Dependency Upgrade Protocol
dralgorhythm/claude-agentic-framework
Sequences safe dependency upgrades: read the changelog, verify the version exists upstream, pin it, and keep major bumps in separate commits behind a full gate run.
Upgrades a pinned agent SDK in the agor project, such as the Claude, Codex or Gemini CLI one, and plans the release that carries it to packaged installs.
Install Agent SDK Version Bump
$ npx skills add preset-io/agor --skill bump-agent-sdk -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install preset-io/agor bump-agent-sdk --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/preset-io/agor.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/bump-agent-sdk .claude/skills/bump-agent-sdk && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "bump-agent-sdk" agent skill from https://github.com/preset-io/agor/tree/main/.agents/skills/bump-agent-sdk into .claude/skills/bump-agent-sdk/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "bump-agent-sdk", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/preset-io/agor/tree/main/.agents/skills/bump-agent-sdkType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add preset-io/agor --skill bump-agent-sdk -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install preset-io/agor bump-agent-sdk --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/preset-io/agor.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.agents/skills/bump-agent-sdk .agents/skills/bump-agent-sdk && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "bump-agent-sdk" agent skill from https://github.com/preset-io/agor/tree/main/.agents/skills/bump-agent-sdk into .agents/skills/bump-agent-sdk/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "bump-agent-sdk", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add preset-io/agor --skill bump-agent-sdk -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install preset-io/agor bump-agent-sdk --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/preset-io/agor.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.agents/skills/bump-agent-sdk .cursor/skills/bump-agent-sdk && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "bump-agent-sdk" agent skill from https://github.com/preset-io/agor/tree/main/.agents/skills/bump-agent-sdk into .cursor/skills/bump-agent-sdk/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "bump-agent-sdk", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/preset-io/agor.git --path .agents/skills/bump-agent-sdk--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add preset-io/agor --skill bump-agent-sdk -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install preset-io/agor bump-agent-sdk --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/preset-io/agor.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.agents/skills/bump-agent-sdk .gemini/skills/bump-agent-sdk && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "bump-agent-sdk" agent skill from https://github.com/preset-io/agor/tree/main/.agents/skills/bump-agent-sdk into .gemini/skills/bump-agent-sdk/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "bump-agent-sdk", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install preset-io/agor bump-agent-sdkInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add preset-io/agor --skill bump-agent-sdk -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/preset-io/agor.git skills-src && mkdir -p .github/skills && cp -r skills-src/.agents/skills/bump-agent-sdk .github/skills/bump-agent-sdk && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "bump-agent-sdk" agent skill from https://github.com/preset-io/agor/tree/main/.agents/skills/bump-agent-sdk into .github/skills/bump-agent-sdk/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "bump-agent-sdk", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add preset-io/agor --skill bump-agent-sdk -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install preset-io/agor bump-agent-sdk --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/preset-io/agor.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.agents/skills/bump-agent-sdk .opencode/skills/bump-agent-sdk && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "bump-agent-sdk" agent skill from https://github.com/preset-io/agor/tree/main/.agents/skills/bump-agent-sdk into .opencode/skills/bump-agent-sdk/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "bump-agent-sdk", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
bump-agent-sdk- GitHub stars
- 1.4k
- Token cost
- ~1.4k tokens
- SKILL.md length
- 537 words
- Files
- 1
- Skills in repo
- 1
- Repo updated
- First seen
- Licence
- Custom licence
At a glance
Upgrades a pinned agent SDK in the agor project, such as the Claude, Codex or Gemini CLI one, and plans the release that carries it to packaged installs.
- Works in 5 steps: Pick and verify the version → Update every pin → Prove the runtime does what the bump is… → …
- A new model or runtime fix needs a newer agent SDK
- SKILL.md covers 1. Pick and verify the version, 2. Update every pin, 3. Prove the runtime does what… and 4. Validate, plus 1 more section
- Calls npm, pnpm and node
What it does
The key fact is that packaged installs never load an agent SDK from agor-live. The install sync command pulls a version-aligned wrapper package from npm that pins the SDK exactly, and a published wrapper version cannot change, so an SDK bump reaches packaged users only through a new agor-live release. The bump is therefore planned as a release PR unless the maintainers want it to ride a later release.
Step one is to pick and verify the version: confirm it is published with npm view, check that every platform package exists for the Claude Agent SDK and OpenCode, and read the changelog or diff sdk.d.ts between the old and new tarballs for breaking changes. Step two is to update every pin, found with git grep while skipping the lockfile and changelog. A table maps each tool (Claude, Codex, Gemini, OpenCode, Copilot) to its wrapper package pin and to the other places that must match, such as devDependencies in several packages, sdk-watchdog.ts and a Dockerfile global install. The excerpt is cut off before the later steps.
When your agent uses it
- A new model or runtime fix needs a newer agent SDK
- Bumping the pinned Claude Agent SDK, Codex SDK or Gemini CLI core
- Finding every place an SDK version is pinned in the repository
- Planning the agor-live release that carries an SDK bump
Example prompts
- “Bump the Claude Agent SDK pin to the newest published version and list every file that needs to change.”
- “Upgrade the Codex SDK for the new model and plan the release PR.”
- “Check whether all the OpenCode platform packages are published before we bump.”
Requirements
- A checkout of the agor repository
- npm access to check published package versions
Workflow steps
5 steps, taken from the step headings in SKILL.md.
