@pareto4/pp-core 1.5.0

package/scripts/verify-phase-02-rename.sh

@@ -0,0 +1,258 @@
+#!/usr/bin/env bash
+# scripts/verify-phase-02-rename.sh
+#
+# Phase 2 (Identity & CLI Rename) — repeatable success-criteria audit.
+# Runs all five ROADMAP Phase 2 success criteria against the BUILT output tree.
+# Exits 0 only when all five pass.
+#
+# Design notes (T-02-10 / comment-self-invalidation guard):
+#   This script greps pp-core/bin/ — NOT itself.  The grep gates use
+#   --include='*.cjs' / -r over the compiled output tree.  All filtering is
+#   applied to the CONTENT of the matched lines (see SC3/SC5 below), never
+#   to this file's own text, so the script cannot count its own comments.
+#
+# Filtering policy (audit correctness, not gate inflation):
+#   1. JSDoc/comment-only lines  (lines whose non-whitespace content starts
+#      with * or // ) are excluded from all SC3/SC5 counts.  These are
+#      historical docblock references to the old binary name — they carry no
+#      functional meaning and are scheduled for Phase 3 prose-rename.
+#   2. SC3 also excludes lines containing '"inline":' — these are embedded
+#      workflow markdown content inside capability-registry.cjs (a JSON string
+#      literal field).  The capability registry body is regenerated in Phase 3
+#      (CONTEXT.md D-04 scope boundary); until then, old bash variable names
+#      from workflows appear verbatim inside these string literals.
+#   3. SC5 exempts pp-core/bin/verify-reapply-patches.cjs for gsd-hook-version:
+#      the file explicitly handles BOTH pp-hook-version and gsd-hook-version
+#      for backward compatibility with hooks that have not yet been reinstalled.
+#      SC5 also excludes lines whose trimmed content begins with 'ownershipEvidence'
+#      — these are human-readable diagnostic explanation strings, not functional
+#      path references.  Both categories are Phase 3 cosmetic-rename scope.
+#
+# Usage:  bash scripts/verify-phase-02-rename.sh
+#         Exit 0 = all five criteria pass.
+#         Exit 1 = one or more criteria failed.
+
+set -euo pipefail
+
+REPO_ROOT="$(git rev-parse --show-toplevel)"
+BIN_DIR="${REPO_ROOT}/pp-core/bin"
+
+PASS=0
+FAIL=1
+overall=0
+
+result() {
+  local criterion="$1" status="$2" detail="$3"
+  if [ "$status" -eq 0 ]; then
+    printf '[PASS] %s\n' "$criterion"
+  else
+    printf '[FAIL] %s — %s\n' "$criterion" "$detail"
+    overall=1
+  fi
+}
+
+echo "=== Phase 2 Success-Criteria Audit ==="
+echo "Built output tree: ${BIN_DIR}"
+echo ""
+
+# ---------------------------------------------------------------------------
+# SC1: Build produces pp-tools.cjs; gsd-tools.cjs is absent
+# ---------------------------------------------------------------------------
+SC1_STATUS=0
+SC1_DETAIL=""
+
+if [ ! -f "${BIN_DIR}/pp-tools.cjs" ]; then
+  SC1_STATUS=1
+  SC1_DETAIL="${BIN_DIR}/pp-tools.cjs not found"
+fi
+
+if [ -f "${BIN_DIR}/gsd-tools.cjs" ]; then
+  SC1_STATUS=1
+  SC1_DETAIL="${SC1_DETAIL:+${SC1_DETAIL}; }${BIN_DIR}/gsd-tools.cjs still exists (D-05 violated)"
+fi
+
+result "SC1: pp-tools.cjs exists / gsd-tools.cjs absent" "$SC1_STATUS" "$SC1_DETAIL"
+
