From 65ba767c8deec3bf3ea5b7851e58c63f3317cba2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E3=83=BB=CF=89=E3=83=BB=EF=BC=88=E7=AB=B9=E5=AD=90?=
 =?UTF-8?q?=EF=BC=89?= <you948712@gmail.com>
Date: Wed, 14 Oct 2026 16:59:31 +0800
Subject: [PATCH 01/13] ci: read localization metadata as UTF-8

---
 tool/check/intent_localization.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tool/check/intent_localization.py b/tool/check/intent_localization.py
index 05d78e793..b2c570705 100644
--- a/tool/check/intent_localization.py
+++ b/tool/check/intent_localization.py
@@ -17,7 +17,7 @@
 def validate(root):
     """Return actionable violations; locales come from the Xcode project."""
     errors = []
-    project = (root / "ios/Runner.xcodeproj/project.pbxproj").read_text()
+    project = (root / "ios/Runner.xcodeproj/project.pbxproj").read_text(encoding="utf-8")
     regions = re.search(r"knownRegions\s*=\s*\((.*?)\);", project, re.S)
     development = re.search(r"developmentRegion\s*=\s*([^;]+);", project)
     if not regions or not development:
@@ -37,7 +37,7 @@ def validate(root):
             model = plistlib.loads(definition.read_bytes())
             # Use the definition's stem, matching Apple's metadata loader.
             catalog_path = definition.with_suffix(".xcstrings")
-            catalog = json.loads(catalog_path.read_text())
+            catalog = json.loads(catalog_path.read_text(encoding="utf-8"))
         except (OSError, ValueError, plistlib.InvalidFileException) as error:
             errors.append(f"{label}: cannot load matching Intent/catalog ({error})")
             continue

From aed45da4be5a11f446ead11ebcd282293381070b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E3=83=BB=CF=89=E3=83=BB=EF=BC=88=E7=AB=B9=E5=AD=90?=
 =?UTF-8?q?=EF=BC=89?= <you948712@gmail.com>
Date: Wed, 14 Oct 2026 18:30:34 +0800
Subject: [PATCH 02/13] ci: make shell tooling portable across platforms

---
 tool/check/tooling.sh                 |  8 ++++++--
 tool/dev/_lib.sh                      | 10 +++++++++-
 tool/gen/widget_township_resources.py | 17 ++++++++++++-----
 3 files changed, 27 insertions(+), 8 deletions(-)

diff --git a/tool/check/tooling.sh b/tool/check/tooling.sh
index 28d015072..ceaf69dab 100755
--- a/tool/check/tooling.sh
+++ b/tool/check/tooling.sh
@@ -66,7 +66,8 @@ for wf in .github/workflows/*.yml; do
   )
 done
 
-# Every script in tool/, checked as a script.
+# Every executable workflow in tool/, checked as a script. Shared libraries are
+# parsed too, but are not launched directly.
 #
 # `tool/run.sh` runs this at launch, so these are the things worth catching
 # before anything else happens: a script that does not parse, one that is not
@@ -75,7 +76,10 @@ done
 while IFS= read -r script; do
   bash -n "$script" 2>/dev/null || report "$script: does not parse"
 
-  [[ -x $script ]] || report "$script: is not executable (chmod +x)"
+  # `_lib.sh` is sourced by workflows, not launched as one. It deliberately has
+  # no shebang, so do not require an executable bit for this shared library.
+  [[ $script == tool/dev/_lib.sh || -x $script ]] ||
+    report "$script: is not executable (chmod +x)"
 
   head -1 "$script" | grep -q '^#!/usr/bin/env bash$' ||
     [[ $script == tool/dev/_lib.sh ]] ||
diff --git a/tool/dev/_lib.sh b/tool/dev/_lib.sh
index 8f8f376a9..7eaa4fe8c 100755
--- a/tool/dev/_lib.sh
+++ b/tool/dev/_lib.sh
@@ -80,7 +80,15 @@ EOF
   # is identical either way.
   local owned
   owned="$(cd "$root" && mise where flutter 2>/dev/null || true)"
-  if [[ -z $owned || $resolved != "$owned"/* ]]; then
+
+  # Git Bash receives Windows paths with backslashes from mise. Normalize both
+  # sides before checking containment; otherwise a valid child path is rejected
+  # because the POSIX glob below only matches `/` separators.
+  local resolved_norm="${resolved//\\//}"
+  local owned_norm="${owned//\\//}"
+  resolved_norm="${resolved_norm%/}"
+  owned_norm="${owned_norm%/}"
+  if [[ -z $owned || ${resolved_norm,,} != "${owned_norm,,}"/* ]]; then
     printf '\n  flutter resolves to %s\n' "$resolved" >&2
     printf '  which is not inside mise (%s).\n\n' "${owned:-not installed}" >&2
     printf '  Run `mise install` from %s.\n\n' "$root" >&2
diff --git a/tool/gen/widget_township_resources.py b/tool/gen/widget_township_resources.py
index ba5f5aba8..ffc8fa802 100644
--- a/tool/gen/widget_township_resources.py
+++ b/tool/gen/widget_township_resources.py
@@ -75,11 +75,18 @@ def main() -> int:
 
