+    # Any changes to template.sh must go through source.sh and script.sh
+    chmod 555 "${script_dir}/template.sh"
 
-    echo "Build template.sh successfully"
+    echo "Build template.sh successfully."
 }
 
 # Template, assemble