+# ---------------------------------------------------------------------------
+# SC2: package-identity.cjs resolves @pareto4/pp-core (not @opengsd/gsd-core)
+#      and uses pp-update-check- prefix (not gsd-update-check-)
+# ---------------------------------------------------------------------------
+SC2_STATUS=0
+SC2_DETAIL=""
+
+node -e "
+  const id = require('${BIN_DIR}/lib/package-identity.cjs');
+  const s = JSON.stringify(id);
+  if (!s.includes('@pareto4/pp-core')) {
+    process.stderr.write('package-identity missing @pareto4/pp-core\\n');
+    process.exit(1);
+  }
+  if (s.includes('@opengsd/gsd-core')) {
+    process.stderr.write('package-identity still references @opengsd/gsd-core\\n');
+    process.exit(2);
+  }
+  if (/gsd-update-check-/.test(s)) {
+    process.stderr.write('package-identity uses gsd-update-check- prefix (expected pp-update-check-)\\n');
+    process.exit(3);
+  }
+" 2>/tmp/sc2-err.txt || {
+  SC2_STATUS=1
+  SC2_DETAIL="$(cat /tmp/sc2-err.txt)"
+}
+rm -f /tmp/sc2-err.txt
+
+result "SC2: package-identity.cjs → @pareto4/pp-core (no @opengsd/gsd-core, no gsd-update-check- prefix)" "$SC2_STATUS" "$SC2_DETAIL"
+
+# ---------------------------------------------------------------------------
+# SC3: Tier-1 shim rename — zero functional (non-comment, non-embedded-content)
+#      occurrences of: gsd-tools.cjs | _GSD_SHIM_NAME | gsd_run
+#
+#      Filtering applied (see Design notes above):
+#        - lines whose trimmed content starts with * or // (JSDoc/comments)
+#        - lines containing '"inline":' (embedded workflow content in
+#          capability-registry.cjs; Phase 3 scope)
+# ---------------------------------------------------------------------------
+SC3_STATUS=0
+SC3_DETAIL=""
+SC3_COUNT=0
+
+SC3_COUNT=$(
+  grep -rn 'gsd-tools\.cjs\|_GSD_SHIM_NAME\|gsd_run' "${BIN_DIR}" 2>/dev/null \
+    | grep -v '^Binary' \
+    | perl -ne '
+        if (/^[^:]+:\d+:\s*(.*)$/) {
+          my $content = $1;
+          # Skip JSDoc/comment-only lines
+          next if $content =~ /^\s*[*\/]/;
+          # Skip embedded workflow content in capability-registry.cjs
+          next if $content =~ /"inline":/;
+          print;
+        }
+      ' \
+    | wc -l \
+    | tr -d ' '
+) || true
+
+if [ "$SC3_COUNT" -ne 0 ]; then
+  SC3_STATUS=1
+  SC3_DETAIL="${SC3_COUNT} functional match(es) found after filtering comments and embedded content"
+  # Print offending lines for diagnostics
+  echo "  SC3 offending lines:"
+  grep -rn 'gsd-tools\.cjs\|_GSD_SHIM_NAME\|gsd_run' "${BIN_DIR}" 2>/dev/null \
+    | grep -v '^Binary' \
+    | perl -ne '
+        if (/^[^:]+:\d+:\s*(.*)$/) {
+          my $content = $1;
+          next if $content =~ /^\s*[*\/]/;
+          next if $content =~ /"inline":/;
+          print "    $_";
+        }
+      ' || true
+fi
+
+result "SC3: Tier-1 shim tokens absent in pp-core/bin/ (functional code only; comments+embedded filtered)" "$SC3_STATUS" "$SC3_DETAIL"
+
+# ---------------------------------------------------------------------------
+# SC4: Full command parity — all 65 command families dispatch without failure
+#      Delegates to the dedicated test that was added in Plan 03.
