@pareto4/pp-core 1.10.0 → 1.11.1

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "pp-core",
   "displayName": "PP Core",
-  "version": "1.10.0",
+  "version": "1.11.1",
   "description": "PP Core is a meta-prompting, context engineering, and spec-driven development system for AI coding agents.",
   "author": {
     "name": "pareto4",

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "pp-core",
-  "version": "1.10.0",
+  "version": "1.11.1",
   "description": "PP Core — a meta-prompting, context engineering, and spec-driven development system for AI coding agents. Loads pp-core's operating context into every Gemini CLI session.",
   "contextFileName": "GEMINI.md"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pareto4/pp-core",
-  "version": "1.10.0",
+  "version": "1.11.1",
   "description": "Pareto pp-core — The Pareto Project's AI-assisted engineering framework: meta-prompting, context engineering, and spec-driven development for AI coding agents.",
   "bin": {
     "pp-core": "bin/install.js",
@@ -82,12 +82,14 @@
     "check:alias-drift": "node scripts/check-alias-drift.cjs",
     "check:identity-drift": "node scripts/lint-package-identity-drift.cjs",
     "check:integrity": "node scripts/check-npm-integrity.cjs",
-    "build": "npm run generate:identity && npm run build:lib && npm run gen:loop-host-contract && npm run gen:capability-registry && npm run build:hooks",
+    "build": "npm run generate:identity && npm run build:lib && npm run gen:loop-host-contract && npm run gen:capability-registry && npm run gen:platform-bindings-schema && npm run build:hooks",
     "build:hooks": "node scripts/build-hooks.js",
     "build:lib": "tsc -p tsconfig.build.json",
     "generate:identity": "node scripts/generate-package-identity.cjs",
     "gen:loop-host-contract": "node scripts/gen-loop-host-contract.cjs --write",
     "gen:capability-registry": "node scripts/gen-capability-registry.cjs --write",
+    "gen:platform-bindings-schema": "node scripts/gen-platform-bindings-schema.cjs --write",
+    "check:platform-bindings-schema": "node scripts/gen-platform-bindings-schema.cjs --check",
     "gen:commands-reference": "node scripts/gen-commands-reference.cjs --write",
     "prepack": "npm run build:lib",
     "prepare": "npm run build:lib",
@@ -97,7 +99,7 @@
     "pretest:coverage": "npm run build:lib && npm run lint:skill-deps",
     "lint": "eslint . --cache --cache-location node_modules/.cache/eslint/",
     "lint:fix": "eslint . --fix",
-    "lint:ci": "npm run lint && npm run lint:skill-deps && node scripts/lint-test-file-count.cjs && node scripts/lint-command-contract.cjs && node scripts/lint-pr-check-project-dir.cjs && npm run lint:legacy-name && node scripts/lint-regression-test-names.cjs && node scripts/lint-windows-test-portability.cjs && node scripts/lint-allow-test-rule-refs.cjs",
+    "lint:ci": "npm run lint && npm run lint:skill-deps && node scripts/lint-test-file-count.cjs && node scripts/lint-command-contract.cjs && node scripts/lint-pr-check-project-dir.cjs && npm run lint:legacy-name && node scripts/lint-regression-test-names.cjs && node scripts/lint-windows-test-portability.cjs && node scripts/lint-allow-test-rule-refs.cjs && npm run check:platform-bindings-schema",
     "lint:allow-test-rule-refs": "node scripts/lint-allow-test-rule-refs.cjs",
     "lint:windows-test-portability": "node scripts/lint-windows-test-portability.cjs",
     "lint:regression-names": "node scripts/lint-regression-test-names.cjs",

package/pareto-skills/pp-brand/SKILL.md

@@ -33,7 +33,7 @@ Ensures every Pareto deliverable — written, visual, or interactive — is cons
 
 The Pareto Project is an **AI-First software delivery company**. We redesigned the software development lifecycle so AI agents execute ~80% of the work and humans own the 20% that matters: defining the problem, validating the outcome, taking responsibility.
 
-The brand is **technical, confident, optimistic**. Serious about craft, approachable in voice. Where 21south is clinical, Pareto is warmer — it has a cast of characters. Where most AI-tooling brands are abstract, Pareto is specific: every delivery phase has its own agent.
+The brand is **technical, confident, optimistic**. Serious about craft, approachable in voice. Where enterprise consultancies are clinical, Pareto is warmer — it has a cast of characters. Where most AI-tooling brands are abstract, Pareto is specific: every delivery phase has its own agent.
 
