@pareto4/pp-core 1.7.1 → 1.8.1

package/bin/install.js

@@ -216,7 +216,7 @@ const GSD_CURSOR_POST_TOOL_HOOK_SCRIPT = 'pp-cursor-post-tool.js';
 // Marker comment embedded in managed hook entries so GSD can find+remove them.
 const GSD_CURSOR_HOOK_MARKER = 'gsd-managed';
 
-// GSD-managed files under hooks/lib/ (helpers required by gsd-*.sh hooks).
+// pp-core-managed files under hooks/lib/ (helpers required by gsd-*.sh hooks).
 // git-cmd.js does not start with "gsd-" (shared classifier for #3129), pp-graphify-rebuild.sh does.
 const GSD_HOOK_LIB_FILES = ['git-cmd.js', 'pp-graphify-rebuild.sh'];
 
@@ -297,7 +297,7 @@ function _getGsdEffortCatalog() {
   } catch (_err) {
     // Fail loudly — a missing manifest is a broken install, not a soft degradation.
     throw new Error(
-      `gsd install: cannot load config-defaults.manifest.json at ${manifestPath}: ${_err.message}`
+      `pp-core install: cannot load config-defaults.manifest.json at ${manifestPath}: ${_err.message}`
     );
   }
 
@@ -601,7 +601,7 @@ if (hasUninstall) {
 
 // Show help if requested
 if (hasHelp) {
-  console.log(`  ${yellow}Usage:${reset} npx ${pkg.name} [options]\n\n  ${yellow}Options:${reset}\n    ${cyan}-g, --global${reset}              Install globally (to config directory)\n    ${cyan}-l, --local${reset}               Install locally (to current directory)\n    ${cyan}--claude${reset}                  Install for Claude Code only\n    ${cyan}--opencode${reset}                Install for OpenCode only\n    ${cyan}--gemini${reset}                  Install for Gemini only\n    ${cyan}--kilo${reset}                    Install for Kilo only\n    ${cyan}--codex${reset}                   Install for Codex only\n    ${cyan}--kimi${reset}                    Install for Kimi CLI only\n    ${cyan}--copilot${reset}                 Install for Copilot only\n    ${cyan}--antigravity${reset}             Install for Antigravity only\n    ${cyan}--cursor${reset}                  Install for Cursor only\n    ${cyan}--windsurf${reset}                Install for Windsurf only\n    ${cyan}--augment${reset}                 Install for Augment only\n    ${cyan}--trae${reset}                    Install for Trae only\n    ${cyan}--qwen${reset}                    Install for Qwen Code only\n    ${cyan}--hermes${reset}                  Install for Hermes Agent only\n    ${cyan}--cline${reset}                   Install for Cline only\n    ${cyan}--codebuddy${reset}              Install for CodeBuddy only\n    ${cyan}--all${reset}                     Install for all runtimes\n    ${cyan}-u, --uninstall${reset}           Uninstall pp-core (remove all pp-core files)\n    ${cyan}-c, --config-dir <path>${reset}   Specify custom config directory\n    ${cyan}-h, --help${reset}                Show this help message\n    ${cyan}--force-statusline${reset}        Replace existing statusline config\n    ${cyan}--portable-hooks${reset}          Emit \$HOME-relative hook paths in settings.json\n                              (for WSL/Docker bind-mount setups; also GSD_PORTABLE_HOOKS=1)\n    ${cyan}--profile=<name>${reset}         Install a named skill profile. Profiles:\n                              core     — ${PROFILES.core.length} main-loop skills incl. phase (~130 desc tokens)\n                              standard — ${PROFILES.standard.length} skills incl. phase, review, config (~700)\n                              full     — all skills (default)\n                              Composable: --profile=core,audit installs union of closures.\n                              Profile is persisted and respected by \`gsd update\`.\n    ${cyan}--minimal${reset}                 Alias for --profile=core (back-compat).\n                              Cuts cold-start overhead from ~12k tokens to ~700.\n                              Alias: --core-only.\n\n  ${yellow}Examples:${reset}\n    ${dim}# Interactive install (prompts for runtime and location)${reset}\n    npx ${pkg.name}\n\n    ${dim}# Install for Claude Code globally${reset}\n    npx ${pkg.name} --claude --global\n\n    ${dim}# Install for Gemini globally${reset}\n    npx ${pkg.name} --gemini --global\n\n    ${dim}# Install for Kilo globally${reset}\n    npx ${pkg.name} --kilo --global\n\n    ${dim}# Install for Codex globally${reset}\n    npx ${pkg.name} --codex --global\n\n    ${dim}# Install for Kimi CLI globally${reset}\n    npx ${pkg.name} --kimi --global\n\n    ${dim}# Install for Kimi CLI under ~/.kimi-code${reset}\n    npx ${pkg.name} --kimi --global --config-dir ~/.kimi-code\n\n    ${dim}# Install for Copilot globally${reset}\n    npx ${pkg.name} --copilot --global\n\n    ${dim}# Install for Copilot locally${reset}\n    npx ${pkg.name} --copilot --local\n\n    ${dim}# Install for Antigravity globally${reset}\n    npx ${pkg.name} --antigravity --global\n\n    ${dim}# Install for Antigravity locally${reset}\n    npx ${pkg.name} --antigravity --local\n\n    ${dim}# Install for Cursor globally${reset}\n    npx ${pkg.name} --cursor --global\n\n    ${dim}# Install for Cursor locally${reset}\n    npx ${pkg.name} --cursor --local\n\n    ${dim}# Install for Windsurf globally${reset}\n    npx ${pkg.name} --windsurf --global\n\n    ${dim}# Install for Windsurf locally${reset}\n    npx ${pkg.name} --windsurf --local\n\n    ${dim}# Install for Augment globally${reset}\n    npx ${pkg.name} --augment --global\n\n    ${dim}# Install for Augment locally${reset}\n    npx ${pkg.name} --augment --local\n\n    ${dim}# Install for Trae globally${reset}\n    npx ${pkg.name} --trae --global\n\n    ${dim}# Install for Trae locally${reset}\n    npx ${pkg.name} --trae --local\n\n    ${dim}# Install for Hermes Agent globally${reset}\n    npx ${pkg.name} --hermes --global\n\n    ${dim}# Install for Hermes Agent locally${reset}\n    npx ${pkg.name} --hermes --local\n\n    ${dim}# Install for Cline globally${reset}\n    npx ${pkg.name} --cline --global\n\n    ${dim}# Install for Cline locally${reset}\n    npx ${pkg.name} --cline --local\n\n    ${dim}# Install for CodeBuddy globally${reset}\n    npx ${pkg.name} --codebuddy --global\n\n    ${dim}# Install for CodeBuddy locally${reset}\n    npx ${pkg.name} --codebuddy --local\n\n    ${dim}# Install for all runtimes globally${reset}\n    npx ${pkg.name} --all --global\n\n    ${dim}# Install to custom config directory${reset}\n    npx ${pkg.name} --kilo --global --config-dir ~/.kilo-work\n\n    ${dim}# Install to current project only${reset}\n    npx ${pkg.name} --claude --local\n\n    ${dim}# Uninstall pp-core from Cursor globally${reset}\n    npx ${pkg.name} --cursor --global --uninstall\n\n  ${yellow}Notes:${reset}\n    The --config-dir option is useful when you have multiple configurations.\n    It takes priority over CLAUDE_CONFIG_DIR / OPENCODE_CONFIG_DIR / GEMINI_CONFIG_DIR / KILO_CONFIG_DIR / CODEX_HOME / KIMI_CONFIG_DIR / COPILOT_CONFIG_DIR / COPILOT_HOME / ANTIGRAVITY_CONFIG_DIR / CURSOR_CONFIG_DIR / WINDSURF_CONFIG_DIR / AUGMENT_CONFIG_DIR / TRAE_CONFIG_DIR / QWEN_CONFIG_DIR / HERMES_HOME / CLINE_CONFIG_DIR / CODEBUDDY_CONFIG_DIR environment variables.\n    Kimi CLI defaults to the first existing generic skills root: ${cyan}~/.config/agents/skills${reset}, then ${cyan}~/.agents/skills${reset}; if neither exists, pp-core creates ${cyan}~/.config/agents${reset}.\n    Use ${cyan}--config-dir ~/.kimi-code${reset} or ${cyan}KIMI_CONFIG_DIR=~/.kimi-code${reset} for brand-specific Kimi installs.\n`);
