Dependency Sync Skill

Automatically detect new imports in modified code files and update package manifests. This skill ensures that when code is written that uses new dependencies, the appropriate manifest files (package.json, pyproject.toml, requirements.txt, etc.) are updated automatically.

Variables

Instructions

MANDATORY - Follow the Workflow steps below in order. Do not skip steps.

1. Detect modified files from git diff or implementation context
2. Parse imports/requires from modified files
3. Compare against current manifest dependencies
4. Identify package manager for the project
5. Install missing dependencies
6. Optionally trigger docs-audit for new libraries

Red Flags - STOP and Reconsider

If you're about to:

• Install a package without verifying the import is actually used
• Skip manifest detection (assuming package manager)
• Install to wrong manifest (e.g., devDependencies vs dependencies)
• Install without checking if package exists in registry

STOP -> Verify the import is real -> Check manifest -> Then install

Workflow

1. Gather Modified Files

Identify files that were modified in the current implementation:

# If in git context
git diff --name-only HEAD~1 HEAD -- "*.py" "*.ts" "*.js" "*.tsx" "*.jsx" "*.go" "*.rs"

# Or from task context - files that were written/edited

2. Extract Imports

Parse imports from each modified file based on language:

import X

from X import Y

import X from 'Y'

require('Y')

import "X"

use X::Y

extern crate X

3. Detect Package Manager

Check for manifest files to determine the package manager:

pyproject.toml

uv add <package>

pyproject.toml

poetry add <package>

requirements.txt

pip install <package>

package.json

npm install <package>

Cargo.toml

cargo add <package>

go.mod

go get <package>

pubspec.yaml

flutter pub add <package>

4. Compare Dependencies

For each extracted import:

1. Normalize import name to package name (e.g.,

   from PIL import Image

   ->

   pillow

   )
2. Check if package exists in manifest
3. If missing, add to installation list

5. Install Dependencies

Execute installation commands for missing dependencies:

# Python with uv
uv add <package1> <package2>

# Node.js
npm install <package1> <package2>

# Rust
cargo add <package1> <package2>

# Go
go get <package1> <package2>

6. Post-Install Actions

If TRIGGER_DOCS_AUDIT is true and new dependencies were added:

1. Run

   /ai-dev-kit:docs-audit --new-only

2. Suggest

   /ai-dev-kit:docs-add-stack

   if documentation is missing

Cookbook

Python Import Mapping

• IF: Parsing Python imports
• THEN: Read

  cookbook/python-imports.md

• RESULT: Normalized package names

Node Import Mapping

• IF: Parsing JavaScript/TypeScript imports
• THEN: Read

  cookbook/node-imports.md

• RESULT: Normalized package names

Classification Rules

• IF: Determining if dependency is dev or prod
• THEN: Read

  cookbook/dependency-classification.md

• RESULT: Correct target in manifest

Quick Reference

Import-to-Package Mappings

PIL

pillow

cv2

opencv-python

yaml

pyyaml

sklearn

scikit-learn

bs4

beautifulsoup4

pg

pg

asyncpg

@tanstack/react-query

@tanstack/react-query

Dev Dependency Indicators

pytest

vitest

jest

eslint

ruff

black

@types/*

*-dev

*-debug

Integration Points

This skill is invoked:

1. By lane-executor: After implementing code in a task
2. By test-engineer: After writing tests that need new test dependencies
3. Manually: Via

   /ai-dev-kit:dependency-sync

   command

Example Integration in Lane Executor

## Post-Implementation Steps

After completing implementation:
1. Run `dependency-sync` skill to update manifests
2. Run `post-impl-docs` skill to update documentation
3. Verify build/tests still pass

Output

Success Report

{
  "status": "success",
  "dependencies_added": [
    {"name": "asyncpg", "version": "^0.29.0", "manifest": "pyproject.toml", "type": "production"},
    {"name": "pytest-asyncio", "version": "^0.23.0", "manifest": "pyproject.toml", "type": "development"}
  ],
  "manifest_updated": "pyproject.toml",
  "commit_sha": "abc123",
  "docs_audit_triggered": true
}

No Changes Report

{
  "status": "no_changes",
  "message": "All imports already present in manifest",
  "files_scanned": 5,
  "imports_found": 12,
  "imports_matched": 12
}