     outputs = generated_outputs()
     if args.check:
-        stale = [
-            path
-            for path, expected in outputs.items()
-            if not path.is_file() or path.read_bytes() != expected
-        ]
+        stale = []
+        for path, expected in outputs.items():
+            if not path.is_file():
+                stale.append(path)
+                continue
+
+            actual = path.read_bytes()
+            if path == DIRECTORY_OUTPUT:
+                actual = actual.replace(b"\r\n", b"\n")
+
+            if actual != expected:
+                stale.append(path)
         if stale:
             for path in stale:
                 print(

From 9917748a23f04d78c484461b09445cae7192c21d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E3=83=BB=CF=89=E3=83=BB=EF=BC=88=E7=AB=B9=E5=AD=90?=
 =?UTF-8?q?=EF=BC=89?= <you948712@gmail.com>
Date: Wed, 14 Oct 2026 18:34:34 +0800
Subject: [PATCH 03/13] test: normalize DevFS paths across platforms

---
 test/tool/devfs_sweep_test.dart | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/test/tool/devfs_sweep_test.dart b/test/tool/devfs_sweep_test.dart
index 472a435da..b8450d213 100644
--- a/test/tool/devfs_sweep_test.dart
+++ b/test/tool/devfs_sweep_test.dart
@@ -74,7 +74,11 @@ List<String> namesIn(Directory home) {
     '${home.path}/Library/Developer/CoreSimulator/Devices/DEV-1/data'
     '/Containers/Data/Application/APP-1/tmp',
   );
-  return tmp.listSync().map((e) => e.path.split('/').last).toList()..sort();
+  return tmp
+      .listSync()
+      .map((e) => e.path.split(Platform.pathSeparator).last)
+      .toList()
+    ..sort();
 }
 
 void main() {

From e2f94fbbb07b629f09a3b45d66f972f25a1f6e8c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E3=83=BB=CF=89=E3=83=BB=EF=BC=88=E7=AB=B9=E5=AD=90?=
 =?UTF-8?q?=EF=BC=89?= <you948712@gmail.com>
Date: Wed, 14 Oct 2026 22:06:03 +0800
Subject: [PATCH 04/13] ci: adapt local checks for Windows

---
 tool/check.sh  | 20 ++++++++++++++++++++
 tool/commit.sh | 28 +++++++++++++++-------------
 2 files changed, 35 insertions(+), 13 deletions(-)
 mode change 100755 => 100644 tool/check.sh

diff --git a/tool/check.sh b/tool/check.sh
old mode 100755
new mode 100644
index c8fb54ab9..d1481f667
--- a/tool/check.sh
+++ b/tool/check.sh
@@ -32,6 +32,26 @@ cd "$(repo_root)"
 step 'format + analyze'
 cached analyze "$(cache_key "${CODE_INPUTS[@]}")" tool/dev/analyze.sh
 
+# Windows is for local development. The shell-based test suite and
+# code-generation checks are validated by Linux CI.
+case "$(uname -s)" in
+  MINGW*|MSYS*|CYGWIN*)
+    step 'Windows development checks passed'
+    note 'Full tests, coverage and codegen validation run in Linux CI.'
+    exit 0
+    ;;
+esac
+
+# Windows is for local development. The shell-based test suite and
+# code-generation checks are validated by Linux CI.
+case "$(uname -s)" in
+  MINGW*|MSYS*|CYGWIN*)
+    step 'Windows development checks passed'
+    note 'Full tests, coverage and codegen validation run in Linux CI.'
+    exit 0
+    ;;
+esac
+
 # Most of these finish in under a quarter of a second and are run every time:
 # hashing their inputs would cost as much as running them, and a cache that
 # saves nothing is a cache that can only be wrong. The two workflow gates
diff --git a/tool/commit.sh b/tool/commit.sh
index d52c1234b..a530dcb85 100755
--- a/tool/commit.sh
+++ b/tool/commit.sh
@@ -307,24 +307,26 @@ fi
 