+  console.log(`  ${yellow}Usage:${reset} npx ${pkg.name} [options]\n\n  ${yellow}Options:${reset}\n    ${cyan}-g, --global${reset}              Install globally (to config directory)\n    ${cyan}-l, --local${reset}               Install locally (to current directory)\n    ${cyan}--claude${reset}                  Install for Claude Code only\n    ${cyan}--opencode${reset}                Install for OpenCode only\n    ${cyan}--gemini${reset}                  Install for Gemini only\n    ${cyan}--kilo${reset}                    Install for Kilo only\n    ${cyan}--codex${reset}                   Install for Codex only\n    ${cyan}--kimi${reset}                    Install for Kimi CLI only\n    ${cyan}--copilot${reset}                 Install for Copilot only\n    ${cyan}--antigravity${reset}             Install for Antigravity only\n    ${cyan}--cursor${reset}                  Install for Cursor only\n    ${cyan}--windsurf${reset}                Install for Windsurf only\n    ${cyan}--augment${reset}                 Install for Augment only\n    ${cyan}--trae${reset}                    Install for Trae only\n    ${cyan}--qwen${reset}                    Install for Qwen Code only\n    ${cyan}--hermes${reset}                  Install for Hermes Agent only\n    ${cyan}--cline${reset}                   Install for Cline only\n    ${cyan}--codebuddy${reset}              Install for CodeBuddy only\n    ${cyan}--all${reset}                     Install for all runtimes\n    ${cyan}-u, --uninstall${reset}           Uninstall pp-core (remove all pp-core files)\n    ${cyan}-c, --config-dir <path>${reset}   Specify custom config directory\n    ${cyan}-h, --help${reset}                Show this help message\n    ${cyan}--force-statusline${reset}        Replace existing statusline config\n    ${cyan}--portable-hooks${reset}          Emit \$HOME-relative hook paths in settings.json\n                              (for WSL/Docker bind-mount setups; also GSD_PORTABLE_HOOKS=1)\n    ${cyan}--profile=<name>${reset}         Install a named skill profile. Profiles:\n                              core     — ${PROFILES.core.length} main-loop skills incl. phase (~130 desc tokens)\n                              standard — ${PROFILES.standard.length} skills incl. phase, review, config (~700)\n                              full     — all skills (default)\n                              Composable: --profile=core,audit installs union of closures.\n                              Profile is persisted and respected by \`pp update\`.\n    ${cyan}--minimal${reset}                 Alias for --profile=core (back-compat).\n                              Cuts cold-start overhead from ~12k tokens to ~700.\n                              Alias: --core-only.\n\n  ${yellow}Examples:${reset}\n    ${dim}# Interactive install (prompts for runtime and location)${reset}\n    npx ${pkg.name}\n\n    ${dim}# Install for Claude Code globally${reset}\n    npx ${pkg.name} --claude --global\n\n    ${dim}# Install for Gemini globally${reset}\n    npx ${pkg.name} --gemini --global\n\n    ${dim}# Install for Kilo globally${reset}\n    npx ${pkg.name} --kilo --global\n\n    ${dim}# Install for Codex globally${reset}\n    npx ${pkg.name} --codex --global\n\n    ${dim}# Install for Kimi CLI globally${reset}\n    npx ${pkg.name} --kimi --global\n\n    ${dim}# Install for Kimi CLI under ~/.kimi-code${reset}\n    npx ${pkg.name} --kimi --global --config-dir ~/.kimi-code\n\n    ${dim}# Install for Copilot globally${reset}\n    npx ${pkg.name} --copilot --global\n\n    ${dim}# Install for Copilot locally${reset}\n    npx ${pkg.name} --copilot --local\n\n    ${dim}# Install for Antigravity globally${reset}\n    npx ${pkg.name} --antigravity --global\n\n    ${dim}# Install for Antigravity locally${reset}\n    npx ${pkg.name} --antigravity --local\n\n    ${dim}# Install for Cursor globally${reset}\n    npx ${pkg.name} --cursor --global\n\n    ${dim}# Install for Cursor locally${reset}\n    npx ${pkg.name} --cursor --local\n\n    ${dim}# Install for Windsurf globally${reset}\n    npx ${pkg.name} --windsurf --global\n\n    ${dim}# Install for Windsurf locally${reset}\n    npx ${pkg.name} --windsurf --local\n\n    ${dim}# Install for Augment globally${reset}\n    npx ${pkg.name} --augment --global\n\n    ${dim}# Install for Augment locally${reset}\n    npx ${pkg.name} --augment --local\n\n    ${dim}# Install for Trae globally${reset}\n    npx ${pkg.name} --trae --global\n\n    ${dim}# Install for Trae locally${reset}\n    npx ${pkg.name} --trae --local\n\n    ${dim}# Install for Hermes Agent globally${reset}\n    npx ${pkg.name} --hermes --global\n\n    ${dim}# Install for Hermes Agent locally${reset}\n    npx ${pkg.name} --hermes --local\n\n    ${dim}# Install for Cline globally${reset}\n    npx ${pkg.name} --cline --global\n\n    ${dim}# Install for Cline locally${reset}\n    npx ${pkg.name} --cline --local\n\n    ${dim}# Install for CodeBuddy globally${reset}\n    npx ${pkg.name} --codebuddy --global\n\n    ${dim}# Install for CodeBuddy locally${reset}\n    npx ${pkg.name} --codebuddy --local\n\n    ${dim}# Install for all runtimes globally${reset}\n    npx ${pkg.name} --all --global\n\n    ${dim}# Install to custom config directory${reset}\n    npx ${pkg.name} --kilo --global --config-dir ~/.kilo-work\n\n    ${dim}# Install to current project only${reset}\n    npx ${pkg.name} --claude --local\n\n    ${dim}# Uninstall pp-core from Cursor globally${reset}\n    npx ${pkg.name} --cursor --global --uninstall\n\n  ${yellow}Notes:${reset}\n    The --config-dir option is useful when you have multiple configurations.\n    It takes priority over CLAUDE_CONFIG_DIR / OPENCODE_CONFIG_DIR / GEMINI_CONFIG_DIR / KILO_CONFIG_DIR / CODEX_HOME / KIMI_CONFIG_DIR / COPILOT_CONFIG_DIR / COPILOT_HOME / ANTIGRAVITY_CONFIG_DIR / CURSOR_CONFIG_DIR / WINDSURF_CONFIG_DIR / AUGMENT_CONFIG_DIR / TRAE_CONFIG_DIR / QWEN_CONFIG_DIR / HERMES_HOME / CLINE_CONFIG_DIR / CODEBUDDY_CONFIG_DIR environment variables.\n    Kimi CLI defaults to the first existing generic skills root: ${cyan}~/.config/agents/skills${reset}, then ${cyan}~/.agents/skills${reset}; if neither exists, pp-core creates ${cyan}~/.config/agents${reset}.\n    Use ${cyan}--config-dir ~/.kimi-code${reset} or ${cyan}KIMI_CONFIG_DIR=~/.kimi-code${reset} for brand-specific Kimi installs.\n`);
   process.exit(0);
 }
 
