sneakoscope 4.6.1 → 4.6.3

package/dist/core/feature-fixtures.js

@@ -76,6 +76,7 @@ const FIXTURES = Object.freeze({
     'cli-commit': fixture('mock', 'sks commit --dry-run', [], 'pass'),
     'cli-commit-and-push': fixture('mock', 'sks commit-and-push --dry-run', [], 'pass'),
     'cli-context7': fixture('real_optional', 'sks context7 check --json', [], 'pass'),
+    'cli-insane-search': fixture('execute', 'sks insane-search doctor --json', [], 'pass'),
     'cli-ultra-search': fixture('execute', 'sks ultra-search doctor --json', [], 'pass'),
     'cli-xai': fixture('real_optional', 'sks xai check --json', [], 'pass'),
     'cli-all-features': fixture('mock', 'sks all-features complete --json', [`.sneakoscope/reports/all-feature-completion-${PACKAGE_VERSION}.json`], 'pass'),
@@ -107,6 +108,8 @@ const FIXTURES = Object.freeze({
     'route-dfix': fixture('execute_and_validate_artifacts', 'sks dfix fixture --json', ['completion-proof.json', 'dfix-gate.json', 'dfix-verification.json'], 'pass'),
     'route-answer': fixture('mock', '$Answer answer-only route policy', [], 'pass'),
     'route-goal': fixture('mock', '$Goal bridge route', ['goal-workflow.json', 'completion-proof.json'], 'pass'),
+    'route-insane-search': fixture('execute', 'sks run "$Insane-Search source intelligence fixture" --execute --json', [], 'pass'),
+    'route-insanesearch': fixture('execute', 'sks run "$InsaneSearch source intelligence fixture" --execute --json', [], 'pass'),
     'route-ultra-search': fixture('execute', 'sks run "$Ultra-Search source intelligence fixture" --execute --json', [], 'pass'),
     'route-ultrasearch': fixture('execute', 'sks run "$UltraSearch source intelligence fixture" --execute --json', [], 'pass'),
     'route-seo-geo-optimizer': fixture('execute_and_validate_artifacts', 'sks seo-geo-optimizer fixture --mode geo --json', ['search-visibility/site-inventory.json', 'search-visibility/geo-findings.json', 'search-visibility/verification-report.json', 'geo-gate.json', 'completion-proof.json'], 'pass'),

package/dist/core/fsx.js

@@ -5,7 +5,7 @@ import os from 'node:os';
 import crypto from 'node:crypto';
 import { spawn } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
-export const PACKAGE_VERSION = '4.6.1';
+export const PACKAGE_VERSION = '4.6.3';
 export const DEFAULT_PROCESS_TAIL_BYTES = 256 * 1024;
 export const DEFAULT_PROCESS_TIMEOUT_MS = 30 * 60 * 1000;
 export function nowIso() {