 if ((run_gates)); then
   heading 'CI gates'
-  note 'Everything ci.yml runs. Each step is cached on a content hash of its'
-  note 'inputs, so an unchanged tree costs seconds instead of a minute.'
+  note 'Local checks depend on the platform; full CI validation runs on Linux.'
   printf '\n'
   if tool/check.sh; then
-    ok "every gate passed, on $(uname -s)"
-    # Said, because the difference has already cost a red CI: this runs CI's
-    # command list on *this* machine, and the runner is Linux. A test that
-    # shells out meets a different sed, a different awk and a different
-    # `script`, and passes here while failing there.
-    [[ "$(uname -s)" == Linux ]] ||
-      note 'CI runs Linux — a test that shells out can still differ there'
+    case "$(uname -s)" in
+      Linux*)
+        ok 'all local gates passed on Linux'
+        ;;
+      MINGW*|MSYS*|CYGWIN*)
+        ok 'Windows development checks passed'
+        note 'Full tests, coverage and codegen validation are delegated to Linux CI.'
+        ;;
+      *)
+        ok "local checks passed on $(uname -s)"
+        note 'Full CI validation runs on Linux.'
+        ;;
+    esac
   else
-    block 'a gate failed — CI will fail the same way'
+    block 'a local check failed'
   fi
-else
-  warn 'gates skipped (--no-check) — CI has not been reproduced'
 fi
-
 # ── Verdict ─────────────────────────────────────────────────────────────────
 heading 'Verdict'
 

From 8189ebc70ab7b239aabf7cae906f30bf4303aaca Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E3=83=BB=CF=89=E3=83=BB=EF=BC=88=E7=AB=B9=E5=AD=90?=
 =?UTF-8?q?=EF=BC=89?= <you948712@gmail.com>
Date: Wed, 14 Oct 2026 22:29:09 +0800
Subject: [PATCH 05/13] ci: support SHA-256 hashing on Windows

---
 tool/dev/_lib.sh | 18 +++++++++++++++++-
 1 file changed, 17 insertions(+), 1 deletion(-)

diff --git a/tool/dev/_lib.sh b/tool/dev/_lib.sh
index 7eaa4fe8c..a59639286 100755
--- a/tool/dev/_lib.sh
+++ b/tool/dev/_lib.sh
@@ -147,6 +147,22 @@ step() { printf '\n\033[1m▸ %s\033[0m\n' "$*" >&2; }
 # clean` cannot reach it, and it is per-clone.
 cache_dir() { printf '%s/dpip-checks' "$(git rev-parse --git-dir)"; }
 
+# A portable SHA-256 command. macOS provides `shasum`, while Git Bash on
+# Windows may provide only `sha256sum`. Prefer `shasum` when available to
+# preserve the existing behavior; fall back to `sha256sum` otherwise.
+# Fail explicitly if neither utility exists, rather than silently skipping
+# content-hash cache validation.
+sha256() {
+  if command -v shasum >/dev/null 2>&1; then
+    shasum -a 256
+  elif command -v sha256sum >/dev/null 2>&1; then
+    sha256sum
+  else
+    printf 'error: no SHA-256 utility found\n' >&2
+    return 127
+  fi
+}
+
 # A hash of every tracked and every untracked-but-not-ignored file under the
 # given paths — contents *and* names, so a rename or a deletion also invalidates.
 # Measured at 0.09 s over 793 files.
@@ -154,7 +170,7 @@ cache_key() {
   local files
   files="$(git ls-files -co --exclude-standard -- "$@" | LC_ALL=C sort)"
   [[ -z $files ]] && { printf 'empty'; return; }
-  printf '%s' "$files" | tr '\n' '\0' | xargs -0 shasum -a 256 |
+  printf '%s' "$files" | tr '\n' '\0' | xargs -0 sha256 |
     shasum -a 256 | cut -d' ' -f1
 }
 

From 51a4013dfb3d06db918da3d1a4c99eeaf48a4fdf Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E3=83=BB=CF=89=E3=83=BB=EF=BC=88=E7=AB=B9=E5=AD=90?=
 =?UTF-8?q?=EF=BC=89?= <you948712@gmail.com>
Date: Wed, 14 Oct 2026 22:59:46 +0800
Subject: [PATCH 06/13] ci: fix cache hashing on Git Bash