@@ -640,7 +640,7 @@ const resolveBashRunner = hooksSurface.resolveBashRunner;
 // referencesHook: pure predicate over hook entry objects, shared between
 // install() and finishInstall() (ADR-857 phase 5f-1b).
 const referencesHook = hooksSurface.referencesHook;
-// applySettingsJsonHooks: mutates settings.hooks.* in place with all GSD-managed
+// applySettingsJsonHooks: mutates settings.hooks.* in place with all pp-core-managed
 // hook registrations for settings.json-surface runtimes (ADR-857 phase 5f-1b).
 const applySettingsJsonHooks = hooksSurface.applySettingsJsonHooks;
 
@@ -649,7 +649,7 @@ function rewriteLegacyManagedNodeHookCommands(settings, absoluteRunner, opts) {
 }
 
 /**
- * Build the GSD-managed Codex SessionStart hook block for config.toml.
+ * Build the pp-core-managed Codex SessionStart hook block for config.toml.
  *
  * Issue #3017: the previous shape inlined `command = "node ${path}"` which
  * fails under GUI/minimal-PATH runtimes where bare `node` doesn't resolve
@@ -715,7 +715,7 @@ function reconcileCodexHooksJsonEvent(targetDir, eventName, opts = {}) {
 }
 
 /**
- * Reconcile the GSD-managed SessionStart hook entry in hooks.json.
+ * Reconcile the pp-core-managed SessionStart hook entry in hooks.json.
  * Delegates to the generic reconcileCodexHooksJsonEvent helper.
  *
  * @param {string} targetDir
@@ -818,7 +818,7 @@ function ensureCodexHooksJsonEvent(targetDir, eventName, opts = {}) {
 }
 
 /**
- * Remove a GSD-managed event entry from hooks.json. Called during uninstall.
+ * Remove a pp-core-managed event entry from hooks.json. Called during uninstall.
  *
  * @param {string} targetDir
  * @param {string} eventName
@@ -1483,7 +1483,7 @@ const claudeToGeminiTools = {
   TodoWrite: 'write_todos',
 };
 
-// Tool name mapping from Claude/GSD agents to Kimi CLI module paths.
+// Tool name mapping from Claude/pp-core agents to Kimi CLI module paths.
 // Kimi custom agent YAML requires fully-qualified module paths.
 const claudeToKimiTools = {
   Read: 'kimi_cli.tools.file:ReadFile',
@@ -3025,7 +3025,7 @@ Typed mapping (agent_type-capable schema only):
   to \`spawn_agent\` when the runtime/tool supports it. Omit missing, empty,
   inherited, or unsupported values; do not invent one-off effort literals in
   workflow prose.
-- \`fork_context: false\` by default — GSD agents load their own context via \`<files_to_read>\` blocks
+- \`fork_context: false\` by default — pp-core agents load their own context via \`<files_to_read>\` blocks
 - \`Task(isolation="worktree")\` / \`Agent(isolation="worktree")\` → no direct Codex mapping.
   Codex \`spawn_agent\` does not create or bind a git worktree automatically.
   Workflows that require this isolation must fail closed or use an explicit
@@ -3035,7 +3035,7 @@ Generic-agent workaround (multi_agent_v1 schema — NO agent_type field):
 When only the generic \`multi_agent_v1\` schema is available, typed GSD agent dispatch
 (\`pp-planner\`, \`pp-executor\`, etc.) is NOT possible. This is a known Codex limitation
 (openai/codex#15250). **This workaround is NOT equivalent to typed pp-planner/pp-executor
-execution** — GSD agents carry project-aware prompts, audit logging, and workflow context
+execution** — pp-core agents carry project-aware prompts, audit logging, and workflow context
 that a generic subagent lacks. Use the following fallback:
 1. Resolve your active Codex config root — the directory that contains your \`config.toml\`.
    This directory is determined in priority order: \`$CODEX_HOME\` (if set), the path given
@@ -3198,11 +3198,11 @@ function generateCodexAgentToml(agentName, agentContent, modelOverrides = null,
 }
 
 /**
- * Remove stale agents/openai.yaml sidecar files from GSD-managed Codex skill dirs.
+ * Remove stale agents/openai.yaml sidecar files from pp-core-managed Codex skill dirs.
  *
  * Prior to #1326, GSD's Codex install path wrote an agents/openai.yaml file
  * alongside each gsd-* SKILL.md. Recent Codex builds index BOTH SKILL.md and
- * the sidecar, causing each GSD skill to appear twice in autocomplete. This
+ * the sidecar, causing each pp-core skill to appear twice in autocomplete. This
  * function removes those stale sidecars and — if the agents/ subdirectory is
  * now empty — prunes it too.
  *
@@ -4066,7 +4066,7 @@ function stripLeakedGsdCodexSections(content) {
 }
 
 /**
- * Strip GSD-managed legacy Codex hook blocks from a config.toml string
+ * Strip pp-core-managed legacy Codex hook blocks from a config.toml string
  * using the TOML AST already used elsewhere in this file
  * (`getTomlTableSections` + `removeContentRanges`). The earlier regex-based
  * implementation required a precise key order, exact single-space padding
@@ -4084,7 +4084,7 @@ function stripLeakedGsdCodexSections(content) {
  * removal range backward through any single preceding comment line.
  *
  * Pure function, exported for test coverage. Returns the input unchanged
- * if no GSD-managed hook section is present.
+ * if no pp-core-managed hook section is present.
  */
 function stripStaleGsdHookBlocks(configContent) {
   const sections = getTomlTableSections(configContent);
@@ -4096,7 +4096,7 @@ function stripStaleGsdHookBlocks(configContent) {
     return configContent;
   }
 
-  // A section is GSD-managed if any structural `command` key inside its
+  // A section is pp-core-managed if any structural `command` key inside its
   // body parses to a string whose basename matches `gsd-(check-update|
   // update-check).js`. The TOML line parser already classified each line's
   // `keySegments`, so we never inspect raw text — this handles arbitrary
@@ -4431,7 +4431,7 @@ function migrateCodexHooksMapFormat(content) {
 /**
  * Detect whether the user already uses the namespaced AoT hooks form
  * (`[[hooks.<EVENT>]]`) for the given event in the config. When true,
- * the GSD-managed hook block must be emitted in the same shape so it
+ * the pp-core-managed hook block must be emitted in the same shape so it
  * coexists cleanly — mixing `[[hooks]]` (flat) with `[[hooks.SessionStart]]`
  * (namespaced) in the same file confuses round-trip writers and can
  * produce a config that Codex rejects (#2760, defect 3).
@@ -5145,7 +5145,7 @@ function mergeCodexConfig(configPath, gsdBlock) {
   if (markerIndex !== -1) {
     let before = existing.substring(0, markerIndex).trimEnd();
     if (before) {
-      // Strip any GSD-managed sections that leaked above the marker from previous installs
+      // Strip any pp-core-managed sections that leaked above the marker from previous installs
       before = stripLeakedGsdCodexSections(before).trimEnd();
 
       atomicWriteFileSync(configPath, before + eol + eol + normalizedGsdBlock + eol);
@@ -5420,7 +5420,7 @@ function mergeCopilotInstructions(filePath, gsdContent) {
 