package/dist/core/init.js

@@ -1068,7 +1068,8 @@ export async function installSkills(root) {
         'reasoning-router': `---\nname: reasoning-router\ndescription: Temporary SKS reasoning-effort routing for every command and pipeline route.\n---\n\nmedium: simple copy/color/discovery/setup/mechanical edits. high: logic, safety, architecture, DB, orchestration, refactor, multi-file work. xhigh: research, AutoResearch, falsification, benchmarks, SEO/GEO, open-ended discovery, and From-Chat-IMG image work-order analysis. Routing is temporary; return to default after the gate. Inspect with sks reasoning and sks pipeline status.\n`,
         'pipeline-runner': `---\nname: pipeline-runner\ndescription: Execute SKS dollar-command routes as stateful pipelines with mission artifacts, route gates, Context7 evidence, temporary reasoning routing, reflection, and Honest Mode.\n---\n\nEvery $ command is a route. Use current.json, mission artifacts, and pipeline-plan.json as the execution plan: it records the lane, skipped stages, kept stages, verification, lean_decision, and no-unrequested-fallback invariant. Use temporary reasoning, TriWiki before stages, source hydration, Context7 when required, Team cleanup before reflection, reflection for full routes, and completion summary plus Honest Mode before final. Surface guard/scopes, record evidence, refresh/pack/validate TriWiki, and check sks pipeline status/resume/plan. ${leanEngineeringCompactText()} ${speedLanePolicyText()} ${skillDreamPolicyText()}\n`,
         'context7-docs': `---\nname: context7-docs\ndescription: Enforce Context7 MCP documentation evidence for SKS routes that depend on external libraries, frameworks, APIs, MCPs, package managers, DB SDKs, or generated docs.\n---\n\nWhen required, resolve-library-id, then query-docs for the resolved id. Legacy get-library-docs evidence is accepted. Prefer sks context7 tools/resolve/docs/evidence and finish only after both evidence stages exist. Check setup with sks context7 check.\n`,
-        'ultra-search': `---\nname: ultra-search\ndescription: Dollar-command route for $Ultra-Search/$UltraSearch provider-independent source intelligence.\n---\n\nUse when the user invokes $Ultra-Search, $UltraSearch, or asks for UltraSearch source intelligence, source acquisition, X-search-style collection, URL acquisition, source normalization, claim ledgers, or citation proof. Prefer \`sks ultra-search doctor --json\` for readiness and \`sks ultra-search run "<query>" --mode balanced --json\` for provider-independent source proof; use \`sks ultra-search x "<query>" --json\` for X-search intent and \`sks ultra-search fetch "<url>" --json\` for URL acquisition. Context7 is required only when the query depends on current package/API/framework/MCP/generated documentation behavior. xAI/Grok credentials are optional and must not be required for route readiness. Evidence/artifacts live under \`.sneakoscope/missions/<ultra-* or route mission>/ultra-search/\`: intent.json, axes.json, query-variants.json, provider-plan.json, source-ledger.json, lead-ledger.json, claim-ledger.json, synthesis.md, ultra-search-proof.json, ultra-search-gate.json, and ultra-search-result.json. Do not turn weak discovery into supported claims; finish with an Honest Mode summary of verified sources, blockers, and unverified external coverage.\n`,
+        'insane-search': `---\nname: insane-search\ndescription: Dollar-command route for $Insane-Search/$InsaneSearch provider-independent source intelligence.\n---\n\nUse when the user invokes $Insane-Search, $InsaneSearch, legacy $Ultra-Search/$UltraSearch, or asks for InsaneSearch source intelligence, source acquisition, X-search-style collection, URL acquisition, source normalization, claim ledgers, or citation proof. Prefer \`sks insane-search doctor --json\` for readiness and \`sks insane-search run "<query>" --mode balanced --json\` for provider-independent source proof; use \`sks insane-search x "<query>" --json\` for X-search intent and \`sks insane-search fetch "<url>" --json\` for URL acquisition. Context7 is required only when the query depends on current package/API/framework/MCP/generated documentation behavior. xAI/Grok credentials are optional and must not be required for route readiness. Evidence/artifacts remain under \`.sneakoscope/missions/<ultra-* or route mission>/ultra-search/\`: intent.json, axes.json, query-variants.json, provider-plan.json, source-ledger.json, lead-ledger.json, claim-ledger.json, synthesis.md, ultra-search-proof.json, ultra-search-gate.json, and ultra-search-result.json. Do not turn weak discovery into supported claims; finish with an Honest Mode summary of verified sources, blockers, and unverified external coverage.\n`,
+        'ultra-search': `---\nname: ultra-search\ndescription: Compatibility alias for $Insane-Search/$InsaneSearch provider-independent source intelligence.\n---\n\nUse when the user invokes legacy $Ultra-Search/$UltraSearch or asks for InsaneSearch source intelligence, source acquisition, X-search-style collection, URL acquisition, source normalization, claim ledgers, or citation proof. Prefer \`sks ultra-search doctor --json\` for readiness and \`sks ultra-search run "<query>" --mode balanced --json\` for provider-independent source proof; use \`sks ultra-search x "<query>" --json\` for X-search intent and \`sks ultra-search fetch "<url>" --json\` for URL acquisition. Context7 is required only when the query depends on current package/API/framework/MCP/generated documentation behavior. xAI/Grok credentials are optional and must not be required for route readiness. Evidence/artifacts live under \`.sneakoscope/missions/<ultra-* or route mission>/ultra-search/\`: intent.json, axes.json, query-variants.json, provider-plan.json, source-ledger.json, lead-ledger.json, claim-ledger.json, synthesis.md, ultra-search-proof.json, ultra-search-gate.json, and ultra-search-result.json. Do not turn weak discovery into supported claims; finish with an Honest Mode summary of verified sources, blockers, and unverified external coverage.\n`,
         'search-visibility-core': `---\nname: search-visibility-core\ndescription: Shared kernel for seo-geo-optimizer audit, plan, explicit apply, rollback, verification, gates, and Completion Proof.\n---\n\nPurpose: keep Search Engine Optimization and Generative Engine Optimization on one typed search-visibility kernel instead of duplicate implementations. Use when $SEO-GEO-OPTIMIZER or \`sks seo-geo-optimizer\` is selected. Workflow: doctor detects package/static/Next evidence; audit writes source-backed inventory and findings; plan compiles safe mutation operations; apply requires explicit \`--apply\`; verify separates source, build, HTTP, browser, production, and measured outcome; rollback only reverses mission-owned operations. Safety: default read-only, never overwrite unmanaged robots.txt, sitemap, llms.txt, metadata, or structured data; do not hard-code customer routes; do not invent prices, reviews, availability, rankings, traffic, or AI citation outcomes. Evidence/artifacts: search-visibility/intake.json, adapter-detection.json, site-inventory.json, route-graph.json, robots-policy.json, structured-data-ledger.json, mutation-plan.json, mutation-journal.jsonl, rollback-manifest.json, verification-report.json, route gate, and completion-proof.json. Failure/recovery: unsupported frameworks stay audit/plan-only; missing production/browser/Search Console evidence remains unverified, not fabricated. CLI entrypoint: \`sks seo-geo-optimizer ... --mode seo|geo\`.\n`,
         'seo-geo-optimizer': `---\nname: seo-geo-optimizer\ndescription: Unified $SEO-GEO-OPTIMIZER route for Search Engine Optimization and Generative Engine Optimization.\n---\n\nPurpose: use one route name for SEO and GEO work while keeping the internal search-visibility mode explicit. Use when: the user asks for SEO audit/fix/verification, package/npm/GitHub search visibility, canonical, sitemap, robots.txt, hreflang, metadata, structured data, AI answer visibility, LLM citation readiness, answerability, entity/claim provenance, crawler policy, OAI-SearchBot/GPTBot/ChatGPT-User, Claude-SearchBot/ClaudeBot/Claude-User, or optional llms.txt planning. GEO means Generative Engine Optimization, not geolocation, GeoIP, maps, CDN geography, location permission, or regional redirect bugs. Workflow: run \`sks seo-geo-optimizer doctor --mode seo|geo\`, then audit, plan, explicit apply, verify, status, and rollback. Use \`--mode seo\` for technical/package search optimization and \`--mode geo\` for entity facts, claim evidence, answerability, crawler policy, and optional llms.txt. Safety: audit and plan must not mutate source; apply checks base hashes, ownership, scope, protected paths, rollback manifest, and post-verify. AI crawler policy must split search, training, user-directed retrieval, and ads/other; never use one allow_ai toggle and never auto-allow training crawlers. Evidence/artifacts: site-inventory.json, route-graph.json, seo-findings.json or geo-findings.json, entity-facts.json, claim-evidence-ledger.json, answerability-report.json, ai-crawler-policy.json, llms-txt-plan.json, mutation-plan.json, verification-report.json, seo-gate.json or geo-gate.json, completion-proof.json. Failure/recovery: unsupported frameworks stay plan-only; browser/production/Search Console/analytics outcomes are marked unverified when not actually run. Forbidden claims: no ranking, indexing, traffic lift, rich-result, answer inclusion, or AI citation guarantee; no keyword stuffing, doorway pages, fake reviews, fake prices, fake availability, fake shipping, fake awards, hidden AI-only text, or scaled spam. CLI entrypoint: \`sks seo-geo-optimizer doctor|audit|plan|apply|verify|status|rollback|fixture --mode seo|geo\`.\n`,
         'reflection': `---\nname: reflection\ndescription: Post-route self-review for full SKS routes that records real misses, gaps, and corrective lessons into TriWiki memory.\n---\n\nUse after full route work/tests and before final. DFix, Answer, Help, Wiki, SKS discovery are exempt. Do not invent faults. Write reflection.md; append real lessons to ${REFLECTION_MEMORY_PATH}; refresh/pack, validate context-pack.json, pass reflection-gate.json.\n\n${reflectionInstructionText()}\n`,

