菜单
Syncs SHA-256 checksums from GitHub releases to release-assets.json for offline build integrity verification. Use after publishing new releases or when offline builds fail checksum verification.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Regenerates Node.js patches against pristine upstream source so each applies independently. Use after a Node.js version bump, when patches fail to apply, or when restructuring the patch chain.
Opt-in flow to rebuild + republish all 8 platform smol_stub artifacts via the stubs.yml GitHub Actions workflow (e.g. after the SEA footer integrity changed sha256→sha512, so the 7 downloaded prebuilts must be rebuilt to match). The model drives the automatable steps (prereq checks, dispatch, watch, verify) and PAUSES at the one human gate — the operator types the release-workflow-dispatch bypass phrase to opt in — then clicks the emitted GitHub Actions + Release browser links to watch / authenticate if gh prompts. Use when a stub-affecting source change (footer format, compression, platform metadata) needs every platform's prebuilt republished.
Orchestrates LIEF and stubs updates in correct dependency order (LIEF first, then stubs). Use after Node.js updates, before releases, or when binary tools need refresh.
Updates cJSON submodule to latest stable version, bumps binject and node-smol caches. Use when cJSON has security patches, JSON parsing bugs, or as part of binject updates.
Updates curl and mbedtls submodules to latest stable versions, bumps curl/stubs/binpress/node-smol caches. Use for TLS security patches, HTTP client fixes, or periodic maintenance.
Vendors fast-webstreams from npm to additions/, converting ESM to CommonJS with primordials for Node.js bootstrap. Use when the WebStreams version needs update or builds fail with streams errors.
name: updating-release-assets description: Syncs SHA-256 checksums from GitHub releases to release-assets.json for offline build integrity verification. Use after publishing new releases or when offline builds fail checksum verification. user-invocable: true allowed-tools: Bash(pnpm:), Bash(npm:), Bash(git:), Bash(node:), Bash(rg:), Bash(grep:), Bash(find:), Bash(ls:), Bash(cat:), Bash(head:), Bash(tail:), Bash(wc:), Bash(diff:*), Read, Edit---
Sync SHA-256 checksums from GitHub releases to packages/build-infra/release-assets.json.
packages/build-infra/release-assets.json - Embedded checksums (works offline)packages/build-infra/lib/release-checksums.mts - Verification logicpackages/build-infra/scripts/update-release-assets.mts - Sync scriptLookup priority: in-memory cache, then embedded checksums, then network fetch.
Tools with checksums: lief, curl, stubs, libpq, binpress, binflate, binject.
grep -E '"githubRelease"' packages/build-infra/release-assets.jsonpnpm --filter build-infra update-release-assetsgit diff packages/build-infra/release-assets.json and validate JSONgit add packages/build-infra/release-assets.json
git commit -m "chore: update release checksums"
git pull --rebase origin main
git push origin main
Requires authenticated GitHub CLI (gh auth status).