 /**
  * Strip GSD section from copilot-instructions.md content.
- * Returns cleaned content, or null if file should be deleted (was GSD-only).
+ * Returns cleaned content, or null if file should be deleted (was pp-core-only).
  * @param {string} content - File content
  * @returns {string|null} - Cleaned content or null if empty
  */
@@ -5492,7 +5492,7 @@ function mergeGsdAgentsMd(filePath, gsdContent) {
 
 /**
  * Strip the GSD block from AGENTS.md content. Returns null if the file became
- * empty (was GSD-only), the unchanged content if no markers were found, or the
+ * empty (was pp-core-only), the unchanged content if no markers were found, or the
  * cleaned content otherwise.
  */
 function stripGsdFromAgentsMd(content) {
@@ -5551,7 +5551,7 @@ function buildCursorHookEntry(scriptPath) {
 }
 
 /**
- * Return true if a Cursor hook entry is GSD-managed.
+ * Return true if a Cursor hook entry is pp-core-managed.
  * Detection: presence of the GSD_CURSOR_HOOK_MARKER sentinel field.
  *
  * @param {object} entry - A hooks array element from hooks.json
@@ -5562,7 +5562,7 @@ function isManagedCursorHookEntry(entry) {
 }
 
 /**
- * Reconcile the GSD-managed entries in a Cursor hooks.json file.
+ * Reconcile the pp-core-managed entries in a Cursor hooks.json file.
  *
  * Supports both known hooks.json shapes:
  *   1) { "version": 1, "hooks": { "sessionStart": [...], "postToolUse": [...] } }
@@ -5583,10 +5583,10 @@ function reconcileCursorHooksJson(hooksJsonPath, managedEntries) {
 }
 
 /**
- * #777 — Write GSD-managed Cursor lifecycle hooks into <targetDir>/hooks.json.
+ * #777 — Write pp-core-managed Cursor lifecycle hooks into <targetDir>/hooks.json.
  *
  * Both managed hook scripts (pp-cursor-session-start.js, pp-cursor-post-tool.js)
- * are copied from the GSD hooks/ source to <targetDir>/hooks/ first, so the
+ * are copied from the pp-core hooks/ source to <targetDir>/hooks/ first, so the
  * hooks.json entries never reference a script that wasn't installed.
  *
  * @param {string} targetDir - The Cursor config dir (global: ~/.cursor; local: .cursor)
@@ -5599,7 +5599,7 @@ function writeCursorHooksJson(targetDir, src, opts) {
 }
 
 /**
- * Remove all GSD-managed Cursor lifecycle hook entries from hooks.json.
+ * Remove all pp-core-managed Cursor lifecycle hook entries from hooks.json.
  * User-owned entries are preserved. If the file becomes empty, it is removed.
  *
  * @param {string} targetDir - The Cursor config dir
@@ -5610,7 +5610,7 @@ function removeCursorHooksJson(targetDir) {
 }
 
 /**
- * #786 — Build the GSD-managed GitHub Copilot lifecycle hook config object.
+ * #786 — Build the pp-core-managed GitHub Copilot lifecycle hook config object.
  *
  * Returns the verbatim JSON shape Copilot CLI expects:
  *   { version: 1, hooks: { sessionStart: [ <hook entry> ] } }
@@ -5628,7 +5628,7 @@ function buildCopilotHookConfig() {
 }
 
