@house365/comate 0.9.15 → 0.9.16

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@house365/comate",
-  "version": "0.9.15",
+  "version": "0.9.16",
   "description": "comate —— SDD (规约驱动开发) 的 AI 开发编排器（Agent Skills）",
   "type": "module",
   "license": "MIT",

package/skills/comate/scripts/comate-lib.sh

@@ -314,13 +314,26 @@ _hash_stream() {
   fi
 }
 
-# hash_file <file> — sha256 hex of one file.
+# _hash_file_stream <file> - emit canonical content for hashing.
+# Text files are normalized to LF so a checkout/tool that temporarily writes
+# CRLF cannot create a false provenance or impl_hash drift. Binary files stay
+# byte-for-byte unchanged.
+_hash_file_stream() {
+  local file="$1"
+  if [ ! -s "$file" ] || LC_ALL=C grep -Iq . "$file" 2>/dev/null; then
+    sed 's/\r$//' "$file"
+  else
+    cat "$file"
+  fi
+}
+
+# hash_file <file> - sha256 hex of one file (LF-canonical for text).
 hash_file() {
   local file="$1"
   if command -v sha256sum >/dev/null 2>&1; then
-    sha256sum "$file" | awk '{print $1}'
+    _hash_file_stream "$file" | sha256sum | awk '{print $1}'
   elif command -v shasum >/dev/null 2>&1; then
-    shasum -a 256 "$file" | awk '{print $1}'
+    _hash_file_stream "$file" | shasum -a 256 | awk '{print $1}'
   else
     die "$COMATE_ENV" "ERROR: sha256sum or shasum is required"
   fi

package/skills/comate/tests/comate.bats

@@ -336,6 +336,30 @@ seed_open() {
   [[ "$output" == *'impl_hash'*'fail'* ]] || [[ "$output" == *'"block":true'* ]]
 }
 
+# --- line-ending stability ---
+
+@test "impl_hash ignores text line-ending changes" {
+  comate state demo init fix
+  local d="openspec/changes/demo"
+  printf '# p\n' > "$d/proposal.md"
+  printf '# d\n' > "$d/design.md"
+  printf '# plan\n' > "$d/plan.md"
+  printf -- '- [x] t1\n' > "$d/tasks.md"
+  comate state demo set plan "$d/plan.md" >/dev/null
+  comate guard demo open --apply >/dev/null 2>&1
+  comate handoff demo build --write >/dev/null 2>&1
+  comate guard demo build --apply >/dev/null 2>&1
+
+  printf '# plan\r\n' > "$d/plan.md"
+  printf -- '- [x] t1\r\n' > "$d/tasks.md"
+  printf 'verification\n' > "$d/verification.md"
+  comate state demo set verification_report "$d/verification.md" >/dev/null
+  comate state demo set branch_status handled >/dev/null
+  run comate guard demo verify --json
+  [ "$status" -eq 0 ]
+  [[ "$output" == *'impl_hash matches current plan+tasks'*'pass'* ]]
+}
+
 # --- archive ---
 
 @test "archive delegates spec merge to openspec instead of copying delta over main" {