メニュー
Align TokenKey grok-cli OAuth relay fingerprint pins to upstream @xai-official/grok releases. Use when client-release-watch reports grok-cli drift or xAI OAuth relay UA rejection.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Capture real Claude Code TLS/HTTP fingerprints and diff/fix TokenKey constants. Use after cc version changes, ingress UA cohort drift, OAuth mimicry/beta/stainless drift, CC geo-stego body drift (system/messages/system-reminder), or refreshing tk_canonical_cc_oauth alignment.
Run the combined TokenKey fingerprint refresh for Claude Code, Kiro, Antigravity, Codex, Gemini CLI, and Grok CLI. Enter after client-release-watch reports drift, or when capture-all finds actionable fingerprint drift; use platform-specific skills for single-client refreshes.
Read-only TokenKey prod/edge troubleshooting workflow. Use for live logs, ops_error_logs, SSM/Docker checks, gateway UA/TLS/body evidence, CI/deploy traces, and evidence-based root-cause summaries.
TokenKey Kiro OAuth re-authorization and refresh troubleshooting workflow. Use when a Kiro edge account shows OAuth 401, Invalid bearer token, grant revoked upstream, repeated manual re-oauth, Kiro refresh failures, or when copying freshly logged-in local Kiro credentials onto an edge and verifying Kiro Claude traffic.
TokenKey model operations hub — single ops entry for catalog/menu refresh, newapi mapping drift, mirror diff, account model_mapping runtime hotfix, and onboard prep. Routes read-only plan, catalog write, runtime setting sync, or onboard write.
Drive TokenKey Stage0 release, prod deploy, edge rollout, smoke, rollback, and release-risk checks. Use for release tagging, deploy-stage0, Lightsail edge rollout, structured smoke results, or post-release OAuth checks.
| name | tokenkey-grok-fingerprint-alignment |
| description | Align TokenKey grok-cli OAuth relay fingerprint pins to upstream @xai-official/grok releases. Use when client-release-watch reports grok-cli drift or xAI OAuth relay UA rejection. |
Layer 1：bash ops/fingerprint/client-release-watch.sh scan --plan 发现 grok-cli 漂移后加载本 skill。
| 信号 | 路径 |
|---|---|
| grok-cli semver watch pin | backend/internal/pkg/xai/oauth.go DefaultGrokCLIVersion |
| Responses 路径 UA | backend/internal/service/openai_gateway_grok.go（sub2api-grok/* 族，与 CLI semver 分轨） |
Upstream：npm @xai-official/grok。
npm i -g @xai-official/grok@<target>（不是 npm 上的 grok-cli 包）bash ops/xai/capture-grok-fingerprint.sh check envbash ops/xai/capture-grok-fingerprint.sh capture（写入 .cache/fingerprint/grok-cli/*.bundle.json）DefaultGrokCLIVersion + go test -tags=unit ./internal/pkg/xai/... → scripts/preflight.sh禁止仅凭 npm release 改 pin；至少对照本机 grok --version（capture 脚本）后再合 PR。