 /**
- * #786 — Write the GSD-managed Copilot lifecycle hook config under the runtime
+ * #786 — Write the pp-core-managed Copilot lifecycle hook config under the runtime
  * config dir (`<targetDir>/hooks/gsd-session.json`). For local installs
  * targetDir is `.github` (→ `.github/hooks/`); for global installs it is
  * `~/.copilot` (→ `~/.copilot/hooks/`) — both are valid Copilot hook locations.
@@ -5922,7 +5922,7 @@ function convertClaudeToGeminiAgent(content) {
   // Escape ${VAR} patterns in agent body for Gemini CLI compatibility.
   // Gemini's templateString() treats all ${word} patterns as template variables
   // and throws "Template validation failed: Missing required input parameters"
-  // when they can't be resolved. GSD agents use ${PHASE}, ${PLAN}, etc. as
+  // when they can't be resolved. pp-core agents use ${PHASE}, ${PLAN}, etc. as
   // shell variables in bash code blocks — convert to $VAR (no braces) which
   // is equivalent bash and invisible to Gemini's /\$\{(\w+)\}/g regex.
   const escapedBody = body.replace(/\$\{(\w+)\}/g, '$$$1');
@@ -6585,7 +6585,7 @@ function writeHermesCategoryDescription(categoryDir) {
  * /gsd-profile-user) and must be preserved across reinstalls. Critically, they
  * MUST be excluded from gsd-file-manifest.json — otherwise saveLocalPatches()
  * will compare a refreshed file against a stale manifest hash and emit a
- * spurious "locally modified GSD file" warning (bug #2771).
+ * spurious "locally modified pp-core file" warning (bug #2771).
  *
  * Invariant: a file is either distribution (manifest-tracked, diff'd against
  * manifest) or user artifact (preserved across installs, never diff'd). Never
@@ -7251,7 +7251,7 @@ function _restoreDir(dir, snapshot) {
  *
  * The removal set is derived from the ACTUAL installed skill dirs (every
  * entry starting with 'gsd-' that is a directory), so it covers ALL shipped
- * GSD skills — including 'dev-preferences' and future additions — without
+ * pp-core skills — including 'dev-preferences' and future additions — without
  * relying on readGsdCommandNames() which only enumerates the commands source
  * tree and can miss skills that ship outside that directory.
  *
@@ -7387,6 +7387,120 @@ function installRuntimeArtifacts(runtime, configDir, scope, resolvedProfile) {
     const nestedGsdDirForCleanup = path.join(configDir, 'skills', 'gsd');
     _removeHermesBareStemDirs(nestedGsdDirForCleanup);
   }
+
+  // Verbatim Pareto skill payload — MUST be the LAST step (post-prune ordering
+  // is load-bearing, Pitfall 1). The skills-kind loop above runs _removeGsdEntries,
+  // which unconditionally deletes EVERY pp-* skill dir; running the verbatim copy
+  // here (delete-then-recopy) makes the payload self-healing across repeated
+  // `npx` installs. Copies are byte-for-byte with NO content-rewrite pass (D-03).
+  installVerbatimSkills(runtime, configDir, scope);
+}
+
+/**
+ * Locate the bundled `pareto-skills/` source directory.
+ *
+ * Walks up from `__dirname` (up to 6 ancestors) looking for the sentinel
+ * `pareto-skills/pp-brand/SKILL.md`, mirroring the source-root walk-up the
+ * installer already uses to anchor `commands/`. Returns the absolute path to
+ * the `pareto-skills/` directory. Throws a clear error if it cannot be found.
+ *
+ * @returns {string} absolute path to the bundled `pareto-skills/` directory
+ */
+function findParetoSkillsSrc() {
+  let dir = __dirname;
+  for (let i = 0; i < 6; i += 1) {
+    const candidate = path.join(dir, 'pareto-skills');
+    if (fs.existsSync(path.join(candidate, 'pp-brand', 'SKILL.md'))) return candidate;
+    const parent = path.dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  throw new Error(`findParetoSkillsSrc: could not locate pareto-skills/ from ${__dirname}`);
+}
+
+/**
+ * Place the verbatim Pareto skill payload into a runtime's resolved skills dir.
+ *
+ * This is the "second channel" for shipping skills: unlike command-derived
+ * skills (generated from commands/pp-*.md via the converter), these three
+ * `pp-*` skill dirs — plus a peer `_shared/` — are copied byte-for-byte with
+ * NO content-rewrite pass (D-03/D-07). That keeps them out of docs/COMMANDS.md
+ * and prevents the rewrite walker from corrupting templates or the protocol
+ * file (Pitfall 3). The payload is binary-safe (Crew assets), so we use a plain
+ * recursive fs.cpSync — never applyRuntimeContentRewritesInPlace,
+ * stageSkillsForRuntimeAsSkills, or the skillsKind converter.
+ *
+ * The destination is resolved from the artifact layout's skills-kind
+ * destSubpath (never a hardcoded `skills/`), so Hermes' nested `skills/gsd/`
+ * base is honoured automatically. Runtimes with no skills kind (gemini has only
+ * a commands kind; grok has no skills-layout descriptor) are skipped gracefully
+ * with an early `return 0` — never a throw (Pitfall 5).
+ *
+ * The skill names are a FIXED, package-owned allowlist — never interpolated
+ * input (V5 / T-16-03). No manifest entry is added, so `/pp-surface` pruning
+ * leaves these non-manifest pp-* dirs untouched (Pitfall 2). `_shared/*.sh`
+ * regain their exec bit after copy, because a content-level cpSync does not
+ * reliably preserve the exec bit cross-platform.
+ *
+ * @param {string} runtime - target runtime id
+ * @param {string} configDir - resolved runtime config directory
+ * @param {string} scope - 'local' | 'global'
+ * @returns {number} number of skill dirs placed (0 if the runtime has no skills kind)
+ */
+function installVerbatimSkills(runtime, configDir, scope) {
+  // Resolve the runtime's artifact layout. Two graceful-skip cases (Pitfall 5,
+  // no throw): gemini's layout has only a commands kind (skillsKindEntry
+  // undefined below); grok is not in the layout registry at all, so
+  // resolveRuntimeArtifactLayout throws 'Unknown runtime' — treat that as
+  // "no skills surface" and skip. In the production call path
+  // installRuntimeArtifacts has already resolved the layout, but this function
+  // is exported and called standalone by test harnesses (Plan 16-03), so the
+  // guard lives here too.
+  let layout;
+  try {
+    layout = resolveRuntimeArtifactLayout(runtime, configDir, scope);
+  } catch {
+    return 0;
+  }
+  const skillsKindEntry = layout.kinds.find((k) => k.kind === 'skills');
+  // gemini (commands-only): no skills surface — skip, don't throw.
+  if (!skillsKindEntry) return 0;
+
+  const src = findParetoSkillsSrc();
+  // destSubpath already encodes Hermes' nested `skills/gsd` — never hardcode `skills/`.
+  const skillsBase = path.join(configDir, skillsKindEntry.destSubpath);
+  fs.mkdirSync(skillsBase, { recursive: true });
+
+  // FIXED, package-owned allowlist — never interpolated input (V5 / T-16-03).
+  const BUNDLED = ['pp-brand', 'pp-project-setup', 'pp-obsidian-notes'];
+  let placed = 0;
+  for (const name of BUNDLED) {
+    const skillDest = path.join(skillsBase, name);
+    // Plain recursive, binary-safe copy — NO content-rewrite pass (D-03/Pitfall 3).
+    fs.cpSync(path.join(src, name), skillDest, { recursive: true });
+    if (verifyInstalled(skillDest, `skill ${name}`)) {
+      placed += 1;
+    }
+  }
+
+  // Copy _shared/ as a PEER of the skill dirs so `../_shared/` resolves from any
+  // skill body (D-04). Verbatim copy, no rewrite pass.
+  const sharedDest = path.join(skillsBase, '_shared');
+  fs.cpSync(path.join(src, '_shared'), sharedDest, { recursive: true });
+  verifyInstalled(sharedDest, 'skill _shared');
+
+  // Restore the exec bit on bundled *.sh — cpSync content copy does not reliably
+  // preserve it cross-platform (PATTERNS "No Analog Found").
+  try {
+    for (const entry of fs.readdirSync(sharedDest)) {
+      if (entry.endsWith('.sh')) {
+        fs.chmodSync(path.join(sharedDest, entry), 0o755);
+      }
+    }
+  } catch { /* best-effort: non-fatal if _shared has no scripts */ }
+
+  console.log(`  ${green}✓${reset} Placed ${placed} verbatim Pareto skill(s) + _shared into ${skillsKindEntry.destSubpath}`);
+  return placed;
 }
 
 /**
@@ -7496,7 +7610,7 @@ function uninstallRuntimeArtifacts(runtime, configDir, scope) {
   }
 
   // Hermes: after removing gsd-* skill dirs from skills/gsd/, also remove
-  // the GSD-managed DESCRIPTION.md and then the category dir itself if it
+  // the pp-core-managed DESCRIPTION.md and then the category dir itself if it
   // contains no user content (#947). _removeGsdEntries removed gsd-* dirs
   // but left the category container and DESCRIPTION.md intact.
   if (runtime === 'hermes') {
@@ -7936,7 +8050,7 @@ function uninstall(isGlobal, runtime = 'claude') {
   if (runtime === 'kimi') runtimeLabel = 'Kimi CLI';
   if (runtime === 'codebuddy') runtimeLabel = 'CodeBuddy';
 
-  console.log(`  Uninstalling GSD from ${cyan}${runtimeLabel}${reset} at ${cyan}${locationLabel}${reset}\n`);
+  console.log(`  Uninstalling pp-core from ${cyan}${runtimeLabel}${reset} at ${cyan}${locationLabel}${reset}\n`);
 
   // #786: AGENTS.md lives at the repo root (outside targetDir) for local Copilot
   // installs, so its cleanup must run even when .github (targetDir) was already
@@ -7948,10 +8062,10 @@ function uninstall(isGlobal, runtime = 'claude') {
       const cleaned = stripGsdFromCopilotInstructions(content);
       if (cleaned === null) {
         fs.unlinkSync(agentsMdPath);
-        console.log(`  ${green}✓${reset} Removed AGENTS.md (was GSD-only)`);
+        console.log(`  ${green}✓${reset} Removed AGENTS.md (was pp-core-only)`);
       } else if (cleaned !== content) {
         fs.writeFileSync(agentsMdPath, cleaned);
-        console.log(`  ${green}✓${reset} Cleaned GSD section from AGENTS.md`);
+        console.log(`  ${green}✓${reset} Cleaned pp-core section from AGENTS.md`);
       }
     }
   }
@@ -8002,11 +8116,11 @@ function uninstall(isGlobal, runtime = 'claude') {
       if (cleaned === null) {
         fs.unlinkSync(codexConfigPath);
         removedCount++;
-        console.log(`  ${green}✓${reset} Removed config.toml (was GSD-only)`);
+        console.log(`  ${green}✓${reset} Removed config.toml (was pp-core-only)`);
       } else if (cleaned !== content) {
         fs.writeFileSync(codexConfigPath, cleaned);
         removedCount++;
-        console.log(`  ${green}✓${reset} Cleaned GSD sections from config.toml`);
+        console.log(`  ${green}✓${reset} Cleaned pp-core sections from config.toml`);
       }
     }
 