+# ---------------------------------------------------------------------------
+SC4_STATUS=0
+SC4_DETAIL=""
+
+if [ ! -f "${REPO_ROOT}/tests/phase-02-command-parity.test.cjs" ]; then
+  SC4_STATUS=1
+  SC4_DETAIL="tests/phase-02-command-parity.test.cjs not found"
+else
+  node --test "${REPO_ROOT}/tests/phase-02-command-parity.test.cjs" >/tmp/sc4-out.txt 2>&1 || {
+    SC4_STATUS=1
+    SC4_DETAIL="command-parity test failed (see /tmp/sc4-out.txt)"
+    tail -20 /tmp/sc4-out.txt
+  }
+  rm -f /tmp/sc4-out.txt
+fi
+
+result "SC4: all 65 command families dispatch (node --test tests/phase-02-command-parity.test.cjs)" "$SC4_STATUS" "$SC4_DETAIL"
+
+# ---------------------------------------------------------------------------
+# SC5: Tier-2 installer-state rename — zero functional occurrences of:
+#      "gsd-core" (quoted) | gsd-file-manifest | gsd-install-state | gsd-hook-version
+#
+#      Filtering applied (see Design notes above):
+#        - lines whose trimmed content starts with * or // (JSDoc/comments)
+#        - pp-core/bin/verify-reapply-patches.cjs is exempt (backward-compat
+#          logic that accepts both pp-hook-version and gsd-hook-version)
+#        - lines whose trimmed content starts with 'ownershipEvidence'
+#          (human-readable diagnostic strings, Phase 3 cosmetic rename)
+# ---------------------------------------------------------------------------
+SC5_STATUS=0
+SC5_DETAIL=""
+SC5_COUNT=0
+
+SC5_COUNT=$(
+  grep -rn '"gsd-core"\|gsd-file-manifest\|gsd-install-state\|gsd-hook-version' "${BIN_DIR}" 2>/dev/null \
+    | grep -v '^Binary' \
+    | grep -v 'verify-reapply-patches\.cjs' \
+    | perl -ne '
+        if (/^[^:]+:\d+:\s*(.*)$/) {
+          my $content = $1;
+          # Skip JSDoc/comment-only lines
+          next if $content =~ /^\s*[*\/]/;
+          # Skip human-readable ownershipEvidence explanation strings
+          next if $content =~ /^\s*ownershipEvidence/;
+          print;
+        }
+      ' \
+    | wc -l \
+    | tr -d ' '
+) || true
+
+if [ "$SC5_COUNT" -ne 0 ]; then
+  SC5_STATUS=1
+  SC5_DETAIL="${SC5_COUNT} functional match(es) found after filtering comments and exempt files"
+  echo "  SC5 offending lines:"
+  grep -rn '"gsd-core"\|gsd-file-manifest\|gsd-install-state\|gsd-hook-version' "${BIN_DIR}" 2>/dev/null \
+    | grep -v '^Binary' \
+    | grep -v 'verify-reapply-patches\.cjs' \
+    | perl -ne '
+        if (/^[^:]+:\d+:\s*(.*)$/) {
+          my $content = $1;
+          next if $content =~ /^\s*[*\/]/;
+          next if $content =~ /^\s*ownershipEvidence/;
+          print "    $_";
+        }
+      ' || true
+fi
+
+result "SC5: Tier-2 state/hook-marker tokens absent (comments+compat-guards filtered)" "$SC5_STATUS" "$SC5_DETAIL"
+
+# ---------------------------------------------------------------------------
+# Phase gate: full npm test suite (npm test)
+# ---------------------------------------------------------------------------
+echo ""
+echo "=== Phase Gate: npm test ==="
+
+NPM_TEST_STATUS=0
+npm test >/tmp/pp-phase-gate-test.log 2>&1 || {
+  NPM_TEST_STATUS=1
+  echo "[FAIL] npm test failed"
+  tail -30 /tmp/pp-phase-gate-test.log
+  overall=1
+}
+if [ "$NPM_TEST_STATUS" -eq 0 ]; then
+  TEST_SUMMARY=$(grep -E '^(ℹ|i) (tests|pass|fail) ' /tmp/pp-phase-gate-test.log 2>/dev/null | tail -3 || true)
+  echo "[PASS] npm test — ${TEST_SUMMARY}"
+fi
+rm -f /tmp/pp-phase-gate-test.log
+
+# ---------------------------------------------------------------------------
+# Summary
+# ---------------------------------------------------------------------------
+echo ""
+echo "=== Summary ==="
+if [ "$overall" -eq 0 ]; then
+  echo "ALL FIVE CRITERIA PASSED — Phase 2 gate: OK"
+else
+  echo "ONE OR MORE CRITERIA FAILED — Phase 2 gate: FAILED"
+fi
+
+exit "$overall"

package/scripts/verify-phase-03-rename.sh

@@ -0,0 +1,376 @@
+#!/usr/bin/env bash
+# scripts/verify-phase-03-rename.sh
+#
+# Phase 3 (Content & Registry Rename) — repeatable success-criteria audit.
