cosmian-kms-lockfile-hashes-instructions.ocm.json json {
"ocm": "1",
"id": "cosmian-kms-lockfile-hashes-instructions",
"kind": "skill",
"name": "Lockfile & Nix Hashes",
"description": "Keep Nix vendor hashes in sync when Cargo.lock or pnpm-lock.yaml changes",
"publisher": "Cosmian",
"version": "1.0.0",
"capabilities": {
"domains": [
"general"
],
"tags": [
"skill-md",
"github-instructions"
],
"languages": [
"en"
]
},
"quality_prior": 0.6,
"examples": [
"Keep Nix vendor hashes in sync when Cargo.lock or pnpm-lock.yaml changes"
],
"primary": false,
"metadata": {
"source": {
"provider": "github-instructions",
"repository": "https://github.com/Cosmian/kms",
"path": ".github/instructions/lockfile-hashes.instructions.md",
"ref": "6b3a44767d40c9826639aabacef0b4233ce2d62e",
"url": "https://github.com/Cosmian/kms/blob/6b3a44767d40c9826639aabacef0b4233ce2d62e/.github/instructions/lockfile-hashes.instructions.md",
"key": "Cosmian/kms/.github/instructions/lockfile-hashes.instructions.md"
},
"applies_to": "Cargo.lock, ui/pnpm-lock.yaml"
},
"instructions": "# Lockfile → Nix vendor hash sync\n\nWhen a lock file changes, the Nix vendor hashes must be updated to match.\n\n## Checklist\n\n- [ ] Update `nix/expected-hashes/` files with the correct `sha256-...` hash from CI output\n- Hash files: `server.vendor.{static,dynamic}.sha256`, `cli.vendor.{static,dynamic}.{darwin,linux}.sha256`, `ui.vendor.{fips,non-fips}.sha256`, `ui.pnpm.{darwin,linux}.sha256`\n\nWhen CI reports a hash mismatch, first verify the lock file changed **intentionally** in this PR;\nif not, revert it.\n\n> Rule 4.11 of `/kms-sync-rules`. For the full Nix workflow, see `nix.instructions.md`.",
"cost": {
"context_tokens": 149
}
}