[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6FJS2BC4GK6QENAD5JBPB72":3,"skill-same:01M6FJS2BC4GK6QENAD5JBPB72":73},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":37,"linkOnly":38,"markdownContent":39,"markdownBody":40,"frontMatter":41,"refName":43,"commitSha":44,"skillDirectory":45,"forksCount":46,"repositoryHtmlUrl":47,"repositoryHomepageUrl":6,"ownerHtmlUrl":48,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":49,"install":50,"resources":62},"01M6FJS2BC4GK6QENAD5JBPB72","ln-820-dependency-optimization-coordinator",null,"Upgrades dependencies across all detected package managers. Use when updating npm, NuGet, or pip packages project-wide.","boisenoise\u002Fskills-collections","boisenoise","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F193180?v=4","01M6CDBDQK6BDN55ZMA6B6PKBM","01M6CDBDVSJ3JPTBYN26FZ7TZK",12,"MIT","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Flevn-ln-820-dependency-optimization-coordinator\u002FSKILL.md",[],[18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36],"Optimization","dependency","ln","coordinator","ln 820 dependency optimization coordinator","across","when","wide","managers","pip","true","project","packages","dependencies","use","upgrades","package","npm","nuget","2026-11-10 10:12:30",false,"---\nname: ln-820-dependency-optimization-coordinator\ndescription: \"Upgrades dependencies across all detected package managers. Use when updating npm, NuGet, or pip packages project-wide.\"\ndisable-model-invocation: true\nlicense: MIT\n---\n\n> **Paths:** File paths (`shared\u002F`, `references\u002F`, `..\u002Fln-*`) are relative to skills repo root. If not found at CWD, locate this SKILL.md directory and go up one level for repo root. If `shared\u002F` is missing, fetch files via WebFetch from `https:\u002F\u002Fraw.githubusercontent.com\u002Flevnikolaevich\u002Fclaude-code-skills\u002Fmaster\u002Fskills\u002F{path}`.\n\n# ln-820-dependency-optimization-coordinator\n\n**Type:** L2 Domain Coordinator\n**Category:** 8XX Optimization\n\nRuntime-backed coordinator for cross-stack dependency upgrades. Detects package managers, delegates to one worker per manager, records machine-readable worker summaries, and emits a final coordinator summary.\n\n---\n\n## Overview\n\n| Aspect | Details |\n|--------|---------|\n| **Input** | Project path plus optional upgrade policy |\n| **Output** | Aggregated dependency upgrade report with per-worker results |\n| **Workers** | ln-821 (npm), ln-822 (nuget), ln-823 (pip) |\n| **Runtime** | `.hex-skills\u002Fdependency\u002Fruntime\u002Fruns\u002F{run_id}\u002F` |\n\n---\n\n## Workflow\n\n**Phases:** Pre-flight -> Detect Package Managers -> Security Audit -> Delegate Upgrades -> Collect Results -> Verify Summary -> Report\n\n---\n\n## Runtime Contract\n\n**MANDATORY READ:** Load `shared\u002Freferences\u002Fci_tool_detection.md`\n**MANDATORY READ:** Load `shared\u002Freferences\u002Fcoordinator_runtime_contract.md`, `shared\u002Freferences\u002Fdependency_runtime_contract.md`, `shared\u002Freferences\u002Fcoordinator_summary_contract.md`\n\nRuntime CLI:\n\n```bash\nnode shared\u002Fscripts\u002Fdependency-runtime\u002Fcli.mjs start --identifier repo-deps --manifest-file \u003Cfile>\nnode shared\u002Fscripts\u002Fdependency-runtime\u002Fcli.mjs status --identifier repo-deps\nnode shared\u002Fscripts\u002Fdependency-runtime\u002Fcli.mjs checkpoint --phase PHASE_3_DELEGATE_UPGRADES --payload '{...}'\nnode shared\u002Fscripts\u002Fdependency-runtime\u002Fcli.mjs record-worker-result --payload '{...}'\nnode shared\u002Fscripts\u002Fdependency-runtime\u002Fcli.mjs record-summary --payload '{...}'\nnode shared\u002Fscripts\u002Fdependency-runtime\u002Fcli.mjs advance --to PHASE_4_COLLECT_RESULTS\nnode shared\u002Fscripts\u002Fdependency-runtime\u002Fcli.mjs complete\n```\n\nRequired state fields:\n- `worker_plan`\n- `worker_results`\n- `child_runs`\n- `verification_passed`\n- `report_ready`\n- `summary_recorded`\n\nDomain checkpoints:\n- `PHASE_1_DETECT_PACKAGE_MANAGERS`: detected managers, indicator files, skipped managers\n- `PHASE_2_SECURITY_AUDIT`: per-manager audit verdicts, blocking findings, release-age policy\n- `PHASE_3_DELEGATE_UPGRADES`: one `child_run` per delegated worker with worker name, identifier, `runId`, and `summaryArtifactPath`\n- `PHASE_4_COLLECT_RESULTS`: recorded worker summaries plus unresolved failures or warnings\n- `PHASE_5_VERIFY_SUMMARY`: final report path, verification verdict, summary readiness\n\nGuard rules:\n- do not advance from `PHASE_3_DELEGATE_UPGRADES` until every planned worker emitted a valid `dependency-worker` summary\n- do not complete until the final report checkpoint exists and the `dependency-coordinator` summary was recorded\n- consume worker JSON summaries only; never infer worker status from prose output\n\n---\n\n## Phase 0: Pre-flight\n\nConfirm the project is a valid candidate for dependency work before starting the runtime.