+# Runs all five ROADMAP Phase 3 success criteria against the content trees.
+# Exits 0 only when all five pass.
+#
+# Design notes (T-03-01 / comment-self-invalidation guard):
+#   This script greps the TARGET TREES — pp-core/workflows/, pp-core/references/,
+#   pp-core/templates/, pp-core/contexts/, agents/, commands/gsd/ (or pp/),
+#   pp-core/bin/lib/ — NEVER itself.  The grep gates that search for legacy
+#   tokens construct those tokens at runtime by concatenating parts so the
+#   literal string never appears in this file's own text.  This prevents the
+#   script from counting its own comment lines as rename-audit failures.
+#
+#   Specifically:
+#     SC1 needle  is built as: shim="${legacy}-tools.cjs" (not written literally)
+#     SC2 needle  is the pattern /gsd[:-] (the bracket syntax means the hyphen
+#                 and colon forms both match; see SC2 block for details)
+#     SC3 needle  searches frontmatter: ^name: gsd[:-] in commands/gsd/
+#     SC4 needles are built by concatenating "g"+"s"+"d" to form the legacy
+#                 prefix variable, never using the three-letter prefix literally
+#     SC5 needle  for GSD: markers is built as: marker="${cap}:" where cap is
+#                 built by concatenating "G"+"S"+"D"
+#
+#   No bare legacy three-letter prefix joined to -tools.cjs, _SHIM_NAME, _run,
+#   or -core/bin appears as a searchable literal anywhere in this script.
+#
+# Usage:
+#   bash scripts/verify-phase-03-rename.sh              # full audit + build + test
+#   bash scripts/verify-phase-03-rename.sh --audit-only # five SC grep gates only (fast)
+#
+# Exit 0 = all criteria pass (and build+test pass if not --audit-only).
+# Exit 1 = one or more criteria failed.
+
+set -euo pipefail
+# Ignore SIGPIPE so that piping diagnostic output through head -10 does not
+# abort the script under set -o pipefail.
+trap '' PIPE
+
+REPO_ROOT="$(git rev-parse --show-toplevel)"
+
+# ---------------------------------------------------------------------------
+# .planning/ preservation baseline (SC5 guard — RENAME-08)
+# ---------------------------------------------------------------------------
+# Live count of .planning/ references in pp-core/workflows/ was captured at
+# Wave 0 planning time: 734.  SC5 fails if the live count changes — this
+# catches a sweep that accidentally rewrote .planning/ path strings.
+PLANNING_BASELINE=734
+
+# ---------------------------------------------------------------------------
+# Flag: --audit-only (fast path — greps only, skips npm run build + npm test)
+# ---------------------------------------------------------------------------
+AUDIT_ONLY=false
+for arg in "$@"; do
+  [ "$arg" = "--audit-only" ] && AUDIT_ONLY=true
+done
+
+# ---------------------------------------------------------------------------
+# Helper
+# ---------------------------------------------------------------------------
+PASS=0
+FAIL=1
+overall=0
+
+result() {
+  local criterion="$1" status="$2" detail="$3"
+  if [ "$status" -eq 0 ]; then
+    printf '[PASS] %s\n' "$criterion"
+  else
+    printf '[FAIL] %s — %s\n' "$criterion" "$detail"
+    overall=1
+  fi
+}
+
+echo "=== Phase 3 Success-Criteria Audit ==="
+echo "Repo root: ${REPO_ROOT}"
+echo "Audit-only mode: ${AUDIT_ONLY}"
+echo ""
+
+# ---------------------------------------------------------------------------
+# Build legacy needle fragments at runtime (comment-self-invalidation guard)
+# ---------------------------------------------------------------------------
+# The three-letter legacy prefix is never written as a bare literal in this
+# script.  Construct it at runtime so greps against this file return nothing.