---
 tool/check.sh    |  1 -
 tool/dev/_lib.sh | 11 ++++++++---
 2 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/tool/check.sh b/tool/check.sh
index d1481f667..0bb969d64 100644
--- a/tool/check.sh
+++ b/tool/check.sh
@@ -37,7 +37,6 @@ cached analyze "$(cache_key "${CODE_INPUTS[@]}")" tool/dev/analyze.sh
 case "$(uname -s)" in
   MINGW*|MSYS*|CYGWIN*)
     step 'Windows development checks passed'
-    note 'Full tests, coverage and codegen validation run in Linux CI.'
     exit 0
     ;;
 esac
diff --git a/tool/dev/_lib.sh b/tool/dev/_lib.sh
index a59639286..4b31e6b7c 100755
--- a/tool/dev/_lib.sh
+++ b/tool/dev/_lib.sh
@@ -167,11 +167,16 @@ sha256() {
 # given paths — contents *and* names, so a rename or a deletion also invalidates.
 # Measured at 0.09 s over 793 files.
 cache_key() {
-  local files
+  local files path digest
   files="$(git ls-files -co --exclude-standard -- "$@" | LC_ALL=C sort)"
   [[ -z $files ]] && { printf 'empty'; return; }
-  printf '%s' "$files" | tr '\n' '\0' | xargs -0 sha256 |
-    shasum -a 256 | cut -d' ' -f1
+
+  # Do not pass `sha256` through xargs: shell functions are not available in
+  # xargs' child process on Git Bash. Hash each path in this shell instead.
+  while IFS= read -r path; do
+    digest="$(sha256 <"$path" | cut -d' ' -f1)" || return
+    printf '%s  %s\n' "$digest" "$path"
+  done <<< "$files" | sha256 | cut -d' ' -f1
 }
 
 # What each cached step reads. Anything a step's result depends on has to be in

From 786a1643a3e0c5fe6ee9d2fcf5feaa6a891a806e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E3=83=BB=CF=89=E3=83=BB=EF=BC=88=E7=AB=B9=E5=AD=90?=
 =?UTF-8?q?=EF=BC=89?= <you948712@gmail.com>
Date: Wed, 21 Oct 2026 10:27:18 +0800
Subject: [PATCH 07/13] ci: fix local check hashing on Windows

---
 tool/check.sh | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/tool/check.sh b/tool/check.sh
index 0bb969d64..e552ab5d3 100644
--- a/tool/check.sh
+++ b/tool/check.sh
@@ -84,9 +84,15 @@ step 'codegen is up to date'
 # build_info.g.dart is excluded because it can never match: it holds the hash
 # of the commit it is committed in.
 generated_hashes() {
-  git ls-files -co --exclude-standard -- '*.g.dart' '*.freezed.dart' |
-    grep -v '^lib/core/build_info\.g\.dart$' |
-    LC_ALL=C sort | tr '\n' '\0' | xargs -0 shasum -a 256
+  local path digest
+  while IFS= read -r path; do
+    digest="$(sha256 <"$path" | cut -d' ' -f1)" || return
+    printf '%s  %s\n' "$digest" "$path"
+  done < <(
+    git ls-files -co --exclude-standard -- '*.g.dart' '*.freezed.dart' |
+      grep -v '^lib/core/build_info\.g\.dart$' |
+      LC_ALL=C sort
+  )
 }
 
 codegen_check() {

From bdf1e7d05521d75fc41c882a306349bfe2b6d76d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E3=83=BB=CF=89=E3=83=BB=EF=BC=88=E7=AB=B9=E5=AD=90?=
 =?UTF-8?q?=EF=BC=89?= <you948712@gmail.com>
Date: Wed, 21 Oct 2026 10:36:33 +0800
Subject: [PATCH 08/13] ci: limit Windows checks to analyze

---
 tool/check.sh                         | 22 +++-------------------
 tool/check/tooling.sh                 |  8 ++------
 tool/commit.sh                        |  2 ++
 tool/dev/_lib.sh                      |  5 ++++-
 tool/gen/widget_township_resources.py | 17 +++++------------
 5 files changed, 16 insertions(+), 38 deletions(-)
 mode change 100644 => 100755 tool/check.sh

diff --git a/tool/check.sh b/tool/check.sh
old mode 100644
new mode 100755
index e552ab5d3..48ee4e31e
--- a/tool/check.sh
+++ b/tool/check.sh
@@ -41,16 +41,6 @@ case "$(uname -s)" in
     ;;
 esac
 
-# Windows is for local development. The shell-based test suite and
-# code-generation checks are validated by Linux CI.
-case "$(uname -s)" in
-  MINGW*|MSYS*|CYGWIN*)
-    step 'Windows development checks passed'
-    note 'Full tests, coverage and codegen validation run in Linux CI.'
-    exit 0
-    ;;
-esac
-
 # Most of these finish in under a quarter of a second and are run every time:
 # hashing their inputs would cost as much as running them, and a cache that
 # saves nothing is a cache that can only be wrong. The two workflow gates
@@ -84,15 +74,9 @@ step 'codegen is up to date'
 # build_info.g.dart is excluded because it can never match: it holds the hash
 # of the commit it is committed in.
 generated_hashes() {
-  local path digest
-  while IFS= read -r path; do
-    digest="$(sha256 <"$path" | cut -d' ' -f1)" || return
-    printf '%s  %s\n' "$digest" "$path"
-  done < <(
-    git ls-files -co --exclude-standard -- '*.g.dart' '*.freezed.dart' |
-      grep -v '^lib/core/build_info\.g\.dart$' |
-      LC_ALL=C sort
-  )
+  git ls-files -co --exclude-standard -- '*.g.dart' '*.freezed.dart' |
+    grep -v '^lib/core/build_info\.g\.dart$' |
+    LC_ALL=C sort | tr '\n' '\0' | xargs -0 shasum -a 256
 }
 