\n\n| Check | Method | Block if |\n|-------|--------|----------|\n| Manifest exists | Runtime `start` validation | Missing |\n| Project path exists | File inspection | Missing |\n| Upgrade policy provided | Manifest or defaults | No |\n| Existing active run for identifier | Runtime active pointer | Conflicting active run |\n\nDefault options:\n\n| Option | Default | Meaning |\n|--------|---------|---------|\n| `upgradeType` | `major` | major, minor, or patch |\n| `allowBreaking` | `true` | allow major-version migrations |\n| `minimumReleaseAge` | `14` | skip very recent releases unless security requires them |\n| `testAfterUpgrade` | `true` | workers verify build\u002Ftests after changes |\n\n---\n\n## Phase 1: Detect Package Managers\n\nDetect one worker target per package-manager family.\n\n| Package Manager | Indicator Files | Worker |\n|-----------------|-----------------|--------|\n| npm | `package.json` + `package-lock.json` | ln-821 |\n| yarn | `package.json` + `yarn.lock` | ln-821 |\n| pnpm | `package.json` + `pnpm-lock.yaml` | ln-821 |\n| nuget | `*.csproj` or `*.sln` | ln-822 |\n| pip | `requirements.txt` | ln-823 |\n| poetry | `pyproject.toml` + `poetry.lock` | ln-823 |\n| pipenv | `Pipfile` + `Pipfile.lock` | ln-823 |\n\nCheckpoint payload must include:\n- `detected_managers`\n- `indicator_paths`\n- `worker_plan`\n- `skipped_reasons`\n\n---\n\n## Phase 2: Security Audit\n\nPerform lightweight pre-flight security and freshness checks before delegating heavy upgrade work.\n\n| Manager Family | Command | Block Condition |\n|----------------|---------|-----------------|\n| Node.js | `npm audit --audit-level=high` or manager equivalent | Critical vulnerability with no allowed override |\n| NuGet | `dotnet list package --vulnerable` | Critical vulnerability with no allowed override |\n| Python | `pip-audit --json` or manager equivalent | Critical vulnerability with no allowed override |\n\nRelease-age gate:\n\n| Option | Default | Description |\n|--------|---------|-------------|\n| `minimumReleaseAge` | `14 days` | Skip packages released too recently |\n| `ignoreReleaseAge` | `false` | Override for urgent security patches |\n\nCheckpoint payload must include:\n- `audit_results`\n- `blocking_findings`\n- `release_age_policy`\n- `managers_cleared_for_delegation`\n\n---\n\n## Phase 3: Delegate Upgrades\n\nDelegate one child run per worker family. Child runs must be deterministic and artifact-driven.\n\nDelegate using the concrete worker identities selected by the routing table below. Do not synthesize family placeholders or guessed skill IDs in prompts.\n\nDelegation context:\n\n| Field | Type | Description |\n|-------|------|-------------|\n| `projectPath` | string | Absolute path to target project |\n| `packageManager` | enum | npm, yarn, pnpm, nuget, pip, poetry, pipenv |\n| `identifier` | string | Stable worker identifier inside the run |\n| `runId` | string | Deterministic child run id |\n| `summaryArtifactPath` | string | Exact JSON path for the worker summary |\n| `options` | object | Upgrade policy, verification flags, safety flags |\n\nWorker selection:\n\n| Manager Family | Worker | Notes |\n|----------------|--------|-------|\n| npm, yarn, pnpm | ln-821-npm-upgrader | One child run per detected Node manager |\n| nuget | ln-822-nuget-upgrader | One child run for .NET |\n| pip, poetry, pipenv | ln-823-pip-upgrader | One child run per detected Python manager |\n\nAfter launching each worker:\n1. Checkpoint `child_run` under `PHASE_3_DELEGATE_UPGRADES`.\n2. Wait for the emitted `dependency-worker` summary envelope.\n3. Record the worker summary with `record-worker-result`.