sneakoscope 4.6.1 → 4.6.3

package/dist/scripts/mad-db-supabase-transport-diagnostics-check.js

@@ -0,0 +1,47 @@
+#!/usr/bin/env node
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { createMission } from '../core/mission.js';
+import { classifyMadDbError, madDbRetryGuidance, summarizeMadDbError } from '../core/mad-db/mad-db-executor.js';
+import { createMadDbRuntimeProfile, madDbMcpUrl } from '../core/mad-db/mad-db-runtime-profile.js';
+import { resolveMadDbTarget } from '../core/mad-db/mad-db-target.js';
+import { assertGate, emitGate } from './sks-1-18-gate-lib.js';
+const timeoutSummary = summarizeMadDbError(new Error('failed to connect to postgres: dial tcp 1.2.3.4:6543: i/o timeout token=secret-token'));
+assertGate(classifyMadDbError(timeoutSummary) === 'supabase_sql_plane_timeout', 'timeout errors must be classified as SQL-plane timeout', { timeoutSummary });
+assertGate(!timeoutSummary.includes('secret-token'), 'error summary must redact token query values', { timeoutSummary });
+assertGate(madDbRetryGuidance('supabase_sql_plane_timeout').includes('--db-url'), 'timeout guidance should mention explicit db-url fallback evidence from Supabase CLI docs');
+const readOnlyKind = classifyMadDbError('MCP server denied apply_migration because this connection is read only');
+assertGate(readOnlyKind === 'supabase_mcp_read_only_transport', 'read-only transport errors must be separated from SQL-plane connectivity', { readOnlyKind });
+const root = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-mad-db-transport-'));
+await fs.mkdir(path.join(root, '.codex'), { recursive: true });
+await fs.writeFile(path.join(root, '.codex', 'config.toml'), '[mcp_servers.supabase]\nurl = "https://mcp.supabase.com/mcp?project_ref=localref&read_only=true&features=database,docs"\n', 'utf8');
+const target = await resolveMadDbTarget(root, {
+    args: ['--project-ref', 'explicitref', '--mcp-url', 'https://mcp.supabase.com/mcp?features=docs']
+});
+assertGate(target.blockers.length === 0, 'explicit trusted MCP URL without read_only should be accepted', target);
+assertGate(target.mcp_url?.includes('project_ref=explicitref'), 'explicit MCP URL should inherit project_ref when omitted', target);
+assertGate(target.mcp_url?.includes('features=database'), 'explicit MCP URL should force database feature for MadDB SQL-plane execution', target);
+assertGate(!target.mcp_url?.includes('read_only=true'), 'active MadDB explicit MCP URL must not remain read-only', target);
+const conflict = await resolveMadDbTarget(root, {
+    args: ['--project-ref', 'explicitref', '--mcp-url', 'https://mcp.supabase.com/mcp?read_only=true']
+});
+assertGate(conflict.blockers.includes('mad_db_mcp_url_read_only_conflict'), 'read-only explicit MCP URL must be rejected in active MadDB', conflict);
+const mission = await createMission(root, { mode: 'mad-db', prompt: 'transport diagnostics fixture' });
+const profile = await createMadDbRuntimeProfile({
+    root,
+    missionId: mission.id,
+    cycleId: 'cycle-fixture',
+    projectRef: 'explicitref',
+    runtimeSessionId: 'session-fixture',
+    mcpUrl: target.mcp_url
+});
+assertGate(profile.server_url_source === 'explicit_mcp_url', 'runtime profile must record explicit MCP URL source', profile);
+assertGate(profile.server_url === target.mcp_url, 'runtime profile must use normalized explicit MCP URL', { profile, target });
+assertGate(madDbMcpUrl('abc123') === 'https://mcp.supabase.com/mcp?project_ref=abc123&features=database', 'generated MCP URL should stay project scoped and database-feature scoped');
+emitGate('mad-db:supabase-transport-diagnostics', {
+    timeout_kind: classifyMadDbError(timeoutSummary),
+    read_only_kind: readOnlyKind,
+    mcp_url_source: profile.server_url_source
+});
+//# sourceMappingURL=mad-db-supabase-transport-diagnostics-check.js.map

package/dist/scripts/release-metadata-1-19-check.js

@@ -97,7 +97,7 @@ const requiredScripts = [
     'agent:janitor',
     'agent:multi-project-isolation',
     'verification:parallel-engine',
-    'ultra-search:provider-interface',
+    'insane-search:provider-interface',
     'source-intelligence:policy',
     'source-intelligence:all-modes',
     'codex-web:adapter',