- Pick and verify the version
- Update every pin
- Prove the runtime does what the bump is for
- Validate
- Ship it as a release
What it can do on your machine
Read from SKILL.md and the folder at commit a6b73b6. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
npmpnpmnodegitvitest
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md. Its commands use npm, pnpm and git, which can reach the network depending on how they are called.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Agent SDK Version Bump loads about 1.4k tokens when it runs. Until then it costs about 79 tokens; SKILL.md has 537 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 537 words (~1,438 tokens).
“Packaged installs never load an agent SDK from agor-live. agor install --sync installs the version-aligned wrapper @agor-live/@ from npm, and that wrapper pins the SDK exactly. A published wrapper version is immutable, so an SDK bump reaches packaged users only…”
- name
- bump-agent-sdk
Files
Just SKILL.md in .agents/skills/bump-agent-sdk of preset-io/agor.
Open the folder on GitHubat commit a6b73b6
Compare with similar skills
Agent SDK Version Bump next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Agent SDK Version Bump this skillpreset-io/agor | 1.4k | — | ~1.4k | Automated safety check: Pass | Custom licence | |
| Dependency Upgrade Protocoldralgorhythm/claude-agentic-framework | 125 | — | ~1.5k | Automated safety check: Pass | None | |
| Upgrade Claude AdapterPostHog/code | 179 | — | ~2.5k | Automated safety check: Pass | MIT | |
| PR Bumpakitaonrails/my-skills | 213 | — | ~2.7k | Automated safety check: Pass | None | |
| Git Revert SafetyZaxbyHub/opencode-swarm | 493 | — | ~2.2k | Automated safety check: Pass | MIT | |
| CI Triageandymai/brepjs | 115 | — | ~3.7k | Automated safety check: Pass | Apache-2.0 |
Similar skills
- Official
Upgrade Claude Adapter
PostHog/code
Sync this fork of @anthropic-ai/claude-agent-acp (packages/agent/src/adapters/claude) with a newer upstream release: bump the claude-agent-sdk / @agentclientprotocol/sdk, port upstream bug fixes and…
PR Bump
akitaonrails/my-skills
Merge Dependabot / dependency-bot bump PRs quickly and safely.
Git Revert Safety
ZaxbyHub/opencode-swarm
Apply when reverting commits, undoing merges, or recovering from branch contamination.
CI Triage
andymai/brepjs
This skill should be used when a brepjs GitHub Actions job is red or behaving oddly on github.com (a remote CI run, not a local pre-commit/pre-push hook) — "CI failed", "ci-pass is failing", "npm ci…
Devcontainer Dev
stacklok/toolhive-studio
Spin up and interact with ToolHive Studio's containerized dev environment (Xvfb + noVNC + DinD).
Related
Works with
Categories
Questions about Agent SDK Version Bump
What does Agent SDK Version Bump do?
Upgrades a pinned agent SDK in the agor project, such as the Claude, Codex or Gemini CLI one, and plans the release that carries it to packaged installs. The key fact is that packaged installs never load an agent SDK from agor-live. The install sync command pulls a version-aligned wrapper package from npm that pins the SDK exactly, and a published wrapper version cannot change, so an SDK bump reaches packaged users only through a new agor-live release.
When should I use Agent SDK Version Bump?
Agent SDK Version Bump fits situations like: A new model or runtime fix needs a newer agent SDK; bumping the pinned Claude Agent SDK, Codex SDK or Gemini CLI core; finding every place an SDK version is pinned in the repository; planning the agor-live release that carries an SDK bump.
How do I install Agent SDK Version Bump in Claude Code?
Run `npx skills add preset-io/agor --skill bump-agent-sdk -a claude-code`. Or copy the skill folder (.agents/skills/bump-agent-sdk in preset-io/agor) into .claude/skills/bump-agent-sdk in your project. Claude Code loads it when a task matches its description.
How do I install Agent SDK Version Bump in Codex?
Run `npx skills add preset-io/agor --skill bump-agent-sdk -a codex`. Or copy the skill folder (.agents/skills/bump-agent-sdk in preset-io/agor) into .agents/skills/bump-agent-sdk in your project. Codex loads it when a task matches its description.
Can I use Agent SDK Version Bump in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add preset-io/agor --skill bump-agent-sdk -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/bump-agent-sdk, .gemini/skills/bump-agent-sdk, .github/skills/bump-agent-sdk and .opencode/skills/bump-agent-sdk in your project.
What does Agent SDK Version Bump need to run?
Going by SKILL.md and its folder, Agent SDK Version Bump needs the command-line tools its instructions call (npm, pnpm, node, git and vitest). Our summary lists: A checkout of the agor repository; npm access to check published package versions.
Does Agent SDK Version Bump access the network?
SKILL.md contains no URLs. Its commands use npm and git, which can reach the network depending on how they are called. This is read from the text; nothing was executed.
Is Agent SDK Version Bump safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Agent SDK Version Bump use?
Agent SDK Version Bump has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.
How many tokens does Agent SDK Version Bump use?
About 1.4k tokens (SKILL.md is roughly 5.8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Agent SDK Version Bump?
Skills that share tags, products or a category with Agent SDK Version Bump: Dependency Upgrade Protocol (dralgorhythm/claude-agentic-framework, 125 stars), Upgrade Claude Adapter (PostHog/code, 179 stars), PR Bump (akitaonrails/my-skills, 213 stars) and Git Revert Safety (ZaxbyHub/opencode-swarm, 493 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Agent SDK Version Bump?
preset-io (a GitHub organization) maintains it in preset-io/agor, which has 1,432 GitHub stars. The repository was last updated on October 9, 2026.
Source: preset-io/agor on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.