\n\n---\n\n## Phase 4: Collect Results\n\nAggregate validated worker summaries only.\n\nWorker summary fields consumed by the coordinator:\n\n| Field | Description |\n|-------|-------------|\n| `producer_skill` | worker identity (`ln-821`, `ln-822`, `ln-823`) |\n| `summary_kind` | must be `dependency-worker` |\n| `identifier` | stable worker identifier |\n| `payload.status` | completed, partial, or failed |\n| `payload.upgrades` | applied upgrades with before\u002Fafter versions |\n| `payload.warnings` | non-blocking issues |\n| `payload.verification` | build\u002Ftest verification result |\n| `payload.artifact_path` | worker-owned durable report path, if any |\n\nCollection output:\n- `worker_results`\n- `success_count`\n- `partial_count`\n- `failed_count`\n- `blocking_failures`\n\n---\n\n## Phase 5: Verify Summary\n\nPrepare the final durable report and verify the coordinator can finish deterministically.\n\nVerification checklist:\n- every planned worker produced one valid summary envelope\n- aggregate counts match recorded worker results\n- final report path exists or is ready to be written\n- `report_ready` and `verification_passed` are true before completion\n\nFailure handling:\n1. Keep successful worker results intact.\n2. Mark failed workers explicitly in the coordinator report.\n3. Do not invent rollback actions beyond what workers already verified.\n\n---\n\n## Phase 6: Report\n\nCoordinator report schema:\n\n| Field | Description |\n|-------|-------------|\n| `package_managers` | detected managers handled in this run |\n| `workers_activated` | delegated workers |\n| `total_packages` | packages analyzed across workers |\n| `upgraded` | successful upgrades |\n| `skipped` | already latest or policy-skipped packages |\n| `failed` | packages or worker runs that failed |\n| `breaking_changes` | major-version upgrades or migrations |\n| `verification_passed` | aggregate verification verdict |\n| `per_worker[]` | machine-readable worker result summaries |\n| `warnings[]` | cross-worker warnings |\n\nCompletion sequence:\n1. Write the durable report.\n2. Checkpoint the report path and verification verdict.\n3. Record the `dependency-coordinator` summary envelope with `record-summary`.\n4. Complete runtime only after the report checkpoint and coordinator summary exist.\n\n---\n\n## Configuration\n\n```yaml\nOptions:\n  upgradeType: major          # major | minor | patch\n  allowBreaking: true\n  minimumReleaseAge: 14\n  auditLevel: high            # none | low | moderate | high | critical\n  testAfterUpgrade: true\n  buildAfterUpgrade: true\n  rollbackOnFailure: true\n  skipDev: false\n  skipOptional: true\n```\n\n---\n\n## Error Handling\n\nRecoverable:\n\n| Error | Recovery |\n|-------|----------|\n| Peer dependency conflict | Keep worker result as partial, continue collecting |\n| Build failure in one worker | Preserve failure, continue other workers |\n| Network timeout | Worker retries locally, then reports failure |\n\nFatal:\n\n| Error | Action |\n|-------|--------|\n| No package managers found | Finish with empty-result report |\n| Runtime validation failure | Pause run and require intervention |\n| Missing worker summary for planned child run | Do not advance from collection |\n\n---\n\n## References\n\n- [breaking_changes_patterns.md](references\u002Fbreaking_changes_patterns.md)\n- [security_audit_guide.md](references\u002Fsecurity_audit_guide.md)\n\n---\n\n**TodoWrite format (mandatory):**\n```text\n- Detect package managers (in_progress)\n- Delegate ln-821-npm-upgrader child runs (pending)\n- Delegate ln-822-nuget-upgrader child runs (pending)\n- Delegate ln-823-pip-upgrader child runs (pending)\n- Aggregate dependency-worker summaries (pending)\n```\n\n## Worker Invocation (MANDATORY)\n\n| Phase | Worker | Context |\n|-------|--------|---------|\n| 3 | ln-821-npm-upgrader | Isolated child run with `packageManager`, `runId`, and exact `summaryArtifactPath` |\n| 3 | ln-822-nuget-upgrader | Isolated child run with `packageManager`, `runId`, and exact `summaryArtifactPath` |\n| 3 | ln-823-pip-upgrader | Isolated child run with `packageManager`, `runId`, and exact `summaryArtifactPath` |\n\nAll workers: start the child runtime, checkpoint the `child_run` metadata, then invoke the worker skill explicitly and consume the emitted `dependency-worker` summary envelope via `record-worker-result`.