@@ -8035,15 +8149,15 @@ function uninstall(isGlobal, runtime = 'claude') {
       if (cleaned === null) {
         fs.unlinkSync(instructionsPath);
         removedCount++;
-        console.log(`  ${green}✓${reset} Removed copilot-instructions.md (was GSD-only)`);
+        console.log(`  ${green}✓${reset} Removed copilot-instructions.md (was pp-core-only)`);
       } else if (cleaned !== content) {
         fs.writeFileSync(instructionsPath, cleaned);
         removedCount++;
-        console.log(`  ${green}✓${reset} Cleaned GSD section from copilot-instructions.md`);
+        console.log(`  ${green}✓${reset} Cleaned pp-core section from copilot-instructions.md`);
       }
     }
 
-    // #786: remove the GSD-managed Copilot lifecycle hook config and prune the
+    // #786: remove the pp-core-managed Copilot lifecycle hook config and prune the
     // hooks dir if we left it empty.
     const hookPath = path.join(targetDir, 'hooks', GSD_COPILOT_HOOK_FILE);
     if (fs.existsSync(hookPath)) {
@@ -8099,24 +8213,24 @@ function uninstall(isGlobal, runtime = 'claude') {
           if (cleaned === null) {
             fs.unlinkSync(agentsPath);
             removedCount++;
-            console.log(`  ${green}✓${reset} Removed ~/.agents/AGENTS.md (was GSD-only)`);
+            console.log(`  ${green}✓${reset} Removed ~/.agents/AGENTS.md (was pp-core-only)`);
           } else if (cleaned !== content) {
             fs.writeFileSync(agentsPath, cleaned);
             removedCount++;
-            console.log(`  ${green}✓${reset} Cleaned GSD section from ~/.agents/AGENTS.md`);
+            console.log(`  ${green}✓${reset} Cleaned pp-core section from ~/.agents/AGENTS.md`);
           }
         }
       } catch { /* best-effort */ }
     }
   }
 
-  // 1b-cursor. Non-layout Cursor side-effects (issue #777): remove GSD-managed
+  // 1b-cursor. Non-layout Cursor side-effects (issue #777): remove pp-core-managed
   // hook entries from hooks.json and clean up the managed hook scripts.
   if (isCursor) {
     const hooksJsonCleanup = removeCursorHooksJson(targetDir);
     if (hooksJsonCleanup.changed) {
       removedCount++;
-      console.log(`  ${green}✓${reset} Removed GSD-managed Cursor hooks from hooks.json`);
+      console.log(`  ${green}✓${reset} Removed pp-core-managed Cursor hooks from hooks.json`);
     }
     // Remove the managed hook scripts (session-start + post-tool).
     const hooksDir = path.join(targetDir, 'hooks');
@@ -8265,7 +8379,7 @@ function uninstall(isGlobal, runtime = 'claude') {
     }
   }
 
-  // 3. Remove GSD agents (gsd-*.md files only)
+  // 3. Remove pp-core agents (gsd-*.md files only)
   const agentsDir = path.join(targetDir, 'agents');
   if (fs.existsSync(agentsDir)) {
     const files = fs.readdirSync(agentsDir);
@@ -8278,11 +8392,11 @@ function uninstall(isGlobal, runtime = 'claude') {
     }
     if (agentCount > 0) {
       removedCount++;
-      console.log(`  ${green}✓${reset} Removed ${agentCount} GSD agents`);
+      console.log(`  ${green}✓${reset} Removed ${agentCount} pp-core agents`);
     }
   }
 
-  // 4. Remove GSD hooks
+  // 4. Remove pp-core hooks
   const hooksDir = path.join(targetDir, 'hooks');
   if (fs.existsSync(hooksDir)) {
     let hookCount = 0;
@@ -8295,10 +8409,10 @@ function uninstall(isGlobal, runtime = 'claude') {
     }
     if (hookCount > 0) {
       removedCount++;
-      console.log(`  ${green}✓${reset} Removed ${hookCount} GSD hooks`);
+      console.log(`  ${green}✓${reset} Removed ${hookCount} pp-core hooks`);
     }
 
-    // Remove only the GSD-managed files from hooks/lib/ (git-cmd.js + pp-graphify-rebuild.sh).
+    // Remove only the pp-core-managed files from hooks/lib/ (git-cmd.js + pp-graphify-rebuild.sh).
     // hooks/lib/ lives inside the user's runtime hooks directory (shared space) and
     // may contain user-owned custom helpers. We must not recursively delete the dir.
     const hooksLibDir = path.join(hooksDir, 'lib');
@@ -8327,9 +8441,9 @@ function uninstall(isGlobal, runtime = 'claude') {
   }
 
   // 4a. Remove scripts/changeset/ and scripts/lib/ (#935)
-  // GSD-managed files only: enumerate the exact set the installer writes.
+  // pp-core-managed files only: enumerate the exact set the installer writes.
   // Any file NOT in this set is user-owned and must survive uninstall.
-  // After removing GSD files, attempt to rmdir — if the directory is still
+  // After removing pp-core files, attempt to rmdir — if the directory is still
   // non-empty (user has custom helpers) it stays; otherwise it goes cleanly.
   const GSD_CHANGESET_FILES = [
     'cli.cjs', 'parse.cjs', 'render.cjs', 'serialize.cjs',
@@ -8349,7 +8463,7 @@ function uninstall(isGlobal, runtime = 'claude') {
     try { fs.rmdirSync(changesetUninstallDir); } catch (_) { /* Not empty — user content present */ }
     if (removedChangeset > 0) {
       removedCount++;
-      console.log(`  ${green}✓${reset} Removed scripts/changeset/ GSD files`);
+      console.log(`  ${green}✓${reset} Removed scripts/changeset/ pp-core files`);
     }
   }
   const scriptsLibUninstallDir = path.join(targetDir, 'scripts', 'lib');
@@ -8363,7 +8477,7 @@ function uninstall(isGlobal, runtime = 'claude') {
     try { fs.rmdirSync(scriptsLibUninstallDir); } catch (_) { /* Not empty — user content present */ }
     if (removedScriptsLib > 0) {
       removedCount++;
-      console.log(`  ${green}✓${reset} Removed scripts/lib/ GSD files`);
+      console.log(`  ${green}✓${reset} Removed scripts/lib/ pp-core files`);
     }
   }
   // Remove scripts/fix-slash-commands.cjs (#1223) — must come before the scripts/ rmdir
@@ -8376,7 +8490,7 @@ function uninstall(isGlobal, runtime = 'claude') {
     try { fs.rmdirSync(scriptsUninstallDir); } catch (_) { /* Not empty — leave it */ }
   }
 