package/dist/core/mad-db/mad-db-coordinator.js

@@ -17,10 +17,10 @@ export async function prepareMadDbMission(input) {
     const blockers = [...target.blockers];
     let profile;
     if (!target.project_ref) {
-        profile = await createMadDbRuntimeProfile({ root: input.root, missionId: id, cycleId, projectRef: 'missing-project-ref', runtimeSessionId });
+        profile = await createMadDbRuntimeProfile({ root: input.root, missionId: id, cycleId, projectRef: 'missing-project-ref', runtimeSessionId, mcpUrl: target.mcp_url });
     }
     else {
-        profile = await createMadDbRuntimeProfile({ root: input.root, missionId: id, cycleId, projectRef: target.project_ref, runtimeSessionId });
+        profile = await createMadDbRuntimeProfile({ root: input.root, missionId: id, cycleId, projectRef: target.project_ref, runtimeSessionId, mcpUrl: target.mcp_url });
     }
     const capability = await createMadDbCapability(input.root, {
         missionId: id,
@@ -54,7 +54,7 @@ export async function prepareMadDbMission(input) {
         command: '$MAD-DB',
         mode: 'MADDB',
         task: input.task,
-        target: { ...target, project_ref: target.project_ref ? `<hash:${target.project_ref_hash}>` : null },
+        target: redactTarget(target),
         capability_file: 'mad-db-capability.json',
         runtime_profile_manifest: 'mad-db/runtime/runtime-profile-manifest.json',
         tool_inventory: toolInventory ? 'mad-db/runtime/tool-inventory.json' : null
@@ -118,6 +118,8 @@ export async function runMadDbCycle(input) {
         await writeJsonAtomic(path.join(missionDir(input.root, prepared.mission_id), 'mad-db', 'runtime', 'tool-inventory.json'), inventory);
         if (!inventory.ok) {
             blockers.push('mad_db_execute_sql_or_apply_migration_unavailable');
+            if (inventory.error_kind)
+                blockers.push(inventory.error_kind);
             throw new Error('mad_db_tool_inventory_failed');
         }
         await activateMadDbCapability(input.root, prepared.mission_id);
@@ -154,6 +156,8 @@ export async function runMadDbCycle(input) {
         });
         if (!execution.ok)
             blockers.push('mad_db_tool_execution_failed');
+        if (!execution.ok && execution.error_kind)
+            blockers.push(execution.error_kind);
         if (execution.ok && input.verifySql) {
             const verifyStart = Date.now();
             readBack = await runReadBackChecks({
@@ -227,10 +231,7 @@ async function clearMadDbCurrentState(root, missionId, ok, restoration) {
 function redactCycleResult(result) {
     return {
         ...result,
-        target: {
-            ...result.target,
-            project_ref: result.target.project_ref ? '<redacted>' : null
-        }
+        target: redactTarget(result.target)
     };
 }
 async function resolveSqlInput(input) {
@@ -252,13 +253,21 @@ async function recreateProfileFromPrepared(root, prepared) {
         profile_path: prepared.runtime_profile.profile_path,
         profile_sha256: prepared.runtime_profile.profile_sha256,
         server_url_redacted: prepared.runtime_profile.server_url_redacted,
-        server_url: `https://mcp.supabase.com/mcp?project_ref=${encodeURIComponent(projectRef)}&features=database`,
+        server_url: prepared.target.mcp_url || `https://mcp.supabase.com/mcp?project_ref=${encodeURIComponent(projectRef)}&features=database`,
+        server_url_source: prepared.target.mcp_url ? 'explicit_mcp_url' : 'generated_project_ref',
         features: ['database'],
         write_capable: true,
         normal_config_hash_before: prepared.runtime_profile.normal_config_hash_before,
         created_at: prepared.runtime_profile.created_at
     };
 }
+function redactTarget(target) {
+    return {
+        ...target,
+        project_ref: target.project_ref ? `<hash:${target.project_ref_hash}>` : null,
+        mcp_url: target.mcp_url ? '<redacted>' : null
+    };
+}
 export async function madDbRouteIdentityProof(root, missionId) {
     const capability = await readMadDbCapability(root, missionId);
     const state = await readJson(path.join(root, '.sneakoscope', 'state', 'current.json'), {});