\n\n```text\n# One invocation per detected package manager (sequential per family):\nnode shared\u002Fscripts\u002Fdependency-runtime\u002Fcli.mjs start --skill {worker} --identifier {packageManager} --manifest-file {workerManifestPath} --run-id {childRunId} --summary-artifact-path {childSummaryArtifactPath}\nnode shared\u002Fscripts\u002Foptimization-runtime\u002Fcli.mjs checkpoint --phase PHASE_3_DELEGATE --payload '{\"child_run\":{\"worker\":\"{worker}\",\"run_id\":\"{childRunId}\",\"summary_artifact_path\":\"{childSummaryArtifactPath}\",\"package_manager\":\"{packageManager}\"}}'\nSkill(skill: \"{worker}\", args: \"{packageManager} --run-id {childRunId} --summary-artifact-path {childSummaryArtifactPath}\")\nRead {childSummaryArtifactPath}\nnode shared\u002Fscripts\u002Foptimization-runtime\u002Fcli.mjs record-worker-result --payload-file {childSummaryArtifactPath}\n```\n\nWorker token substitution: `{worker}` is one of `ln-821-npm-upgrader`, `ln-822-nuget-upgrader`, `ln-823-pip-upgrader`.\n\n---\n\n## Definition of Done\n\n- [ ] Runtime started with a validated manifest and stable identifier\n- [ ] Package managers detected from project indicators\n- [ ] Pre-flight security and release-age checks completed\n- [ ] One child run delegated per planned worker family\n- [ ] Every child run emitted a valid `dependency-worker` summary\n- [ ] Coordinator report aggregates per-worker upgrades, warnings, and verification results\n- [ ] Final `dependency-coordinator` summary recorded before completion\n\n---\n\n## Phase 7: Meta-Analysis\n\n**MANDATORY READ:** Load `shared\u002Freferences\u002Fmeta_analysis_protocol.md`\n\nSkill type: `optimization-coordinator`. Run after all phases complete. Output to chat using the `optimization-coordinator` format.\n\n---\n\n**Version:** 1.1.0\n**Last Updated:** 2026-01-10\n","> **Paths:** File paths (`shared\u002F`, `references\u002F`, `..\u002Fln-*`) are relative to skills repo root. If not found at CWD, locate this SKILL.md directory and go up one level for repo root. If `shared\u002F` is missing, fetch files via WebFetch from `https:\u002F\u002Fraw.githubusercontent.com\u002Flevnikolaevich\u002Fclaude-code-skills\u002Fmaster\u002Fskills\u002F{path}`.\n\n# ln-820-dependency-optimization-coordinator\n\n**Type:** L2 Domain Coordinator\n**Category:** 8XX Optimization\n\nRuntime-backed coordinator for cross-stack dependency upgrades. Detects package managers, delegates to one worker per manager, records machine-readable worker summaries, and emits a final coordinator summary.\n\n---\n\n## Overview\n\n| Aspect | Details |\n|--------|---------|\n| **Input** | Project path plus optional upgrade policy |\n| **Output** | Aggregated dependency upgrade report with per-worker results |\n| **Workers** | ln-821 (npm), ln-822 (nuget), ln-823 (pip) |\n| **Runtime** | `.hex-skills\u002Fdependency\u002Fruntime\u002Fruns\u002F{run_id}\u002F` |\n\n---\n\n## Workflow\n\n**Phases:** Pre-flight -> Detect Package Managers -> Security Audit -> Delegate Upgrades -> Collect Results -> Verify Summary -> Report\n\n---\n\n## Runtime Contract\n\n**MANDATORY READ:** Load `shared\u002Freferences\u002Fci_tool_detection.md`\n**MANDATORY READ:** Load `shared\u002Freferences\u002Fcoordinator_runtime_contract.md`, `shared\u002Freferences\u002Fdependency_runtime_contract.md`, `shared\u002Freferences\u002Fcoordinator_summary_contract.md`\n\nRuntime CLI:\n\n```bash\nnode shared\u002Fscripts\u002Fdependency-runtime\u002Fcli.mjs start --identifier repo-deps --manifest-file \u003Cfile>\nnode shared\u002Fscripts\u002Fdependency-runtime\u002Fcli.mjs status --identifier repo-deps\nnode shared\u002Fscripts\u002Fdependency-runtime\u002Fcli.mjs checkpoint --phase PHASE_3_DELEGATE_UPGRADES --payload '{...}'\nnode shared\u002Fscripts\u002Fdependency-runtime\u002Fcli.mjs record-worker-result --payload '{...}'\nnode shared\u002Fscripts\u002Fdependency-runtime\u002Fcli.mjs record-summary --payload '{...