 ### Brand Character
 

package/pp-core/bin/lib/capability-registry.cjs

@@ -1931,7 +1931,7 @@ const capabilities = {
     "id": "vault",
     "role": "feature",
     "title": "Client vault load",
-    "description": "Fetches client-specific knowledge (standards, patterns, conventions) from a GitLab vault repo at a pinned ref before plan and execute. Inert unless vault.enabled and .platform-bindings.json + client.vaultRepo are present. Advisory: fetch failure falls back to cached copy and warns; never blocks.",
+    "description": "Fetches client-specific knowledge (standards, patterns, conventions) from a provider-selected git host vault repo at a pinned ref before plan and execute. Inert unless vault.enabled and .platform-bindings.json + client.vaultRepo are present. Advisory: fetch failure falls back to cached copy and warns; never blocks.",
     "tier": "full",
     "requires": [],
     "runtimeCompat": {
@@ -1949,6 +1949,11 @@ const capabilities = {
         "default": false,
         "description": "Enable client vault load. When false, all steps and gates are inert."
       },
+      "vault.provider": {
+        "type": "string",
+        "default": "gitlab",
+        "description": "Selects how pp-core addresses the git host for vault fetch/write. Supported values: 'gitlab', 'azure'. Defaults to 'gitlab' so existing projects are unaffected. Never inferred from the configured host — it must be set explicitly to change provider behaviour."
+      },
       "vault.cache_ttl_hours": {
         "type": "number",
         "default": 24,
@@ -1963,6 +1968,21 @@ const capabilities = {
         "type": "string",
         "default": "main",
         "description": "Branch or tag of the shared fallback vault."
+      },
+      "vault.fallback_host": {
+        "type": "string",
+        "default": "",
+        "description": "Host for the shared fallback vault. When unset, falls back to platform.host from .platform-bindings.json, then to the host derived from vault.provider. Must be set explicitly for an on-prem host where the provider-derived default is wrong."
+      },
+      "org.profile": {
+        "type": "string",
+        "default": "",
+        "description": "Names the npm package carrying this organisation's default provider, host, platform and vault coordinates. The package is resolved by name and its data file is read as JSON — it is never loaded as code. An unset value means no org profile, and pp-core's built-in defaults apply. A value explicitly set in .planning/config.json or .platform-bindings.json always outranks whatever the profile supplies."
+      },
+      "init.compose_declined": {
+        "type": "boolean",
+        "default": false,
+        "description": "Internal marker set by /pp-init Step 2.5 when the operator explicitly declines the compose-and-write confirmation. Lets `pp-tools query init-contract --verify` distinguish a deliberate decline from a skipped step (Phase 34-07). Not intended for direct operator editing."
       }
     },
     "commands": [
@@ -2744,9 +2764,13 @@ const configKeys = {
   "workflow.ui_review": "ui",
   "workflow.ui_safety_gate": "ui",
   "vault.enabled": "vault",
+  "vault.provider": "vault",
   "vault.cache_ttl_hours": "vault",
   "vault.fallback_repo": "vault",
   "vault.fallback_ref": "vault",
+  "vault.fallback_host": "vault",
+  "org.profile": "vault",
+  "init.compose_declined": "vault",
   "vault.practices_enabled": "vault-practices"
 };
 
@@ -2982,6 +3006,12 @@ const configSchema = {
     "default": false,
     "description": "Enable client vault load. When false, all steps and gates are inert."
   },
+  "vault.provider": {
+    "owner": "vault",
+    "type": "string",
+    "default": "gitlab",
+    "description": "Selects how pp-core addresses the git host for vault fetch/write. Supported values: 'gitlab', 'azure'. Defaults to 'gitlab' so existing projects are unaffected. Never inferred from the configured host — it must be set explicitly to change provider behaviour."
+  },
   "vault.cache_ttl_hours": {
     "owner": "vault",
     "type": "number",
@@ -3000,6 +3030,24 @@ const configSchema = {
     "default": "main",
     "description": "Branch or tag of the shared fallback vault."
   },
+  "vault.fallback_host": {
+    "owner": "vault",
+    "type": "string",
+    "default": "",
+    "description": "Host for the shared fallback vault. When unset, falls back to platform.host from .platform-bindings.json, then to the host derived from vault.provider. Must be set explicitly for an on-prem host where the provider-derived default is wrong."
+  },
+  "org.profile": {
+    "owner": "vault",
+    "type": "string",
+    "default": "",
+    "description": "Names the npm package carrying this organisation's default provider, host, platform and vault coordinates. The package is resolved by name and its data file is read as JSON — it is never loaded as code. An unset value means no org profile, and pp-core's built-in defaults apply. A value explicitly set in .planning/config.json or .platform-bindings.json always outranks whatever the profile supplies."
+  },
+  "init.compose_declined": {
+    "owner": "vault",
+    "type": "boolean",
+    "default": false,
+    "description": "Internal marker set by /pp-init Step 2.5 when the operator explicitly declines the compose-and-write confirmation. Lets `pp-tools query init-contract --verify` distinguish a deliberate decline from a skipped step (Phase 34-07). Not intended for direct operator editing."
+  },
   "vault.practices_enabled": {
     "owner": "vault-practices",
     "type": "boolean",