package/dist/core/mad-db/mad-db-executor.js

@@ -33,10 +33,15 @@ export class MadDbMcpExecutor {
                 execute_sql_available: hasTool(names, 'execute_sql'),
                 apply_migration_available: hasTool(names, 'apply_migration'),
                 duration_ms: Math.round(performance.now() - started),
-                error_digest: null
+                error_digest: null,
+                error_summary: null,
+                error_kind: null,
+                retry_guidance: null
             };
         }
         catch (err) {
+            const summary = summarizeMadDbError(err);
+            const kind = classifyMadDbError(summary);
             return {
                 schema: 'sks.mad-db-tool-inventory.v1',
                 checked_at: nowIso(),
@@ -45,7 +50,10 @@ export class MadDbMcpExecutor {
                 execute_sql_available: false,
                 apply_migration_available: false,
                 duration_ms: Math.round(performance.now() - started),
-                error_digest: sha256(redactError(err)).slice(0, 32)
+                error_digest: sha256(summary).slice(0, 32),
+                error_summary: summary,
+                error_kind: kind,
+                retry_guidance: madDbRetryGuidance(kind)
             };
         }
     }
@@ -77,21 +85,29 @@ export class MadDbMcpExecutor {
                     result_digest: sha256(JSON.stringify(redactToolResult(result))).slice(0, 32),
                     row_count: extractRowCount(result),
                     is_error: result.isError === true,
-                    duration_ms: Math.round(performance.now() - started)
+                    duration_ms: Math.round(performance.now() - started),
+                    error_summary: result.isError === true ? summarizeMadDbToolError(result) : null,
+                    error_kind: result.isError === true ? classifyMadDbError(summarizeMadDbToolError(result)) : null,
+                    retry_guidance: result.isError === true ? madDbRetryGuidance(classifyMadDbError(summarizeMadDbToolError(result))) : null
                 };
             }
             catch (err) {
                 lastError = err;
             }
         }
+        const summary = summarizeMadDbError(lastError);
+        const kind = classifyMadDbError(summary);
         return {
             schema: 'sks.mad-db-tool-result.v1',
             ok: false,
             tool_name: tool,
-            result_digest: sha256(redactError(lastError)).slice(0, 32),
+            result_digest: sha256(summary).slice(0, 32),
             row_count: null,
             is_error: true,
-            duration_ms: 0
+            duration_ms: 0,
+            error_summary: summary,
+            error_kind: kind,
+            retry_guidance: madDbRetryGuidance(kind)
         };
     }
 }
@@ -112,9 +128,45 @@ function authHeaders() {
         return undefined;
     return { Authorization: `Bearer ${token}` };
 }
-function redactError(err) {
+export function summarizeMadDbError(err) {
     const text = err instanceof Error ? `${err.name}:${err.message}` : String(err);
-    return text.replace(/(Bearer\s+)[A-Za-z0-9._~+/=-]+/gi, '$1<redacted>').replace(/(token|password|secret|apikey)=([^&\s]+)/gi, '$1=<redacted>');
+    return redactErrorText(text).slice(0, 1200);
+}
+function summarizeMadDbToolError(result) {
+    return redactErrorText(JSON.stringify(redactToolResult(result))).slice(0, 1200);
+}
+function redactErrorText(text) {
+    return String(text || '')
+        .replace(/(Bearer\s+)[A-Za-z0-9._~+/=-]+/gi, '$1<redacted>')
+        .replace(/(token|password|secret|apikey)=([^&\s]+)/gi, '$1=<redacted>')
+        .replace(/(postgres(?:ql)?:\/\/[^:\s/]+:)([^@\s]+)(@)/gi, '$1<redacted>$3');
+}
+export function classifyMadDbError(summary) {
+    const text = String(summary || '').toLowerCase();
+    if (/read[_ -]?only|read only|permission denied.+read/i.test(text))
+        return 'supabase_mcp_read_only_transport';
+    if (/timeout|timed out|etimedout|i\/o timeout|aborterror|deadline/i.test(text))
+        return 'supabase_sql_plane_timeout';
+    if (/connection terminated|econnreset|unexpected eof|socket hang up|server closed/i.test(text))
+        return 'supabase_sql_plane_connection_interrupted';
+    if (/sasl|password authentication failed|invalid login|authentication failed|sqlstate 28p01/i.test(text))
+        return 'supabase_sql_plane_auth_failed';
+    if (/fetch failed|enotfound|econnrefused|network|dns/i.test(text))
+        return 'supabase_mcp_transport_unreachable';
+    return 'supabase_mcp_tool_error';
+}
+export function madDbRetryGuidance(kind) {
+    if (kind === 'supabase_mcp_read_only_transport')
+        return 'The active MadDB cycle must use the mission-local write-capable MCP URL. Pass --mcp-url or SKS_MAD_DB_MCP_URL if a project-local read-only Supabase MCP config is shadowing the intended transport.';
+    if (kind === 'supabase_sql_plane_timeout')
+        return 'Retry with an explicit Supabase pooler/session/direct MCP transport if available; Supabase CLI docs also support --db-url for CLI migration paths when pooler/direct connectivity differs.';
+    if (kind === 'supabase_sql_plane_connection_interrupted')
+        return 'Treat this as a SQL-plane connectivity interruption, not a DB safety denial. Retry after checking Supabase project health, pooler/direct connection mode, and network reachability.';
+    if (kind === 'supabase_sql_plane_auth_failed')
+        return 'Check SUPABASE_ACCESS_TOKEN and the project/database credentials used by the Supabase MCP server; do not retry destructive SQL until auth is corrected.';
+    if (kind === 'supabase_mcp_transport_unreachable')
+        return 'Check access to https://mcp.supabase.com/mcp or pass a trusted local MCP URL with --mcp-url for the active MadDB cycle.';
+    return 'Inspect error_summary in mad-db-result.json; the failure occurred after MadDB capability gating, so do not report it as a safety-gate denial.';
 }
 function redactToolResult(value) {
     if (value == null)

package/dist/core/mad-db/mad-db-policy-resolver.js

@@ -1,7 +1,7 @@
 import { isMadDbCapabilityActive, readMadDbCapability } from './mad-db-capability.js';
 import { activeMadDbAllowsSqlPlane, isMadDbControlPlaneDeniedTool, madDbOperationClassesFromClassification } from './mad-db-policy.js';
 import { readJson, sha256 } from '../fsx.js';
-import { stateFile } from '../mission.js';
+import { missionsDir, stateFile } from '../mission.js';
 export const MAD_DB_POLICY_DECISION_SCHEMA = 'sks.mad-db-policy-decision.v2';
 export async function resolveMadDbMutationPolicy(root, state = {}, classification = {}, explicitCapability) {
     const primary = await resolveMadDbMutationPolicyForState(root, state, classification, explicitCapability);
@@ -18,8 +18,45 @@ export async function resolveMadDbMutationPolicy(root, state = {}, classificatio
             };
         }
     }
+    const latestCapability = await findLatestActiveMadDbCapability(root);
+    if (latestCapability) {
+        const fallback = await resolveMadDbMutationPolicyForState(root, {
+            mad_db_active: true,
+            mad_db_capability_mission_id: latestCapability.mission_id
+        }, classification, latestCapability);
+        if (fallback.allowed === true) {
+            return {
+                ...fallback,
+                state_source: 'latest_active_mad_db_capability',
+                reasons: [...fallback.reasons, 'mad_db_latest_active_capability_used']
+            };
+        }
+    }
     return primary;
 }
+async function findLatestActiveMadDbCapability(root) {
+    const fs = await import('node:fs/promises');
+    const entries = await fs.readdir(missionsDir(root), { withFileTypes: true }).catch(() => []);
+    const candidates = [];
+    for (const entry of entries) {
+        if (!entry.isDirectory() || !entry.name.startsWith('M-'))
+            continue;
+        const capability = await readMadDbCapability(root, entry.name).catch(() => null);
+        if (!capability || !isMadDbCapabilityActive(capability))
+            continue;
+        const issuedMs = Date.parse(capability.issued_at || '');
+        const expiresMs = Date.parse(capability.expires_at || '');
+        candidates.push({
+            capability,
+            issuedMs: Number.isFinite(issuedMs) ? issuedMs : 0,
+            expiresMs: Number.isFinite(expiresMs) ? expiresMs : 0
+        });
+    }
+    candidates.sort((a, b) => ((a.issuedMs - b.issuedMs)
+        || (a.expiresMs - b.expiresMs)
+        || a.capability.mission_id.localeCompare(b.capability.mission_id)));
+    return candidates.at(-1)?.capability || null;
+}
 async function resolveMadDbMutationPolicyForState(root, state = {}, classification = {}, explicitCapability) {
     const missionId = explicitCapability?.mission_id || state?.mad_db_capability_mission_id || state?.mission_id;
     if (!missionId)