+legacy="g""s""d"
+cap="G""S""D"
+
+# ---------------------------------------------------------------------------
+# SC1 (RENAME-05): Zero shim tokens in pp-core/workflows/
+#
+# Tokens: <legacy>-tools.cjs | _<LEGACY>_SHIM_NAME | <legacy>_run | <legacy>-core/bin
+# These variables hold the full needles but the needles are never written
+# verbatim — they are assembled from the fragment variables above.
+# ---------------------------------------------------------------------------
+SC1_STATUS=0
+SC1_DETAIL=""
+
+shim_cjs="${legacy}-tools.cjs"
+shim_var="_${cap}_SHIM_NAME"
+shim_run="${legacy}_run"
+shim_bin="${legacy}-core/bin"
+
+SC1_PATTERN="${shim_cjs}|${shim_var}|${shim_run}|${shim_bin}"
+
+SC1_HITS=$(
+  grep -rE "${SC1_PATTERN}" "${REPO_ROOT}/pp-core/workflows/" 2>/dev/null || true
+)
+
+if [ -n "$SC1_HITS" ]; then
+  SC1_STATUS=1
+  SC1_COUNT=$(echo "$SC1_HITS" | wc -l | tr -d ' ')
+  SC1_DETAIL="${SC1_COUNT} shim token line(s) found in pp-core/workflows/"
+  echo "  SC1 offending lines (first 10):"
+  echo "$SC1_HITS" | awk 'NR<=10{print "    " $0}'
+fi
+
+result "SC1 (RENAME-05): Zero shim tokens (${shim_cjs}, ${shim_var}, ${shim_run}, ${shim_bin}) in pp-core/workflows/" "$SC1_STATUS" "$SC1_DETAIL"
+
+# ---------------------------------------------------------------------------
+# SC2 (RENAME-05/08): Zero /gsd[:-] slash command refs
+#
+# The pattern /gsd[:-] matches BOTH:
+#   - /gsd:<cmd>  (colon form — dominant, e.g. /gsd:plan-phase) — 783+ in workflows
+#   - /gsd-<cmd>  (hyphen form — e.g. /gsd-plan-phase)
+# A /gsd- only pattern gives a false green because 900+ colon refs survive.
+# Target trees: workflows, references, templates, contexts
+# ---------------------------------------------------------------------------
+SC2_STATUS=0
+SC2_DETAIL=""
+
+SC2_HITS=$(
+  grep -rnE "/${legacy}[:-]" \
+    "${REPO_ROOT}/pp-core/workflows/" \
+    "${REPO_ROOT}/pp-core/references/" \
+    "${REPO_ROOT}/pp-core/templates/" \
+    "${REPO_ROOT}/pp-core/contexts/" \
+    2>/dev/null || true
+)
+
+if [ -n "$SC2_HITS" ]; then
+  SC2_STATUS=1
+  SC2_COUNT=$(echo "$SC2_HITS" | wc -l | tr -d ' ')
+  SC2_DETAIL="${SC2_COUNT} /${legacy}[:-] slash-command ref(s) found"
+  echo "  SC2 offending lines (first 10):"
+  echo "$SC2_HITS" | awk 'NR<=10{print "    " $0}'
+fi
+
+result "SC2 (RENAME-05/08): Zero /${legacy}[:-] slash refs in workflows/references/templates/contexts" "$SC2_STATUS" "$SC2_DETAIL"
+
+# ---------------------------------------------------------------------------
+# SC3 (RENAME-06): All 34 agents renamed; no residual agent-type gsd- refs
+#
+# Three sub-checks:
+#  a) ls agents/ | grep -c "^<legacy>-"  == 0
+#  b) ls agents/ | grep -c "^pp-"        == 34
+#  c) grep -rn "<legacy>-project-researcher|..." pp-core/workflows/ is empty
+#  d) Skill frontmatter gate:
+#     grep -rlE "^name: <legacy>[:-]" commands/gsd/ returns no files  (false green
+#     guard: bare filenames in commands/gsd/ DON'T start with gsd- today — skills
+#     are identified by their frontmatter "name:" field, not the filename)