package/dist/scripts/release-parallel-check.js

@@ -34,9 +34,9 @@ const tasks = [
     task('agent:janitor', 'npm run agent:janitor --silent', { dependencies: ['build'] }),
     task('agent:multi-project-isolation', 'npm run agent:multi-project-isolation --silent', { dependencies: ['build'] }),
     task('verification:parallel-engine', 'npm run verification:parallel-engine --silent', { dependencies: ['build'] }),
-    task('ultra-search:provider-interface', 'npm run ultra-search:provider-interface --silent', { dependencies: ['build'] }),
+    task('insane-search:provider-interface', 'npm run insane-search:provider-interface --silent', { dependencies: ['build'] }),
     task('source-intelligence:policy', 'npm run source-intelligence:policy --silent', { dependencies: ['build'] }),
-    task('source-intelligence:all-modes', 'npm run source-intelligence:all-modes --silent', { dependencies: ['build', 'source-intelligence:policy', 'ultra-search:provider-interface', 'codex-web:adapter'] }),
+    task('source-intelligence:all-modes', 'npm run source-intelligence:all-modes --silent', { dependencies: ['build', 'source-intelligence:policy', 'insane-search:provider-interface', 'codex-web:adapter'] }),
     task('codex-web:adapter', 'npm run codex-web:adapter --silent', { dependencies: ['build'] }),
     task('seo:cli-blackbox', 'npm run seo:cli-blackbox --silent', { dependencies: ['build'] }),
     task('seo:audit-fixture', 'npm run seo:audit-fixture --silent', { dependencies: ['build'] }),

package/dist/scripts/release-parallel-full-coverage-check.js

@@ -6,7 +6,7 @@ import { assertGate, emitGate, importDist, packageScripts, root } from './sks-1-
 const mod = await importDist('core/release-parallel-full-coverage.js');
 const pkgScripts = packageScripts();
 const parallelSource = fs.readFileSync(path.join(root, 'src/scripts/release-parallel-check.ts'), 'utf8');
-const current = [...new Set(Object.keys(pkgScripts).filter((name) => parallelSource.includes(name)).concat(Object.keys(pkgScripts).filter((name) => /^ultra-search|^source-intelligence|^codex-web|^goal-mode|^agent:main-no-scout|^agent:worker-scout-limited|^agent:background-terminals|^agent:zellij-runtime|^agent:visual-consistency|^release:parallel-full-coverage|^priority:full-closure/.test(name))))];
+const current = [...new Set(Object.keys(pkgScripts).filter((name) => parallelSource.includes(name)).concat(Object.keys(pkgScripts).filter((name) => /^insane-search|^ultra-search|^source-intelligence|^codex-web|^goal-mode|^agent:main-no-scout|^agent:worker-scout-limited|^agent:background-terminals|^agent:zellij-runtime|^agent:visual-consistency|^release:parallel-full-coverage|^priority:full-closure/.test(name))))];
 const report = mod.evaluateReleaseParallelFullCoverage(current);
 assertGate(report.ok === true, 'release parallel DAG must preserve previous gates and include 1.18 gates', report);
 emitGate('release:parallel-full-coverage', { previous_gate_count: report.previous_gate_count, current_gate_count: report.current_gate_count });

package/dist/scripts/release-readiness-report.js

@@ -103,7 +103,7 @@ const checks = {
     computer_use_live_evidence: scriptContains('release:check', 'computer-use:live-evidence'),
     docs_truthfulness: scriptContains('release:check', 'docs:truthfulness'),
     release_readiness: scriptContains('release:check:parallel', 'release:readiness'),
-    ultra_search_provider_interface: scriptContains('release:check:parallel', 'ultra-search:provider-interface'),
+    insane_search_provider_interface: scriptContains('release:check:parallel', 'insane-search:provider-interface'),
     source_intelligence_policy: scriptContains('release:check:parallel', 'source-intelligence:policy'),
     source_intelligence_all_modes: scriptContains('release:check:parallel', 'source-intelligence:all-modes'),
     codex_web_adapter: scriptContains('release:check:parallel', 'codex-web:adapter'),

