diff --git a/group_vars/sukaato.yml b/group_vars/sukaato.yml
index bcff9d6..3807d3b 100644
--- a/group_vars/sukaato.yml
+++ b/group_vars/sukaato.yml
@@ -47,8 +47,6 @@ admins:
           33393834636165386562383435666233313664656233326364616237636230303264363732376639
           64396564366335366430303031323865333635306536346463386334303235386438663061343934
           37376466373566396130366330383834323332626166316661336339346462343466
-# @TODO change 'key' attributes of package entres under 'mngr' section below to 'signkey' 
-# and edit 'roles/init-server/install-pks.yml' accordngly
 # <dict[<str>:<dict>]> package groups
 pkgs:
   # <dict[<str>:<dict>]> representing package groups installed by package manager via repositories
@@ -132,28 +130,49 @@ pkgs:
         types: ~
         suites: ~
         comps: ~
-      # # @TODO troubleshoot radicle installation issue or change installation method for radicle to script
-      # - name: radicle-keyring
-      #   uri: "https://radicle.dev/apt/radicle-archive-keyring.deb"
-      #   sigkey: ~
-      #   sources: ~
-      #   types: ~
-      #   suites: ~
-      #   comps: ~
-      # - name: radicle
-      #   uri: ~
-      #   sigkey: "https://radicle.dev/apt/radicle-archive-keyring.deb"
-      #   sources: "https://radicle.dev/apt"
-      #   types: deb
-      #   suites: release
-      #   comps: main
-      # - name: syncthing
-      #   uri: ~
-      #   sigkey: ~
-      #   sources: ~
-      #   types: ~
-      # suites: ~
-      # comps: ~
+      # @TODO make sure to create handler inclusion of tasks in file under/at `tasks/contingent/pkg` for below
+      - name: ufw
+        uri: ~
+        sigkey: ~
+        sources: ~
+        types: ~
+        suites: ~
+        comps: ~
+      - name: avahi-utils
+        uri: ~
+        sigkey: ~
+        sources: ~
+        types: ~
+        suites: ~
+        comps: ~
+      - name: libpam-google-authenticator
+        uri: ~
+        sigkey: ~
+        sources: ~
+        types: ~
+        suites: ~
+        comps: ~
+      - name: libpam-u2f
+        uri: ~
+        sigkey: ~
+        sources: ~
+        types: ~
+        suites: ~
+        comps: ~
+      - name: pamu2fcfg
+        uri: ~
+        sigkey: ~
+        sources: ~
+        types: ~
+        suites: ~
+        comps: ~
+      - name: pcscd
+        uri: ~
+        sigkey: ~
+        sources: ~
+        types: ~
+        suites: ~
+        comps: ~
     userspace:
       - name: podman
         uri: ~
@@ -313,8 +332,8 @@ pkgs:
   script:
     # <list[<dict>]> representing user-level or supplemental shell script installations
     userspace:
-      - name: nodejs
-        src: "https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.4/install.sh"
+      - name: radicle
+        src: "https://radicle.dev/install"
         pre: ~
         post: ~
       - name: rustup
@@ -334,20 +353,21 @@ pkgs:
     # <list[<dict>]> representing user-level or supplemental source archives
     userspace:
       - name: surge
-        # @NOTE https://github.com/SurgeDM/Surge
         src: "https://github.com/SurgeDM/Surge/releases/download/v0.8.6/Surge_0.8.6_linux_amd64.tar.gz"
         deploy: ~
         pre: ~
         post: ~
+      - name: nvm
+        src: "https://nodejs.org/dist/v24.16.0/node-v24.16.0-linux-x64.tar.xz"
+        deploy: ~
+        pre: ~
+        post: ~
   # <dict[<str>:<dict>]> representing package groups installed from source git repositories
   git_repos:
     userspace:
       - name: quartz
         src: "https://github.com/jackyzha0/quartz.git"
-        src_path: "{{ ansible_facts['user_dir'] }}/repos/"
-        remote: origin
-        branch: main
+        branch: v5.0.0
         deploy: ~
         pre: ~
-        post: ~
-core_pkgs: "{{ (pkgs.mngr.core | default([])) + (pkgs.script.core | default([])) + (pkgs.archive.core | default([])) + (pkgs.git_repos.core | default([])) + (pkgs.containers.core | default([])) + (pkgs.snaps.core | default([])) + (pkgs.flatpaks.core | default([])) }}"
\ No newline at end of file
+        post: ~
\ No newline at end of file