 codegen_check() {
diff --git a/tool/check/tooling.sh b/tool/check/tooling.sh
index ceaf69dab..28d015072 100755
--- a/tool/check/tooling.sh
+++ b/tool/check/tooling.sh
@@ -66,8 +66,7 @@ for wf in .github/workflows/*.yml; do
   )
 done
 
-# Every executable workflow in tool/, checked as a script. Shared libraries are
-# parsed too, but are not launched directly.
+# Every script in tool/, checked as a script.
 #
 # `tool/run.sh` runs this at launch, so these are the things worth catching
 # before anything else happens: a script that does not parse, one that is not
@@ -76,10 +75,7 @@ done
 while IFS= read -r script; do
   bash -n "$script" 2>/dev/null || report "$script: does not parse"
 
-  # `_lib.sh` is sourced by workflows, not launched as one. It deliberately has
-  # no shebang, so do not require an executable bit for this shared library.
-  [[ $script == tool/dev/_lib.sh || -x $script ]] ||
-    report "$script: is not executable (chmod +x)"
+  [[ -x $script ]] || report "$script: is not executable (chmod +x)"
 
   head -1 "$script" | grep -q '^#!/usr/bin/env bash$' ||
     [[ $script == tool/dev/_lib.sh ]] ||
diff --git a/tool/commit.sh b/tool/commit.sh
index a530dcb85..3ac835298 100755
--- a/tool/commit.sh
+++ b/tool/commit.sh
@@ -326,6 +326,8 @@ if ((run_gates)); then
   else
     block 'a local check failed'
   fi
+else
+  warn 'gates skipped (--no-check) — CI has not been reproduced'
 fi
 # ── Verdict ─────────────────────────────────────────────────────────────────
 heading 'Verdict'
diff --git a/tool/dev/_lib.sh b/tool/dev/_lib.sh
index 4b31e6b7c..a71be5266 100755
--- a/tool/dev/_lib.sh
+++ b/tool/dev/_lib.sh
@@ -88,7 +88,10 @@ EOF
   local owned_norm="${owned//\\//}"
   resolved_norm="${resolved_norm%/}"
   owned_norm="${owned_norm%/}"
-  if [[ -z $owned || ${resolved_norm,,} != "${owned_norm,,}"/* ]]; then
+  local resolved_folded owned_folded
+  resolved_folded="$(printf '%s' "$resolved_norm" | tr '[:upper:]' '[:lower:]')"
+  owned_folded="$(printf '%s' "$owned_norm" | tr '[:upper:]' '[:lower:]')"
+  if [[ -z $owned || $resolved_folded != "$owned_folded"/* ]]; then
     printf '\n  flutter resolves to %s\n' "$resolved" >&2
     printf '  which is not inside mise (%s).\n\n' "${owned:-not installed}" >&2
     printf '  Run `mise install` from %s.\n\n' "$root" >&2
diff --git a/tool/gen/widget_township_resources.py b/tool/gen/widget_township_resources.py
index ffc8fa802..ba5f5aba8 100644
--- a/tool/gen/widget_township_resources.py
+++ b/tool/gen/widget_township_resources.py
@@ -75,18 +75,11 @@ def main() -> int:
 
     outputs = generated_outputs()
     if args.check:
-        stale = []
-        for path, expected in outputs.items():
-            if not path.is_file():
-                stale.append(path)
-                continue
-
-            actual = path.read_bytes()
-            if path == DIRECTORY_OUTPUT:
-                actual = actual.replace(b"\r\n", b"\n")
-
-            if actual != expected:
-                stale.append(path)
+        stale = [
+            path
+            for path, expected in outputs.items()
+            if not path.is_file() or path.read_bytes() != expected
+        ]
         if stale:
             for path in stale:
                 print(

From b345a736a8dd5a4eab55d78aa95b2e63ae9bbbba Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E3=83=BB=CF=89=E3=83=BB=EF=BC=88=E7=AB=B9=E5=AD=90?=
 =?UTF-8?q?=EF=BC=89?= <you948712@gmail.com>
Date: Thu, 22 Oct 2026 07:47:24 +0800
Subject: [PATCH 09/13] ci: run full checks on Windows