package/dist/scripts/ultra-search-provider-interface-check.js

@@ -18,7 +18,7 @@ assertGate(result.proof.provider_independent === true, 'UltraSearch proof must b
 assertGate(result.proof.xai_runtime_dependency === false, 'UltraSearch must not require xAI runtime', result.proof);
 assertGate(result.sources.some((source) => source.acquisition_verdict === 'verified_content'), 'UltraSearch must normalize verified source evidence', result.sources);
 assertGate(result.convergence.schema === 'sks.ultra-search-convergence.v1', 'UltraSearch convergence artifact must be typed', result.convergence);
-emitGate('ultra-search:provider-interface', {
+emitGate('insane-search:provider-interface', {
     mode: result.mode,
     sources: result.sources.length,
     verified: result.proof.verified_source_count,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "4.6.1",
+  "version": "4.6.3",
   "description": "Sneakoscope Codex: fast proof-first Codex trust layer with image-based Voxel TriWiki.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",
@@ -496,7 +496,8 @@
     "mcp:readonly-runtime-scheduler": "node ./dist/scripts/mcp-readonly-runtime-scheduler-check.js",
     "codex:0.134-runner-truth": "node ./dist/scripts/codex-0-134-runner-truth-check.js",
     "source-intelligence:policy": "node ./dist/scripts/source-intelligence-policy-check.js",
-    "ultra-search:provider-interface": "node ./dist/scripts/ultra-search-provider-interface-check.js",
+    "insane-search:provider-interface": "node ./dist/scripts/ultra-search-provider-interface-check.js",
+    "ultra-search:provider-interface": "npm run insane-search:provider-interface --silent",
     "context7:evidence-dedupe": "node ./dist/scripts/context7-evidence-dedupe-check.js",
     "source-intelligence:codex-history-search": "node ./dist/scripts/codex-history-search-check.js",
     "source-intelligence:all-modes": "node ./dist/scripts/source-intelligence-all-modes-check.js",
@@ -744,6 +745,7 @@
     "mad-db:runtime-profile": "node ./dist/scripts/mad-db-runtime-profile-lifecycle-check.js",
     "mad-db:skill-policy": "node ./dist/scripts/mad-db-skill-policy-snapshot-check.js",
     "mad-db:policy-v2": "node ./dist/scripts/mad-db-policy-v2-check.js",
+    "mad-db:supabase-transport-diagnostics": "node ./dist/scripts/mad-db-supabase-transport-diagnostics-check.js",
     "release:speed-summary": "node ./dist/scripts/release-speed-summary-check.js",
     "release:speed-summary:check": "node ./dist/scripts/release-speed-summary-check.js",
     "naruto:ssot-routing": "node ./dist/scripts/naruto-ssot-routing-check.js",
@@ -777,7 +779,7 @@
     "mad-db:lifecycle-hook-decision": "node ./dist/scripts/mad-db-lifecycle-hook-decision-check.js",
     "mad-db:mcp-result-lifecycle": "node ./dist/scripts/mad-db-mcp-result-lifecycle-check.js",
     "mad-db:operation-lifecycle-blackbox": "node ./dist/scripts/mad-db-operation-lifecycle-blackbox.js",
-    "mad-db:unit": "npm run mad-db:capability && npm run mad-db:command && npm run mad-db:mad-command && npm run mad-db:priority-resolver && npm run mad-db:ledger && npm run mad-db:one-cycle-consumption && npm run mad-db:safety-conflict-matrix && npm run mad-db:one-cycle-bounded && npm run mad-db:operation-lifecycle-ledger && npm run mad-db:route-identity && npm run mad-db:hook-idempotency && npm run mad-db:direct-apply-migration-hook && npm run mad-db:parallel-lifecycle && npm run mad-db:runtime-profile && npm run mad-db:skill-policy && npm run mad-db:policy-v2 && npm run mad-db:lifecycle-hook-decision && npm run mad-db:mcp-result-lifecycle && npm run mad-db:operation-lifecycle-blackbox",
+    "mad-db:unit": "npm run mad-db:capability && npm run mad-db:command && npm run mad-db:mad-command && npm run mad-db:priority-resolver && npm run mad-db:ledger && npm run mad-db:one-cycle-consumption && npm run mad-db:safety-conflict-matrix && npm run mad-db:one-cycle-bounded && npm run mad-db:operation-lifecycle-ledger && npm run mad-db:route-identity && npm run mad-db:hook-idempotency && npm run mad-db:direct-apply-migration-hook && npm run mad-db:parallel-lifecycle && npm run mad-db:runtime-profile && npm run mad-db:skill-policy && npm run mad-db:policy-v2 && npm run mad-db:supabase-transport-diagnostics && npm run mad-db:lifecycle-hook-decision && npm run mad-db:mcp-result-lifecycle && npm run mad-db:operation-lifecycle-blackbox",
     "mad-db:real-e2e": "node ./dist/scripts/mad-db-real-supabase-e2e.js --require-real",
     "mad-db:all": "npm run build && npm run mad-db:unit",
     "mad-db:release": "npm run mad-db:all && npm run mad-db:real-e2e",