-  // 5. Remove GSD package.json (CommonJS mode marker)
+  // 5. Remove pp-core package.json (CommonJS mode marker)
   const pkgJsonPath = path.join(targetDir, 'package.json');
   if (fs.existsSync(pkgJsonPath)) {
     try {
@@ -8385,14 +8499,14 @@ function uninstall(isGlobal, runtime = 'claude') {
       if (content === '{"type":"commonjs"}') {
         fs.unlinkSync(pkgJsonPath);
         removedCount++;
-        console.log(`  ${green}✓${reset} Removed GSD package.json`);
+        console.log(`  ${green}✓${reset} Removed pp-core package.json`);
       }
     } catch (e) {
       // Ignore read errors
     }
   }
 
-  // 6. Clean up settings.json (remove GSD hooks and statusline)
+  // 6. Clean up settings.json (remove pp-core hooks and statusline)
   const settingsPath = path.join(targetDir, 'settings.json');
   if (fs.existsSync(settingsPath)) {
     let settings = readSettings(settingsPath);
@@ -8402,15 +8516,15 @@ function uninstall(isGlobal, runtime = 'claude') {
     }
     let settingsModified = false;
 
-    // Remove GSD statusline if it references our hook
+    // Remove pp-core statusline if it references our hook
     if (settings.statusLine && settings.statusLine.command &&
       settings.statusLine.command.includes('pp-statusline')) {
       delete settings.statusLine;
       settingsModified = true;
-      console.log(`  ${green}✓${reset} Removed GSD statusline from settings`);
+      console.log(`  ${green}✓${reset} Removed pp-core statusline from settings`);
     }
 
-    // Remove GSD hooks from settings — per-hook granularity to preserve
+    // Remove pp-core hooks from settings — per-hook granularity to preserve
     // user hooks that share an entry with a GSD hook (#1755 followup).
     // Includes the 3 Qwen-only events added in #788 (SubagentStop, Stop,
     // PreCompact, also registered for Claude in #770), the 3 Gemini-only
@@ -8424,7 +8538,7 @@ function uninstall(isGlobal, runtime = 'claude') {
         settings.hooks[eventName] = settings.hooks[eventName]
           .map(entry => {
             if (!entry || typeof entry !== 'object' || !Array.isArray(entry.hooks)) return entry;
-            // Filter out individual GSD hooks, keep user hooks
+            // Filter out individual pp-core hooks, keep user hooks
             entry.hooks = entry.hooks.filter((h) => {
               if (!h || typeof h.command !== 'string') return true;
               return !isManagedHookCommand(h.command, {
@@ -8443,7 +8557,7 @@ function uninstall(isGlobal, runtime = 'claude') {
       }
     }
     if (settingsModified) {
-      console.log(`  ${green}✓${reset} Removed GSD hooks from settings`);
+      console.log(`  ${green}✓${reset} Removed pp-core hooks from settings`);
     }
 
     // Clean up empty hooks object
@@ -8455,7 +8569,7 @@ function uninstall(isGlobal, runtime = 'claude') {
     // Applies only to Claude uninstalls. Filter only the exact GSD-owned entries
     // to preserve any user-added allow/deny entries.
     // Uses a local flag to avoid the shared `settingsModified` producing a false
-    // "Removed GSD permissions" message when only hooks/statusline changed.
+    // "Removed pp-core permissions" message when only hooks/statusline changed.
     if (runtime === 'claude' && settings.permissions) {
       let permissionsModified = false;
       if (Array.isArray(settings.permissions.allow)) {
@@ -8478,7 +8592,7 @@ function uninstall(isGlobal, runtime = 'claude') {
       }
       if (permissionsModified) {
         settingsModified = true;
-        console.log(`  ${green}✓${reset} Removed GSD permissions from settings.json`);
+        console.log(`  ${green}✓${reset} Removed pp-core permissions from settings.json`);
       }
     }
 
@@ -8521,7 +8635,7 @@ function uninstall(isGlobal, runtime = 'claude') {
         if (modified) {
           fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + '\n');
           removedCount++;
-          console.log(`  ${green}✓${reset} Removed GSD permissions from ${path.basename(configPath)}`);
+          console.log(`  ${green}✓${reset} Removed pp-core permissions from ${path.basename(configPath)}`);
         }
       } catch (e) {
         // Ignore JSON parse errors
@@ -8562,7 +8676,7 @@ function uninstall(isGlobal, runtime = 'claude') {
         if (modified) {
           fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + '\n');
           removedCount++;
-          console.log(`  ${green}✓${reset} Removed GSD permissions from ${path.basename(configPath)}`);
+          console.log(`  ${green}✓${reset} Removed pp-core permissions from ${path.basename(configPath)}`);
         }
       } catch (e) {
         // Ignore JSON parse errors
@@ -8580,7 +8694,7 @@ function uninstall(isGlobal, runtime = 'claude') {
   }
 
   if (removedCount === 0) {
-    console.log(`  ${yellow}⚠${reset} No GSD files found to remove.`);
+    console.log(`  ${yellow}⚠${reset} No pp-core files found to remove.`);
   }
 
   console.log(`
@@ -8727,7 +8841,7 @@ function configureOpencodePermissions(isGlobal = true, configDir = null) {
 
   // Write config back
   fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + '\n');
-  console.log(`  ${green}✓${reset} Configured read permission for GSD docs`);
+  console.log(`  ${green}✓${reset} Configured read permission for pp-core docs`);
 }
 
 /**
@@ -8801,7 +8915,7 @@ function configureKiloPermissions(isGlobal = true, configDir = null) {
 
   // Write config back
   fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + '\n');
-  console.log(`  ${green}✓${reset} Configured read permission for GSD docs`);
+  console.log(`  ${green}✓${reset} Configured read permission for pp-core docs`);
 }
 
 /**
@@ -8949,7 +9063,7 @@ function writeManifest(configDir, runtime = 'claude', options = {}) {
   // Flat-hyphen layout: pp-*.md files live directly in commands/ (no gsd/ subdir).
   const commandsDir = path.join(configDir, 'commands');
   const opencodeCommandDir = path.join(configDir, 'command');
-  // Hermes nests GSD skills under skills/gsd/ as a single category (#2841).
+  // Hermes nests pp-core skills under skills/gsd/ as a single category (#2841).
   // All other runtimes that use the Codex-style skills layout use a flat skills/ root.
   const codexSkillsDir = isHermes
     ? path.join(configDir, 'skills', 'gsd')
@@ -9184,7 +9298,7 @@ function populatePristineDir({ packageSrc, pristineDir, modified, runtime, pathP
 }
 
 /**
- * Detect user-modified GSD files by comparing against install manifest.
+ * Detect user-modified pp-core files by comparing against install manifest.
  * Backs up modified files to gsd-local-patches/ for reapply after update.
  * Also saves pristine copies (from manifest) to gsd-pristine/ to enable
  * three-way merge during reapply-patches (pristine vs user vs new).
@@ -9252,7 +9366,7 @@ function saveLocalPatches(configDir, pristineCtx) {
       meta.pristine_hashes[relPath] = pristineHashes[relPath];
     }
     fs.writeFileSync(path.join(patchesDir, 'backup-meta.json'), JSON.stringify(meta, null, 2));
-    console.log('  ' + yellow + 'i' + reset + '  Found ' + modified.length + ' locally modified GSD file(s) — backed up to ' + PATCHES_DIR_NAME + '/');
+    console.log('  ' + yellow + 'i' + reset + '  Found ' + modified.length + ' locally modified pp-core file(s) — backed up to ' + PATCHES_DIR_NAME + '/');
     for (const f of modified) {
       console.log('     ' + dim + f + reset);
     }
@@ -9611,7 +9725,7 @@ function install(isGlobal, runtime = 'claude', options = {}) {
     rollback();
   };
 