+#  e) grep -rlE "^name: pp[:-]" commands/gsd/ | wc -l == 69
+# ---------------------------------------------------------------------------
+SC3_STATUS=0
+SC3_DETAIL=""
+
+# 3a: no agent files named gsd-* remain
+agent_legacy_count=$(ls "${REPO_ROOT}/agents/" 2>/dev/null | grep -c "^${legacy}-" || true)
+if [ "$agent_legacy_count" -ne 0 ]; then
+  SC3_STATUS=1
+  SC3_DETAIL="${SC3_DETAIL:+${SC3_DETAIL}; }${agent_legacy_count} agent file(s) still named ${legacy}-*.md"
+fi
+
+# 3b: exactly 34 pp-* agent files exist
+agent_pp_count=$(ls "${REPO_ROOT}/agents/" 2>/dev/null | grep -c "^pp-" || true)
+if [ "$agent_pp_count" -ne 34 ]; then
+  SC3_STATUS=1
+  SC3_DETAIL="${SC3_DETAIL:+${SC3_DETAIL}; }pp- agent count = ${agent_pp_count} (expected 34)"
+fi
+
+# 3c: specific legacy agent names absent from workflows prose
+SC3_PROSE_HITS=$(
+  grep -rn "${legacy}-project-researcher\|${legacy}-research-synthesizer\|${legacy}-roadmapper" \
+    "${REPO_ROOT}/pp-core/workflows/" 2>/dev/null || true
+)
+if [ -n "$SC3_PROSE_HITS" ]; then
+  SC3_STATUS=1
+  SC3_COUNT=$(echo "$SC3_PROSE_HITS" | wc -l | tr -d ' ')
+  SC3_DETAIL="${SC3_DETAIL:+${SC3_DETAIL}; }${SC3_COUNT} legacy agent-name ref(s) in workflows"
+fi
+
+# 3d: skill frontmatter gate — no "name: gsd[:-]" in commands/gsd/ frontmatter
+SC3_SKILL_LEGACY=$(
+  grep -rlE "^name: ${legacy}[:-]" "${REPO_ROOT}/commands/gsd/" 2>/dev/null || true
+)
+if [ -n "$SC3_SKILL_LEGACY" ]; then
+  SC3_STATUS=1
+  SC3_SKILL_LEGACY_COUNT=$(echo "$SC3_SKILL_LEGACY" | wc -l | tr -d ' ')
+  SC3_DETAIL="${SC3_DETAIL:+${SC3_DETAIL}; }${SC3_SKILL_LEGACY_COUNT} skill file(s) with legacy frontmatter name: ${legacy}[:-]"
+  echo "  SC3 legacy-frontmatter skills (first 5):"
+  echo "$SC3_SKILL_LEGACY" | awk 'NR<=5{print "    " $0}'
+fi
+
+# 3e: 69 skill files have "name: pp[:-]" frontmatter
+SC3_SKILL_PP=$(
+  grep -rlE "^name: pp[:-]" "${REPO_ROOT}/commands/gsd/" 2>/dev/null \
+    | wc -l | tr -d ' ' || true
+)
+# Note: after commands/gsd/ → commands/pp/ rename, update the path above.
+# For now the source dir may still be commands/gsd/ during the rename waves.
+if [ "$SC3_SKILL_PP" -ne 69 ]; then
+  SC3_STATUS=1
+  SC3_DETAIL="${SC3_DETAIL:+${SC3_DETAIL}; }pp[:-] skill frontmatter count = ${SC3_SKILL_PP} (expected 69)"
+fi
+
+result "SC3 (RENAME-06): Agents all pp-* (0 ${legacy}-, 34 pp-); legacy agent refs absent; skill frontmatter pp[:-]" "$SC3_STATUS" "$SC3_DETAIL"
+
+# ---------------------------------------------------------------------------
+# SC4 (RENAME-07): Registry regenerated, no "gsd-" entries, Kimi name: pp
+#
+# Three sub-checks:
+#  a) grep '"<legacy>-"' pp-core/bin/lib/capability-registry.cjs is empty
+#  b) node scripts/gen-capability-registry.cjs --check exits 0
+#  c) Kimi root agent in built lib uses name: pp (not name: <legacy>)
+#     — assert grep -c "name: pp" runtime-artifact-layout.cjs >= 1
+#       AND legacy form "name: <legacy>" is absent
+#     Kimi needle is built at runtime to avoid self-invalidation.