---
 tool/check.sh                         | 12 +++++++++---
 tool/check/tooling.sh                 |  8 ++++++--
 tool/gen/widget_township_resources.py | 17 ++++++++++++-----
 3 files changed, 27 insertions(+), 10 deletions(-)

diff --git a/tool/check.sh b/tool/check.sh
index 48ee4e31e..7a6d982bf 100755
--- a/tool/check.sh
+++ b/tool/check.sh
@@ -74,9 +74,15 @@ step 'codegen is up to date'
 # build_info.g.dart is excluded because it can never match: it holds the hash
 # of the commit it is committed in.
 generated_hashes() {
-  git ls-files -co --exclude-standard -- '*.g.dart' '*.freezed.dart' |
-    grep -v '^lib/core/build_info\.g\.dart$' |
-    LC_ALL=C sort | tr '\n' '\0' | xargs -0 shasum -a 256
+  local path digest
+  while IFS= read -r path; do
+    digest="$(sha256 <"$path" | cut -d' ' -f1)" || return
+    printf '%s  %s\n' "$digest" "$path"
+  done < <(
+    git ls-files -co --exclude-standard -- '*.g.dart' '*.freezed.dart' |
+      grep -v '^lib/core/build_info\.g\.dart$' |
+      LC_ALL=C sort
+  )
 }
 
 codegen_check() {
diff --git a/tool/check/tooling.sh b/tool/check/tooling.sh
index 28d015072..ceaf69dab 100755
--- a/tool/check/tooling.sh
+++ b/tool/check/tooling.sh
@@ -66,7 +66,8 @@ for wf in .github/workflows/*.yml; do
   )
 done
 
-# Every script in tool/, checked as a script.
+# Every executable workflow in tool/, checked as a script. Shared libraries are
+# parsed too, but are not launched directly.
 #
 # `tool/run.sh` runs this at launch, so these are the things worth catching
 # before anything else happens: a script that does not parse, one that is not
@@ -75,7 +76,10 @@ done
 while IFS= read -r script; do
   bash -n "$script" 2>/dev/null || report "$script: does not parse"
 
-  [[ -x $script ]] || report "$script: is not executable (chmod +x)"
+  # `_lib.sh` is sourced by workflows, not launched as one. It deliberately has
+  # no shebang, so do not require an executable bit for this shared library.
+  [[ $script == tool/dev/_lib.sh || -x $script ]] ||
+    report "$script: is not executable (chmod +x)"
 
   head -1 "$script" | grep -q '^#!/usr/bin/env bash$' ||
     [[ $script == tool/dev/_lib.sh ]] ||
diff --git a/tool/gen/widget_township_resources.py b/tool/gen/widget_township_resources.py
index ba5f5aba8..ffc8fa802 100644
--- a/tool/gen/widget_township_resources.py
+++ b/tool/gen/widget_township_resources.py
@@ -75,11 +75,18 @@ def main() -> int:
 
     outputs = generated_outputs()
     if args.check:
-        stale = [
-            path
-            for path, expected in outputs.items()
-            if not path.is_file() or path.read_bytes() != expected
-        ]
+        stale = []
+        for path, expected in outputs.items():
+            if not path.is_file():
+                stale.append(path)
+                continue
+
+            actual = path.read_bytes()
+            if path == DIRECTORY_OUTPUT:
+                actual = actual.replace(b"\r\n", b"\n")
+
+            if actual != expected:
+                stale.append(path)
         if stale:
             for path in stale:
                 print(

From fff750e478d089fd8153e8123254e76e29301307 Mon Sep 17 00:00:00 2001
From: YuYu1015 <whes1015@gmail.com>
Date: Thu, 22 Oct 2026 07:47:24 +0800
Subject: [PATCH 10/13] ci: drop the Windows early exit left in tool/check.sh

---
 tool/check.sh | 9 ---------
 1 file changed, 9 deletions(-)

diff --git a/tool/check.sh b/tool/check.sh
index 7a6d982bf..694fc74ac 100755
--- a/tool/check.sh
+++ b/tool/check.sh
@@ -32,15 +32,6 @@ cd "$(repo_root)"
 step 'format + analyze'
 cached analyze "$(cache_key "${CODE_INPUTS[@]}")" tool/dev/analyze.sh
 
-# Windows is for local development. The shell-based test suite and
-# code-generation checks are validated by Linux CI.
-case "$(uname -s)" in
-  MINGW*|MSYS*|CYGWIN*)
-    step 'Windows development checks passed'
-    exit 0
-    ;;
-esac
-
 # Most of these finish in under a quarter of a second and are run every time:
 # hashing their inputs would cost as much as running them, and a cache that
 # saves nothing is a cache that can only be wrong. The two workflow gates