}'\nnode shared\u002Fscripts\u002Fdependency-runtime\u002Fcli.mjs advance --to PHASE_4_COLLECT_RESULTS\nnode shared\u002Fscripts\u002Fdependency-runtime\u002Fcli.mjs complete\n```\n\nRequired state fields:\n- `worker_plan`\n- `worker_results`\n- `child_runs`\n- `verification_passed`\n- `report_ready`\n- `summary_recorded`\n\nDomain checkpoints:\n- `PHASE_1_DETECT_PACKAGE_MANAGERS`: detected managers, indicator files, skipped managers\n- `PHASE_2_SECURITY_AUDIT`: per-manager audit verdicts, blocking findings, release-age policy\n- `PHASE_3_DELEGATE_UPGRADES`: one `child_run` per delegated worker with worker name, identifier, `runId`, and `summaryArtifactPath`\n- `PHASE_4_COLLECT_RESULTS`: recorded worker summaries plus unresolved failures or warnings\n- `PHASE_5_VERIFY_SUMMARY`: final report path, verification verdict, summary readiness\n\nGuard rules:\n- do not advance from `PHASE_3_DELEGATE_UPGRADES` until every planned worker emitted a valid `dependency-worker` summary\n- do not complete until the final report checkpoint exists and the `dependency-coordinator` summary was recorded\n- consume worker JSON summaries only; never infer worker status from prose output\n\n---\n\n## Phase 0: Pre-flight\n\nConfirm the project is a valid candidate for dependency work before starting the runtime.\n\n| Check | Method | Block if |\n|-------|--------|----------|\n| Manifest exists | Runtime `start` validation | Missing |\n| Project path exists | File inspection | Missing |\n| Upgrade policy provided | Manifest or defaults | No |\n| Existing active run for identifier | Runtime active pointer | Conflicting active run |\n\nDefault options:\n\n| Option | Default | Meaning |\n|--------|---------|---------|\n| `upgradeType` | `major` | major, minor, or patch |\n| `allowBreaking` | `true` | allow major-version migrations |\n| `minimumReleaseAge` | `14` | skip very recent releases unless security requires them |\n| `testAfterUpgrade` | `true` | workers verify build\u002Ftests after changes |\n\n---\n\n## Phase 1: Detect Package Managers\n\nDetect one worker target per package-manager family.\n\n| Package Manager | Indicator Files | Worker |\n|-----------------|-----------------|--------|\n| npm | `package.json` + `package-lock.json` | ln-821 |\n| yarn | `package.json` + `yarn.lock` | ln-821 |\n| pnpm | `package.json` + `pnpm-lock.yaml` | ln-821 |\n| nuget | `*.csproj` or `*.sln` | ln-822 |\n| pip | `requirements.txt` | ln-823 |\n| poetry | `pyproject.toml` + `poetry.lock` | ln-823 |\n| pipenv | `Pipfile` + `Pipfile.lock` | ln-823 |\n\nCheckpoint payload must include:\n- `detected_managers`\n- `indicator_paths`\n- `worker_plan`\n- `skipped_reasons`\n\n---\n\n## Phase 2: Security Audit\n\nPerform lightweight pre-flight security and freshness checks before delegating heavy upgrade work.\n\n| Manager Family | Command | Block Condition |\n|----------------|---------|-----------------|\n| Node.js | `npm audit --audit-level=high` or manager equivalent | Critical vulnerability with no allowed override |\n| NuGet | `dotnet list package --vulnerable` | Critical vulnerability with no allowed override |\n| Python | `pip-audit --json` or manager equivalent | Critical vulnerability with no allowed override |\n\nRelease-age gate:\n\n| Option | Default | Description |\n|--------|---------|-------------|\n| `minimumReleaseAge` | `14 days` | Skip packages released too recently |\n| `ignoreReleaseAge` | `false` | Override for urgent security patches |\n\nCheckpoint payload must include:\n- `audit_results`\n- `blocking_findings`\n- `release_age_policy`\n- `managers_cleared_for_delegation`\n\n---\n\n## Phase 3: Delegate Upgrades\n\nDelegate one child run per worker family. Child runs must be deterministic and artifact-driven.\n\nDelegate using the concrete worker identities selected by the routing table below. Do not synthesize family placeholders or guessed skill IDs in prompts.\n\nDelegation context:\n\n| Field | Type | Description |\n|-------|------|-------------|\n| `projectPath` | string | Absolute path to target project |\n| `packageManager` | enum | npm, yarn, pnpm, nuget, pip, poetry, pipenv |\n| `identifier` | string | Stable worker identifier inside the run |\n| `runId` | string | Deterministic child run id |\n| `summaryArtifactPath` | string | Exact JSON path for the worker summary |\n| `options` | object | Upgrade policy, verification flags, safety flags |\n\nWorker selection:\n\n| Manager Family | Worker | Notes |\n|----------------|--------|-------|\n| npm, yarn, pnpm | ln-821-npm-upgrader | One child run per detected Node manager |\n| nuget | ln-822-nuget-upgrader | One child run for .NET |\n| pip, poetry, pipenv | ln-823-pip-upgrader | One child run per detected Python manager |\n\nAfter launching each worker:\n1. Checkpoint `child_run` under `PHASE_3_DELEGATE_UPGRADES`.