-  // Save any locally modified GSD files before they get wiped.
+  // Save any locally modified pp-core files before they get wiped.
   // The pristine context lets saveLocalPatches populate gsd-pristine/ via
   // the install transform pipeline, giving the reapply-patches Step 5
   // verifier a real diff baseline (#2998).
@@ -9817,7 +9931,7 @@ function install(isGlobal, runtime = 'claude', options = {}) {
   // #3541: non-interactive runs (typical /gsd-update via Claude Code) have
   // no stdin TTY and therefore no way to answer prompt-user migration
   // actions. Resolve safe categories by classification (stale SDK build
-  // artifacts → remove; user-facing skills → keep; bundled GSD hooks →
+  // artifacts → remove; user-facing skills → keep; bundled pp-core hooks →
   // remove [#3610]) and log every resolution; anything that cannot be
   // safely defaulted falls through to assertInstallerMigrationsUnblocked,
   // which now emits a grouped error with the documented resolution path.
@@ -9825,7 +9939,7 @@ function install(isGlobal, runtime = 'claude', options = {}) {
   // #3610: the classifier-based resolution must run regardless of TTY.
   // For unambiguous categories (e.g. `hooks/gsd-*` bundled hooks left
   // behind by a previous version), there is no actual "user choice" to
-  // make — the file is a known GSD-managed artifact and the installer is
+  // make — the file is a known pp-core-managed artifact and the installer is
   // about to write the fresh bundled version. Gating the resolver on
   // `!isTTY` made `npx @opengsd/gsd-core@latest --codex` hard-abort with
   // 12 blocked bundled hooks. The env-override branch (operator-supplied
@@ -9897,7 +10011,7 @@ function install(isGlobal, runtime = 'claude', options = {}) {
     // #1326 — Codex only: remove stale agents/openai.yaml sidecars from managed
     // gsd-* skill dirs. Prior installs wrote these files so Codex would show a
     // display name and description in the /skills TUI popup. Recent Codex builds
-    // index BOTH SKILL.md and the sidecar, causing each GSD skill to appear twice
+    // index BOTH SKILL.md and the sidecar, causing each pp-core skill to appear twice
     // in autocomplete. Cleaning them up fixes the duplication; SKILL.md alone is
     // sufficient for Codex discovery. User-owned dirs are never touched.
     if (isCodex) {
@@ -10036,7 +10150,7 @@ function install(isGlobal, runtime = 'claude', options = {}) {
     // Global installs are handled above by _isSkillsRuntime (#782).
     console.log(`  ${green}✓${reset} Cline: commands will be available via .clinerules`);
   } else if (isGemini) {
-    // #3037: when running --local --gemini and a GSD-managed user-scope
+    // #3037: when running --local --gemini and a pp-core-managed user-scope
     // command directory already exists at ~/.gemini/commands/gsd/, skip
     // the local copy. Gemini conflict-detects by command name across
     // scopes and renames every overlapping /gsd:* command to
@@ -10112,7 +10226,7 @@ function install(isGlobal, runtime = 'claude', options = {}) {
         fs.rmSync(path.join(staleSkillsDir, e.name), { recursive: true });
       }
       if (staleGsd.length > 0) {
-        console.log(`  ${green}✓${reset} Removed ${staleGsd.length} stale GSD skill(s) from skills/`);
+        console.log(`  ${green}✓${reset} Removed ${staleGsd.length} stale pp-core skill(s) from skills/`);
       }
     }
   }
@@ -10835,7 +10949,7 @@ function install(isGlobal, runtime = 'claude', options = {}) {
       let configContent = fs.existsSync(configPath) ? fs.readFileSync(configPath, 'utf-8') : '';
       const eol = detectLineEnding(configContent);
 
-      // Strip ALL prior GSD-managed hook blocks BEFORE migration so the migration
+      // Strip ALL prior pp-core-managed hook blocks BEFORE migration so the migration
       // only touches user-authored hooks, not GSD-owned stale entries. Running
       // strip after migration causes Shape 1 (legacy gsd-update-check filename)
       // to be converted by migration before the strip regex can match it (#2698).
@@ -10848,7 +10962,7 @@ function install(isGlobal, runtime = 'claude', options = {}) {
       configContent = stripStaleGsdHookBlocks(configContent);
 
       // Migrate legacy [hooks] map format and flat [[hooks]] AoT entries to the
-      // namespaced [[hooks.<EVENT>]] form after stripping GSD-managed stale blocks.
+      // namespaced [[hooks.<EVENT>]] form after stripping pp-core-managed stale blocks.
       // Running migration after strip ensures only user-authored hooks are migrated
       // (#2698 regression: migration before strip converts stale GSD blocks before
       // the strip regexes can match their original shape).
@@ -10861,7 +10975,7 @@ function install(isGlobal, runtime = 'claude', options = {}) {
       const codexHooksFeature = ensureCodexHooksFeature(configContent);
       configContent = setManagedCodexHooksOwnership(codexHooksFeature.content, codexHooksFeature.ownership);
 
-      // GSD-managed Codex hook payloads now live in hooks.json to avoid mixed
+      // pp-core-managed Codex hook payloads now live in hooks.json to avoid mixed
       // representation warnings when a single layer contains both hooks.json
       // and inline [hooks] entries. Keep config.toml focused on feature flags
       // and agent metadata.
@@ -11129,7 +11243,7 @@ function install(isGlobal, runtime = 'claude', options = {}) {
           }
         }
         writeSettings(sharedSettingsPath, sharedRaw);
-        console.log(`  ${green}✓${reset} Migrated GSD hook entries from settings.json to settings.local.json (#338)`);
+        console.log(`  ${green}✓${reset} Migrated pp-core hook entries from settings.json to settings.local.json (#338)`);
       }
     }
   }
@@ -11227,7 +11341,7 @@ function install(isGlobal, runtime = 'claude', options = {}) {
     }
   }
 
-  // Register all GSD-managed hook entries into settings.hooks.* for runtimes
+  // Register all pp-core-managed hook entries into settings.hooks.* for runtimes
   // that use the settings.json hook surface (ADR-857 phase 5f-1b).
   // settings is mutated in place by applySettingsJsonHooks.
   applySettingsJsonHooks(settings, {
@@ -11562,7 +11676,7 @@ function handleStatusline(settings, isInteractive, callback) {
     • Context window usage (color-coded)
 
   ${cyan}1${reset}) Keep existing
-  ${cyan}2${reset}) Replace with GSD statusline
+  ${cyan}2${reset}) Replace with pp-core statusline
 `);
 
   rl.question(`  Choice ${dim}[1]${reset}: `, (answer) => {
@@ -12309,6 +12423,8 @@ module.exports = {
     readGsdCommandNames,
     installRuntimeArtifacts,
     installOpencodeFamilySkills,
+    installVerbatimSkills,
+    findParetoSkillsSrc,
     uninstallRuntimeArtifacts,
     parseConfigDirFromArgs,
     cleanupLegacyGsdCc,