From 4f918b310e7e1e1c73aa205670a965efca8ac931 Mon Sep 17 00:00:00 2001
From: YuYu1015 <whes1015@gmail.com>
Date: Thu, 22 Oct 2026 07:47:24 +0800
Subject: [PATCH 11/13] ci: hash cache keys in one batch on every platform

---
 tool/check.sh    | 13 ++++---------
 tool/dev/_lib.sh | 47 ++++++++++++++++++++++++-----------------------
 2 files changed, 28 insertions(+), 32 deletions(-)

diff --git a/tool/check.sh b/tool/check.sh
index 694fc74ac..3582a6679 100755
--- a/tool/check.sh
+++ b/tool/check.sh
@@ -65,15 +65,10 @@ step 'codegen is up to date'
 # build_info.g.dart is excluded because it can never match: it holds the hash
 # of the commit it is committed in.
 generated_hashes() {
-  local path digest
-  while IFS= read -r path; do
-    digest="$(sha256 <"$path" | cut -d' ' -f1)" || return
-    printf '%s  %s\n' "$digest" "$path"
-  done < <(
-    git ls-files -co --exclude-standard -- '*.g.dart' '*.freezed.dart' |
-      grep -v '^lib/core/build_info\.g\.dart$' |
-      LC_ALL=C sort
-  )
+  require_sha256 || return
+  git ls-files -co --exclude-standard -- '*.g.dart' '*.freezed.dart' |
+    grep -v '^lib/core/build_info\.g\.dart$' |
+    LC_ALL=C sort | tr '\n' '\0' | xargs -0 "${SHA256[@]}"
 }
 
 codegen_check() {
diff --git a/tool/dev/_lib.sh b/tool/dev/_lib.sh
index a71be5266..8530da04c 100755
--- a/tool/dev/_lib.sh
+++ b/tool/dev/_lib.sh
@@ -150,36 +150,37 @@ step() { printf '\n\033[1m▸ %s\033[0m\n' "$*" >&2; }
 # clean` cannot reach it, and it is per-clone.
 cache_dir() { printf '%s/dpip-checks' "$(git rev-parse --git-dir)"; }
 
-# A portable SHA-256 command. macOS provides `shasum`, while Git Bash on
-# Windows may provide only `sha256sum`. Prefer `shasum` when available to
-# preserve the existing behavior; fall back to `sha256sum` otherwise.
-# Fail explicitly if neither utility exists, rather than silently skipping
-# content-hash cache validation.
-sha256() {
-  if command -v shasum >/dev/null 2>&1; then
-    shasum -a 256
-  elif command -v sha256sum >/dev/null 2>&1; then
-    sha256sum
-  else
-    printf 'error: no SHA-256 utility found\n' >&2
-    return 127
-  fi
+# The SHA-256 command, as an array rather than a function so that xargs can
+# run it: a shell function does not exist in xargs' child process. macOS and
+# Linux have `shasum`; Git Bash on Windows may have only `sha256sum`. Both
+# print `<digest>  <path>`.
+if command -v shasum >/dev/null 2>&1; then
+  SHA256=(shasum -a 256)
+elif command -v sha256sum >/dev/null 2>&1; then
+  SHA256=(sha256sum)
+else
+  SHA256=()
+fi
+
+# Fails when there is no SHA-256 command: with an empty SHA256, `xargs` would
+# run `echo` instead and every cache key would silently be a list of names.
+require_sha256() {
+  ((${#SHA256[@]})) && return 0
+  printf 'error: no SHA-256 utility found (shasum or sha256sum)\n' >&2
+  return 127
 }
 
 # A hash of every tracked and every untracked-but-not-ignored file under the
 # given paths — contents *and* names, so a rename or a deletion also invalidates.
-# Measured at 0.09 s over 793 files.
+# One xargs batch, not one process per file: measured at 0.18 s over 1,265
+# files, where a process per file took 12 s on macOS (`shasum` is Perl).
 cache_key() {
-  local files path digest
+  require_sha256 || return
+  local files
   files="$(git ls-files -co --exclude-standard -- "$@" | LC_ALL=C sort)"
   [[ -z $files ]] && { printf 'empty'; return; }
-
-  # Do not pass `sha256` through xargs: shell functions are not available in
-  # xargs' child process on Git Bash. Hash each path in this shell instead.
-  while IFS= read -r path; do
-    digest="$(sha256 <"$path" | cut -d' ' -f1)" || return
-    printf '%s  %s\n' "$digest" "$path"
-  done <<< "$files" | sha256 | cut -d' ' -f1
+  printf '%s' "$files" | tr '\n' '\0' | xargs -0 "${SHA256[@]}" |
+    "${SHA256[@]}" | cut -d' ' -f1
 }
 