\n2. Wait for the emitted `dependency-worker` summary envelope.\n3. Record the worker summary with `record-worker-result`.\n\n---\n\n## Phase 4: Collect Results\n\nAggregate validated worker summaries only.\n\nWorker summary fields consumed by the coordinator:\n\n| Field | Description |\n|-------|-------------|\n| `producer_skill` | worker identity (`ln-821`, `ln-822`, `ln-823`) |\n| `summary_kind` | must be `dependency-worker` |\n| `identifier` | stable worker identifier |\n| `payload.status` | completed, partial, or failed |\n| `payload.upgrades` | applied upgrades with before\u002Fafter versions |\n| `payload.warnings` | non-blocking issues |\n| `payload.verification` | build\u002Ftest verification result |\n| `payload.artifact_path` | worker-owned durable report path, if any |\n\nCollection output:\n- `worker_results`\n- `success_count`\n- `partial_count`\n- `failed_count`\n- `blocking_failures`\n\n---\n\n## Phase 5: Verify Summary\n\nPrepare the final durable report and verify the coordinator can finish deterministically.\n\nVerification checklist:\n- every planned worker produced one valid summary envelope\n- aggregate counts match recorded worker results\n- final report path exists or is ready to be written\n- `report_ready` and `verification_passed` are true before completion\n\nFailure handling:\n1. Keep successful worker results intact.\n2. Mark failed workers explicitly in the coordinator report.\n3. Do not invent rollback actions beyond what workers already verified.\n\n---\n\n## Phase 6: Report\n\nCoordinator report schema:\n\n| Field | Description |\n|-------|-------------|\n| `package_managers` | detected managers handled in this run |\n| `workers_activated` | delegated workers |\n| `total_packages` | packages analyzed across workers |\n| `upgraded` | successful upgrades |\n| `skipped` | already latest or policy-skipped packages |\n| `failed` | packages or worker runs that failed |\n| `breaking_changes` | major-version upgrades or migrations |\n| `verification_passed` | aggregate verification verdict |\n| `per_worker[]` | machine-readable worker result summaries |\n| `warnings[]` | cross-worker warnings |\n\nCompletion sequence:\n1. Write the durable report.\n2. Checkpoint the report path and verification verdict.\n3. Record the `dependency-coordinator` summary envelope with `record-summary`.\n4. Complete runtime only after the report checkpoint and coordinator summary exist.\n\n---\n\n## Configuration\n\n```yaml\nOptions:\n  upgradeType: major          # major | minor | patch\n  allowBreaking: true\n  minimumReleaseAge: 14\n  auditLevel: high            # none | low | moderate | high | critical\n  testAfterUpgrade: true\n  buildAfterUpgrade: true\n  rollbackOnFailure: true\n  skipDev: false\n  skipOptional: true\n```\n\n---\n\n## Error Handling\n\nRecoverable:\n\n| Error | Recovery |\n|-------|----------|\n| Peer dependency conflict | Keep worker result as partial, continue collecting |\n| Build failure in one worker | Preserve failure, continue other workers |\n| Network timeout | Worker retries locally, then reports failure |\n\nFatal:\n\n| Error | Action |\n|-------|--------|\n| No package managers found | Finish with empty-result report |\n| Runtime validation failure | Pause run and require intervention |\n| Missing worker summary for planned child run | Do not advance from collection |\n\n---\n\n## References\n\n- [breaking_changes_patterns.md](references\u002Fbreaking_changes_patterns.md)\n- [security_audit_guide.md](references\u002Fsecurity_audit_guide.md)\n\n---\n\n**TodoWrite format (mandatory):**\n```text\n- Detect package managers (in_progress)\n- Delegate ln-821-npm-upgrader child runs (pending)\n- Delegate ln-822-nuget-upgrader child runs (pending)\n- Delegate ln-823-pip-upgrader child runs (pending)\n- Aggregate dependency-worker summaries (pending)\n```\n\n## Worker Invocation (MANDATORY)\n\n| Phase | Worker | Context |\n|-------|--------|---------|\n| 3 | ln-821-npm-upgrader | Isolated child run with `packageManager`, `runId`, and exact `summaryArtifactPath` |\n| 3 | ln-822-nuget-upgrader | Isolated child run with `packageManager`, `runId`, and exact `summaryArtifactPath` |\n| 3 | ln-823-pip-upgrader | Isolated child run with `packageManager`, `runId`, and exact `summaryArtifactPath` |\n\nAll workers: start the child runtime, checkpoint the `child_run` metadata, then invoke the worker skill explicitly and consume the emitted `dependency-worker` summary envelope via `record-worker-result`.