package/dist/core/mad-db/mad-db-policy.js

@@ -168,7 +168,7 @@ Use only when the operator explicitly invokes $MAD-DB/$mad-db or ${commandPrefix
 
 Keep normal Supabase MCP configuration read-only. MadDB must create a mission-local ephemeral write-capable Supabase MCP profile bound to capability v2, project_ref, root, mission, thread/session, intent, runtime profile hash, TTL, and SQL-plane operation classes. Verify execute_sql and apply_migration availability before claiming readiness. Require actual tool results plus independent read-back verification before claiming success. Close/revoke the capability and runtime profile in finally and prove read-only restoration.
 
-Still deny Supabase account/project/billing/credential control-plane actions, credential exfiltration, unrelated storage/edge-function/admin changes, persistent security weakening, and unrequested fallback implementation. Pair with db-safety-guard, Context7 evidence for MCP/API docs, route-local reflection, and Honest Mode.`;
+Still deny Supabase account/project/billing/credential control-plane actions, credential exfiltration, unrelated non-database admin changes, and unrequested fallback implementation. Do not add prompt-only SQL deny lists inside active MadDB; capability binding, SQL-plane scope, operation ledgering, and read-back verification are the approval boundary. Pair with db-safety-guard, Context7 evidence for MCP/API docs, route-local reflection, and Honest Mode.`;
 }
 export function dbSafetyGuardSkillText() {
     return `---
@@ -177,10 +177,11 @@ description: Enforce Sneakoscope Codex database safety before using SQL, Supabas
 ---
 
 Rules:
-- Default mode is read-only: do not run DROP, TRUNCATE, mass DELETE/UPDATE, db reset, db push, project deletion, branch reset/merge/delete, or RLS-disabling operations.
+- Default non-MadDB mode is read-only and routes writes/destructive SQL to the DB safety gate.
 - Supabase MCP must be read-only and project-scoped by default.
 - Live execute_sql writes are blocked unless a bound active MadDB capability v2 is present.
-- Active MadDB is the explicit exception: SQL-plane mutations requested by $MAD-DB or sks mad-db run|exec|apply-migration are allowed and must be executed with read-back verification.
+- Active MadDB is the explicit exception: SQL-plane mutations requested by $MAD-DB or sks mad-db run|exec|apply-migration are allowed, including DROP, DELETE, TRUNCATE, RLS/policy changes, and execute_sql/apply_migration, and must be executed with read-back verification.
+- Default read-only restrictions do not apply to SQL-plane work while the active MadDB capability v2 is bound.
 - Supabase project/account/billing/credential control-plane actions remain denied even in MadDB.
 - If no active bound MadDB cycle exists, fall back to read-only only.`;
 }

package/dist/core/mad-db/mad-db-runtime-profile.js

@@ -5,7 +5,7 @@ import { missionDir } from '../mission.js';
 export async function createMadDbRuntimeProfile(input) {
     const dir = path.join(missionDir(input.root, input.missionId), 'mad-db', 'runtime');
     await fs.mkdir(dir, { recursive: true });
-    const url = madDbMcpUrl(input.projectRef);
+    const url = madDbMcpUrl(input.projectRef, input.mcpUrl);
     const text = [
         '[mcp_servers.supabase_mad_db]',
         `url = "${url}"`,
@@ -26,6 +26,7 @@ export async function createMadDbRuntimeProfile(input) {
         profile_sha256: profileHash,
         server_url_redacted: redactSupabaseUrl(url),
         server_url: url,
+        server_url_source: input.mcpUrl ? 'explicit_mcp_url' : 'generated_project_ref',
         features: ['database'],
         write_capable: true,
         normal_config_hash_before: normalHash,
@@ -74,7 +75,15 @@ export function redactedRuntimeProfile(profile) {
     const { server_url: _serverUrl, ...rest } = profile;
     return rest;
 }
-export function madDbMcpUrl(projectRef) {
+export function madDbMcpUrl(projectRef, explicitUrl) {
+    if (explicitUrl) {
+        const parsed = new URL(explicitUrl);
+        if (projectRef && !parsed.searchParams.get('project_ref'))
+            parsed.searchParams.set('project_ref', projectRef);
+        parsed.searchParams.set('features', 'database');
+        parsed.searchParams.delete('read_only');
+        return parsed.toString();
+    }
     const params = new URLSearchParams();
     params.set('project_ref', projectRef);
     params.set('features', 'database');

