@pareto4/pp-core 1.8.1 → 1.9.0

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "pp-core",
   "displayName": "PP Core",
-  "version": "1.8.1",
+  "version": "1.9.0",
   "description": "PP Core is a meta-prompting, context engineering, and spec-driven development system for AI coding agents.",
   "author": {
     "name": "pareto4",

package/NOTICE

@@ -0,0 +1,23 @@
+pp-core
+=======
+
+pp-core is based on gsd-core by Open GSD.
+
+## Upstream Attribution
+
+Copyright (c) 2026 Open GSD
+
+gsd-core is licensed under the MIT License.
+Source: https://github.com/open-gsd/gsd-core
+npm package: @opengsd/gsd-core @ version 1.5.0
+
+The full text of the MIT License is reproduced in the LICENSE file at the root of
+this repository.
+
+## Fork Information
+
+pp-core is a hard fork of gsd-core v1.5.0, maintained by The Pareto Project.
+It is not affiliated with or endorsed by OpenGSD.
+
+pp-core diverges from gsd-core as of 2026-06-24. The Pareto Project develops and
+maintains pp-core independently; no upstream merges from gsd-core are planned.

package/README.md

@@ -75,6 +75,9 @@ New here? Follow [Your first project](docs/tutorials/your-first-project.md) for
 - [The phase loop](docs/explanation/the-phase-loop.md)
 - [Architecture](docs/ARCHITECTURE.md)
 
+**No lock-in** — pp-core never ships inside the app it helps you build:
+- [Escape hatch](docs/ESCAPE-HATCH.md)
+
 Full index: [docs/README.md](docs/README.md).
 
 ---
@@ -87,10 +90,16 @@ Troubleshooting? See [docs/how-to/recover-and-troubleshoot.md](docs/how-to/recov
 
 ---
 
-## License
+## License & Attribution
 
 MIT License. See [LICENSE](LICENSE) for details.
 
+pp-core is a hard fork of [gsd-core](https://github.com/open-gsd/gsd-core) by
+Open GSD (MIT), rebranded and extended by The Pareto Project. The original
+copyright and permission notice are preserved in [LICENSE](LICENSE), and
+upstream attribution is recorded in [NOTICE](NOTICE) — both files ship in the
+npm package and in every installed footprint.
+
 ---
 
 <div align="center">

package/bin/install.js

@@ -7055,7 +7055,15 @@ function _removeGsdEntries(destDir, kind) {
     return;
   }
   for (const entry of fs.readdirSync(destDir, { withFileTypes: true })) {
-    if (!entry.name.startsWith(kind.prefix)) continue;
+    // Match both the current kind.prefix (now always 'pp-') AND the legacy
+    // 'gsd-' prefix, so a reinstall also prunes stale pre-1.8.0 gsd-<stem>
+    // directories left over from before the pp- rename (#3810/D-13/D-14).
+    // `kind.prefix &&` guards against the empty-string prefix, which is
+    // handled by the whole-namespace early-return above and never reaches
+    // this loop today — defensive only.
+    const matchesCurrentPrefix = kind.prefix && entry.name.startsWith(kind.prefix);
+    const matchesLegacyPrefix = entry.name.startsWith('gsd-');
+    if (!matchesCurrentPrefix && !matchesLegacyPrefix) continue;
     fs.rmSync(path.join(destDir, entry.name), { recursive: true, force: true });
   }
 }
@@ -10434,6 +10442,31 @@ function install(isGlobal, runtime = 'claude', options = {}) {
     }
   }
 
+  // Copy NOTICE (MIT attribution to upstream gsd-core) — the installed
+  // footprint is a distributed copy, so the attribution must travel with it.
+  const noticeSrc = path.join(src, 'NOTICE');
+  const noticeDest = path.join(targetDir, 'pp-core', 'NOTICE');
+  if (fs.existsSync(noticeSrc)) {
+    fs.copyFileSync(noticeSrc, noticeDest);
+    if (verifyFileInstalled(noticeDest, 'NOTICE')) {
+      console.log(`  ${green}✓${reset} Installed NOTICE`);
+    } else {
+      failures.push('NOTICE');
+    }
+  }
+
+  // Copy LICENSE alongside it for the same reason.
+  const licenseSrc = path.join(src, 'LICENSE');
+  const licenseDest = path.join(targetDir, 'pp-core', 'LICENSE');
+  if (fs.existsSync(licenseSrc)) {
+    fs.copyFileSync(licenseSrc, licenseDest);
+    if (verifyFileInstalled(licenseDest, 'LICENSE')) {
+      console.log(`  ${green}✓${reset} Installed LICENSE`);
+    } else {
+      failures.push('LICENSE');
+    }
+  }
+
   // Write VERSION file
   const versionDest = path.join(targetDir, 'pp-core', 'VERSION');
   fs.writeFileSync(versionDest, pkg.version);

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "pp-core",
-  "version": "1.8.1",
+  "version": "1.9.0",
   "description": "PP Core — a meta-prompting, context engineering, and spec-driven development system for AI coding agents. Loads pp-core's operating context into every Gemini CLI session.",
   "contextFileName": "GEMINI.md"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pareto4/pp-core",
-  "version": "1.8.1",
+  "version": "1.9.0",
   "description": "Pareto pp-core — The Pareto Project's AI-assisted engineering framework: meta-prompting, context engineering, and spec-driven development for AI coding agents.",
   "bin": {
     "pp-core": "bin/install.js",
@@ -8,6 +8,8 @@
     "pp_run": "pp-core/bin/pp_run"
   },
   "files": [
+    "LICENSE",
+    "NOTICE",
     "bin",
     "commands",
     "pp-core",
@@ -50,7 +52,7 @@
     "npm": ">=10.0.0"
   },
   "dependencies": {
-    "@anthropic-ai/claude-agent-sdk": "^0.2.84",
+    "@anthropic-ai/claude-agent-sdk": "^0.3.218",
     "ws": "^8.21.0"
   },
   "devDependencies": {
@@ -68,7 +70,8 @@
     "typescript-eslint": "^8.60.0"
   },
   "overrides": {
-    "qs": ">=6.15.2"
+    "qs": ">=6.15.2",
+    "@hono/node-server": ">=2.0.5"
   },
   "optionalDependencies": {
     "fallow": "^2.70.0"
@@ -105,6 +108,8 @@
     "lint:changeset": "node scripts/changeset/lint.cjs",
     "lint:docs": "node scripts/lint-docs-required.cjs",
     "lint:legacy-name": "node scripts/lint-legacy-dir-name.cjs",
+    "rename-guard": "node scripts/verify-rename-guard.cjs",
+    "rename-guard:baseline": "node scripts/verify-rename-guard.cjs --update-baseline",
     "ci:test-scope": "node scripts/ci-test-scope.cjs",
     "size:baseline": "node scripts/update-size-baseline.cjs",
     "changeset": "node scripts/changeset/new.cjs",