+# ---------------------------------------------------------------------------
+SC4_STATUS=0
+SC4_DETAIL=""
+
+REGISTRY="${REPO_ROOT}/pp-core/bin/lib/capability-registry.cjs"
+LAYOUT="${REPO_ROOT}/pp-core/bin/lib/runtime-artifact-layout.cjs"
+
+# 4a: no '"gsd-"' entries in registry
+# Build the needle: double-quote + legacy + hyphen + double-quote
+registry_needle="\"${legacy}-\""
+
+SC4_REGISTRY_HITS=$(
+  grep "${registry_needle}" "${REGISTRY}" 2>/dev/null || true
+)
+if [ -n "$SC4_REGISTRY_HITS" ]; then
+  SC4_STATUS=1
+  SC4_COUNT=$(echo "$SC4_REGISTRY_HITS" | wc -l | tr -d ' ')
+  SC4_DETAIL="${SC4_DETAIL:+${SC4_DETAIL}; }${SC4_COUNT} \"${legacy}-\" line(s) in capability-registry.cjs"
+fi
+
+# 4b: gen-capability-registry.cjs --check exits 0
+if [ -f "${REPO_ROOT}/scripts/gen-capability-registry.cjs" ]; then
+  node "${REPO_ROOT}/scripts/gen-capability-registry.cjs" --check >/dev/null 2>&1 || {
+    SC4_STATUS=1
+    SC4_DETAIL="${SC4_DETAIL:+${SC4_DETAIL}; }gen-capability-registry.cjs --check exited non-zero (registry is stale or has drift)"
+  }
+else
+  SC4_STATUS=1
+  SC4_DETAIL="${SC4_DETAIL:+${SC4_DETAIL}; }scripts/gen-capability-registry.cjs not found"
+fi
+
+# 4c: Kimi root agent — "name: pp" present; "name: <legacy>" absent in built layout
+# Build legacy Kimi needle: "name: " + legacy (three parts joined)
+kimi_legacy_needle="name: ${legacy}"
+
+if [ -f "${LAYOUT}" ]; then
+  kimi_pp_count=$(grep -c "name: pp" "${LAYOUT}" 2>/dev/null || true)
+  kimi_legacy_count=$(grep -c "${kimi_legacy_needle}" "${LAYOUT}" 2>/dev/null || true)
+
+  if [ "$kimi_pp_count" -lt 1 ]; then
+    SC4_STATUS=1
+    SC4_DETAIL="${SC4_DETAIL:+${SC4_DETAIL}; }Kimi root agent 'name: pp' not found in runtime-artifact-layout.cjs"
+  fi
+  if [ "$kimi_legacy_count" -ne 0 ]; then
+    SC4_STATUS=1
+    SC4_DETAIL="${SC4_DETAIL:+${SC4_DETAIL}; }${kimi_legacy_count} '${kimi_legacy_needle}' line(s) still in runtime-artifact-layout.cjs"
+  fi
+else
+  SC4_STATUS=1
+  SC4_DETAIL="${SC4_DETAIL:+${SC4_DETAIL}; }pp-core/bin/lib/runtime-artifact-layout.cjs not found"
+fi
+
+result "SC4 (RENAME-07): Capability registry regenerated; no \"${legacy}-\" entries; Kimi root name: pp" "$SC4_STATUS" "$SC4_DETAIL"
+
+# ---------------------------------------------------------------------------
+# SC5 (RENAME-08): GSD: markers replaced by PP: + .planning/ count preserved
+#
+# Three sub-checks:
+#  a) grep -c "<CAP>:" pp-core/templates/claude-md.md == 0
+#  b) grep -c "PP:" pp-core/templates/claude-md.md >= 16
+#  c) live .planning/ count in workflows == PLANNING_BASELINE (734)
+#
+# The GSD: marker needle is built at runtime: cap + ":" (never a literal).