package/dist/core/mad-db/mad-db-target.js

@@ -1,10 +1,13 @@
 import path from 'node:path';
 import { exists, readText, sha256 } from '../fsx.js';
+import { redactSupabaseUrl } from './mad-db-runtime-profile.js';
 export async function resolveMadDbTarget(root, input = {}) {
     const args = input.args || [];
     const explicit = input.projectRef || readOption(args, '--project-ref', '') || process.env.SKS_MAD_DB_PROJECT_REF || process.env.SKS_MAD_DB_E2E_PROJECT_REF || '';
     const candidates = explicit ? [explicit] : await projectRefCandidates(root);
     const projectRef = explicit || (candidates.length === 1 ? candidates[0] || '' : '');
+    const explicitMcpUrl = readOption(args, '--mcp-url', '') || process.env.SKS_MAD_DB_MCP_URL || process.env.SKS_MAD_DB_SUPABASE_MCP_URL || '';
+    const normalizedMcp = normalizeExplicitMcpUrl(explicitMcpUrl, projectRef || null);
     const target = normalizeTarget(input.target || readOption(args, '--target', '') || process.env.SKS_MAD_DB_TARGET || process.env.SKS_MAD_DB_E2E_TARGET || 'production');
     const allowedSchemas = input.allowedSchemas?.length
         ? input.allowedSchemas
@@ -12,10 +15,16 @@ export async function resolveMadDbTarget(root, input = {}) {
     const blockers = [];
     if (!projectRef)
         blockers.push(candidates.length > 1 ? 'mad_db_project_ref_ambiguous' : 'mad_db_project_ref_missing');
+    if (normalizedMcp.blocker)
+        blockers.push(normalizedMcp.blocker);
     return {
         schema: 'sks.mad-db-target.v1',
         project_ref: projectRef || null,
         project_ref_hash: projectRef ? sha256(projectRef).slice(0, 16) : null,
+        mcp_url: normalizedMcp.url,
+        mcp_url_hash: normalizedMcp.url ? sha256(normalizedMcp.url).slice(0, 16) : null,
+        mcp_url_redacted: normalizedMcp.url ? redactSupabaseUrl(normalizedMcp.url) : null,
+        mcp_url_source: normalizedMcp.url ? 'explicit_or_environment' : 'default_generated',
         target_environment: target,
         allowed_schemas: allowedSchemas.length ? allowedSchemas : ['public'],
         source: explicit ? 'explicit_or_environment' : candidates.length === 1 ? 'managed_config_single_candidate' : 'unresolved',
@@ -23,6 +32,28 @@ export async function resolveMadDbTarget(root, input = {}) {
         candidates: candidates.map((candidate) => `${sha256(candidate).slice(0, 8)}:${candidate.slice(0, 2)}...`)
     };
 }
+function normalizeExplicitMcpUrl(value, projectRef) {
+    if (!value)
+        return { url: null, blocker: null };
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        return { url: null, blocker: 'mad_db_mcp_url_invalid' };
+    }
+    const isSupabaseRemote = parsed.protocol === 'https:' && parsed.hostname === 'mcp.supabase.com' && parsed.pathname === '/mcp';
+    const isLocalMcp = parsed.protocol === 'http:' && /^localhost$|^127\.0\.0\.1$/.test(parsed.hostname) && parsed.pathname.endsWith('/mcp');
+    if (!isSupabaseRemote && !isLocalMcp)
+        return { url: null, blocker: 'mad_db_mcp_url_untrusted_host' };
+    if (parsed.searchParams.get('read_only') === 'true')
+        return { url: null, blocker: 'mad_db_mcp_url_read_only_conflict' };
+    if (projectRef && !parsed.searchParams.get('project_ref'))
+        parsed.searchParams.set('project_ref', projectRef);
+    parsed.searchParams.set('features', 'database');
+    parsed.searchParams.delete('read_only');
+    return { url: parsed.toString(), blocker: null };
+}
 export async function projectRootHash(root) {
     return sha256(path.resolve(root)).slice(0, 24);
 }

package/dist/core/release-parallel-full-coverage.js

@@ -17,7 +17,7 @@ export const RELEASE_1_17_GATE_SNAPSHOT = Object.freeze([
     'release:readiness'
 ]);
 export const RELEASE_1_18_REQUIRED_GATES = Object.freeze([
-    'ultra-search:provider-interface',
+    'insane-search:provider-interface',
     'source-intelligence:policy',
     'source-intelligence:all-modes',
     'codex-web:adapter',

