feat(coding-agent): add binary release checksums

closes #5739

.github/workflows/build-binaries.yml

@@ -59,28 +59,27 @@ jobs:
         run: |
           cd packages/coding-agent/binaries
 
+          release_assets=(
+            pi-darwin-arm64.tar.gz
+            pi-darwin-x64.tar.gz
+            pi-linux-x64.tar.gz
+            pi-linux-arm64.tar.gz
+            pi-windows-x64.zip
+            pi-windows-arm64.zip
+          )
+          sha256sum "${release_assets[@]}" > SHA256SUMS
+          release_assets+=(SHA256SUMS)
+
           if gh release view "${RELEASE_TAG}" >/dev/null 2>&1; then
             gh release edit "${RELEASE_TAG}" \
               --title "${RELEASE_TAG}" \
               --notes-file /tmp/release-notes.md
-            gh release upload "${RELEASE_TAG}" \
-              pi-darwin-arm64.tar.gz \
-              pi-darwin-x64.tar.gz \
-              pi-linux-x64.tar.gz \
-              pi-linux-arm64.tar.gz \
-              pi-windows-x64.zip \
-              pi-windows-arm64.zip \
-              --clobber
+            gh release upload "${RELEASE_TAG}" "${release_assets[@]}" --clobber
           else
             gh release create "${RELEASE_TAG}" \
               --title "${RELEASE_TAG}" \
               --notes-file /tmp/release-notes.md \
-              pi-darwin-arm64.tar.gz \
-              pi-darwin-x64.tar.gz \
-              pi-linux-x64.tar.gz \
-              pi-linux-arm64.tar.gz \
-              pi-windows-x64.zip \
-              pi-windows-arm64.zip
+              "${release_assets[@]}"
           fi
 
   publish-npm:

packages/coding-agent/CHANGELOG.md

@@ -4,6 +4,7 @@
 
 ### Added
 
+- Added `SHA256SUMS` integrity files to standalone binary GitHub release assets ([#5739](https://github.com/earendil-works/pi/issues/5739)).
 - Added first-run interactive theme detection from the terminal background.
 
 ### Fixed