+# ---------------------------------------------------------------------------
+SC5_STATUS=0
+SC5_DETAIL=""
+
+CLAUDE_MD="${REPO_ROOT}/pp-core/templates/claude-md.md"
+
+# Build GSD: marker needle at runtime
+gsd_marker="${cap}:"
+
+if [ -f "${CLAUDE_MD}" ]; then
+  # 5a: no legacy GSD: markers remain
+  gsd_marker_count=$(grep -c "${gsd_marker}" "${CLAUDE_MD}" 2>/dev/null || true)
+  if [ "$gsd_marker_count" -ne 0 ]; then
+    SC5_STATUS=1
+    SC5_DETAIL="${SC5_DETAIL:+${SC5_DETAIL}; }${gsd_marker_count} '${gsd_marker}' marker(s) still in templates/claude-md.md"
+  fi
+
+  # 5b: PP: markers are present (at least 16)
+  pp_marker_count=$(grep -c "PP:" "${CLAUDE_MD}" 2>/dev/null || true)
+  if [ "$pp_marker_count" -lt 16 ]; then
+    SC5_STATUS=1
+    SC5_DETAIL="${SC5_DETAIL:+${SC5_DETAIL}; }PP: marker count = ${pp_marker_count} in claude-md.md (expected >= 16)"
+  fi
+else
+  SC5_STATUS=1
+  SC5_DETAIL="${SC5_DETAIL:+${SC5_DETAIL}; }pp-core/templates/claude-md.md not found"
+fi
+
+# 5c: .planning/ reference count preservation guard
+live=$(grep -rn "\.planning/" "${REPO_ROOT}/pp-core/workflows/" 2>/dev/null | wc -l | tr -d ' ')
+if [ "$live" -ne "$PLANNING_BASELINE" ]; then
+  SC5_STATUS=1
+  SC5_DETAIL="${SC5_DETAIL:+${SC5_DETAIL}; }.planning/ ref count = ${live} (baseline ${PLANNING_BASELINE}); sweep may have corrupted .planning/ paths"
+fi
+
+result "SC5 (RENAME-08): ${gsd_marker} markers = 0; PP: markers >= 16; .planning/ count = ${PLANNING_BASELINE}" "$SC5_STATUS" "$SC5_DETAIL"
+
+# ---------------------------------------------------------------------------
+# Phase gate: npm run build + npm test (skipped when --audit-only)
+# ---------------------------------------------------------------------------
+if [ "${AUDIT_ONLY}" = "true" ]; then
+  echo ""
+  echo "=== Phase Gate: SKIPPED (--audit-only) ==="
+else
+  echo ""
+  echo "=== Phase Gate: npm run build ==="
+  BUILD_STATUS=0
+  npm run build --prefix "${REPO_ROOT}" >/tmp/pp-phase-03-build.log 2>&1 || {
+    BUILD_STATUS=1
+    echo "[FAIL] npm run build failed"
+    tail -30 /tmp/pp-phase-03-build.log
+    overall=1
+  }
+  if [ "$BUILD_STATUS" -eq 0 ]; then
+    echo "[PASS] npm run build"
+  fi
+  rm -f /tmp/pp-phase-03-build.log
+
+  echo ""
+  echo "=== Phase Gate: npm test ==="
+  NPM_TEST_STATUS=0
+  npm test --prefix "${REPO_ROOT}" >/tmp/pp-phase-03-test.log 2>&1 || {
+    NPM_TEST_STATUS=1
+    echo "[FAIL] npm test failed"
+    tail -30 /tmp/pp-phase-03-test.log
+    overall=1
+  }
+  if [ "$NPM_TEST_STATUS" -eq 0 ]; then
+    TEST_SUMMARY=$(grep -E '^(ℹ|i) (tests|pass|fail) ' /tmp/pp-phase-03-test.log 2>/dev/null | tail -3 || true)
+    echo "[PASS] npm test — ${TEST_SUMMARY}"
+  fi
+  rm -f /tmp/pp-phase-03-test.log
+fi
+
+# ---------------------------------------------------------------------------
+# Summary
+# ---------------------------------------------------------------------------
+echo ""
+echo "=== Summary ==="
+if [ "$overall" -eq 0 ]; then
+  echo "ALL FIVE CRITERIA PASSED — Phase 3 gate: OK"
+else
+  echo "ONE OR MORE CRITERIA FAILED — Phase 3 gate: FAILED"
+fi
+
+exit "$overall"