\n\n```text\n# One invocation per detected package manager (sequential per family):\nnode shared\u002Fscripts\u002Fdependency-runtime\u002Fcli.mjs start --skill {worker} --identifier {packageManager} --manifest-file {workerManifestPath} --run-id {childRunId} --summary-artifact-path {childSummaryArtifactPath}\nnode shared\u002Fscripts\u002Foptimization-runtime\u002Fcli.mjs checkpoint --phase PHASE_3_DELEGATE --payload '{\"child_run\":{\"worker\":\"{worker}\",\"run_id\":\"{childRunId}\",\"summary_artifact_path\":\"{childSummaryArtifactPath}\",\"package_manager\":\"{packageManager}\"}}'\nSkill(skill: \"{worker}\", args: \"{packageManager} --run-id {childRunId} --summary-artifact-path {childSummaryArtifactPath}\")\nRead {childSummaryArtifactPath}\nnode shared\u002Fscripts\u002Foptimization-runtime\u002Fcli.mjs record-worker-result --payload-file {childSummaryArtifactPath}\n```\n\nWorker token substitution: `{worker}` is one of `ln-821-npm-upgrader`, `ln-822-nuget-upgrader`, `ln-823-pip-upgrader`.\n\n---\n\n## Definition of Done\n\n- [ ] Runtime started with a validated manifest and stable identifier\n- [ ] Package managers detected from project indicators\n- [ ] Pre-flight security and release-age checks completed\n- [ ] One child run delegated per planned worker family\n- [ ] Every child run emitted a valid `dependency-worker` summary\n- [ ] Coordinator report aggregates per-worker upgrades, warnings, and verification results\n- [ ] Final `dependency-coordinator` summary recorded before completion\n\n---\n\n## Phase 7: Meta-Analysis\n\n**MANDATORY READ:** Load `shared\u002Freferences\u002Fmeta_analysis_protocol.md`\n\nSkill type: `optimization-coordinator`. Run after all phases complete. Output to chat using the `optimization-coordinator` format.\n\n---\n\n**Version:** 1.1.0\n**Last Updated:** 2026-01-10\n",{"name":5,"license":14,"description":7,"disable-model-invocation":42},true,"main","7bf2279c8a65758319526a721d5c4b75683aec9c","skills\u002Flevn-ln-820-dependency-optimization-coordinator",3,"https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections","https:\u002F\u002Fgithub.com\u002Fboisenoise","2026-11-11 14:20:43",{"source":8,"skillName":5,"commands":51,"prompt":61,"zipAvailable":42},[52,55,58],{"tool":53,"command":54},"npx","npx skills add boisenoise\u002Fskills-collections --skill ln-820-dependency-optimization-coordinator",{"tool":56,"command":57},"bunx","bunx skills add boisenoise\u002Fskills-collections --skill ln-820-dependency-optimization-coordinator",{"tool":59,"command":60},"pnpm","pnpm dlx skills add boisenoise\u002Fskills-collections --skill ln-820-dependency-optimization-coordinator","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Flevn-ln-820-dependency-optimization-coordinator\u002FSKILL.md",[63,69],{"path":64,"resourceType":65,"resourceTypeDesc":66,"sizeBytes":67,"sourceHtmlUrl":68},"references\u002Fbreaking_changes_patterns.md","REFERENCE","参考文档",3871,"https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Flevn-ln-820-dependency-optimization-coordinator\u002Freferences\u002Fbreaking_changes_patterns.md",{"path":70,"resourceType":65,"resourceTypeDesc":66,"sizeBytes":71,"sourceHtmlUrl":72},"references\u002Fsecurity_audit_guide.md",2717,"https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Flevn-ln-820-dependency-optimization-coordinator\u002Freferences\u002Fsecurity_audit_guide.md",[74,103,130,156,175,198],{"skillNo":75,"name":76,"nameZh":6,"description":77,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":78,"licenseFileUrl":79,"sourceHtmlUrl":80,"categories":81,"keywords":82,"publishedAt":37},"01M6WNH92BHVFXHGPDZCPJ0AG0","web-access","Use Treg for public web or platform data only when existing search, browser and connected tools cannot cover the task, with explicit cost and data boundaries.","Apache-2.0","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-web-access\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-web-access\u002FSKILL.md",[],[83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,24,102],"web","access","web