package/dist/core/routes.js

@@ -32,7 +32,7 @@ export const FROM_CHAT_IMG_CHECKLIST_ARTIFACT = 'from-chat-img-checklist.md';
 export const FROM_CHAT_IMG_TEMP_TRIWIKI_ARTIFACT = 'from-chat-img-temp-triwiki.json';
 export const FROM_CHAT_IMG_QA_LOOP_ARTIFACT = 'from-chat-img-qa-loop.json';
 export const FROM_CHAT_IMG_TEMP_TRIWIKI_SESSIONS = 5;
-export const USAGE_TOPICS = 'install|setup|bootstrap|root|deps|zellij|tmux|auto-review|team|qa-loop|ppt|image-ux-review|computer-use|goal|fast-mode|research|seo-geo-optimizer|db|git|codex|codex-app|codex-native|hooks|features|all-features|dfix|commit|commit-and-push|design|imagegen|dollar|context7|ultra-search|xai|pipeline|reasoning|guard|conflicts|versioning|eval|harness|hproof|gx|wiki|wrongness|code-structure|proof-field|skill-dream|rust';
+export const USAGE_TOPICS = 'install|setup|bootstrap|root|deps|zellij|tmux|auto-review|team|qa-loop|ppt|image-ux-review|computer-use|goal|fast-mode|research|seo-geo-optimizer|db|git|codex|codex-app|codex-native|hooks|features|all-features|dfix|commit|commit-and-push|design|imagegen|dollar|context7|insane-search|ultra-search|xai|pipeline|reasoning|guard|conflicts|versioning|eval|harness|hproof|gx|wiki|wrongness|code-structure|proof-field|skill-dream|rust';
 export const CODEX_COMPUTER_USE_EVIDENCE_SOURCE = 'codex_computer_use';
 export const CODEX_IN_APP_BROWSER_EVIDENCE_SOURCE = 'codex_in_app_browser';
 export const CODEX_CHROME_EXTENSION_EVIDENCE_SOURCE = 'codex_chrome_extension';
@@ -541,19 +541,19 @@ export const ROUTES = [
         examples: ['$Research investigate this idea']
     },
     {
-        id: 'UltraSearch',
-        command: '$Ultra-Search',
+        id: 'InsaneSearch',
+        command: '$Insane-Search',
         mode: 'ULTRA_SEARCH',
         route: 'provider-independent source intelligence',
-        description: 'Run UltraSearch source acquisition, source normalization, claim/proof ledgers, and provider-independent citation evidence without requiring xAI/Grok.',
-        requiredSkills: ['ultra-search', 'pipeline-runner', 'context7-docs', 'honest-mode'],
-        dollarAliases: ['$UltraSearch'],
+        description: 'Run InsaneSearch source acquisition, source normalization, claim/proof ledgers, and provider-independent citation evidence without requiring xAI/Grok.',
+        requiredSkills: ['insane-search', 'pipeline-runner', 'context7-docs', 'honest-mode'],
+        dollarAliases: ['$InsaneSearch', '$Ultra-Search', '$UltraSearch'],
         lifecycle: ['source_intent', 'query_variants', 'provider_plan', 'source_ledgers', 'claim_ledgers', 'ultra_search_gate', 'honest_mode'],
         context7Policy: 'if_external_docs',
         reasoningPolicy: 'high',
         stopGate: 'ultra-search/ultra-search-gate.json',
-        cliEntrypoint: 'sks ultra-search doctor|run|x|fetch|status|inspect|sources|claims|cache|bench|migrate-xai',
-        examples: ['$Ultra-Search run "current package release notes"', '$UltraSearch x "site:x.com product launch"']
+        cliEntrypoint: 'sks insane-search doctor|run|x|fetch|status|inspect|sources|claims|cache|bench|migrate-xai',
+        examples: ['$Insane-Search run "current package release notes"', '$InsaneSearch x "site:x.com product launch"']
     },
     {
         id: 'SEOGEOOptimizer',
@@ -721,8 +721,9 @@ export const COMMAND_CATALOG = [
     { name: 'image-ux-review', usage: 'sks ux-review run --image <path> --fix --json | sks image-ux-review status <mission-id|latest> [--json]', description: 'Run or inspect $Image-UX-Review gpt-image-2/imagegen annotated UI/UX review artifacts, issue ledgers, safe fix loops, recapture, and proof gates.' },
     { name: 'computer-use', usage: 'sks computer-use import|status|smoke|require ... [--json]', description: 'Record native Mac/non-web Computer Use visual evidence while keeping web verification on the Chrome Extension path.' },
     { name: 'context7', usage: 'sks context7 check|setup|tools|resolve|docs|evidence ...', description: 'Check, configure, and call the local Context7 MCP requirement.' },
-    { name: 'ultra-search', usage: 'sks ultra-search doctor|run|x|fetch|status|inspect|sources|claims|cache|bench|migrate-xai', description: 'Run provider-independent UltraSearch source intelligence.' },
-    { name: 'xai', usage: 'sks xai check|status|docs', description: 'Deprecated compatibility notice; use sks ultra-search.' },
+    { name: 'insane-search', usage: 'sks insane-search doctor|run|x|fetch|status|inspect|sources|claims|cache|bench|migrate-xai', description: 'Run provider-independent InsaneSearch source intelligence.' },
+    { name: 'ultra-search', usage: 'compatibility alias for sks insane-search', description: 'Deprecated compatibility alias; use sks insane-search.' },
+    { name: 'xai', usage: 'sks xai check|status|docs', description: 'Deprecated compatibility notice; use sks insane-search.' },
     { name: 'recallpulse', usage: 'sks recallpulse run|status|eval|governance|checklist <mission-id|latest>', description: 'Run report-only RecallPulse active recall, durable status, proof capsule, evidence envelope, and governance checks.' },
     { name: 'pipeline', usage: 'sks pipeline status|resume|plan|answer ...', description: 'Inspect the active skill-first route, materialized execution plan, ambiguity gates, and completion gates.' },
     { name: 'guard', usage: 'sks guard check [--json]', description: 'Check SKS harness self-protection lock, fingerprints, and source-repo exception state.' },
@@ -899,7 +900,7 @@ export function looksLikeGenerativeEngineOptimizationRequest(prompt = '') {
 }
 export function looksLikeUltraSearchRequest(prompt = '') {
     const text = String(prompt || '');
-    return /\b(?:UltraSearch|Ultra-Search|ultra\s*search|source\s+intelligence|provider-independent\s+source|source\s+acquisition|citation\s+proof|x-search)\b|울트라\s*서치|소스\s*인텔리전스/i.test(text);
+    return /\b(?:InsaneSearch|Insane-Search|insane\s*search|UltraSearch|Ultra-Search|ultra\s*search|source\s+intelligence|provider-independent\s+source|source\s+acquisition|citation\s+proof|x-search)\b|인세인\s*서치|울트라\s*서치|소스\s*인텔리전스/i.test(text);
 }
 export function routePrompt(prompt) {
     const text = stripVisibleDecisionAnswerBlocks(prompt);
@@ -949,7 +950,7 @@ export function routePrompt(prompt) {
     if (/\b(qa[-\s]?loop|qaloop|e2e\s+qa|qa\s+e2e)\b/i.test(text))
         return routeById('QALoop');
     if (looksLikeUltraSearchRequest(text) && !looksLikeCodeChangingWork(text) && !looksLikeAnswerOnlyRequest(text))
-        return routeById('UltraSearch');
+        return routeById('InsaneSearch');
     if (looksLikeGenerativeEngineOptimizationRequest(text))
         return routeById('SEOGEOOptimizer');
     if (looksLikeSeoRequest(text))
@@ -1051,7 +1052,7 @@ export function routeRequiresSubagents(route, prompt = '') {
         return false;
     if (route.id === 'ImageUXReview')
         return false;
-    if (route.id === 'UltraSearch')
+    if (route.id === 'InsaneSearch')
         return false;
     if (route.id === 'SEOGEOOptimizer')
         return false;
@@ -1137,7 +1138,7 @@ export function routeReasoning(route, prompt = '') {
         return teamRouteReasoning(text);
     if (route?.id === 'Research' || route?.id === 'AutoResearch')
         return reasoning('xhigh', 'research_or_experiment_route');
-    if (route?.id === 'UltraSearch')
+    if (route?.id === 'InsaneSearch')
         return reasoning('high', 'source_intelligence_route');
     if (route?.id === 'SEOGEOOptimizer')
         return reasoning('high', 'search_visibility_route');

