@pareto4/pp-core 1.5.0 → 1.5.1

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "pp-core",
   "displayName": "PP Core",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "description": "PP Core is a meta-prompting, context engineering, and spec-driven development system for AI coding agents.",
   "author": {
     "name": "pareto4",

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "pp-core",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "description": "PP Core — a meta-prompting, context engineering, and spec-driven development system for AI coding agents. Loads pp-core's operating context into every Gemini CLI session.",
   "contextFileName": "GEMINI.md"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pareto4/pp-core",
-  "version": "1.5.0",
-  "description": "GSD Core is a meta-prompting, context engineering, and spec-driven development system for AI coding agents.",
+  "version": "1.5.1",
+  "description": "Pareto pp-core — The Pareto Project's AI-assisted engineering framework: meta-prompting, context engineering, and spec-driven development for AI coding agents.",
   "bin": {
     "pp-core": "bin/install.js",
     "pp-tools": "pp-core/bin/pp-tools.cjs",
@@ -31,7 +31,7 @@
     "codex",
     "codex-cli"
   ],
-  "author": "OpenGSD",
+  "author": "The Pareto Project",
   "license": "MIT",
   "repository": {
     "type": "git",

package/scripts/verify-opengsd-sweep.cjs

@@ -41,6 +41,16 @@ const ROOT = path.resolve(__dirname, '..');
 /** Matches any recognised OpenGSD spelling in a line of text. */
 const OPENGSD_RE = /opengsd|open-gsd/i;
 
+/**
+ * Broader brand pattern for npm-facing manifest metadata (package.json
+ * `description` / `author`). Catches the upstream product name ("GSD Core")
+ * and the org spelling ("OpenGSD") that leaked into the published 1.5.0
+ * description/author. Applied ONLY to those manifest fields — not the code/docs
+ * surface — so legitimate `gsd-core` references in carved-out provenance files
+ * are unaffected.
+ */
+const MANIFEST_BRAND_RE = /opengsd|open-gsd|gsd[\s-]?core/i;
+
 // ── Carve-out allowlists (all paths are absolute) ───────────────────────────
 
 /**
@@ -224,6 +234,44 @@ function collectDocsFiles() {
   return files;
 }
 
+// ── Manifest metadata surface ────────────────────────────────────────────────
+
+const PACKAGE_JSON = path.join(ROOT, 'package.json');
+
+/**
+ * Scan package.json's npm-facing branding fields (`description`, `author`) for
+ * leftover upstream branding. npm renders these on the public package page, and
+ * a published version's metadata is immutable — so a leak here can only be fixed
+ * by a new release. Guarding it keeps the class from recurring (the 1.5.0
+ * description shipped "GSD Core ..." / author "OpenGSD" past the file-surface
+ * sweep, which never read package.json).
+ *
+ * @returns {Array<{file: string, line: number, text: string}>}
+ */
+function scanManifestBranding() {
+  const hits = [];
+  let pkg;
+  try {
+    pkg = JSON.parse(fs.readFileSync(PACKAGE_JSON, 'utf8'));
+  } catch {
+    return hits; // no/unreadable package.json — nothing to scan
+  }
+
+  const fields = [
+    ['description', pkg.description],
+    // `author` may be a string or an { name, ... } object
+    ['author', typeof pkg.author === 'object' && pkg.author ? pkg.author.name : pkg.author],
+  ];
+
+  for (const [field, value] of fields) {
+    if (typeof value === 'string' && MANIFEST_BRAND_RE.test(value)) {
+      hits.push({ file: 'package.json', line: `${field} field`, text: value });
+    }
+  }
+
+  return hits;
+}
+
 // ── Main sweep logic ─────────────────────────────────────────────────────────
 
 /**
@@ -247,7 +295,8 @@ function runSweep(opts) {
 
   const codeHits = scanFiles(codeFiles);
   const docsHits = scanFiles(docsFiles);
-  const hits = [...codeHits, ...docsHits];
+  const manifestHits = scanManifestBranding();
+  const hits = [...codeHits, ...docsHits, ...manifestHits];
 
   return { hits, clean: hits.length === 0 };
 }
@@ -259,7 +308,7 @@ function cliMain() {
 
   if (clean) {
     process.stdout.write(
-      '[verify-opengsd-sweep] PASS — live code+docs surface is OpenGSD-free (carve-outs intact).\n'
+      '[verify-opengsd-sweep] PASS — live code+docs surface and package.json branding are OpenGSD-free (carve-outs intact).\n'
     );
     return 0;
   }
@@ -281,7 +330,7 @@ function cliMain() {
 
 // ── Exports + guard ──────────────────────────────────────────────────────────
 
-module.exports = { runSweep, OPENGSD_RE, isCarvedOut };
+module.exports = { runSweep, OPENGSD_RE, MANIFEST_BRAND_RE, isCarvedOut, scanManifestBranding };
 
 if (require.main === module) {
   runMain(cliMain);