access","official","development","browser","search","data","Tools","read","fetch","only","youtube","free tools","platform","critical","free","cover","normal","2026",{"skillNo":104,"name":105,"nameZh":6,"description":106,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":78,"licenseFileUrl":107,"sourceHtmlUrl":108,"categories":109,"keywords":115,"publishedAt":37},"01M6WNF9XAYAB2CZDDJBAKNM93","treg","Use the Treg CLI or MCP catalog to discover, price and call authorized external tools with team-scoped credentials and a user-approved budget.","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-treg\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-treg\u002FSKILL.md",[110],{"categoryNo":111,"categoryName":112,"taxonomyType":113,"taxonomyTypeDesc":114},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[105,116,117,118,86,87,119,91,120,121,122,123,32,124,125,98,126,127,128,129,102],"MCP","cli","github","license","Budget","credentials","team","catalog","call","discover","external tools","with","scoped","blob",{"skillNo":131,"name":132,"nameZh":6,"description":133,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":78,"licenseFileUrl":134,"sourceHtmlUrl":135,"categories":136,"keywords":142,"publishedAt":37},"01M6WN93MEAZ4E41DYAHJRPHQT","recruit","Turn a job description into an evidence-linked candidate shortlist through Treg, with job-related ranking and optional authorized business contact enrichment.","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-recruit\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-recruit\u002FSKILL.md",[137],{"categoryNo":138,"categoryName":139,"taxonomyType":140,"taxonomyTypeDesc":141},"01JBSEEDCAT000000000000038","人力资源","PROFESSION","适用职业",[132,118,86,119,143,144,145,146,147,148,98,149,150,151,127,152,153,154,155,129,105,102],"https","email","enrichment","business","evidence","phone","ranking","post","job description","for","person","candidate","reason",{"skillNo":157,"name":158,"nameZh":6,"description":159,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":78,"licenseFileUrl":160,"sourceHtmlUrl":161,"categories":162,"keywords":163,"publishedAt":37},"01M6WN8R5RXSMHM9B4D9FAFX42","rea-growth","Analyze a company’s public growth and content through Treg, distinguish observations from hypotheses, and produce an evidence-linked playbook within an approved budget.","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-rea-growth\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-rea-growth\u002FSKILL.md",[],[164,165,166,118,86,119,167,168,143,169,120,170,171,172,147,98,173,174,129,105,102],"growth","rea","rea growth","produce","content","playbook","marketing","analyze","public","observations","company",{"skillNo":176,"name":177,"nameZh":6,"description":178,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":78,"licenseFileUrl":179,"sourceHtmlUrl":180,"categories":181,"keywords":182,"publishedAt":37},"01M6WN2EVE3RQRGWAKBT4S7YT2","make-ugc","Create original AI UGC-style product videos through Treg: research hooks, approve a licensed presenter and voice, generate clips, add captions and report costs.","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-make-ugc\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-make-ugc\u002FSKILL.md",[],[183,184,118,185,86,186,119,187,188,189,190,191,98,192,193,194,195,196,197,129],"make","make ugc","research","create","Video","Captions","ads","short","hooks","head","style","niche","trending","talking-head","approve",{"skillNo":199,"name":200,"nameZh":6,"description":201,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":78,"licenseFileUrl":202,"sourceHtmlUrl":203,"categories":204,"keywords":205,"publishedAt":37},"01M6WN10ARAA63Y8K1YNGXJ2RM","lead-signals","Find and qualify public buying signals through Treg, rank fitting business accounts and optionally enrich authorized business contact information.","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-lead-signals\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-lead-signals\u002FSKILL.md",[],[206,207,208,118,86,119,209,210,146,211,212,98,213,214,215,216,217,218,219,129],"signals","lead","lead signals","how","find","ready","as","how to","qualify","people","information","enrich","changes","funding"]