package/dist/core/update-check.js

@@ -389,7 +389,7 @@ export async function detectEffectiveSksVersion(options = {}) {
     const pathCandidate = candidates.find((candidate) => candidate.source.startsWith('PATH:'))?.version || null;
     const npmGlobalCandidate = candidates.find((candidate) => candidate.source.startsWith('npm-global:'))?.version || null;
     const packageRootCandidate = candidates.find((candidate) => candidate.source === 'packageRoot:package.json')?.version || null;
-    const current = highestPackageVersion(candidates.map((candidate) => candidate.version));
+    const current = effectiveInstalledVersion(candidates);
     return {
         current,
         runtime_current: PACKAGE_VERSION,
@@ -533,6 +533,16 @@ function updateNowError(install, newBinary, newVersionDoctor, migrationCurrent)
         return 'project update migration receipt was not current';
     return 'update failed';
 }
+function effectiveInstalledVersion(candidates) {
+    const firstBySource = (source) => candidates.find((candidate) => candidate.source === source)?.version || null;
+    const firstByPrefix = (prefix) => candidates.find((candidate) => candidate.source.startsWith(prefix))?.version || null;
+    return firstBySource('env:SKS_INSTALLED_SKS_VERSION')
+        || firstByPrefix('npm-global:')
+        || firstByPrefix('PATH:')
+        || firstBySource('runtime')
+        || firstBySource('packageRoot:package.json')
+        || highestPackageVersion(candidates.map((candidate) => candidate.version));
+}
 function highestPackageVersion(versions) {
     return versions
         .filter((version) => typeof version === 'string' && version.length > 0)

package/dist/core/version.js

@@ -1,2 +1,2 @@
-export const PACKAGE_VERSION = '4.6.1';
+export const PACKAGE_VERSION = '4.6.3';
 //# sourceMappingURL=version.js.map

package/dist/scripts/mad-db-direct-apply-migration-hook-check.js

@@ -46,5 +46,28 @@ assertGate(decision.mad_db.operation_classes.includes('migration_apply'), 'direc
 assertGate(decision.mad_db.state_source === 'persisted_sks_state', 'drifted hook payload state must fall back to persisted SKS MadDB state', decision);
 assertGate(updated?.counters.reserved === 1, 'direct apply_migration reservation must land on the real MadDB mission capability', updated || {});
 assertGate(wrongMissionDirExists === false, 'direct apply_migration must not create or write under the drifted payload mission id');
-emitGate('mad-db:direct-apply-migration-hook', { mission_id: mission.id, operation_id: decision.mad_db.operation_id, counters: updated?.counters });
+const unrelatedMission = await createMission(root, { mode: 'team', prompt: 'unrelated current-state drift fixture' });
+const unrelatedStateFromCodex = { mission_id: unrelatedMission.id, mode: 'TEAM', phase: 'TOOL_CALL' };
+const executeDecision = await checkDbOperation(root, unrelatedStateFromCodex, {
+    tool_name: 'mcp__supabase__execute_sql',
+    tool_call_id: 'direct-execute-sql-drop-delete-call',
+    tool_input: {
+        query: 'drop table if exists public.fixture_old; delete from public.fixture;'
+    }
+});
+const afterExecute = await readMadDbCapability(root, mission.id);
+const unrelatedOperationsDir = path.join(missionDir(root, unrelatedMission.id), 'mad-db', 'runtime', 'operations');
+assertGate(executeDecision.allowed === true && executeDecision.mad_db?.active === true, 'active MadDB capability must allow direct execute_sql after current state drifts away from MadDB', executeDecision);
+assertGate(executeDecision.mad_db.state_source === 'latest_active_mad_db_capability', 'direct execute_sql must fall back to the latest active MadDB capability when persisted state is unrelated', executeDecision);
+for (const operation of ['direct_execute_sql', 'drop', 'all_row_delete']) {
+    assertGate(executeDecision.mad_db.operation_classes.includes(operation), `direct execute_sql destructive SQL must reserve ${operation}`, executeDecision);
+}
+assertGate(afterExecute?.counters.reserved === 2, 'direct execute_sql reservation must land on the real MadDB mission capability', afterExecute || {});
+assertGate(fs.existsSync(unrelatedOperationsDir) === false, 'direct execute_sql must not write operation lifecycle files under the unrelated current mission');
+emitGate('mad-db:direct-apply-migration-hook', {
+    mission_id: mission.id,
+    apply_operation_id: decision.mad_db.operation_id,
+    execute_operation_id: executeDecision.mad_db.operation_id,
+    counters: afterExecute?.counters
+});
 //# sourceMappingURL=mad-db-direct-apply-migration-hook-check.js.map

package/dist/scripts/mad-db-skill-policy-snapshot-check.js

@@ -9,6 +9,10 @@ for (const token of ['table/schema DROP', 'all-row mutations', 'TRUNCATE', 'exec
 }
 assertGate(dbSafetySkill.includes('Active MadDB is the explicit exception'), 'db safety skill must name active MadDB exception', { dbSafetySkill });
 assertGate(!madDbSkill.includes('Keep catastrophic safeguards active: whole database/schema/table removal'), 'MadDB skill must not carry old destructive-operation denial text', { madDbSkill });
+assertGate(!madDbSkill.includes('persistent security weakening'), 'MadDB skill must not carry prompt-only SQL-plane denial text', { madDbSkill });
+assertGate(madDbSkill.includes('Do not add prompt-only SQL deny lists inside active MadDB'), 'MadDB skill must prevent SQL-plane prompt veto lists', { madDbSkill });
+assertGate(!dbSafetySkill.includes('do not run DROP'), 'db safety skill must not conflict with active MadDB SQL-plane allowance', { dbSafetySkill });
+assertGate(dbSafetySkill.includes('Default read-only restrictions do not apply to SQL-plane work while the active MadDB capability v2 is bound'), 'db safety skill must explicitly remove default restrictions during active MadDB', { dbSafetySkill });
 assertGate(initText.includes('madDbSkillText()') && initText.includes('dbSafetyGuardSkillText()'), 'init must generate skills from typed MadDB policy SSOT', {});
 assertGate(MAD_DB_POLICY.active_mode.sql_plane === 'allow_all_mutations' && MAD_DB_POLICY.normal_supabase_mcp.read_only_required === true, 'typed policy must encode active SQL-plane and normal read-only modes', MAD_DB_POLICY);
 emitGate('mad-db:skill-policy', { schema: MAD_DB_POLICY.schema, operation_classes: MAD_DB_POLICY.sql_plane_allowed.length });