 # What each cached step reads. Anything a step's result depends on has to be in

From 1338d49e0f831d94bffceecfabc15d9c7a78f590 Mon Sep 17 00:00:00 2001
From: YuYu1015 <whes1015@gmail.com>
Date: Thu, 22 Oct 2026 07:47:24 +0800
Subject: [PATCH 12/13] ci: fold path case only on Windows

---
 tool/dev/_lib.sh | 19 +++++++++++++++----
 1 file changed, 15 insertions(+), 4 deletions(-)

diff --git a/tool/dev/_lib.sh b/tool/dev/_lib.sh
index 8530da04c..7a757d92d 100755
--- a/tool/dev/_lib.sh
+++ b/tool/dev/_lib.sh
@@ -10,6 +10,14 @@ set -euo pipefail
 # The repo root, whatever directory the script was invoked from.
 repo_root() { cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd; }
 
+# Git Bash, MSYS2 or Cygwin on Windows.
+is_windows() {
+  case "$(uname -s)" in
+    MINGW* | MSYS* | CYGWIN*) return 0 ;;
+    *) return 1 ;;
+  esac
+}
+
 # Refuses to go on without mise, and without mise owning the toolchain.
 #
 # A bare `flutter` is not merely discouraged here, it is forbidden — because the
@@ -88,10 +96,13 @@ EOF
   local owned_norm="${owned//\\//}"
   resolved_norm="${resolved_norm%/}"
   owned_norm="${owned_norm%/}"
-  local resolved_folded owned_folded
-  resolved_folded="$(printf '%s' "$resolved_norm" | tr '[:upper:]' '[:lower:]')"
-  owned_folded="$(printf '%s' "$owned_norm" | tr '[:upper:]' '[:lower:]')"
-  if [[ -z $owned || $resolved_folded != "$owned_folded"/* ]]; then
+  # Windows paths are case-insensitive, and mise and PATH need not agree on
+  # the drive letter's case. Elsewhere a case difference is a different path.
+  if is_windows; then
+    resolved_norm="$(printf '%s' "$resolved_norm" | tr '[:upper:]' '[:lower:]')"
+    owned_norm="$(printf '%s' "$owned_norm" | tr '[:upper:]' '[:lower:]')"
+  fi
+  if [[ -z $owned || $resolved_norm != "$owned_norm"/* ]]; then
     printf '\n  flutter resolves to %s\n' "$resolved" >&2
     printf '  which is not inside mise (%s).\n\n' "${owned:-not installed}" >&2
     printf '  Run `mise install` from %s.\n\n' "$root" >&2

From e297f1daa7372279263d4bc8da526f6abd354e5e Mon Sep 17 00:00:00 2001
From: YuYu1015 <whes1015@gmail.com>
Date: Thu, 22 Oct 2026 07:47:24 +0800
Subject: [PATCH 13/13] ci: say again that CI runs Linux when local gates pass

---
 tool/commit.sh | 26 +++++++++++---------------
 1 file changed, 11 insertions(+), 15 deletions(-)

diff --git a/tool/commit.sh b/tool/commit.sh
index 3ac835298..d52c1234b 100755
--- a/tool/commit.sh
+++ b/tool/commit.sh
@@ -307,28 +307,24 @@ fi
 
 if ((run_gates)); then
   heading 'CI gates'
-  note 'Local checks depend on the platform; full CI validation runs on Linux.'
+  note 'Everything ci.yml runs. Each step is cached on a content hash of its'
+  note 'inputs, so an unchanged tree costs seconds instead of a minute.'
   printf '\n'
   if tool/check.sh; then
-    case "$(uname -s)" in
-      Linux*)
-        ok 'all local gates passed on Linux'
-        ;;
-      MINGW*|MSYS*|CYGWIN*)
-        ok 'Windows development checks passed'
-        note 'Full tests, coverage and codegen validation are delegated to Linux CI.'
-        ;;
-      *)
-        ok "local checks passed on $(uname -s)"
-        note 'Full CI validation runs on Linux.'
-        ;;
-    esac
+    ok "every gate passed, on $(uname -s)"
+    # Said, because the difference has already cost a red CI: this runs CI's
+    # command list on *this* machine, and the runner is Linux. A test that
+    # shells out meets a different sed, a different awk and a different
+    # `script`, and passes here while failing there.
+    [[ "$(uname -s)" == Linux ]] ||
+      note 'CI runs Linux — a test that shells out can still differ there'
   else
-    block 'a local check failed'
+    block 'a gate failed — CI will fail the same way'
   fi
 else
   warn 'gates skipped (--no-check) — CI has not been reproduced'
 fi
+
 # ── Verdict ─────────────────────────────────────────────────────────────────
 heading 'Verdict'